last executing test programs: 7.217989295s ago: executing program 3 (id=3209): mmap$auto(0x0, 0x400008, 0xdf, 0xfff, 0xffffffffffffffff, 0x2) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r0, 0x5220, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r1, 0x110, 0x4, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r2, r1, 0x12f) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x5}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) madvise$auto(0x192ad524, 0x1, 0x15) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x10000003, 0xeb4, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) kill$auto(0x0, 0x21) 6.629440834s ago: executing program 1 (id=3212): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x13b8, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x13a2, 0x2, 0x0, 0x1, [@nested={0xde, 0xd6, 0x0, 0x1, [@generic="fe0846e882f79946f72c77cc907d06a278bfe030297778cf5e615c14355926d81a89b94963f55a9bab963b59959091589bd4e87274deaf75781ba3a8ba6300f6142adffbf88bba87c82a2768086b3c2b4fd320c4119dc501c7eee6162de59ce494163bf3e7613074d3dcd615d3ca3c124309b01e877defab07af8d55bf7a4491ac897d6b87a82571c62c5a1a045ce8db0a696bd8995c5b629cbfd89888cb1ca54cbcd3bc7488b61597b5d5ecb7990b1c427d664243e0d83f0d977aac31e0682281216fbe1802cdcca19fc2776fdb6aaa0d6ff094f1df303196da"]}, @nested={0x48, 0x116, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0x4c96245b}, @generic="17253617b38db8987b49ff9de502543d44f90223ef8e5ce33275055b12fdf263530d4662b80da846d10306956a912d09d4b13f90cb0eeb20b8595946"]}, @nested={0x34, 0x9d, 0x0, 0x1, [@typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="af4f7d", @nested={0x4, 0x13a}, @nested={0x4, 0xdf}, @nested={0x4, 0xe3}, @generic="a01f80daf8", @typed={0x8, 0x85, 0x0, 0x0, @uid=0xee00}]}, @typed={0xf, 0xd3, 0x0, 0x0, @str='/dev/tty12\x00'}, @nested={0x1024, 0xee, 0x0, 0x1, [@nested={0x4, 0xca}, @nested={0x4, 0x17}, @generic="341986a26f6777c5ea9096d03c4e0380365edaaedba9d20b81fd6e923124636cfa2c005f72ac21fc089dd30f355240a21ca27166a22f9031caf2b2b546a2fe7ab2a93fd085308cb42313289f3791b6670c4384cb04abc628124a12cbad1c87570d708075dbc90fc6176517bfa3e118b34afcdc686f570cbb40737f1182f6f8e68e869841d9828738ccf2b1ecefd498b6cc2c7ea3c717be77bdafc29080a6eec7bb01d1883570d2d644acf5b062adbd8cc6b5f3a85cbffe44bab1ce5326a80738f6a81fe809c0041f76ef234c5f6919849f4bd5bc2f76962d158f258c017158d030e0246c0fd5eb4ca51f7ae33a7880de21ef1fd1720333734f0ebadaddf9e25193dcd520c79a62429707ba36c3c8bb7a83fb46e1bd74c360a0f5f902a8d6ab5fe2d31eb3476374eeb1ceba424fa5ac1a8192e1d64b29462d184a1b3a52783318e22a3aec12d410f8534b1321745ea5cb4754490247f50cf75e308318332870e799a21db39940c85b98a9f3a445f128bc800ba42b9397da1bb6cc3e3dc88bfa2fb61b73992abb9b49d366a996c410af9061d8853527dbd6c57dc5f4d5dc7e307be94132dab5c40922cacaf524488d4f3598be0866f3c69ddbaaf5eb857c7199dd451f0e39f33a5741508712fb0374400bedb2188b777fb2f7c91cf575ee7def4ed7cb465cfea092cc30c4dea203505cfc405c0060e5bf417db89c39c4aa6ca38a3a8df2493f25654a6dbac2ee0365791255d83ddbc1e71a3d3b046b2bc48edf3e2518c1b40cae5e03b20d3158bdb305c49568ccc7b9f624ff5359164b62fc52c85d7def113f826611de42098d9fb461093e759d15d410da6b290ca35434c86fdae4cef6b969bfbbf687f501bf6737a9a7467451f95c6c4c4959073c24c9a95d23e8816a16d7b493e2b98adc7390082d17d2278116c9baec653b861cef39c38b613aa1a80b66b48ff9d9a5652b6692e53dbe6d0c37857ced1c6ddd96a241cfe55ca51933e330028db540c2b58f669424e4d922887d9100f598b4cf9894f1fb5bcf9186f4f10effb77ee97a08e5498634bb7b556e0d73bc174f7cf3545e49f11817fd11e535d1b796852aad4c9b7268f9693f2d364e093d6920fc3c0ee9970a9e70ba75c0479bc507902c5e51cb95dd127f8afbd5f02ba2dc7392d79932c9158335a4bad4dc9ca543ca1fcd3d50c3e2db73b77c4e611573f6b620991de6868206f4e5149565af37527173e343671cf043f3d52bafb42d2d205beb80f7aa9513968c7a6427995cd05bfd1713498bca75c3dfb5ca57b6401de2ac2dd4c42fecc3210f410d1493ebd9b33fb14ea8904dde8ed2b584a4f00072abee2a5cbe9954d77a7edfdc21a6774ed886c56082dc946a8c66674944c67b0a1e44817f007d1b60c4dbff4dbbb2392c49c9ff5e655da4a08cbda817bc1ccce5c53444dd50e4637a011dfdae3024d27cdfe21a71179dec9826b1d60578d8fc6f93417a1533c80d0b453e884e672988617ebaa70e37115ed7158c22d20138c64dbdd0ac22d33f49842cea4bd058d390bd6f0c3871799c832612c392a51bb99cde22fb665892e7bd666d1601a9c68e877bbd6370e387204c00955bcd23f0574cca748d75df0f07f5fc2e680b96dfbb638b30d2691dd9b45d9ad72cf4462ce18f81d0ae562d5fab881c3d205da4dc9739a62fc0ef366264e34dcc5f84de22e8a3c545dc4c55a3dd58bdb873a0ac3e0db0bb6932e32c1c25d0fd7ec0f331d57e13c397318e01854b85f28d74e7d2601c7b0fecd8ce5ef39086487796038164856d259184501b4d9f203002c75f502222d05bdf9fd9a909b77749b7c08b0ae5b6a0bf984dbfb114596cd1f5ccca09e9a8db8a24d30430a5995d31f01f6011cbf8297ef9338940a2290db9a7a71317c30f387ecca74bb5071dc57d40a83fbadecb90a80decff8dcfc38e9b3e0fd477dbec7033634da8b3f3044fb7cfad4437f8cfcbf09bb9a07fcc1e2aeb704fd18e6a8b1d535aa0ecc6aba4e5087cb964e1870a5e3fffc3aa024fa3cae1d07ce7c823c887d34bef7c937e228e6390f59dab06f10a2f5c4f590c1de8e7e942b2741a43d21ff636b9c090bcbfcd9cb18d9e50606b3bd01755b3dad7b139678af9251aca324f6ec1af45d88d4fc148d2423e3f88a03a5dbc19ad938de053a758b9a317144f5f206542d3f8ab9b7daf02b74b034123957b490afb97425d8ef1c8979cadb15d0478465dad428da9c3f9375d150fd065b2facea65304aec0fa210cef6d1cc305247248f991ef9d47c999774fbfcf3390f5feb210849c996a98c79b3e5670deb047708a275d172abb5cb54d14154c50d75b0374de63db7c011095f558fbab6180314aaa43c7d7902bf640779322d2c631d9da2407c3c006f42912f2c78abcb418c7ce4b3734249fd3cadca462210281bfa7aaceb2470e7b3c89fc7a929f633a8d6cc893cd32e12d6ae97c450fd664728f9d9483ac99cf98b1bcfc05bc247e0bc4f76ba380728c8e344c11947e4051fc5ab41f1c18dda483156cff692fe61bd6c147691eab500ff8702e2007dd97c6ffb815a5fcb29776d604593623a3638911f1dfffae2d3617bd135b0db2bbc9722bc4219baad45f338e129c506d1f2f762b4c749fd29d044694340971b80f70d1a2312ab6f79814de8ebe78cc60d6a0e1f103ecd49d8cba8e5311b4508826483c267e70e0bd49d97270978d5181171efff52b627fd7790e0875d93200b45669c7a48afe2a7e34836a009de59de88baae6e1ffafa6816fbdcaddcb726abb3281688845c0d4ba4bc504e72e6e08ec79dafdeef2f20af777653b13cbf359a9bec99733067e0881334dffff585659cc169d40f08fe3f7356f7244747eb938b5699eac886a03f62e4d83c22f58151d8d7b46631a832dff0e98ac5bc71279fdf407dbec0ce1f1a4b878b86ef8e05a70d37cf7da991fae4b5ebc425436a3a00ac4c2f3c4f54cc2f65461070dc9f67ae507d7d694a47b32e24befacec824f5b6e92ac5eb81665aa30b97f319126e8dc612a5c26852102518ff9ca91c07a0c6e7a83acd9e105877f36de9823fdebe2037ce825d3f99a2af7b63e6b8c671b3390c5af9726ef64a72630252a7dbcc96ffb3ef021732dccc9fd47240f2321b2ca375ceca75add76d6fd62b6060b573576930da811a25f19d0b54afc1862f0c043e3bb1d02c62ad549f667e95a53e23c2461e9b1a56a2b186450294b490add2af599ceecefe96472ca6a07fff82f78399e90abff3f2653c550394f2e63712395f935ba7faf7dc823c12dfcb256a72898500ef38f946b157978a98472eb59e5d9e15ca080a9e06a6a36b332f7f78cda05f29fa5c7e940ff88edb76577c7ed954216080e634728d2ee589a4efa28943002ef4ec59e79c735795ecec8dc098e29025409e43fc223263d36a74e42914167c5d342921ee736ebd3e4862d6315b0e11046f0b537b197ffbdbbc6a18b9d9e1a79b784fee4de0d523bd946f8cd2a7112f1d2e1b34e61f3165ef680f4df39eeb1e02a9698328c894ce163ab9aee70945e68e9c71b34f04ec8de89b07394d58ad3874d9564d33c01bb5637c9cee0f763c8bb6e25163f1b6c0eb6178fce5dceb40b7b0f93815997d6ca642270eb77bcc20d44ab084bde81a8ae988525f49af4675951040221345aad6cbb16cc24731891baf48ba9b8b1592b9e1bf7812bb7bfea593e2f3b29b61eead0f94e2ee8a26a3c0059bf2b540f6595c96a8ce4e6b3fa8a1dee5834968aaaaa43561c58a9e7a6845c427cec43cc7a65d4166a028741947886095cc5dc60379dbc45ec82060a84e5770a66de075411ac2c3796dbdb8e6a237ad88b2bf78c0d453c7aef9e1191378a216ad52617aa439624b7e60aff78ffbb97fbcd340c1075e61418b08679bf71f968bd4ea51a450c6e8ed360998a33126e80416b65af4007eae9f3d640eede203ca607181344fbfa2c66627c67eff85eb42c38b7ad1537b34838d8b35eb4de80f067d6b26c7f29b3754da1628426f28213f884d7b8b15d80e0c17e4ed0210cfde4289c35c02023fa8482b6b17db57fc6facddf55745b5d1c8444036c20cc75c29d154fd7fd28199f825c9a63552ee0d2e3759ee96b2b9436b85b19a3db134a251e1f172413b3460773ce0483180b008fcf1cac51707cd73790df4dc0ef74729a7a516866fc458540a108f3f81f79fe975feb6aaa0ca5f095113519effc52a27c006591e0998f3eb5df3494153e993a26688d10b89ac5907279108286aee6090629bdec04b173ce339b244abffec80b00d8bf3c00e0c3017bf74173598efc9fe4f37ec731219d61d707a7a4ba77cb8c7c3bb65e8b16f723084c6840a97435196a71a5ff196bfc772ac9a62f58a83dedcd31d0926c4b9e0cb2ff56b04dfd729787e17ce14bf3eca1ac49bf4b2fc164f797d06b763199945c25b5dab97f7f5eace28fb63c046bb476c92a3a5b933b7d9a29cd1824e25956bfef6ae77e0a4fcceaa3e02720a73549ac3ce451e03e977607b27e6f241a45470ef3742ee4d0a88b23914ac3a8560a22d503d6acd7ceeba6345df4b980a390b3636f119a5622e1c1e43a97b8aa95ff1b0b865e7bc1fed6af4d2d9aefbec576243ae9f83550edbe2640be82ab09fdfc663ff646907b840ef07a818d331ab1e111aa6bf0e011ccc6094df078e3251b0735d5aea82fd74e341c66c25fcb09f328adaaa714829743cc0903179ea58c85a3c13bba2d044e4aa8ec34d4016c7333257b715e3fe156b6d267afe735ef1f378790ab7a41d2b749d73185050723e747fb34f48b953d958c1e9f85343ed8848976958e888c1856216e78bd600ec76dea1aa367be0203eeb9481afe8b91a4cb90628209343c0c490331424ffe9b64ffd85893c98dfe639fb160a473ebda1ba4e43a694192752ae0618527521d5f29181db2673e5947da19f79a6068d17243907dcba953e6ccacfeac50c294c7b036a215c19351c4e1781f9d1120d56b4db213d179bd2cadb7fcb969f8bfb50fdb2ffc7979d39dd0d594506af9808af5d3f69916f667524c73e4d93046c4a0acdbe28d31c0f7cae7e3c21ed3a1d7996628f1aca38267628adba997d5dd062f6ba4ae5d264a3334b4caaf8bfd30b2f35e92ed7124a7f4af0c8289a1557fdd6887a672ef00fb880ba2bcb42c454577157884ce5408e45c0cfb333af70d58aa1cc0eb9c639b81999edbf0ccc1cb5788e22e060de1d8e691ce3165325c97f735e7305b2310162f6e35098bec5a4676c8c9317a7db0f2c5fa40134c49936115583b4457504d3e78968ff76d2faa60c03209e1d49c2d83d128316894a36d5475358a36e99725ead38b99becd4bb74e793a6574eed0ddd85e6dd03615c2b7b71318d254db71cc581887b0a0dc9bcd61f51c50ffd28386079b4ed7747cad623c112dde7eae53992ac95ad764e7ca06baf22aff386586788c4dcc7e2863a5c0f583ee043455e6b723c7bc505bc02c9656fb1dc5b217aeac598d8a2a7b44463499edab338191ac9f533652609fec9456685ecccee06bcc8df635d137b4d294036162ab3975448dc17db68f03207dca7ec3165bc2ba657721065cbc53cbe03e176ab88c5ce49b7941075458ef0d13bce92efea61d1d1f7b5b97a6dae976db43353177fbced15462c4ab27b985d550e2d5b1009b8c7a1cdbd9c4d3071f1b10c45019d87d9318a94186472739e7346c835db66f74c01bdab528886cddc0d5ca164ee890c83900d9eea9356b28face9ab573175b8703ad70805606c25a1a26cbbcfd5289473ab028eaa0386fdaa81f", @typed={0xf, 0x150, 0x0, 0x0, @str='/dev/tty12\x00'}, @nested={0x4, 0x2}, @nested={0x4, 0x71}]}, @generic="69b831e0f46a08577a968f15b12da0e21428262d2b5a000f95b02d1a78a006782ac296ba899ed484c5c49d2dff79a9c3f9fe4eee00b91b76f068a438fb126266f03144e41919dfc9159f5bca46c76769c39e6c3a91711e7a6b3b471caceaeed20d9ee8fb03647297b411680b672ec3900e7b5620b27da62b08887aa88d7352a0a86ba90833b5b91048ef2d5c1d5b781780765a5d72e210e8d28fa8a1bbac99268a1a6dd9f56a4d67c81a54eb56a41c3febcc57f6a2e64cc1245dc4b15afab37e8ae06e30ac3b47172d16897097cb5bfdbdbfce9d51518756751cbd8493290e4c566e7261a043", @generic="ea1a3227b0e8e8e729a5f16ddb0deec733f091e1fbe0804be0f9a7f0d6a622573a56e9e8ad36c3b2c2d0b9919446a325db8bac66b0ff24681bc474049fd7ad71d1c15bf8f74f5a12558cf091ed859e8a80b7c72c37df2f3b864c1a6c291cc036e6ec933d2f68481e14f9013574da0c606b9b788ff9de15151d2cf6640cb664ae0429f3502e7b9b7160d53b5ca35106ed1c7035d94799901d05b12858664f3a2f69ea26e202b8e0622622390b5333838e0c06891ed7c1ef3987d317b0", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x4}, @generic="f619fb0873c3979a837232e019c28ff756d4bf7f2b4e1642360828b5828c29eddf1724fd11e836d68293d6bd6d624ba78ef53b17abd250d39d96ab49d5afc01f72598ef2438b9e106f9682b142a5243c", @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x44850}, 0x4040) times$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x280, 0x400, 0x4}]}) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mlock$auto(0x8d, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x800, 0x8000003b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 6.629275694s ago: executing program 2 (id=3213): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketcall$auto_SYS_SOCKET(0x1, 0x0) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x4de7) (fail_nth: 5) 5.616413058s ago: executing program 1 (id=3215): writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x174, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x160, 0x2, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @u32=0x6}, @nested={0x14b, 0xaa, 0x0, 0x1, [@generic="ad719c15e529ce58d445c4f51ea00a9ae65deb70d3f0099b1e7cf4a800ebc58e43207232817c71b86b15af0aea375f5b2a07b349c6df2888a636", @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x151}]}, @generic="75a2bc1a29609adf", @generic="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"]}, @typed={0x8, 0x12a, 0x0, 0x0, @uid}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x6, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x1000000f0, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) 5.616249093s ago: executing program 2 (id=3216): sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) (async) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) 5.050098614s ago: executing program 2 (id=3217): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r1 = dup$auto(r0) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/156, 0x9c) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae48, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getsockopt$auto_SO_PEERPIDFD(r1, 0x1, 0x4d, 0x0, &(0x7f00000000c0)=0x8) 5.031797425s ago: executing program 3 (id=3218): close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10001, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x7, 0x7fffffffffffffff, 0x4, 0x28, 0x7, 0x1, 0x7f, 0x100, 0x19]}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50150000", @ANYRES16=0x0, @ANYBLOB="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"/4686, @ANYRES32=0x0, @ANYBLOB="140047000000000000000000000000000000000108004b00", @ANYRES32=0x0, @ANYBLOB="9002cd800400fd0004007e808501dc800a004a002c2d2a2a27000000a48871e8d79201d834205019befe7070c41596f39ae07830465df392d2ed1608fff8250740290b9164663d05d2c4b941d45e95037996c9509221b26b3290e7c8b9b14965d03cdf4657007fac937231ed78a6c0ed774eb54714baa6bceafe0246119caa1d8dd3", @ANYRES32, @ANYBLOB="0014005000fc00000000000000000000000000000174001d80aa9fd3c808a91c36118ab8a53a69355811310b2ea03dde7205fd370fa6eae002165e2ba33cb0d1d9bf637654651c61825e8479f867dd2b9df72aa5e58ed1a2a176097180c9d4e58c373231188836f46ae3fec939e893ea134332b539026d5a3c08001400ffffffff04004f8004007b80000000040030808d0f95e0a3c3542a63f1cc112f693833cb02defe934037b9a14da7bfe06c5e9f114e13c567d70ebdb0fcc20387b398f9ea222a70436a0967c6ed9602a92f5af0c27b635792b24e35542c77556192d67aa4c1f5029bf8146606ca90d0f72e9fac8d667971533256a3c8e2d46d63288b8770d1d3bac2061a40915ff540e864dfac4aa93b92da77bc4fdab85b91eb81d6fb62cd14d968ba9776b1d30949007f15a49a3e9c1aac6479f40e68dcd1d24ef08439179179a23398dfce6f8c4693495f269fd248dc6c2490891f814b360f23ecea0317c7fecd48e989744f424d85ec98c7a4b99000dc39970223451e6b6b83314e552368daa24b41b814008d00fc0000000000000000000000000000011000258004003e8008009500", @ANYRES32=0x0, @ANYBLOB="08000900e80000000500020081000000050007000900000005000600140000000500060001000000"], 0x1550}, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b73, 0x2, 