last executing test programs: 12m27.374658797s ago: executing program 3 (id=1076): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket(0xa, 0x2, 0x88) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r2, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x2, 0x400, 0x0, 0xeb1, r2, 0x8000) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_stat_fops_per_vm_kvm_main(r4, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) setsockopt$auto_SO_MARK(r0, 0x0, 0x24, &(0x7f0000000040)='/dev/ram9\x00', 0xf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x17, r7, 0x7ffc) r8 = memfd_create$auto(0x0, 0xe) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r8, 0x3, 0x2, 0x4) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) mmap$auto(0x3, 0x400009, 0xdf, 0x1c, 0x8000000000000003, 0x8000) 12m26.390154672s ago: executing program 3 (id=1079): socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400000000000000df2503000000040008000400038012000100898771f1c19f17790485908288470000"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/cypress/new_id\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000080)='0[.[\x00', 0x1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12m26.161933282s ago: executing program 3 (id=1080): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x8400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x348, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x874}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa2, 0x1a, "d5f72ae537daf624634d084d1556d9fc41ce6ed59bc5fa4881263e4009bf39be7952113f1237e1c507008a0e4739ca69a8cae7e03b186b208444f3447bbfd1a1a9acef83c84613a894e257c4ffda0971da76e03a884589067f49b5d57db7b93e27c3b34201da1696eb9a230ed0affd04a53ae109e654aed30abf6dcc2a57ecbf2d72b5155d7b5521bfe822709f9cdb475ddffb2e76fa48d2d364fe8dbd44"}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1e}, @NL80211_ATTR_FRAME={0x274, 0x33, "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"}]}, 0x348}}, 0x10) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x4d00, 0x0) r5 = epoll_create$auto(0x107fb9) epoll_ctl$auto(r5, 0x1, r4, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r6, 0x0, 0x0) r7 = socket(0x1e, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r7, 0x10f, 0x82, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) 12m20.046551689s ago: executing program 3 (id=1095): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F`', 0x5e, 0x39) iopl$auto(0x97) 11.626660472s ago: executing program 4 (id=5453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="90d440003a5496a04952b77ab8453879bbf6b87b7ba350dcba9f26a3f44e93c0d4e64ae34e735e4cfd", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250300000004000800100003800c00148008000100", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f1779048590828847000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x2004c804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @rand_addr=0x64010101}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @local}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @broadcast}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socketpair$auto(0x9, 0x2, 0xb, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya7\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r4, 0x40087101, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) setreuid$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), 0xffffffffffffffff) 9.850985882s ago: executing program 4 (id=5459): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) 8.544834923s ago: executing program 4 (id=5464): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_rxqs\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x141880, 0xa8) read$auto(r0, 0x0, 0x1) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r1, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0xa0881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r5) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x14, r6, 0x800, 0x2070bd26, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20048841}, 0x240000c0) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 6.230988657s ago: executing program 0 (id=5468): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0180, 0x0) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x10, 0x2, 0xc) (async) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(0xffffffffffffffff, 0x80184132, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0x0, 0x2, 0x8000004, &(0x7f00000000c0)}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0xb0181, 0x0) (async) ioctl$auto_SNDRV_PCM_IOCTL_STATUS642(0xffffffffffffffff, 0x80984120, 0x0) (async) stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x2, 0x101, 0x4, 0x1, 0x20fd, 0x3ff, 0x800000401, 0x5f54, 0x0, 0xfffffffeffffffff}) (async) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) listmount$auto(&(0x7f0000000000)={0x4, @raw=0x7, 0xd8f, 0x200, 0x3}, 0x0, 0x2, 0x1) writev$auto(r2, &(0x7f00000003c0)={0x0, 0x8}, 0x3) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x88) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TCFLSH2(r3, 0x8910, 0x0) 5.178386621s ago: executing program 0 (id=5472): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = eventfd2$auto(0x6af3, 0x800) readv$auto(r0, 0x0, 0xe8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) r1 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) socket(0x18, 0x3, 0x2) accept$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) clone$auto(0x5, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13) sched_get_priority_min$auto(0x40) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x101, 0xa) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10084) 4.276557465s ago: executing program 0 (id=5474): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x2) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4000006, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(r0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x3, &(0x7f0000000180)='^^:#\x00', &(0x7f0000000880)="d48465f51eabd0e897043925ac4f66097db2c46ad252f64074126b7f819936ed3415ebfe95196a08187e0165a1a362ac6145387e2d48405e270bf90b6a87bef975659a379dd044d4cf8afd8933446491b3fb17022d479202e7d251b50728812ea69dfda595c52e6a3dc4d0fe80c6e884e36deb0af73ea9c154c7b00d60ac732acdeca4de8fc8bbf3a1faf6b4fb7a41440a6f9182f657e88d2279e27f1b0ffbea9a497d7df99c5acf9270ad7fe2f5da4daed865fb8ec8bbb63c94c82e2b3332bcfa1b7da3ee6531bfc442ed87d1f49f13625d3649578e464ea8baefda647644424928df5084e3c47d5bc7d11d3ddbaa8c60250fa1b17c7292f4f37df367ad9774191742151eac301525160c62e5a64079ffd48f587d2053ae55d5d5960fb7e61c0b105c77552b66b438beb3cc58fefabd89cf6ac982e611d949deed9aef197e8fda62ed091ef3da7f052cf5e0413a22b3261cbf0aecc4bb220f11e905e4735db650b556aaf7482821af22816a70964e5a0a032cf1ac66ce499d7d5833609752fcdee78c3d1b454c04bb929f5af30db4935df4d3a1632fd0136fc6f46d2d347205dc7dc9d63375bfaa05956dec60ec078e251f9e1fbce493c2081101b001d7857a9fae460708a2ee01b75d66db22b7147e96de37de7e0df46e0eb3cce44f3dfc08f056f1bf89a47f9649eb27d5b31f8bfe55e9277711132e0e6ed89519bf9bf05cd243c135441e05a7d8ca01383b3febece20a3b42fb21b68c9eebcde3efe6c14a1d65c75ab58b8835b3a805b0e9a8b191e5dec54e993f690d10acabc42719717554122e8c83e7cac7643938a0121ddd27ac733e64531d46f88457ff78ab09f3f6388c12deb6bcad5326483696554b7cdb68142029fcee889d341aa10304a684826ff602c20a166fe7c79fe2fad6c244b4411666b9855ba3730fb59e09e1b10729f9f72c7171a7039f9e6c5027b292c52601f47ff61ec578a67d564a7514e11bad2b23c533e5eb4ed086d9108276ea5b68e78ab83d46b26343c9676bc68896e1e16a3abdc6a7390196680467c85e9181067882d8e7167232a20f2b6b43e4ae0a2647d36720136be3c17e1b58770e9ae89e34383e4ffd00d4413ca1f82d6b6dfce50760ae29a72de17acf8c729fd78efa24a754af1ee9fcd931efa3826a262debfabac52f4a325dbcc5d5e1c9e99fd2a5d29a63b4df09f57abebae12da04ea991f63fef885c1183326c0f91b9e51eeb83f2cac7e48fff0a6b0328fbdf464d3c6787ebc58b755463a3c15be7e7fa01fe630d52dabf85a91cf0b8c5b439d21355521f162e1f84ad60dba99f0596e04303652d46b90218362dc913b08872349b0f4815dc579e773e46e627c8fec1bb0c633b25b15814719ab434ec4edf0c7019c9e6395074c8d48393b61fd668c15ed33c2a3fd63edc20f6774d705d5c7295fcd1975e8441590b5dd61c37377c17cc30eb3c3046e5f32305a72debd27fcb594e9314884d7a3f47f2ec028c9fa27c1ae480eb92c43e3e2c379c9bef2e9c70c2dcd497eb7a991338c26992221d1778358ab12b41e4e23c405e606b2b9e6afa8984902e78155b98f9fe0e9d5289bb1a68e0399574017a31847ec710d158dc74a8cce036a0589222991a873f1eac2dacc8efffcd4d66b11325b4bd70b36d07ab0f137373b8208066436c73e354f2fe554beff07dfe92549373a2f45860019f7d41e937fa9db95897b9d5e480f05be71ec87f17eab12afc809b66c7e41b426a02c56190e6ab1bb31a1e88099bfb8b30dae3335e7d2750b72e4e302706c5d47572a210da66233702b04ec7f917ecddad842428c2f89852043877d1d57c998e82f22cad4b9967530b19d80e5377b4c5e2014243aafcfc1206b886f9562fcbf30a6805b0c56256cd8105e566383303f49665cf545ddb0f6d53812aaaf40ca14e885a5ce494d873144b0250ac4121ea46f6e109246d2e63b054ab96f9d350d9f482e985d5dc1e9dd4afa3d9b16042e05dcb7b4c37c704def507b00c95f4b92fc12f97d2f5daf9881295fb46837083469537f04be1b9450e1bd5606f38e6329e35209ea3f581e7bced1bb1a4f7d46067f1bb859c2d6c29c5659ee796c341e7a8eb3a2d6c04e79fd676b572d5fe09883f02296503c4c59d3885da38c43b78c261b0c503ee39857d9356703bdbae0cd0a6cb6a55b6a67508addc391be67b910dc87450e21f3471d8d4f0f17b76beb8fd45984f3dfe90e9704ac0687cb38d4240c594d2531b0b29e44d71dbda3b19af750633b5693c42db053895a9a2fb5db4a99160662c61a1ebbc5f51c75fde00c72c431e66558a4820c41e58076f07f7da2df469124f309d39f57cddf09b9d82fb5fef7b719dcd06c16fe2db12dcdb764c50717cce8d5720ceb27f78094073762817d6463a642183211bde6a4fd659a7ef9b21b190c174db10315b69b4ce5e7ed639bb5a4f887fdc8bf6e8361f9f306c07a6b8436663517c640d82578837021e026093d697021d6bd23406888adb26936fbdf646ae387877387dbeb9eb1ea5371eccb55f0510f2dfb68310e8e9e3ddcf076cd14648ac3eeda012c20574f2f1cafc8168b0921861371f2202d1708ce13ea2d33fb09b159f8e76948cfedb8705bd293ecbf66eb6867a89513404a0290b6220754a7ba5577917a9fe3c3b45f869f575a0863fe58b542499830e63893e30b47d61bac6109302d6e288182971e07e5b6f8ef2d66b5593db9a360882967694f3b2c653fae4764e9368173c64e0f84213aa504407e19ee2b5fbde20d3f934ea6882c9665fa19749b65c94302a6d9f839bc8d9e217939ae5e20a73e1af154ac832cfaf2d3d43d55e5cfb28ca97daf95090aee80483bfb29b19814202890794cdf6d73122c26e6af8f7655a469c84d15e9716b6532d36fa1a31bc469994195b568b69bc02d5fea80674c672712b9a8edab2306f5e8ccbe4daaa17657760ed0ab632b1a56da3defe1c48d7f699b844468bebc7e2d669159fda642caf1967379fc27d808aee91f95def0bf71da7a4407bd71733c640b5d05bfeee1f56db76572b73fb023d14d62105c0c5fc6e7400dffffde8b2c2f909040e23ec462d4880a6256ec19c3523c5298760bdbfe8a7e45dd2904469b8fa086321b92998a0ade606dc55f6bc3bb1ab344340cd715b2fe732d835b294c6e8ccb42bdf697b7aed389975965dc8bd42f567c4371ed88751d14bb2cdc391be2b9eda10db1fcbde04dc73b5709de01f64d21116d36acb00ba0cca7a0bf50eae785c2790ee1a1343c59672de784d333767e3efabd62b6218b04d6278d92dc52517515d7d85916aafa891cacafae259e9b3c4f01d613fb899bcff98ef29b992457c05a6fb6aee7ddd7e24936ad9fba8bd2884a18e1612e1ea680585dcd7e04a35e9f3a2ec3ca58f080591881e4bdf84040d89620f499e00e25c506949f6707d6beda7ee833ce0e8fe40e48dc03e9fbcf173951fa39c9a80d32b2307abe397ff682b927bb001ea0ef4ec470d6835b0bab334a05fdc386328d5dcf2de70d1ca96437a96378867da5180beb826638db2134e8cf95fb702c2f194a35f1918d105ecbb93ae4afa9fd254e009e848e0a67f8ae4b9101529a343370843e5d5b6c81aed25274671f3cbcf48ecd4b440b4e38dbf740d19f370464aaf436d3335f6794127164ffb7dd48de19f44c7c5982baaa8dcf3625a27bcd981ba3547828a1b5ba8ca5d6d72778b36e281ba23c49465e601ebb408ea6f9ff2cf49c37902f5f202f0b1fbeb5f7fbbbfd3597a7f8260dc68419d4c0ae89ba86103180133a01f63d07c4ee291d96d3cba60047842495b1f7ca815ea0ecba60acc14d681b7842b18ac0581925a8934fa07c8499a3a62c3c9286321edf925ef6bbbf907b6992dc3e5806877fa6805fb5dca58b9034b341d526cd408ab1a9b9bf74e6449c5809db8234c3f750d58900783a349ef3a144a8587d96d3b0f80bd35abb85fbafcc566bad8240f3884ec1c31cf523ce4e4ef49c12bac85559fd05c8ab1c13c2a78d3068c75667753a841c245d3dac2c49c7c07a8cc5342fe6a0bb6bfb5f36668f015137866ef3c6708923d6a03dba55fbe11bb37fab83bc82f2f7e884bf602e33cc7ed3f9f5bf4af63112f7a5db906130e59ece16d3f362719dfda0b55e622eb09c8e1fa3a092d66b49e6865213accb2c192fe6b1945296501a781f6cf7b72fac177db3884d80eed91f0b5c710f949f155a64aef041454c2aa17fc174a0ce8b3b2a0bf3f9aaa73980be09b112c104b010d48224b0fc4056c8583ca1445fccb3a1653b57d14c3e93ff652081fd8d7366389aa0d5ef6c30831e9a27834a41d241c1a5e1cf5681fd8d566a1fc6d3695c754a744d2cfef89dec36c244cf96a327a11c1d6cdba93f643c9d03507e4f28b12bce831f9691a287ac5e0a1a1794795cc5668fc95207ad240fd911856b15f87484772d95df31fe579212119a7660e4713ada2a3e7710015a661f076a072531b3feeb7f107a2222c1b69bd7c04a0c1a8684981418fe25aae664c77145daf98378567b3cf610da5e3e521c90fc5243fa2f401fa431d19c6c21086d3731f0d2db1fd2d1d850b411e85c4c3f57c5f54bae0420c6b589c3cf2f4c550ad0a96b7d71d66633234009ba7db48bfa3f37c43732f294c35ad67851c8b12e8fe5ef107cfa501437d5fafd5f9bcd8d34ec2f913ebedaeb81a0ed5260afc459b8b72d6723b6d67be567d22e61ecb40c6cf8c916729309c7deed407b8505701d92c7120aac4c2ec7e5df5f4202667feefe36cd1ff3356d4d83c86e91db5599e871d71a9241d9084066bb2811cfae80d4f7e4f4e0169bf42450cd89336182f1efe0d3d4a76b94a2cf89dec65121e866a45314c0052349045b7c2be7d7d099980c4aa7fc2d77a846c05c589ea5b369cacd1582dd412a3fe9f767cc648c7fce24aeeb30679c800e502b313b57b18d2028b40b652fb6a0430953af40bc5aa9d133427d425f7bd0ec0f350665739097c281cde2f8815ec9efa086f2b142f3ba4d542fd5d0b599e7d3fe2eade331881ca46f1148f7f54c083419fc2ba589833ae08aa6ac40489090d34de045e65feda3a5fbfefb28889207f2421195f16bcbc9091634ca76a9ebd787431aac61020167c55c4865df78665a68ffd02d2137308e310a7f442ec8baad769ba5e834ae4e0e0be8a872996a54e4142ac9f6587a8e93bd2bd74f17abd85973013e989dea883bff6f28a235a37b5a9335cedcf6aa7f808624f3a7b3931f2dd474c2ee9bc2797a6835f61664bf9096d46dad4015aa9652e769a3ee9aede349aeb451150dab967ad76036b085a6d880f1493a556fa277c2d78637bb657c44f86431f4c2bfcade8d7b87cf1a4d9c5b86677097592f53a94b8e37493f38c37ae232461bc3f8d22d51e8af60b0c233099407240dc2efb4ddf44dbcdc487af8d8272816ebd48c69ab6b872cc9fe6245843ea4f414a5cfba2f0cfffaf6df94840603ee587544e5fb16398d951063f23ad11eda1c066572d953ca28f3dc2e44efe550ba7d37b6281e86cc5bce3f5b63bff76988622d46c5970eedd255916f9ff08e0bca901031c876dc7b47c998c0082e2e6b534ae02bd9196f8dbc0d01ffc4404fb7795b1b9e3c48bce5f065132a74d396449b11f89b4d2d9ddf1440a7dd20f6f179af24d46878277a34d3bc6188e37b048f3dc3152eae310d296cb7511a952d126d23b0c3092bc0c450297bd95c8b6a9f9dfcbfbe10aa979b682587d267166b13f3cd27ccffe7d51713065b4cdc1c89fdaadc39bdd82", 0x0) msgsnd$auto(0x0, 0x0, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x208000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) bpf$auto(0x7, &(0x7f00000001c0)=@info={r1, 0x9, 0x8}, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000001080)=0xffffffff) fcntl$auto(r2, 0x5, r3) 4.114418245s ago: executing program 4 (id=5476): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) capget$auto(&(0x7f0000000140)={0x7fff, r0}, &(0x7f0000000180)={0xe6, 0xe, 0xffff}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x100000, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x7ffffffffffffffd) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x560c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r3) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x800, 0xeb1, 0xfffffffffffffffa, 0xe77) pread64$auto(0xffffffffffffffff, &(0x7f0000000080)='bond0\x00', 0x485, 0x2) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRESHEX=r5], 0xd4}}, 0x495) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) 3.216885673s ago: executing program 0 (id=5478): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(r0, 0x4028af11, r0) 2.857342962s ago: executing program 1 (id=5480): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) write$auto(0x3, 0x0, 0x100082) 2.743593831s ago: executing program 2 (id=5481): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38aa7c56b416d94066f8a4c6f1fe1fc48c4eda755adb52ef60d249a07bac8e7c2e800ac1c7a57e52aff48d219746d31bab3c429e01c4bbd5d46e9a15af19b2f263b7ae60e60052f89a6d0e74e02d27ad64474f19abfb467bfa835e7a9e89f4792bb33bd0eb478a7521ad9728ce1623a4f32aae2f7e7cf41acf10d79d7e2c0e36ba780fa9a7299d1355bcde4c630cb0a0e9e4e2257330751aba40badc2784cd46e4fab142aee3346248010f83527ab291667f9ccbed3394c7799b5764bb29b394c"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000580)="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", 0xfdef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0xd5) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r2, 0x7ff, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card2\x00', 0x20300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x8, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8000000, 0x7, 0x10000000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x800000000000, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0xa, 0x3, 0x3b) 2.635427123s ago: executing program 0 (id=5482): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer2\x00', 0x40000, 0x0) socket(0x2, 0x1, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) ftruncate$auto(0x3, 0x400180200000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x11, 0x800, 0x0) 2.634236714s ago: executing program 1 (id=5483): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r1, 0x92106411, 0xffffffffffffffff) landlock_restrict_self$auto(r0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r2, 0xab04, 0xffffffffffffffff) 2.418183351s ago: executing program 1 (id=5484): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = eventfd2$auto(0x6af3, 0x800) readv$auto(r0, 0x0, 0xe8) mmap$auto(0x1, 0xe983, 0x2, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0xfffffffe, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xd, 0xeb1, 0x6, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='.