last executing test programs: 5.607779085s ago: executing program 0 (id=1268): rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) ioperm$auto(0x3, 0xe, 0x2000000000000149) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x2, 0x1000000000001) read$auto_regulator_summary_fops_(r2, &(0x7f0000000200)=""/166, 0xa6) bpf$auto(0x40000000, 0x0, 0x2000096) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) getpid() mincore$auto(0x1000, 0x20000000008005, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 5.271585821s ago: executing program 1 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r1, 0x1b, 0x70bd26, 0x25dfcbfc, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x11, 0x0, 0x1, [@nested={0x10, 0xf2, 0x0, 0x1, [@typed={0xc, 0x88, 0x0, 0x0, @u64=0xfffffffffffffffd}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_HASH={0x0, 0xb, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000300), r0) sendmsg$auto_IEEE802154_LIST_PHY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9162094ff04a493d79a44fc65e4a3b30"}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x37}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x804) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop14\x00', 0x600, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0)=0xffffffffffffffff, 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x7, 0x7}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0x4, 0x101, 0x0, 0x1c) ioctl$auto(r5, 0x541b, r5) fsconfig$auto_FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='[\xd1\x00', &(0x7f0000000100)="fe8460949bbee7031d2210d6faba8a69f5f6351c9b62101ae9c19935347c4da0495672db58ae561a9634bce1a72cc764b2f12d5f18c19743f22e6d6bce7f144cca379bfca70b6fe9d1828d6e438131a8c48cc3e5685b462d3715d412b038b44a61806cd3425fecfa38d3e918d459d38fa111b69e5f58c642953b4d8f89de1f3d4ef00fb771034f40c7636a52d1233b31f72ad39d35f2eb24696365bde28107b5c7c3aaa7b694a15a825ddaee98a22a4a1d851049372592e331470f461ab233a480fe132430c0b118a4a40794b467", 0x9) 4.99559658s ago: executing program 1 (id=1271): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x8, 0x5ad2, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab40, 0x0) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r1, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 4.495189853s ago: executing program 2 (id=1272): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop3/queue/iostats\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x200000, 0x0) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000000c0)="b8c17e87cbb90249a222c92ca3fb4df0264f41377ba45c5c8038b8c56f0d719e8c19ef7f3bdda8d6667503c02a31bb4c901c") sendfile$auto(r1, r0, 0x0, 0x7) 4.310883164s ago: executing program 2 (id=1274): openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x901064ae, 0x4) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0xe) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) gettid() msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000340)={{0x687c, 0xffffffffffffffff, 0x0, 0x7f, 0x3, 0xa8c, 0xf001}, &(0x7f00000002c0)=0x3, &(0x7f0000000300)=0xe, 0xffffffffffffffff, 0x80, 0xab, 0xfffffffffffffe01, 0x0, 0x1, 0x7f, 0x80, @raw=0x4}) getpgid(0xffffffffffffffff) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000480)={{0x0, 0xee00, 0xffffffffffffffff, 0x1, 0x5625, 0x4f9d07ea, 0x6}, 0x40, 0x0, 0x5, 0x7, @inferred, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f00000003c0), &(0x7f0000000840)="3e7f59411a538f6f57015cd308e416cab59c732094a8d1e26f89f93ed1804de34b27298906fe29797c3c35a360b40c788ea71367460fbcc24b8ddf9e04ef8345ccb36d449788f613c795031915ed028b88ed721388adcd0e63d14bea40135ca6899398db980c00228f0327df443d3773a4deaa90f61dcdd4372386dc7bb747cb89ba726368a7c152be352a744dfb527a0a22e0d4c8ab7cda9e193cdaa18194016ea1adf5e51eab98f09d43ee3feea7cb9090be1d8b4371fefc1bbd79d8571edf7d988d19cd285f50b0341da85e1a39c295014aa565efd7b46f7e4efe12a2d5d0e72be385e1d2bac15aa55f304033f7a88e5ba29fe1b37f929e0b9ebfdd96ad2a48a7716f469a383c522a0e63436deb3f82d22a5f29b9076934d7190d4f113ab7746440ba1e087e42845cc3dfa37097a2c49ea71175532dfff6cff6c251fcdb4382952df81a4dcdebff622fb4ed62e4273c8875367d337655f50d09c5a7f0894fe5830f215a13b3d9907dd2347b507d3d8749b11327f1470cba87da6400561338de3ad7910a53eb7c0f759dd9cc6df22a79bf91f34a9e47f26b06a1dc53fac0357e45271659037291d4bc87c8873d2e5acb11f6fecfd4200033f345c3b9ccf3043e070438e2d26b43548fe72363db20f350938f3e8df88eea67be38d1a03895002c1531cbd96340e736c524523bb3a3de59c0ee63401bc9fa2575deaeca71f934e22e786ef73aea265c7aefb1bd44d27b1c9d22d523c95c24bd3c24c4aae69de197483d85733ede973507dc7198dedcb01d7bc89f392b5f28939fdc489603db93198bcb11098dd8f259abac28d6bd2344a6e7fd40f65457e69e399b7d76e42e22a795c98f8a0ca2cd5651e112a9beba3eeb59a3a3ca2cf622628abba3b5c834c965b1d3b812516bc448ef2a3a180dcea2e0f1a21da1c715370aef14a2c950b2bedee703297b41b20e876f1fb6ca56864923f159afc32712d66320a7c8dce3e4b8ee63ec8e0bd0f7af035ad28a01f13f97e3e897fb55afa6a266da6c62daaaa6aaaec2f7f7e64e4a4c1f913285ccf2b2a0230ce9f977563ede0072a0c6d4d0b5118006b6d382ecb3b99769641e9d723d8ac4a04b03b16938e6411af3c808dc244f14a9b6effd82190c58dbe583dfe4a832e3e1eea3754bf34d158306ef146eafc3dc0101a971f3ecb9cdf3cf1c7b8dac6aefbc2bacc4882076fef86b8abe83e76cec175744da2e90aa11ac9cdfeb6124b1f5d1f5f3499176d7a56f5f3124e4752fa22c14c2ac486e7a7f256a5f144c6af9670dc2490b405062933fb27c36f45150380deabd6a6fb215993aa30205ad78ee47531e805cf196a71c9134c7a653a56ccd3212b4c37600a253355423195a216c02a077148052ddb137debfd3e0152a1dd2ba7aa24e412cb51804b438cfcdd5206940b542962d40b552c06e86808d2831e64a2343fdeae8139b883b2703032b8022760485a8a2ece6addd2d1dea91767c91c9d82dd51cac8d76293d56a329cf74e3a4e843e78b6d80ca90ac85bc74e5d44714acc707b53329133ad641a3b74c0883ca6542c43aee122faca29a8e75c18e98672a22e7afaf7df1eda929cf91ff040a0fed7b0d37524ee6367146c58843bbf9335769312829acde81e1f710009493ab6acb4ded0b7102195b6e0062efe08484321eccd6e433aa0d4067883a5a39f738354de111c156514e35b71ae633d0208411e3a88dffbfecf8fda3de85619191c571d6dce0b999622c0fd909eb4e23861dd6588a65eb1625a16119d8e0aeb70a0f75d71c69647837a52ca67e88828bb3076d693083483bc825717738dc06d74b2240fae76a0fc04b334250170be8bc19e30f040f569f52ef417f672e0f2a28596528c42edd7bbf1268e28b18014ad37e36da9cce9232d78d11fd1679786f1508e1310d241d4693339cb300aa1258c9cc0e399de72e78f4867b93ca3f0cccff862ee46adc8c2096f197e5b5b205f3e013aec1feeafe2643ab29ccb9502a6dba269ce8d7ccb524763e30e471f665bfc37094ac143d40dac53ff5e978e98e0e59cf40b0dfe255f65a31a279ca260c22c7250f907a280fa16b67feeb14a27c0ae5c5f179042d3a04d6645c572fc7c2fb9034bdda3382254e341888966eed5556478a94e01f63cab54ea96454dd4fcc32ffef17fa32418b1c7a1271482eab2b0171d30625eec52219f0585959391e8c8172a47d35f4bd5e6ab2138187666a722c54beba5b238561335089cd005347433948fb13dfcb136f0a31d7161c1b5be5d66a3dbeec1c32fbd3e82a4e80839607a0a0fb5304740b0e06592ebbd7da04ae3dd9ec4213bf458a1a5fa163a9b1b5d08248915007113ff939ad0c1ad53c59dbd568c4b89605e6766ba70e3bd55175c51042023a49afde81e84e8978062615adb2c8473bfaeed9782fecf4eb9784075f509df2366ad3c69204744c1e4ca29ab70b26d234fc0b875f62f0529e6f32d92bbfc5dff849e3365563b0b4e63d4f3fc7578e3c9f8927218e97514e74f697d1dd35daccbdb2acf647fd5f5ceacbdc18aa0629382465db4303e16ec947286214dffb21f5e4eace7bc4e205e955fd38bf801e1238165312d477f7cdde225a9151b895b3719512e589717859f2ebe6d834f6fa435870ebfc3577e741d604bd9aa4de708972aa281da07b379b0d9bc5b95f9ddeecc33b4decdf1ace518c710cefe6ec6a57bdfb472316e5dd0aa021cbd7c0dff9dcaeba1436efbbb84b15efa6ed3da4af549f9f546597184df9b90b514fc9e4da182434486dcd24151bea3c78b1396d777fd680d9e11d526cb56888b6d790d35fd7ccd6a0465fe628f50b31d4fea88d981fd59333e609aea30e191e57c05d47e6e662c7cf16985bcba2e0995833b5ff8bc823e8b3c668fb53d64638ede025e037051b7c9d9502eda22e02d5b4f1e83a722c39c89e8debe56e496db45ccbde1fc5c0136fe91709809b47614185c5fbba1052d01249d63723ab1055759148e6a7001f4751b476af3ebf21be46c936a566f5e95a52a22d8751f1fab21f3369c6a54f44909898ed40b96b8ff567d5e445e110836af92f0b4a49cce2d214d7766112402911181fcc844a3666d7a175121af928f4ef8d8527a5faec9062320a01d2140eec128bbb86616b007747398ee8566a85d56b29a9547cd37d44d6c1177c60764763c1ea401e6b37b10e1811396ba8131cf027d4e8e04098943510e06d2ed97df55cd76c991a5d7555b14aef70cd856d8ae821ab77ae9880a9541be7c06de167c7d2031dd78d3e97e848c2debcf43f767e293b854f64270761ee4d4e784fa9f460446035d326ed4ed5c1e7dde635f69ee5a4b95c521f6c6c31502d9f90c58c52494df2593a6b64cf74f9854c0d63261c82ccddf9feabbdac9e1b0b8923e1e1ac902d0ec02ee53068c0bb41db814849c2c644287b6614b222bf54e5f39f946464f44899bd0b04824217ab052da5292ff6c6b2be24fda83dfda32852be7aa909153d8064db8aba9f8d3bc39520cdafdf439e81963aa85b0198070e130df2ee8534574910b915886e4a250ab6e2b1fd69cace045e090d560348415230e3e9fa4ba1efcaaa3b0ad89bf8e4a925b6ceabd288d195fb2bd13133ab6e0ebd9c3f3ab25f85ae1d6a1844d2ad9c93909399f9db58e69e53dcfff4dfab4c51d178b54dc89e4d4a00dbccae4a4ffd6d20224c20dc411436d8941cddd4915cefdf3f9d447ddc85476b8972ea7a380e11e986d245c4171b6c35a520a267b8a6bb31722c32445d219d487b8e019860dba1f1c07b0c1b53d8c9f6ad4d1aca9fb22d6f9da660670e83d9b311926f944d6920956ab89a4e75b6c55be39443282e526c2197768bd12f160e04739aade7fd1e616e1bf41f0ffeff98d30608110c9187eee2c88994542f872e192f28e8156d27fd75e9f138cf95b8c1423fc560d23b2df81e8e591310aaf3e01c7dd692a13aaf19f3a5f603f37495df582f63b0d2888947dc30b8a0bfe174e420b7b2329c3423b6484c8495a43734f1d8c6be951850f27355a710f97022bba88893fb6a2c90b965630ae45d61e58e741ee8bc0c47df850d4e8e50269ed29deba271af79532a43a6df500c22b108c5a6f2e2370a6b248c2af9a9f3b4ad8bea1e8a0d335f3a4f016999ee676ca9c2875d2397dfb608fa4e28ef690f24007c9839fecad43b68a060990a56d39dff4cb23c360630ffdcc59d97c0262f45ed98c2a81e954ef8129c27d8b82efa9ca853fcf408031e575a86182aeb91fdd6cba02c0e5802ec387acc4cc9c96410d3561b73b0aa7f43db0bd4c20df0157d569cc4de527e4d4447a2e9e63226c3b78909d75cb2041a26148f456202d76d4fff1931f4fabbe2ea033d0d4b1f67aadf98e45d620b1fc913b4caa34236c33b3a0acafc8045abed4f2ddf3e5ba85607a57ac33e271ab295eaffb36ee3ea494c0430ff51af39b029c157052b89aac41c3922ae6f67981773a2e224c23900421e8abf8137b7e3110b270ab808b81cbe92a3cf0c93293dfb8901120a86a1d2e14f3b2f0af60c8739f0462a0605676f4b3c8aec6514b270cd1ba7a8ccc48f40d8a79a517a84931ec5a9f1ab37ebd7871d936bf45d0804f84e3f38b5b1b858594ae5613ef9caf1446f9704b7b7352709eb679d1829a46922bba61cb7d72cfabc6670c478e1d9f527c13defd82974f55778a9afcccb5389393512906c75f55607c99c4f88b920e560269ec70d11aea6d11dcc8d5efe18c9c801c3f4f694c5fc2de7f13e33c76b8c7b3a47b12821f2a0b720b5730a9f82bdc284704d21680d367936af1ab524b71e439888278b396387d78f404ff8a49430086914d993df8f7265da7cbcf9042354884fc9a63f164778814cc6b32ff6b6288fa9cfa0405baa7b0ec4cf8b13f2c83cb1d0f7f42da3c4eb04ddc6ad9c14996b2b70f5fd8d098b13b5fd9b6228bf030054e17c95fbd30f6a6e90e5ca4c59402b8601fdb35dd0c415d1311147197f47278e05819e7205b221f247b2510a01812715dc4e4d0cb1065e1673fb8b9e95c2dd68ed90e1855738c504123a0ec4c494162b2df23ccb9ec60cb57da8ee9d648efca8cf830ba2089dcd0f35c439f8dcb514ed6344f622932ad892631aa259fe2b2621cbedfc6ec3e18ec591f8c4954e3b1b36fb7e23bcfce30091cc9d0b10ce7ed43c10c8b8f00b4f405c3ded39248c806a235ebe9cb6d09c655f44de3f6929998eeceb531716a12baeda0fb914a156662f7351627e71e2597e3cbd87d07d2b77fbd47df8fd807eb652d1156a494f5219e3ee46bbf6a79b86ae3550e2f6acedc4d31c54314c03b99235d7d136be1198279b18c8845fb9bd0c10ad8d1aa44c8311233c9229076b6588e1d363d4e054aca98422170694a9f8a684034282e15c000e086005237853121975a953fde8f1b34732aa839439ae49e7789eacad8b884858b2dcd41e9e74b7764e2948e99c4ba569864ae70739bc5b61f618f4970333c2cefa848468fcae57ba34c4f90133ccfd684ee2c7e8a5d39abe9df4365670a66e4362dd73eb564c31f13b783a7c6ad76457b70a4ea0342ee561560af98d76f24472e1"}) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000001840)={0x104, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0x4}, @OVS_FLOW_ATTR_MASK={0xdb, 0x7, 0x0, 0x1, [@generic="7f3a90021b92cdf88bcc867a3f6e7d533eca45a104b4e9e3d6d2d275aeb5b6d1a7c0859fc88edad03b72a96dfc0b60c2b02e441a353a856f90cfb0b7f5133da6b920281ace6560", @generic="5a433dcbb3718cce338553a8595f45d5b84860d83d0ad09ece2c3c69a8142d7dab4d0e8d6963ea8f90e33c172819dee8dec087836415de3cfc415feed5244a49fdbb26b4ce126e76bb53acee7194bb3b142418cc7182a21db5090433d00ab78f48446657420607ca692f86296360014e60dfa6cf80724be444be7513fe801ec509b4e81968b2ac10eb3f39ec", @nested={0x4, 0x147}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x9}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x8804}, 0x8004) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x101) getsockopt$auto_SO_SNDBUF(r3, 0x3, 0x7, &(0x7f0000000100)='\x00', &(0x7f0000000140)=0x909e) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 4.310518513s ago: executing program 3 (id=1275): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x400800, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) fstat$auto(r4, &(0x7f0000000100)={0x0, 0x4, 0xa6, 0x1, 0xee00, 0xee01, 0x0, 0x2, 0x3, 0xd, 0x7, 0x7, 0x0, 0xc64c, 0x5, 0x3, 0x5}) sendmsg$auto_NFC_CMD_VENDOR(r3, 0x0, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000340)="f925e2795c35253e2408bedc3f52919ec2bfbd1ea71f02030000005150a47f01d391cfda8dac9730a2917fba32b5fac55e3e9def5f483b75be9277ef7badb888c25d7e7ecda4acd2fa0d6f7ac9a15c609f2ca722e162c61b874aa01eab7c8f3b61c624bcc779c442a74bbf6822aeaef640090000006fc5cd8dea32ab9f4fd4fc7fab11e737963d900000000000", 0x8d) seccomp$auto(0x2, 0x10, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) unshare$auto(0x40000080) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) 4.310219057s ago: executing program 1 (id=1276): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x1, 0x87) pread64$auto(r0, 0x0, 0x3c02, 0x100007) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, r1) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x20004) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) io_uring_setup$auto(0x2, 0x0) read$auto(r0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r5 = socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200025bd7000fedbdf253100000005003700fb0000001f0016001e2d1ffad2b0a8231b4314787d214c2029967d87002d4184ed8d1500"], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4004010) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) 4.230858686s ago: executing program 0 (id=1277): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535"}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x9, 0xc4, 0x8, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x9, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb78, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x3, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffbb, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000000, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0x9, 0x3ff, 0x8, 0x7, 0xffff, 0x50ce0883, 0x3d9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x2, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x6, 0x4, 0x2, 0x3, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x6, 0x9, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x8, 0x9, 0xfffffffffffffffb, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000040)="65a90950732f", 0x6) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000600)=@iter_create={r1, 0xffffffff}, 0x8) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) syz_clone3(&(0x7f0000000100)={0x3200000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000040)='./file0\x00', 0xfe8, 0x4) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400"], 0x464}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) r2 = open(&(0x7f0000000340)='./file0\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xf82}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x842) 3.737050127s ago: executing program 2 (id=1278): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x8, 0xdffffffffffffffe]}, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) 3.660163285s ago: executing program 2 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000340)={0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x2f8}, 0x1, 0x0, 0x0, 0x8048001}, 0x24040050) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) bpf$auto(0x3, &(0x7f00000000c0)=@bpf_attr_11={0x3, 0x8, 0x800, 0x1, 0x0, 0x1, 0x3184a190, r4}, 0x5) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) madvise$auto(0x8, 0xffffffffffff000a, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0xfe04) socket(0x10, 0x2, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(0xffffffffffffffff, 0x4, 0x4) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) 3.384990009s ago: executing program 1 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000340)={0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x2f8}, 0x1, 0x0, 0x0, 0x8048001}, 0x24040050) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) bpf$auto(0x3, &(0x7f00000000c0)=@bpf_attr_11={0x3, 0x8, 0x800, 0x1, 0x0, 0x1, 0x3184a190, r4}, 0x5) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) madvise$auto(0x8, 0xffffffffffff000a, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0xfe04) socket(0x10, 0x2, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(0xffffffffffffffff, 0x4, 0x4) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) 3.030390446s ago: executing program 3 (id=1281): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0x2a8380, 0x0) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x83, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x20a300, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0x0, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x4000000000007, 0x9, 0x4, 0x9, 0xf}) (async) prctl$auto(0xca, 0x100, 0x0, 0x1, 0x8000000000000001) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) (async) mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) 3.026967801s ago: executing program 0 (id=1282): r0 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/ext4/sda1/extent_max_zeroout_kb\x00', 0x4929c1, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de49406", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r4, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r9 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) getsockopt$auto(r9, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x300000000000000, 0x2091d2, 0x4, 0x0, 0x2, 0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2.516999986s ago: executing program 0 (id=1283): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(r0, r1, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) syz_clone3(&(0x7f0000000440)={0x20900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), {0x1e}, &(0x7f0000000040)=""/16, 0x10, &(0x7f0000000340)=""/175, 0x0}, 0x58) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_SNDCTL_DSP_MAPOUTBUF(0xffffffffffffffff, 0x80105014, &(0x7f0000000240)="56d2a31415a192ee779dea7567d602a61d6d6ba276224c1928c76b3f00034e5ab9dcd4fbab40111ab2132faaf5b8e3c45f83417d5e5e9e6e74719fa7489e27afa7c8f9a503682fab9c41eedb14c5ec7b0edf2f195684f1f4ed79486f75ecb4a478fda881360669f86d57590ddee1a20900a160f2d3b6aaa1fb76c52efca466215b95222b5ab57e6b2ac6deddc5558b4162dbd6bb3f6be2ea2e0642d71d9f26e245779672") rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x2000aa7, 0x3, 0x2020401) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x7, 0xc) 1.991080855s ago: executing program 3 (id=1284): shmctl$auto_SHM_LOCK(0x0, 0xb, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r0 = epoll_create$auto(0x7) r1 = prctl$auto_PR_SET_MM_START_STACK(0xbb, 0x5, 0xffffffffffffffff, 0x2, 0x5) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x6, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r2, 0x0) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) 1.40552213s ago: executing program 2 (id=1285): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x8, 0x5ad2, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab40, 0x0) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r1, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1.27618531s