0x800) socket(0x10, 0x2, 0xffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r3, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x2, 0x20a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) 4.903772472s ago: executing program 0 (id=3219): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r5, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r6 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) fgetxattr$auto(r6, &(0x7f0000000080)='wireguard\x00', &(0x7f00000000c0)="9957575c0aa547dfb4ae93ebe1d133b4754682e27033", 0xa) socket$nl_generic(0x10, 0x3, 0x10) 4.235606808s ago: executing program 2 (id=3220): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0x7fff}, 0x5e, 0x6) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a80)={'caif0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000008bbf1108d69d534df4c40aaf6d81869b630fc1ecc346a7b144dbf1cc97fd5a910da6352c12e9bc6c25f8b36875bef999c9d3e952244909ac40c82ae5c2a9", @ANYRES16=r8, @ANYBLOB="01002bb57000fcdbdf211b0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00028008000200", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r10, r10, 0x0, 0x7) 3.654196803s ago: executing program 3 (id=3221): r0 = socket(0x25, 0x804, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r0, 0x42) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4) 3.606580865s ago: executing program 0 (id=3222): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x82d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd6/queue/iosched/prio_aging_expire\x00', 0x88282, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x1) write$auto(r0, 0x0, 0xc) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/timers\x00', 0x84800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r4) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f00000001c0)="e59145a463cda1eabab847ad453a2846f51c8e0db6a4f373d51636607f84199348cf91aca4f7e424a94ed1d44030fcbecfc3fd5147b4b05ce6fa577779f7a9f73084c3a8b5d52eaddd690a5e9636ce05a2ee513289a9044b356d04b989dbbcedab68376a63d3072628792ec5ca6ea9562e43756e412059ac4b5c2670a4abfc2b2337b008d920a40b06208c3f8153ddaa481391fb09fc38af2b60b322141692d511cf5ea19db1139e1eb25790cad5cac17fb661807c8e24ccac9d2f4072f755ae75", 0xc1) mmap$auto(0xfffffffffffffffd, 0x8000, 0xde, 0x1d, r3, 0xffffffffffffffff) r7 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto(r7, 0x0, 0x5) madvise$auto(0x0, 0x2000040080000004, 0xe) r8 = socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) r9 = io_uring_setup$auto(0x6, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf2501210000080008000900000000000000d400586da756e8d165e2f41f8d37e7ed4fda16efb612e339c64edb12e4da72103c7f97590eb7ddb6e1bf44ad539271d8180743945e211db9", @ANYRES32=r8, @ANYRESHEX=r10, @ANYRESDEC, @ANYRES64=r5], 0x38}}, 0x2008014) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x400a) ioctl$auto_IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000080)={0x7, 0x0, 0x10000}) fcntl$auto_F_SETLK(r3, 0x6, 0x0) 3.50360861s ago: executing program 3 (id=3223): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0x11, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x10) ioctl$auto_TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0xcad) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="b34d2a90", 0x7115}, 0x7) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003980)={0x24, r4, 0x5, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0xd, 0x11, '/dev/fb1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r6) 3.172199936s ago: executing program 1 (id=3224): mmap$auto(0x0, 0x40007, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x80044df9, 0x0) write$auto(0x3, 0x0, 0x81) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(r0, 0x5600, r1) 2.910494324s ago: executing program 1 (id=3225): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 2.885964085s ago: executing program 0 (id=3226): writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x6, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000300, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) 2.0605627s ago: executing program 1 (id=3227): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x6, 0x2, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x4000801) sendmsg$auto_NL80211_CMD_EPCS_CFG(r1, &(0x7f0000000cc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_KEK={0x29, 0xf2, "5de5a68dc9f756d9e7fc66239e03de56a7c0c9d435776d907fd101bd1eb1dd20036c94da28"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xbd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x7b, 0x0, &(0x7f0000000000)=0x98) select$auto(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x5}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={"5e55e2ed29e45b7da148176db65dc2ba0dfe1d57951121cb3d44b3f90bd41059", 0x7, 0x8, 0x4f1a1273, 0x2, 0x2, 0xffffffffffffffff}) capset$auto(&(0x7f0000000580)={0x6, r5}, &(0x7f00000005c0)={0x0, 0x8, 0x7f}) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x4f4, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xd6}, @NL802154_ATTR_SEC_DEVICE={0x37c, 0x2e, 0x0, 0x1, [@nested={0x1a8, 0x133, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @generic="752388853939b1e3d336461218f068c7d20167de9b6834657d073c1d51a2c01a8619351056efd1270c9580dd8c22f1474a24fcb08db147424e2eca840853424e558a4938fd8ef1f65869800657392df716860616529a293e267bed7304e7eaad0d2b9495d5a685562e", @generic="8abcbfb2065394f64d435e799be07347752316cc392f02d1015fb7565582470a0b56a47b4ac2d63b464391e67f19acc11266f87c11f99aaaca4f3465449d64b6ceeca83e2776e1c94d2ecd", @typed={0xde, 0x8, 0x0, 0x0, @binary="9580c67456eb3ddbcccc44b95504deb6d1c7afa0e5c93c3b2b8a9ceb4bfa4847c3ece77bb0799f8b59f06cf1d78f1d3a9b082a726236cbd4f2e482b161e1fecb791f42c6c3589e6dff286664d7b2d9c2582b45c99f134316a2c77287f3f82fcfa474d59fc830fa1409ce018b53dfcc705ff8ec95bbf74eb8f9231bc6dfe5a0fc0d194ead211987a8fc8fe9ece5f007da611feb7029a6875df14db3823524e4bb1cf490638f13bd3a0e2ef8b513a54e122de7262932fb3a3246a264ec0bc642d1298f88df58768d392a166d6a9e4a8896d064eb94bf635526681b"}, @nested={0x4, 0x57}]}, @typed={0x8, 0x49, 0x0, 0x0, @fd=r0}, @nested={0x1c6, 0x131, 0x0, 0x1, [@generic="04", @generic="53ae6b6c1a9be9f144a991b0e2eec9533b091d78627f98497b1a52e7e6995dba224e914feb7ae675ec17b2fa6074b1bacdead20165dbb7cb7518f8a97202b9e150340cf13083951c799cd1d3ecdb91916b8908230af04a0a959f1210a905222fa8ff3d14374b947ff4cbc6da990a70ab346326bc35ff46508408fe97f13efc9e97c5906a320a5473fa801014d19d883501ea526109788d149ad1ce445fed9976e2b57b55368bc3568528f6e1964fda8bb1ef123b2cdb5f681db94e36c77b18bf6994", @typed={0x8, 0xb1, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x110}, @generic="8d0c00d201925b70211acba3498524b1c4217cf797c42a7fa67629f97747a504f9429c7577b5dd1956f6ee318b0a1816e2eef3bd11c8a85dd624de0d02c1c212ba3684db4ce531adcc934b375c7e0e8167707c3f7a24646017253ab6da6f9b4e7bf66a3563c530e12149277168fd8473b5c04469b23f9db09b66c2053bcbd1b8596471e288758f60e869a973840630372b25f127dbab58a98d3d43f2079d3b5755b274458480753bda2f7390d82cd00cae89f8e4b52f3ca22b6a3eacc704f4e17ecf7f897486d5a831247d3b52717ab64a708e3114cf204fc3f25859471d02", @nested={0x4, 0xcc}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0xf0}]}]}, @NL802154_ATTR_SEC_LEVEL={0x127, 0x2d, 0x0, 0x1, [@typed={0x8, 0xee, 0x0, 0x0, @pid}, @generic="c0eb00afa3151c507236e91b377dfb6a43a167717831c8c26209cd75fb5dc0739fd5abdb1ce466f39d418c9a0b3e2c0c1e6a75aaa053fb5de236b243f3fb98196addb32cde324be927a0", @generic="106774a0dd371ca780152d3a57f4fe1afe108794314443d1083aa38accf585d666586b741ae8aaa53760257de0bf19852403f1ff8a324b568c0cb3", @typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="3d643e8d7dcb482554188fb24d14de760dfcb75eac79b4c715c800df41512481ef5ad13fd62d8434a6861fb1cfa027c90714778ab2bfe6d8e680a74c44401527ac5c21a999103158eec54b27b8d2e54797d6355c0b6fc739d55cb98edc15bb35a29525f9290605df2f275ff9feffe3b254513ec06c02c2d8d00d6ab36b752419a0e1"]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@typed={0x4, 0xcd}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x142}]}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x4}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x2}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x6d494d90e46b0b44}, 0x40) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000380), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80000001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) pselect6$auto(0xc, &(0x7f0000000d00)={[0xed, 0x1, 0x1, 0xff, 0x0, 0xcd1a, 0x8, 0x96, 0xe, 0x2, 0xffffffffffffff36, 0xffffffffffffffff, 0x1e0800, 0x7, 0x4, 0x9]}, &(0x7f0000000d80)={[0x7a, 0x0, 0x101, 0xf15, 0x6, 0x0, 0x7, 0x6e, 0x5452, 0x8, 0x10001, 0x7, 0x1, 0x4, 0x3, 0x8]}, &(0x7f0000000e00)={[0xfffffffffffffffc, 0x334a2ac8, 0x2, 0x2, 0x8f2, 0x40, 0x8000000000000000, 0x10, 0x3, 0x6, 0x6, 0x6, 0x4, 0x7fffffffffffffff, 0xc85, 0x5]}, &(0x7f0000000e80)={0x1, 0xfffffffffffffffa}, &(0x7f0000000ec0)="c9b94c0606a16b364447fe650aff52151f18ca22aa482a895d446239bfd1a5c2cdd9bdc14df6a6d3d1480523f4d93c52a91168b1cd35b3f97cf826f285d4ff8b8e2753393ce0d44d1c7002ce937cd7f3b29cdc092569819e970aae52397adb2f4a66886e0922edf7f8d5b6cf800b812197b8dcf4d724d23d23909376c906f5eaf0f974b05c492ab6cdc126e34e06a94e23fb7ae22817834aba094674d1dcd9b961896d4cd5a56bba6520fc59d98ab244ddc32b15183243ed") openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.06014692s ago: executing program 2 (id=3228): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0xfffe) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r2}}, 0x58) msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52}) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000011200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4020004) setresuid$auto(0x2, 0x7, 0x8080) 1.971503957s ago: executing program 3 (id=3229): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0xc8, 0x400454d4, 0xe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(0x6, 0x11b, 0x7, 0xfffffffffffffffe, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x560a, 0x7) mmap$auto(0x0, 0x202000d, 0x3, 0xeb5, 0xffffffffffffffff, 0x10000000008000) r2 = open(0x0, 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x80002000a, 0x6, 0xc34, 0x401, 0x1000000000000000) read$auto(r2, 0x0, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x6, 0x0) 1.694233898s ago: executing program 0 (id=3230): close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10001, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x7, 0x7fffffffffffffff, 0x4, 0x28, 0x7, 0x1, 0x7f, 0x100, 0x19]}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50150000", @ANYRES16=0x0, @ANYBLOB="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"/4686, @ANYRES32=0x0, @ANYBLOB="140047000000000000000000000000000000000108004b00", @ANYRES32=0x0, @ANYBLOB="9002cd800400fd0004007e808501dc800a004a002c2d2a2a27000000a48871e8d79201d834205019befe7070c41596f39ae07830465df392d2ed1608fff8250740290b9164663d05d2c4b941d45e95037996c9509221b26b3290e7c8b9b14965d03cdf4657007fac937231ed78a6c0ed774eb54714baa6bceafe0246119caa1d8dd3", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000900e80000000500020081000000050007000900000005000600140000000500060001000000"], 0x1550}, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b73, 0x2, 0x800) socket(0x10, 0x2, 0xffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r3, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x2, 0x20a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) 1.173107468s ago: executing program 1 (id=3231): socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000240)={0xffffffff, 0x0, 0x2000000, 0x7, 0x6, 0xff, 0x1ff, 0x0, 0x1, 0x4, 0xfffffffffffffffb, {0x0, 0x6}, 0x9b, 0x9, 0x6, 0x624, 0x0, 0x6, 0x4, 0x7, 0x9, 0xfffffffffffffffa, 0xfffffff9}) ioctl$auto(r0, 0x9000643c, 0xc35) io_uring_setup$auto(0x1, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 461.988191ms ago: executing program 2 (id=3232): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x80000, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x5, 0x0) getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) socket(0x2, 0x80002, 0x73) unshare$auto(0x40000080) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r1, 0x0, 0xfff) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r0, r4, 0x0, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x6, 0x1]}, 0x0) 292.666671ms ago: executing program 0 (id=3233): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:02.0/subsystem_device\x00', 0x1, 0x0) mmap$auto(0x3, 0x4, 0x6, 0x512, r0, 0x7) 230.080786ms ago: executing program 0 (id=3234): socket(0x2b, 0x1, 0x1) shmat$auto(0x7fffffff, 0x0, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x15, 0x4, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000002200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a1971", 0x49) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x5, 0x948b, 0x4, 0x95f4da0a, 0x4000000000000007, 0x8f, 0x62, 0x80000001, 0xdaf, 0x6d3f, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xf30, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) pread64$auto(r2, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) open(0x0, 0x161342, 0x170) 0s ago: executing program 3 (id=3235): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) lseek$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce", 0x40000100000001}, 0x6, 0x0) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r1, 0x0, @_tid=r2}, &(0x7f0000000080)=0x2) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/lru_gen_full\x00', 0x2a4d03, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x20009, 0x84000000000df, 0xebf, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(r3, 0x0, 0x80, 0x7fffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): 8855] RIP: 0033:0x7f6ee878eba9 [ 884.972318][T18855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.972333][T18855] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 884.972349][T18855] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 884.972359][T18855] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 884.972369][T18855] RBP: 00007f6ee8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 884.972378][T18855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.972386][T18855] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 884.972407][T18855] [ 886.684638][T18867] ima: policy update failed [ 886.760450][ T30] audit: type=1802 audit(1758097260.150:26): pid=18867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2764" res=0 errno=0 [ 889.198500][T18880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 889.866895][T18898] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 889.937030][T18893] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2771'. [ 891.872096][T18918] Scaler: ================= START STATUS ================= [ 891.940255][T18918] Scaler: ================== END STATUS ================== [ 892.304188][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2777'. [ 893.203963][T18943] FAULT_INJECTION: forcing a failure. [ 893.203963][T18943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.270581][T18943] CPU: 