\x00', 0x100, 0x161) getdents64$auto(0x0, 0x0, 0x18) getdents$auto(0x0, 0x0, 0x700) socket(0x18, 0x3, 0x2) accept$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(r1, 0x26, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13) sched_get_priority_min$auto(0x40) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x40201, 0x0) 2.059335475s ago: executing program 0 (id=5485): openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x48840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x8000000100000000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="030225bd7000ffdbdf25030000000800040000000000080001000100000008000200cd0d0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rxrpc/conns\x00', 0x80700, 0x0) pread64$auto(r4, 0x0, 0x4, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x208002, 0x20) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x4a0483, 0x0) 1.742520311s ago: executing program 1 (id=5486): io_setup$auto(0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/notify_on_release\x00', 0x101042, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0x11, 0x1, 0x300) r1 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0xa001, 0x0) mmap$auto(0x0, 0xa0009, 0xdf, 0xddb7, r1, 0x8003) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000080)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) close_range$auto(r2, 0xfffffffffffff000, 0x4000000000002) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/random/urandom_min_reseed_secs\x00', 0x90e03, 0x0) r5 = socket(0x18, 0x80000, 0x2) sendfile$auto(r5, r4, 0x0, 0x7ffff000) ioctl$auto(r3, 0x40104d01, r3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/030/001\x00', 0x1b7680, 0x0) mmap$auto(0x0, 0x10, 0x2, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) mmap$auto(0x0, 0x20009, 0x4000000002df, 0xeb1, 0x401, 0xf800000000000000) flistxattr$auto(0xffffffffffffffff, &(0x7f0000000280)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x8001) prctl$auto(0x1000000003b, 0x2, 0x0, 0x7fffffff, 0x2a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) close_range$auto(0x2, 0x8, 0x0) 1.534276988s ago: executing program 2 (id=5487): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r0, 0xc1004110, &(0x7f0000000100)={0x38a, [0xc, 0x4, 0x7d], [{0x80000001, 0x400, 0x0, 0x0, 0x1}, {0x3ff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1, 0x0, 0x1}, {0x3ff, 0x3, 0x1, 0x1, 0x1}, {0x1b2, 0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x71c8717a, 0x38c8, 0x1, 0x0, 0x1}, {0x45, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x34, 0x7f, 0x0, 0x1}, {0x6, 0x4, 0x1}], 0x9, 0x2, 0xffffffc0, 0x8000, 0x7fff, 0xfffffffc, 0x3, "f8b6e453edf593cff92867c194dfa7ea77769d6eb62b13f03f12710d432e0654ed23caa4249660993299d8d135b37176c1e0c560dad19a2c99017cde053077f3"}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(0xffffffffffffffff, 0x40184150, &(0x7f0000002480)={0x4, &(0x7f0000002400)="4443ff801723459743c5de222dc67e813e07df992ded6a6997799876cbb8a101e812c6892af929a6f7e4dad8ed7930710a1299eafd6473d0dea51c2d2ab90c86e0add47065fb51ed21de", 0x100}) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), r4) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000002100)={{0x2, 0xffffffffffffffff, 0x0, 0x2, 0x8, 0x4, 0x9}, 0x6, 0xe, 0x8, 0x3, @inferred, @inferred, 0xfffd, 0x0, &(0x7f00000010c0)="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", &(0x7f00000020c0)="ae78fba71d6e44f6d00e3700e1c9"}) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000002180)={0x7, 0xe8, 0x10000, 0x1, 0x6, 0x0}) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000023c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f00000021c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="000326bd7000fcdbdff5aa5d2505000000050012000000000005001400010000000c001600030000000000000005000d00f9000000050005000500000008000c000300000050011e800c00310005000000000000090800fe00", @ANYRES32=r6, @ANYRES16=0x0, @ANYRES32=r7, @ANYBLOB="37340e41a388b9f16cee48338a3d67f9ff25b93c6e070d89bac2845acb8c986d87e581aa782f55f016c179f008009200", @ANYRES32=r4, @ANYBLOB="f80094006993ed173f41bc5ca8eb26b85e1b89b6364d3feafa2bcf85470f684cac2db6f039b257cd384d1fd53979e40f6435832f8deaf05648eea3488e99ece4af9641e8cecf559823bfe6eb01936fddcdaf25f2eee5fe012cbec73fcb8286c83759ed8632456de94b44102a1a4dd5a45d74a14da961836ad190bed3e4f5aceb"], 0x1a0}, 0x1, 0x0, 0x0, 0x88001}, 0x4010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r8 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r8, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x802020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.513798953s ago: executing program 1 (id=5488): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x2c, 0xf3, 0xb0, @raw=0xfffff02c}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4000002, 0x1, 0x4cf09e9c, 0x3, 0x0) clock_settime$auto(0xfffffffe, 0x0) socket(0x22, 0x1, 0x100) socket(0x28, 0x1, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x277, 0x400, 0xffffffffffffffff}]}) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) r4 = eventfd$auto(0x80) readv$auto(r4, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r4, 0x0, 0xcc9c) write$auto(r4, &(0x7f0000000400)='\'\x00', 0x8000000800000001) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 483.69252ms ago: executing program 2 (id=5489): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x2100, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14f50104", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf257e00001b"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 342.951192ms ago: executing program 2 (id=5490): r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$auto_bm_register_operations_binfmt_misc(r0, &(0x7f00000005c0)="c29b593fe0d228cdd7e3e361d276e3707abb09b7444f7a18ebcb829902d07d36564cc91ab514150ba0788ba4974fd5ef0bfc077b444f16f8c24d8c", 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) 228.208896ms ago: executing program 4 (id=5491): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) r1 = socket(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty0/active\x00', 0x103280, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty0/active\x00', 0x103280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r2, r1, 0x400) socket(0xa, 0x1, 0x0) (async) socket(0xa, 0x1, 0x0) r4 = socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) (async) listen$auto(0x3, 0x0) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000200)={@siginfo_0_0={0xfff, 0x9, 0x2, @_sigpoll={0x6, r4}}}, 0x10, &(0x7f0000000340)={{0x2000000000, 0x1}, {0x4, 0x1}, 0xfffffffffffffff8, 0x5, 0x9eb, 0x2, 0x401, 0xa8, 0x0, 0x5e, 0x3, 0x40, 0x9, 0x80000000, 0x7fffffffffffffff, 0x2}) (async) r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000200)={@siginfo_0_0={0xfff, 0x9, 0x2, @_sigpoll={0x6, r4}}}, 0x10, &(0x7f0000000340)={{0x2000000000, 0x1}, {0x4, 0x1}, 0xfffffffffffffff8, 0x5, 0x9eb, 0x2, 0x401, 0xa8, 0x0, 0x5e, 0x3, 0x40, 0x9, 0x80000000, 0x7fffffffffffffff, 0x2}) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250100000008000a00020000000500090006000000b60001803a002c809b6f33b4bb546943a45f08002100", @ANYRES32, @ANYBLOB="04000e8010001a002f6465762f617564696f310008005100", @ANYRES32=0x0, @ANYBLOB='\b\x00d\x00', @ANYRES32=r5, @ANYBLOB="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"], 0xdc}}, 0x20000010) (async) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250100000008000a00020000000500090006000000b60001803a002c809b6f33b4bb546943a45f08002100", @ANYRES32, @ANYBLOB="04000e8010001a002f6465762f617564696f310008005100", @ANYRES32=0x0, @ANYBLOB='\b\x00d\x00', @ANYRES32=r5, @ANYBLOB="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"], 0xdc}}, 0x20000010) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x81) 120.356662ms ago: executing program 2 (id=5492): fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0E:\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x3f10, 0x80000000) r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x444080, 0x0) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000080)="bd3d990873e74cf608f31afc872a03d0a28134e3b17521b95ce8ad995870b5ce70a1d1f3b3f23fa9ec40221285226db9120352ebb598084688620d9925b94e812185c29881115a797e10e2ee7595dc493ea40dd0ab574094917ec3c10023cc3d3bee57dd59c2c6a3d63c93456466857e4640326ccaff44de4bb1c8c534d8a69eba621b099e3bae54dc68a81ae3ef04de84", 0x11, &(0x7f0000000200)={&(0x7f0000000180)="5e0f39c6fe596c518bc7c9a3fde3eac221a35796e39d3e6a6478478d93114f68609c665749c2a836712d86373cdc0e87fd850672b713525ef62bdb26db4f348661b390a91c8c0cca8c97f05fc6002e3a3a7b", 0x2}, 0x0, &(0x7f0000000240)="db2faa75fada4bc30b412d5814d50fe84bb1169e2a1c6e52eca6e24c5c2d59ca66bd2a9507278296ef94e37370a16f544867c86f9dccc6176bb7aef7f3db29e7a0fde96cb1e79753b70189d50d54dbf1cce7f6c6390f52c5e9f5f6ac6f8583306f9d420e665edea0e6eb2e1565ae05523a610b0935f64a12cad5e95172e70970a02cda129054eb0efcc3bc18d60252e0cd817f98989af39547d8d61a4bc2b9c6a1c17ee804185feffd3610733ac84036478f77ff4ea01dbe79042128", 0x1f, 0x61d}, 0x2}, 0xe, 0xc) r1 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000840)={&(0x7f0000000800), 0xc982}, 0x7f) pwrite64$auto(0xc8, &(0x7f00000004c0)='\vX\xb5n\x91p\xe4\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x8c\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xb5\xd3\x01\x81l\xf3m\xe2\xb7\xccH.0\x8f\xb9\xb9,l\v\x8f\xc7w^_\xbd\xf51\xc6\x87\xba\xa3\xed\xe6\xf0\xe9\xfc\xe0\xe0\xe5OW\a\x1bh\x11Q_\x17\xce\xb4\xa2\x17*\xc2\xdc7\x17G\xa85\\\xe8\xefj\xcfh\x88\xda(\xc0\xdc\xaf\x19\x1c\x1d\x7f\x92\x93\xc9g{\x9d\x96&\x04\xe4+B\xdf\xa8\xcc\xfa\xca&\f\x9fI\x0f\x98\x7f\xa8\xf5\xd9\xac\'\x8cN\xd0n\xa7$\xac\x83X\x8e\xcf\x8c\xf7_G\xdf\f\x15\xad\xf6p#\x12\x8e#\x9b\x1f\xd8\xbaGy\x1e;\xe8\xbb\xf3\x92\xca\xa7\xdd\x9a\xbd\xd0\xc1\xbe\x91\x98LFK\x8f_R\x18\xcc\xc6\xcf%\xb3Q\\Q\x1ccS\x80v\xca\xecT\xac\"6\xee\xab\xf7K#14\x90\xc0u\xe0tOF\xf3\x1c\xda\xae\x9a\x86x\x82\xa3V2..\xeb\'&y\x8e\xa6\xee\xfdTxF\x1cB\x1eM\xda\x18\xacu\xf6C\xd2\"\xb3l\xfb\xb2\x1fK\x14\xda\xab2:\xb4\xb0-\xa8\xf7P\x920\x9e\xc8\x11\xd3t\xd7\xe2t\xc2\xe2\xeeH{\x8b\xe5\x8d1\x13#\xc08*[\xc6\xa1}\xf8*\xbe\xb2e5\x82\xf8\xfd\xea\x15bl\x96\xd7\xfcI\xbbtQ\x03+\xcb6\x9e\xfc\xd4\xbew\x87\xc7\x9ci5\xfc\xdepu\xe6\xf1\xf4bs\xbb\xd2\x81\x94f\x90\x80\b\xf24d\xc7\x96\xf6\x8d\xb5;\xdb\x8b\x1bt\xec\xe1\xc9F8\xbca\x10s\xb0\xf6t\xec\x83\xccpu8\x1f>`', 0x5e, 0x39) iopl$auto(0x97) 93.669107ms ago: executing program 1 (id=5493): r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci5/force_devcoredump\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/252, 0xfc) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x1, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e1ca6300ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x13, r0, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0x2c, 0x3, 0x0) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20005, 0xdb, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x5) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), r3) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D0p\x00', 0x400040, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, 0x0) 0s ago: executing program 2 (id=5494): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup$auto(0xffffffffffffffff) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) kernel console output (not intermixed with test programs): 1878] should_fail_ex+0x512/0x640 [ 956.343948][T21878] ? fs_reclaim_acquire+0xae/0x150 [ 956.343984][T21878] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 956.344019][T21878] should_failslab+0xc2/0x120 [ 956.344051][T21878] __kmalloc_noprof+0xd2/0x510 [ 956.344090][T21878] tomoyo_realpath_from_path+0xc2/0x6e0 [ 956.344135][T21878] tomoyo_check_open_permission+0x2ab/0x3c0 [ 956.344169][T21878] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 956.344237][T21878] ? do_raw_spin_lock+0x12c/0x2b0 [ 956.344282][T21878] tomoyo_file_open+0x6b/0x90 [ 956.344306][T21878] security_file_open+0x84/0x1e0 [ 956.344338][T21878] do_dentry_open+0x596/0x1530 [ 956.344378][T21878] vfs_open+0x82/0x3f0 [ 956.344416][T21878] path_openat+0x1de4/0x2cb0 [ 956.344456][T21878] ? __pfx_path_openat+0x10/0x10 [ 956.344495][T21878] do_filp_open+0x20b/0x470 [ 956.344525][T21878] ? __pfx_do_filp_open+0x10/0x10 [ 956.344580][T21878] ? alloc_fd+0x471/0x7d0 [ 956.344617][T21878] do_sys_openat2+0x11b/0x1d0 [ 956.344650][T21878] ? __pfx_do_sys_openat2+0x10/0x10 [ 956.344697][T21878] __x64_sys_openat+0x174/0x210 [ 956.344731][T21878] ? __pfx___x64_sys_openat+0x10/0x10 [ 956.344777][T21878] do_syscall_64+0xcd/0x490 [ 956.344814][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.344837][T21878] RIP: 0033:0x7f5c7718eba9 [ 956.344857][T21878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.344879][T21878] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 956.344906][T21878] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 956.344920][T21878] RDX: 0000000000000880 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 956.344934][T21878] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 956.344946][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.344958][T21878] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 956.344985][T21878] [ 956.348549][T21878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 957.014653][T21891] FAULT_INJECTION: forcing a failure. [ 957.014653][T21891] name failslab, interval 1, probability 0, space 0, times 0 [ 957.057381][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.1.4582 Tainted: G U syzkaller #0 PREEMPT(full) [ 957.057423][T21891] Tainted: [U]=USER [ 957.057431][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 957.057445][T21891] Call Trace: [ 957.057454][T21891] [ 957.057465][T21891] dump_stack_lvl+0x16c/0x1f0 [ 957.057505][T21891] should_fail_ex+0x512/0x640 [ 957.057541][T21891] ? fs_reclaim_acquire+0xae/0x150 [ 957.057579][T21891] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 957.057642][T21891] should_failslab+0xc2/0x120 [ 957.057674][T21891] __kmalloc_noprof+0xd2/0x510 [ 957.057712][T21891] tomoyo_realpath_from_path+0xc2/0x6e0 [ 957.057757][T21891] tomoyo_check_open_permission+0x2ab/0x3c0 [ 957.057789][T21891] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 957.057856][T21891] ? do_raw_spin_lock+0x12c/0x2b0 [ 957.057902][T21891] tomoyo_file_open+0x6b/0x90 [ 957.057929][T21891] security_file_open+0x84/0x1e0 [ 957.057963][T21891] do_dentry_open+0x596/0x1530 [ 957.058004][T21891] vfs_open+0x82/0x3f0 [ 957.058043][T21891] path_openat+0x1de4/0x2cb0 [ 957.058083][T21891] ? __pfx_path_openat+0x10/0x10 [ 957.058121][T21891] do_filp_open+0x20b/0x470 [ 957.058150][T21891] ? __pfx_do_filp_open+0x10/0x10 [ 957.058202][T21891] ? alloc_fd+0x471/0x7d0 [ 957.058242][T21891] do_sys_openat2+0x11b/0x1d0 [ 957.058277][T21891] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.058327][T21891] __x64_sys_openat+0x174/0x210 [ 957.058363][T21891] ? __pfx___x64_sys_openat+0x10/0x10 [ 957.058413][T21891] do_syscall_64+0xcd/0x490 [ 957.058451][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.058477][T21891] RIP: 0033:0x7f900818eba9 [ 957.058497][T21891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.058522][T21891] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 957.058546][T21891] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 957.058564][T21891] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 957.058580][T21891] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 957.058599][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.058612][T21891] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 957.058647][T21891] [ 957.058671][T21891] ERROR: Out of memory at tomoyo_realpath_from_path. [ 957.415398][T21894] could not allocate digest TFM handle [ 957.422047][T21885] kexec: Could not allocate control_code_buffer [ 958.268722][T21930] FAULT_INJECTION: forcing a failure. [ 958.268722][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 958.289449][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.1.4587 Tainted: G U syzkaller #0 PREEMPT(full) [ 958.289475][T21930] Tainted: [U]=USER [ 958.289487][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 958.289496][T21930] Call Trace: [ 958.289503][T21930] [ 958.289509][T21930] dump_stack_lvl+0x16c/0x1f0 [ 958.289537][T21930] should_fail_ex+0x512/0x640 [ 958.289558][T21930] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 958.289578][T21930] should_failslab+0xc2/0x120 [ 958.289598][T21930] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 958.289614][T21930] ? __proc_create+0xc3/0x8e0 [ 958.289635][T21930] ? __proc_create+0x2ce/0x8e0 [ 958.289658][T21930] __proc_create+0x2ce/0x8e0 [ 958.289679][T21930] ? __pfx___proc_create+0x10/0x10 [ 958.289703][T21930] ? _raw_write_unlock+0x28/0x50 [ 958.289726][T21930] proc_create_reg+0x7d/0x180 [ 958.289751][T21930] proc_create_net_data+0x8e/0x1c0 [ 958.289773][T21930] ? __pfx_proc_create_net_data+0x10/0x10 [ 958.289794][T21930] ? __pfx_uevent_net_rcv+0x10/0x10 [ 958.289813][T21930] ? __pfx_dev_proc_net_init+0x10/0x10 [ 958.289833][T21930] dev_proc_net_init+0x5a/0x220 [ 958.289853][T21930] ops_init+0x1df/0x5f0 [ 958.289877][T21930] setup_net+0x10f/0x380 [ 958.289889][T21930] ? lockdep_init_map_type+0x5c/0x280 [ 958.289910][T21930] ? __pfx_setup_net+0x10/0x10 [ 958.289924][T21930] ? debug_mutex_init+0x37/0x70 [ 958.289940][T21930] copy_net_ns+0x2a6/0x5f0 [ 958.289957][T21930] create_new_namespaces+0x3ea/0xa90 [ 958.289978][T21930] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 958.289997][T21930] ksys_unshare+0x45b/0xa40 [ 958.290016][T21930] ? __pfx_ksys_unshare+0x10/0x10 [ 958.290036][T21930] ? xfd_validate_state+0x61/0x180 [ 958.290063][T21930] __x64_sys_unshare+0x31/0x40 [ 958.290081][T21930] do_syscall_64+0xcd/0x490 [ 958.290103][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.290118][T21930] RIP: 0033:0x7f900818eba9 [ 958.290131][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.290145][T21930] RSP: 002b:00007f9008fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 958.290160][T21930] RAX: ffffffffffffffda RBX: 00007f90083d6090 RCX: 00007f900818eba9 [ 958.290170][T21930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 958.290178][T21930] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 958.290187][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.290195][T21930] R13: 00007f90083d6128 R14: 00007f90083d6090 R15: 00007ffd81246ed8 [ 958.290214][T21930] [ 959.130792][ T30] audit: type=1326 audit(4294968419.920:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.0.4590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d018eba9 code=0x0 [ 959.192158][T21948] FAULT_INJECTION: forcing a failure. [ 959.192158][T21948] name failslab, interval 1, probability 0, space 0, times 0 [ 959.217810][T21947] openvswitch: netlink: Key type 45 is out of range max 32 [ 959.288826][T21948] CPU: 0 UID: 0 PID: 21948 Comm: syz.0.4590 Tainted: G U syzkaller #0 PREEMPT(full) [ 959.288874][T21948] Tainted: [U]=USER [ 959.288884][T21948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.288901][T21948] Call Trace: [ 959.288911][T21948] [ 959.288922][T21948] dump_stack_lvl+0x16c/0x1f0 [ 959.288968][T21948] should_fail_ex+0x512/0x640 [ 959.289007][T21948] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 959.289044][T21948] should_failslab+0xc2/0x120 [ 959.289078][T21948] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 959.289108][T21948] ? debug_mutex_init+0x37/0x70 [ 959.289133][T21948] ? seq_open+0x55/0x170 [ 959.289174][T21948] seq_open+0x55/0x170 [ 959.289211][T21948] blk_mq_debugfs_open+0x106/0x1b0 [ 959.289256][T21948] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 959.289288][T21948] full_proxy_open_regular+0x1b9/0x360 [ 959.289319][T21948] do_dentry_open+0x97f/0x1530 [ 959.289360][T21948] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 959.289396][T21948] vfs_open+0x82/0x3f0 [ 959.289439][T21948] path_openat+0x1de4/0x2cb0 [ 959.289484][T21948] ? __pfx_path_openat+0x10/0x10 [ 959.289525][T21948] do_filp_open+0x20b/0x470 [ 959.289556][T21948] ? __pfx_do_filp_open+0x10/0x10 [ 959.289612][T21948] ? alloc_fd+0x471/0x7d0 [ 959.289650][T21948] do_sys_openat2+0x11b/0x1d0 [ 959.289689][T21948] ? __pfx_do_sys_openat2+0x10/0x10 [ 959.289746][T21948] __x64_sys_openat+0x174/0x210 [ 959.289786][T21948] ? __pfx___x64_sys_openat+0x10/0x10 [ 959.289839][T21948] do_syscall_64+0xcd/0x490 [ 959.289883][T21948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.289911][T21948] RIP: 0033:0x7fb8d018eba9 [ 959.289932][T21948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.289961][T21948] RSP: 002b:00007fb8d0f30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 959.289989][T21948] RAX: ffffffffffffffda RBX: 00007fb8d03d6090 RCX: 00007fb8d018eba9 [ 959.290007][T21948] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 959.290024][T21948] RBP: 00007fb8d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 959.290042][T21948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.290058][T21948] R13: 00007fb8d03d6128 R14: 00007fb8d03d6090 R15: 00007ffcb8d08098 [ 959.290096][T21948] [ 961.978519][T22020] netlink: 'syz.0.4601': attribute type 4 has an invalid length. [ 962.600869][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4607'. [ 963.169845][T22061] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 963.183856][T22061] random: crng reseeded on system resumption [ 