ago: executing program 0 (id=1286): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0x3, 0x5424, 0x10000000000402) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, 0x0, 0x80) futex_wait$auto(0x0, 0x4, 0x1, 0x1, 0x0, 0x7) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) epoll_create$auto(0x4) futex_wake$auto(0x0, 0x6, 0x9, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) kill$auto(0x0, 0x11) r3 = socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) setsockopt$auto_SO_DOMAIN(r3, 0xfc6, 0x27, &(0x7f00000000c0)='/dev/nullb0\x00', 0xf2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.268595719s ago: executing program 3 (id=1287): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x8, 0xdffffffffffffffe]}, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) 1.206749526s ago: executing program 1 (id=1288): r0 = socket(0xf, 0x3, 0x0) sendto$auto(r0, 0x0, 0x0, 0xfdef, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xb8943, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x2287, r0) socket(0x1d, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x10000000000, 0x6, 0x15) prctl$auto(0x1000, 0x17, 0x0, 0x0, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0) msgctl$auto(0x7, 0xa3, &(0x7f0000000200)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x10000000}, 0x0, 0x0, 0x2, 0xfc93, 0x6, 0x31f4, 0x51c, 0x3, 0x1, 0x3, @inferred, @raw=0xfffffffa}) r4 = getpid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9e43, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r4, &(0x7f0000000180)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(r2, &(0x7f0000000000)=@sco, 0x4) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x38d400, 0x0) 1.032958736s ago: executing program 3 (id=1289): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = io_uring_setup$auto(0x55, &(0x7f0000000080)={0xe44, 0xd, 0x10400, 0x1000e, 0x4, 0x80000000, r0, [0x0, 0xfffffffd, 0x10000003], {0x5, 0x6, 0xc, 0x2, 0xd, 0x7ffffffb, 0x10001, 0x2, 0x9340}, {0x8, 0x1, 0x5, 0x5, 0x9, 0x0, 0x76c5, 0x789a, 0x20000000009}}) move_pages$auto(0x0, 0x8, 0x0, 0x0, 0x0, 0xb) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x401) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) clock_nanosleep$auto(0x7, 0x7fff, &(0x7f0000000000)={0x5, 0x5}, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r3, 0x80044dfd, &(0x7f00000014c0)) write$auto(0x4, 0x0, 0x100082) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x10282, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x8000000000000000, @raw=0x3, @inferred=0xffffffffffffffff, 0x1, 0xfffffffffffffff7, '\x00', {0x2, 0x76e6, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0x8, {0x1, 0x2}, {0x10000, 0x4}, {0x1, 0x8}, 0x3, 0x101, 0x200, 0x200, 0x0, 0x401, 0xfff, 0xfc00, 0x0, 0x2, '\x00', 0x0, 0x3840, 0xe5, 0x1}}) setgroups$auto(0x10000, &(0x7f0000000040)=0x7fff) close_range$auto(r1, 0x8, 0x3) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r4) ioctl$auto_VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)=r2) r8 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@siginfo_0_0={0x2, 0xffffffff, 0xb6, @_sigsys={&(0x7f0000000380)="332423e5027f3c4863f8478c9d80e4587f2c535dd7541388358b411b8922e4e69628582eb18495cf480ecf", 0x8, 0x7}}}, 0x8, &(0x7f0000000500)={{0xfffffffffffff800, 0x80}, {0x80, 0x5}, 0x7, 0x4, 0x0, 0x7, 0x50000000000, 0x9, 0xc8, 0xffffffffffffff80, 0xbd8, 0x2, 0x8000000000000000, 0x9, 0x100000001, 0x4}) sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f00000020c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002080)={&(0x7f00000005c0)={0x1a84, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x14e6, 0x4, 0x0, 0x1, [@nested={0x120c, 0xce, 0x0, 0x1, [@typed={0xfe, 0xc9, 0x0, 0x0, @binary="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"}, @nested={0x4, 0xb8}, @nested={0x4, 0x146}, @generic="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", @nested={0x4, 0xdb}, @typed={0x8, 0xcb, 0x0, 0x0, @u32}, @nested={0x4, 0x7d}, @generic="7b7129f23b747a82fe4c0c054676cfc93142bf421140fe29b6869a00709a4eeff55a5d6debcc6d006506fe1d1d4bbd37735478ae6a1850e1e07de64893c17e18e2b99ae9579515c970e8f1f8545ba4ed6f93cc2ca6bd26f73b501f36bf7dd10df563078e49808dec61b2d3aedb0591899d710dcc07881832a991cd8f33b21b3ed8b054b94d6c8d1d8eed90b101b9baef510d39d642a079ab663b115c815ad28359bf6fe5b687c61d77175ed89a132c70ae37d700035eb0da351108f79b4622f226d8c05275fdbbefa3ec58fef6bdd15e5a332bf7", @typed={0x8, 0x55, 0x0, 0x0, @fd=r7}, @typed={0x14, 0x137, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x110, 0x13c, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x143}, @typed={0xf0, 0x83, 0x0, 0x0, @binary="57e090524b5f8745f867a50f4d2f711388aa02a5efca93a26c0401e37d30a3a13adb3d7b91e5352e8ba512517bf5f8e1859e63c60dc2f4e0085fa5a96fe4a9609da3d9502518107575179a3e3a32445e33d6056304f0014778983228a6d841adb9fa2ec6dfedc83382535eb902c15065c995d1dc36336bc102360d01a5a5f21938dceab9c72fb72c2184ef03dce556b30c4ca8dfd4bff5a8ee6834f79ce2fa9e7f97892e2a039cb7022706dfb6b6e6cfee82d1c811062d7a85157c03b50e8967ebb69b14ea62cc7abfca2f7822a1f53a773d2678f67d35804f1f50ae59f62e34c336c4d643eeb114919752de"}, @nested={0x4, 0x8}, @nested={0x4, 0x36}, @typed={0x8, 0x92, 0x0, 0x0, @pid=r8}]}, @generic="84bea0978a81ed205ce4dd6496246eb44e94db824b47596d476f676e1b9b547d2d8e6db8e79249efaa7830a4671a4acd", @typed={0xd1, 0x132, 0x0, 0x0, @binary="9f4630eec65d352607c3e1e8e6a537df56b49dd455467fa9047ac6363bd1949832e395d77be2093e0c3e99c4130112c72d0d41180f88ac1952411efbd56abd514d4e2c5582de452a33d3eda8748c6bd26dd5816b2c8e90fe3dffb306e3d1b9d2c1b7c94b0200f3b9efe28e710439142686ab49bb8c4a7b3b38d6e2fb64d4db2b427542ac1ccd54051db4beb28e5bc89c1acf92fdefc00d9f1013db96a7a54b485de249e1d5f27d2c2447e47be915a0338288d378b858736f7b99ade6a4469818e217ddcfe735d537be9222f92d"}, @generic="675da643909b676644d4693185436be4645d3cfc0f7ae829540bc606f09d469ef03530b674989e482fbf99fb016d78207847a3c17ede984f646f4cc8b2e289a8fc688627659f2964d7235ee35d574d31d354a566cf575e71f46afe08586e76d246ec0d7a5c1d3540a5b82af2bac655592a2342aee7222741f52418281c8fa9f0297687a683e556aa4dd4cbe8cc49c0ccdbc8edf7219688c15dfbf4a670daad1d64a8d6afb7fde49fbd3f5cfa896372d77de0af307dbb741e46f3ab6078ab27cdc1d8"]}, @TIPC_NLA_UNSPEC={0x40, 0x0, "f43dcf7652befeb6282648eebf24a5e223a577c114471542ded08dfee28bf2aae2b3d31fb99708e6914ee23fce5c7e1bfc236bc201989a54a2c446a9"}, @TIPC_NLA_LINK={0x184, 0x4, 0x0, 0x1, [@nested={0xfb, 0xed, 0x0, 0x1, [@nested={0x4, 0x33}, @generic="24f95d4957399d1ab32485fa1081afd64dca751046f24d612eddc53306a0dcabd09d5317715faefbe5ac0ec70c49874592ba2dbb091db2e68c49c1bb00c27a82c6027f682f28b217b1cbb864d26d24f4c2f300d55ac662ef6624eb1ee8ce5ad5112278d6251d9028fd2fa2073be5c763bf97b687acadad46c73e90f30caa3e80e79422224896fc9b5cbffc2e908dd8546f859946b214bbf696a9b3be52242897a48ae6068cc882bed970f4b0b1fcadc7d87c509f1d9b5d0047d9b180a9a2e428406ae3b7b7462cbed7acc6f55e4982cb116145dfc446edc51964af1cc8f9a5", @nested={0x4, 0xe5}, @nested={0x4, 0x87}, @typed={0x8, 0x98, 0x0, 0x0, @u32=0x3ff}, @nested={0x4, 0x4a}]}, @generic="5de5fe2f0e9a9b440337a9c583ce84b66ee60f14810bcc1f83f4889f8488eda81e411edfd9060793000d08f917d3fe99b9194dd11d2aed8606e5662a5fbc643fa29a4106d77e6bc30a6a93b329308bcf5e013795e48519ea3bd2f6896a1b97a4fb2977629fefd0eec8510bbc003dae114cd6ab9e62eed769018cb1bbe8c78817ed5a0c51"]}, @TIPC_NLA_LINK={0xba, 0x4, 0x0, 0x1, [@generic="71a6c10f32f1373c61ddb10dea7df1cead28b473ebaa00cf950cd8cd8c57b702f3d746a080b3aa95ad7c6875eba4f41b32d0afd8dcb57f34a7ba9bcf2430e975091c8f7b44d264d7a30c17515c183c5fa3210c47d9ecc3856e2b3178422c449d1ee19a45a6f70ac4b61eb3394ada71bcc838bc29262d123828cf3f18a6d73407d65c4fa90f4f90e1e2e1ba55db0c1d3b14660d5212ed020b38edcecdb81d482a64cb3207b9e502fffec9c8f295a40d16567a4b1bd2a6"]}, @TIPC_NLA_NODE={0x1bd, 0x6, 0x0, 0x1, [@nested={0xfd, 0x2a, 0x0, 0x1, [@nested={0x4, 0xa3}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @generic="d5862aab3957345a0c39770a5b60f8d9206d5a62b151ecc88e312318f03a2e9f26c4b5fc685bddbe42278bcc6c23fe9815225a4aab0be2fb9f69a4d345459ce9daa2d7d0f1a0304cef6e899f85f3e747f23b89b926a7f5d338163e7a66ac7339747b633747732493b582bcbc304a71da7b1795f6303fe900a222652fea8f06b35cb7351f28df3f1aa8953c3b7cf845eed0bc445fc097618a4554747f7fe8e7fdd9d82d8718c1e4b73979e69aa33d6e29b43ffeaada60babdcf8f17de8485f7526782dc3784d3449363b99a7d17f8d5895e503be554a4ac2946fee4c07cd34be729"]}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=r5}, @generic="91bf3fa160089509a8eb1facf5d28e839988bec0ae8c313f39653d54230c76a4147a45ab3e", @nested={0x79, 0xd9, 0x0, 0x1, [@nested={0x4, 0x121}, @generic="6b58179bcb24352ef9a77334e7ded88509843c77416e134b7992a7bfbaf23c08f0ab37b1d1ca93e5542a60232833a78e21dec7925406808a9e779a2043c24b4a27297dcb623ba816ddf547031abcdace504b1aa3d6390782f1c30eecb437f61c9b6d82dbfcacf0847e38add5ac3b56a678"]}, @typed={0x8, 0x87, 0x0, 0x0, @str='+,#\x00'}, @typed={0x8, 0x3c, 0x0, 0x0, @u32=0xa44e}]}, @TIPC_NLA_NAME_TABLE={0x148, 0x8, 0x0, 0x1, [@nested={0x143, 0x144, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x12e}, @typed={0x82, 0xcf, 0x0, 0x0, @binary="c14bda4dd762c1c6344910c004953d7e8abebe775424d5de7353aa9e589276bb436b367227444ee2161766a4e38ab1e99336a6e5433c58ccfb7835db7befcc580331f7e4cd6acaf34e2227e4ff831822449a7525cbfff314fe7580fa0698a9abea003fb7dcb20ff0c1d8b13ace01c1f42d45409adff6fe020572d5f396a1"}, @nested={0x4, 0x3c}, @typed={0x4, 0x144}, @generic="2c0d385f54ca7f746de4f38bcfcb9512e295b9db3c7ad1a750e9ffc6c088c28beb954e7b55e6371a1982a39bb32c11cd730cf4d5edeee1a91e6dbd162d08abc19c92752f858129c4725a8fb689d1a0da374dd909a58df2619c7ca1aea1527356b739138a7cabc5e0fe9610a369938ae6442811d1aaa65529ede48dd8fd6bc6dcdbf9a4ccf9d0fe2571386b1a2cdd5ee5650fc5067732dc13c42ca1e036720a", @nested={0x4, 0x149}, @typed={0x4, 0xc7}]}]}]}, 0x1a84}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) write$auto(0xffffffffffffffff, 0x0, 0x81) pread64$auto(0xffffffffffffffff, 0x0, 0x3c02, 0x100007) r9 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0xffffff01, 0x1, 0xff, @_sigchld={0x0, r5, 0x3, 0x100000001, 0xfffffffffffffff9}}}, 0x31d6, &(0x7f0000000180)={{0x6, 0xf}, {0xf4d, 0x9}, 0x7f, 0xc, 0x3, 0x0, 0x2, 0x10000, 0xe40, 0x0, 0x1, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x6713, 0x0, 0x8}) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)=@task_fd_query={r9, r1, 0x3, 0x4, 0x23, 0x1, 0xffffffffffffffff, 0x0, 0x2}, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 312.222577ms ago: executing program 2 (id=1290): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x8, 0x5ad2, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab40, 0x0) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r1, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 216.023669ms ago: executing program 0 (id=1291): timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) exit$auto(0x2) timer_settime$auto(0x0, 0x100, &(0x7f0000000200)={{0x3, 0x10007}, {0x9}}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x200000000001, 0x4000000000) r0 = bpf$auto(0x40000000, 0x0, 0x96) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0x20000000ffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x602, 0x1) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0) ioctl$auto(r1, 0xc0045543, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) open(&(0x7f00000003c0)='./file1/file0\x00', 0x0, 0x3749912a417795dc) listxattrat$auto(r0, &(0x7f00000000c0)='./file1/file0\x00', 0xfffff8db, &(0x7f0000000180)='/dev/snd/seq\x00', 0xffffffffffffff3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000bf385329894bdde4773ac2f0f0de8f914a18cf9ee5e95b7d3c1db0b8ece2c81e46817e018d56dd66ec4543ad87c0e4e11051346fea328f1b33eed0f85a1f935fd2818a3b01d1ae7ba3e57cd490b523e891739879418ea4d257ed2ec7a6cab9c9ee5a26b26544b95ebc1510756f321743b075fda7ffca4fbc15ed9d460a82046f16a1", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25040000000a0016000002000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 70.305484ms ago: executing program 1 (id=1292): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x8, 0x5ad2, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab40, 0x0) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r1, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 0s ago: executing program 3 (id=1293): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x840, 0x152) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x2100, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0x2001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0)="f198bb44fff0cb3c6c751a366b8fd3f41980727e3c3f166f8afb9714329e8bf474be7f3ed315dea9af1609cda24f37fc09000000000007731a710000153ea091057ca2de150c688f8c750a79f6265793071bac62127ffa120c65b229dba976ae3cf35190e2a48b370e50d9c00231", 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x8a100, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x7, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) kernel console output (not intermixed with test programs): : 0000000000000246 R12: 0000000000000000 [ 407.923271][T11005] R13: 00007f0625be6128 R14: 00007f0625be6090 R15: 00007ffc95b2e998 [ 407.923299][T11005] [ 408.027642][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.032438][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.036959][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 408.100572][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.185139][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.889760][T11020] FAULT_INJECTION: forcing a failure. [ 408.889760][T11020] name failslab, interval 1, probability 0, space 0, times 0 [ 408.945682][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.1.1121 Not tainted syzkaller #0 PREEMPT(full) [ 408.945709][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.945722][T11020] Call Trace: [ 408.945729][T11020] [ 408.945737][T11020] dump_stack_lvl+0x16c/0x1f0 [ 408.945765][T11020] should_fail_ex+0x512/0x640 [ 408.945793][T11020] ? __kmalloc_cache_noprof+0x5f/0x780 [ 408.945831][T11020] should_failslab+0xc2/0x120 [ 408.945858][T11020] __kmalloc_cache_noprof+0x72/0x780 [ 408.945891][T11020] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 408.945920][T11020] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 408.945949][T11020] ? loopback_open+0x145/0x13f0 [ 408.945976][T11020] ? loopback_open+0x145/0x13f0 [ 408.945997][T11020] loopback_open+0x145/0x13f0 [ 408.946026][T11020] snd_pcm_open_substream+0xa5d/0x17f0 [ 408.946051][T11020] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 408.946076][T11020] ? rcu_is_watching+0x12/0xc0 [ 408.946103][T11020] snd_pcm_open+0x29e/0x730 [ 408.946135][T11020] ? __pfx_snd_pcm_open+0x10/0x10 [ 408.946162][T11020] ? __pfx_default_wake_function+0x10/0x10 [ 408.946192][T11020] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 408.946215][T11020] snd_pcm_capture_open+0x89/0xe0 [ 408.946239][T11020] snd_open+0x22d/0x4c0 [ 408.946268][T11020] ? __pfx_snd_open+0x10/0x10 [ 408.946297][T11020] chrdev_open+0x234/0x6a0 [ 408.946320][T11020] ? __pfx_apparmor_file_open+0x10/0x10 [ 408.946350][T11020] ? __pfx_chrdev_open+0x10/0x10 [ 408.946376][T11020] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 408.946404][T11020] do_dentry_open+0x982/0x1530 [ 408.946427][T11020] ? __pfx_chrdev_open+0x10/0x10 [ 408.946458][T11020] vfs_open+0x82/0x3f0 [ 408.946489][T11020] path_openat+0x1de4/0x2cb0 [ 408.946521][T11020] ? __pfx_path_openat+0x10/0x10 [ 408.946550][T11020] do_filp_open+0x20b/0x470 [ 408.946573][T11020] ? __pfx_do_filp_open+0x10/0x10 [ 408.946615][T11020] ? alloc_fd+0x471/0x7d0 [ 408.946642][T11020] do_sys_openat2+0x11b/0x1d0 [ 408.946672][T11020] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.946713][T11020] __x64_sys_openat+0x174/0x210 [ 408.946743][T11020] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.946785][T11020] do_syscall_64+0xcd/0xfa0 [ 408.946811][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.946831][T11020] RIP: 0033:0x7fb3c158eec9 [ 408.946847][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.946867][T11020] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.946887][T11020] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 408.946901][T11020] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 408.946914][T11020] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.946926][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.946939][T11020] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 408.946967][T11020] [ 409.237562][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.628091][T11003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.649922][T11003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.686625][T11003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.698149][T11003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.765196][T11029] FAULT_INJECTION: forcing a failure. [ 409.765196][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 409.816671][T11029] CPU: 1 UID: 0 PID: 11029 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT(full) [ 409.816706][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.816724][T11029] Call Trace: [ 409.816734][T11029] [ 409.816746][T11029] dump_stack_lvl+0x16c/0x1f0 [ 409.816789][T11029] should_fail_ex+0x512/0x640 [ 409.816825][T11029] ? __kmalloc_noprof+0xca/0x880 [ 409.816874][T11029] should_failslab+0xc2/0x120 [ 409.816913][T11029] __kmalloc_noprof+0xdd/0x880 [ 409.816959][T11029] ? process_preds+0x46c/0x1c50 [ 409.817006][T11029] ? process_preds+0x46c/0x1c50 [ 409.817054][T11029] process_preds+0x46c/0x1c50 [ 409.817104][T11029] ? create_filter_start.constprop.0+0x56/0x300 [ 409.817151][T11029] create_filter+0x140/0x210 [ 409.817194][T11029] ? __pfx_create_filter+0x10/0x10 [ 409.817237][T11029] ? __pfx___mutex_lock+0x10/0x10 [ 409.817272][T11029] ? find_held_lock+0x2b/0x80 [ 409.817305][T11029] apply_event_filter+0x220/0x500 [ 409.817350][T11029] ? __pfx_apply_event_filter+0x10/0x10 [ 409.817405][T11029] event_filter_write+0x16d/0x290 [ 409.817439][T11029] ? __pfx_event_filter_write+0x10/0x10 [ 409.817467][T11029] vfs_write+0x2a0/0x11d0 [ 409.817504][T11029] ? __pfx___mutex_lock+0x10/0x10 [ 409.817539][T11029] ? __pfx_vfs_write+0x10/0x10 [ 409.817582][T11029] ? __fget_files+0x20e/0x3c0 [ 409.817608][T11029] ? __kvm_handle_async_pf+0x70/0xb0 [ 409.817650][T11029] ksys_write+0x12a/0x250 [ 409.817681][T11029] ? __pfx_ksys_write+0x10/0x10 [ 409.817722][T11029] do_syscall_64+0xcd/0xfa0 [ 409.817759][T11029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.817788][T11029] RIP: 0033:0x7fb3c158eec9 [ 409.817810][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.817838][T11029] RSP: 002b:00007fb3c23a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.817863][T11029] RAX: ffffffffffffffda RBX: 00007fb3c17e6090 RCX: 00007fb3c158eec9 [ 409.817882][T11029] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 409.817899][T11029] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.817917][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.817934][T11029] R13: 00007fb3c17e6128 R14: 00007fb3c17e6090 R15: 00007ffce70b99c8 [ 409.817974][T11029] [ 410.046910][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.063694][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.157789][T11034] FAULT_INJECTION: forcing a failure. [ 410.157789][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 410.170701][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.2.1124 Not tainted syzkaller #0 PREEMPT(full) [ 410.170738][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.170755][T11034] Call Trace: [ 410.170765][T11034] [ 410.170776][T11034] dump_stack_lvl+0x16c/0x1f0 [ 410.170814][T11034] should_fail_ex+0x512/0x640 [ 410.170850][T11034] ? __kmalloc_cache_noprof+0x5f/0x780 [ 410.170902][T11034] should_failslab+0xc2/0x120 [ 410.170941][T11034] __kmalloc_cache_noprof+0x72/0x780 [ 410.170984][T11034] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 410.171034][T11034] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 410.171075][T11034] ? loopback_open+0x145/0x13f0 [ 410.171115][T11034] ? loopback_open+0x145/0x13f0 [ 410.171146][T11034] loopback_open+0x145/0x13f0 [ 410.171186][T11034] snd_pcm_open_substream+0xa5d/0x17f0 [ 410.171222][T11034] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 410.171258][T11034] ? rcu_is_watching+0x12/0xc0 [ 410.171296][T11034] snd_pcm_open+0x29e/0x730 [ 410.171333][T11034] ? __pfx_snd_pcm_open+0x10/0x10 [ 410.171371][T11034] ? __pfx_default_wake_function+0x10/0x10 [ 410.171413][T11034] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 410.171447][T11034] snd_pcm_capture_open+0x89/0xe0 [ 410.171481][T11034] snd_open+0x22d/0x4c0 [ 410.171521][T11034] ? __pfx_snd_open+0x10/0x10 [ 410.171562][T11034] chrdev_open+0x234/0x6a0 [ 410.171596][T11034] ? __pfx_apparmor_file_open+0x10/0x10 [ 410.171638][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 410.171675][T11034] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 410.171715][T11034] do_dentry_open+0x982/0x1530 [ 410.171750][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 410.171793][T11034] vfs_open+0x82/0x3f0 [ 410.171839][T11034] path_openat+0x1de4/0x2cb0 [ 410.171883][T11034] ? __pfx_path_openat+0x10/0x10 [ 410.171926][T11034] do_filp_open+0x20b/0x470 [ 410.171959][T11034] ? __pfx_do_filp_open+0x10/0x10 [ 410.172027][T11034] ? alloc_fd+0x471/0x7d0 [ 410.172068][T11034] do_sys_openat2+0x11b/0x1d0 [ 410.172111][T11034] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.172168][T11034] __x64_sys_openat+0x174/0x210 [ 410.172212][T11034] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.172272][T11034] do_syscall_64+0xcd/0xfa0 [ 410.172310][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.172339][T11034] RIP: 0033:0x7f4b7578eec9 [ 410.172363][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.172392][T11034] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.172420][T11034] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 410.172440][T11034] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 410.172460][T11034] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.172479][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.172498][T11034] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 410.172540][T11034] [ 410.467859][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.676950][T11072] hub 1-0:1.0: USB hub found [ 411.681924][T11072] hub 1-0:1.0: 1 port detected [ 411.697788][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.703906][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.740626][T11072] FAULT_INJECTION: forcing a failure. [ 411.740626][T11072] name failslab, interval 1, probability 0, space 0, times 0 [ 411.777840][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.869372][T11072] CPU: 1 UID: 0 PID: 11072 Comm: syz.2.1133 Not tainted syzkaller #0 PREEMPT(full) [ 411.869413][T11072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.869433][T11072] Call Trace: [ 411.869444][T11072] [ 411.869457][T11072] dump_stack_lvl+0x16c/0x1f0 [ 411.869500][T11072] should_fail_ex+0x512/0x640 [ 411.869539][T11072] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 411.869577][T11072] should_failslab+0xc2/0x120 [ 411.869619][T11072] kmem_cache_alloc_noprof+0x75/0x6e0 [ 411.869652][T11072] ? __kernfs_new_node+0xd2/0x8e0 [ 411.869701][T11072] ? __kernfs_new_node+0xd2/0x8e0 [ 411.869737][T11072] __kernfs_new_node+0xd2/0x8e0 [ 411.869783][T11072] ? __pfx___kernfs_new_node+0x10/0x10 [ 411.869854][T11072] ? find_held_lock+0x2b/0x80 [ 411.869900][T11072] ? kernfs_root+0xee/0x2a0 [ 411.869954][T11072] kernfs_new_node+0x13c/0x1e0 [ 411.870012][T11072] __kernfs_create_file+0x53/0x350 [ 411.870054][T11072] sysfs_add_file_mode_ns+0x207/0x3c0 [ 411.870105][T11072] sysfs_merge_group+0x1aa/0x340 [ 411.870153][T11072] ? __pfx_sysfs_merge_group+0x10/0x10 [ 411.870214][T11072] ? __pfx_dev_add_physical_location+0x10/0x10 [ 411.870256][T11072] ? bus_to_subsys+0x131/0x160 [ 411.870306][T11072] dpm_sysfs_add+0x237/0x280 [ 411.870361][T11072] device_add+0x9a6/0x1aa0 [ 411.870401][T11072] ? __pfx_device_add+0x10/0x10 [ 411.870436][T11072] ? lockdep_init_map_type+0x5c/0x280 [ 411.870479][T11072] ? __init_waitqueue_head+0xca/0x150 [ 411.870539][T11072] usb_hub_create_port_device+0x3a1/0xde0 [ 411.870590][T11072] hub_probe+0x203b/0x3480 [ 411.870647][T11072] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.870695][T11072] ? __pfx_hub_probe+0x10/0x10 [ 411.870732][T11072] ? mark_held_locks+0x49/0x80 [ 411.870772][T11072] ? hw_breakpoint_arch_parse+0x120/0x920 [ 411.870816][T11072] ? mark_held_locks+0x49/0x80 [ 411.870856][T11072] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.870901][T11072] usb_probe_interface+0x300/0xa40 [ 411.870951][T11072] ? __pfx_usb_probe_interface+0x10/0x10 [ 411.870997][T11072] really_probe+0x23e/0xa90 [ 411.871034][T11072] __driver_probe_device+0x1de/0x440 [ 411.871070][T11072] driver_probe_device+0x4c/0x1b0 [ 411.871104][T11072] __device_attach_driver+0x1df/0x310 [ 411.871138][T11072] ? __pfx___device_attach_driver+0x10/0x10 [ 411.871169][T11072] bus_for_each_drv+0x156/0x1e0 [ 411.871213][T11072] ? __pfx_bus_for_each_drv+0x10/0x10 [ 411.871259][T11072] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.871293][T11072] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 411.871330][T11072] __device_attach+0x1e4/0x4b0 [ 411.871363][T11072] ? __pfx___device_attach+0x10/0x10 [ 411.871396][T11072] ? do_raw_spin_unlock+0x172/0x230 [ 411.871451][T11072] bus_probe_device+0x17f/0x1c0 [ 411.871502][T11072] device_add+0x1148/0x1aa0 [ 411.871544][T11072] ? __pfx_device_add+0x10/0x10 [ 411.871581][T11072] ? mark_held_locks+0x49/0x80 [ 411.871633][T11072] usb_set_configuration+0x1187/0x1e20 [ 411.871699][T11072] bConfigurationValue_store+0x100/0x180 [ 411.871741][T11072] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 411.871781][T11072] ? find_held_lock+0x2b/0x80 [ 411.871813][T11072] ? sysfs_file_kobj+0xe4/0x290 [ 411.871847][T11072] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 411.871894][T11072] dev_attr_store+0x55/0x80 [ 411.871929][T11072] ? __pfx_dev_attr_store+0x10/0x10 [ 411.871964][T11072] sysfs_kf_write+0xf2/0x150 [ 411.872000][T11072] kernfs_fop_write_iter+0x3af/0x570 [ 411.872047][T11072] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.872084][T11072] iter_file_splice_write+0xa21/0x12e0 [ 411.872140][T11072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.872180][T11072] ? __pfx_copy_splice_read+0x10/0x10 [ 411.872251][T11072] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.872286][T11072] direct_splice_actor+0x18f/0x6c0 [ 411.872321][T11072] splice_direct_to_actor+0x342/0xa30 [ 411.872374][T11072] ? __pfx_direct_splice_actor+0x10/0x10 [ 411.872410][T11072] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 411.872472][T11072] do_splice_direct+0x174/0x240 [ 411.872502][T11072] ? __pfx_do_splice_direct+0x10/0x10 [ 411.872533][T11072] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 411.872588][T11072] ? rw_verify_area+0xcf/0x6c0 [ 411.872620][T11072] do_sendfile+0xb06/0xe50 [ 411.872658][T11072] ? __pfx_do_sendfile+0x10/0x10 [ 411.872695][T11072] ? __x64_sys_futex+0x1e0/0x4c0 [ 411.872735][T11072] ? __x64_sys_futex+0x1e9/0x4c0 [ 411.872779][T11072] __x64_sys_sendfile64+0x1d8/0x220 [ 411.872820][T11072] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 411.872872][T11072] do_syscall_64+0xcd/0xfa0 [ 411.872916][T11072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.872946][T11072] RIP: 0033:0x7f4b7578eec9 [ 411.872969][T11072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.872999][T11072] RSP: 002b:00007f4b766ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.873027][T11072] RAX: ffffffffffffffda RBX: 00007f4b759e6090 RCX: 00007f4b7578eec9 [ 411.873047][T11072] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 411.873065][T11072] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.873083][T11072] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 411.873101][T11072] R13: 00007f4b759e6128 R14: 00007f4b759e6090 R15: 00007ffe91d20858 [ 411.873143][T11072] [ 412.390124][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.417733][T11072] hub 1-0:1.0: couldn't create port1 device. [ 412.423820][T11072] hub 1-0:1.0: config failed, out of memory (err -12) [ 412.728502][T11080] FAULT_INJECTION: forcing a failure. [ 412.728502][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 412.768375][T11082] FAULT_INJECTION: forcing a failure. [ 412.768375][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 412.775527][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.1.1135 Not tainted syzkaller #0 PREEMPT(full) [ 412.775569][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.775589][T11080] Call Trace: [ 412.775600][T11080] [ 412.775613][T11080] dump_stack_lvl+0x16c/0x1f0 [ 412.775655][T11080] should_fail_ex+0x512/0x640 [ 412.775695][T11080] ? __kmalloc_cache_noprof+0x5f/0x780 [ 412.775755][T11080] should_failslab+0xc2/0x120 [ 412.775798][T11080] __kmalloc_cache_noprof+0x72/0x780 [ 412.775862][T11080] ? loopback_open+0xa4e/0x13f0 [ 412.775907][T11080] ? loopback_open+0xa4e/0x13f0 [ 412.775942][T11080] loopback_open+0xa4e/0x13f0 [ 412.775988][T11080] snd_pcm_open_substream+0xa5d/0x17f0 [ 412.776029][T11080] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 412.776069][T11080] ? rcu_is_watching+0x12/0xc0 [ 412.776111][T11080] snd_pcm_open+0x29e/0x730 [ 412.776151][T11080] ? __pfx_snd_pcm_open+0x10/0x10 [ 412.776191][T11080] ? __pfx_default_wake_function+0x10/0x10 [ 412.776237][T11080] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 412.776275][T11080] snd_pcm_capture_open+0x89/0xe0 [ 412.776311][T11080] snd_open+0x22d/0x4c0 [ 412.776358][T11080] ? __pfx_snd_open+0x10/0x10 [ 412.776403][T11080] chrdev_open+0x234/0x6a0 [ 412.776440][T11080] ? __pfx_apparmor_file_open+0x10/0x10 [ 412.776487][T11080] ? __pfx_chrdev_open+0x10/0x10 [ 412.776528][T11080] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 412.776572][T11080] do_dentry_open+0x982/0x1530 [ 412.776608][T11080] ? __pfx_chrdev_open+0x10/0x10 [ 412.776655][T11080] vfs_open+0x82/0x3f0 [ 412.776706][T11080] path_openat+0x1de4/0x2cb0 [ 412.776759][T11080] ? __pfx_path_openat+0x10/0x10 [ 412.776806][T11080] do_filp_open+0x20b/0x470 [ 412.776852][T11080] ? __pfx_do_filp_open+0x10/0x10 [ 412.776920][T11080] ? alloc_fd+0x471/0x7d0 [ 412.776964][T11080] do_sys_openat2+0x11b/0x1d0 [ 412.777012][T11080] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.777076][T11080] __x64_sys_openat+0x174/0x210 [ 412.777124][T11080] ? __pfx___x64_sys_openat+0x10/0x10 [ 412.777189][T11080] do_syscall_64+0xcd/0xfa0 [ 412.777230][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.777262][T11080] RIP: 0033:0x7fb3c158eec9 [ 412.777288][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.777321][T11080] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.777350][T11080] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 412.777373][T11080] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 412.777395][T11080] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.777414][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.777435][T11080] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 412.777479][T11080] [ 413.076790][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.2.1136 Not tainted syzkaller #0 PREEMPT(full) [ 413.076824][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.076841][T11082] Call Trace: [ 413.076850][T11082] [ 413.076861][T11082] dump_stack_lvl+0x16c/0x1f0 [ 413.076897][T11082] should_fail_ex+0x512/0x640 [ 413.076930][T11082] ? fs_reclaim_acquire+0xae/0x150 [ 413.076970][T11082] should_failslab+0xc2/0x120 [ 413.077007][T11082] __kmalloc_noprof+0xdd/0x880 [ 413.077058][T11082] ? tomoyo_encode2+0x100/0x3e0 [ 413.077099][T11082] ? tomoyo_encode2+0x100/0x3e0 [ 413.077127][T11082] tomoyo_encode2+0x100/0x3e0 [ 413.077161][T11082] tomoyo_encode+0x29/0x50 [ 413.077188][T11082] tomoyo_realpath_from_path+0x18f/0x6e0 [ 413.077229][T11082] tomoyo_path_number_perm+0x245/0x580 [ 413.077270][T11082] ? tomoyo_path_number_perm+0x237/0x580 [ 413.077315][T11082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 413.077360][T11082] ? find_held_lock+0x2b/0x80 [ 413.077422][T11082] ? find_held_lock+0x2b/0x80 [ 413.077449][T11082] ? hook_file_ioctl_common+0x145/0x410 [ 413.077504][T11082] ? __fget_files+0x20e/0x3c0 [ 413.077538][T11082] security_file_ioctl+0x9b/0x240 [ 413.077583][T11082] __x64_sys_ioctl+0xb7/0x210 [ 413.077627][T11082] do_syscall_64+0xcd/0xfa0 [ 413.077662][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.077691][T11082] RIP: 0033:0x7f4b7578eec9 [ 413.077712][T11082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.077741][T11082] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.077767][T11082] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 413.077785][T11082] RDX: 0000000000000004 RSI: 0000000040106f52 RDI: 0000000000000003 [ 413.077803][T11082] RBP: 00007f4b766ce090 R08: 0000000000000000 R09: 0000000000000000 [ 413.077820][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.077837][T11082] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 413.077875][T11082] [ 413.357568][T11082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 413.364315][T11082] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 413.383585][T11065] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 413.390605][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 413.635130][T11065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.664509][T11065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.687196][T11065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.751450][T11094] FAULT_INJECTION: forcing a failure. [ 413.751450][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 413.764235][T11094] CPU: 1 UID: 0 PID: 11094 Comm: syz.2.1139 Not tainted syzkaller #0 PREEMPT(full) [ 413.764271][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.764289][T11094] Call Trace: [ 413.764299][T11094] [ 413.764310][T11094] dump_stack_lvl+0x16c/0x1f0 [ 413.764349][T11094] should_fail_ex+0x512/0x640 [ 413.764385][T11094] ? __kmalloc_cache_noprof+0x5f/0x780 [ 413.764437][T11094] should_failslab+0xc2/0x120 [ 413.764476][T11094] __kmalloc_cache_noprof+0x72/0x780 [ 413.764520][T11094] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 413.764561][T11094] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 413.764602][T11094] ? loopback_open+0x145/0x13f0 [ 413.764641][T11094] ? loopback_open+0x145/0x13f0 [ 413.764671][T11094] loopback_open+0x145/0x13f0 [ 413.764712][T11094] snd_pcm_open_substream+0xa5d/0x17f0 [ 413.764756][T11094] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 413.764795][T11094] ? rcu_is_watching+0x12/0xc0 [ 413.764834][T11094] snd_pcm_open+0x29e/0x730 [ 413.764872][T11094] ? __pfx_snd_pcm_open+0x10/0x10 [ 413.764911][T11094] ? __pfx_default_wake_function+0x10/0x10 [ 413.764953][T11094] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 413.764987][T11094] snd_pcm_capture_open+0x89/0xe0 [ 413.765021][T11094] snd_open+0x22d/0x4c0 [ 413.765064][T11094] ? __pfx_snd_open+0x10/0x10 [ 413.765104][T11094] chrdev_open+0x234/0x6a0 [ 413.765137][T11094] ? __pfx_apparmor_file_open+0x10/0x10 [ 413.765180][T11094] ? __pfx_chrdev_open+0x10/0x10 [ 413.765216][T11094] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 413.765258][T11094] do_dentry_open+0x982/0x1530 [ 413.765292][T11094] ? __pfx_chrdev_open+0x10/0x10 [ 413.765336][T11094] vfs_open+0x82/0x3f0 [ 413.765383][T11094] path_openat+0x1de4/0x2cb0 [ 413.765428][T11094] ? __pfx_path_openat+0x10/0x10 [ 413.765471][T11094] do_filp_open+0x20b/0x470 [ 413.765504][T11094] ? __pfx_do_filp_open+0x10/0x10 [ 413.765565][T11094] ? alloc_fd+0x471/0x7d0 [ 413.765604][T11094] do_sys_openat2+0x11b/0x1d0 [ 413.765646][T11094] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.765704][T11094] __x64_sys_openat+0x174/0x210 [ 413.765755][T11094] ? __pfx___x64_sys_openat+0x10/0x10 [ 413.765818][T11094] do_syscall_64+0xcd/0xfa0 [ 413.765856][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.765886][T11094] RIP: 0033:0x7f4b7578eec9 [ 413.765915][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.765944][T11094] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.765972][T11094] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 413.765992][T11094] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 413.766010][T11094] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.766029][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.766046][T11094] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 413.766087][T11094] [ 414.057750][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.292018][T11124] FAULT_INJECTION: forcing a failure. [ 415.292018][T11124] name failslab, interval 1, probability 0, space 0, times 0 [ 415.341128][T11126] FAULT_INJECTION: forcing a failure. [ 415.341128][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 415.357519][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.1.1146 Not tainted syzkaller #0 PREEMPT(full) [ 415.357554][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.357573][T11126] Call Trace: [ 415.357582][T11126] [ 415.357593][T11126] dump_stack_lvl+0x16c/0x1f0 [ 415.357633][T11126] should_fail_ex+0x512/0x640 [ 415.357669][T11126] ? __kmalloc_noprof+0xca/0x880 [ 415.357719][T11126] should_failslab+0xc2/0x120 [ 415.357753][T11126] __kmalloc_noprof+0xdd/0x880 [ 415.357790][T11126] ? __asan_memcpy+0x3c/0x60 [ 415.357813][T11126] ? handler_new_ref+0x1b0/0xc60 [ 415.357857][T11126] ? handler_new_ref+0x1b0/0xc60 [ 415.357899][T11126] handler_new_ref+0x1b0/0xc60 [ 415.357945][T11126] v4l2_ctrl_new+0x196c/0x2190 [ 415.357995][T11126] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 415.358033][T11126] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 415.358080][T11126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.358124][T11126] v4l2_ctrl_new_std+0x1be/0x290 [ 415.358171][T11126] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 415.358213][T11126] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 415.358255][T11126] ? trace_kmalloc+0x2b/0xd0 [ 415.358287][T11126] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 415.358331][T11126] ? media_request_object_init+0x100/0x180 [ 415.358367][T11126] vicodec_open+0x1d9/0xf70 [ 415.358396][T11126] ? kobject_get_unless_zero+0x156/0x1e0 [ 415.358433][T11126] v4l2_open+0x1d2/0x5e0 [ 415.358466][T11126] ? __pfx_v4l2_open+0x10/0x10 [ 415.358500][T11126] chrdev_open+0x234/0x6a0 [ 415.358527][T11126] ? __pfx_apparmor_file_open+0x10/0x10 [ 415.358562][T11126] ? __pfx_chrdev_open+0x10/0x10 [ 415.358592][T11126] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 415.358625][T11126] do_dentry_open+0x982/0x1530 [ 415.358654][T11126] ? __pfx_chrdev_open+0x10/0x10 [ 415.358688][T11126] vfs_open+0x82/0x3f0 [ 415.358726][T11126] path_openat+0x1de4/0x2cb0 [ 415.358762][T11126] ? __pfx_path_openat+0x10/0x10 [ 415.358796][T11126] do_filp_open+0x20b/0x470 [ 415.358822][T11126] ? __pfx_do_filp_open+0x10/0x10 [ 415.358870][T11126] ? alloc_fd+0x471/0x7d0 [ 