0 UID: 0 PID: 18943 Comm: syz.1.2781 Tainted: G U syzkaller #0 PREEMPT(full) [ 893.270607][T18943] Tainted: [U]=USER [ 893.270612][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.270621][T18943] Call Trace: [ 893.270626][T18943] [ 893.270632][T18943] dump_stack_lvl+0x16c/0x1f0 [ 893.270657][T18943] should_fail_ex+0x512/0x640 [ 893.270682][T18943] _copy_from_user+0x2e/0xd0 [ 893.270698][T18943] copy_msghdr_from_user+0x98/0x160 [ 893.270720][T18943] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 893.270743][T18943] ? kfree+0x24f/0x4d0 [ 893.270756][T18943] ? __pfx__kstrtoull+0x10/0x10 [ 893.270777][T18943] ___sys_sendmsg+0xfe/0x1d0 [ 893.270799][T18943] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.270835][T18943] ? __pfx___might_resched+0x10/0x10 [ 893.270854][T18943] __sys_sendmmsg+0x200/0x420 [ 893.270886][T18943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 893.270913][T18943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 893.270941][T18943] ? fput+0x9b/0xd0 [ 893.270961][T18943] ? ksys_write+0x1ac/0x250 [ 893.270977][T18943] ? __pfx_ksys_write+0x10/0x10 [ 893.270996][T18943] __x64_sys_sendmmsg+0x9c/0x100 [ 893.271016][T18943] ? lockdep_hardirqs_on+0x7c/0x110 [ 893.271036][T18943] do_syscall_64+0xcd/0x4c0 [ 893.271058][T18943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.271072][T18943] RIP: 0033:0x7fe38d38eba9 [ 893.271084][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.271098][T18943] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.271112][T18943] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 893.271121][T18943] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 893.271129][T18943] RBP: 00007fe38e2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 893.271138][T18943] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 893.271146][T18943] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 893.271163][T18943] [ 893.476506][ C0] vkms_vblank_simulate: vblank timer overrun [ 896.403644][T18957] FAULT_INJECTION: forcing a failure. [ 896.403644][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 896.532544][T18957] CPU: 0 UID: 0 PID: 18957 Comm: syz.2.2783 Tainted: G U syzkaller #0 PREEMPT(full) [ 896.532571][T18957] Tainted: [U]=USER [ 896.532576][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 896.532586][T18957] Call Trace: [ 896.532599][T18957] [ 896.532605][T18957] dump_stack_lvl+0x16c/0x1f0 [ 896.532633][T18957] should_fail_ex+0x512/0x640 [ 896.532656][T18957] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 896.532677][T18957] should_failslab+0xc2/0x120 [ 896.532697][T18957] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 896.532715][T18957] ? alloc_inode+0x64/0x240 [ 896.532737][T18957] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 896.532753][T18957] alloc_inode+0x64/0x240 [ 896.532773][T18957] new_inode+0x22/0x1c0 [ 896.532794][T18957] debugfs_create_dir+0xdd/0x5f0 [ 896.532813][T18957] ptp_open+0x334/0x550 [ 896.532832][T18957] ? __pfx_ptp_open+0x10/0x10 [ 896.532855][T18957] ? __pfx_ptp_open+0x10/0x10 [ 896.532870][T18957] posix_clock_open+0x17b/0x290 [ 896.532888][T18957] ? __pfx_posix_clock_open+0x10/0x10 [ 896.532904][T18957] chrdev_open+0x234/0x6a0 [ 896.532922][T18957] ? __pfx_apparmor_file_open+0x10/0x10 [ 896.532938][T18957] ? __pfx_chrdev_open+0x10/0x10 [ 896.532957][T18957] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 896.532977][T18957] do_dentry_open+0x982/0x1530 [ 896.532995][T18957] ? __pfx_chrdev_open+0x10/0x10 [ 896.533017][T18957] vfs_open+0x82/0x3f0 [ 896.533039][T18957] path_openat+0x1de4/0x2cb0 [ 896.533063][T18957] ? __pfx_path_openat+0x10/0x10 [ 896.533084][T18957] do_filp_open+0x20b/0x470 [ 896.533101][T18957] ? __pfx_do_filp_open+0x10/0x10 [ 896.533132][T18957] ? alloc_fd+0x471/0x7d0 [ 896.533152][T18957] do_sys_openat2+0x11b/0x1d0 [ 896.533173][T18957] ? __pfx_do_sys_openat2+0x10/0x10 [ 896.533201][T18957] __x64_sys_openat+0x174/0x210 [ 896.533214][T18957] ? __pfx___x64_sys_openat+0x10/0x10 [ 896.533235][T18957] do_syscall_64+0xcd/0x4c0 [ 896.533258][T18957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.533274][T18957] RIP: 0033:0x7f6ee878eba9 [ 896.533287][T18957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.533301][T18957] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 896.533316][T18957] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 896.533326][T18957] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 896.533335][T18957] RBP: 00007f6ee8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 896.533344][T18957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.533353][T18957] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 896.533372][T18957] [ 896.533379][T18957] debugfs: out of free dentries, can not create directory '0xffff88807e01c000' [ 896.969046][T18977] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2787'. [ 898.006481][T18993] FAULT_INJECTION: forcing a failure. [ 898.006481][T18993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 898.123363][T18993] CPU: 0 UID: 0 PID: 18993 Comm: syz.1.2791 Tainted: G U syzkaller #0 PREEMPT(full) [ 898.123391][T18993] Tainted: [U]=USER [ 898.123396][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 898.123405][T18993] Call Trace: [ 898.123411][T18993] [ 898.123418][T18993] dump_stack_lvl+0x16c/0x1f0 [ 898.123445][T18993] should_fail_ex+0x512/0x640 [ 898.123470][T18993] should_fail_alloc_page+0xe7/0x130 [ 898.123492][T18993] prepare_alloc_pages+0x3c2/0x610 [ 898.123519][T18993] ? rcu_is_watching+0x12/0xc0 [ 898.123536][T18993] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 898.123558][T18993] ? __lock_acquire+0x62e/0x1ce0 [ 898.123579][T18993] ? css_rstat_updated+0x1c2/0x510 [ 898.123596][T18993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 898.123617][T18993] ? rcu_is_watching+0x12/0xc0 [ 898.123637][T18993] ? __lock_acquire+0x62e/0x1ce0 [ 898.123655][T18993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.123677][T18993] ? policy_nodemask+0xea/0x4e0 [ 898.123697][T18993] alloc_pages_mpol+0x1fb/0x550 [ 898.123717][T18993] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 898.123736][T18993] ? filemap_get_entry+0x1a7/0x3b0 [ 898.123758][T18993] folio_alloc_noprof+0x20/0x2d0 [ 898.123778][T18993] filemap_alloc_folio_noprof+0x3a1/0x470 [ 898.123795][T18993] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 898.123810][T18993] ? rcu_is_watching+0x12/0xc0 [ 898.123828][T18993] __filemap_get_folio+0x5e1/0xc30 [ 898.123852][T18993] ioctx_alloc+0x761/0x2120 [ 898.123877][T18993] ? __pfx_ioctx_alloc+0x10/0x10 [ 898.123892][T18993] ? __might_fault+0x13b/0x190 [ 898.123913][T18993] __x64_sys_io_setup+0xc9/0x210 [ 898.123930][T18993] do_syscall_64+0xcd/0x4c0 [ 898.123953][T18993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.123969][T18993] RIP: 0033:0x7fe38d38eba9 [ 898.123981][T18993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.123996][T18993] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 898.124011][T18993] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 898.124020][T18993] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 898.124029][T18993] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 898.124038][T18993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.124046][T18993] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 898.124065][T18993] [ 898.688447][T15570] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 898.788051][T19000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 899.635987][T19015] Invalid ELF header magic: != ELF [ 900.866683][T19011] kexec: Could not allocate control_code_buffer [ 900.916559][T19033] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 901.125188][ T30] audit: type=1804 audit(1758097274.587:27): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2800" name="/newroot/118/file0" dev="tmpfs" ino=634 res=1 errno=0 [ 901.146445][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.291456][ T30] audit: type=1800 audit(1758097274.587:28): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2800" name="file0" dev="tmpfs" ino=634 res=0 errno=0 [ 901.311996][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.598062][T19044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 902.248493][T19053] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2806'. [ 903.234116][T19066] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 903.906324][T19079] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2812'. [ 904.006485][T19076] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2813'. [ 904.044768][T19081] ptrace attach of "./syz-executor exec"[17177] was attempted by "49(k齛ri֙/\x5cHaj83܆u\x0bPHt݌<\x1bOV`m=r_\x0c~.\x0aloB]#is- ȩ!L\x07( |'ENPMDj][\x5c09EH@U\x07UQH b+LyU4_\x0bjMj׫4{&Kqò8Ff!*8UKb7ݡɚϪjv\x1by\x22'gbXC,؉vOM_(\x0aꈬ2?\x222tA ]uQÜ5 $+6azQ6\x0bϱJTkmC&mw0w Ʊ\x0b㯊:W.OJyvxOKH1&\x22/}\x5cd|ɜٯR.c_5`WQɿ:ȳFZm_w:3^`>fD_~U#-cg\x07S#;}hƐQR-N@ tE\x0b5ig׍Zk'8ZT%IǠTt6ɠۦdg\x0b>=D(j3Pc}\x1b'몼#Y=SpjOG*p蘅.XFsjnjZ&[\x22&X44Y\x07-w`ᡚ;;kTu\x22\x22n\x5c>ŔRcyJ .jM<@`PWs\x0dYӴ%6/UX DGQ\x1bBVrE|ɕo-̋&ͱԋ齀35LֶUS+ay(2/˰c\x0bHϗ-()-:H]kܰBo\x0aZt$)U· xaj6$ 0-e_Er [ 904.565958][T19084] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2815'. [ 904.657023][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.388347][T19120] ICMPv6: process `syz.2.2824' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 907.269471][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2819'. [ 907.842575][T19145] FAULT_INJECTION: forcing a failure. [ 907.842575][T19145] name failslab, interval 1, probability 0, space 0, times 0 [ 907.927661][T19145] CPU: 0 UID: 0 PID: 19145 Comm: syz.2.2827 Tainted: G U syzkaller #0 PREEMPT(full) [ 907.927688][T19145] Tainted: [U]=USER [ 907.927693][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 907.927703][T19145] Call Trace: [ 907.927710][T19145] [ 907.927724][T19145] dump_stack_lvl+0x16c/0x1f0 [ 907.927750][T19145] should_fail_ex+0x512/0x640 [ 907.927773][T19145] ? fs_reclaim_acquire+0xae/0x150 [ 907.927797][T19145] should_failslab+0xc2/0x120 [ 907.927816][T19145] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 907.927834][T19145] ? security_inode_alloc+0x3b/0x2b0 [ 907.927853][T19145] security_inode_alloc+0x3b/0x2b0 [ 907.927870][T19145] inode_init_always_gfp+0xce4/0x1030 [ 907.927890][T19145] alloc_inode+0x86/0x240 [ 907.927909][T19145] new_inode+0x22/0x1c0 [ 907.927927][T19145] ? trace_cap_capable+0x18d/0x200 [ 907.927945][T19145] shmem_get_inode+0x19a/0xfb0 [ 907.927972][T19145] ? __vm_enough_memory+0x184/0x3f0 [ 907.927994][T19145] __shmem_file_setup+0x279/0x330 [ 907.928010][T19145] shmem_zero_setup+0x93/0x1a0 [ 907.928029][T19145] __mmap_region+0x2081/0x27b0 [ 907.928047][T19145] ? lock_acquire+0x179/0x350 [ 907.928065][T19145] ? __pfx___mmap_region+0x10/0x10 [ 907.928086][T19145] ? lockdep_hardirqs_on+0x7c/0x110 [ 907.928107][T19145] ? finish_task_switch.isra.0+0x221/0xc10 [ 907.928123][T19145] ? rcu_is_watching+0x12/0xc0 [ 907.928138][T19145] ? trace_sched_exit_tp+0xd1/0x120 [ 907.928158][T19145] ? __schedule+0x11a3/0x5de0 [ 907.928209][T19145] ? trace_cap_capable+0x18d/0x200 [ 907.928230][T19145] mmap_region+0x1ab/0x3f0 [ 907.928247][T19145] ? __get_unmapped_area+0x267/0x440 [ 907.928269][T19145] do_mmap+0xa3e/0x1210 [ 907.928292][T19145] ? __pfx_do_mmap+0x10/0x10 [ 907.928312][T19145] ? __pfx_down_write_killable+0x10/0x10 [ 907.928330][T19145] vm_mmap_pgoff+0x29e/0x470 [ 907.928353][T19145] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 907.928377][T19145] ? __x64_sys_futex+0x1e0/0x4c0 [ 907.928394][T19145] ? __x64_sys_futex+0x1e9/0x4c0 [ 907.928414][T19145] ksys_mmap_pgoff+0x7d/0x5c0 [ 907.928433][T19145] ? xfd_validate_state+0x61/0x180 [ 907.928453][T19145] ? __pfx_do_writev+0x10/0x10 [ 907.928470][T19145] __x64_sys_mmap+0x125/0x190 [ 907.928494][T19145] do_syscall_64+0xcd/0x4c0 [ 907.928516][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.928531][T19145] RIP: 0033:0x7f6ee878eba9 [ 907.928544][T19145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.928559][T19145] RSP: 002b:00007f6ee9597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 907.928574][T19145] RAX: ffffffffffffffda RBX: 00007f6ee89d6090 RCX: 00007f6ee878eba9 [ 907.928583][T19145] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 907.928592][T19145] RBP: 00007f6ee8811e19 R08: fffffffffffffffa R09: 0000000000008000 [ 907.928601][T19145] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 907.928609][T19145] R13: 00007f6ee89d6128 R14: 00007f6ee89d6090 R15: 00007fff0e3fd908 [ 907.928629][T19145] [ 908.289349][T19151] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2828'. [ 908.356265][T19152] FAULT_INJECTION: forcing a failure. [ 908.356265][T19152] name failslab, interval 1, probability 0, space 0, times 0 [ 908.369214][T19152] CPU: 0 UID: 0 PID: 19152 Comm: syz.0.2829 Tainted: G U syzkaller #0 PREEMPT(full) [ 908.369240][T19152] Tainted: [U]=USER [ 908.369245][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 908.369255][T19152] Call Trace: [ 908.369264][T19152] [ 908.369271][T19152] dump_stack_lvl+0x16c/0x1f0 [ 908.369299][T19152] should_fail_ex+0x512/0x640 [ 908.369321][T19152] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 908.369341][T19152] should_failslab+0xc2/0x120 [ 908.369360][T19152] __kmalloc_cache_noprof+0x6a/0x3e0 [ 908.369376][T19152] ? ptp_open+0xe4/0x550 [ 908.369395][T19152] ptp_open+0xe4/0x550 [ 908.369414][T19152] ? __pfx_ptp_open+0x10/0x10 [ 908.369436][T19152] ? __pfx_ptp_open+0x10/0x10 [ 908.369451][T19152] posix_clock_open+0x17b/0x290 [ 908.369469][T19152] ? __pfx_posix_clock_open+0x10/0x10 [ 908.369485][T19152] chrdev_open+0x234/0x6a0 [ 908.369503][T19152] ? __pfx_apparmor_file_open+0x10/0x10 [ 908.369519][T19152] ? __pfx_chrdev_open+0x10/0x10 [ 908.369538][T19152] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 908.369558][T19152] do_dentry_open+0x982/0x1530 [ 908.369576][T19152] ? __pfx_chrdev_open+0x10/0x10 [ 908.369598][T19152] vfs_open+0x82/0x3f0 [ 908.369621][T19152] path_openat+0x1de4/0x2cb0 [ 908.369644][T19152] ? __pfx_path_openat+0x10/0x10 [ 908.369666][T19152] do_filp_open+0x20b/0x470 [ 908.369712][T19152] ? __pfx_do_filp_open+0x10/0x10 [ 908.369745][T19152] ? alloc_fd+0x471/0x7d0 [ 908.369766][T19152] do_sys_openat2+0x11b/0x1d0 [ 908.369788][T19152] ? __pfx_do_sys_openat2+0x10/0x10 [ 908.369817][T19152] __x64_sys_openat+0x174/0x210 [ 908.369831][T19152] ? __pfx___x64_sys_openat+0x10/0x10 [ 908.369852][T19152] do_syscall_64+0xcd/0x4c0 [ 908.369875][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.369890][T19152] RIP: 0033:0x7f9249d8eba9 [ 908.369904][T19152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.369918][T19152] RSP: 002b:00007f924ac43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 908.369933][T19152] RAX: ffffffffffffffda RBX: 00007f9249fd5fa0 RCX: 00007f9249d8eba9 [ 908.369944][T19152] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 