963.709516][T22074] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 964.568320][T22088] program syz.4.4617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.224582][T22102] netlink: 346 bytes leftover after parsing attributes in process `syz.4.4619'. [ 965.378274][T22109] bridge0: port 3(veth0_to_bridge) entered blocking state [ 965.403680][T22109] bridge0: port 3(veth0_to_bridge) entered disabled state [ 965.411085][T22109] veth0_to_bridge: entered allmulticast mode [ 965.421063][T22109] veth0_to_bridge: entered promiscuous mode [ 965.452112][T22109] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 965.501707][T22109] bridge0: port 3(veth0_to_bridge) entered blocking state [ 965.508967][T22109] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 966.592596][T22129] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 966.664765][T22129] random: crng reseeded on system resumption [ 967.150250][T22139] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 969.637522][T22191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 969.708581][T22191] random: crng reseeded on system resumption [ 970.187606][T22201] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4638'. [ 973.307386][T22244] random: crng reseeded on system resumption [ 974.311269][T22257] FAULT_INJECTION: forcing a failure. [ 974.311269][T22257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 974.324274][T22257] CPU: 1 UID: 0 PID: 22257 Comm: syz.2.4646 Tainted: G U syzkaller #0 PREEMPT(full) [ 974.324300][T22257] Tainted: [U]=USER [ 974.324306][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 974.324315][T22257] Call Trace: [ 974.324320][T22257] [ 974.324327][T22257] dump_stack_lvl+0x16c/0x1f0 [ 974.324354][T22257] should_fail_ex+0x512/0x640 [ 974.324380][T22257] get_futex_key+0x1d0/0x1560 [ 974.324401][T22257] ? __pfx_get_futex_key+0x10/0x10 [ 974.324417][T22257] ? futex_private_hash_put+0x176/0x300 [ 974.324439][T22257] futex_wake+0xea/0x530 [ 974.324462][T22257] ? __pfx_futex_wake+0x10/0x10 [ 974.324486][T22257] ? ksys_write+0x190/0x250 [ 974.324506][T22257] do_futex+0x1e3/0x350 [ 974.324525][T22257] ? __pfx_do_futex+0x10/0x10 [ 974.324543][T22257] ? cap_task_prctl+0x2af/0xa80 [ 974.324562][T22257] __x64_sys_futex+0x1e0/0x4c0 [ 974.324582][T22257] ? __pfx___x64_sys_futex+0x10/0x10 [ 974.324609][T22257] ? __pfx___do_sys_prctl+0x10/0x10 [ 974.324639][T22257] do_syscall_64+0xcd/0x490 [ 974.324663][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.324683][T22257] RIP: 0033:0x7f9dda18eba9 [ 974.324703][T22257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.324735][T22257] RSP: 002b:00007f9ddafa00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 974.324761][T22257] RAX: ffffffffffffffda RBX: 00007f9dda3d5fa8 RCX: 00007f9dda18eba9 [ 974.324779][T22257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dda3d5fac [ 974.324790][T22257] RBP: 00007f9dda3d5fa0 R08: 00007f9ddafa1000 R09: 0000000000000000 [ 974.324799][T22257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 974.324809][T22257] R13: 00007f9dda3d6038 R14: 00007ffce5d5d0d0 R15: 00007ffce5d5d1b8 [ 974.324828][T22257] [ 975.540036][T22283] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.594431][T22283] random: crng reseeded on system resumption [ 976.768714][T22298] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 977.084620][T22313] blktrace: Concurrent blktraces are not allowed on nbd0 [ 978.240969][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 979.163791][T22342] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 979.196983][T22342] random: crng reseeded on system resumption [ 980.192370][T22366] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 982.210676][T22404] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 982.229677][T22409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 982.316023][T22409] random: crng reseeded on system resumption [ 982.932056][T22428] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4690'. [ 982.946098][T22431] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4690'. [ 984.146188][T22463] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 984.168830][T22463] random: crng reseeded on system resumption [ 985.301098][ T10] smpboot: CPU 1 is now offline [ 985.593775][T22506] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 986.540521][T22521] random: crng reseeded on system resumption [ 986.597682][T22509] FAULT_INJECTION: forcing a failure. [ 986.597682][T22509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.654196][T22509] CPU: 0 UID: 0 PID: 22509 Comm: syz.1.4713 Tainted: G U syzkaller #0 PREEMPT(full) [ 986.654219][T22509] Tainted: [U]=USER [ 986.654225][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 986.654234][T22509] Call Trace: [ 986.654240][T22509] [ 986.654251][T22509] dump_stack_lvl+0x16c/0x1f0 [ 986.654278][T22509] should_fail_ex+0x512/0x640 [ 986.654303][T22509] _copy_from_user+0x2e/0xd0 [ 986.654320][T22509] get_timespec64+0x8b/0x1b0 [ 986.654338][T22509] ? __pfx_get_timespec64+0x10/0x10 [ 986.654358][T22509] ? common_nsleep+0xa1/0xd0 [ 986.654376][T22509] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 986.654392][T22509] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 986.654411][T22509] do_syscall_64+0xcd/0x490 [ 986.654435][T22509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.654450][T22509] RIP: 0033:0x7f90081c1465 [ 986.654462][T22509] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 986.654476][T22509] RSP: 002b:00007ffd81246fd0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 986.654490][T22509] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f90081c1465 [ 986.654500][T22509] RDX: 00007ffd81247010 RSI: 0000000000000000 RDI: 0000000000000000 [ 986.654509][T22509] RBP: 00007f90083d7da0 R08: 0000000000000000 R09: 00007f9008fec000 [ 986.654518][T22509] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000f1a81 [ 986.654526][T22509] R13: 00007f90083d6090 R14: ffffffffffffffff R15: 00007ffd81247150 [ 986.654544][T22509] [ 986.896895][T22529] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 986.908871][T22529] random: crng reseeded on system resumption [ 986.965867][T22532] QAT: Invalid ioctl 1023 [ 988.515276][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.523528][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.151513][T22581] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 989.195210][T22581] random: crng reseeded on system resumption [ 989.449137][T22593] ubi0: attaching mtd0 [ 989.470893][T22593] ubi0: scanning is finished [ 989.502929][T22593] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 989.821407][T22593] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 990.299856][T22615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 990.402619][T22617] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 990.528979][T22618] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 991.329786][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4746'. [ 991.876416][T22647] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 991.934894][T22647] random: crng reseeded on system resumption [ 992.378332][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 992.434622][T22663] FAULT_INJECTION: forcing a failure. [ 992.434622][T22663] name failslab, interval 1, probability 0, space 0, times 0 [ 992.536530][T22663] CPU: 0 UID: 0 PID: 22663 Comm: syz.2.4752 Tainted: G U syzkaller #0 PREEMPT(full) [ 992.536556][T22663] Tainted: [U]=USER [ 992.536561][T22663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 992.536570][T22663] Call Trace: [ 992.536576][T22663] [ 992.536582][T22663] dump_stack_lvl+0x16c/0x1f0 [ 992.536607][T22663] should_fail_ex+0x512/0x640 [ 992.536629][T22663] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 992.536649][T22663] should_failslab+0xc2/0x120 [ 992.536668][T22663] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 992.536685][T22663] ? __alloc_skb+0x2b2/0x380 [ 992.536709][T22663] __alloc_skb+0x2b2/0x380 [ 992.536728][T22663] ? __pfx___alloc_skb+0x10/0x10 [ 992.536749][T22663] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 992.536771][T22663] ? __lock_acquire+0xb97/0x1ce0 [ 992.536792][T22663] netlink_alloc_large_skb+0x69/0x130 [ 992.536816][T22663] netlink_sendmsg+0x6a1/0xdd0 [ 992.536841][T22663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.536864][T22663] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 992.536883][T22663] ____sys_sendmsg+0xa95/0xc70 [ 992.536900][T22663] ? copy_msghdr_from_user+0x10a/0x160 [ 992.536921][T22663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 992.536945][T22663] ___sys_sendmsg+0x134/0x1d0 [ 992.536967][T22663] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.537009][T22663] __sys_sendmsg+0x16d/0x220 [ 992.537031][T22663] ? __pfx___sys_sendmsg+0x10/0x10 [ 992.537064][T22663] do_syscall_64+0xcd/0x490 [ 992.537087][T22663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.537102][T22663] RIP: 0033:0x7f9dda18eba9 [ 992.537114][T22663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.537128][T22663] RSP: 002b:00007f9ddaf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.537143][T22663] RAX: ffffffffffffffda RBX: 00007f9dda3d6090 RCX: 00007f9dda18eba9 [ 992.537153][T22663] RDX: 0000000000000810 RSI: 0000200000004380 RDI: 0000000000000007 [ 992.537161][T22663] RBP: 00007f9ddaf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 992.537170][T22663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.537179][T22663] R13: 00007f9dda3d6128 R14: 00007f9dda3d6090 R15: 00007ffce5d5d1b8 [ 992.537197][T22663] [ 992.763038][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.008055][T22710] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 994.087775][T22710] random: crng reseeded on system resumption [ 995.068223][T22731] Loading of unsigned module is rejected [ 995.993849][T22756] FAULT_INJECTION: forcing a failure. [ 995.993849][T22756] name failslab, interval 1, probability 0, space 0, times 0 [ 996.036964][T22756] CPU: 0 UID: 0 PID: 22756 Comm: syz.4.4769 Tainted: G U syzkaller #0 PREEMPT(full) [ 996.036998][T22756] Tainted: [U]=USER [ 996.037003][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.037013][T22756] Call Trace: [ 996.037018][T22756] [ 996.037025][T22756] dump_stack_lvl+0x16c/0x1f0 [ 996.037051][T22756] should_fail_ex+0x512/0x640 [ 996.037073][T22756] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 996.037093][T22756] should_failslab+0xc2/0x120 [ 996.037113][T22756] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 996.037130][T22756] ? __pmd_alloc+0xbf/0x930 [ 996.037153][T22756] __pmd_alloc+0xbf/0x930 [ 996.037178][T22756] ? find_held_lock+0x2b/0x80 [ 996.037195][T22756] __handle_mm_fault+0xa06/0x2a50 [ 996.037216][T22756] ? __pfx___handle_mm_fault+0x10/0x10 [ 996.037248][T22756] handle_mm_fault+0x589/0xd10 [ 996.037268][T22756] __get_user_pages+0x551/0x34a0 [ 996.037298][T22756] ? __pfx___get_user_pages+0x10/0x10 [ 996.037325][T22756] populate_vma_page_range+0x267/0x3f0 [ 996.037349][T22756] ? __pfx_populate_vma_page_range+0x10/0x10 [ 996.037370][T22756] ? __pfx_find_vma_intersection+0x10/0x10 [ 996.037391][T22756] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 996.037410][T22756] __mm_populate+0x1d8/0x380 [ 996.037433][T22756] ? __pfx___mm_populate+0x10/0x10 [ 996.037456][T22756] ? up_write+0x1b2/0x520 [ 996.037478][T22756] do_mlock+0x448/0x810 [ 996.037496][T22756] ? __pfx_do_mlock+0x10/0x10 [ 996.037511][T22756] ? __x64_sys_futex+0x1e0/0x4c0 [ 996.037528][T22756] ? __x64_sys_futex+0x1e9/0x4c0 [ 996.037547][T22756] ? fput+0x9b/0xd0 [ 996.037568][T22756] ? xfd_validate_state+0x61/0x180 [ 996.037588][T22756] ? __pfx_ksys_write+0x10/0x10 [ 996.037608][T22756] __x64_sys_mlock+0x59/0x80 [ 996.037625][T22756] do_syscall_64+0xcd/0x490 [ 996.037648][T22756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.037663][T22756] RIP: 0033:0x7f5c7718eba9 [ 996.037676][T22756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.037690][T22756] RSP: 002b:00007f5c753ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 996.037705][T22756] RAX: ffffffffffffffda RBX: 00007f5c773d5fa0 RCX: 00007f5c7718eba9 [ 996.037716][T22756] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 000000000000002a [ 996.037725][T22756] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 996.037734][T22756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.037742][T22756] R13: 00007f5c773d6038 R14: 00007f5c773d5fa0 R15: 00007fffdcd97548 [ 996.037762][T22756] [ 998.359897][T22790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 999.221885][T22817] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 999.300233][T22817] random: crng reseeded on system resumption [ 1000.321251][T22840] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1002.498412][T22892] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1002.543428][T22894] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1002.851958][T22900] FAULT_INJECTION: forcing a failure. [ 1002.851958][T22900] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.908727][T22900] CPU: 0 UID: 0 PID: 22900 Comm: syz.0.4796 Tainted: G U syzkaller #0 PREEMPT(full) [ 1002.908754][T22900] Tainted: [U]=USER [ 1002.908759][T22900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1002.908769][T22900] Call Trace: [ 1002.908775][T22900] [ 1002.908781][T22900] dump_stack_lvl+0x16c/0x1f0 [ 1002.908807][T22900] should_fail_ex+0x512/0x640 [ 1002.908830][T22900] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1002.908851][T22900] should_failslab+0xc2/0x120 [ 1002.908869][T22900] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1002.908886][T22900] ? find_held_lock+0x2b/0x80 [ 1002.908899][T22900] ? __alloc_skb+0x2b2/0x380 [ 1002.908922][T22900] __alloc_skb+0x2b2/0x380 [ 1002.908941][T22900] ? __pfx___alloc_skb+0x10/0x10 [ 1002.908964][T22900] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1002.908992][T22900] netlink_alloc_large_skb+0x69/0x130 [ 1002.909020][T22900] netlink_sendmsg+0x6a1/0xdd0 [ 1002.909046][T22900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.909069][T22900] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1002.909089][T22900] __sys_sendto+0x4a0/0x520 [ 1002.909109][T22900] ? __pfx___sys_sendto+0x10/0x10 [ 1002.909144][T22900] ? xfd_validate_state+0x61/0x180 [ 1002.909164][T22900] ? __pfx_do_writev+0x10/0x10 [ 1002.909182][T22900] __x64_sys_sendto+0xe0/0x1c0 [ 1002.909201][T22900] ? do_syscall_64+0x91/0x490 [ 1002.909222][T22900] ? lockdep_hardirqs_on+0x7c/0x110 [ 1002.909245][T22900] do_syscall_64+0xcd/0x490 [ 1002.909267][T22900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.909282][T22900] RIP: 0033:0x7fb8d0190a3c [ 1002.909295][T22900] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1002.909309][T22900] RSP: 002b:00007fb8d0f2eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1002.909323][T22900] RAX: ffffffffffffffda RBX: 00007fb8d0f2efc0 RCX: 00007fb8d0190a3c [ 1002.909333][T22900] RDX: 0000000000000020 RSI: 00007fb8d0f2f010 RDI: 0000000000000003 [ 1002.909342][T22900] RBP: 0000000000000000 R08: 00007fb8d0f2ef14 R09: 000000000000000c [ 1002.909351][T22900] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1002.909367][T22900] R13: 00007fb8d0f2ef68 R14: 00007fb8d0f2f010 R15: 0000000000000000 [ 1002.909386][T22900] [ 1003.843001][T22913] dlm: non-version read from control device 174 [ 1004.351522][T22934] FAULT_INJECTION: forcing a failure. [ 1004.351522][T22934] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.364460][T22934] CPU: 0 UID: 0 PID: 22934 Comm: syz.2.4804 Tainted: G U syzkaller #0 PREEMPT(full) [ 1004.364484][T22934] Tainted: [U]=USER [ 1004.364489][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1004.364498][T22934] Call Trace: [ 1004.364504][T22934] [ 1004.364509][T22934] dump_stack_lvl+0x16c/0x1f0 [ 1004.364535][T22934] should_fail_ex+0x512/0x640 [ 1004.364560][T22934] ? __pfx_skb_network_protocol+0x10/0x10 [ 1004.364582][T22934] should_failslab+0xc2/0x120 [ 1004.364602][T22934] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1004.364619][T22934] ? skb_clone+0x190/0x3f0 [ 1004.364643][T22934] skb_clone+0x190/0x3f0 [ 1004.364664][T22934] dev_queue_xmit_nit+0x3e7/0xca0 [ 1004.364691][T22934] dev_hard_start_xmit+0x5c3/0x740 [ 1004.364709][T22934] ? skb_clone+0x190/0x3f0 [ 1004.364732][T22934] __dev_queue_xmit+0xa46/0x4490 [ 1004.364757][T22934] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1004.364790][T22934] ? __asan_memcpy+0x3c/0x60 [ 1004.364805][T22934] ? __asan_memcpy+0x3c/0x60 [ 1004.364819][T22934] ? __skb_clone+0x570/0x760 [ 1004.364842][T22934] netlink_deliver_tap+0xa87/0xd30 [ 1004.364868][T22934] netlink_unicast+0x64c/0x870 [ 1004.364892][T22934] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.364916][T22934] ? security_netlink_send+0x35/0x210 [ 1004.364932][T22934] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1004.364956][T22934] netlink_sendmsg+0x8d1/0xdd0 [ 1004.364980][T22934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.365004][T22934] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1004.365024][T22934] ____sys_sendmsg+0xa95/0xc70 [ 1004.365040][T22934] ? copy_msghdr_from_user+0x10a/0x160 [ 1004.365061][T22934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.365086][T22934] ___sys_sendmsg+0x134/0x1d0 [ 1004.365108][T22934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.365152][T22934] __sys_sendmsg+0x16d/0x220 [ 1004.365174][T22934] ? __pfx___sys_sendmsg+0x10/0x10 [ 1004.365207][T22934] do_syscall_64+0xcd/0x490 [ 1004.365231][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.365245][T22934] RIP: 0033:0x7f9dda18eba9 [ 1004.365258][T22934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.365278][T22934] RSP: 002b:00007f9ddaf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.365293][T22934] RAX: ffffffffffffffda RBX: 00007f9dda3d6090 RCX: 00007f9dda18eba9 [ 1004.365303][T22934] RDX: 0000000000000810 RSI: 0000200000004380 RDI: 0000000000000007 [ 1004.365311][T22934] RBP: 00007f9ddaf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.365320][T22934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.365328][T22934] R13: 00007f9dda3d6128 R14: 00007f9dda3d6090 R15: 00007ffce5d5d1b8 [ 1004.365347][T22934] [ 1005.008995][T22944] vivid-007: ================= START STATUS ================= [ 1005.033140][T22944] vivid-007: Generate PTS: true [ 1005.039157][T22944] vivid-007: Generate SCR: true [ 1005.045990][T22944] tpg source WxH: 320x240 (Y'CbCr) [ 1005.051228][T22944] tpg field: 1 [ 1005.055039][T22944] tpg crop: (0,0)/320x240 [ 1005.059538][T22944] tpg compose: (0,0)/320x240 [ 1005.065657][T22944] tpg colorspace: 8 [ 1005.069640][T22944] tpg transfer function: 0/0 [ 1005.082028][T22944] tpg Y'CbCr encoding: 0/0 [ 1005.093471][T22944] tpg quantization: 0/0 [ 1005.103129][T22944] tpg RGB range: 0/2 [ 1005.111308][T22944] vivid-007: ================== END STATUS ================== [ 1005.205308][ T30] audit: type=1800 audit(4294967309.287:81): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4808" name="trace_pipe" dev="tracefs" ino=265 res=0 errno=0 [ 1005.995035][T22975] FAULT_INJECTION: forcing a failure. [ 1005.995035][T22975] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.163974][T22975] CPU: 0 UID: 0 PID: 22975 Comm: syz.0.4813 Tainted: G U syzkaller #0 PREEMPT(full) [ 1006.164006][T22975] Tainted: [U]=USER [ 