415.358906][T11126] do_sys_openat2+0x11b/0x1d0 [ 415.358940][T11126] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.358981][T11126] ? __x64_sys_openat+0x12e/0x210 [ 415.359022][T11126] __x64_sys_openat+0x174/0x210 [ 415.359058][T11126] ? __pfx___x64_sys_openat+0x10/0x10 [ 415.359108][T11126] do_syscall_64+0xcd/0xfa0 [ 415.359139][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.359163][T11126] RIP: 0033:0x7fb3c158eec9 [ 415.359182][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.359206][T11126] RSP: 002b:00007fb3c23a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 415.359230][T11126] RAX: ffffffffffffffda RBX: 00007fb3c17e6090 RCX: 00007fb3c158eec9 [ 415.359246][T11126] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 415.359262][T11126] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.359277][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.359292][T11126] R13: 00007fb3c17e6128 R14: 00007fb3c17e6090 R15: 00007ffce70b99c8 [ 415.359326][T11126] [ 415.359684][T11124] CPU: 1 UID: 0 PID: 11124 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(full) [ 415.359719][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.359736][T11124] Call Trace: [ 415.359745][T11124] [ 415.359757][T11124] dump_stack_lvl+0x16c/0x1f0 [ 415.359792][T11124] should_fail_ex+0x512/0x640 [ 415.359827][T11124] ? __kmalloc_noprof+0xca/0x880 [ 415.359880][T11124] should_failslab+0xc2/0x120 [ 415.359920][T11124] __kmalloc_noprof+0xdd/0x880 [ 415.359969][T11124] ? process_preds+0x48b/0x1c50 [ 415.360017][T11124] ? process_preds+0x48b/0x1c50 [ 415.360056][T11124] process_preds+0x48b/0x1c50 [ 415.360104][T11124] ? create_filter_start.constprop.0+0x56/0x300 [ 415.360151][T11124] create_filter+0x140/0x210 [ 415.360197][T11124] ? __pfx_create_filter+0x10/0x10 [ 415.360242][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 415.360276][T11124] ? find_held_lock+0x2b/0x80 [ 415.360311][T11124] apply_event_filter+0x220/0x500 [ 415.360355][T11124] ? __pfx_apply_event_filter+0x10/0x10 [ 415.360408][T11124] event_filter_write+0x16d/0x290 [ 415.360441][T11124] ? __pfx_event_filter_write+0x10/0x10 [ 415.360468][T11124] vfs_write+0x2a0/0x11d0 [ 415.360506][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 415.360542][T11124] ? __pfx_vfs_write+0x10/0x10 [ 415.360585][T11124] ? __fget_files+0x20e/0x3c0 [ 415.360625][T11124] ksys_write+0x12a/0x250 [ 415.360656][T11124] ? __pfx_ksys_write+0x10/0x10 [ 415.360699][T11124] do_syscall_64+0xcd/0xfa0 [ 415.360737][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.360767][T11124] RIP: 0033:0x7f4b7578eec9 [ 415.360790][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.360817][T11124] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.360843][T11124] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 415.360863][T11124] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 415.360886][T11124] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.360904][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.360921][T11124] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 415.360963][T11124] [ 415.900039][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.913266][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.919361][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.925456][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 416.396843][T11105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.414144][T11105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.472327][T11105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.478718][T11105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.497566][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.595316][T11135] openvswitch: HfR: Dropping previously announced user features [ 416.675750][T11141] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.699533][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 417.136568][T11153] FAULT_INJECTION: forcing a failure. [ 417.136568][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 417.181429][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.1.1153 Not tainted syzkaller #0 PREEMPT(full) [ 417.181469][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.181486][T11153] Call Trace: [ 417.181497][T11153] [ 417.181506][T11153] dump_stack_lvl+0x16c/0x1f0 [ 417.181534][T11153] should_fail_ex+0x512/0x640 [ 417.181559][T11153] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 417.181582][T11153] should_failslab+0xc2/0x120 [ 417.181609][T11153] kmem_cache_alloc_noprof+0x75/0x6e0 [ 417.181629][T11153] ? __pmd_alloc+0xbf/0x8b0 [ 417.181660][T11153] ? __pmd_alloc+0xbf/0x8b0 [ 417.181686][T11153] __pmd_alloc+0xbf/0x8b0 [ 417.181715][T11153] __handle_mm_fault+0xada/0x2aa0 [ 417.181755][T11153] ? mt_find+0x3e2/0xa20 [ 417.181781][T11153] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.181810][T11153] ? __pfx_mt_find+0x10/0x10 [ 417.181849][T11153] ? find_vma+0xbf/0x140 [ 417.181872][T11153] ? __pfx_find_vma+0x10/0x10 [ 417.181898][T11153] handle_mm_fault+0x589/0xd10 [ 417.181930][T11153] ? __pkru_allows_pkey+0x11/0xb0 [ 417.181964][T11153] do_user_addr_fault+0x7a6/0x1370 [ 417.181986][T11153] ? rcu_is_watching+0x12/0xc0 [ 417.182011][T11153] exc_page_fault+0x64/0xc0 [ 417.182034][T11153] asm_exc_page_fault+0x26/0x30 [ 417.182052][T11153] RIP: 0010:__put_user_4+0xd/0x20 [ 417.182075][T11153] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 417.182095][T11153] RSP: 0018:ffffc900044cfe18 EFLAGS: 00050246 [ 417.182111][T11153] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000 [ 417.182123][T11153] RDX: ffff88802c3e8000 RSI: ffffffff892a6074 RDI: ffffffff8bf1d740 [ 417.182137][T11153] RBP: 1ffff92000899fc7 R08: edbc7214ceca522d R09: 0000000000000001 [ 417.182149][T11153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000007 [ 417.182161][T11153] R13: 0000000000000008 R14: 0000000000000004 R15: dffffc0000000000 [ 417.182182][T11153] ? __sys_socketpair+0x114/0x5a0 [ 417.182219][T11153] __sys_socketpair+0x120/0x5a0 [ 417.182252][T11153] ? __pfx___sys_socketpair+0x10/0x10 [ 417.182283][T11153] ? fput+0x9b/0xd0 [ 417.182311][T11153] ? __pfx_ksys_write+0x10/0x10 [ 417.182338][T11153] __x64_sys_socketpair+0x96/0x100 [ 417.182369][T11153] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.182392][T11153] do_syscall_64+0xcd/0xfa0 [ 417.182416][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.182436][T11153] RIP: 0033:0x7fb3c158eec9 [ 417.182451][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.182470][T11153] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 417.182488][T11153] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 417.182503][T11153] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 417.182515][T11153] RBP: 00007fb3c23c8090 R08: 0000000000000000 R09: 0000000000000000 [ 417.182527][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.182538][T11153] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 417.182565][T11153] [ 417.498299][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.606302][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.857309][T11166] FAULT_INJECTION: forcing a failure. [ 417.857309][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 417.900319][T11148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.907331][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.1.1157 Not tainted syzkaller #0 PREEMPT(full) [ 417.907361][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.907374][T11166] Call Trace: [ 417.907381][T11166] [ 417.907389][T11166] dump_stack_lvl+0x16c/0x1f0 [ 417.907417][T11166] should_fail_ex+0x512/0x640 [ 417.907447][T11166] ? __kmalloc_noprof+0xca/0x880 [ 417.907490][T11166] should_failslab+0xc2/0x120 [ 417.907529][T11166] __kmalloc_noprof+0xdd/0x880 [ 417.907569][T11166] ? process_preds+0x48b/0x1c50 [ 417.907602][T11166] ? process_preds+0x48b/0x1c50 [ 417.907629][T11166] process_preds+0x48b/0x1c50 [ 417.907662][T11166] ? create_filter_start.constprop.0+0x56/0x300 [ 417.907696][T11166] create_filter+0x140/0x210 [ 417.907725][T11166] ? __pfx_create_filter+0x10/0x10 [ 417.907756][T11166] ? __pfx___mutex_lock+0x10/0x10 [ 417.907780][T11166] ? find_held_lock+0x2b/0x80 [ 417.907804][T11166] apply_event_filter+0x220/0x500 [ 417.907835][T11166] ? __pfx_apply_event_filter+0x10/0x10 [ 417.907873][T11166] event_filter_write+0x16d/0x290 [ 417.907896][T11166] ? __pfx_event_filter_write+0x10/0x10 [ 417.907916][T11166] vfs_write+0x2a0/0x11d0 [ 417.907941][T11166] ? __pfx___mutex_lock+0x10/0x10 [ 417.907966][T11166] ? __pfx_vfs_write+0x10/0x10 [ 417.907996][T11166] ? __fget_files+0x20e/0x3c0 [ 417.908025][T11166] ksys_write+0x12a/0x250 [ 417.908046][T11166] ? __pfx_ksys_write+0x10/0x10 [ 417.908076][T11166] do_syscall_64+0xcd/0xfa0 [ 417.908102][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.908123][T11166] RIP: 0033:0x7fb3c158eec9 [ 417.908139][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.908159][T11166] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.908178][T11166] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 417.908192][T11166] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 417.908206][T11166] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.908218][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.908231][T11166] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 417.908260][T11166] [ 418.132015][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.185797][T11148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.191962][T11148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.198142][T11148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.272532][T11172] FAULT_INJECTION: forcing a failure. [ 418.272532][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 418.289828][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.3.1159 Not tainted syzkaller #0 PREEMPT(full) [ 418.289866][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.289884][T11172] Call Trace: [ 418.289894][T11172] [ 418.289906][T11172] dump_stack_lvl+0x16c/0x1f0 [ 418.289945][T11172] should_fail_ex+0x512/0x640 [ 418.289979][T11172] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 418.290019][T11172] should_failslab+0xc2/0x120 [ 418.290058][T11172] __kvmalloc_node_noprof+0x141/0x9c0 [ 418.290095][T11172] ? v4l2_ctrl_new+0x982/0x2190 [ 418.290141][T11172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.290199][T11172] ? v4l2_ctrl_new+0x982/0x2190 [ 418.290243][T11172] v4l2_ctrl_new+0x982/0x2190 [ 418.290305][T11172] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 418.290349][T11172] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 418.290405][T11172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.290457][T11172] v4l2_ctrl_new_std+0x1be/0x290 [ 418.290515][T11172] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 418.290560][T11172] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 418.290611][T11172] ? trace_kmalloc+0x2b/0xd0 [ 418.290650][T11172] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 418.290712][T11172] ? media_request_object_init+0x100/0x180 [ 418.290755][T11172] vicodec_open+0x1d9/0xf70 [ 418.290791][T11172] ? kobject_get_unless_zero+0x156/0x1e0 [ 418.290836][T11172] v4l2_open+0x1d2/0x5e0 [ 418.290879][T11172] ? __pfx_v4l2_open+0x10/0x10 [ 418.290917][T11172] chrdev_open+0x234/0x6a0 [ 418.290951][T11172] ? __pfx_apparmor_file_open+0x10/0x10 [ 418.290993][T11172] ? __pfx_chrdev_open+0x10/0x10 [ 418.291030][T11172] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 418.291070][T11172] do_dentry_open+0x982/0x1530 [ 418.291104][T11172] ? __pfx_chrdev_open+0x10/0x10 [ 418.291147][T11172] vfs_open+0x82/0x3f0 [ 418.291193][T11172] path_openat+0x1de4/0x2cb0 [ 418.291237][T11172] ? __pfx_path_openat+0x10/0x10 [ 418.291279][T11172] do_filp_open+0x20b/0x470 [ 418.291312][T11172] ? __pfx_do_filp_open+0x10/0x10 [ 418.291371][T11172] ? alloc_fd+0x471/0x7d0 [ 418.291410][T11172] do_sys_openat2+0x11b/0x1d0 [ 418.291451][T11172] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.291506][T11172] __x64_sys_openat+0x174/0x210 [ 418.291550][T11172] ? __pfx___x64_sys_openat+0x10/0x10 [ 418.291611][T11172] do_syscall_64+0xcd/0xfa0 [ 418.291647][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.291684][T11172] RIP: 0033:0x7f062598eec9 [ 418.291707][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.291737][T11172] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.291765][T11172] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 418.291786][T11172] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 418.291805][T11172] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.291824][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.291842][T11172] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 418.291883][T11172] [ 418.599345][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.936249][T11175] FAULT_INJECTION: forcing a failure. [ 418.936249][T11175] name failslab, interval 1, probability 0, space 0, times 0 [ 418.950403][T11175] CPU: 1 UID: 0 PID: 11175 Comm: syz.1.1168 Not tainted syzkaller #0 PREEMPT(full) [ 418.950441][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.950459][T11175] Call Trace: [ 418.950469][T11175] [ 418.950481][T11175] dump_stack_lvl+0x16c/0x1f0 [ 418.950519][T11175] should_fail_ex+0x512/0x640 [ 418.950555][T11175] ? __kmalloc_noprof+0xca/0x880 [ 418.950605][T11175] should_failslab+0xc2/0x120 [ 418.950640][T11175] __kmalloc_noprof+0xdd/0x880 [ 418.950686][T11175] ? process_preds+0x46c/0x1c50 [ 418.950736][T11175] ? process_preds+0x46c/0x1c50 [ 418.950774][T11175] process_preds+0x46c/0x1c50 [ 418.950823][T11175] ? create_filter_start.constprop.0+0x56/0x300 [ 418.950869][T11175] create_filter+0x140/0x210 [ 418.950908][T11175] ? __pfx_create_filter+0x10/0x10 [ 418.950950][T11175] ? __pfx___mutex_lock+0x10/0x10 [ 418.950983][T11175] ? find_held_lock+0x2b/0x80 [ 418.951014][T11175] apply_event_filter+0x220/0x500 [ 418.951056][T11175] ? __pfx_apply_event_filter+0x10/0x10 [ 418.951106][T11175] event_filter_write+0x16d/0x290 [ 418.951136][T11175] ? __pfx_event_filter_write+0x10/0x10 [ 418.951162][T11175] vfs_write+0x2a0/0x11d0 [ 418.951197][T11175] ? __pfx___mutex_lock+0x10/0x10 [ 418.951230][T11175] ? __pfx_vfs_write+0x10/0x10 [ 418.951270][T11175] ? __fget_files+0x20e/0x3c0 [ 418.951307][T11175] ksys_write+0x12a/0x250 [ 418.951337][T11175] ? __pfx_ksys_write+0x10/0x10 [ 418.951388][T11175] do_syscall_64+0xcd/0xfa0 [ 418.951423][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.951451][T11175] RIP: 0033:0x7fb3c158eec9 [ 418.951473][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.951500][T11175] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.951526][T11175] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 418.951544][T11175] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.951561][T11175] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.951578][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.951594][T11175] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 418.951633][T11175] [ 419.181012][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.204448][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.573676][T11184] FAULT_INJECTION: forcing a failure. [ 419.573676][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.587600][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.0.1162 Not tainted syzkaller #0 PREEMPT(full) [ 419.587630][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.587644][T11184] Call Trace: [ 419.587652][T11184] [ 419.587661][T11184] dump_stack_lvl+0x16c/0x1f0 [ 419.587692][T11184] should_fail_ex+0x512/0x640 [ 419.587725][T11184] core_sys_select+0x94e/0xc20 [ 419.587755][T11184] ? __pfx_core_sys_select+0x10/0x10 [ 419.587783][T11184] ? proc_fail_nth_write+0x9f/0x220 [ 419.587831][T11184] ? do_sys_openat2+0x157/0x1d0 [ 419.587866][T11184] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.587902][T11184] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.587943][T11184] kern_select+0x15d/0x1e0 [ 419.587964][T11184] ? __pfx_kern_select+0x10/0x10 [ 419.587990][T11184] ? __pfx_ksys_write+0x10/0x10 [ 419.588020][T11184] __x64_sys_select+0xbd/0x160 [ 419.588041][T11184] ? do_syscall_64+0x91/0xfa0 [ 419.588067][T11184] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.588093][T11184] do_syscall_64+0xcd/0xfa0 [ 419.588121][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.588145][T11184] RIP: 0033:0x7f8f33f8eec9 [ 419.588163][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.588186][T11184] RSP: 002b:00007f8f34eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 419.588207][T11184] RAX: ffffffffffffffda RBX: 00007f8f341e5fa0 RCX: 00007f8f33f8eec9 [ 419.588222][T11184] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 419.588236][T11184] RBP: 00007f8f34eab090 R08: 0000000000000000 R09: 0000000000000000 [ 419.588251][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.588265][T11184] R13: 00007f8f341e6038 R14: 00007f8f341e5fa0 R15: 00007ffee0a08638 [ 419.588299][T11184] [ 420.000238][T11188] FAULT_INJECTION: forcing a failure. [ 420.000238][T11188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 420.024445][T11188] CPU: 0 UID: 0 PID: 11188 Comm: syz.0.1163 Not tainted syzkaller #0 PREEMPT(full) [ 420.024483][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.024502][T11188] Call Trace: [ 420.024512][T11188] [ 420.024523][T11188] dump_stack_lvl+0x16c/0x1f0 [ 420.024569][T11188] should_fail_ex+0x512/0x640 [ 420.024612][T11188] get_futex_key+0x1d0/0x1560 [ 420.024654][T11188] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.024688][T11188] ? __pfx_get_futex_key+0x10/0x10 [ 420.024730][T11188] ? __pfx_wake_up_new_task+0x10/0x10 [ 420.024765][T11188] futex_wake+0xea/0x530 [ 420.024811][T11188] ? kernel_clone+0x253/0x930 [ 420.024847][T11188] ? __pfx_futex_wake+0x10/0x10 [ 420.024910][T11188] do_futex+0x1e3/0x350 [ 420.024951][T11188] ? __pfx_do_futex+0x10/0x10 [ 420.024993][T11188] ? __pfx___do_sys_clone+0x10/0x10 [ 420.025030][T11188] ? __sys_sendmsg+0x18c/0x220 [ 420.025069][T11188] __x64_sys_futex+0x1e0/0x4c0 [ 420.025114][T11188] ? __pfx___x64_sys_futex+0x10/0x10 [ 420.025155][T11188] ? xfd_validate_state+0x61/0x180 [ 420.025210][T11188] do_syscall_64+0xcd/0xfa0 [ 420.025247][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.025281][T11188] RIP: 0033:0x7f8f33f8eec9 [ 420.025306][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.025334][T11188] RSP: 002b:00007f8f34eab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 420.025362][T11188] RAX: ffffffffffffffda RBX: 00007f8f341e5fa8 RCX: 00007f8f33f8eec9 [ 420.025381][T11188] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f341e5fac [ 420.025400][T11188] RBP: 00007f8f341e5fa0 R08: 00007f8f34eac000 R09: 0000000000000000 [ 420.025419][T11188] R10: 0000000000000422 R11: 0000000000000246 R12: 0000000000000000 [ 420.025437][T11188] R13: 00007f8f341e6038 R14: 00007ffee0a08550 R15: 00007ffee0a08638 [ 420.025477][T11188] [ 420.257811][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 420.263903][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.270219][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 420.840747][T11176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.855792][T11176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.863034][T11176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.870228][T11176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 421.150707][T11211] FAULT_INJECTION: forcing a failure. [ 421.150707][T11211] name