908.369954][T19152] RBP: 00007f9249e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 908.369963][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.369971][T19152] R13: 00007f9249fd6038 R14: 00007f9249fd5fa0 R15: 00007ffd1ddca2b8 [ 908.369991][T19152] [ 909.827421][T19168] FAULT_INJECTION: forcing a failure. [ 909.827421][T19168] name failslab, interval 1, probability 0, space 0, times 0 [ 909.840030][T19168] CPU: 0 UID: 0 PID: 19168 Comm: syz.2.2834 Tainted: G U syzkaller #0 PREEMPT(full) [ 909.840055][T19168] Tainted: [U]=USER [ 909.840060][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 909.840069][T19168] Call Trace: [ 909.840077][T19168] [ 909.840083][T19168] dump_stack_lvl+0x116/0x1f0 [ 909.840112][T19168] should_fail_ex+0x512/0x640 [ 909.840137][T19168] should_failslab+0xc2/0x120 [ 909.840157][T19168] __kmalloc_cache_noprof+0x6a/0x3e0 [ 909.840173][T19168] ? snd_ctl_notify+0x3ab/0x710 [ 909.840196][T19168] snd_ctl_notify+0x3ab/0x710 [ 909.840221][T19168] snd_ctl_notify_one+0x122/0x240 [ 909.840241][T19168] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 909.840266][T19168] ? mark_held_locks+0x49/0x80 [ 909.840287][T19168] __snd_ctl_add_replace+0x63e/0x930 [ 909.840313][T19168] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 909.840338][T19168] ? trace_kmalloc+0x2b/0xd0 [ 909.840356][T19168] ? __kmalloc_noprof+0x242/0x510 [ 909.840372][T19168] ? snd_ctl_new+0x101/0x1a0 [ 909.840393][T19168] snd_ctl_elem_add+0x92c/0x14e0 [ 909.840418][T19168] ? find_held_lock+0x2b/0x80 [ 909.840432][T19168] ? __might_fault+0xe3/0x190 [ 909.840448][T19168] ? __might_fault+0xe3/0x190 [ 909.840462][T19168] ? __might_fault+0x13b/0x190 [ 909.840478][T19168] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 909.840505][T19168] snd_ctl_elem_add_user+0xc3/0x170 [ 909.840531][T19168] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 909.840576][T19168] snd_ctl_ioctl+0x799/0xf80 [ 909.840599][T19168] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 909.840624][T19168] ? __fget_files+0x20e/0x3c0 [ 909.840648][T19168] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 909.840670][T19168] __x64_sys_ioctl+0x18e/0x210 [ 909.840694][T19168] do_syscall_64+0xcd/0x4c0 [ 909.840718][T19168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.840733][T19168] RIP: 0033:0x7f6ee878eba9 [ 909.840745][T19168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.840759][T19168] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.840774][T19168] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 909.840784][T19168] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 909.840793][T19168] RBP: 00007f6ee8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 909.840802][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.840811][T19168] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 909.840831][T19168] [ 909.840841][T19168] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 910.228247][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 910.249632][T19178] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2835'. [ 910.687277][T19189] FAULT_INJECTION: forcing a failure. [ 910.687277][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 910.720769][T19189] CPU: 0 UID: 0 PID: 19189 Comm: syz.1.2845 Tainted: G U syzkaller #0 PREEMPT(full) [ 910.720800][T19189] Tainted: [U]=USER [ 910.720805][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 910.720815][T19189] Call Trace: [ 910.720822][T19189] [ 910.720829][T19189] dump_stack_lvl+0x16c/0x1f0 [ 910.720855][T19189] should_fail_ex+0x512/0x640 [ 910.720877][T19189] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 910.720903][T19189] should_failslab+0xc2/0x120 [ 910.720922][T19189] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 910.720941][T19189] ? __kthread_create_on_node+0x186/0x3f0 [ 910.720964][T19189] kvasprintf+0xbc/0x160 [ 910.720980][T19189] ? __pfx_kvasprintf+0x10/0x10 [ 910.721003][T19189] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 910.721024][T19189] __kthread_create_on_node+0x186/0x3f0 [ 910.721044][T19189] ? __pfx___kthread_create_on_node+0x10/0x10 [ 910.721069][T19189] ? __lock_acquire+0xb97/0x1ce0 [ 910.721089][T19189] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 910.721111][T19189] kthread_create_on_node+0xc7/0x100 [ 910.721130][T19189] ? __pfx_kthread_create_on_node+0x10/0x10 [ 910.721152][T19189] ? mark_held_locks+0x49/0x80 [ 910.721169][T19189] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 910.721188][T19189] ? lockdep_hardirqs_on+0x7c/0x110 [ 910.721212][T19189] dvb_frontend_open+0xf47/0x1730 [ 910.721238][T19189] ? __pfx_dvb_frontend_open+0x10/0x10 [ 910.721260][T19189] dvb_device_open+0x26d/0x3b0 [ 910.721274][T19189] ? __pfx_dvb_device_open+0x10/0x10 [ 910.721287][T19189] chrdev_open+0x234/0x6a0 [ 910.721305][T19189] ? __pfx_apparmor_file_open+0x10/0x10 [ 910.721321][T19189] ? __pfx_chrdev_open+0x10/0x10 [ 910.721340][T19189] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 910.721360][T19189] do_dentry_open+0x982/0x1530 [ 910.721378][T19189] ? __pfx_chrdev_open+0x10/0x10 [ 910.721400][T19189] vfs_open+0x82/0x3f0 [ 910.721423][T19189] path_openat+0x1de4/0x2cb0 [ 910.721446][T19189] ? __pfx_path_openat+0x10/0x10 [ 910.721468][T19189] do_filp_open+0x20b/0x470 [ 910.721485][T19189] ? __pfx_do_filp_open+0x10/0x10 [ 910.721516][T19189] ? alloc_fd+0x471/0x7d0 [ 910.721536][T19189] do_sys_openat2+0x11b/0x1d0 [ 910.721564][T19189] ? __pfx_do_sys_openat2+0x10/0x10 [ 910.721616][T19189] __x64_sys_openat+0x174/0x210 [ 910.721631][T19189] ? __pfx___x64_sys_openat+0x10/0x10 [ 910.721652][T19189] do_syscall_64+0xcd/0x4c0 [ 910.721677][T19189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.721692][T19189] RIP: 0033:0x7fe38d38eba9 [ 910.721705][T19189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.721720][T19189] RSP: 002b:00007fe38e282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 910.721734][T19189] RAX: ffffffffffffffda RBX: 00007fe38d5d6090 RCX: 00007fe38d38eba9 [ 910.721744][T19189] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 910.721753][T19189] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 910.721762][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.721772][T19189] R13: 00007fe38d5d6128 R14: 00007fe38d5d6090 R15: 00007fffd2582da8 [ 910.721792][T19189] [ 911.965290][T19207] random: crng reseeded on system resumption [ 912.257705][T19189] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 913.122641][T19222] binder: 19221:19222 unknown command 4294967282 [ 913.162444][T19222] binder: 19221:19222 ioctl c0306201 2000000000c0 returned -22 [ 913.956862][T19224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.065852][T19224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 914.104508][T19224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 914.167924][T19224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 914.225793][T19225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 914.586766][T19252] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 915.199945][T15570] Bluetooth: hci4: command 0x0c1a tx timeout [ 916.078867][T15570] Bluetooth: hci1: command 0x0c1a tx timeout [ 916.155400][T15570] Bluetooth: hci2: command 0x0c1a tx timeout [ 916.235448][T15570] Bluetooth: hci0: command 0x0c1a tx timeout [ 916.337637][T19292] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2861'. [ 917.541847][T19313] FAULT_INJECTION: forcing a failure. [ 917.541847][T19313] name failslab, interval 1, probability 0, space 0, times 0 [ 917.554475][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.2.2869 Tainted: G U syzkaller #0 PREEMPT(full) [ 917.554500][T19313] Tainted: [U]=USER [ 917.554506][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 917.554516][T19313] Call Trace: [ 917.554524][T19313] [ 917.554531][T19313] dump_stack_lvl+0x116/0x1f0 [ 917.554559][T19313] should_fail_ex+0x512/0x640 [ 917.554584][T19313] should_failslab+0xc2/0x120 [ 917.554605][T19313] __kmalloc_cache_noprof+0x6a/0x3e0 [ 917.554621][T19313] ? snd_ctl_notify+0x3ab/0x710 [ 917.554644][T19313] snd_ctl_notify+0x3ab/0x710 [ 917.554669][T19313] snd_ctl_notify_one+0x122/0x240 [ 917.554689][T19313] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 917.554713][T19313] ? mark_held_locks+0x49/0x80 [ 917.554734][T19313] __snd_ctl_add_replace+0x63e/0x930 [ 917.554759][T19313] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 917.554783][T19313] ? trace_kmalloc+0x2b/0xd0 [ 917.554802][T19313] ? __kmalloc_noprof+0x242/0x510 [ 917.554818][T19313] ? snd_ctl_new+0x101/0x1a0 [ 917.554839][T19313] snd_ctl_elem_add+0x92c/0x14e0 [ 917.554864][T19313] ? find_held_lock+0x2b/0x80 [ 917.554877][T19313] ? __might_fault+0xe3/0x190 [ 917.554893][T19313] ? __might_fault+0xe3/0x190 [ 917.554907][T19313] ? __might_fault+0x13b/0x190 [ 917.554923][T19313] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 917.554950][T19313] snd_ctl_elem_add_user+0xc3/0x170 [ 917.554971][T19313] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 917.555017][T19313] snd_ctl_ioctl+0x799/0xf80 [ 917.555038][T19313] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 917.555070][T19313] ? __fget_files+0x20e/0x3c0 [ 917.555090][T19313] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 917.555114][T19313] __x64_sys_ioctl+0x18e/0x210 [ 917.555209][T19313] do_syscall_64+0xcd/0x4c0 [ 917.555237][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.555253][T19313] RIP: 0033:0x7f6ee878eba9 [ 917.555267][T19313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.555283][T19313] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.555299][T19313] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 917.555310][T19313] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 917.555319][T19313] RBP: 00007f6ee8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 917.555329][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.555340][T19313] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 917.555359][T19313] [ 917.555370][T19313] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 917.812478][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.259683][T19337] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 919.577056][T19351] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2876'. [ 920.481599][T19365] random: crng reseeded on system resumption [ 921.189643][T19376] FAULT_INJECTION: forcing a failure. [ 921.189643][T19376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 921.271023][T19376] CPU: 0 UID: 0 PID: 19376 Comm: syz.1.2881 Tainted: G U syzkaller #0 PREEMPT(full) [ 921.271048][T19376] Tainted: [U]=USER [ 921.271053][T19376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 921.271062][T19376] Call Trace: [ 921.271068][T19376] [ 921.271074][T19376] dump_stack_lvl+0x16c/0x1f0 [ 921.271099][T19376] should_fail_ex+0x512/0x640 [ 921.271124][T19376] should_fail_alloc_page+0xe7/0x130 [ 921.271144][T19376] prepare_alloc_pages+0x3c2/0x610 [ 921.271166][T19376] ? arch_stack_walk+0xa6/0x100 [ 921.271183][T19376] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 921.271208][T19376] ? stack_trace_save+0x8e/0xc0 [ 921.271224][T19376] ? __pfx_stack_trace_save+0x10/0x10 [ 921.271239][T19376] ? rcu_is_watching+0x12/0xc0 [ 921.271253][T19376] ? stack_depot_save_flags+0x29/0x9c0 [ 921.271275][T19376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 921.271293][T19376] ? kasan_save_stack+0x42/0x60 [ 921.271308][T19376] ? kasan_save_stack+0x33/0x60 [ 921.271323][T19376] ? kasan_save_track+0x14/0x30 [ 921.271337][T19376] ? __kasan_slab_alloc+0x89/0x90 [ 921.271353][T19376] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 921.271369][T19376] ? __pmd_alloc+0xbf/0x930 [ 921.271390][T19376] ? __put_user_4+0xd/0x20 [ 921.271408][T19376] ? do_fcntl+0xd06/0x15a0 [ 921.271426][T19376] ? __x64_sys_fcntl+0x163/0x200 [ 921.271444][T19376] ? do_syscall_64+0xcd/0x4c0 [ 921.271463][T19376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.271481][T19376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.271503][T19376] ? policy_nodemask+0xea/0x4e0 [ 921.271522][T19376] alloc_pages_mpol+0x1fb/0x550 [ 921.271545][T19376] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 921.271568][T19376] ? __pfx_filemap_map_pages+0x10/0x10 [ 921.271584][T19376] alloc_pages_noprof+0x131/0x390 [ 921.271603][T19376] pte_alloc_one+0x1c/0x3a0 [ 921.271618][T19376] __do_fault+0x320/0x490 [ 921.271633][T19376] ? do_raw_spin_lock+0x12c/0x2b0 [ 921.271657][T19376] ? __pfx_filemap_map_pages+0x10/0x10 [ 921.271673][T19376] do_pte_missing+0x1a6/0x3ba0 [ 921.271688][T19376] ? do_raw_spin_unlock+0x172/0x230 [ 921.271709][T19376] ? __pmd_alloc+0x3fb/0x930 [ 921.271731][T19376] __handle_mm_fault+0x152a/0x2a50 [ 921.271748][T19376] ? mt_find+0x3ef/0xa30 [ 921.271762][T19376] ? __pfx___handle_mm_fault+0x10/0x10 [ 921.271775][T19376] ? __pfx_mt_find+0x10/0x10 [ 921.271803][T19376] ? find_vma+0xbf/0x140 [ 921.271820][T19376] ? __pfx_find_vma+0x10/0x10 [ 921.271840][T19376] handle_mm_fault+0x589/0xd10 [ 921.271855][T19376] ? trace_raw_output_exceptions+0x131/0x150 [ 921.271878][T19376] do_user_addr_fault+0x7a6/0x1370 [ 921.271901][T19376] ? rcu_is_watching+0x12/0xc0 [ 921.271917][T19376] exc_page_fault+0x5c/0xb0 [ 921.271937][T19376] asm_exc_page_fault+0x26/0x30 [ 921.271951][T19376] RIP: 0010:__put_user_4+0xd/0x20 [ 921.271975][T19376] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 68 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 921.271989][T19376] RSP: 0018:ffffc90003a4fdf8 EFLAGS: 00050206 [ 921.272002][T19376] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000004de7 [ 921.272011][T19376] RDX: ffff888030cb5a00 RSI: ffffffff8237e0bb RDI: ffffffff8c163700 [ 921.272020][T19376] RBP: 1ffff92000749fc2 R08: d5e9e978e57f2557 R09: 0000000000000001 [ 921.272029][T19376] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004de7 [ 921.272037][T19376] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 921.272052][T19376] ? do_fcntl+0xcfb/0x15a0 [ 921.272073][T19376] do_fcntl+0xd06/0x15a0 [ 921.272093][T19376] ? __pfx_do_fcntl+0x10/0x10 [ 921.272116][T19376] ? tomoyo_file_fcntl+0x6c/0xc0 [ 921.272133][T19376] __x64_sys_fcntl+0x163/0x200 [ 921.272155][T19376] do_syscall_64+0xcd/0x4c0 [ 921.272176][T19376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.272190][T19376] RIP: 0033:0x7fe38d38eba9 [ 921.272202][T19376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.272214][T19376] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 921.272227][T19376] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 921.272236][T19376] RDX: 0000000000004de7 RSI: 0000000000000011 RDI: 0000000000000000 [ 921.272245][T19376] RBP: 00007fe38e2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 921.272253][T19376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.272261][T19376] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 921.272279][T19376] [ 