1006.164012][T22975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1006.164022][T22975] Call Trace: [ 1006.164028][T22975] [ 1006.164034][T22975] dump_stack_lvl+0x16c/0x1f0 [ 1006.164062][T22975] should_fail_ex+0x512/0x640 [ 1006.164090][T22975] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1006.164110][T22975] should_failslab+0xc2/0x120 [ 1006.164131][T22975] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1006.164148][T22975] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1006.164166][T22975] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 1006.164188][T22975] mem_cgroup_css_alloc+0xac2/0x1e80 [ 1006.164213][T22975] cgroup_apply_control_enable+0x4b0/0xbb0 [ 1006.164242][T22975] cgroup_mkdir+0x5e7/0x11f0 [ 1006.164267][T22975] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1006.164289][T22975] kernfs_iop_mkdir+0x10e/0x190 [ 1006.164309][T22975] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1006.164329][T22975] vfs_mkdir+0x590/0x8c0 [ 1006.164346][T22975] do_mkdirat+0x304/0x3e0 [ 1006.164365][T22975] ? __pfx_do_mkdirat+0x10/0x10 [ 1006.164384][T22975] ? getname_flags.part.0+0x1c5/0x550 [ 1006.164409][T22975] __x64_sys_mkdir+0xef/0x140 [ 1006.164427][T22975] do_syscall_64+0xcd/0x490 [ 1006.164449][T22975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.164464][T22975] RIP: 0033:0x7fb8d018eba9 [ 1006.164477][T22975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.164491][T22975] RSP: 002b:00007fb8d0f30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1006.164508][T22975] RAX: ffffffffffffffda RBX: 00007fb8d03d6090 RCX: 00007fb8d018eba9 [ 1006.164518][T22975] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1006.164527][T22975] RBP: 00007fb8d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.164536][T22975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.164544][T22975] R13: 00007fb8d03d6128 R14: 00007fb8d03d6090 R15: 00007ffcb8d08098 [ 1006.164564][T22975] [ 1006.654176][T22967] could not allocate digest TFM handle [ 1006.705829][T22988] FAULT_INJECTION: forcing a failure. [ 1006.705829][T22988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.879139][T22988] CPU: 0 UID: 0 PID: 22988 Comm: syz.0.4817 Tainted: G U syzkaller #0 PREEMPT(full) [ 1006.879165][T22988] Tainted: [U]=USER [ 1006.879170][T22988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1006.879179][T22988] Call Trace: [ 1006.879185][T22988] [ 1006.879191][T22988] dump_stack_lvl+0x16c/0x1f0 [ 1006.879216][T22988] should_fail_ex+0x512/0x640 [ 1006.879242][T22988] _copy_to_user+0x32/0xd0 [ 1006.879260][T22988] simple_read_from_buffer+0xcb/0x170 [ 1006.879277][T22988] proc_fail_nth_read+0x197/0x240 [ 1006.879293][T22988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.879310][T22988] ? rw_verify_area+0xcf/0x6c0 [ 1006.879324][T22988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.879339][T22988] vfs_read+0x1e4/0xcf0 [ 1006.879358][T22988] ? __pfx___mutex_lock+0x10/0x10 [ 1006.879380][T22988] ? __pfx_vfs_read+0x10/0x10 [ 1006.879400][T22988] ? __fget_files+0x20e/0x3c0 [ 1006.879421][T22988] ksys_read+0x12a/0x250 [ 1006.879437][T22988] ? __pfx_ksys_read+0x10/0x10 [ 1006.879459][T22988] do_syscall_64+0xcd/0x490 [ 1006.879481][T22988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.879496][T22988] RIP: 0033:0x7fb8d018d5bc [ 1006.879508][T22988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1006.879522][T22988] RSP: 002b:00007fb8d0f30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1006.879536][T22988] RAX: ffffffffffffffda RBX: 00007fb8d03d6090 RCX: 00007fb8d018d5bc [ 1006.879546][T22988] RDX: 000000000000000f RSI: 00007fb8d0f300a0 RDI: 0000000000000008 [ 1006.879555][T22988] RBP: 00007fb8d0f30090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.879563][T22988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.879572][T22988] R13: 00007fb8d03d6128 R14: 00007fb8d03d6090 R15: 00007ffcb8d08098 [ 1006.879590][T22988] [ 1007.068218][T22992] vivid-007: ================= START STATUS ================= [ 1007.078873][T22992] vivid-007: Generate PTS: true [ 1007.083934][T22992] vivid-007: Generate SCR: true [ 1007.088781][T22992] tpg source WxH: 320x240 (Y'CbCr) [ 1007.093926][T22992] tpg field: 1 [ 1007.097470][T22992] tpg crop: (0,0)/320x240 [ 1007.102618][T22992] tpg compose: (0,0)/320x240 [ 1007.107199][T22992] tpg colorspace: 8 [ 1007.111078][T22992] tpg transfer function: 0/0 [ 1007.115943][T22992] tpg Y'CbCr encoding: 0/0 [ 1007.120577][T22992] tpg quantization: 0/0 [ 1007.124769][T22992] tpg RGB range: 0/2 [ 1007.128651][T22992] vivid-007: ================== END STATUS ================== [ 1009.067839][T23042] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1009.089843][T23041] bridge0: port 3(veth1_macvtap) entered blocking state [ 1009.105168][T23043] vivid-007: ================= START STATUS ================= [ 1009.123807][T23041] bridge0: port 3(veth1_macvtap) entered disabled state [ 1009.130877][T23041] veth1_macvtap: entered allmulticast mode [ 1009.145336][T23043] vivid-007: Generate PTS: true [ 1009.155377][T23043] vivid-007: Generate SCR: true [ 1009.160235][T23043] tpg source WxH: 320x240 (Y'CbCr) [ 1009.172948][T23041] veth1_macvtap: left allmulticast mode [ 1009.196425][T23043] tpg field: 1 [ 1009.220123][T23043] tpg crop: (0,0)/320x240 [ 1009.232342][T23043] tpg compose: (0,0)/320x240 [ 1009.254026][T23043] tpg colorspace: 8 [ 1009.274266][T23043] tpg transfer function: 0/0 [ 1009.291273][T23043] tpg Y'CbCr encoding: 0/0 [ 1009.318430][T23043] tpg quantization: 0/0 [ 1009.327275][T23043] tpg RGB range: 0/2 [ 1009.341741][T23043] vivid-007: ================== END STATUS ================== [ 1009.820804][T23050] could not allocate digest TFM handle  [ 1009.827029][T23058] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1010.277549][T23062] IPVS: length: 131 != 8 [ 1011.239771][T23094] FAULT_INJECTION: forcing a failure. [ 1011.239771][T23094] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.341453][T23094] CPU: 0 UID: 0 PID: 23094 Comm: syz.1.4841 Tainted: G U syzkaller #0 PREEMPT(full) [ 1011.341481][T23094] Tainted: [U]=USER [ 1011.341486][T23094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.341495][T23094] Call Trace: [ 1011.341502][T23094] [ 1011.341509][T23094] dump_stack_lvl+0x16c/0x1f0 [ 1011.341535][T23094] should_fail_ex+0x512/0x640 [ 1011.341558][T23094] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1011.341578][T23094] should_failslab+0xc2/0x120 [ 1011.341599][T23094] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1011.341616][T23094] ? d_instantiate+0x77/0x90 [ 1011.341634][T23094] ? alloc_empty_file+0x55/0x1e0 [ 1011.341657][T23094] alloc_empty_file+0x55/0x1e0 [ 1011.341679][T23094] alloc_file_pseudo+0x13a/0x230 [ 1011.341708][T23094] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1011.341729][T23094] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1011.341754][T23094] create_pipe_files+0x364/0x9a0 [ 1011.341776][T23094] do_pipe2+0xaf/0x1c0 [ 1011.341794][T23094] ? __pfx_do_pipe2+0x10/0x10 [ 1011.341812][T23094] ? xfd_validate_state+0x61/0x180 [ 1011.341839][T23094] __x64_sys_pipe+0x33/0x50 [ 1011.341857][T23094] do_syscall_64+0xcd/0x490 [ 1011.341880][T23094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.341895][T23094] RIP: 0033:0x7f900818eba9 [ 1011.341908][T23094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.341921][T23094] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1011.341937][T23094] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 1011.341947][T23094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.341956][T23094] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1011.341965][T23094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.341974][T23094] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1011.341993][T23094] [ 1011.614243][T23102] ptrace attach of "./syz-executor exec"[15660] was attempted by "./syz-executor exec"[23102] [ 1011.626185][T23102] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1011.679595][T23104] vivid-007: ================= START STATUS ================= [ 1011.687370][T23104] vivid-007: Generate PTS: true [ 1011.692951][T23104] vivid-007: Generate SCR: true [ 1011.697798][T23104] tpg source WxH: 320x240 (Y'CbCr) [ 1011.703149][T23104] tpg field: 1 [ 1011.706545][T23104] tpg crop: (0,0)/320x240 [ 1011.710896][T23104] tpg compose: (0,0)/320x240 [ 1011.715467][T23104] tpg colorspace: 8 [ 1011.719252][T23104] tpg transfer function: 0/0 [ 1011.723851][T23104] tpg Y'CbCr encoding: 0/0 [ 1011.728244][T23104] tpg quantization: 0/0 [ 1011.732426][T23104] tpg RGB range: 0/2 [ 1011.736296][T23104] vivid-007: ================== END STATUS ================== [ 1011.835479][T23108] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1013.640145][T23164] FAULT_INJECTION: forcing a failure. [ 1013.640145][T23164] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.680728][T23164] CPU: 0 UID: 0 PID: 23164 Comm: syz.1.4862 Tainted: G U syzkaller #0 PREEMPT(full) [ 1013.680755][T23164] Tainted: [U]=USER [ 1013.680764][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1013.680773][T23164] Call Trace: [ 1013.680779][T23164] [ 1013.680785][T23164] dump_stack_lvl+0x16c/0x1f0 [ 1013.680812][T23164] should_fail_ex+0x512/0x640 [ 1013.680835][T23164] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 1013.680854][T23164] should_failslab+0xc2/0x120 [ 1013.680875][T23164] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 1013.680896][T23164] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1013.680916][T23164] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1013.680933][T23164] ? mas_alloc_nodes+0x18b/0x8b0 [ 1013.680954][T23164] ? mas_alloc_nodes+0x2f1/0x8b0 [ 1013.680972][T23164] mas_alloc_nodes+0x2f1/0x8b0 [ 1013.680995][T23164] mas_node_count_gfp+0x105/0x130 [ 1013.681015][T23164] mas_preallocate+0x7e0/0xde0 [ 1013.681029][T23164] ? __memcg_slab_post_alloc_hook+0x482/0x960 [ 1013.681052][T23164] ? __pfx_mas_preallocate+0x10/0x10 [ 1013.681072][T23164] ? anon_vma_name+0x81/0x2f0 [ 1013.681095][T23164] __split_vma+0x34a/0x1070 [ 1013.681114][T23164] ? __pfx___split_vma+0x10/0x10 [ 1013.681134][T23164] ? __lock_acquire+0x62e/0x1ce0 [ 1013.681158][T23164] vma_modify+0x16dc/0x2030 [ 1013.681176][T23164] ? find_held_lock+0x2b/0x80 [ 1013.681190][T23164] ? __pfx_vma_modify+0x10/0x10 [ 1013.681211][T23164] vma_modify_flags+0x212/0x2d0 [ 1013.681227][T23164] ? __pfx_vma_modify_flags+0x10/0x10 [ 1013.681256][T23164] mlock_fixup+0x27c/0xe50 [ 1013.681273][T23164] ? mas_find+0x156/0x6d0 [ 1013.681287][T23164] apply_vma_lock_flags+0x261/0x390 [ 1013.681306][T23164] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1013.681322][T23164] ? __pfx___might_resched+0x10/0x10 [ 1013.681343][T23164] ? __pfx_down_write_killable+0x10/0x10 [ 1013.681358][T23164] ? do_futex+0x122/0x350 [ 1013.681378][T23164] do_mlock+0x2ac/0x810 [ 1013.681394][T23164] ? __pfx___might_resched+0x10/0x10 [ 1013.681410][T23164] ? __pfx_do_mlock+0x10/0x10 [ 1013.681441][T23164] ? __x64_sys_futex+0x1e0/0x4c0 [ 1013.681458][T23164] ? __x64_sys_futex+0x1e9/0x4c0 [ 1013.681476][T23164] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1013.681500][T23164] ? xfd_validate_state+0x61/0x180 [ 1013.681520][T23164] ? __pfx_do_writev+0x10/0x10 [ 1013.681539][T23164] __x64_sys_mlock+0x59/0x80 [ 1013.681556][T23164] do_syscall_64+0xcd/0x490 [ 1013.681579][T23164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.681593][T23164] RIP: 0033:0x7f900818eba9 [ 1013.681606][T23164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.681620][T23164] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1013.681635][T23164] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 1013.681645][T23164] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 1013.681654][T23164] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1013.681663][T23164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.681672][T23164] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1013.681691][T23164] [ 1014.722427][T23189] Malformed UNC in devname [ 1014.722427][T23189] [ 1014.738105][T23192] cougar: G6 mapped to space [ 1014.742806][T23189] CIFS: VFS: Malformed UNC in devname [ 1015.772149][T23219] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1015.846181][T23219] random: crng reseeded on system resumption [ 1018.983132][T23291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1019.087827][T23291] random: crng reseeded on system resumption [ 1019.361108][T23303] vivid-007: ================= START STATUS ================= [ 1019.410255][T23303] vivid-007: Generate PTS: true [ 1019.430742][T23303] vivid-007: Generate SCR: true [ 1019.460180][T23303] tpg source WxH: 320x240 (Y'CbCr) [ 1019.484358][T23303] tpg field: 1 [ 1019.487748][T23303] tpg crop: (0,0)/320x240 [ 1019.521237][T23303] tpg compose: (0,0)/320x240 [ 1019.567765][T23303] tpg colorspace: 8 [ 1019.571584][T23303] tpg transfer function: 0/0 [ 1019.614817][T23303] tpg Y'CbCr encoding: 0/0 [ 1019.657504][T23303] tpg quantization: 0/0 [ 1019.673343][T23303] tpg RGB range: 0/2 [ 1019.677261][T23303] vivid-007: ================== END STATUS ================== [ 1019.747870][T23309] vivid-007: ================= START STATUS ================= [ 1019.775087][T23309] vivid-007: Generate PTS: true [ 1019.803468][T23309] vivid-007: Generate SCR: true [ 1019.829487][T23309] tpg source WxH: 320x240 (Y'CbCr) [ 1019.850000][T23309] tpg field: 1 [ 1019.865555][T23309] tpg crop: (0,0)/320x240 [ 1019.901400][T23309] tpg compose: (0,0)/320x240 [ 1019.911977][T23309] tpg colorspace: 8 [ 1019.922973][T23309] tpg transfer function: 0/0 [ 1019.948905][T23309] tpg Y'CbCr encoding: 0/0 [ 1019.967826][T23309] tpg quantization: 0/0 [ 1019.987998][T23309] tpg RGB range: 0/2 [ 1020.011779][T23309] vivid-007: ================== END STATUS ================== [ 1020.106018][T23326] FAULT_INJECTION: forcing a failure. [ 1020.106018][T23326] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.257050][T23326] CPU: 0 UID: 0 PID: 23326 Comm: syz.4.4888 Tainted: G U syzkaller #0 PREEMPT(full) [ 1020.257077][T23326] Tainted: [U]=USER [ 1020.257082][T23326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1020.257092][T23326] Call Trace: [ 1020.257098][T23326] [ 1020.257105][T23326] dump_stack_lvl+0x16c/0x1f0 [ 1020.257132][T23326] should_fail_ex+0x512/0x640 [ 1020.257155][T23326] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1020.257175][T23326] should_failslab+0xc2/0x120 [ 1020.257194][T23326] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1020.257209][T23326] ? vkms_plane_duplicate_state+0x87/0x130 [ 1020.257226][T23326] ? kasan_save_track+0x14/0x30 [ 1020.257244][T23326] vkms_plane_duplicate_state+0x87/0x130 [ 1020.257260][T23326] drm_atomic_get_plane_state+0x20e/0x590 [ 1020.257280][T23326] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1020.257298][T23326] ? __pfx___might_resched+0x10/0x10 [ 1020.257321][T23326] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1020.257340][T23326] ? __mutex_lock+0x1c5/0x1060 [ 1020.257361][T23326] ? rcu_is_watching+0x12/0xc0 [ 1020.257415][T23326] drm_client_modeset_commit_locked+0x14d/0x580 [ 1020.257439][T23326] drm_client_modeset_commit+0x4f/0x80 [ 1020.257458][T23326] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1020.257478][T23326] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1020.257501][T23326] drm_fbdev_client_restore+0x2c/0x40 [ 1020.257523][T23326] drm_client_dev_restore+0x1f3/0x2a0 [ 1020.257545][T23326] drm_release+0x2c4/0x360 [ 1020.257562][T23326] ? __pfx_drm_release+0x10/0x10 [ 1020.257578][T23326] __fput+0x3ff/0xb70 [ 1020.257603][T23326] task_work_run+0x14d/0x240 [ 1020.257625][T23326] ? __pfx_task_work_run+0x10/0x10 [ 1020.257647][T23326] ? __pfx___do_sys_close_range+0x10/0x10 [ 1020.257670][T23326] exit_to_user_mode_loop+0xeb/0x110 [ 1020.257692][T23326] do_syscall_64+0x3f6/0x490 [ 1020.257716][T23326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.257731][T23326] RIP: 0033:0x7f5c7718eba9 [ 1020.257744][T23326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.257758][T23326] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1020.257773][T23326] RAX: 0000000000000000 RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1020.257783][T23326] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1020.257791][T23326] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1020.257800][T23326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.257809][T23326] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1020.257830][T23326] [ 1021.258857][T23343] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1021.971626][T23358] can: request_module (can-proto-0) failed. [ 1022.201137][T23365] FAULT_INJECTION: forcing a failure. [ 1022.201137][T23365] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.381692][T23365] CPU: 0 UID: 0 PID: 23365 Comm: syz.4.4898 Tainted: G U syzkaller #0 PREEMPT(full) [ 1022.381719][T23365] Tainted: [U]=USER [ 1022.381725][T23365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1022.381734][T23365] Call Trace: [ 1022.381739][T23365] [ 1022.381749][T23365] dump_stack_lvl+0x16c/0x1f0 [ 1022.381776][T23365] should_fail_ex+0x512/0x640 [ 1022.381799][T23365] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1022.381817][T23365] should_failslab+0xc2/0x120 [ 1022.381837][T23365] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1022.381853][T23365] ? percpu_ref_init+0xec/0x410 [ 1022.381874][T23365] ? __pfx_css_release+0x10/0x10 [ 1022.381894][T23365] percpu_ref_init+0xec/0x410 [ 1022.381914][T23365] ? init_and_link_css+0x32c/0x700 [ 1022.381931][T23365] cgroup_apply_control_enable+0x50b/0xbb0 [ 1022.381960][T23365] cgroup_mkdir+0x5e7/0x11f0 [ 1022.381984][T23365] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1022.382007][T23365] kernfs_iop_mkdir+0x10e/0x190 [ 1022.382026][T23365] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1022.382046][T23365] vfs_mkdir+0x590/0x8c0 [ 1022.382063][T23365] do_mkdirat+0x304/0x3e0 [ 1022.382082][T23365] ? __pfx_do_mkdirat+0x10/0x10 [ 1022.382102][T23365] ? getname_flags.part.0+0x1c5/0x550 [ 1022.382156][T23365] __x64_sys_mkdir+0xef/0x140 [ 1022.382175][T23365] do_syscall_64+0xcd/0x490 [ 1022.382200][T23365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.382216][T23365] RIP: 0033:0x7f5c7718eba9 [ 1022.382229][T23365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.382244][T23365] RSP: 002b:00007f5c753ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1022.382258][T23365] RAX: ffffffffffffffda RBX: 00007f5c773d5fa0 RCX: 00007f5c7718eba9 [ 1022.382268][T23365] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1022.382277][T23365] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1022.382285][T23365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.382294][T23365] R13: 00007f5c773d6038 R14: 00007f5c773d5fa0 R15: 00007fffdcd97548 [ 1022.382314][T23365] [ 1024.338809][T23406] FAULT_INJECTION: forcing a failure. [ 1024.338809][T23406] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.438392][T23406] CPU: 0 UID: 0 PID: 23406 Comm: syz.2.4907 Tainted: G U syzkaller #0 PREEMPT(full) [ 1024.438420][T23406] Tainted: [U]=USER [ 1024.438426][T23406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1024.438436][T23406] Call Trace: [ 1024.438441][T23406] [ 1024.438447][T23406] dump_stack_lvl+0x16c/0x1f0 [ 1024.438474][T23406] should_fail_ex+0x512/0x640 [ 