failslab, interval 1, probability 0, space 0, times 0 [ 421.165168][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.2.1169 Not tainted syzkaller #0 PREEMPT(full) [ 421.165216][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.165235][T11211] Call Trace: [ 421.165245][T11211] [ 421.165256][T11211] dump_stack_lvl+0x16c/0x1f0 [ 421.165295][T11211] should_fail_ex+0x512/0x640 [ 421.165330][T11211] ? __kmalloc_noprof+0xca/0x880 [ 421.165379][T11211] should_failslab+0xc2/0x120 [ 421.165418][T11211] __kmalloc_noprof+0xdd/0x880 [ 421.165465][T11211] ? __asan_memcpy+0x3c/0x60 [ 421.165492][T11211] ? handler_new_ref+0x1b0/0xc60 [ 421.165548][T11211] ? handler_new_ref+0x1b0/0xc60 [ 421.165592][T11211] handler_new_ref+0x1b0/0xc60 [ 421.165648][T11211] v4l2_ctrl_new+0x196c/0x2190 [ 421.165708][T11211] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 421.165752][T11211] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 421.165809][T11211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.165862][T11211] v4l2_ctrl_new_std+0x1be/0x290 [ 421.165922][T11211] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 421.165967][T11211] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 421.166022][T11211] ? trace_kmalloc+0x2b/0xd0 [ 421.166060][T11211] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 421.166112][T11211] ? media_request_object_init+0x100/0x180 [ 421.166156][T11211] vicodec_open+0x1d9/0xf70 [ 421.166193][T11211] ? kobject_get_unless_zero+0x156/0x1e0 [ 421.166251][T11211] v4l2_open+0x1d2/0x5e0 [ 421.166291][T11211] ? __pfx_v4l2_open+0x10/0x10 [ 421.166332][T11211] chrdev_open+0x234/0x6a0 [ 421.166364][T11211] ? __pfx_apparmor_file_open+0x10/0x10 [ 421.166406][T11211] ? __pfx_chrdev_open+0x10/0x10 [ 421.166442][T11211] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 421.166482][T11211] do_dentry_open+0x982/0x1530 [ 421.166516][T11211] ? __pfx_chrdev_open+0x10/0x10 [ 421.166557][T11211] vfs_open+0x82/0x3f0 [ 421.166602][T11211] path_openat+0x1de4/0x2cb0 [ 421.166646][T11211] ? __pfx_path_openat+0x10/0x10 [ 421.166687][T11211] do_filp_open+0x20b/0x470 [ 421.166719][T11211] ? __pfx_do_filp_open+0x10/0x10 [ 421.166778][T11211] ? alloc_fd+0x471/0x7d0 [ 421.166816][T11211] do_sys_openat2+0x11b/0x1d0 [ 421.166875][T11211] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.166937][T11211] __x64_sys_openat+0x174/0x210 [ 421.166982][T11211] ? __pfx___x64_sys_openat+0x10/0x10 [ 421.167045][T11211] do_syscall_64+0xcd/0xfa0 [ 421.167084][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.167114][T11211] RIP: 0033:0x7f4b7578eec9 [ 421.167138][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.167169][T11211] RSP: 002b:00007f4b766ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.167198][T11211] RAX: ffffffffffffffda RBX: 00007f4b759e6090 RCX: 00007f4b7578eec9 [ 421.167226][T11211] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 421.167247][T11211] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.167267][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.167286][T11211] R13: 00007f4b759e6128 R14: 00007f4b759e6090 R15: 00007ffe91d20858 [ 421.167329][T11211] [ 421.471912][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.948955][T11218] FAULT_INJECTION: forcing a failure. [ 421.948955][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 421.966684][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.0.1170 Not tainted syzkaller #0 PREEMPT(full) [ 421.966721][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.966740][T11218] Call Trace: [ 421.966751][T11218] [ 421.966763][T11218] dump_stack_lvl+0x16c/0x1f0 [ 421.966801][T11218] should_fail_ex+0x512/0x640 [ 421.966837][T11218] ? __kmalloc_noprof+0xca/0x880 [ 421.966887][T11218] should_failslab+0xc2/0x120 [ 421.966928][T11218] __kmalloc_noprof+0xdd/0x880 [ 421.966975][T11218] ? process_preds+0x46c/0x1c50 [ 421.967023][T11218] ? process_preds+0x46c/0x1c50 [ 421.967062][T11218] process_preds+0x46c/0x1c50 [ 421.967110][T11218] ? create_filter_start.constprop.0+0x56/0x300 [ 421.967157][T11218] create_filter+0x140/0x210 [ 421.967204][T11218] ? __pfx_create_filter+0x10/0x10 [ 421.967248][T11218] ? __pfx___mutex_lock+0x10/0x10 [ 421.967282][T11218] ? find_held_lock+0x2b/0x80 [ 421.967316][T11218] apply_event_filter+0x220/0x500 [ 421.967360][T11218] ? __pfx_apply_event_filter+0x10/0x10 [ 421.967420][T11218] event_filter_write+0x16d/0x290 [ 421.967454][T11218] ? __pfx_event_filter_write+0x10/0x10 [ 421.967488][T11218] vfs_write+0x2a0/0x11d0 [ 421.967526][T11218] ? __pfx___mutex_lock+0x10/0x10 [ 421.967561][T11218] ? __pfx_vfs_write+0x10/0x10 [ 421.967604][T11218] ? __fget_files+0x20e/0x3c0 [ 421.967644][T11218] ksys_write+0x12a/0x250 [ 421.967676][T11218] ? __pfx_ksys_write+0x10/0x10 [ 421.967720][T11218] do_syscall_64+0xcd/0xfa0 [ 421.967756][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.967786][T11218] RIP: 0033:0x7f8f33f8eec9 [ 421.967809][T11218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.967838][T11218] RSP: 002b:00007f8f34eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.967864][T11218] RAX: ffffffffffffffda RBX: 00007f8f341e5fa0 RCX: 00007f8f33f8eec9 [ 421.967884][T11218] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 421.967901][T11218] RBP: 00007f8f34011f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.967920][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.967937][T11218] R13: 00007f8f341e6038 R14: 00007f8f341e5fa0 R15: 00007ffee0a08638 [ 421.967976][T11218] [ 422.191711][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.205742][T11207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.223251][T11207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.229601][T11207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.235708][T11207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.370141][T11226] sysfs_service_op_store: Client not running :-5: [ 422.504206][T11227] hub 1-0:1.0: USB hub found [ 422.523622][T11227] hub 1-0:1.0: 1 port detected [ 422.544301][T11227] FAULT_INJECTION: forcing a failure. [ 422.544301][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 422.594854][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.2.1172 Not tainted syzkaller #0 PREEMPT(full) [ 422.594892][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.594911][T11227] Call Trace: [ 422.594922][T11227] [ 422.594934][T11227] dump_stack_lvl+0x16c/0x1f0 [ 422.594974][T11227] should_fail_ex+0x512/0x640 [ 422.595010][T11227] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 422.595044][T11227] should_failslab+0xc2/0x120 [ 422.595091][T11227] kmem_cache_alloc_noprof+0x75/0x6e0 [ 422.595123][T11227] ? __kernfs_new_node+0xd2/0x8e0 [ 422.595167][T11227] ? __kernfs_new_node+0xd2/0x8e0 [ 422.595200][T11227] __kernfs_new_node+0xd2/0x8e0 [ 422.595243][T11227] ? __pfx___kernfs_new_node+0x10/0x10 [ 422.595289][T11227] ? find_held_lock+0x2b/0x80 [ 422.595321][T11227] ? kernfs_root+0xee/0x2a0 [ 422.595366][T11227] kernfs_new_node+0x13c/0x1e0 [ 422.595416][T11227] __kernfs_create_file+0x53/0x350 [ 422.595453][T11227] sysfs_add_file_mode_ns+0x207/0x3c0 [ 422.595500][T11227] sysfs_merge_group+0x1aa/0x340 [ 422.595540][T11227] ? __pfx_sysfs_merge_group+0x10/0x10 [ 422.595586][T11227] ? __pfx_dev_add_physical_location+0x10/0x10 [ 422.595625][T11227] ? bus_to_subsys+0x131/0x160 [ 422.595671][T11227] dpm_sysfs_add+0x237/0x280 [ 422.595713][T11227] device_add+0x9a6/0x1aa0 [ 422.595753][T11227] ? __pfx_device_add+0x10/0x10 [ 422.595789][T11227] ? lockdep_init_map_type+0x5c/0x280 [ 422.595832][T11227] ? __init_waitqueue_head+0xca/0x150 [ 422.595885][T11227] usb_hub_create_port_device+0x3a1/0xde0 [ 422.595920][T11227] hub_probe+0x203b/0x3480 [ 422.595954][T11227] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.595987][T11227] ? __pfx_hub_probe+0x10/0x10 [ 422.596011][T11227] ? mark_held_locks+0x49/0x80 [ 422.596038][T11227] ? hw_breakpoint_arch_parse+0x120/0x920 [ 422.596069][T11227] ? mark_held_locks+0x49/0x80 [ 422.596102][T11227] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.596129][T11227] usb_probe_interface+0x300/0xa40 [ 422.596163][T11227] ? __pfx_usb_probe_interface+0x10/0x10 [ 422.596196][T11227] really_probe+0x23e/0xa90 [ 422.596220][T11227] __driver_probe_device+0x1de/0x440 [ 422.596245][T11227] driver_probe_device+0x4c/0x1b0 [ 422.596267][T11227] __device_attach_driver+0x1df/0x310 [ 422.596291][T11227] ? __pfx___device_attach_driver+0x10/0x10 [ 422.596313][T11227] bus_for_each_drv+0x156/0x1e0 [ 422.596345][T11227] ? __pfx_bus_for_each_drv+0x10/0x10 [ 422.596376][T11227] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.596400][T11227] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.596425][T11227] __device_attach+0x1e4/0x4b0 [ 422.596447][T11227] ? __pfx___device_attach+0x10/0x10 [ 422.596481][T11227] ? do_raw_spin_unlock+0x172/0x230 [ 422.596535][T11227] bus_probe_device+0x17f/0x1c0 [ 422.596585][T11227] device_add+0x1148/0x1aa0 [ 422.596618][T11227] ? __pfx_device_add+0x10/0x10 [ 422.596643][T11227] ? mark_held_locks+0x49/0x80 [ 422.596679][T11227] usb_set_configuration+0x1187/0x1e20 [ 422.596724][T11227] bConfigurationValue_store+0x100/0x180 [ 422.596752][T11227] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 422.596781][T11227] ? find_held_lock+0x2b/0x80 [ 422.596803][T11227] ? sysfs_file_kobj+0xe4/0x290 [ 422.596826][T11227] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 422.596858][T11227] dev_attr_store+0x55/0x80 [ 422.596891][T11227] ? __pfx_dev_attr_store+0x10/0x10 [ 422.596926][T11227] sysfs_kf_write+0xf2/0x150 [ 422.596952][T11227] kernfs_fop_write_iter+0x3af/0x570 [ 422.596984][T11227] ? __pfx_sysfs_kf_write+0x10/0x10 [ 422.597009][T11227] iter_file_splice_write+0xa21/0x12e0 [ 422.597048][T11227] ? __pfx_iter_file_splice_write+0x10/0x10 [ 422.597075][T11227] ? __pfx_copy_splice_read+0x10/0x10 [ 422.597131][T11227] ? __pfx_iter_file_splice_write+0x10/0x10 [ 422.597155][T11227] direct_splice_actor+0x18f/0x6c0 [ 422.597179][T11227] splice_direct_to_actor+0x342/0xa30 [ 422.597216][T11227] ? __pfx_direct_splice_actor+0x10/0x10 [ 422.597243][T11227] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 422.597286][T11227] do_splice_direct+0x174/0x240 [ 422.597307][T11227] ? __pfx_do_splice_direct+0x10/0x10 [ 422.597327][T11227] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 422.597367][T11227] ? rw_verify_area+0xcf/0x6c0 [ 422.597389][T11227] do_sendfile+0xb06/0xe50 [ 422.597416][T11227] ? __pfx_do_sendfile+0x10/0x10 [ 422.597441][T11227] ? __x64_sys_futex+0x1e0/0x4c0 [ 422.597473][T11227] ? __x64_sys_futex+0x1e9/0x4c0 [ 422.597517][T11227] __x64_sys_sendfile64+0x1d8/0x220 [ 422.597557][T11227] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 422.597611][T11227] do_syscall_64+0xcd/0xfa0 [ 422.597649][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.597680][T11227] RIP: 0033:0x7f4b7578eec9 [ 422.597702][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.597732][T11227] RSP: 002b:00007f4b766ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 422.597761][T11227] RAX: ffffffffffffffda RBX: 00007f4b759e6090 RCX: 00007f4b7578eec9 [ 422.597780][T11227] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 422.597796][T11227] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.597811][T11227] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 422.597827][T11227] R13: 00007f4b759e6128 R14: 00007f4b759e6090 R15: 00007ffe91d20858 [ 422.597862][T11227] [ 423.124207][T11227] hub 1-0:1.0: couldn't create port1 device. [ 423.138477][T11193] Bluetooth: hci0: command 0x0c1a tx timeout [ 423.155791][T11227] hub 1-0:1.0: config failed, out of memory (err -12) [ 423.717576][T11247] FAULT_INJECTION: forcing a failure. [ 423.717576][T11247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.758645][T11247] CPU: 0 UID: 0 PID: 11247 Comm: syz.2.1177 Not tainted syzkaller #0 PREEMPT(full) [ 423.758671][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.758683][T11247] Call Trace: [ 423.758690][T11247] [ 423.758697][T11247] dump_stack_lvl+0x16c/0x1f0 [ 423.758724][T11247] should_fail_ex+0x512/0x640 [ 423.758754][T11247] should_fail_alloc_page+0xe7/0x130 [ 423.758783][T11247] prepare_alloc_pages+0x3c2/0x610 [ 423.758810][T11247] ? rcu_is_watching+0x12/0xc0 [ 423.758835][T11247] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 423.758861][T11247] ? __lock_acquire+0x62e/0x1ce0 [ 423.758890][T11247] ? css_rstat_updated+0x1c2/0x510 [ 423.758915][T11247] ? __pfx_css_rstat_updated+0x10/0x10 [ 423.758938][T11247] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 423.758963][T11247] ? rcu_is_watching+0x12/0xc0 [ 423.758989][T11247] ? __lock_acquire+0xb97/0x1ce0 [ 423.759023][T11247] ? __lock_acquire+0x62e/0x1ce0 [ 423.759050][T11247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.759086][T11247] ? policy_nodemask+0xea/0x4e0 [ 423.759115][T11247] alloc_pages_mpol+0x1fb/0x550 [ 423.759143][T11247] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 423.759172][T11247] ? filemap_get_entry+0x1a7/0x3b0 [ 423.759197][T11247] folio_alloc_noprof+0x20/0x2d0 [ 423.759228][T11247] filemap_alloc_folio_noprof+0x3a1/0x470 [ 423.759256][T11247] ? filemap_add_folio+0x110/0x610 [ 423.759279][T11247] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 423.759315][T11247] __filemap_get_folio+0x5e1/0xc30 [ 423.759343][T11247] ioctx_alloc+0x761/0x2120 [ 423.759378][T11247] ? __pfx_ioctx_alloc+0x10/0x10 [ 423.759398][T11247] ? __might_fault+0x13b/0x190 [ 423.759425][T11247] __x64_sys_io_setup+0xc9/0x210 [ 423.759449][T11247] do_syscall_64+0xcd/0xfa0 [ 423.759475][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.759496][T11247] RIP: 0033:0x7f4b7578eec9 [ 423.759511][T11247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.759531][T11247] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 423.759550][T11247] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 423.759564][T11247] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000fff4 [ 423.759576][T11247] RBP: 00007f4b766ce090 R08: 0000000000000000 R09: 0000000000000000 [ 423.759588][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.759600][T11247] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 423.759627][T11247] [ 424.261967][T11193] Bluetooth: hci2: command 0x0c1a tx timeout [ 424.268499][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 424.301417][T11256] FAULT_INJECTION: forcing a failure. [ 424.301417][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 424.321561][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.3.1179 Not tainted syzkaller #0 PREEMPT(full) [ 424.321588][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.321601][T11256] Call Trace: [ 424.321609][T11256] [ 424.321617][T11256] dump_stack_lvl+0x16c/0x1f0 [ 424.321645][T11256] should_fail_ex+0x512/0x640 [ 424.321671][T11256] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 424.321696][T11256] should_failslab+0xc2/0x120 [ 424.321723][T11256] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 424.321746][T11256] ? __d_alloc+0x32/0xae0 [ 424.321773][T11256] ? __d_alloc+0x32/0xae0 [ 424.321794][T11256] __d_alloc+0x32/0xae0 [ 424.321820][T11256] d_alloc_pseudo+0x1c/0xc0 [ 424.321849][T11256] alloc_file_pseudo+0xcf/0x230 [ 424.321880][T11256] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 424.321910][T11256] ? alloc_fd+0x471/0x7d0 [ 424.321934][T11256] sock_alloc_file+0x50/0x210 [ 424.321962][T11256] __sys_socket+0x1c0/0x260 [ 424.322001][T11256] ? __pfx___sys_socket+0x10/0x10 [ 424.322033][T11256] ? xfd_validate_state+0x61/0x180 [ 424.322062][T11256] ? __pfx_ksys_write+0x10/0x10 [ 424.322089][T11256] __x64_sys_socket+0x72/0xb0 [ 424.322120][T11256] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.322143][T11256] do_syscall_64+0xcd/0xfa0 [ 424.322169][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.322189][T11256] RIP: 0033:0x7f062598eec9 [ 424.322206][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.322227][T11256] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 424.322247][T11256] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 424.322262][T11256] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 424.322274][T11256] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.322287][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.322299][T11256] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 424.322326][T11256] [ 424.534011][T11193] Bluetooth: hci3: command 0x0c1a tx timeout [ 424.540585][T11257] FAULT_INJECTION: forcing a failure. [ 424.540585][T11257] name failslab, interval 1, probability 0, space 0, times 0 [ 424.553311][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(full) [ 424.553347][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.553366][T11257] Call Trace: [ 424.553375][T11257] [ 424.553387][T11257] dump_stack_lvl+0x16c/0x1f0 [ 424.553426][T11257] should_fail_ex+0x512/0x640 [ 424.553461][T11257] ? __kmalloc_noprof+0xca/0x880 [ 424.553514][T11257] should_failslab+0xc2/0x120 [ 424.553555][T11257] __kmalloc_noprof+0xdd/0x880 [ 424.553613][T11257] ? __asan_memcpy+0x3c/0x60 [ 424.553640][T11257] ? handler_new_ref+0x1b0/0xc60 [ 424.553691][T11257] ? handler_new_ref+0x1b0/0xc60 [ 424.553728][T11257] handler_new_ref+0x1b0/0xc60 [ 424.553793][T11257] v4l2_ctrl_new+0x196c/0x2190 [ 424.553858][T11257] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 424.553894][T11257] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 424.553943][T11257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.554003][T11257] v4l2_ctrl_new_std+0x1be/0x290 [ 424.554058][T11257] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 424.554102][T11257] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 424.554152][T11257] ? trace_kmalloc+0x2b/0xd0 [ 424.554192][T11257] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 424.554246][T11257] ? media_request_object_init+0x100/0x180 [ 424.554288][T11257] vicodec_open+0x1d9/0xf70 [ 424.554324][T11257] ? kobject_get_unless_zero+0x156/0x1e0 [ 424.554369][T11257] v4l2_open+0x1d2/0x5e0 [ 424.554410][T11257] ? __pfx_v4l2_open+0x10/0x10 [ 424.554451][T11257] chrdev_open+0x234/0x6a0 [ 424.554483][T11257] ? __pfx_apparmor_file_open+0x10/0x10 [ 424.554525][T11257] ? __pfx_chrdev_open+0x10/0x10 [ 424.554562][T11257] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 424.554602][T11257] do_dentry_open+0x982/0x1530 [ 424.554635][T11257] ? __pfx_chrdev_open+0x10/0x10 [ 424.554678][T11257] vfs_open+0x82/0x3f0 [ 424.554724][T11257] path_openat+0x1de4/0x2cb0 [ 424.554768][T11257] ? __pfx_path_openat+0x10/0x10 [ 424.554811][T11257] do_filp_open+0x20b/0x470 [ 424.554843][T11257] ? __pfx_do_filp_open+0x10/0x10 [ 424.554903][T11257] ? alloc_fd+0x471/0x7d0 [ 424.554942][T11257] do_sys_openat2+0x11b/0x1d0 [ 424.554994][T11257] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.555053][T11257] __x64_sys_openat+0x174/0x210 [ 424.555096][T11257] ? __pfx___x64_sys_openat+0x10/0x10 [ 424.555154][T11257] do_syscall_64+0xcd/0xfa0 [ 424.555190][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.555220][T11257] RIP: 0033:0x7f4b7578eec9 [ 424.555243][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.555271][T11257] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.555299][T11257] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 424.555318][T11257] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 424.555338][T11257] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.555355][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.555382][T11257] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 