923.419235][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2887'. [ 924.043968][T19414] FAULT_INJECTION: forcing a failure. [ 924.043968][T19414] name failslab, interval 1, probability 0, space 0, times 0 [ 924.056608][T19414] CPU: 0 UID: 0 PID: 19414 Comm: syz.1.2891 Tainted: G U syzkaller #0 PREEMPT(full) [ 924.056632][T19414] Tainted: [U]=USER [ 924.056638][T19414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.056647][T19414] Call Trace: [ 924.056653][T19414] [ 924.056659][T19414] dump_stack_lvl+0x116/0x1f0 [ 924.056685][T19414] should_fail_ex+0x512/0x640 [ 924.056710][T19414] should_failslab+0xc2/0x120 [ 924.056730][T19414] __kmalloc_cache_noprof+0x6a/0x3e0 [ 924.056747][T19414] ? snd_ctl_notify+0x3ab/0x710 [ 924.056770][T19414] snd_ctl_notify+0x3ab/0x710 [ 924.056795][T19414] snd_ctl_notify_one+0x122/0x240 [ 924.056815][T19414] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 924.056840][T19414] ? mark_held_locks+0x49/0x80 [ 924.056862][T19414] __snd_ctl_add_replace+0x63e/0x930 [ 924.056887][T19414] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 924.056911][T19414] ? trace_kmalloc+0x2b/0xd0 [ 924.056929][T19414] ? __kmalloc_noprof+0x242/0x510 [ 924.056945][T19414] ? snd_ctl_new+0x101/0x1a0 [ 924.056967][T19414] snd_ctl_elem_add+0x92c/0x14e0 [ 924.056991][T19414] ? find_held_lock+0x2b/0x80 [ 924.057004][T19414] ? __might_fault+0xe3/0x190 [ 924.057020][T19414] ? __might_fault+0xe3/0x190 [ 924.057034][T19414] ? __might_fault+0x13b/0x190 [ 924.057050][T19414] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 924.057076][T19414] snd_ctl_elem_add_user+0xc3/0x170 [ 924.057097][T19414] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 924.057142][T19414] snd_ctl_ioctl+0x799/0xf80 [ 924.057163][T19414] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 924.057186][T19414] ? __fget_files+0x20e/0x3c0 [ 924.057204][T19414] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 924.057226][T19414] __x64_sys_ioctl+0x18e/0x210 [ 924.057249][T19414] do_syscall_64+0xcd/0x4c0 [ 924.057272][T19414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.057286][T19414] RIP: 0033:0x7fe38d38eba9 [ 924.057299][T19414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.057313][T19414] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.057327][T19414] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 924.057337][T19414] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 924.057346][T19414] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 924.057355][T19414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.057364][T19414] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 924.057384][T19414] [ 924.057394][T19414] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 924.758624][T19424] binder: 19423:19424 unknown command 4294967282 [ 924.786974][T19424] binder: 19423:19424 ioctl c0306201 2000000000c0 returned -22 [ 926.773218][T19459] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 928.541829][T19489] binder: 19488:19489 unknown command 4294967282 [ 928.585809][T19489] binder: 19488:19489 ioctl c0306201 2000000000c0 returned -22 [ 928.594712][T19494] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 929.610232][T19515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 930.723523][T19526] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 930.723523][T19526] M' is too long [ 930.769587][T19531] random: crng reseeded on system resumption [ 930.789075][T19526] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 930.789075][T19526] W ' is too long [ 930.819303][T19532] FAULT_INJECTION: forcing a failure. [ 930.819303][T19532] name failslab, interval 1, probability 0, space 0, times 0 [ 930.884280][T19532] CPU: 0 UID: 0 PID: 19532 Comm: syz.3.2920 Tainted: G U syzkaller #0 PREEMPT(full) [ 930.884305][T19532] Tainted: [U]=USER [ 930.884311][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 930.884320][T19532] Call Trace: [ 930.884326][T19532] [ 930.884332][T19532] dump_stack_lvl+0x16c/0x1f0 [ 930.884359][T19532] should_fail_ex+0x512/0x640 [ 930.884381][T19532] ? fs_reclaim_acquire+0xae/0x150 [ 930.884404][T19532] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 930.884424][T19532] should_failslab+0xc2/0x120 [ 930.884443][T19532] __kmalloc_noprof+0xd2/0x510 [ 930.884464][T19532] tomoyo_realpath_from_path+0xc2/0x6e0 [ 930.884486][T19532] ? tomoyo_profile+0x47/0x60 [ 930.884501][T19532] tomoyo_path_number_perm+0x245/0x580 [ 930.884517][T19532] ? tomoyo_path_number_perm+0x237/0x580 [ 930.884536][T19532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 930.884561][T19532] ? __lock_acquire+0xb97/0x1ce0 [ 930.884590][T19532] ? do_raw_spin_unlock+0x172/0x230 [ 930.884612][T19532] ? _raw_spin_unlock+0x28/0x50 [ 930.884629][T19532] ? current_check_access_path+0x33c/0x460 [ 930.884651][T19532] ? __pfx_current_check_access_path+0x10/0x10 [ 930.884674][T19532] ? simple_lookup+0x105/0x1d0 [ 930.884693][T19532] tomoyo_path_mknod+0x10c/0x190 [ 930.884707][T19532] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 930.884722][T19532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 930.884747][T19532] security_path_mknod+0x161/0x310 [ 930.884766][T19532] do_mknodat+0x239/0x5d0 [ 930.884785][T19532] ? __pfx_do_mknodat+0x10/0x10 [ 930.884801][T19532] ? getname_flags.part.0+0x1c5/0x550 [ 930.884827][T19532] __x64_sys_mknod+0x87/0xb0 [ 930.884844][T19532] do_syscall_64+0xcd/0x4c0 [ 930.884867][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.884882][T19532] RIP: 0033:0x7f4b81d8eba9 [ 930.884895][T19532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.884909][T19532] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 930.884924][T19532] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 930.884934][T19532] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000200000000040 [ 930.884944][T19532] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 930.884953][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.884961][T19532] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 930.884981][T19532] [ 930.884988][T19532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.146395][T19538] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.271103][T19542] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.323395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.331944][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.840196][T19548] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2923'. [ 931.888933][T19548] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.914286][T19550] FAULT_INJECTION: forcing a failure. [ 931.914286][T19550] name failslab, interval 1, probability 0, space 0, times 0 [ 931.952727][T19548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 931.960037][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 931.967294][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 932.003574][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.3.2924 Tainted: G U syzkaller #0 PREEMPT(full) [ 932.003598][T19550] Tainted: [U]=USER [ 932.003603][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 932.003612][T19550] Call Trace: [ 932.003618][T19550] [ 932.003623][T19550] dump_stack_lvl+0x16c/0x1f0 [ 932.003649][T19550] should_fail_ex+0x512/0x640 [ 932.003670][T19550] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 932.003690][T19550] should_failslab+0xc2/0x120 [ 932.003709][T19550] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 932.003726][T19550] ? __kernfs_new_node+0xd2/0x8e0 [ 932.003747][T19550] __kernfs_new_node+0xd2/0x8e0 [ 932.003766][T19550] ? __pfx___kernfs_new_node+0x10/0x10 [ 932.003788][T19550] ? find_held_lock+0x2b/0x80 [ 932.003804][T19550] ? kernfs_root+0xee/0x2a0 [ 932.003825][T19550] kernfs_new_node+0x13c/0x1e0 [ 932.003848][T19550] __kernfs_create_file+0x53/0x350 [ 932.003864][T19550] sysfs_add_file_mode_ns+0x207/0x3c0 [ 932.003886][T19550] internal_create_group+0x578/0xf30 [ 932.003908][T19550] ? __pfx_internal_create_group+0x10/0x10 [ 932.003936][T19550] ? kernfs_create_link+0x1bd/0x240 [ 932.003953][T19550] internal_create_groups+0x9d/0x150 [ 932.003973][T19550] device_add+0xf30/0x1aa0 [ 932.003990][T19550] ? __pfx_device_add+0x10/0x10 [ 932.004005][T19550] ? lockdep_init_map_type+0x5c/0x280 [ 932.004024][T19550] ? __init_waitqueue_head+0xca/0x150 [ 932.004050][T19550] wakeup_source_device_create+0x214/0x2a0 [ 932.004067][T19550] wakeup_source_sysfs_add+0x1c/0x90 [ 932.004082][T19550] wakeup_source_register+0x154/0x3e0 [ 932.004105][T19550] ep_create_wakeup_source+0x1dd/0x2e0 [ 932.004120][T19550] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 932.004139][T19550] ? do_epoll_ctl+0x1565/0x3790 [ 932.004158][T19550] do_epoll_ctl+0x1f60/0x3790 [ 932.004182][T19550] ? __pfx_do_epoll_ctl+0x10/0x10 [ 932.004196][T19550] ? find_held_lock+0x2b/0x80 [ 932.004208][T19550] ? __might_fault+0xe3/0x190 [ 932.004224][T19550] ? __might_fault+0xe3/0x190 [ 932.004247][T19550] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 932.004261][T19550] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 932.004277][T19550] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 932.004299][T19550] do_syscall_64+0xcd/0x4c0 [ 932.004321][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.004339][T19550] RIP: 0033:0x7f4b81d8eba9 [ 932.004351][T19550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.004365][T19550] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 932.004379][T19550] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 932.004388][T19550] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 932.004397][T19550] RBP: 00007f4b82c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 932.004405][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.004413][T19550] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 932.004432][T19550] [ 932.395626][T19552] bond0: option all_slaves_active: invalid value () [ 932.619943][T19556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 933.604206][T19574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 934.157179][T19585] random: crng reseeded on system resumption [ 934.165621][T19586] FAULT_INJECTION: forcing a failure. [ 934.165621][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 934.210784][T19586] CPU: 0 UID: 0 PID: 19586 Comm: syz.2.2931 Tainted: G U syzkaller #0 PREEMPT(full) [ 934.210807][T19586] Tainted: [U]=USER [ 934.210812][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 934.210820][T19586] Call Trace: [ 934.210826][T19586] [ 934.210834][T19586] dump_stack_lvl+0x16c/0x1f0 [ 934.210860][T19586] should_fail_ex+0x512/0x640 [ 934.210881][T19586] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 934.210901][T19586] should_failslab+0xc2/0x120 [ 934.210919][T19586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 934.210936][T19586] ? security_file_alloc+0x34/0x2b0 [ 934.210959][T19586] security_file_alloc+0x34/0x2b0 [ 934.210978][T19586] init_file+0x93/0x4c0 [ 934.210998][T19586] alloc_empty_file+0x73/0x1e0 [ 934.211018][T19586] path_openat+0xda/0x2cb0 [ 934.211033][T19586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.211054][T19586] ? __pfx_path_openat+0x10/0x10 [ 934.211075][T19586] do_filp_open+0x20b/0x470 [ 934.211092][T19586] ? __pfx_do_filp_open+0x10/0x10 [ 934.211121][T19586] ? alloc_fd+0x471/0x7d0 [ 934.211141][T19586] do_sys_openat2+0x11b/0x1d0 [ 934.211162][T19586] ? __pfx_do_sys_openat2+0x10/0x10 [ 934.211184][T19586] ? __fget_files+0x20e/0x3c0 [ 934.211202][T19586] __x64_sys_openat+0x174/0x210 [ 934.211215][T19586] ? __pfx___x64_sys_openat+0x10/0x10 [ 934.211227][T19586] ? ksys_write+0x1ac/0x250 [ 934.211249][T19586] do_syscall_64+0xcd/0x4c0 [ 934.211271][T19586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.211285][T19586] RIP: 0033:0x7f6ee878eba9 [ 934.211297][T19586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.211311][T19586] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 934.211325][T19586] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 934.211335][T19586] RDX: 0000000000000402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 934.211343][T19586] RBP: 00007f6ee95b8090 R08: 0000000000000000 R09: 0000000000000000 [ 934.211352][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.211360][T19586] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 934.211378][T19586] [ 934.438662][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.894525][T19595] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 935.420614][T19597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2934'. [ 935.469654][T19597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.635034][T19597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.789110][T19591] kexec: Could not allocate control_code_buffer [ 935.856119][T19600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 935.862176][T19600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.917044][T19600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.941032][T19600] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 936.130830][T19608] FAULT_INJECTION: forcing a failure. [ 936.130830][T19608] name failslab, interval 1, probability 0, space 0, times 0 [ 936.213278][T19608] CPU: 0 UID: 0 PID: 19608 Comm: syz.2.2938 Tainted: G U syzkaller #0 PREEMPT(full) [ 936.213304][T19608] Tainted: [U]=USER [ 936.213310][T19608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 936.213319][T19608] Call Trace: [ 936.213325][T19608] [ 936.213331][T19608] dump_stack_lvl+0x16c/0x1f0 [ 936.213358][T19608] should_fail_ex+0x512/0x640 [ 936.213379][T19608] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 936.213397][T19608] should_failslab+0xc2/0x120 [ 936.213416][T19608] __kmalloc_cache_noprof+0x6a/0x3e0 [ 936.213431][T19608] ? kobject_uevent_env+0x265/0x1870 [ 936.213450][T19608] kobject_uevent_env+0x265/0x1870 [ 936.213464][T19608] ? __pfx_dev_uevent_name+0x10/0x10 [ 936.213484][T19608] ? __pfx_dev_add_physical_location+0x10/0x10 [ 936.213500][T19608] ? bus_to_subsys+0x131/0x160 [ 936.213517][T19608] ? bus_to_subsys+0x131/0x160 [ 936.213536][T19608] device_add+0x10dd/0x1aa0 [ 936.213553][T19608] ? __pfx_device_add+0x10/0x10 [ 936.213569][T19608] ? lockdep_init_map_type+0x5c/0x280 [ 936.213590][T19608] ? __init_waitqueue_head+0xca/0x150 [ 936.213624][T19608] wakeup_source_device_create+0x214/0x2a0 [ 936.213643][T19608] wakeup_source_sysfs_add+0x1c/0x90 [ 936.213659][T19608] wakeup_source_register+0x154/0x3e0 [ 936.213683][T19608] ep_create_wakeup_source+0x1dd/0x2e0 [ 936.213700][T19608] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 936.213719][T19608] ? do_epoll_ctl+0x1565/0x3790 [ 936.213738][T19608] do_epoll_ctl+0x1f60/0x3790 [ 936.213761][T19608] ? __pfx_do_epoll_ctl+0x10/0x10 [ 936.213776][T19608] ? find_held_lock+0x2b/0x80 [ 936.213789][T19608] ? __might_fault+0xe3/0x190 [ 936.213805][T19608] ? __might_fault+0xe3/0x190 [ 936.213828][T19608] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 