1024.438497][T23406] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1024.438518][T23406] should_failslab+0xc2/0x120 [ 1024.438537][T23406] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1024.438554][T23406] ? __d_alloc+0x32/0xae0 [ 1024.438575][T23406] __d_alloc+0x32/0xae0 [ 1024.438598][T23406] d_alloc_pseudo+0x1c/0xc0 [ 1024.438620][T23406] alloc_file_pseudo+0xcf/0x230 [ 1024.438642][T23406] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1024.438664][T23406] ? alloc_fd+0x471/0x7d0 [ 1024.438683][T23406] sock_alloc_file+0x50/0x210 [ 1024.438698][T23406] __sys_socket+0x1c0/0x260 [ 1024.438715][T23406] ? __pfx___sys_socket+0x10/0x10 [ 1024.438732][T23406] ? xfd_validate_state+0x61/0x180 [ 1024.438752][T23406] ? __task_pid_nr_ns+0x17c/0x500 [ 1024.438776][T23406] __x64_sys_socket+0x72/0xb0 [ 1024.438792][T23406] ? lockdep_hardirqs_on+0x7c/0x110 [ 1024.438813][T23406] do_syscall_64+0xcd/0x490 [ 1024.438835][T23406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.438850][T23406] RIP: 0033:0x7f9dda18eba9 [ 1024.438863][T23406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.438877][T23406] RSP: 002b:00007f9ddafa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1024.438892][T23406] RAX: ffffffffffffffda RBX: 00007f9dda3d5fa0 RCX: 00007f9dda18eba9 [ 1024.438911][T23406] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 1024.438919][T23406] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1024.438928][T23406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.438937][T23406] R13: 00007f9dda3d6038 R14: 00007f9dda3d5fa0 R15: 00007ffce5d5d1b8 [ 1024.438956][T23406] [ 1026.437247][T23451] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1027.903975][T23474] could not allocate digest TFM handle  [ 1028.068079][ T30] audit: type=1800 audit(4294967306.002:82): pid=23484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4926" name="features" dev="configfs" ino=93441 res=0 errno=0 [ 1028.140894][T23488] ima: policy update failed [ 1028.195197][ T30] audit: type=1802 audit(4294967306.122:83): pid=23488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4927" res=0 errno=0 [ 1028.765834][T23492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1028.798033][T23492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.820506][T23492] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1028.839788][T23492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1028.866934][T23492] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1029.151251][T23505] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1029.419110][T23508] Loading of unsigned module is rejected [ 1030.550341][T23530] FAULT_INJECTION: forcing a failure. [ 1030.550341][T23530] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1030.614656][T23530] CPU: 0 UID: 0 PID: 23530 Comm: syz.2.4937 Tainted: G U syzkaller #0 PREEMPT(full) [ 1030.614682][T23530] Tainted: [U]=USER [ 1030.614686][T23530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1030.614696][T23530] Call Trace: [ 1030.614701][T23530] [ 1030.614707][T23530] dump_stack_lvl+0x16c/0x1f0 [ 1030.614733][T23530] should_fail_ex+0x512/0x640 [ 1030.614759][T23530] get_futex_key+0xff0/0x1560 [ 1030.614779][T23530] ? __pfx_get_futex_key+0x10/0x10 [ 1030.614796][T23530] ? __mutex_trylock_common+0xe9/0x250 [ 1030.614821][T23530] futex_wake+0xea/0x530 [ 1030.614844][T23530] ? __pfx_futex_wake+0x10/0x10 [ 1030.614872][T23530] do_futex+0x1e3/0x350 [ 1030.614890][T23530] ? __pfx_do_futex+0x10/0x10 [ 1030.614906][T23530] ? __might_fault+0xe3/0x190 [ 1030.614928][T23530] mm_release+0x24e/0x300 [ 1030.614945][T23530] do_exit+0x68e/0x2bf0 [ 1030.614969][T23530] ? __pfx_do_exit+0x10/0x10 [ 1030.614988][T23530] ? do_raw_spin_lock+0x12c/0x2b0 [ 1030.615009][T23530] ? find_held_lock+0x2b/0x80 [ 1030.615025][T23530] do_group_exit+0xd3/0x2a0 [ 1030.615046][T23530] get_signal+0x2673/0x26d0 [ 1030.615069][T23530] ? __pfx_get_signal+0x10/0x10 [ 1030.615085][T23530] ? do_futex+0x122/0x350 [ 1030.615102][T23530] ? __pfx_do_futex+0x10/0x10 [ 1030.615122][T23530] arch_do_signal_or_restart+0x8f/0x790 [ 1030.615141][T23530] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1030.615165][T23530] ? xfd_validate_state+0x61/0x180 [ 1030.615185][T23530] ? __pfx___do_sys_close_range+0x10/0x10 [ 1030.615207][T23530] exit_to_user_mode_loop+0x84/0x110 [ 1030.615240][T23530] do_syscall_64+0x3f6/0x490 [ 1030.615263][T23530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.615278][T23530] RIP: 0033:0x7f9dda18eba9 [ 1030.615290][T23530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.615304][T23530] RSP: 002b:00007f9ddaf7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1030.615319][T23530] RAX: fffffffffffffe00 RBX: 00007f9dda3d6098 RCX: 00007f9dda18eba9 [ 1030.615328][T23530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9dda3d6098 [ 1030.615337][T23530] RBP: 00007f9dda3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.615346][T23530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.615354][T23530] R13: 00007f9dda3d6128 R14: 00007ffce5d5d0d0 R15: 00007ffce5d5d1b8 [ 1030.615372][T23530] [ 1030.863579][T13918] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.869590][T13918] Bluetooth: hci1: command 0x0c1a tx timeout [ 1030.875902][T13918] Bluetooth: hci4: command 0x0c1a tx timeout [ 1030.882047][T13918] Bluetooth: hci0: command 0x0c1a tx timeout [ 1031.259255][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4941'. [ 1032.416345][T23586] : Can't lookup blockdev [ 1032.832681][T23597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1032.842124][T23598] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 1032.866736][T23597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1032.910646][T23597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1032.940425][T23535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1032.978430][T23597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1033.475677][T23617] vivid-007: ================= START STATUS ================= [ 1033.506412][T23617] vivid-007: Generate PTS: true [ 1033.524438][T23617] vivid-007: Generate SCR: true [ 1033.543846][T23617] tpg source WxH: 320x240 (Y'CbCr) [ 1033.566858][T23617] tpg field: 1 [ 1033.580306][T23617] tpg crop: (0,0)/320x240 [ 1033.592632][T23617] tpg compose: (0,0)/320x240 [ 1033.611183][T23617] tpg colorspace: 8 [ 1033.626280][T23617] tpg transfer function: 0/0 [ 1033.642837][T23617] tpg Y'CbCr encoding: 0/0 [ 1033.666234][T23617] tpg quantization: 0/0 [ 1033.693142][T23617] tpg RGB range: 0/2 [ 1033.706376][T23617] vivid-007: ================== END STATUS ================== [ 1033.738209][T23625] FAULT_INJECTION: forcing a failure. [ 1033.738209][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.793822][T23626] netlink: 'syz.2.4957': attribute type 1 has an invalid length. [ 1033.821447][T23625] CPU: 0 UID: 0 PID: 23625 Comm: syz.2.4957 Tainted: G U syzkaller #0 PREEMPT(full) [ 1033.821474][T23625] Tainted: [U]=USER [ 1033.821480][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.821489][T23625] Call Trace: [ 1033.821494][T23625] [ 1033.821500][T23625] dump_stack_lvl+0x16c/0x1f0 [ 1033.821526][T23625] should_fail_ex+0x512/0x640 [ 1033.821549][T23625] ? __kmalloc_noprof+0xbf/0x510 [ 1033.821567][T23625] ? lsm_blob_alloc+0x68/0x90 [ 1033.821580][T23625] should_failslab+0xc2/0x120 [ 1033.821600][T23625] __kmalloc_noprof+0xd2/0x510 [ 1033.821620][T23625] lsm_blob_alloc+0x68/0x90 [ 1033.821633][T23625] security_sk_alloc+0x30/0x270 [ 1033.821651][T23625] sk_prot_alloc+0x1c7/0x2a0 [ 1033.821669][T23625] sk_alloc+0x36/0xc20 [ 1033.821689][T23625] __netlink_create+0x5e/0x2c0 [ 1033.821707][T23625] ? __wake_up+0x3f/0x60 [ 1033.821724][T23625] netlink_create+0x39e/0x620 [ 1033.821743][T23625] ? __pfx_genl_bind+0x10/0x10 [ 1033.821755][T23625] ? __pfx_genl_unbind+0x10/0x10 [ 1033.821767][T23625] ? __pfx_genl_release+0x10/0x10 [ 1033.821783][T23625] __sock_create+0x335/0x8d0 [ 1033.821810][T23625] __sys_socket+0x14d/0x260 [ 1033.821828][T23625] ? __pfx___sys_socket+0x10/0x10 [ 1033.821844][T23625] ? xfd_validate_state+0x61/0x180 [ 1033.821865][T23625] ? __pfx_ksys_write+0x10/0x10 [ 1033.821886][T23625] __x64_sys_socket+0x72/0xb0 [ 1033.821902][T23625] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.821923][T23625] do_syscall_64+0xcd/0x490 [ 1033.821945][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.821960][T23625] RIP: 0033:0x7f9dda18eba9 [ 1033.821973][T23625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.821987][T23625] RSP: 002b:00007f9ddaf3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1033.822001][T23625] RAX: ffffffffffffffda RBX: 00007f9dda3d6270 RCX: 00007f9dda18eba9 [ 1033.822011][T23625] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1033.822020][T23625] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1033.822028][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.822037][T23625] R13: 00007f9dda3d6308 R14: 00007f9dda3d6270 R15: 00007ffce5d5d1b8 [ 1033.822055][T23625] [ 1034.448208][T23638] FAULT_INJECTION: forcing a failure. [ 1034.448208][T23638] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.509760][T23638] CPU: 0 UID: 0 PID: 23638 Comm: syz.0.4960 Tainted: G U syzkaller #0 PREEMPT(full) [ 1034.509793][T23638] Tainted: [U]=USER [ 1034.509799][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1034.509808][T23638] Call Trace: [ 1034.509814][T23638] [ 1034.509821][T23638] dump_stack_lvl+0x16c/0x1f0 [ 1034.509849][T23638] should_fail_ex+0x512/0x640 [ 1034.509872][T23638] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1034.509893][T23638] should_failslab+0xc2/0x120 [ 1034.509912][T23638] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1034.509929][T23638] ? lockdep_init_map_type+0x5c/0x280 [ 1034.509948][T23638] ? seq_open+0x55/0x170 [ 1034.509970][T23638] seq_open+0x55/0x170 [ 1034.509991][T23638] kernfs_fop_open+0x59f/0xda0 [ 1034.510010][T23638] do_dentry_open+0x97f/0x1530 [ 1034.510029][T23638] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1034.510046][T23638] vfs_open+0x82/0x3f0 [ 1034.510070][T23638] path_openat+0x1de4/0x2cb0 [ 1034.510094][T23638] ? __pfx_path_openat+0x10/0x10 [ 1034.510116][T23638] do_filp_open+0x20b/0x470 [ 1034.510133][T23638] ? __pfx_do_filp_open+0x10/0x10 [ 1034.510164][T23638] ? alloc_fd+0x471/0x7d0 [ 1034.510185][T23638] do_sys_openat2+0x11b/0x1d0 [ 1034.510206][T23638] ? __pfx_do_sys_openat2+0x10/0x10 [ 1034.510235][T23638] __x64_sys_openat+0x174/0x210 [ 1034.510257][T23638] ? __pfx___x64_sys_openat+0x10/0x10 [ 1034.510286][T23638] do_syscall_64+0xcd/0x490 [ 1034.510309][T23638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.510324][T23638] RIP: 0033:0x7fb8d018eba9 [ 1034.510337][T23638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.510351][T23638] RSP: 002b:00007fb8d0f30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1034.510367][T23638] RAX: ffffffffffffffda RBX: 00007fb8d03d6090 RCX: 00007fb8d018eba9 [ 1034.510377][T23638] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1034.510385][T23638] RBP: 00007fb8d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1034.510394][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.510403][T23638] R13: 00007fb8d03d6128 R14: 00007fb8d03d6090 R15: 00007ffcb8d08098 [ 1034.510422][T23638] [ 1034.851360][T23535] Bluetooth: hci1: command 0x0c1a tx timeout [ 1034.930971][T23535] Bluetooth: hci0: command 0x0c1a tx timeout [ 1034.937012][T23535] Bluetooth: hci2: command 0x0c1a tx timeout [ 1035.010718][ T6724] Bluetooth: hci4: command 0x0c1a tx timeout [ 1035.696791][T23665] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1036.270150][T23682] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1036.791780][ T30] audit: type=1800 audit(4294967314.763:84): pid=23690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4975" name="dbroot" dev="configfs" ino=94331 res=0 errno=0 [ 1038.736341][T23714] vivid-007: ================= START STATUS ================= [ 1038.781339][T23714] vivid-007: Generate PTS: true [ 1038.798712][T23714] vivid-007: Generate SCR: true [ 1038.823577][T23714] tpg source WxH: 320x240 (Y'CbCr) [ 1038.953309][T23714] tpg field: 1 [ 1038.956705][T23714] tpg crop: (0,0)/320x240 [ 1038.961022][T23714] tpg compose: (0,0)/320x240 [ 1039.161090][T23714] tpg colorspace: 8 [ 1039.164950][T23714] tpg transfer function: 0/0 [ 1039.287832][T23714] tpg Y'CbCr encoding: 0/0 [ 1039.306470][T23714] tpg quantization: 0/0 [ 1039.321848][T23714] tpg RGB range: 0/2 [ 1039.425745][T23714] vivid-007: ================== END STATUS ================== [ 1039.822084][T23731] vivid-007: ================= START STATUS ================= [ 1039.857061][T23731] vivid-007: Generate PTS: true [ 1039.887720][T23731] vivid-007: Generate SCR: true [ 1039.913025][T23731] tpg source WxH: 320x240 (Y'CbCr) [ 1039.946006][T23731] tpg field: 1 [ 1039.966271][T23731] tpg crop: (0,0)/320x240 [ 1039.995984][T23731] tpg compose: (0,0)/320x240 [ 1040.037192][T23731] tpg colorspace: 8 [ 1040.061427][T23731] tpg transfer function: 0/0 [ 1040.075373][T23731] tpg Y'CbCr encoding: 0/0 [ 1040.090185][T23731] tpg quantization: 0/0 [ 1040.103249][T23731] tpg RGB range: 0/2 [ 1040.116312][T23731] vivid-007: ================== END STATUS ================== [ 1040.776972][T23750] : Can't lookup blockdev [ 1042.178549][T23785] vivid-007: ================= START STATUS ================= [ 1042.186207][T23785] vivid-007: Generate PTS: true [ 1042.233227][T23785] vivid-007: Generate SCR: true [ 1042.250339][T23785] tpg source WxH: 320x240 (Y'CbCr) [ 1042.287183][T23785] tpg field: 1 [ 1042.303389][T23785] tpg crop: (0,0)/320x240 [ 1042.320797][T23785] tpg compose: (0,0)/320x240 [ 1042.342354][T23785] tpg colorspace: 8 [ 1042.356793][T23785] tpg transfer function: 0/0 [ 1042.374373][T23785] tpg Y'CbCr encoding: 0/0 [ 1042.392023][T23785] tpg quantization: 0/0 [ 1042.435206][T23785] tpg RGB range: 0/2 [ 1042.453408][T23785] vivid-007: ================== END STATUS ================== [ 1043.822700][T23839] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1043.994606][ T6724] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 1044.062769][T23840] Loading of unsigned module is rejected [ 1044.286392][T23847] vivid-007: ================= START STATUS ================= [ 1044.314513][T23847] vivid-007: Generate PTS: true [ 1044.332272][T23847] vivid-007: Generate SCR: true [ 1044.354933][T23847] tpg source WxH: 320x240 (Y'CbCr) [ 1044.372558][T23847] tpg field: 1 [ 1044.384717][T23847] tpg crop: (0,0)/320x240 [ 1044.397451][T23847] tpg compose: (0,0)/320x240 [ 1044.416952][T23847] tpg colorspace: 8 [ 1044.431767][T23847] tpg transfer function: 0/0 [ 1044.445180][T23847] tpg Y'CbCr encoding: 0/0 [ 1044.460525][T23847] tpg quantization: 0/0 [ 1044.476436][T23847] tpg RGB range: 0/2 [ 1044.500485][T23847] vivid-007: ================== END STATUS ================== [ 1046.270775][T23889] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1046.832464][T23898] netlink: zone id is out of range [ 1046.895359][T23898] netlink: zone id is out of range [ 1046.950036][T23898] netlink: zone id is out of range [ 1046.972568][T23898] netlink: zone id is out of range [ 1046.994312][T23898] netlink: zone id is out of range [ 1047.010978][T23898] netlink: zone id is out of range [ 1047.030345][T23898] netlink: zone id is out of range [ 1047.047017][T23898] netlink: zone id is out of range [ 1047.067455][T23898] netlink: zone id is out of range [ 1047.084652][T23898] netlink: zone id is out of range [ 1048.586359][T23942] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5031'. [ 1048.983052][T23949] FAULT_INJECTION: forcing a failure. [ 1048.983052][T23949] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1049.044834][T23949] CPU: 0 UID: 0 PID: 23949 Comm: syz.0.5035 Tainted: G U syzkaller #0 PREEMPT(full) [ 1049.044862][T23949] Tainted: [U]=USER [ 1049.044868][T23949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1049.044878][T23949] Call Trace: [ 1049.044884][T23949] [ 1049.044890][T23949] dump_stack_lvl+0x16c/0x1f0 [ 1049.044919][T23949] should_fail_ex+0x512/0x640 [ 1049.044946][T23949] get_futex_key+0x1d0/0x1560 [ 1049.044968][T23949] ? __pfx_get_futex_key+0x10/0x10 [ 1049.044995][T23949] futex_wait_setup+0x9d/0x550 [ 1049.045021][T23949] __futex_wait+0x194/0x2f0 [ 1049.045043][T23949] ? __pfx___futex_wait+0x10/0x10 [ 1049.045068][T23949] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.045093][T23949] ? futex_private_hash_put+0x176/0x300 [ 1049.045112][T23949] ? futex_private_hash_put+0x18a/0x300 [ 1049.045131][T23949] futex_wait+0xe8/0x380 [ 1049.045152][T23949] ? __pfx_futex_wait+0x10/0x10 [ 1049.045178][T23949] ? ksys_write+0x190/0x250 [ 1049.045198][T23949] do_futex+0x229/0x350 [ 1049.045217][T23949] ? __pfx_do_futex+0x10/0x10 [ 1049.045240][T23949] __x64_sys_futex+0x1e0/0x4c0 [ 1049.045258][T23949] ? fput+0x9b/0xd0 [ 1049.045277][T23949] ? __pfx___x64_sys_futex+0x10/0x10 [ 1049.045294][T23949] ? ksys_write+0x1ac/0x250 [ 1049.045310][T23949] ? __pfx_ksys_write+0x10/0x10 [ 1049.045339][T23949] do_syscall_64+0xcd/0x490 [ 1049.045364][T23949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.045380][T23949] RIP: 0033:0x7fb8d018eba9 [ 1049.045392][T23949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.045419][T23949] RSP: 002b:00007fb8d0f510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1049.045435][T23949] RAX: ffffffffffffffda RBX: 00007fb8d03d5fa8 RCX: 00007fb8d018eba9 [ 1049.045445][T23949] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8d03d5fa8 [ 1049.045454][T23949] RBP: 00007fb8d03d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1049.045463][T23949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.045472][T23949] R13: 00007fb8d03d6038 R14: 00007ffcb8d07fb0 R15: 00007ffcb8d08098 [ 1049.045491][T23949] [ 1049.053562][T23949] FAULT_INJECTION: forcing a failure. [ 1049.053562][T23949] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.948870][T23949] CPU: 0 UID: 0 PID: 23949 Comm: syz.0.5035 Tainted: G U syzkaller #0 PREEMPT(full) [ 1049.948897][T23949] Tainted: [U]=USER [ 1049.948903][T23949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1049.948913][T23949] Call Trace: [ 1049.948919][T23949] [ 1049.948925][T23949] dump_stack_lvl+0x16c/0x1f0 [ 1049.948952][T23949] should_fail_ex+0x512/0x640 [ 1049.948980][T23949] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1049.949007][T23949] should_failslab+0xc2/0x120 [ 1049.949028][T23949] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1049.949046][T23949] ? alloc_uid+0x13d/0x4c0 [ 1049.949065][T23949] ? _raw_spin_unlock_irq+0x23/0x50 [ 1049.949087][T23949] alloc_uid+0x13d/0x4c0 [ 1049.949106][T23949] ? __pfx_alloc_uid+0x10/0x10 [ 1049.949125][T23949] ? security_prepare_creds+0xa7/0x270 [ 1049.949152][T23949] __sys_setresuid+0x507/0x1160 [ 1049.949172][T23949] do_syscall_64+0xcd/0x490 [ 1049.949196][T23949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.949212][T23949] RIP: 0033:0x7fb8d018eba9 [ 1049.949225][T23949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.949243][T23949] RSP: 002b:00007fb8d0f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1049.949259][T23949] RAX: ffffffffffffffda RBX: 00007fb8d03d5fa0 RCX: 00007fb8d018eba9 [ 1049.949270][T23949] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1049.949279][T23949] RBP: 00007fb8d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1049.949288][T23949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.949297][T23949] R13: 