424.555422][T11257] syzkaller syzkaller login: [ 425.027154][T11263] FAULT_INJECTION: forcing a failure. [ 425.027154][T11263] name failslab, interval 1, probability 0, space 0, times 0 [ 425.041035][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) [ 425.041061][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.041075][T11263] Call Trace: [ 425.041081][T11263] [ 425.041090][T11263] dump_stack_lvl+0x16c/0x1f0 [ 425.041118][T11263] should_fail_ex+0x512/0x640 [ 425.041143][T11263] ? __kmalloc_noprof+0xca/0x880 [ 425.041179][T11263] should_failslab+0xc2/0x120 [ 425.041206][T11263] __kmalloc_noprof+0xdd/0x880 [ 425.041239][T11263] ? process_preds+0x48b/0x1c50 [ 425.041272][T11263] ? process_preds+0x48b/0x1c50 [ 425.041299][T11263] process_preds+0x48b/0x1c50 [ 425.041333][T11263] ? create_filter_start.constprop.0+0x56/0x300 [ 425.041366][T11263] create_filter+0x140/0x210 [ 425.041396][T11263] ? __pfx_create_filter+0x10/0x10 [ 425.041426][T11263] ? __pfx___mutex_lock+0x10/0x10 [ 425.041450][T11263] ? find_held_lock+0x2b/0x80 [ 425.041474][T11263] apply_event_filter+0x220/0x500 [ 425.041504][T11263] ? __pfx_apply_event_filter+0x10/0x10 [ 425.041542][T11263] event_filter_write+0x16d/0x290 [ 425.041565][T11263] ? __pfx_event_filter_write+0x10/0x10 [ 425.041585][T11263] vfs_write+0x2a0/0x11d0 [ 425.041611][T11263] ? __pfx___mutex_lock+0x10/0x10 [ 425.041636][T11263] ? __pfx_vfs_write+0x10/0x10 [ 425.041666][T11263] ? __fget_files+0x20e/0x3c0 [ 425.041694][T11263] ksys_write+0x12a/0x250 [ 425.041715][T11263] ? __pfx_ksys_write+0x10/0x10 [ 425.041746][T11263] do_syscall_64+0xcd/0xfa0 [ 425.041771][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.041792][T11263] RIP: 0033:0x7f4b7578eec9 [ 425.041808][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.041828][T11263] RSP: 002b:00007f4b766ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.041847][T11263] RAX: ffffffffffffffda RBX: 00007f4b759e6090 RCX: 00007f4b7578eec9 [ 425.041861][T11263] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 425.041873][T11263] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.041886][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.041899][T11263] R13: 00007f4b759e6128 R14: 00007f4b759e6090 R15: 00007ffe91d20858 [ 425.041933][T11263] [ 426.665753][T11295] FAULT_INJECTION: forcing a failure. [ 426.665753][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 426.686893][T11295] CPU: 0 UID: 0 PID: 11295 Comm: syz.3.1190 Not tainted syzkaller #0 PREEMPT(full) [ 426.686928][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.686947][T11295] Call Trace: [ 426.686957][T11295] [ 426.686965][T11295] dump_stack_lvl+0x16c/0x1f0 [ 426.686993][T11295] should_fail_ex+0x512/0x640 [ 426.687019][T11295] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 426.687052][T11295] should_failslab+0xc2/0x120 [ 426.687080][T11295] __kvmalloc_node_noprof+0x141/0x9c0 [ 426.687107][T11295] ? v4l2_ctrl_new+0x982/0x2190 [ 426.687139][T11295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.687179][T11295] ? v4l2_ctrl_new+0x982/0x2190 [ 426.687210][T11295] v4l2_ctrl_new+0x982/0x2190 [ 426.687252][T11295] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 426.687283][T11295] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 426.687326][T11295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.687363][T11295] v4l2_ctrl_new_std+0x1be/0x290 [ 426.687404][T11295] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 426.687436][T11295] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 426.687472][T11295] ? trace_kmalloc+0x2b/0xd0 [ 426.687500][T11295] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 426.687537][T11295] ? media_request_object_init+0x100/0x180 [ 426.687568][T11295] vicodec_open+0x1d9/0xf70 [ 426.687594][T11295] ? kobject_get_unless_zero+0x156/0x1e0 [ 426.687626][T11295] v4l2_open+0x1d2/0x5e0 [ 426.687654][T11295] ? __pfx_v4l2_open+0x10/0x10 [ 426.687683][T11295] chrdev_open+0x234/0x6a0 [ 426.687706][T11295] ? __pfx_apparmor_file_open+0x10/0x10 [ 426.687737][T11295] ? __pfx_chrdev_open+0x10/0x10 [ 426.687763][T11295] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 426.687791][T11295] do_dentry_open+0x982/0x1530 [ 426.687815][T11295] ? __pfx_chrdev_open+0x10/0x10 [ 426.687844][T11295] vfs_open+0x82/0x3f0 [ 426.687876][T11295] path_openat+0x1de4/0x2cb0 [ 426.687907][T11295] ? __pfx_path_openat+0x10/0x10 [ 426.687937][T11295] do_filp_open+0x20b/0x470 [ 426.687960][T11295] ? __pfx_do_filp_open+0x10/0x10 [ 426.688001][T11295] ? alloc_fd+0x471/0x7d0 [ 426.688033][T11295] do_sys_openat2+0x11b/0x1d0 [ 426.688064][T11295] ? __pfx_do_sys_openat2+0x10/0x10 [ 426.688104][T11295] __x64_sys_openat+0x174/0x210 [ 426.688135][T11295] ? __pfx___x64_sys_openat+0x10/0x10 [ 426.688178][T11295] do_syscall_64+0xcd/0xfa0 [ 426.688204][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.688225][T11295] RIP: 0033:0x7f062598eec9 [ 426.688241][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.688262][T11295] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.688281][T11295] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 426.688295][T11295] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 426.688308][T11295] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.688321][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.688334][T11295] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 426.688362][T11295] [ 427.485072][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 427.759122][T11317] FAULT_INJECTION: forcing a failure. [ 427.759122][T11317] name failslab, interval 1, probability 0, space 0, times 0 [ 427.813608][T11317] CPU: 1 UID: 0 PID: 11317 Comm: syz.2.1195 Not tainted syzkaller #0 PREEMPT(full) [ 427.813645][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.813662][T11317] Call Trace: [ 427.813673][T11317] [ 427.813684][T11317] dump_stack_lvl+0x16c/0x1f0 [ 427.813723][T11317] should_fail_ex+0x512/0x640 [ 427.813759][T11317] ? __kmalloc_noprof+0xca/0x880 [ 427.813810][T11317] should_failslab+0xc2/0x120 [ 427.813850][T11317] __kmalloc_noprof+0xdd/0x880 [ 427.813899][T11317] ? process_preds+0x48b/0x1c50 [ 427.813952][T11317] ? process_preds+0x48b/0x1c50 [ 427.813993][T11317] process_preds+0x48b/0x1c50 [ 427.814042][T11317] ? create_filter_start.constprop.0+0x56/0x300 [ 427.814091][T11317] create_filter+0x140/0x210 [ 427.814134][T11317] ? __pfx_create_filter+0x10/0x10 [ 427.814198][T11317] ? __pfx___mutex_lock+0x10/0x10 [ 427.814241][T11317] ? find_held_lock+0x2b/0x80 [ 427.814277][T11317] apply_event_filter+0x220/0x500 [ 427.814325][T11317] ? __pfx_apply_event_filter+0x10/0x10 [ 427.814394][T11317] event_filter_write+0x16d/0x290 [ 427.814428][T11317] ? __pfx_event_filter_write+0x10/0x10 [ 427.814461][T11317] vfs_write+0x2a0/0x11d0 [ 427.814498][T11317] ? __pfx___mutex_lock+0x10/0x10 [ 427.814534][T11317] ? __pfx_vfs_write+0x10/0x10 [ 427.814578][T11317] ? __fget_files+0x20e/0x3c0 [ 427.814620][T11317] ksys_write+0x12a/0x250 [ 427.814651][T11317] ? __pfx_ksys_write+0x10/0x10 [ 427.814694][T11317] do_syscall_64+0xcd/0xfa0 [ 427.814731][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.814762][T11317] RIP: 0033:0x7f4b7578eec9 [ 427.814785][T11317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.814814][T11317] RSP: 002b:00007f4b766ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.814842][T11317] RAX: ffffffffffffffda RBX: 00007f4b759e6090 RCX: 00007f4b7578eec9 [ 427.814861][T11317] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 427.814879][T11317] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.814898][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.814917][T11317] R13: 00007f4b759e6128 R14: 00007f4b759e6090 R15: 00007ffe91d20858 [ 427.814964][T11317] [ 428.041041][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.770169][T11311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.787430][T11311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.799028][T11311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.814875][T11311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.201862][T11330] bridge0: port 2(hsr0) entered blocking state [ 429.266893][T11330] bridge0: port 2(hsr0) entered disabled state [ 429.338386][T11334] FAULT_INJECTION: forcing a failure. [ 429.338386][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 429.413686][T11334] CPU: 0 UID: 0 PID: 11334 Comm: syz.3.1198 Not tainted syzkaller #0 PREEMPT(full) [ 429.413726][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.413745][T11334] Call Trace: [ 429.413755][T11334] [ 429.413766][T11334] dump_stack_lvl+0x16c/0x1f0 [ 429.413805][T11334] should_fail_ex+0x512/0x640 [ 429.413848][T11334] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 429.413882][T11334] should_failslab+0xc2/0x120 [ 429.413922][T11334] kmem_cache_alloc_noprof+0x75/0x6e0 [ 429.413950][T11334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.413996][T11334] ? alloc_vfsmnt+0x23/0x6b0 [ 429.414039][T11334] ? alloc_vfsmnt+0x23/0x6b0 [ 429.414073][T11334] alloc_vfsmnt+0x23/0x6b0 [ 429.414112][T11334] clone_mnt+0x4b/0x930 [ 429.414157][T11334] copy_tree+0x31d/0xbd0 [ 429.414196][T11334] copy_mnt_ns+0x1a9/0xac0 [ 429.414227][T11334] ? rcu_is_watching+0x12/0xc0 [ 429.414269][T11334] create_new_namespaces+0xd3/0xa90 [ 429.414302][T11334] ? bpf_lsm_capable+0x9/0x10 [ 429.414341][T11334] ? security_capable+0x7e/0x260 [ 429.414384][T11334] copy_namespaces+0x468/0x560 [ 429.414420][T11334] copy_process+0x2828/0x76a0 [ 429.414472][T11334] ? __pfx_copy_process+0x10/0x10 [ 429.414508][T11334] ? futex_private_hash_put+0x176/0x300 [ 429.414552][T11334] ? futex_private_hash_put+0x18a/0x300 [ 429.414596][T11334] kernel_clone+0xfc/0x930 [ 429.414634][T11334] ? __pfx_futex_wake+0x10/0x10 [ 429.414678][T11334] ? __pfx_kernel_clone+0x10/0x10 [ 429.414736][T11334] __do_sys_clone+0xce/0x120 [ 429.414773][T11334] ? __pfx___do_sys_clone+0x10/0x10 [ 429.414810][T11334] ? __sys_sendmsg+0x18c/0x220 [ 429.414867][T11334] ? xfd_validate_state+0x61/0x180 [ 429.414923][T11334] do_syscall_64+0xcd/0xfa0 [ 429.414960][T11334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.414990][T11334] RIP: 0033:0x7f062598eec9 [ 429.415013][T11334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.415043][T11334] RSP: 002b:00007f0626834fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 429.415071][T11334] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 429.415091][T11334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 429.415110][T11334] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.415128][T11334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 429.415146][T11334] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 429.415187][T11334] [ 429.680580][T11330] hsr0: entered allmulticast mode [ 429.718908][T11330] hsr_slave_0: entered allmulticast mode [ 429.727152][T11330] hsr_slave_1: entered allmulticast mode [ 429.771895][T11330] hsr0: entered promiscuous mode [ 429.779173][T11193] Bluetooth: hci0: command 0x0c1a tx timeout [ 429.785392][T11330] bridge0: port 2(hsr0) entered blocking state [ 429.791713][T11330] bridge0: port 2(hsr0) entered forwarding state [ 430.302261][T11352] hub 1-0:1.0: USB hub found [ 430.325225][T11352] hub 1-0:1.0: 1 port detected [ 430.348707][T11352] FAULT_INJECTION: forcing a failure. [ 430.348707][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 430.378551][T11353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.387536][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.3.1202 Not tainted syzkaller #0 PREEMPT(full) [ 430.387577][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.387597][T11352] Call Trace: [ 430.387609][T11352] [ 430.387621][T11352] dump_stack_lvl+0x16c/0x1f0 [ 430.387664][T11352] should_fail_ex+0x512/0x640 [ 430.387703][T11352] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 430.387740][T11352] should_failslab+0xc2/0x120 [ 430.387791][T11352] kmem_cache_alloc_noprof+0x75/0x6e0 [ 430.387824][T11352] ? __kernfs_new_node+0xd2/0x8e0 [ 430.387872][T11352] ? __kernfs_new_node+0xd2/0x8e0 [ 430.387910][T11352] __kernfs_new_node+0xd2/0x8e0 [ 430.387956][T11352] ? __pfx___kernfs_new_node+0x10/0x10 [ 430.388008][T11352] ? find_held_lock+0x2b/0x80 [ 430.388042][T11352] ? kernfs_root+0xee/0x2a0 [ 430.388091][T11352] kernfs_new_node+0x13c/0x1e0 [ 430.388145][T11352] __kernfs_create_file+0x53/0x350 [ 430.388183][T11352] sysfs_add_file_mode_ns+0x207/0x3c0 [ 430.388233][T11352] sysfs_merge_group+0x1aa/0x340 [ 430.388278][T11352] ? __pfx_sysfs_merge_group+0x10/0x10 [ 430.388327][T11352] ? __pfx_dev_add_physical_location+0x10/0x10 [ 430.388368][T11352] ? bus_to_subsys+0x131/0x160 [ 430.388419][T11352] dpm_sysfs_add+0x237/0x280 [ 430.388460][T11352] device_add+0x9a6/0x1aa0 [ 430.388505][T11352] ? __pfx_device_add+0x10/0x10 [ 430.388542][T11352] ? lockdep_init_map_type+0x5c/0x280 [ 430.388590][T11352] ? __init_waitqueue_head+0xca/0x150 [ 430.388654][T11352] usb_hub_create_port_device+0x3a1/0xde0 [ 430.388709][T11352] hub_probe+0x203b/0x3480 [ 430.388768][T11352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.388819][T11352] ? __pfx_hub_probe+0x10/0x10 [ 430.388856][T11352] ? mark_held_locks+0x49/0x80 [ 430.388898][T11352] ? hw_breakpoint_arch_parse+0x120/0x920 [ 430.388942][T11352] ? mark_held_locks+0x49/0x80 [ 430.388980][T11352] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 430.389018][T11352] usb_probe_interface+0x300/0xa40 [ 430.389066][T11352] ? __pfx_usb_probe_interface+0x10/0x10 [ 430.389118][T11352] really_probe+0x23e/0xa90 [ 430.389159][T11352] __driver_probe_device+0x1de/0x440 [ 430.389198][T11352] driver_probe_device+0x4c/0x1b0 [ 430.389235][T11352] __device_attach_driver+0x1df/0x310 [ 430.389272][T11352] ? __pfx___device_attach_driver+0x10/0x10 [ 430.389306][T11352] bus_for_each_drv+0x156/0x1e0 [ 430.389354][T11352] ? __pfx_bus_for_each_drv+0x10/0x10 [ 430.389402][T11352] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.389438][T11352] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 430.389480][T11352] __device_attach+0x1e4/0x4b0 [ 430.389513][T11352] ? __pfx___device_attach+0x10/0x10 [ 430.389549][T11352] ? do_raw_spin_unlock+0x172/0x230 [ 430.389608][T11352] bus_probe_device+0x17f/0x1c0 [ 430.389663][T11352] device_add+0x1148/0x1aa0 [ 430.389708][T11352] ? __pfx_device_add+0x10/0x10 [ 430.389748][T11352] ? mark_held_locks+0x49/0x80 [ 430.389811][T11352] usb_set_configuration+0x1187/0x1e20 [ 430.389883][T11352] bConfigurationValue_store+0x100/0x180 [ 430.389929][T11352] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 430.389974][T11352] ? find_held_lock+0x2b/0x80 [ 430.390007][T11352] ? sysfs_file_kobj+0xe4/0x290 [ 430.390045][T11352] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 430.390087][T11352] dev_attr_store+0x55/0x80 [ 430.390122][T11352] ? __pfx_dev_attr_store+0x10/0x10 [ 430.390158][T11352] sysfs_kf_write+0xf2/0x150 [ 430.390196][T11352] kernfs_fop_write_iter+0x3af/0x570 [ 430.390245][T11352] ? __pfx_sysfs_kf_write+0x10/0x10 [ 430.390284][T11352] iter_file_splice_write+0xa21/0x12e0 [ 430.390345][T11352] ? __pfx_iter_file_splice_write+0x10/0x10 [ 430.390387][T11352] ? __pfx_copy_splice_read+0x10/0x10 [ 430.390464][T11352] ? __pfx_iter_file_splice_write+0x10/0x10 [ 430.390501][T11352] direct_splice_actor+0x18f/0x6c0 [ 430.390539][T11352] splice_direct_to_actor+0x342/0xa30 [ 430.390598][T11352] ? __pfx_direct_splice_actor+0x10/0x10 [ 430.390638][T11352] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 430.390705][T11352] do_splice_direct+0x174/0x240 [ 430.390737][T11352] ? __pfx_do_splice_direct+0x10/0x10 [ 430.390774][T11352] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 430.390834][T11352] ? rw_verify_area+0xcf/0x6c0 [ 430.390868][T11352] do_sendfile+0xb06/0xe50 [ 430.390909][T11352] ? __pfx_do_sendfile+0x10/0x10 [ 430.390949][T11352] ? __x64_sys_futex+0x1e0/0x4c0 [ 430.390992][T11352] ? __x64_sys_futex+0x1e9/0x4c0 [ 430.391041][T11352] __x64_sys_sendfile64+0x1d8/0x220 [ 430.391083][T11352] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 430.391138][T11352] do_syscall_64+0xcd/0xfa0 [ 430.391178][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.391211][T11352] RIP: 0033:0x7f062598eec9 [ 430.391236][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.391268][T11352] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.391299][T11352] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 430.391323][T11352] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 430.391343][T11352] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.391364][T11352] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 430.391383][T11352] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 430.391430][T11352] [ 430.392262][T11352] hub 1-0:1.0: couldn't create port1 device. [ 430.817637][T11193] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.838857][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.895833][T11352] hub 1-0:1.0: config failed, out of memory (err -12) [ 430.902861][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 432.806168][T11367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.816342][T11367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.846796][T11367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.867910][T11367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.410878][T11397] FAULT_INJECTION: forcing a failure. [ 433.410878][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 433.424885][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.3.1213 Not tainted syzkaller #0 PREEMPT(full) [ 433.424920][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.424939][T11397] Call Trace: [ 433.424948][T11397] [ 433.424960][T11397] dump_stack_lvl+0x16c/0x1f0 [ 433.425000][T11397] should_fail_ex+0x512/0x640 [ 433.425036][T11397] ? __kmalloc_cache_noprof+0x5f/0x780 [ 433.425088][T11397] should_failslab+0xc2/0x120 [ 433.425128][T11397] __kmalloc_cache_noprof+0x72/0x780 [ 433.425176][T11397] ? loopback_open+0xa4e/0x13f0 [ 433.425215][T11397] ? loopback_open+0xa4e/0x13f0 [ 433.425246][T11397] loopback_open+0xa4e/0x13f0 [ 433.425287][T11397] snd_pcm_open_substream+0xa5d/0x17f0 [ 433.425323][T11397] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 433.425360][T11397] ? rcu_is_watching+0x12/0xc0 [ 433.425398][T11397] snd_pcm_open+0x29e/0x730 [ 433.425436][T11397] ? __pfx_snd_pcm_open+0x10/0x10 [ 433.425474][T11397] ? __pfx_default_wake_function+0x10/0x10 [ 433.425517][T11397] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 433.425559][T11397] snd_pcm_capture_open+0x89/0xe0 [ 433.425594][T11397] snd_open+0x22d/0x4c0 [ 433.425637][T11397] ? __pfx_snd_open+0x10/0x10 [ 433.425679][T11397] chrdev_open+0x234/0x6a0 [ 433.425713][T11397] ? __pfx_apparmor_file_open+0x10/0x10 [ 433.425755][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 433.425793][T11397] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 433.425833][T11397] do_dentry_open+0x982/0x1530 [ 433.425868][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 433.425911][T11397] vfs_open+0x82/0x3f0 [ 433.425958][T11397] path_openat+0x1de4/0x2cb0 [ 433.426003][T11397] ? __pfx_path_openat+0x10/0x10 [ 433.426046][T11397] do_filp_open+0x20b/0x470 [ 433.426080][T11397] ? __pfx_do_filp_open+0x10/0x10 [ 433.426140][T11397] ? alloc_fd+0x471/0x7d0 [ 433.426181][T11397] do_sys_openat2+0x11b/0x1d0 [ 433.426224][T11397] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.426283][T11397] __x64_sys_openat+0x174/0x210 [ 433.426328][T11397] ? __pfx___x64_sys_openat+0x10/0x10 [ 433.426388][T11397] do_syscall_64+0xcd/0xfa0 [ 433.426426][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.426456][T11397] RIP: 0033:0x7f062598eec9 [ 433.426479][T11397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.426510][T11397] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.426544][T11397] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 433.426565][T11397] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 433.426584][T11397] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.426603][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.426620][T11397] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 433.426662][T11397] [ 433.706683][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.716724][T11193] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.440371][T11409] FAULT_INJECTION: forcing a failure. [ 434.440371][T11409] name failslab, interval 1, probability 0, space 0, times 0 [ 434.503206][T11409] CPU: 0 UID: 0 PID: 11409 Comm: syz.1.1216 Not tainted syzkaller #0 PREEMPT(full) [ 434.503245][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.503263][T11409] Call Trace: [ 434.503274][T11409] [ 434.503286][T11409] dump_stack_lvl+0x16c/0x1f0 [ 434.503326][T11409] should_fail_ex+0x512/0x640 [ 434.503361][T11409] ? __kmalloc_noprof+0xca/0x880 [ 434.503412][T11409] should_failslab+0xc2/0x120 [ 434.503451][T11409] __kmalloc_noprof+0xdd/0x880 [ 434.503503][T11409] ? __asan_memcpy+0x3c/0x60 [ 434.503530][T11409] ? handler_new_ref+0x1b0/0xc60 [ 434.503583][T11409] ? handler_new_ref+0x1b0/0xc60 [ 434.503626][T11409] handler_new_ref+0x1b0/0xc60 [ 434.503684][T11409] v4l2_ctrl_new+0x196c/0x2190 [ 434.503743][T11409] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 434.503788][T11409] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 434.503844][T11409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.503897][T11409] v4l2_ctrl_new_std+0x1be/0x290 [ 434.503957][T11409] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 434.504002][T11409] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 434.504053][T11409] ? trace_kmalloc+0x2b/0xd0 [ 434.504092][T11409] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 434.504146][T11409] ? media_request_object_init+0x100/0x180 [ 434.504189][T11409] vicodec_open+0x1d9/0xf70 [ 434.504226][T11409] ? kobject_get_unless_zero+0x156/0x1e0 [ 434.504272][T11409] v4l2_open+0x1d2/0x5e0 [ 434.504310][T11409] ? __pfx_v4l2_open+0x10/0x10 [ 434.504351][T11409] chrdev_open+0x234/0x6a0 [ 434.504385][T11409] ? __pfx_apparmor_file_open+0x10/0x10 [ 434.504428][T11409] ? __pfx_chrdev_open+0x10/0x10 [ 434.504468][T11409] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 434.504507][T11409] do_dentry_open+0x982/0x1530 [ 434.504540][T11409] ? __pfx_chrdev_open+0x10/0x10 [ 434.504583][T11409] vfs_open+0x82/0x3f0 [ 434.504630][T11409] path_openat+0x1de4/0x2cb0 [ 434.504675][T11409] ? __pfx_path_openat+0x10/0x10 [ 434.504718][T11409] do_filp_open+0x20b/0x470 [ 434.504750][T11409] ? __pfx_do_filp_open+0x10/0x10 [ 434.504810][T11409] ? alloc_fd+0x471/0x7d0 [ 434.504849][T11409] do_sys_openat2+0x11b/0x1d0 [ 434.504891][T11409] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.504949][T11409] __x64_sys_openat+0x174/0x210 [ 434.504992][T11409] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.505052][T11409] do_syscall_64+0xcd/0xfa0 [ 434.505089][T11409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.505119][T11409] RIP: 0033:0x7fb3c158eec9 [ 434.505142][T11409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.505172][T11409] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.505200][T11409] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 434.505221][T11409] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 434.505240][T11409] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.505259][T11409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.505277][T11409] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 434.505318][T11409] [ 434.840717][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.907770][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.913806][T11193] Bluetooth: hci2: command 0x0c1a tx timeout [ 436.686786][T11438] FAULT_INJECTION: forcing a failure. [ 436.686786][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 436.707602][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.3.1224 Not tainted syzkaller #0 PREEMPT(full) [ 436.707643][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.707662][T11438] Call Trace: [ 436.707673][T11438] [ 436.707686][T11438] dump_stack_lvl+0x16c/0x1f0 [ 436.707729][T11438] should_fail_ex+0x512/0x640 [ 436.707769][T11438] ? __kmalloc_cache_noprof+0x5f/0x780 [ 436.707826][T11438] should_failslab+0xc2/0x120 [ 436.707872][T11438] __kmalloc_cache_noprof+0x72/0x780 [ 436.707927][T11438] ? loopback_open+0xa4e/0x13f0 [ 436.707972][T11438] ? loopback_open+0xa4e/0x13f0 [ 436.708009][T11438] loopback_open+0xa4e/0x13f0 [ 436.708056][T11438] snd_pcm_open_substream+0xa5d/0x17f0 [ 436.708099][T11438] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 436.708145][T11438] ? rcu_is_watching+0x12/0xc0 [ 436.708189][T11438] snd_pcm_open+0x29e/0x730 [ 436.708233][T11438] ? __pfx_snd_pcm_open+0x10/0x10 [ 436.708277][T11438] ? __pfx_default_wake_function+0x10/0x10 [ 436.708333][T11438] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 436.708372][T11438] snd_pcm_capture_open+0x89/0xe0 [ 436.708411][T11438] snd_open+0x22d/0x4c0 [ 436.708459][T11438] ? __pfx_snd_open+0x10/0x10 [ 436.708505][T11438] chrdev_open+0x234/0x6a0 [ 436.708543][T11438] ? __pfx_apparmor_file_open+0x10/0x10 [ 436.708592][T11438] ? __pfx_chrdev_open+0x10/0x10 [ 436.708635][T11438] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 436.708681][T11438] do_dentry_open+0x982/0x1530 [ 436.708731][T11438] ? __pfx_chrdev_open+0x10/0x10 [ 436.708778][T11438] vfs_open+0x82/0x3f0 [ 436.708844][T11438] path_openat+0x1de4/0x2cb0 [ 436.708888][T11438] ? __pfx_path_openat+0x10/0x10 [ 436.708930][T11438] do_filp_open+0x20b/0x470 [ 436.708962][T11438] ? __pfx_do_filp_open+0x10/0x10 [ 436.709023][T11438] ? alloc_fd+0x471/0x7d0 [ 436.709064][T11438] do_sys_openat2+0x11b/0x1d0 [ 436.709104][T11438] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.709161][T11438] __x64_sys_openat+0x174/0x210 [ 436.709205][T11438] ? __pfx___x64_sys_openat+0x10/0x10 [ 436.709264][T11438] do_syscall_64+0xcd/0xfa0 [ 436.709306][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.709336][T11438] RIP: 0033:0x7f062598eec9 [ 436.709359][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.709388][T11438] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.709416][T11438] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 436.709437][T11438] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 436.709456][T11438] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.709475][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.709493][T11438] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 436.709534][T11438] [ 436.989134][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.109860][T11427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.115992][T11427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.122186][T11427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.129742][T11427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.777551][T11193] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.553329][T11472] FAULT_INJECTION: forcing a failure. [ 438.553329][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 438.572568][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.1.1232 Not tainted syzkaller #0 PREEMPT(full) [ 438.572604][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.572622][T11472] Call Trace: [ 438.572632][T11472] [ 438.572644][T11472] dump_stack_lvl+0x16c/0x1f0 [ 438.572682][T11472] should_fail_ex+0x512/0x640 [ 438.572718][T11472] ? __kmalloc_cache_noprof+0x5f/0x780 [ 438.572771][T11472] should_failslab+0xc2/0x120 [ 438.572811][T11472] __kmalloc_cache_noprof+0x72/0x780 [ 438.572856][T11472] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 438.572906][T11472] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 438.572948][T11472] ? loopback_open+0x145/0x13f0 [ 438.572986][T11472] ? loopback_open+0x145/0x13f0 [ 438.573016][T11472] loopback_open+0x145/0x13f0 [ 438.573057][T11472] snd_pcm_open_substream+0xa5d/0x17f0 [ 438.573094][T11472] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 438.573130][T11472] ? rcu_is_watching+0x12/0xc0 [ 438.573169][T11472] snd_pcm_open+0x29e/0x730 [ 438.573207][T11472] ? __pfx_snd_pcm_open+0x10/0x10 [ 438.573244][T11472] ? __pfx_default_wake_function+0x10/0x10 [ 438.573286][T11472] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 438.573321][T11472] snd_pcm_capture_open+0x89/0xe0 [ 438.573354][T11472] snd_open+0x22d/0x4c0 [ 438.573396][T11472] ? __pfx_snd_open+0x10/0x10 [ 438.573435][T11472] chrdev_open+0x234/0x6a0 [ 438.573469][T11472] ? __pfx_apparmor_file_open+0x10/0x10 [ 438.573513][T11472] ? __pfx_chrdev_open+0x10/0x10 [ 438.573550][T11472] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 438.573591][T11472] do_dentry_open+0x982/0x1530 [ 438.573626][T11472] ? __pfx_chrdev_open+0x10/0x10 [ 438.573669][T11472] vfs_open+0x82/0x3f0 [ 438.573715][T11472] path_openat+0x1de4/0x2cb0 [ 438.573760][T11472] ? __pfx_path_openat+0x10/0x10 [ 438.573801][T11472] do_filp_open+0x20b/0x470 [ 438.573835][T11472] ? __pfx_do_filp_open+0x10/0x10 [ 438.573903][T11472] ? alloc_fd+0x471/0x7d0 [ 438.573944][T11472] do_sys_openat2+0x11b/0x1d0 [ 438.573988][T11472] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.574045][T11472] __x64_sys_openat+0x174/0x210 [ 438.574091][T11472] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.574151][T11472] do_syscall_64+0xcd/0xfa0 [ 438.574189][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.574220][T11472] RIP: 0033:0x7fb3c158eec9 [ 438.574243][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.574272][T11472] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.574300][T11472] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 438.574321][T11472] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 438.574339][T11472] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 438.574358][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.574375][T11472] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 438.574416][T11472] [ 438.867903][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.041183][T11478] FAULT_INJECTION: forcing a failure. [ 439.041183][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 439.053954][T11478] CPU: 1 UID: 0 PID: 11478 Comm: syz.1.1234 Not tainted syzkaller #0 PREEMPT(full) [ 439.053990][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.054008][T11478] Call Trace: [ 439.054018][T11478] [ 439.054029][T11478] dump_stack_lvl+0x16c/0x1f0 [ 439.054067][T11478] should_fail_ex+0x512/0x640 [ 439.054102][T11478] ? __kmalloc_cache_noprof+0x5f/0x780 [ 439.054162][T11478] should_failslab+0xc2/0x120 [ 439.054203][T11478] __kmalloc_cache_noprof+0x72/0x780 [ 439.054249][T11478] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 439.054291][T11478] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 439.054332][T11478] ? loopback_open+0x145/0x13f0 [ 439.054371][T11478] ? loopback_open+0x145/0x13f0 [ 439.054402][T11478] loopback_open+0x145/0x13f0 [ 439.054444][T11478] snd_pcm_open_substream+0xa5d/0x17f0 [ 439.054481][T11478] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 439.054518][T11478] ? rcu_is_watching+0x12/0xc0 [ 439.054552][T11478] snd_pcm_open+0x29e/0x730 [ 439.054583][T11478] ? __pfx_snd_pcm_open+0x10/0x10 [ 439.054617][T11478] ? __pfx_default_wake_function+0x10/0x10 [ 439.054656][T11478] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 439.054688][T11478] snd_pcm_capture_open+0x89/0xe0 [ 439.054719][T11478] snd_open+0x22d/0x4c0 [ 439.054760][T11478] ? __pfx_snd_open+0x10/0x10 [ 439.054797][T11478] chrdev_open+0x234/0x6a0 [ 439.054829][T11478] ? __pfx_apparmor_file_open+0x10/0x10 [ 439.054872][T11478] ? __pfx_chrdev_open+0x10/0x10 [ 439.054908][T11478] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 439.054947][T11478] do_dentry_open+0x982/0x1530 [ 439.054980][T11478] ? __pfx_chrdev_open+0x10/0x10 [ 439.055020][T11478] vfs_open+0x82/0x3f0 [ 439.055064][T11478] path_openat+0x1de4/0x2cb0 [ 439.055114][T11478] ? __pfx_path_openat+0x10/0x10 [ 439.055155][T11478] do_filp_open+0x20b/0x470 [ 439.055186][T11478] ? __pfx_do_filp_open+0x10/0x10 [ 439.055241][T11478] ? alloc_fd+0x471/0x7d0 [ 439.055279][T11478] do_sys_openat2+0x11b/0x1d0 [ 439.055318][T11478] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.055373][T11478] __x64_sys_openat+0x174/0x210 [ 439.055414][T11478] ? __pfx___x64_sys_openat+0x10/0x10 [ 439.055468][T11478] do_syscall_64+0xcd/0xfa0 [ 439.055505][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.055534][T11478] RIP: 0033:0x7fb3c158eec9 [ 439.055558][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.055586][T11478] RSP: 002b:00007fb3c23c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.055613][T11478] RAX: ffffffffffffffda RBX: 00007fb3c17e5fa0 RCX: 00007fb3c158eec9 [ 439.055632][T11478] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 439.055652][T11478] RBP: 00007fb3c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 439.055670][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.055687][T11478] R13: 00007fb3c17e6038 R14: 00007fb3c17e5fa0 R15: 00007ffce70b99c8 [ 439.055727][T11478] [ 439.347870][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.374091][T11193] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.381351][T11193] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.387405][T11193] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.968107][T11479] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1231'. [ 440.304538][T11479] syz.0.1231 (11479) used greatest stack depth: 17704 bytes left [ 440.813498][T11501] FAULT_INJECTION: forcing a failure. [ 440.813498][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 440.836697][T11501] CPU: 1 UID: 0 PID: 11501 Comm: syz.3.1239 Not tainted syzkaller #0 PREEMPT(full) [ 440.836727][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.836740][T11501] Call Trace: [ 440.836746][T11501] [ 440.836754][T11501] dump_stack_lvl+0x16c/0x1f0 [ 440.836783][T11501] should_fail_ex+0x512/0x640 [ 440.836806][T11501] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 440.836830][T11501] should_failslab+0xc2/0x120 [ 440.836856][T11501] kmem_cache_alloc_noprof+0x75/0x6e0 [ 440.836876][T11501] ? alloc_empty_file+0x55/0x1e0 [ 440.836909][T11501] ? alloc_empty_file+0x55/0x1e0 [ 440.836935][T11501] alloc_empty_file+0x55/0x1e0 [ 440.836964][T11501] path_openat+0xda/0x2cb0 [ 440.836996][T11501] ? __pfx_path_openat+0x10/0x10 [ 440.837020][T11501] ? __lock_acquire+0xb97/0x1ce0 [ 440.837050][T11501] do_filp_open+0x20b/0x470 [ 440.837073][T11501] ? __pfx_do_filp_open+0x10/0x10 [ 440.837113][T11501] ? _raw_spin_unlock+0x28/0x50 [ 440.837132][T11501] ? alloc_fd+0x471/0x7d0 [ 440.837158][T11501] do_sys_openat2+0x11b/0x1d0 [ 440.837189][T11501] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.837220][T11501] ? __fget_files+0x20e/0x3c0 [ 440.837245][T11501] __x64_sys_open+0x153/0x1e0 [ 440.837274][T11501] ? __pfx___x64_sys_open+0x10/0x10 [ 440.837309][T11501] ? rcu_is_watching+0x12/0xc0 [ 440.837333][T11501] do_syscall_64+0xcd/0xfa0 [ 440.837358][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.837378][T11501] RIP: 0033:0x7f062598eec9 [ 440.837394][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.837415][T11501] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 440.837433][T11501] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 440.837447][T11501] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000200000000340 [ 440.837468][T11501] RBP: 00007f0626835090 R08: 0000000000000000 R09: 0000000000000000 [ 440.837485][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.837502][T11501] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 440.837540][T11501] [ 442.989281][T11538] FAULT_INJECTION: forcing a failure. [ 442.989281][T11538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.036113][T11539] FAULT_INJECTION: forcing a failure. [ 443.036113][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 443.056814][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.0.1247 Not tainted syzkaller #0 PREEMPT(full) [ 443.056847][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.056863][T11538] Call Trace: [ 443.056870][T11538] [ 443.056878][T11538] dump_stack_lvl+0x16c/0x1f0 [ 443.056906][T11538] should_fail_ex+0x512/0x640 [ 443.056934][T11538] should_fail_alloc_page+0xe7/0x130 [ 443.056964][T11538] prepare_alloc_pages+0x3c2/0x610 [ 443.056991][T11538] ? rcu_is_watching+0x12/0xc0 [ 443.057015][T11538] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 443.057041][T11538] ? __lock_acquire+0x62e/0x1ce0 [ 443.057071][T11538] ? css_rstat_updated+0x1c2/0x510 [ 443.057095][T11538] ? __pfx_css_rstat_updated+0x10/0x10 [ 443.057118][T11538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.057144][T11538] ? rcu_is_watching+0x12/0xc0 [ 443.057169][T11538] ? __lock_acquire+0xb97/0x1ce0 [ 443.057198][T11538] ? __lock_acquire+0x62e/0x1ce0 [ 443.057225][T11538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.057260][T11538] ? policy_nodemask+0xea/0x4e0 [ 443.057289][T11538] alloc_pages_mpol+0x1fb/0x550 [ 443.057317][T11538] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.057345][T11538] ? filemap_get_entry+0x1a7/0x3b0 [ 443.057370][T11538] folio_alloc_noprof+0x20/0x2d0 [ 443.057401][T11538] filemap_alloc_folio_noprof+0x3a1/0x470 [ 443.057428][T11538] ? filemap_add_folio+0x110/0x610 [ 443.057449][T11538] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 443.057504][T11538] __filemap_get_folio+0x5e1/0xc30 [ 443.057543][T11538] ioctx_alloc+0x761/0x2120 [ 443.057592][T11538] ? __pfx_ioctx_alloc+0x10/0x10 [ 443.057620][T11538] ? __might_fault+0x13b/0x190 [ 443.057656][T11538] __x64_sys_io_setup+0xc9/0x210 [ 443.057681][T11538] do_syscall_64+0xcd/0xfa0 [ 443.057706][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.057727][T11538] RIP: 0033:0x7f8f33f8eec9 [ 443.057743][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.057763][T11538] RSP: 002b:00007f8f34eab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 443.057781][T11538] RAX: ffffffffffffffda RBX: 00007f8f341e5fa0 RCX: 00007f8f33f8eec9 [ 443.057795][T11538] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000fff4 [ 443.057812][T11538] RBP: 00007f8f34eab090 R08: 0000000000000000 R09: 0000000000000000 [ 443.057825][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.057837][T11538] R13: 00007f8f341e6038 R14: 00007f8f341e5fa0 R15: 00007ffee0a08638 [ 443.057865][T11538] [ 443.217762][T11539] CPU: 0 UID: 0 PID: 11539 Comm: syz.2.1246 Not tainted syzkaller #0 PREEMPT(full) [ 443.217803][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.217822][T11539] Call Trace: [ 443.217834][T11539] [ 443.217847][T11539] dump_stack_lvl+0x16c/0x1f0 [ 443.217890][T11539] should_fail_ex+0x512/0x640 [ 443.217930][T11539] ? __kmalloc_noprof+0xca/0x880 [ 443.217986][T11539] should_failslab+0xc2/0x120 [ 443.218030][T11539] __kmalloc_noprof+0xdd/0x880 [ 443.218079][T11539] ? __asan_memcpy+0x3c/0x60 [ 443.218109][T11539] ? handler_new_ref+0x1b0/0xc60 [ 443.218166][T11539] ? handler_new_ref+0x1b0/0xc60 [ 443.218213][T11539] handler_new_ref+0x1b0/0xc60 [ 443.218275][T11539] v4l2_ctrl_new+0x196c/0x2190 [ 443.218341][T11539] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 443.218389][T11539] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 443.218451][T11539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.218511][T11539] v4l2_ctrl_new_std+0x1be/0x290 [ 443.218586][T11539] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 443.218638][T11539] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 443.218697][T11539] ? trace_kmalloc+0x2b/0xd0 [ 443.218745][T11539] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 443.218803][T11539] ? media_request_object_init+0x100/0x180 [ 443.218851][T11539] vicodec_open+0x1d9/0xf70 [ 443.218891][T11539] ? kobject_get_unless_zero+0x156/0x1e0 [ 443.218941][T11539] v4l2_open+0x1d2/0x5e0 [ 443.218986][T11539] ? __pfx_v4l2_open+0x10/0x10 [ 443.219029][T11539] chrdev_open+0x234/0x6a0 [ 443.219067][T11539] ? __pfx_apparmor_file_open+0x10/0x10 [ 443.219114][T11539] ? __pfx_chrdev_open+0x10/0x10 [ 443.219154][T11539] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 443.219199][T11539] do_dentry_open+0x982/0x1530 [ 443.219236][T11539] ? __pfx_chrdev_open+0x10/0x10 [ 443.219282][T11539] vfs_open+0x82/0x3f0 [ 443.219332][T11539] path_openat+0x1de4/0x2cb0 [ 443.219380][T11539] ? __pfx_path_openat+0x10/0x10 [ 443.219425][T11539] do_filp_open+0x20b/0x470 [ 443.219461][T11539] ? __pfx_do_filp_open+0x10/0x10 [ 443.219525][T11539] ? alloc_fd+0x471/0x7d0 [ 443.219573][T11539] do_sys_openat2+0x11b/0x1d0 [ 443.219619][T11539] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.219682][T11539] __x64_sys_openat+0x174/0x210 [ 443.219729][T11539] ? __pfx___x64_sys_openat+0x10/0x10 [ 443.219794][T11539] do_syscall_64+0xcd/0xfa0 [ 443.219834][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.219867][T11539] RIP: 0033:0x7f4b7578eec9 [ 443.219893][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.219927][T11539] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 443.219958][T11539] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 443.219981][T11539] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 443.220003][T11539] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.220039][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.220060][T11539] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 443.220106][T11539] [ 443.771090][T11546] random: crng reseeded on system resumption [ 444.287861][T11556] can: request_module (can-proto-0) failed. [ 445.137715][T11568] FAULT_INJECTION: forcing a failure. [ 445.137715][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 445.144575][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.159437][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.250297][T11568] CPU: 1 UID: 0 PID: 11568 Comm: syz.0.1256 Not tainted syzkaller #0 PREEMPT(full) [ 445.250324][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.250337][T11568] Call Trace: [ 445.250344][T11568] [ 445.250352][T11568] dump_stack_lvl+0x16c/0x1f0 [ 445.250379][T11568] should_fail_ex+0x512/0x640 [ 445.250409][T11568] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 445.250434][T11568] should_failslab+0xc2/0x120 [ 445.250462][T11568] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 445.250485][T11568] ? proc_alloc_inode+0x25/0x200 [ 445.250516][T11568] ? __pfx_proc_alloc_inode+0x10/0x10 [ 445.250541][T11568] ? proc_alloc_inode+0x25/0x200 [ 445.250565][T11568] proc_alloc_inode+0x25/0x200 [ 445.250591][T11568] alloc_inode+0x61/0x240 [ 445.250619][T11568] new_inode+0x22/0x1c0 [ 445.250648][T11568] proc_sys_make_inode+0x47/0x5c0 [ 445.250682][T11568] proc_sys_lookup+0x273/0x400 [ 445.250712][T11568] ? __pfx_proc_sys_lookup+0x10/0x10 [ 445.250743][T11568] ? lockdep_init_map_type+0x5c/0x280 [ 445.250775][T11568] ? lockdep_init_map_type+0x5c/0x280 [ 445.250809][T11568] __lookup_slow+0x251/0x460 [ 445.250840][T11568] ? __pfx___lookup_slow+0x10/0x10 [ 445.250886][T11568] ? lookup_fast+0x156/0x610 [ 445.250917][T11568] ? _raw_spin_unlock+0x28/0x50 [ 445.250941][T11568] walk_component+0x353/0x5b0 [ 445.250962][T11568] link_path_walk+0x627/0xe20 [ 445.250990][T11568] path_openat+0x1b0/0x2cb0 [ 445.251020][T11568] ? __pfx_path_openat+0x10/0x10 [ 445.251050][T11568] do_filp_open+0x20b/0x470 [ 445.251072][T11568] ? __pfx_do_filp_open+0x10/0x10 [ 445.251114][T11568] ? alloc_fd+0x471/0x7d0 [ 445.251141][T11568] do_sys_openat2+0x11b/0x1d0 [ 445.251171][T11568] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.251203][T11568] ? __sys_sendmsg+0x18c/0x220 [ 445.251234][T11568] __x64_sys_openat+0x174/0x210 [ 445.251265][T11568] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.251307][T11568] do_syscall_64+0xcd/0xfa0 [ 445.251332][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.251353][T11568] RIP: 0033:0x7f8f33f8eec9 [ 445.251369][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.251389][T11568] RSP: 002b:00007f8f34eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.251413][T11568] RAX: ffffffffffffffda RBX: 00007f8f341e5fa0 RCX: 00007f8f33f8eec9 [ 445.251427][T11568] RDX: 0000000000000202 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 445.251440][T11568] RBP: 00007f8f34011f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.251453][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.251465][T11568] R13: 00007f8f341e6038 R14: 00007f8f341e5fa0 R15: 00007ffee0a08638 [ 445.251493][T11568] [ 447.137899][T11602] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1262'. [ 447.765841][T11621] netlink: set zone limit has 8 unknown bytes [ 447.911999][T11621] netlink: zone id is out of range [ 447.921263][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 447.941783][T11621] netlink: del zone limit has 4 unknown bytes [ 447.956662][T11621] openvswitch: HfR: Dropping previously announced user features [ 447.968944][ T5840] Bluetooth: hci1: ACL packet too small [ 448.118564][T11638] netlink: zone id is out of range [ 448.133895][T11638] netlink: del zone limit has 4 unknown bytes [ 448.153244][T11638] openvswitch: HfR: Dropping previously announced user features [ 448.170205][T11635] netlink: set zone limit has 8 unknown bytes [ 448.839696][T11650] FAULT_INJECTION: forcing a failure. [ 448.839696][T11650] name failslab, interval 1, probability 0, space 0, times 0 [ 448.884238][T11650] CPU: 1 UID: 0 PID: 11650 Comm: syz.2.1274 Not tainted syzkaller #0 PREEMPT(full) [ 448.884278][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.884297][T11650] Call Trace: [ 448.884307][T11650] [ 448.884319][T11650] dump_stack_lvl+0x16c/0x1f0 [ 448.884359][T11650] should_fail_ex+0x512/0x640 [ 448.884402][T11650] ? __kmalloc_noprof+0xca/0x880 [ 448.884452][T11650] should_failslab+0xc2/0x120 [ 448.884493][T11650] __kmalloc_noprof+0xdd/0x880 [ 448.884539][T11650] ? __asan_memcpy+0x3c/0x60 [ 448.884566][T11650] ? handler_new_ref+0x1b0/0xc60 [ 448.884620][T11650] ? handler_new_ref+0x1b0/0xc60 [ 448.884664][T11650] handler_new_ref+0x1b0/0xc60 [ 448.884721][T11650] v4l2_ctrl_new+0x196c/0x2190 [ 448.884782][T11650] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 448.884826][T11650] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 448.884883][T11650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.884937][T11650] v4l2_ctrl_new_std+0x1be/0x290 [ 448.884994][T11650] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 448.885039][T11650] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 448.885090][T11650] ? trace_kmalloc+0x2b/0xd0 [ 448.885131][T11650] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 448.885183][T11650] ? media_request_object_init+0x100/0x180 [ 448.885227][T11650] vicodec_open+0x1d9/0xf70 [ 448.885264][T11650] ? kobject_get_unless_zero+0x156/0x1e0 [ 448.885311][T11650] v4l2_open+0x1d2/0x5e0 [ 448.885352][T11650] ? __pfx_v4l2_open+0x10/0x10 [ 448.885400][T11650] chrdev_open+0x234/0x6a0 [ 448.885435][T11650] ? __pfx_apparmor_file_open+0x10/0x10 [ 448.885478][T11650] ? __pfx_chrdev_open+0x10/0x10 [ 448.885517][T11650] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 448.885555][T11650] do_dentry_open+0x982/0x1530 [ 448.885591][T11650] ? __pfx_chrdev_open+0x10/0x10 [ 448.885633][T11650] vfs_open+0x82/0x3f0 [ 448.885679][T11650] path_openat+0x1de4/0x2cb0 [ 448.885723][T11650] ? __pfx_path_openat+0x10/0x10 [ 448.885766][T11650] do_filp_open+0x20b/0x470 [ 448.885799][T11650] ? __pfx_do_filp_open+0x10/0x10 [ 448.885859][T11650] ? alloc_fd+0x471/0x7d0 [ 448.885899][T11650] do_sys_openat2+0x11b/0x1d0 [ 448.885941][T11650] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.886000][T11650] __x64_sys_openat+0x174/0x210 [ 448.886045][T11650] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.886105][T11650] do_syscall_64+0xcd/0xfa0 [ 448.886163][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.886195][T11650] RIP: 0033:0x7f4b7578eec9 [ 448.886220][T11650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.886252][T11650] RSP: 002b:00007f4b766ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.886281][T11650] RAX: ffffffffffffffda RBX: 00007f4b759e5fa0 RCX: 00007f4b7578eec9 [ 448.886302][T11650] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 448.886322][T11650] RBP: 00007f4b75811f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.886341][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.886360][T11650] R13: 00007f4b759e6038 R14: 00007f4b759e5fa0 R15: 00007ffe91d20858 [ 448.886410][T11650] [ 449.264577][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.326928][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.370597][T11655] FAULT_INJECTION: forcing a failure. [ 449.370597][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 449.378894][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.395091][T11655] CPU: 0 UID: 0 PID: 11655 Comm: syz.3.1275 Not tainted syzkaller #0 PREEMPT(full) [ 449.395128][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.395146][T11655] Call Trace: [ 449.395157][T11655] [ 449.395168][T11655] dump_stack_lvl+0x16c/0x1f0 [ 449.395206][T11655] should_fail_ex+0x512/0x640 [ 449.395243][T11655] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 449.395277][T11655] should_failslab+0xc2/0x120 [ 449.395317][T11655] kmem_cache_alloc_noprof+0x75/0x6e0 [ 449.395348][T11655] ? __proc_create+0x2ce/0x8e0 [ 449.395404][T11655] ? __proc_create+0x2ce/0x8e0 [ 449.395445][T11655] __proc_create+0x2ce/0x8e0 [ 449.395490][T11655] ? __pfx___proc_create+0x10/0x10 [ 449.395537][T11655] ? _raw_write_unlock+0x28/0x50 [ 449.395567][T11655] ? proc_register+0x559/0x8b0 [ 449.395616][T11655] proc_create_reg+0x7d/0x180 [ 449.395663][T11655] proc_create_seq_private+0x8e/0x180 [ 449.395711][T11655] ? __pfx_proc_create_seq_private+0x10/0x10 [ 449.395758][T11655] ? __pfx_uevent_net_rcv+0x10/0x10 [ 449.395802][T11655] ? ops_init+0x77/0x5f0 [ 449.395838][T11655] ? __pfx_dev_proc_net_init+0x10/0x10 [ 449.395868][T11655] dev_proc_net_init+0xa8/0x220 [ 449.395898][T11655] ops_init+0x1df/0x5f0 [ 449.395937][T11655] setup_net+0x100/0x390 [ 449.395973][T11655] ? __pfx_setup_net+0x10/0x10 [ 449.396011][T11655] ? debug_mutex_init+0x37/0x70 [ 449.396047][T11655] copy_net_ns+0x2f8/0x690 [ 449.396091][T11655] create_new_namespaces+0x3ea/0xa90 [ 449.396134][T11655] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 449.396172][T11655] ksys_unshare+0x45b/0xa40 [ 449.396212][T11655] ? __pfx_ksys_unshare+0x10/0x10 [ 449.396254][T11655] ? xfd_validate_state+0x61/0x180 [ 449.396306][T11655] __x64_sys_unshare+0x31/0x40 [ 449.396345][T11655] do_syscall_64+0xcd/0xfa0 [ 449.396391][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.396422][T11655] RIP: 0033:0x7f062598eec9 [ 449.396446][T11655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.396475][T11655] RSP: 002b:00007f0626835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.396503][T11655] RAX: ffffffffffffffda RBX: 00007f0625be5fa0 RCX: 00007f062598eec9 [ 449.396522][T11655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 449.396541][T11655] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.396560][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.396578][T11655] R13: 00007f0625be6038 R14: 00007f0625be5fa0 R15: 00007ffc95b2e998 [ 449.396618][T11655] [ 449.680950][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.690849][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.708208][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.779171][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 449.792818][T11658] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1277'. [ 450.101679][T11673] netlink: set zone limit has 8 unknown bytes [ 450.119118][T11673] netlink: zone id is out of range [ 450.124421][T11673] netlink: del zone limit has 4 unknown bytes [ 450.167573][T11673] openvswitch: HfR: Dropping previously announced user features [ 451.446764][T11665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 451.453500][T11665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.460597][T11665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 451.470147][T11665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.876461][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.922113][T11707] random: crng reseeded on system resumption [ 452.711719][T11715] can: request_module (can-proto-0) failed. [ 453.338046][T11731] ------------[ cut here ]------------ [ 453.343768][T11731] memcpy: detected field-spanning write (size 6) of single field "&entry->id" at kernel/trace/trace.c:7458 (size 4) [ 453.356169][T11731] WARNING: CPU: 1 PID: 11731 at kernel/trace/trace.c:7458 write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.367357][T11731] Modules linked in: [ 453.371461][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.3.1293 Not tainted syzkaller #0 PREEMPT(full) [ 453.381438][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.391575][T11731] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.398752][T11731] Code: ff e8 30 74 fa ff c6 05 f4 84 aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 453.418394][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.425100][T11731] RSP: 0018:ffffc9000ab3fb98 EFLAGS: 00010286 [ 453.431818][T11731] RAX: 0000000000000000 RBX: ffff88801de87014 RCX: ffffc9000df53000 [ 453.439952][T11731] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 453.447992][T11731] RBP: ffff88801de87010 R08: 0000000000000001 R09: 0000000000000000 [ 453.456008][T11731] R10: 0000000000000000 R11: 000000000003ba00 R12: 0000000000000006 [ 453.458019][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 453.464066][T11731] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 453.478062][T11731] FS: 00007f06268146c0(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 453.487042][T11731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.493709][T11731] CR2: 0000001b30f17ff8 CR3: 000000007b7f2000 CR4: 00000000003526f0 [ 453.501747][T11731] Call Trace: [ 453.505053][T11731] [ 453.508711][T11731] tracing_mark_raw_write+0x2da/0x4a0 [ 453.514706][T11731] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 453.520725][T11731] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 453.526675][T11731] vfs_writev+0x5dc/0xde0 [ 453.531093][T11731] ? __pfx_vfs_writev+0x10/0x10 [ 453.536001][T11731] ? kmem_cache_free+0x2d4/0x6c0 [ 453.541088][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 453.541104][T11731] ? putname+0x154/0x1a0 [ 453.541169][T11731] ? __fget_files+0x20e/0x3c0 [ 453.547308][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.551411][T11731] ? do_writev+0x28c/0x340 [ 453.551444][T11731] do_writev+0x28c/0x340 [ 453.570809][T11731] ? __pfx_do_writev+0x10/0x10 [ 453.575615][T11731] do_syscall_64+0xcd/0xfa0 [ 453.580196][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.586146][T11731] RIP: 0033:0x7f062598eec9 [ 453.590630][T11731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.611025][T11731] RSP: 002b:00007f0626814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 453.620145][T11731] RAX: ffffffffffffffda RBX: 00007f0625be6090 RCX: 00007f062598eec9 [ 453.628213][T11731] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000011 [ 453.636234][T11731] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.644288][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.652336][T11731] R13: 00007f0625be6128 R14: 00007f0625be6090 R15: 00007ffc95b2e998 [ 453.660400][T11731] [ 453.663448][T11731] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.670747][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.3.1293 Not tainted syzkaller #0 PREEMPT(full) [ 453.680132][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.690277][T11731] Call Trace: [ 453.693557][T11731] [ 453.696488][T11731] dump_stack_lvl+0x3d/0x1f0 [ 453.701094][T11731] vpanic+0x640/0x6f0 [ 453.705099][T11731] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.711612][T11731] panic+0xca/0xd0 [ 453.715370][T11731] ? __pfx_panic+0x10/0x10 [ 453.719832][T11731] check_panic_on_warn+0xab/0xb0 [ 453.724795][T11731] __warn+0xf6/0x3c0 [ 453.728716][T11731] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.735240][T11731] report_bug+0x3c3/0x580 [ 453.739590][T11731] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.746108][T11731] handle_bug+0x184/0x210 [ 453.750454][T11731] exc_invalid_op+0x17/0x50 [ 453.754974][T11731] asm_exc_invalid_op+0x1a/0x20 [ 453.759829][T11731] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 453.766951][T11731] Code: ff e8 30 74 fa ff c6 05 f4 84 aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 453.786564][T11731] RSP: 0018:ffffc9000ab3fb98 EFLAGS: 00010286 [ 453.792636][T11731] RAX: 0000000000000000 RBX: ffff88801de87014 RCX: ffffc9000df53000 [ 453.800610][T11731] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 453.808588][T11731] RBP: ffff88801de87010 R08: 0000000000000001 R09: 0000000000000000 [ 453.816566][T11731] R10: 0000000000000000 R11: 000000000003ba00 R12: 0000000000000006 [ 453.824541][T11731] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 453.832536][T11731] ? __warn_printk+0x1a5/0x350 [ 453.837323][T11731] ? write_raw_marker_to_buffer.isra.0+0x2d3/0x330 [ 453.843840][T11731] tracing_mark_raw_write+0x2da/0x4a0 [ 453.849228][T11731] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 453.855140][T11731] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 453.861042][T11731] vfs_writev+0x5dc/0xde0 [ 453.865394][T11731] ? __pfx_vfs_writev+0x10/0x10 [ 453.870254][T11731] ? kmem_cache_free+0x2d4/0x6c0 [ 453.875201][T11731] ? putname+0x154/0x1a0 [ 453.879472][T11731] ? __fget_files+0x20e/0x3c0 [ 453.884163][T11731] ? do_writev+0x28c/0x340 [ 453.888581][T11731] do_writev+0x28c/0x340 [ 453.892830][T11731] ? __pfx_do_writev+0x10/0x10 [ 453.897609][T11731] do_syscall_64+0xcd/0xfa0 [ 453.902125][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.908028][T11731] RIP: 0033:0x7f062598eec9 [ 453.912446][T11731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.932064][T11731] RSP: 002b:00007f0626814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 453.940495][T11731] RAX: ffffffffffffffda RBX: 00007f0625be6090 RCX: 00007f062598eec9 [ 453.948472][T11731] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000011 [ 453.956449][T11731] RBP: 00007f0625a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.964424][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.972396][T11731] R13: 00007f0625be6128 R14: 00007f0625be6090 R15: 00007ffc95b2e998 [ 453.980388][T11731] [ 453.983737][T11731] Kernel Offset: disabled [ 453.988072][T11731] Rebooting in 86400 seconds..