936.213843][T19608] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 936.213859][T19608] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 936.213881][T19608] do_syscall_64+0xcd/0x4c0 [ 936.213904][T19608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.213919][T19608] RIP: 0033:0x7f6ee878eba9 [ 936.213932][T19608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.213946][T19608] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 936.213960][T19608] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 936.213970][T19608] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 936.213979][T19608] RBP: 00007f6ee8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 936.213988][T19608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.213997][T19608] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 936.214016][T19608] [ 936.485114][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.522921][T19613] FAULT_INJECTION: forcing a failure. [ 936.522921][T19613] name failslab, interval 1, probability 0, space 0, times 0 [ 936.535645][T19613] CPU: 0 UID: 0 PID: 19613 Comm: syz.3.2939 Tainted: G U syzkaller #0 PREEMPT(full) [ 936.535671][T19613] Tainted: [U]=USER [ 936.535677][T19613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 936.535686][T19613] Call Trace: [ 936.535693][T19613] [ 936.535701][T19613] dump_stack_lvl+0x16c/0x1f0 [ 936.535728][T19613] should_fail_ex+0x512/0x640 [ 936.535751][T19613] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 936.535771][T19613] should_failslab+0xc2/0x120 [ 936.535790][T19613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 936.535807][T19613] ? security_file_alloc+0x34/0x2b0 [ 936.535830][T19613] security_file_alloc+0x34/0x2b0 [ 936.535849][T19613] init_file+0x93/0x4c0 [ 936.535870][T19613] alloc_empty_file+0x73/0x1e0 [ 936.535891][T19613] alloc_file_pseudo+0x13a/0x230 [ 936.535913][T19613] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 936.535939][T19613] ioctx_alloc+0x5ab/0x2120 [ 936.535963][T19613] ? find_held_lock+0x2b/0x80 [ 936.535977][T19613] ? __pfx_ioctx_alloc+0x10/0x10 [ 936.535992][T19613] ? __might_fault+0x13b/0x190 [ 936.536013][T19613] __x64_sys_io_setup+0xc9/0x210 [ 936.536031][T19613] do_syscall_64+0xcd/0x4c0 [ 936.536055][T19613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.536071][T19613] RIP: 0033:0x7f4b81d8eba9 [ 936.536084][T19613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.536099][T19613] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 936.536113][T19613] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 936.536124][T19613] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 936.536133][T19613] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 936.536142][T19613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.536151][T19613] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 936.536171][T19613] [ 936.733750][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.898751][T19614] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 936.998506][ T5876] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 937.006192][ T5876] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 937.895149][ T5876] Bluetooth: hci1: command 0x0c1a tx timeout [ 937.901201][T15570] Bluetooth: hci4: command 0x0c1a tx timeout [ 937.972900][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 937.979014][T15570] Bluetooth: hci2: command 0x0c1a tx timeout [ 938.764085][T19644] dyndbg: bad flag-op , at start of әa [ 938.808943][T19644] dyndbg: flags parse failed [ 939.000165][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2945'. [ 940.191663][T19678] FAULT_INJECTION: forcing a failure. [ 940.191663][T19678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 940.298090][T19678] CPU: 0 UID: 0 PID: 19678 Comm: syz.3.2953 Tainted: G U syzkaller #0 PREEMPT(full) [ 940.298117][T19678] Tainted: [U]=USER [ 940.298123][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 940.298132][T19678] Call Trace: [ 940.298138][T19678] [ 940.298144][T19678] dump_stack_lvl+0x16c/0x1f0 [ 940.298170][T19678] should_fail_ex+0x512/0x640 [ 940.298195][T19678] should_fail_alloc_page+0xe7/0x130 [ 940.298217][T19678] prepare_alloc_pages+0x3c2/0x610 [ 940.298242][T19678] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 940.298263][T19678] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 940.298283][T19678] ? stack_depot_save_flags+0x3de/0x9c0 [ 940.298317][T19678] ? kasan_save_stack+0x42/0x60 [ 940.298333][T19678] ? kasan_save_stack+0x33/0x60 [ 940.298348][T19678] ? kasan_save_track+0x14/0x30 [ 940.298365][T19678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.298382][T19678] ? walk_pgd_range+0x88b/0x1f50 [ 940.298399][T19678] ? walk_page_range_mm+0x461/0xb40 [ 940.298416][T19678] ? madvise_walk_vmas+0x31f/0x9c0 [ 940.298434][T19678] ? madvise_do_behavior+0x1e2/0x530 [ 940.298453][T19678] ? do_madvise+0x176/0x240 [ 940.298471][T19678] ? __x64_sys_madvise+0xa9/0x110 [ 940.298490][T19678] ? do_syscall_64+0xcd/0x4c0 [ 940.298511][T19678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.298534][T19678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 940.298556][T19678] ? policy_nodemask+0xea/0x4e0 [ 940.298576][T19678] alloc_pages_mpol+0x1fb/0x550 [ 940.298596][T19678] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 940.298620][T19678] alloc_pages_noprof+0x131/0x390 [ 940.298640][T19678] pte_alloc_one+0x1c/0x3a0 [ 940.298656][T19678] __pte_alloc+0x6d/0x3c0 [ 940.298675][T19678] ? __pfx___pte_alloc+0x10/0x10 [ 940.298694][T19678] ? _raw_spin_unlock+0x28/0x50 [ 940.298711][T19678] ? __pmd_alloc+0x3fb/0x930 [ 940.298733][T19678] walk_pgd_range+0xb84/0x1f50 [ 940.298753][T19678] ? __pfx_guard_install_set_pte+0x10/0x10 [ 940.298772][T19678] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 940.298792][T19678] ? __pfx_guard_install_set_pte+0x10/0x10 [ 940.298813][T19678] ? __pfx_guard_install_set_pte+0x10/0x10 [ 940.298832][T19678] ? __pfx_guard_install_set_pte+0x10/0x10 [ 940.298851][T19678] ? __pfx_walk_pgd_range+0x10/0x10 [ 940.298873][T19678] __walk_page_range+0x163/0x820 [ 940.298892][T19678] ? find_vma+0xbf/0x140 [ 940.298910][T19678] ? __pfx_find_vma+0x10/0x10 [ 940.298930][T19678] ? walk_page_test+0x9b/0x180 [ 940.298948][T19678] walk_page_range_mm+0x461/0xb40 [ 940.298968][T19678] ? __pfx_walk_page_range_mm+0x10/0x10 [ 940.298991][T19678] ? __anon_vma_prepare+0x2e2/0x5e0 [ 940.299008][T19678] madvise_vma_behavior+0xa62/0x2d60 [ 940.299031][T19678] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 940.299052][T19678] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 940.299074][T19678] ? __pfx_mas_prev+0x10/0x10 [ 940.299099][T19678] ? find_vma_prev+0xda/0x160 [ 940.299117][T19678] ? find_held_lock+0x2b/0x80 [ 940.299139][T19678] ? __pfx_find_vma_prev+0x10/0x10 [ 940.299159][T19678] ? futex_unqueue+0x133/0x2c0 [ 940.299182][T19678] ? __futex_wait+0x24c/0x2f0 [ 940.299207][T19678] madvise_walk_vmas+0x31f/0x9c0 [ 940.299231][T19678] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 940.299256][T19678] madvise_do_behavior+0x1e2/0x530 [ 940.299276][T19678] ? futex_private_hash_put+0x18a/0x300 [ 940.299299][T19678] ? __pfx_madvise_do_behavior+0x10/0x10 [ 940.299321][T19678] ? down_read+0x13d/0x480 [ 940.299345][T19678] do_madvise+0x176/0x240 [ 940.299365][T19678] ? __pfx_do_madvise+0x10/0x10 [ 940.299384][T19678] ? do_futex+0x122/0x350 [ 940.299414][T19678] ? xfd_validate_state+0x61/0x180 [ 940.299433][T19678] ? __pfx_ksys_write+0x10/0x10 [ 940.299453][T19678] __x64_sys_madvise+0xa9/0x110 [ 940.299473][T19678] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.299493][T19678] do_syscall_64+0xcd/0x4c0 [ 940.299515][T19678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.299529][T19678] RIP: 0033:0x7f4b81d8eba9 [ 940.299543][T19678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.299558][T19678] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 940.299573][T19678] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 940.299583][T19678] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 940.299592][T19678] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 940.299602][T19678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.299612][T19678] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 940.299631][T19678] [ 940.747555][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.968228][T19682] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 941.075211][ T30] audit: type=1800 audit(1758098337.717:29): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2953" name="features" dev="configfs" ino=86749 res=0 errno=0 [ 941.783392][T19707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 942.715637][T19689] kexec: Could not allocate control_code_buffer [ 942.936920][T19730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 943.451360][T19732] vivid-003: ================= START STATUS ================= [ 943.508759][T19732] vivid-003: Radio HW Seek Mode: Bounded [ 943.549661][T19732] vivid-003: Radio Programmable HW Seek: false [ 943.612260][T19732] vivid-003: RDS Rx I/O Mode: Block I/O [ 943.647196][T19732] vivid-003: Generate RBDS Instead of RDS: false [ 943.653561][T19732] vivid-003: RDS Reception: true [ 943.798921][T19732] vivid-003: RDS Program Type: 0 inactive [ 943.919426][T19732] vivid-003: RDS PS Name: inactive [ 943.979931][T19732] vivid-003: RDS Radio Text: inactive [ 943.999622][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 944.060222][T19732] vivid-003: RDS Traffic Announcement: false inactive [ 944.090123][T19732] vivid-003: RDS Traffic Program: false inactive [ 944.119514][T19732] vivid-003: RDS Music: false inactive [ 944.153456][T19732] vivid-003: ================== END STATUS ================== [ 944.358414][T19762] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2970'. [ 944.618750][T19765] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 945.024365][T19745] kexec: Could not allocate control_code_buffer [ 945.055164][T19777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 945.193255][T19780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 945.311384][ T30] audit: type=1326 audit(1758098341.987:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19782 comm="syz.2.2977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ee878eba9 code=0x0 [ 945.333031][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.731699][T19794] binder: 19793:19794 unknown command 4294967282 [ 945.773305][T19794] binder: 19793:19794 ioctl c0306201 2000000000c0 returned -22 [ 945.953264][T19796] hub 1-0:1.0: USB hub found [ 945.995800][T19796] hub 1-0:1.0: 1 port detected [ 946.025295][T19802] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 946.311258][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 947.161011][T19824] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 947.216959][T19810] zswap: compressor not available [ 948.308081][T19837] binder: 19836:19837 unknown command 4294967282 [ 948.336980][T19837] binder: 19836:19837 ioctl c0306201 2000000000c0 returned -22 [ 949.282724][T19860] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 949.578382][T19864] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2994'. [ 951.375293][T19893] zswap: compressor 000 not available [ 952.673471][T19918] netlink: 93 bytes leftover after parsing attributes in process `syz.2.3007'. [ 952.733194][T19920] QAT: Device 0 not found [ 953.279693][T19931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3009'. [ 953.446910][T19907] kexec: Could not allocate control_code_buffer [ 954.385539][T19949] random: crng reseeded on system resumption [ 954.768890][T19952] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 955.004295][T19955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 955.918259][T19976] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 957.698700][T19999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 957.833386][T20002] FAULT_INJECTION: forcing a failure. [ 957.833386][T20002] name failslab, interval 1, probability 0, space 0, times 0 [ 957.901169][T20002] CPU: 0 UID: 0 PID: 20002 Comm: syz.1.3028 Tainted: G U syzkaller #0 PREEMPT(full) [ 957.901194][T20002] Tainted: [U]=USER [ 957.901198][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 957.901208][T20002] Call Trace: [ 957.901214][T20002] [ 957.901220][T20002] dump_stack_lvl+0x16c/0x1f0 [ 957.901246][T20002] should_fail_ex+0x512/0x640 [ 957.901267][T20002] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 957.901287][T20002] should_failslab+0xc2/0x120 [ 957.901305][T20002] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 957.901322][T20002] ? __pmd_alloc+0xbf/0x930 [ 957.901346][T20002] __pmd_alloc+0xbf/0x930 [ 957.901367][T20002] huge_pte_alloc+0x41d/0x5b0 [ 957.901384][T20002] hugetlb_fault+0x373/0x2f40 [ 957.901402][T20002] ? __pfx_hugetlb_fault+0x10/0x10 [ 957.901427][T20002] ? find_vma+0xbf/0x140 [ 957.901444][T20002] ? __pfx_find_vma+0x10/0x10 [ 957.901464][T20002] handle_mm_fault+0xbfa/0xd10 [ 957.901480][T20002] ? trace_raw_output_exceptions+0x131/0x150 [ 957.901503][T20002] do_user_addr_fault+0x7a6/0x1370 [ 957.901526][T20002] ? rcu_is_watching+0x12/0xc0 [ 957.901547][T20002] exc_page_fault+0x5c/0xb0 [ 957.901568][T20002] asm_exc_page_fault+0x26/0x30 [ 957.901582][T20002] RIP: 0010:__get_user_4+0x14/0x20 [ 957.901599][T20002] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 50 17 04 00 90 90 90 90 90 90 90 90 90 90 [ 957.901614][T20002] RSP: 0018:ffffc9000b1c7db8 EFLAGS: 00050287 [ 957.901626][T20002] RAX: 0000000000000000 RBX: ffff888027c3c880 RCX: ffffc9000b1c7d5c [ 957.901635][T20002] RDX: 00007ffffffff000 RSI: ffffffff86ca104f RDI: ffffffff8c163700 [ 957.901645][T20002] RBP: 1ffff92001638fbf R08: 594a384e19f8fcac R09: 0000000000000001 [ 957.901654][T20002] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040047438 [ 957.901662][T20002] R13: 0000000040047438 R14: 0000000000000000 R15: ffff888031cc1180 [ 957.901677][T20002] ? ppp_ioctl+0x15bf/0x2670 [ 957.901702][T20002] ppp_ioctl+0x15c7/0x2670 [ 957.901725][T20002] ? find_held_lock+0x2b/0x80 [ 957.901739][T20002] ? __pfx_ppp_ioctl+0x10/0x10 [ 957.901763][T20002] ? __fget_files+0x20e/0x3c0 [ 957.901782][T20002] ? __pfx_ppp_ioctl+0x10/0x10 [ 957.901803][T20002] __x64_sys_ioctl+0x18e/0x210 [ 957.901826][T20002] do_syscall_64+0xcd/0x4c0 [ 957.901848][T20002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.901861][T20002] RIP: 0033:0x7fe38d38eba9 [ 957.901872][T20002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.901885][T20002] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.901898][T20002] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 957.901907][T20002] RDX: 0000000000000000 RSI: 0000000040047438 RDI: 0000000000000003 [ 957.901915][T20002] RBP: 00007fe38e2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 957.901924][T20002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.901932][T20002] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 