00007fb8d03d6038 R14: 00007fb8d03d5fa0 R15: 00007ffcb8d08098 [ 1049.949316][T23949] [ 1051.023543][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.035470][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1051.167137][ T30] audit: type=1800 audit(4294967329.210:85): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5046" name="dbroot" dev="configfs" ino=95583 res=0 errno=0 [ 1051.235932][T24004] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1051.316861][T24004] random: crng reseeded on system resumption [ 1051.478662][T24008] netlink: 146 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1052.100571][T24022] vivid-007: ================= START STATUS ================= [ 1052.213723][T24022] vivid-007: Generate PTS: true [ 1052.273926][T24022] vivid-007: Generate SCR: true [ 1052.278829][T24022] tpg source WxH: 320x240 (Y'CbCr) [ 1052.463954][T24022] tpg field: 1 [ 1052.524311][T24022] tpg crop: (0,0)/320x240 [ 1052.606970][T24022] tpg compose: (0,0)/320x240 [ 1052.704081][T24022] tpg colorspace: 8 [ 1052.760109][T24022] tpg transfer function: 0/0 [ 1052.893778][T24022] tpg Y'CbCr encoding: 0/0 [ 1052.947788][T24022] tpg quantization: 0/0 [ 1053.046674][T24022] tpg RGB range: 0/2 [ 1053.076763][T24022] vivid-007: ================== END STATUS ================== [ 1053.434769][T24055] nbd: must specify a device to reconfigure [ 1053.756046][T24070] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1053.813159][T24070] random: crng reseeded on system resumption [ 1053.972099][T24076] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1055.125064][T24097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1055.182305][T24098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1055.243420][T24103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1055.271490][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1055.332638][T24102] netlink: 'syz.2.5067': attribute type 27 has an invalid length. [ 1055.384119][T24102] netlink: 334 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1055.606531][T24098] geneve1: entered promiscuous mode [ 1055.617309][T24098] geneve1: entered allmulticast mode [ 1056.686824][T24136] sd 0:0:1:0: PR command failed: 1026 [ 1056.782319][T24136] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1056.963841][T24136] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1057.400834][T24160] random: crng reseeded on system resumption [ 1058.524887][T24180] delete_channel: no stack [ 1058.556524][T24175] tipc: Started in network mode [ 1058.693850][T24175] tipc: Node identity 45e5412, cluster identity 4711 [ 1058.804412][T24175] tipc: Node number set to 73290770 [ 1065.700371][ T30] audit: type=1800 audit(4294967343.808:86): pid=24343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5113" name="dbroot" dev="configfs" ino=97057 res=0 errno=0 [ 1067.438273][T24368] FAULT_INJECTION: forcing a failure. [ 1067.438273][T24368] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1067.662188][T24368] CPU: 0 UID: 0 PID: 24368 Comm: syz.1.5118 Tainted: G U syzkaller #0 PREEMPT(full) [ 1067.662211][T24368] Tainted: [U]=USER [ 1067.662216][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1067.662225][T24368] Call Trace: [ 1067.662230][T24368] [ 1067.662236][T24368] dump_stack_lvl+0x16c/0x1f0 [ 1067.662263][T24368] should_fail_ex+0x512/0x640 [ 1067.662288][T24368] get_futex_key+0x1d0/0x1560 [ 1067.662309][T24368] ? __pfx_get_futex_key+0x10/0x10 [ 1067.662324][T24368] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1067.662346][T24368] ? lockdep_hardirqs_on+0x7c/0x110 [ 1067.662368][T24368] ? __destroy_inode+0x2e4/0x730 [ 1067.662388][T24368] ? __pfx_sock_free_inode+0x10/0x10 [ 1067.662406][T24368] futex_wake+0xea/0x530 [ 1067.662427][T24368] ? __pfx_evict+0x10/0x10 [ 1067.662445][T24368] ? __pfx_futex_wake+0x10/0x10 [ 1067.662467][T24368] ? iput+0x519/0x880 [ 1067.662489][T24368] do_futex+0x1e3/0x350 [ 1067.662507][T24368] ? __pfx_do_futex+0x10/0x10 [ 1067.662525][T24368] ? __sock_release+0x20b/0x270 [ 1067.662542][T24368] __x64_sys_futex+0x1e0/0x4c0 [ 1067.662562][T24368] ? __sys_socket+0xac/0x260 [ 1067.662579][T24368] ? __pfx___x64_sys_futex+0x10/0x10 [ 1067.662596][T24368] ? xfd_validate_state+0x61/0x180 [ 1067.662617][T24368] ? __pfx___do_sys_prctl+0x10/0x10 [ 1067.662644][T24368] do_syscall_64+0xcd/0x490 [ 1067.662667][T24368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.662681][T24368] RIP: 0033:0x7f900818eba9 [ 1067.662694][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.662707][T24368] RSP: 002b:00007f9008f880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1067.662722][T24368] RAX: ffffffffffffffda RBX: 00007f90083d6278 RCX: 00007f900818eba9 [ 1067.662731][T24368] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f90083d627c [ 1067.662740][T24368] RBP: 00007f90083d6270 R08: 00007f9008fec000 R09: 0000000000000000 [ 1067.662749][T24368] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1067.662758][T24368] R13: 00007f90083d6308 R14: 00007ffd81246df0 R15: 00007ffd81246ed8 [ 1067.662776][T24368] [ 1068.382946][T24381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1068.621692][T24399] Loading of unsigned module is rejected [ 1069.015924][T24411] HfR: entered promiscuous mode [ 1069.047436][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5128'. [ 1069.091117][T24411] HfR: left promiscuous mode [ 1070.711142][T24474] vivid-007: ================= START STATUS ================= [ 1070.765752][T24474] vivid-007: Generate PTS: true [ 1070.770646][T24474] vivid-007: Generate SCR: true [ 1070.823119][T24474] tpg source WxH: 320x240 (Y'CbCr) [ 1070.828275][T24474] tpg field: 1 [ 1070.831641][T24474] tpg crop: (0,0)/320x240 [ 1070.908785][T24474] tpg compose: (0,0)/320x240 [ 1070.930317][T24474] tpg colorspace: 8 [ 1070.958365][T24474] tpg transfer function: 0/0 [ 1071.001646][T24474] tpg Y'CbCr encoding: 0/0 [ 1071.051236][T24474] tpg quantization: 0/0 [ 1071.117662][T24474] tpg RGB range: 0/2 [ 1071.146487][T24474] vivid-007: ================== END STATUS ================== [ 1072.341622][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1073.374254][T24530] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1073.600534][T24535] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1073.723776][ T30] audit: type=1800 audit(4294967351.866:87): pid=24542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5149" name="features" dev="configfs" ino=97941 res=0 errno=0 [ 1074.139426][T24550] nvme_fcloop: unknown parameter or missing value '^' [ 1074.480181][T24568] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1074.644500][T24570] overlayfs: missing 'lowerdir' [ 1075.021630][T24576] vivid-007: ================= START STATUS ================= [ 1075.072092][T24576] vivid-007: Enable Output Cropping: true [ 1075.119251][T24576] vivid-007: Enable Output Composing: true [ 1075.190226][T24576] vivid-007: Enable Output Scaler: true [ 1075.221773][T24576] vivid-007: Tx RGB Quantization Range: Automatic [ 1075.258332][T24582] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1075.281410][T24576] vivid-007: Transmit Mode: HDMI [ 1075.286435][T24576] vivid-007: Hotplug Present: 0x00000000 [ 1075.328049][T24582] random: crng reseeded on system resumption [ 1075.344897][T24576] vivid-007: RxSense Present: 0x00000000 [ 1075.376586][T24576] vivid-007: EDID Present: 0x00000000 [ 1075.400757][T24576] vivid-007: ================== END STATUS ================== [ 1075.909780][T24597] svc: failed to register nfsdv3 RPC service (errno 111). [ 1075.949753][T24597] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1078.668705][T24637] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1081.158758][ T30] audit: type=1800 audit(4294967359.331:88): pid=24702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5188" name="dbroot" dev="configfs" ino=98752 res=0 errno=0 [ 1083.892913][T24740] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1083.985155][T24735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5195'. [ 1085.241384][T24756] ima: policy update failed [ 1085.251159][ T30] audit: type=1802 audit(4294967363.450:89): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5199" res=0 errno=0 [ 1085.379549][T24767] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1085.997692][T24783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1088.544222][T24832] FAULT_INJECTION: forcing a failure. [ 1088.544222][T24832] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.720164][T24832] CPU: 0 UID: 0 PID: 24832 Comm: syz.4.5215 Tainted: G U syzkaller #0 PREEMPT(full) [ 1088.720191][T24832] Tainted: [U]=USER [ 1088.720197][T24832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1088.720206][T24832] Call Trace: [ 1088.720212][T24832] [ 1088.720218][T24832] dump_stack_lvl+0x16c/0x1f0 [ 1088.720245][T24832] should_fail_ex+0x512/0x640 [ 1088.720269][T24832] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1088.720289][T24832] should_failslab+0xc2/0x120 [ 1088.720308][T24832] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1088.720325][T24832] ? __proc_create+0xc3/0x8e0 [ 1088.720346][T24832] ? __proc_create+0x2ce/0x8e0 [ 1088.720369][T24832] __proc_create+0x2ce/0x8e0 [ 1088.720390][T24832] ? __pfx___proc_create+0x10/0x10 [ 1088.720413][T24832] ? _raw_write_unlock+0x28/0x50 [ 1088.720433][T24832] ? proc_register+0x501/0x840 [ 1088.720455][T24832] proc_create_reg+0x7d/0x180 [ 1088.720478][T24832] proc_create_seq_private+0x8e/0x180 [ 1088.720501][T24832] ? __pfx_proc_create_seq_private+0x10/0x10 [ 1088.720523][T24832] ? __pfx_nl_fib_input+0x10/0x10 [ 1088.720541][T24832] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 1088.720557][T24832] ip_rt_do_proc_init+0xac/0x1b0 [ 1088.720572][T24832] ops_init+0x1df/0x5f0 [ 1088.720596][T24832] setup_net+0x10f/0x380 [ 1088.720608][T24832] ? lockdep_init_map_type+0x5c/0x280 [ 1088.720635][T24832] ? __pfx_setup_net+0x10/0x10 [ 1088.720650][T24832] ? debug_mutex_init+0x37/0x70 [ 1088.720666][T24832] copy_net_ns+0x2a6/0x5f0 [ 1088.720684][T24832] create_new_namespaces+0x3ea/0xa90 [ 1088.720707][T24832] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1088.720725][T24832] ksys_unshare+0x45b/0xa40 [ 1088.720745][T24832] ? __pfx_ksys_unshare+0x10/0x10 [ 1088.720768][T24832] ? xfd_validate_state+0x61/0x180 [ 1088.720794][T24832] __x64_sys_unshare+0x31/0x40 [ 1088.720813][T24832] do_syscall_64+0xcd/0x490 [ 1088.720836][T24832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.720851][T24832] RIP: 0033:0x7f5c7718eba9 [ 1088.720864][T24832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.720878][T24832] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1088.720892][T24832] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1088.720902][T24832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1088.720911][T24832] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1088.720919][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.720929][T24832] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1088.720949][T24832] [ 1088.987053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.619999][ T30] audit: type=1800 audit(4294967367.841:90): pid=24851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5219" name="dbroot" dev="configfs" ino=99512 res=0 errno=0 [ 1090.890932][ T30] audit: type=1800 audit(4294967369.117:91): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5231" name="dbroot" dev="configfs" ino=99755 res=0 errno=0 [ 1091.887544][T24881] kexec: Could not allocate control_code_buffer [ 1092.988269][ T30] audit: type=1800 audit(4294967371.217:92): pid=24946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5241" name="dbroot" dev="configfs" ino=100062 res=0 errno=0 [ 1094.224878][T24968] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1094.224878][T24968] program syz.2.5243 not setting count and/or reply_len properly [ 1094.451896][T24994] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1094.572830][T24995] overlayfs: missing 'lowerdir' [ 1095.491400][T25015] snd_aloop snd_aloop.0: control 7:257:7::2 is already present [ 1095.582036][T25025] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input57 [ 1095.974127][T25046] FAULT_INJECTION: forcing a failure. [ 1095.974127][T25046] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.069587][T25046] CPU: 0 UID: 0 PID: 25046 Comm: syz.4.5261 Tainted: G U syzkaller #0 PREEMPT(full) [ 1096.069614][T25046] Tainted: [U]=USER [ 1096.069620][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1096.069629][T25046] Call Trace: [ 1096.069635][T25046] [ 1096.069641][T25046] dump_stack_lvl+0x16c/0x1f0 [ 1096.069669][T25046] should_fail_ex+0x512/0x640 [ 1096.069692][T25046] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1096.069712][T25046] should_failslab+0xc2/0x120 [ 1096.069740][T25046] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1096.069759][T25046] ? __get_vm_area_node+0x101/0x330 [ 1096.069784][T25046] __get_vm_area_node+0x101/0x330 [ 1096.069807][T25046] ? ringbuf_map_alloc+0x3da/0x7f0 [ 1096.069825][T25046] get_vm_area_caller+0x71/0xa0 [ 1096.069847][T25046] ? ringbuf_map_alloc+0x3da/0x7f0 [ 1096.069864][T25046] vmap+0x135/0x320 [ 1096.069886][T25046] ? __pfx_vmap+0x10/0x10 [ 1096.069912][T25046] ringbuf_map_alloc+0x3da/0x7f0 [ 1096.069935][T25046] map_create+0x58f/0x1f80 [ 1096.069960][T25046] ? __pfx_map_create+0x10/0x10 [ 1096.069979][T25046] ? __might_fault+0xe3/0x190 [ 1096.069994][T25046] ? __might_fault+0xe3/0x190 [ 1096.070009][T25046] ? __might_fault+0x13b/0x190 [ 1096.070032][T25046] __sys_bpf+0x44d2/0x4de0 [ 1096.070055][T25046] ? __pfx___sys_bpf+0x10/0x10 [ 1096.070075][T25046] ? errseq_sample+0x53/0x70 [ 1096.070090][T25046] ? file_init_path+0x4fe/0x760 [ 1096.070113][T25046] ? do_futex+0x122/0x350 [ 1096.070132][T25046] ? __pfx_do_futex+0x10/0x10 [ 1096.070157][T25046] ? __sys_socket+0xac/0x260 [ 1096.070176][T25046] ? xfd_validate_state+0x61/0x180 [ 1096.070197][T25046] ? __pfx___do_sys_close_range+0x10/0x10 [ 1096.070218][T25046] __x64_sys_bpf+0x78/0xc0 [ 1096.070239][T25046] ? lockdep_hardirqs_on+0x7c/0x110 [ 1096.070259][T25046] do_syscall_64+0xcd/0x490 [ 1096.070281][T25046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.070296][T25046] RIP: 0033:0x7f5c7718eba9 [ 1096.070308][T25046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.070323][T25046] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.070338][T25046] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1096.070347][T25046] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1096.070356][T25046] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1096.070365][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.070373][T25046] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1096.070392][T25046] [ 1098.081139][ T30] audit: type=1800 audit(4294967376.341:93): pid=25075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5269" name="dbroot" dev="configfs" ino=100727 res=0 errno=0 [ 1100.814109][T25128] FAULT_INJECTION: forcing a failure. [ 1100.814109][T25128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.874025][T25128] CPU: 0 UID: 0 PID: 25128 Comm: syz.1.5283 Tainted: G U syzkaller #0 PREEMPT(full) [ 1100.874053][T25128] Tainted: [U]=USER [ 1100.874058][T25128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1100.874071][T25128] Call Trace: [ 1100.874077][T25128] [ 1100.874083][T25128] dump_stack_lvl+0x16c/0x1f0 [ 1100.874118][T25128] should_fail_ex+0x512/0x640 [ 1100.874143][T25128] _copy_from_user+0x2e/0xd0 [ 1100.874161][T25128] do_pages_stat+0x24c/0x820 [ 1100.874188][T25128] ? __pfx_do_pages_stat+0x10/0x10 [ 1100.874230][T25128] ? do_raw_spin_unlock+0x172/0x230 [ 1100.874256][T25128] kernel_move_pages+0xfa8/0x1380 [ 1100.874280][T25128] ? do_futex+0x122/0x350 [ 1100.874299][T25128] ? __pfx_do_futex+0x10/0x10 [ 1100.874317][T25128] ? __pfx_kernel_move_pages+0x10/0x10 [ 1100.874346][T25128] ? __x64_sys_futex+0x1e0/0x4c0 [ 1100.874363][T25128] ? __x64_sys_futex+0x1e9/0x4c0 [ 1100.874384][T25128] ? xfd_validate_state+0x61/0x180 [ 1100.874405][T25128] ? __pfx_do_writev+0x10/0x10 [ 1100.874424][T25128] __x64_sys_move_pages+0xe0/0x1c0 [ 1100.874445][T25128] ? do_syscall_64+0x91/0x490 [ 1100.874466][T25128] ? lockdep_hardirqs_on+0x7c/0x110 [ 1100.874486][T25128] do_syscall_64+0xcd/0x490 [ 1100.874509][T25128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.874523][T25128] RIP: 0033:0x7f900818eba9 [ 1100.874542][T25128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.874557][T25128] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1100.874572][T25128] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 1100.874583][T25128] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 1100.874591][T25128] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 8000000000000000 [ 1100.874601][T25128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.874609][T25128] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1100.874629][T25128] [ 1101.465682][T25137] FAULT_INJECTION: forcing a failure. [ 1101.465682][T25137] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.517319][T25140] vivid-003: ================= START STATUS ================= [ 1101.557869][T25140] vivid-003: Radio HW Seek Mode: Bounded [ 1101.578676][T25137] CPU: 0 UID: 0 PID: 25137 Comm: syz.2.5286 Tainted: G U syzkaller #0 PREEMPT(full) [ 1101.578704][T25137] Tainted: [U]=USER [ 1101.578710][T25137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1101.578719][T25137] Call Trace: [ 1101.578725][T25137] [ 1101.578732][T25137] dump_stack_lvl+0x16c/0x1f0 [ 1101.578759][T25137] should_fail_ex+0x512/0x640 [ 1101.578782][T25137] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1101.578800][T25137] should_failslab+0xc2/0x120 [ 1101.578820][T25137] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1101.578835][T25137] ? idr_replace+0xfa/0x170 [ 1101.578854][T25137] ? mem_cgroup_css_online+0x5c/0x640 [ 1101.578879][T25137] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 1101.578901][T25137] mem_cgroup_css_online+0x5c/0x640 [ 1101.578927][T25137] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 1101.578950][T25137] online_css+0xaf/0x350 [ 1101.578969][T25137] cgroup_apply_control_enable+0x702/0xbb0 [ 1101.578998][T25137] cgroup_mkdir+0x5e7/0x11f0 [ 1101.579023][T25137] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1101.579045][T25137] kernfs_iop_mkdir+0x10e/0x190 [ 1101.579065][T25137] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1101.579086][T25137] vfs_mkdir+0x590/0x8c0 [ 1101.579103][T25137] do_mkdirat+0x304/0x3e0 [ 1101.579121][T25137] ? __pfx_do_mkdirat+0x10/0x10 [ 1101.579148][T25137] ? getname_flags.part.0+0x1c5/0x550 [ 1101.579173][T25137] __x64_sys_mkdir+0xef/0x140 [ 1101.579192][T25137] do_syscall_64+0xcd/0x490 [ 1101.579216][T25137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.579234][T25137] RIP: 0033:0x7f9dda18eba9 [ 1101.579246][T25137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.579261][T25137] RSP: 002b:00007f9ddaf7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1101.579276][T25137] RAX: ffffffffffffffda RBX: 00007f9dda3d6090 RCX: 00007f9dda18eba9 [ 1101.579286][T25137] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1101.579295][T25137] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1101.579304][T25137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.579313][T25137] R13: 00007f9dda3d6128 R14: 00007f9dda3d6090 R15: 00007ffce5d5d1b8 [ 1101.579332][T25137] [ 1101.583786][T25140] vivid-003: Radio Programmable HW Seek: [ 1102.138561][T25151] random: crng reseeded on system resumption [ 1102.312022][T25140] false [ 1102.346016][T25140] vivid-003: RDS Rx I/O Mode: Block I/O [ 1102.390757][T25156] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5287'. [ 1102.441857][T25155] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5287'. [ 1102.543606][T25140] vivid-003: Generate RBDS Instead of RDS: false [ 1102.586852][T25140] vivid-003: RDS Reception: true [ 1102.596914][T25140] vivid-003: RDS Program Type: 0 inactive [ 1102.610647][T25140] vivid-003: RDS PS Name: inactive [ 1102.626594][T25140] vivid-003: RDS Radio Text: inactive [ 1102.642382][T25140] vivid-003: RDS Traffic Announcement: false inactive [ 1102.656177][T25140] vivid-003: RDS Traffic Program: false inactive [ 1102.675540][T25140] vivid-003: RDS Music: false inactive [ 1102.691399][T25140] vivid-003: ================== END STATUS ================== [ 1103.183400][T25178] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1103.326619][T25183] overlayfs: missing 'lowerdir' [ 1103.628662][ T6724] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 1104.649985][T25220] FAULT_INJECTION: forcing a failure. [ 1104.649985][T25220] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.822013][T25220] CPU: 0 UID: 0 PID: 25220 Comm: syz.4.5308 Tainted: G U syzkaller #0 PREEMPT(full) [ 1104.822038][T25220] Tainted: [U]=USER [ 1104.822043][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1104.822052][T25220] Call Trace: [ 1104.822057][T25220] [ 1104.822063][T25220] dump_stack_lvl+0x16c/0x1f0 [ 1104.822089][T25220] should_fail_ex+0x512/0x640 [ 1104.822111][T25220] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1104.822131][T25220] should_failslab+0xc2/0x120 [ 1104.822151][T25220] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1104.822168][T25220] ? sk_prot_alloc+0x60/0x2a0 [ 1104.822186][T25220] sk_prot_alloc+0x60/0x2a0 [ 1104.822202][T25220] sk_alloc+0x36/0xc20 [ 1104.822222][T25220] __vsock_create.constprop.0+0x3c/0xbb0 [ 1104.822241][T25220] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1104.822265][T25220] vsock_create+0x139/0x500 [ 1104.822287][T25220] __sock_create+0x335/0x8d0 [ 1104.822307][T25220] __sys_socket+0x14d/0x260 [ 1104.822324][T25220] ? __pfx___sys_socket+0x10/0x10 [ 1104.822341][T25220] ? xfd_validate_state+0x61/0x180 [ 1104.822365][T25220] ? __task_pid_nr_ns+0x17c/0x500 [ 1104.822389][T25220] __x64_sys_socket+0x72/0xb0 [ 1104.822404][T25220] ? lockdep_hardirqs_on+0x7c/0x110 [ 1104.822425][T25220] do_syscall_64+0xcd/0x490 [ 1104.822447][T25220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.822462][T25220] RIP: 0033:0x7f5c7718eba9 [ 1104.822474][T25220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.822489][T25220] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1104.822504][T25220] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1104.822513][T25220] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1104.822522][T25220] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1104.822531][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.822539][T25220] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1104.822558][T25220] [ 1105.563913][T25242] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 1105.926002][T25253] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1106.026599][T25253] random: crng reseeded on system resumption [ 1106.036380][T25256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1106.116963][T25257] netlink: 'syz.0.5319': attribute type 11 has an invalid length. [ 1106.163573][T25259] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1106.182343][T25260] overlayfs: missing 'lowerdir' [ 1106.751442][ T30] audit: type=1800 audit(4294967385.051:94): pid=25272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5323" name="dbroot" dev="configfs" ino=101829 res=0 errno=0 [ 1107.711106][T25298] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1107.892587][T25310] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1107.939511][T25310] random: crng reseeded on system resumption [ 1109.818593][ T30] audit: type=1800 audit(4294967388.126:95): pid=25367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5345" name="dbroot" dev="configfs" ino=102302 res=0 errno=0 [ 1110.560374][T25381] FAULT_INJECTION: forcing a failure. [ 1110.560374][T25381] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.612709][T25381] CPU: 0 UID: 0 PID: 25381 Comm: syz.4.5349 Tainted: G U syzkaller #0 PREEMPT(full) [ 1110.612737][T25381] Tainted: [U]=USER [ 1110.612743][T25381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1110.612751][T25381] Call Trace: [ 1110.612757][T25381] [ 1110.612764][T25381] dump_stack_lvl+0x16c/0x1f0 [ 1110.612791][T25381] should_fail_ex+0x512/0x640 [ 1110.612814][T25381] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1110.612833][T25381] should_failslab+0xc2/0x120 [ 1110.612853][T25381] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1110.612867][T25381] ? idr_replace+0xfa/0x170 [ 1110.612887][T25381] ? mem_cgroup_css_online+0x5c/0x640 [ 1110.612913][T25381] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 1110.612935][T25381] mem_cgroup_css_online+0x5c/0x640 [ 1110.612961][T25381] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 1110.612983][T25381] online_css+0xaf/0x350 [ 1110.613004][T25381] cgroup_apply_control_enable+0x702/0xbb0 [ 1110.613034][T25381] cgroup_mkdir+0x5e7/0x11f0 [ 1110.613068][T25381] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1110.613092][T25381] kernfs_iop_mkdir+0x10e/0x190 [ 1110.613113][T25381] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1110.613136][T25381] vfs_mkdir+0x590/0x8c0 [ 1110.613152][T25381] do_mkdirat+0x304/0x3e0 [ 1110.613171][T25381] ? __pfx_do_mkdirat+0x10/0x10 [ 1110.613190][T25381] ? getname_flags.part.0+0x1c5/0x550 [ 1110.613215][T25381] __x64_sys_mkdir+0xef/0x140 [ 1110.613232][T25381] do_syscall_64+0xcd/0x490 [ 1110.613256][T25381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.613270][T25381] RIP: 0033:0x7f5c7718eba9 [ 1110.613284][T25381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.613298][T25381] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1110.613313][T25381] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1110.613323][T25381] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1110.613332][T25381] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1110.613341][T25381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.613349][T25381] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1110.613368][T25381] [ 1112.173993][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.180910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.522713][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5362'. [ 1114.239953][T25451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5366'. [ 1114.723020][T25464] input: f as /devices/virtual/input/input58 [ 1114.792905][T25466] FAULT_INJECTION: forcing a failure. [ 1114.792905][T25466] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.958402][T25466] CPU: 0 UID: 0 PID: 25466 Comm: syz.4.5369 Tainted: G U syzkaller #0 PREEMPT(full) [ 1114.958448][T25466] Tainted: [U]=USER [ 1114.958454][T25466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1114.958463][T25466] Call Trace: [ 1114.958469][T25466] [ 1114.958476][T25466] dump_stack_lvl+0x16c/0x1f0 [ 1114.958502][T25466] should_fail_ex+0x512/0x640 [ 1114.958524][T25466] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1114.958545][T25466] should_failslab+0xc2/0x120 [ 1114.958564][T25466] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1114.958581][T25466] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1114.958603][T25466] mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1114.958635][T25466] cgroup_apply_control_enable+0x4b0/0xbb0 [ 1114.958666][T25466] cgroup_mkdir+0x5e7/0x11f0 [ 1114.958697][T25466] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1114.958720][T25466] kernfs_iop_mkdir+0x10e/0x190 [ 1114.958741][T25466] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1114.958762][T25466] vfs_mkdir+0x590/0x8c0 [ 1114.958779][T25466] do_mkdirat+0x304/0x3e0 [ 1114.958797][T25466] ? __pfx_do_mkdirat+0x10/0x10 [ 1114.958817][T25466] ? getname_flags.part.0+0x1c5/0x550 [ 1114.958841][T25466] __x64_sys_mkdir+0xef/0x140 [ 1114.958859][T25466] do_syscall_64+0xcd/0x490 [ 1114.958881][T25466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.958896][T25466] RIP: 0033:0x7f5c7718eba9 [ 1114.958908][T25466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.958922][T25466] RSP: 002b:00007f5c753cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1114.958937][T25466] RAX: ffffffffffffffda RBX: 00007f5c773d6090 RCX: 00007f5c7718eba9 [ 1114.958946][T25466] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1114.958955][T25466] RBP: 00007f5c77211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1114.958964][T25466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.958972][T25466] R13: 00007f5c773d6128 R14: 00007f5c773d6090 R15: 00007fffdcd97548 [ 1114.958991][T25466] [ 1115.820293][T25471] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1116.885948][T25500] FAULT_INJECTION: forcing a failure. [ 1116.885948][T25500] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.996299][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.2.5377 Tainted: G U syzkaller #0 PREEMPT(full) [ 1116.996325][T25500] Tainted: [U]=USER [ 1116.996330][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1116.996339][T25500] Call Trace: [ 1116.996345][T25500] [ 1116.996351][T25500] dump_stack_lvl+0x16c/0x1f0 [ 1116.996386][T25500] should_fail_ex+0x512/0x640 [ 1116.996409][T25500] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1116.996429][T25500] should_failslab+0xc2/0x120 [ 1116.996449][T25500] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1116.996466][T25500] ? __d_alloc+0x32/0xae0 [ 1116.996487][T25500] __d_alloc+0x32/0xae0 [ 1116.996505][T25500] d_alloc_pseudo+0x1c/0xc0 [ 1116.996527][T25500] alloc_file_pseudo+0xcf/0x230 [ 1116.996549][T25500] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1116.996571][T25500] ? alloc_fd+0x471/0x7d0 [ 1116.996589][T25500] sock_alloc_file+0x50/0x210 [ 1116.996605][T25500] __sys_socket+0x1c0/0x260 [ 1116.996622][T25500] ? __pfx___sys_socket+0x10/0x10 [ 1116.996639][T25500] ? xfd_validate_state+0x61/0x180 [ 1116.996659][T25500] ? __pfx_ksys_write+0x10/0x10 [ 1116.996679][T25500] __x64_sys_socket+0x72/0xb0 [ 1116.996695][T25500] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.996715][T25500] do_syscall_64+0xcd/0x490 [ 1116.996738][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.996753][T25500] RIP: 0033:0x7f9dda18eba9 [ 1116.996765][T25500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.996779][T25500] RSP: 002b:00007f9ddaf3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1116.996793][T25500] RAX: ffffffffffffffda RBX: 00007f9dda3d6270 RCX: 00007f9dda18eba9 [ 1116.996803][T25500] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 1116.996812][T25500] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1116.996820][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.996828][T25500] R13: 00007f9dda3d6308 R14: 00007f9dda3d6270 R15: 00007ffce5d5d1b8 [ 1116.996847][T25500] [ 1117.844691][T25505] FAULT_INJECTION: forcing a failure. [ 1117.844691][T25505] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.981285][T25505] CPU: 0 UID: 0 PID: 25505 Comm: syz.2.5378 Tainted: G U syzkaller #0 PREEMPT(full) [ 1117.981312][T25505] Tainted: [U]=USER [ 1117.981317][T25505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1117.981327][T25505] Call Trace: [ 1117.981332][T25505] [ 1117.981339][T25505] dump_stack_lvl+0x16c/0x1f0 [ 1117.981366][T25505] should_fail_ex+0x512/0x640 [ 1117.981390][T25505] ? __kmalloc_noprof+0xbf/0x510 [ 1117.981409][T25505] ? constrain_params_by_rules+0x175/0xca0 [ 1117.981426][T25505] should_failslab+0xc2/0x120 [ 1117.981446][T25505] __kmalloc_noprof+0xd2/0x510 [ 1117.981462][T25505] ? unwind_get_return_address+0x59/0xa0 [ 1117.981482][T25505] constrain_params_by_rules+0x175/0xca0 [ 1117.981502][T25505] ? stack_trace_save+0x8e/0xc0 [ 1117.981521][T25505] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1117.981542][T25505] ? __kasan_kmalloc+0xaa/0xb0 [ 1117.981557][T25505] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1117.981573][T25505] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1117.981590][T25505] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1117.981613][T25505] ? snd_interval_refine+0x2fa/0x580 [ 1117.981636][T25505] snd_pcm_hw_refine+0x7de/0xad0 [ 1117.981656][T25505] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1117.981681][T25505] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1117.981699][T25505] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 1117.981720][T25505] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1117.981737][T25505] ? __asan_memset+0x23/0x50 [ 1117.981750][T25505] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1117.981771][T25505] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1117.981798][T25505] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1117.981830][T25505] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1117.981850][T25505] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1117.981869][T25505] ? hook_file_ioctl_common+0x145/0x410 [ 1117.981889][T25505] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1117.981907][T25505] ? __fget_files+0x20e/0x3c0 [ 1117.981926][T25505] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1117.981944][T25505] __x64_sys_ioctl+0x18e/0x210 [ 1117.981968][T25505] do_syscall_64+0xcd/0x490 [ 1117.981992][T25505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.982006][T25505] RIP: 0033:0x7f9dda18eba9 [ 1117.982019][T25505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.982034][T25505] RSP: 002b:00007f9ddafa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.982049][T25505] RAX: ffffffffffffffda RBX: 00007f9dda3d5fa0 RCX: 00007f9dda18eba9 [ 1117.982058][T25505] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 1117.982067][T25505] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1117.982076][T25505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.982085][T25505] R13: 00007f9dda3d6038 R14: 00007f9dda3d5fa0 R15: 00007ffce5d5d1b8 [ 1117.982105][T25505] [ 1119.621296][T25523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1120.313091][T25536] netlink: 540 bytes leftover after parsing attributes in process `syz.2.5386'. [ 1121.574078][T25555] tipc: Started in network mode [ 1121.581664][T25555] tipc: Node identity ee00, cluster identity 4711 [ 1121.611431][T25555] tipc: Node number set to 60928 [ 1121.630048][T25565] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1122.152511][T25577] overlayfs: missing 'lowerdir' [ 1122.847235][T25583] FAULT_INJECTION: forcing a failure. [ 1122.847235][T25583] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.042273][T25583] CPU: 0 UID: 0 PID: 25583 Comm: syz.0.5396 Tainted: G U syzkaller #0 PREEMPT(full) [ 1123.042301][T25583] Tainted: [U]=USER [ 1123.042307][T25583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1123.042316][T25583] Call Trace: [ 1123.042322][T25583] [ 1123.042328][T25583] dump_stack_lvl+0x16c/0x1f0 [ 1123.042355][T25583] should_fail_ex+0x512/0x640 [ 1123.042378][T25583] ? fs_reclaim_acquire+0xae/0x150 [ 1123.042402][T25583] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1123.042424][T25583] should_failslab+0xc2/0x120 [ 1123.042443][T25583] __kmalloc_noprof+0xd2/0x510 [ 1123.042465][T25583] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1123.042495][T25583] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1123.042515][T25583] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1123.042552][T25583] ? do_raw_spin_lock+0x12c/0x2b0 [ 1123.042579][T25583] tomoyo_file_open+0x6b/0x90 [ 1123.042595][T25583] security_file_open+0x84/0x1e0 [ 1123.042615][T25583] do_dentry_open+0x596/0x1530 [ 1123.042649][T25583] vfs_open+0x82/0x3f0 [ 1123.042673][T25583] path_openat+0x1de4/0x2cb0 [ 1123.042697][T25583] ? __pfx_path_openat+0x10/0x10 [ 1123.042720][T25583] do_filp_open+0x20b/0x470 [ 1123.042738][T25583] ? __pfx_do_filp_open+0x10/0x10 [ 1123.042768][T25583] ? alloc_fd+0x471/0x7d0 [ 1123.042789][T25583] do_sys_openat2+0x11b/0x1d0 [ 1123.042810][T25583] ? __pfx_do_sys_openat2+0x10/0x10 [ 1123.042832][T25583] ? find_held_lock+0x2b/0x80 [ 1123.042851][T25583] __x64_sys_openat+0x174/0x210 [ 1123.042874][T25583] ? __pfx___x64_sys_openat+0x10/0x10 [ 1123.042903][T25583] do_syscall_64+0xcd/0x490 [ 1123.042927][T25583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.042942][T25583] RIP: 0033:0x7fb8d018eba9 [ 1123.042955][T25583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.042969][T25583] RSP: 002b:00007fb8d0f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1123.042984][T25583] RAX: ffffffffffffffda RBX: 00007fb8d03d5fa0 RCX: 00007fb8d018eba9 [ 1123.042994][T25583] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1123.043003][T25583] RBP: 00007fb8d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1123.043011][T25583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.043020][T25583] R13: 00007fb8d03d6038 R14: 00007fb8d03d5fa0 R15: 00007ffcb8d08098 [ 1123.043038][T25583] [ 1123.043046][T25583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1123.445593][T25587] vivid-003: ================= START STATUS ================= [ 1123.464484][T25587] vivid-003: Radio HW Seek Mode: Bounded [ 1123.474545][T25587] vivid-003: Radio Programmable HW Seek: false [ 1123.491606][T25587] vivid-003: RDS Rx I/O Mode: Block I/O [ 1123.502052][T25587] vivid-003: Generate RBDS Instead of RDS: false [ 1123.523852][T25588] vivid-007: ================= START STATUS ================= [ 1123.544755][T25587] vivid-003: RDS Reception: true [ 1123.549718][T25587] vivid-003: RDS Program Type: 0 inactive [ 1123.567806][T25588] vivid-007: Generate PTS: true [ 1123.572692][T25588] vivid-007: Generate SCR: true [ 1123.596092][T25587] vivid-003: RDS PS Name: inactive [ 1123.602589][T25588] tpg source WxH: 320x240 (Y'CbCr) [ 1123.618654][T25587] vivid-003: RDS Radio Text: inactive [ 1123.634455][T25588] tpg field: 1 [ 1123.637834][T25588] tpg crop: (0,0)/320x240 [ 1123.664563][T25587] vivid-003: RDS Traffic Announcement: false inactive [ 1123.709874][T25588] tpg compose: (0,0)/320x240 [ 1123.735754][T25587] vivid-003: RDS Traffic Program: false inactive [ 1123.764072][T25588] tpg colorspace: 8 [ 1123.769369][T25588] tpg transfer function: 0/0 [ 1123.784479][T25587] vivid-003: RDS Music: false inactive [ 1123.810035][T25588] tpg Y'CbCr encoding: 0/0 [ 1123.833188][T25587] vivid-003: ================== END STATUS ================== [ 1123.865342][T25588] tpg quantization: 0/0 [ 1123.876523][T25588] tpg RGB range: 0/2 [ 1123.890617][T25588] vivid-007: ================== END STATUS ================== [ 1124.485514][ T30] audit: type=1800 audit(4294967402.875:96): pid=25602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5400" name="dbroot" dev="configfs" ino=103683 res=0 errno=0 [ 1125.521511][T25623] random: crng reseeded on system resumption [ 1125.588055][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1126.048557][T25630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1126.436067][T25639] input: jJǸ-9%vJ86 as /devices/virtual/input/input59 [ 1126.454836][T25630] overlayfs: missing 'lowerdir' [ 1126.771579][T25639] usb usb24: usbfs: process 25639 (syz.0.5408) did not claim interface 0 before use [ 1127.726311][ T30] audit: type=1800 audit(4294967406.110:97): pid=25654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5413" name="dbroot" dev="configfs" ino=104007 res=0 errno=0 [ 1127.759674][T25650] hugetlbfs: syz.4.5412 (25650): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1128.312984][T25661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1128.508534][T25661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1129.663003][T25688] vivid-007: ================= START STATUS ================= [ 1129.699181][T25688] vivid-007: Generate PTS: true [ 1129.719426][T25688] vivid-007: Generate SCR: true [ 1129.754702][T25688] tpg source WxH: 320x240 (Y'CbCr) [ 1129.764752][T25688] tpg field: 1 [ 1129.786942][T25688] tpg crop: (0,0)/320x240 [ 1129.791278][T25688] tpg compose: (0,0)/320x240 [ 1129.831359][T25688] tpg colorspace: 8 [ 1129.874764][T25688] tpg transfer function: 0/0 [ 1129.879368][T25688] tpg Y'CbCr encoding: 0/0 [ 1129.883760][T25688] tpg quantization: 0/0 [ 1129.932630][T25688] tpg RGB range: 0/2 [ 1129.940767][T25688] vivid-007: ================== END STATUS ================== [ 1130.125881][T25696] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1130.734659][T25706] FAULT_INJECTION: forcing a failure. [ 1130.734659][T25706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.879765][T25706] CPU: 0 UID: 0 PID: 25706 Comm: syz.2.5426 Tainted: G U syzkaller #0 PREEMPT(full) [ 1130.879791][T25706] Tainted: [U]=USER [ 1130.879796][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1130.879805][T25706] Call Trace: [ 1130.879811][T25706] [ 1130.879819][T25706] dump_stack_lvl+0x16c/0x1f0 [ 1130.879844][T25706] should_fail_ex+0x512/0x640 [ 1130.879873][T25706] _copy_from_user+0x2e/0xd0 [ 1130.879889][T25706] do_fcntl+0xba2/0x15a0 [ 1130.879910][T25706] ? __pfx_do_fcntl+0x10/0x10 [ 1130.879934][T25706] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1130.879951][T25706] __x64_sys_fcntl+0x163/0x200 [ 1130.879976][T25706] do_syscall_64+0xcd/0x490 [ 1130.879999][T25706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.880014][T25706] RIP: 0033:0x7f9dda18eba9 [ 1130.880027][T25706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.880041][T25706] RSP: 002b:00007f9ddaf7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1130.880055][T25706] RAX: ffffffffffffffda RBX: 00007f9dda3d6090 RCX: 00007f9dda18eba9 [ 1130.880065][T25706] RDX: 0000000000000008 RSI: 0000000000000026 RDI: 8000000000000001 [ 1130.880074][T25706] RBP: 00007f9ddaf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.880083][T25706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.880092][T25706] R13: 00007f9dda3d6128 R14: 00007f9dda3d6090 R15: 00007ffce5d5d1b8 [ 1130.880110][T25706] [ 1133.017347][ T30] audit: type=1800 audit(4294967411.445:98): pid=25738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5434" name="dbroot" dev="configfs" ino=104316 res=0 errno=0 [ 1134.387925][T25762] vivid-007: ================= START STATUS ================= [ 1134.513746][T25762] vivid-007: Generate PTS: true [ 1134.579088][T25762] vivid-007: Generate SCR: true [ 1134.643314][T25762] tpg source WxH: 320x240 (Y'CbCr) [ 1134.648461][T25762] tpg field: 1 [ 1134.651812][T25762] tpg crop: (0,0)/320x240 [ 1134.937064][T25762] tpg compose: (0,0)/320x240 [ 1135.026857][T25762] tpg colorspace: 8 [ 1135.068596][T25762] tpg transfer function: 0/0 [ 1135.129958][T25762] tpg Y'CbCr encoding: 0/0 [ 1135.251378][T25762] tpg quantization: 0/0 [ 1135.285277][T25762] tpg RGB range: 0/2 [ 1135.348990][T25762] vivid-007: ================== END STATUS ================== [ 1136.438154][ T30] audit: type=1800 audit(4294967414.881:99): pid=25800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5447" name="dbroot" dev="configfs" ino=104653 res=0 errno=0 [ 1138.634312][T25835] FAULT_INJECTION: forcing a failure. [ 1138.634312][T25835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.687833][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.1.5457 Tainted: G U syzkaller #0 PREEMPT(full) [ 1138.687864][T25835] Tainted: [U]=USER [ 1138.687870][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1138.687878][T25835] Call Trace: [ 1138.687884][T25835] [ 1138.687890][T25835] dump_stack_lvl+0x16c/0x1f0 [ 1138.687916][T25835] should_fail_ex+0x512/0x640 [ 1138.687942][T25835] _copy_to_user+0x32/0xd0 [ 1138.687959][T25835] simple_read_from_buffer+0xcb/0x170 [ 1138.687976][T25835] proc_fail_nth_read+0x197/0x240 [ 1138.687993][T25835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1138.688009][T25835] ? rw_verify_area+0xcf/0x6c0 [ 1138.688023][T25835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1138.688038][T25835] vfs_read+0x1e4/0xcf0 [ 1138.688062][T25835] ? __pfx_vfs_read+0x10/0x10 [ 1138.688078][T25835] ? do_sys_openat2+0x157/0x1d0 [ 1138.688099][T25835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1138.688123][T25835] ? hook_file_ioctl_common+0x145/0x410 [ 1138.688148][T25835] ksys_read+0x12a/0x250 [ 1138.688164][T25835] ? __pfx_ksys_read+0x10/0x10 [ 1138.688180][T25835] ? security_file_ioctl+0x229/0x240 [ 1138.688202][T25835] do_syscall_64+0xcd/0x490 [ 1138.688226][T25835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.688241][T25835] RIP: 0033:0x7f900818d5bc [ 1138.688253][T25835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1138.688267][T25835] RSP: 002b:00007f9008feb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.688282][T25835] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818d5bc [ 1138.688292][T25835] RDX: 000000000000000f RSI: 00007f9008feb0a0 RDI: 0000000000000002 [ 1138.688301][T25835] RBP: 00007f9008feb090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.688310][T25835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.688318][T25835] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1138.688336][T25835] [ 1139.235192][T25840] vivid-007: ================= START STATUS ================= [ 1139.256494][T25840] vivid-007: Generate PTS: true [ 1139.270887][T25840] vivid-007: Generate SCR: true [ 1139.310543][T25840] tpg source WxH: 320x240 (Y'CbCr) [ 1139.315680][T25840] tpg field: 1 [ 1139.319028][T25840] tpg crop: (0,0)/320x240 [ 1139.393796][T25840] tpg compose: (0,0)/320x240 [ 1139.429001][T25840] tpg colorspace: 8 [ 1139.479812][T25840] tpg transfer function: 0/0 [ 1139.498205][T25840] tpg Y'CbCr encoding: 0/0 [ 1139.523585][T25840] tpg quantization: 0/0 [ 1139.527779][T25840] tpg RGB range: 0/2 [ 1139.607764][T25840] vivid-007: ================== END STATUS ================== [ 1141.000911][T25877] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1141.096996][T25878] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 1141.122406][T25877] random: crng reseeded on system resumption [ 1142.025854][T25894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5464'. [ 1143.141761][T25893] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1143.470358][T25913] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1143.490434][T25884] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 1143.865379][T25913] overlayfs: missing 'lowerdir' [ 1144.870461][T25937] Format for adding new port is "id [perm_addr]" (uint MAC). [ 1145.024494][T25940] vivid-007: ================= START STATUS ================= [ 1145.038693][T25941] FAULT_INJECTION: forcing a failure. [ 1145.038693][T25941] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.068385][T25940] vivid-007: Generate PTS: true [ 1145.083220][T25940] vivid-007: Generate SCR: true [ 1145.088092][T25940] tpg source WxH: 320x240 (Y'CbCr) [ 1145.133844][T25940] tpg field: 1 [ 1145.137235][T25940] tpg crop: (0,0)/320x240 [ 1145.141541][T25940] tpg compose: (0,0)/320x240 [ 1145.155393][T25941] CPU: 0 UID: 0 PID: 25941 Comm: syz.2.5475 Tainted: G U syzkaller #0 PREEMPT(full) [ 1145.155417][T25941] Tainted: [U]=USER [ 1145.155423][T25941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1145.155433][T25941] Call Trace: [ 1145.155439][T25941] [ 1145.155445][T25941] dump_stack_lvl+0x16c/0x1f0 [ 1145.155471][T25941] should_fail_ex+0x512/0x640 [ 1145.155494][T25941] ? __kmalloc_noprof+0xbf/0x510 [ 1145.155513][T25941] ? ops_init+0x77/0x5f0 [ 1145.155534][T25941] should_failslab+0xc2/0x120 [ 1145.155554][T25941] __kmalloc_noprof+0xd2/0x510 [ 1145.155570][T25941] ? lockdep_init_map_type+0x5c/0x280 [ 1145.155594][T25941] ops_init+0x77/0x5f0 [ 1145.155618][T25941] setup_net+0x10f/0x380 [ 1145.155629][T25941] ? lockdep_init_map_type+0x5c/0x280 [ 1145.155649][T25941] ? __pfx_setup_net+0x10/0x10 [ 1145.155663][T25941] ? debug_mutex_init+0x37/0x70 [ 1145.155679][T25941] copy_net_ns+0x2a6/0x5f0 [ 1145.155696][T25941] create_new_namespaces+0x3ea/0xa90 [ 1145.155718][T25941] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1145.155736][T25941] ksys_unshare+0x45b/0xa40 [ 1145.155756][T25941] ? __pfx_ksys_unshare+0x10/0x10 [ 1145.155777][T25941] ? xfd_validate_state+0x61/0x180 [ 1145.155803][T25941] __x64_sys_unshare+0x31/0x40 [ 1145.155822][T25941] do_syscall_64+0xcd/0x490 [ 1145.155845][T25941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.155860][T25941] RIP: 0033:0x7f9dda18eba9 [ 1145.155872][T25941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.155886][T25941] RSP: 002b:00007f9ddaf7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1145.155900][T25941] RAX: ffffffffffffffda RBX: 00007f9dda3d6090 RCX: 00007f9dda18eba9 [ 1145.155910][T25941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1145.155918][T25941] RBP: 00007f9dda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1145.155927][T25941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.155935][T25941] R13: 00007f9dda3d6128 R14: 00007f9dda3d6090 R15: 00007ffce5d5d1b8 [ 1145.155954][T25941] [ 1145.602007][T25940] tpg colorspace: 8 [ 1145.605827][T25940] tpg transfer function: 0/0 [ 1145.610400][T25940] tpg Y'CbCr encoding: 0/0 [ 1145.633158][T25940] tpg quantization: 0/0 [ 1145.643213][T25940] tpg RGB range: 0/2 [ 1145.647125][T25940] vivid-007: ================== END STATUS ================== [ 1146.401335][ T6724] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1147.338806][T25992] input: f as /devices/virtual/input/input62 [ 1147.516884][T25997] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1147.571857][T25997] random: crng reseeded on system resumption [ 1148.477419][ T6724] Bluetooth: hci2: command 0x0c1a tx timeout [ 1149.091497][T26023] ================================================================== [ 1149.091510][T26023] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 1149.091535][T26023] Write of size 8 at addr ffffc90003808400 by task syz.1.5493/26023 [ 1149.091547][T26023] [ 1149.091557][T26023] CPU: 0 UID: 0 PID: 26023 Comm: syz.1.5493 Tainted: G U syzkaller #0 PREEMPT(full) [ 1149.091578][T26023] Tainted: [U]=USER [ 1149.091583][T26023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1149.091592][T26023] Call Trace: [ 1149.091598][T26023] [ 1149.091603][T26023] dump_stack_lvl+0x116/0x1f0 [ 1149.091626][T26023] print_report+0xcd/0x630 [ 1149.091645][T26023] ? __virt_addr_valid+0x81/0x610 [ 1149.091665][T26023] ? sys_imageblit+0x1a6f/0x1e60 [ 1149.091680][T26023] kasan_report+0xe0/0x110 [ 1149.091705][T26023] ? sys_imageblit+0x1a6f/0x1e60 [ 1149.091723][T26023] sys_imageblit+0x1a6f/0x1e60 [ 1149.091743][T26023] ? __pfx_sys_imageblit+0x10/0x10 [ 1149.091759][T26023] ? kasan_save_stack+0x42/0x60 [ 1149.091777][T26023] ? lock_acquire+0x179/0x350 [ 1149.091797][T26023] ? __page_table_check_ptes_set+0x1ae/0x420 [ 1149.091814][T26023] ? find_held_lock+0x2b/0x80 [ 1149.091827][T26023] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1149.091845][T26023] ? pfn_valid+0x26a/0x4d0 [ 1149.091866][T26023] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1149.091888][T26023] cw_putcs+0x917/0xbb0 [ 1149.091906][T26023] ? __pfx_cw_putcs+0x10/0x10 [ 1149.091919][T26023] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 1149.091941][T26023] ? fb_get_color_depth+0x120/0x250 [ 1149.091961][T26023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.091983][T26023] ? __pfx_cw_putcs+0x10/0x10 [ 1149.091996][T26023] fbcon_putcs+0x384/0x4a0 [ 1149.092015][T26023] do_update_region+0x2e6/0x3f0 [ 1149.092033][T26023] invert_screen+0x1e4/0x590 [ 1149.092053][T26023] ? __pfx_invert_screen+0x10/0x10 [ 1149.092072][T26023] ? __pfx_complement_pos+0x10/0x10 [ 1149.092093][T26023] ? vc_do_resize+0x24d/0x10e0 [ 1149.092111][T26023] ? __vmalloc_node_noprof+0xad/0xf0 [ 1149.092125][T26023] clear_selection+0x59/0x70 [ 1149.092142][T26023] vc_do_resize+0xd9b/0x10e0 [ 1149.092163][T26023] ? __pfx_fb_match_mode+0x10/0x10 [ 1149.092186][T26023] ? __pfx_vc_do_resize+0x10/0x10 [ 1149.092205][T26023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.092228][T26023] fbcon_modechanged+0x334/0x700 [ 1149.092247][T26023] rotate_store+0x258/0x2f0 [ 1149.092266][T26023] ? __pfx_rotate_store+0x10/0x10 [ 1149.092285][T26023] dev_attr_store+0x58/0x80 [ 1149.092299][T26023] ? __pfx_dev_attr_store+0x10/0x10 [ 1149.092312][T26023] sysfs_kf_write+0xf2/0x150 [ 1149.092332][T26023] kernfs_fop_write_iter+0x354/0x510 [ 1149.092345][T26023] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1149.092361][T26023] vfs_write+0x7d0/0x11d0 [ 1149.092378][T26023] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1149.092393][T26023] ? __pfx___mutex_lock+0x10/0x10 [ 1149.092415][T26023] ? __pfx_vfs_write+0x10/0x10 [ 1149.092435][T26023] ksys_write+0x12a/0x250 [ 1149.092451][T26023] ? __pfx_ksys_write+0x10/0x10 [ 1149.092469][T26023] do_syscall_64+0xcd/0x490 [ 1149.092492][T26023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.092507][T26023] RIP: 0033:0x7f900818eba9 [ 1149.092519][T26023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.092534][T26023] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1149.092549][T26023] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 1149.092560][T26023] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 1149.092569][T26023] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1149.092579][T26023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.092588][T26023] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1149.092602][T26023] [ 1149.092607][T26023] [ 1149.092611][T26023] The buggy address belongs to a vmalloc virtual mapping [ 1149.092623][T26023] Memory state around the buggy address: [ 1149.092631][T26023] ffffc90003808300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1149.092642][T26023] ffffc90003808380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1149.092652][T26023] >ffffc90003808400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1149.092661][T26023] ^ [ 1149.092669][T26023] ffffc90003808480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1149.092680][T26023] ffffc90003808500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1149.092696][T26023] ================================================================== [ 1149.107475][T26023] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1149.107491][T26023] CPU: 0 UID: 0 PID: 26023 Comm: syz.1.5493 Tainted: G U syzkaller #0 PREEMPT(full) [ 1149.107513][T26023] Tainted: [U]=USER [ 1149.107519][T26023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1149.107529][T26023] Call Trace: [ 1149.107534][T26023] [ 1149.107541][T26023] dump_stack_lvl+0x3d/0x1f0 [ 1149.107566][T26023] vpanic+0x6e8/0x7a0 [ 1149.107587][T26023] ? __pfx_vpanic+0x10/0x10 [ 1149.107606][T26023] ? __pfx_vprintk_emit+0x10/0x10 [ 1149.107623][T26023] ? sys_imageblit+0x1a6f/0x1e60 [ 1149.107639][T26023] panic+0xca/0xd0 [ 1149.107658][T26023] ? __pfx_panic+0x10/0x10 [ 1149.107677][T26023] ? sys_imageblit+0x1a6f/0x1e60 [ 1149.107699][T26023] ? preempt_schedule_common+0x44/0xc0 [ 1149.107720][T26023] ? preempt_schedule_thunk+0x16/0x30 [ 1149.107742][T26023] check_panic_on_warn+0xab/0xb0 [ 1149.107763][T26023] end_report+0x107/0x170 [ 1149.107781][T26023] kasan_report+0xee/0x110 [ 1149.107800][T26023] ? sys_imageblit+0x1a6f/0x1e60 [ 1149.107817][T26023] sys_imageblit+0x1a6f/0x1e60 [ 1149.107835][T26023] ? __pfx_sys_imageblit+0x10/0x10 [ 1149.107850][T26023] ? kasan_save_stack+0x42/0x60 [ 1149.107867][T26023] ? lock_acquire+0x179/0x350 [ 1149.107886][T26023] ? __page_table_check_ptes_set+0x1ae/0x420 [ 1149.107903][T26023] ? find_held_lock+0x2b/0x80 [ 1149.107916][T26023] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1149.107933][T26023] ? pfn_valid+0x26a/0x4d0 [ 1149.107955][T26023] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1149.107978][T26023] cw_putcs+0x917/0xbb0 [ 1149.107995][T26023] ? __pfx_cw_putcs+0x10/0x10 [ 1149.108008][T26023] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 1149.108031][T26023] ? fb_get_color_depth+0x120/0x250 [ 1149.108050][T26023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.108073][T26023] ? __pfx_cw_putcs+0x10/0x10 [ 1149.108085][T26023] fbcon_putcs+0x384/0x4a0 [ 1149.108105][T26023] do_update_region+0x2e6/0x3f0 [ 1149.108123][T26023] invert_screen+0x1e4/0x590 [ 1149.108143][T26023] ? __pfx_invert_screen+0x10/0x10 [ 1149.108162][T26023] ? __pfx_complement_pos+0x10/0x10 [ 1149.108182][T26023] ? vc_do_resize+0x24d/0x10e0 [ 1149.108201][T26023] ? __vmalloc_node_noprof+0xad/0xf0 [ 1149.108215][T26023] clear_selection+0x59/0x70 [ 1149.108233][T26023] vc_do_resize+0xd9b/0x10e0 [ 1149.108254][T26023] ? __pfx_fb_match_mode+0x10/0x10 [ 1149.108276][T26023] ? __pfx_vc_do_resize+0x10/0x10 [ 1149.108294][T26023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.108317][T26023] fbcon_modechanged+0x334/0x700 [ 1149.108338][T26023] rotate_store+0x258/0x2f0 [ 1149.108357][T26023] ? __pfx_rotate_store+0x10/0x10 [ 1149.108376][T26023] dev_attr_store+0x58/0x80 [ 1149.108391][T26023] ? __pfx_dev_attr_store+0x10/0x10 [ 1149.108405][T26023] sysfs_kf_write+0xf2/0x150 [ 1149.108421][T26023] kernfs_fop_write_iter+0x354/0x510 [ 1149.108435][T26023] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1149.108451][T26023] vfs_write+0x7d0/0x11d0 [ 1149.108467][T26023] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1149.108482][T26023] ? __pfx___mutex_lock+0x10/0x10 [ 1149.108503][T26023] ? __pfx_vfs_write+0x10/0x10 [ 1149.108525][T26023] ksys_write+0x12a/0x250 [ 1149.108541][T26023] ? __pfx_ksys_write+0x10/0x10 [ 1149.108560][T26023] do_syscall_64+0xcd/0x490 [ 1149.108582][T26023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.108597][T26023] RIP: 0033:0x7f900818eba9 [ 1149.108609][T26023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.108624][T26023] RSP: 002b:00007f9008feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1149.108639][T26023] RAX: ffffffffffffffda RBX: 00007f90083d5fa0 RCX: 00007f900818eba9 [ 1149.108650][T26023] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 1149.108659][T26023] RBP: 00007f9008211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1149.108669][T26023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.108679][T26023] R13: 00007f90083d6038 R14: 00007f90083d5fa0 R15: 00007ffd81246ed8 [ 1149.108736][T26023] [ 1149.108795][T26023] Kernel Offset: disabled