957.901951][T20002] [ 958.214826][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.057377][T20007] FAULT_INJECTION: forcing a failure. [ 959.057377][T20007] name failslab, interval 1, probability 0, space 0, times 0 [ 959.143355][T20007] CPU: 0 UID: 0 PID: 20007 Comm: syz.2.3029 Tainted: G U syzkaller #0 PREEMPT(full) [ 959.143380][T20007] Tainted: [U]=USER [ 959.143385][T20007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.143393][T20007] Call Trace: [ 959.143399][T20007] [ 959.143405][T20007] dump_stack_lvl+0x16c/0x1f0 [ 959.143430][T20007] should_fail_ex+0x512/0x640 [ 959.143452][T20007] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 959.143469][T20007] should_failslab+0xc2/0x120 [ 959.143488][T20007] __kmalloc_cache_noprof+0x6a/0x3e0 [ 959.143503][T20007] ? snd_seq_port_connect+0x61/0x580 [ 959.143520][T20007] snd_seq_port_connect+0x61/0x580 [ 959.143534][T20007] ? _raw_read_unlock+0x28/0x50 [ 959.143553][T20007] ? check_subscription_permission.isra.0+0xf5/0x240 [ 959.143571][T20007] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 959.143589][T20007] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 959.143612][T20007] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 959.143629][T20007] snd_seq_oss_midi_open+0x442/0x660 [ 959.143649][T20007] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 959.143679][T20007] snd_seq_oss_synth_setup_midi+0x131/0x580 [ 959.143701][T20007] snd_seq_oss_open+0x893/0xa20 [ 959.143720][T20007] odev_open+0x6f/0x90 [ 959.143732][T20007] ? __pfx_odev_open+0x10/0x10 [ 959.143745][T20007] soundcore_open+0x40c/0x580 [ 959.143760][T20007] ? __pfx_soundcore_open+0x10/0x10 [ 959.143772][T20007] chrdev_open+0x234/0x6a0 [ 959.143790][T20007] ? __pfx_apparmor_file_open+0x10/0x10 [ 959.143807][T20007] ? __pfx_chrdev_open+0x10/0x10 [ 959.143825][T20007] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 959.143845][T20007] do_dentry_open+0x982/0x1530 [ 959.143863][T20007] ? __pfx_chrdev_open+0x10/0x10 [ 959.143885][T20007] vfs_open+0x82/0x3f0 [ 959.143907][T20007] path_openat+0x1de4/0x2cb0 [ 959.143938][T20007] ? __pfx_path_openat+0x10/0x10 [ 959.143959][T20007] do_filp_open+0x20b/0x470 [ 959.143976][T20007] ? __pfx_do_filp_open+0x10/0x10 [ 959.144007][T20007] ? alloc_fd+0x471/0x7d0 [ 959.144027][T20007] do_sys_openat2+0x11b/0x1d0 [ 959.144047][T20007] ? __pfx_do_sys_openat2+0x10/0x10 [ 959.144070][T20007] ? __fget_files+0x20e/0x3c0 [ 959.144088][T20007] __x64_sys_openat+0x174/0x210 [ 959.144101][T20007] ? __pfx___x64_sys_openat+0x10/0x10 [ 959.144113][T20007] ? ksys_write+0x1ac/0x250 [ 959.144135][T20007] do_syscall_64+0xcd/0x4c0 [ 959.144157][T20007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.144172][T20007] RIP: 0033:0x7f6ee878eba9 [ 959.144184][T20007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.144197][T20007] RSP: 002b:00007f6ee9597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 959.144212][T20007] RAX: ffffffffffffffda RBX: 00007f6ee89d6090 RCX: 00007f6ee878eba9 [ 959.144222][T20007] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 959.144230][T20007] RBP: 00007f6ee9597090 R08: 0000000000000000 R09: 0000000000000000 [ 959.144238][T20007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.144246][T20007] R13: 00007f6ee89d6128 R14: 00007f6ee89d6090 R15: 00007fff0e3fd908 [ 959.144265][T20007] [ 959.461099][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.560926][T20008] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3030'. [ 960.006576][T20016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 960.499989][T20031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 960.530891][T20026] FAULT_INJECTION: forcing a failure. [ 960.530891][T20026] name fail_futex, interval 1, probability 0, space 0, times 0 [ 960.640252][T20026] CPU: 0 UID: 0 PID: 20026 Comm: syz.3.3036 Tainted: G U syzkaller #0 PREEMPT(full) [ 960.640279][T20026] Tainted: [U]=USER [ 960.640285][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 960.640294][T20026] Call Trace: [ 960.640300][T20026] [ 960.640306][T20026] dump_stack_lvl+0x16c/0x1f0 [ 960.640334][T20026] should_fail_ex+0x512/0x640 [ 960.640358][T20026] get_futex_key+0x1d0/0x1560 [ 960.640379][T20026] ? __pfx_get_futex_key+0x10/0x10 [ 960.640402][T20026] futex_wake+0xea/0x530 [ 960.640423][T20026] ? rcu_is_watching+0x12/0xc0 [ 960.640439][T20026] ? __pfx_futex_wake+0x10/0x10 [ 960.640461][T20026] ? kmem_cache_free+0x2d1/0x4d0 [ 960.640477][T20026] ? fd_install+0x225/0x750 [ 960.640491][T20026] ? putname+0x154/0x1a0 [ 960.640513][T20026] do_futex+0x1e3/0x350 [ 960.640531][T20026] ? __pfx_do_futex+0x10/0x10 [ 960.640550][T20026] ? find_held_lock+0x2b/0x80 [ 960.640566][T20026] __x64_sys_futex+0x1e0/0x4c0 [ 960.640585][T20026] ? __x64_sys_openat+0x174/0x210 [ 960.640598][T20026] ? __pfx___x64_sys_futex+0x10/0x10 [ 960.640623][T20026] do_syscall_64+0xcd/0x4c0 [ 960.640646][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.640660][T20026] RIP: 0033:0x7f4b81d8eba9 [ 960.640673][T20026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.640687][T20026] RSP: 002b:00007f4b82c0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 960.640701][T20026] RAX: ffffffffffffffda RBX: 00007f4b81fd6098 RCX: 00007f4b81d8eba9 [ 960.640710][T20026] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b81fd609c [ 960.640719][T20026] RBP: 00007f4b81fd6090 R08: 00007f4b82c30000 R09: 0000000000000000 [ 960.640728][T20026] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 960.640737][T20026] R13: 00007f4b81fd6128 R14: 00007ffdaab6bcc0 R15: 00007ffdaab6bda8 [ 960.640755][T20026] [ 962.203410][T20052] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3042'. [ 962.792919][T20063] FAULT_INJECTION: forcing a failure. [ 962.792919][T20063] name failslab, interval 1, probability 0, space 0, times 0 [ 962.805523][T20063] CPU: 0 UID: 0 PID: 20063 Comm: syz.1.3045 Tainted: G U syzkaller #0 PREEMPT(full) [ 962.805546][T20063] Tainted: [U]=USER [ 962.805551][T20063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 962.805560][T20063] Call Trace: [ 962.805566][T20063] [ 962.805572][T20063] dump_stack_lvl+0x116/0x1f0 [ 962.805598][T20063] should_fail_ex+0x512/0x640 [ 962.805624][T20063] should_failslab+0xc2/0x120 [ 962.805643][T20063] __kmalloc_cache_noprof+0x6a/0x3e0 [ 962.805660][T20063] ? snd_ctl_notify+0x3ab/0x710 [ 962.805687][T20063] snd_ctl_notify+0x3ab/0x710 [ 962.805712][T20063] snd_ctl_notify_one+0x122/0x240 [ 962.805732][T20063] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 962.805757][T20063] ? mark_held_locks+0x49/0x80 [ 962.805779][T20063] __snd_ctl_add_replace+0x63e/0x930 [ 962.805804][T20063] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 962.805829][T20063] ? trace_kmalloc+0x2b/0xd0 [ 962.805847][T20063] ? __kmalloc_noprof+0x242/0x510 [ 962.805863][T20063] ? snd_ctl_new+0x101/0x1a0 [ 962.805884][T20063] snd_ctl_elem_add+0x92c/0x14e0 [ 962.805908][T20063] ? find_held_lock+0x2b/0x80 [ 962.805922][T20063] ? __might_fault+0xe3/0x190 [ 962.805937][T20063] ? __might_fault+0xe3/0x190 [ 962.805952][T20063] ? __might_fault+0x13b/0x190 [ 962.805968][T20063] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 962.805994][T20063] snd_ctl_elem_add_user+0xc3/0x170 [ 962.806016][T20063] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 962.806060][T20063] snd_ctl_ioctl+0x799/0xf80 [ 962.806082][T20063] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 962.806104][T20063] ? __fget_files+0x20e/0x3c0 [ 962.806123][T20063] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 962.806145][T20063] __x64_sys_ioctl+0x18e/0x210 [ 962.806168][T20063] do_syscall_64+0xcd/0x4c0 [ 962.806191][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.806206][T20063] RIP: 0033:0x7fe38d38eba9 [ 962.806219][T20063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.806233][T20063] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.806248][T20063] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 962.806258][T20063] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 962.806267][T20063] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 962.806276][T20063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.806285][T20063] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 962.806304][T20063] [ 962.806313][T20063] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 963.135992][T20074] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3048'. [ 963.480859][T20088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 963.590056][T20089] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 964.924803][T20113] block2mtd: parameter too long [ 965.506236][T20116] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 968.816839][T20155] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 969.308834][T20161] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3066'. [ 969.341501][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3066'. [ 969.857271][T20171] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3068'. [ 969.997604][T20171] IPv6: NLM_F_CREATE should be specified when creating new route [ 969.997667][T20171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 969.997725][T20171] IPv6: NLM_F_CREATE should be set when creating new route [ 969.997741][T20171] IPv6: NLM_F_CREATE should be set when creating new route [ 970.483989][T20150] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.3063'. [ 970.959425][T20181] FAULT_INJECTION: forcing a failure. [ 970.959425][T20181] name failslab, interval 1, probability 0, space 0, times 0 [ 971.030986][T20181] CPU: 0 UID: 0 PID: 20181 Comm: syz.1.3071 Tainted: G U syzkaller #0 PREEMPT(full) [ 971.031012][T20181] Tainted: [U]=USER [ 971.031017][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.031032][T20181] Call Trace: [ 971.031038][T20181] [ 971.031043][T20181] dump_stack_lvl+0x16c/0x1f0 [ 971.031070][T20181] should_fail_ex+0x512/0x640 [ 971.031091][T20181] ? fs_reclaim_acquire+0xae/0x150 [ 971.031113][T20181] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 971.031134][T20181] should_failslab+0xc2/0x120 [ 971.031153][T20181] __kmalloc_noprof+0xd2/0x510 [ 971.031174][T20181] tomoyo_realpath_from_path+0xc2/0x6e0 [ 971.031199][T20181] tomoyo_check_open_permission+0x2ab/0x3c0 [ 971.031218][T20181] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 971.031254][T20181] ? do_raw_spin_lock+0x12c/0x2b0 [ 971.031280][T20181] tomoyo_file_open+0x6b/0x90 [ 971.031294][T20181] security_file_open+0x84/0x1e0 [ 971.031314][T20181] do_dentry_open+0x596/0x1530 [ 971.031338][T20181] vfs_open+0x82/0x3f0 [ 971.031360][T20181] path_openat+0x1de4/0x2cb0 [ 971.031383][T20181] ? __pfx_path_openat+0x10/0x10 [ 971.031404][T20181] do_filp_open+0x20b/0x470 [ 971.031421][T20181] ? __pfx_do_filp_open+0x10/0x10 [ 971.031454][T20181] ? alloc_fd+0x471/0x7d0 [ 971.031475][T20181] do_sys_openat2+0x11b/0x1d0 [ 971.031495][T20181] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.031518][T20181] ? __fget_files+0x20e/0x3c0 [ 971.031536][T20181] __x64_sys_openat+0x174/0x210 [ 971.031553][T20181] ? __pfx___x64_sys_openat+0x10/0x10 [ 971.031565][T20181] ? ksys_write+0x1ac/0x250 [ 971.031587][T20181] do_syscall_64+0xcd/0x4c0 [ 971.031610][T20181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.031625][T20181] RIP: 0033:0x7fe38d38eba9 [ 971.031636][T20181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.031650][T20181] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.031664][T20181] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 971.031674][T20181] RDX: 0000000000000402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 971.031683][T20181] RBP: 00007fe38e2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 971.031692][T20181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.031700][T20181] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 971.031719][T20181] [ 971.031743][T20181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 972.481826][T20197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 972.544903][T20190] FAULT_INJECTION: forcing a failure. [ 972.544903][T20190] name failslab, interval 1, probability 0, space 0, times 0 [ 972.557505][T20190] CPU: 0 UID: 0 PID: 20190 Comm: syz.1.3073 Tainted: G U syzkaller #0 PREEMPT(full) [ 972.557529][T20190] Tainted: [U]=USER [ 972.557535][T20190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 972.557544][T20190] Call Trace: [ 972.557550][T20190] [ 972.557556][T20190] dump_stack_lvl+0x116/0x1f0 [ 972.557582][T20190] should_fail_ex+0x512/0x640 [ 972.557607][T20190] should_failslab+0xc2/0x120 [ 972.557627][T20190] __kmalloc_cache_noprof+0x6a/0x3e0 [ 972.557643][T20190] ? snd_ctl_notify+0x3ab/0x710 [ 972.557666][T20190] snd_ctl_notify+0x3ab/0x710 [ 972.557691][T20190] snd_ctl_notify_one+0x122/0x240 [ 972.557710][T20190] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 972.557734][T20190] ? mark_held_locks+0x49/0x80 [ 972.557756][T20190] __snd_ctl_add_replace+0x63e/0x930 [ 972.557780][T20190] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 972.557804][T20190] ? trace_kmalloc+0x2b/0xd0 [ 972.557822][T20190] ? __kmalloc_noprof+0x242/0x510 [ 972.557838][T20190] ? snd_ctl_new+0x101/0x1a0 [ 972.557859][T20190] snd_ctl_elem_add+0x92c/0x14e0 [ 972.557889][T20190] ? find_held_lock+0x2b/0x80 [ 972.557902][T20190] ? __might_fault+0xe3/0x190 [ 972.557919][T20190] ? __might_fault+0xe3/0x190 [ 972.557933][T20190] ? __might_fault+0x13b/0x190 [ 972.557950][T20190] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 972.557978][T20190] snd_ctl_elem_add_user+0xc3/0x170 [ 972.558000][T20190] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 972.558046][T20190] snd_ctl_ioctl+0x799/0xf80 [ 972.558067][T20190] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 972.558090][T20190] ? __fget_files+0x20e/0x3c0 [ 972.558108][T20190] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 972.558130][T20190] __x64_sys_ioctl+0x18e/0x210 [ 972.558154][T20190] do_syscall_64+0xcd/0x4c0 [ 972.558177][T20190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.558191][T20190] RIP: 0033:0x7fe38d38eba9 [ 972.558204][T20190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.558218][T20190] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.558234][T20190] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 972.558244][T20190] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 972.558254][T20190] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 972.558263][T20190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.558272][T20190] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 972.558291][T20190] [ 972.558302][T20190] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 972.815269][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.896194][T20231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.020162][T20234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 975.394225][T20242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.405480][T20245] FAULT_INJECTION: forcing a failure. [ 975.405480][T20245] name failslab, interval 1, probability 0, space 0, times 0 [ 975.477530][T20245] CPU: 0 UID: 0 PID: 20245 Comm: syz.3.3087 Tainted: G U syzkaller #0 PREEMPT(full) [ 975.477557][T20245] Tainted: [U]=USER [ 975.477562][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 975.477572][T20245] Call Trace: [ 975.477578][T20245] [ 975.477584][T20245] dump_stack_lvl+0x16c/0x1f0 [ 975.477611][T20245] should_fail_ex+0x512/0x640 [ 975.477633][T20245] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 975.477653][T20245] should_failslab+0xc2/0x120 [ 975.477674][T20245] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 975.477696][T20245] ? __proc_create+0xc3/0x8e0 [ 975.477717][T20245] ? __proc_create+0x2ce/0x8e0 [ 975.477740][T20245] __proc_create+0x2ce/0x8e0 [ 975.477762][T20245] ? __pfx___proc_create+0x10/0x10 [ 975.477783][T20245] ? _raw_write_unlock+0x28/0x50 [ 975.477809][T20245] proc_create_reg+0x7d/0x180 [ 975.477832][T20245] proc_create_net_data+0x8e/0x1c0 [ 975.477853][T20245] ? __pfx_proc_create_net_data+0x10/0x10 [ 975.477874][T20245] ? __pfx_uevent_net_rcv+0x10/0x10 [ 975.477894][T20245] ? __pfx_dev_mc_net_init+0x10/0x10 [ 975.477913][T20245] dev_mc_net_init+0x50/0x70 [ 975.477931][T20245] ops_init+0x1e2/0x5f0 [ 975.477946][T20245] setup_net+0x10f/0x380 [ 975.477959][T20245] ? lockdep_init_map_type+0x5c/0x280 [ 975.477979][T20245] ? __pfx_setup_net+0x10/0x10 [ 975.477994][T20245] ? debug_mutex_init+0x37/0x70 [ 975.478011][T20245] copy_net_ns+0x2a6/0x5f0 [ 975.478028][T20245] create_new_namespaces+0x3ea/0xa90 [ 975.478050][T20245] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 975.478068][T20245] ksys_unshare+0x45b/0xa40 [ 975.478088][T20245] ? __pfx_ksys_unshare+0x10/0x10 [ 975.478107][T20245] ? xfd_validate_state+0x61/0x180 [ 975.478133][T20245] __x64_sys_unshare+0x31/0x40 [ 975.478152][T20245] do_syscall_64+0xcd/0x4c0 [ 975.478175][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.478189][T20245] RIP: 0033:0x7f4b81d8eba9 [ 975.478202][T20245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.478216][T20245] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 975.478231][T20245] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 975.478241][T20245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 975.478250][T20245] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 975.478259][T20245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.478268][T20245] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 975.478287][T20245] [ 975.739455][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.401687][T20276] dyndbg: bad flag-op , at start of әa [ 978.435116][T20276] dyndbg: flags parse failed [ 978.680562][T20283] FAULT_INJECTION: forcing a failure. [ 978.680562][T20283] name failslab, interval 1, probability 0, space 0, times 0 [ 978.739939][T20283] CPU: 0 UID: 0 PID: 20283 Comm: syz.0.3096 Tainted: G U syzkaller #0 PREEMPT(full) [ 978.739965][T20283] Tainted: [U]=USER [ 978.739970][T20283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 978.739980][T20283] Call Trace: [ 978.739985][T20283] [ 978.739991][T20283] dump_stack_lvl+0x16c/0x1f0 [ 978.740029][T20283] should_fail_ex+0x512/0x640 [ 978.740056][T20283] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 978.740076][T20283] should_failslab+0xc2/0x120 [ 978.740095][T20283] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 978.740113][T20283] ? security_file_alloc+0x34/0x2b0 [ 978.740136][T20283] security_file_alloc+0x34/0x2b0 [ 978.740155][T20283] init_file+0x93/0x4c0 [ 978.740174][T20283] alloc_empty_file+0x73/0x1e0 [ 978.740195][T20283] alloc_file_pseudo+0x13a/0x230 [ 978.740217][T20283] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 978.740243][T20283] ioctx_alloc+0x5ab/0x2120 [ 978.740266][T20283] ? find_held_lock+0x2b/0x80 [ 978.740281][T20283] ? __pfx_ioctx_alloc+0x10/0x10 [ 978.740295][T20283] ? __might_fault+0x13b/0x190 [ 978.740317][T20283] __x64_sys_io_setup+0xc9/0x210 [ 978.740334][T20283] do_syscall_64+0xcd/0x4c0 [ 978.740357][T20283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.740372][T20283] RIP: 0033:0x7f9249d8eba9 [ 978.740384][T20283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.740398][T20283] RSP: 002b:00007f924ac43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 978.740412][T20283] RAX: ffffffffffffffda RBX: 00007f9249fd5fa0 RCX: 00007f9249d8eba9 [ 978.740422][T20283] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 978.740431][T20283] RBP: 00007f9249e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 978.740447][T20283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.740456][T20283] R13: 00007f9249fd6038 R14: 00007f9249fd5fa0 R15: 00007ffd1ddca2b8 [ 978.740475][T20283] [ 978.942776][T20280] netlink: 93 bytes leftover after parsing attributes in process `syz.3.3094'. [ 979.326685][T20292] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 980.430739][T20304] FAULT_INJECTION: forcing a failure. [ 980.430739][T20304] name failslab, interval 1, probability 0, space 0, times 0 [ 980.443359][T20304] CPU: 0 UID: 0 PID: 20304 Comm: syz.1.3101 Tainted: G U syzkaller #0 PREEMPT(full) [ 980.443384][T20304] Tainted: [U]=USER [ 980.443389][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 980.443400][T20304] Call Trace: [ 980.443406][T20304] [ 980.443412][T20304] dump_stack_lvl+0x116/0x1f0 [ 980.443440][T20304] should_fail_ex+0x512/0x640 [ 980.443466][T20304] should_failslab+0xc2/0x120 [ 980.443486][T20304] __kmalloc_cache_noprof+0x6a/0x3e0 [ 980.443502][T20304] ? snd_ctl_notify+0x3ab/0x710 [ 980.443525][T20304] snd_ctl_notify+0x3ab/0x710 [ 980.443550][T20304] snd_ctl_notify_one+0x122/0x240 [ 980.443569][T20304] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 980.443594][T20304] ? mark_held_locks+0x49/0x80 [ 980.443616][T20304] __snd_ctl_add_replace+0x63e/0x930 [ 980.443641][T20304] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 980.443664][T20304] ? trace_kmalloc+0x2b/0xd0 [ 980.443682][T20304] ? __kmalloc_noprof+0x242/0x510 [ 980.443698][T20304] ? snd_ctl_new+0x101/0x1a0 [ 980.443719][T20304] snd_ctl_elem_add+0x92c/0x14e0 [ 980.443744][T20304] ? find_held_lock+0x2b/0x80 [ 980.443757][T20304] ? __might_fault+0xe3/0x190 [ 980.443773][T20304] ? __might_fault+0xe3/0x190 [ 980.443787][T20304] ? __might_fault+0x13b/0x190 [ 980.443803][T20304] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 980.443830][T20304] snd_ctl_elem_add_user+0xc3/0x170 [ 980.443851][T20304] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 980.443896][T20304] snd_ctl_ioctl+0x799/0xf80 [ 980.443917][T20304] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 980.443940][T20304] ? __fget_files+0x20e/0x3c0 [ 980.443959][T20304] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 980.443980][T20304] __x64_sys_ioctl+0x18e/0x210 [ 980.444004][T20304] do_syscall_64+0xcd/0x4c0 [ 980.444027][T20304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.444042][T20304] RIP: 0033:0x7fe38d38eba9 [ 980.444061][T20304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.444080][T20304] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.444095][T20304] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 980.444105][T20304] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 980.444115][T20304] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 980.444125][T20304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.444134][T20304] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 980.444153][T20304] [ 980.444163][T20304] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 980.782234][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 981.322066][T20324] FAULT_INJECTION: forcing a failure. [ 981.322066][T20324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.534877][T20324] CPU: 0 UID: 0 PID: 20324 Comm: syz.2.3105 Tainted: G U syzkaller #0 PREEMPT(full) [ 981.534904][T20324] Tainted: [U]=USER [ 981.534910][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 981.534919][T20324] Call Trace: [ 981.534925][T20324] [ 981.534931][T20324] dump_stack_lvl+0x16c/0x1f0 [ 981.534958][T20324] should_fail_ex+0x512/0x640 [ 981.534983][T20324] _copy_from_user+0x2e/0xd0 [ 981.534999][T20324] kern_select+0xc0/0x1e0 [ 981.535015][T20324] ? __x64_sys_futex+0x1e0/0x4c0 [ 981.535034][T20324] ? __pfx_kern_select+0x10/0x10 [ 981.535051][T20324] ? xfd_validate_state+0x61/0x180 [ 981.535075][T20324] __x64_sys_select+0xbd/0x160 [ 981.535089][T20324] ? do_syscall_64+0x91/0x4c0 [ 981.535109][T20324] ? lockdep_hardirqs_on+0x7c/0x110 [ 981.535129][T20324] do_syscall_64+0xcd/0x4c0 [ 981.535151][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.535166][T20324] RIP: 0033:0x7f6ee878eba9 [ 981.535178][T20324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.535192][T20324] RSP: 002b:00007f6ee9597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 981.535214][T20324] RAX: ffffffffffffffda RBX: 00007f6ee89d6090 RCX: 00007f6ee878eba9 [ 981.535225][T20324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 981.535234][T20324] RBP: 00007f6ee8811e19 R08: 00002000000001c0 R09: 0000000000000000 [ 981.535243][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.535252][T20324] R13: 00007f6ee89d6128 R14: 00007f6ee89d6090 R15: 00007fff0e3fd908 [ 981.535271][T20324] [ 981.701840][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.199048][T20334] random: crng reseeded on system resumption [ 982.431043][T20336] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 984.244298][T20363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 984.292029][T20365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 984.704715][T20347] FAULT_INJECTION: forcing a failure. [ 984.704715][T20347] name failslab, interval 1, probability 0, space 0, times 0 [ 984.717653][T20347] CPU: 0 UID: 0 PID: 20347 Comm: syz.0.3110 Tainted: G U syzkaller #0 PREEMPT(full) [ 984.717678][T20347] Tainted: [U]=USER [ 984.717683][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 984.717692][T20347] Call Trace: [ 984.717698][T20347] [ 984.717704][T20347] dump_stack_lvl+0x16c/0x1f0 [ 984.717729][T20347] should_fail_ex+0x512/0x640 [ 984.717754][T20347] should_failslab+0xc2/0x120 [ 984.717774][T20347] __kmalloc_cache_noprof+0x6a/0x3e0 [ 984.717790][T20347] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 984.717815][T20347] tipc_nametbl_insert_publ+0x700/0x1720 [ 984.717838][T20347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 984.717859][T20347] ? net_generic+0xea/0x2a0 [ 984.717883][T20347] tipc_nametbl_publish+0x137/0x280 [ 984.717907][T20347] tipc_sk_publish+0x1d8/0x430 [ 984.717920][T20347] ? __pfx_tipc_sk_publish+0x10/0x10 [ 984.717936][T20347] ? __local_bh_enable_ip+0xa4/0x120 [ 984.717955][T20347] tipc_sk_bind+0x16f/0x380 [ 984.717970][T20347] tipc_bind+0x190/0x2a0 [ 984.717984][T20347] __sys_bind+0x1a4/0x260 [ 984.718003][T20347] ? __pfx___sys_bind+0x10/0x10 [ 984.718028][T20347] ? syscall_user_dispatch+0x78/0x140 [ 984.718063][T20347] __x64_sys_bind+0x72/0xb0 [ 984.718081][T20347] do_syscall_64+0xcd/0x4c0 [ 984.718104][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.718119][T20347] RIP: 0033:0x7f9249d8eba9 [ 984.718131][T20347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.718145][T20347] RSP: 002b:00007f924ac22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 984.718159][T20347] RAX: ffffffffffffffda RBX: 00007f9249fd6090 RCX: 00007f9249d8eba9 [ 984.718169][T20347] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000009 [ 984.718178][T20347] RBP: 00007f9249e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 984.718186][T20347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.718195][T20347] R13: 00007f9249fd6128 R14: 00007f9249fd6090 R15: 00007ffd1ddca2b8 [ 984.718214][T20347] [ 984.718220][T20347] tipc: Failed to bind to 65,0,0 [ 985.148496][T20382] FAULT_INJECTION: forcing a failure. [ 985.148496][T20382] name failslab, interval 1, probability 0, space 0, times 0 [ 985.230727][T20382] CPU: 0 UID: 0 PID: 20382 Comm: syz.1.3119 Tainted: G U syzkaller #0 PREEMPT(full) [ 985.230751][T20382] Tainted: [U]=USER [ 985.230756][T20382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 985.230764][T20382] Call Trace: [ 985.230770][T20382] [ 985.230776][T20382] dump_stack_lvl+0x16c/0x1f0 [ 985.230802][T20382] should_fail_ex+0x512/0x640 [ 985.230823][T20382] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 985.230842][T20382] should_failslab+0xc2/0x120 [ 985.230863][T20382] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 985.230880][T20382] ? __alloc_skb+0x2b2/0x380 [ 985.230902][T20382] __alloc_skb+0x2b2/0x380 [ 985.230920][T20382] ? __pfx___alloc_skb+0x10/0x10 [ 985.230954][T20382] ? __pfx___might_resched+0x10/0x10 [ 985.230969][T20382] ? __lock_acquire+0xb97/0x1ce0 [ 985.230990][T20382] netlink_alloc_large_skb+0x69/0x130 [ 985.231018][T20382] netlink_sendmsg+0x6a1/0xdd0 [ 985.231041][T20382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.231064][T20382] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 985.231083][T20382] ____sys_sendmsg+0xa98/0xc70 [ 985.231100][T20382] ? copy_msghdr_from_user+0x10a/0x160 [ 985.231120][T20382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.231138][T20382] ? kfree+0x24f/0x4d0 [ 985.231149][T20382] ? __pfx__kstrtoull+0x10/0x10 [ 985.231171][T20382] ___sys_sendmsg+0x134/0x1d0 [ 985.231193][T20382] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.231230][T20382] ? __pfx___might_resched+0x10/0x10 [ 985.231247][T20382] __sys_sendmmsg+0x200/0x420 [ 985.231270][T20382] ? __pfx___sys_sendmmsg+0x10/0x10 [ 985.231297][T20382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 985.231325][T20382] ? fput+0x9b/0xd0 [ 985.231345][T20382] ? ksys_write+0x1ac/0x250 [ 985.231360][T20382] ? __pfx_ksys_write+0x10/0x10 [ 985.231379][T20382] __x64_sys_sendmmsg+0x9c/0x100 [ 985.231399][T20382] ? lockdep_hardirqs_on+0x7c/0x110 [ 985.231419][T20382] do_syscall_64+0xcd/0x4c0 [ 985.231441][T20382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.231455][T20382] RIP: 0033:0x7fe38d38eba9 [ 985.231468][T20382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.231482][T20382] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 985.231496][T20382] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 985.231505][T20382] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 985.231515][T20382] RBP: 00007fe38e2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 985.231523][T20382] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 985.231532][T20382] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 985.231552][T20382] [ 985.506122][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.999023][ T5876] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 986.690443][T20470] vivid-003: ================= START STATUS ================= [ 986.876567][T20470] vivid-003: Radio HW Seek Mode: Bounded [ 986.876593][T20470] vivid-003: Radio Programmable HW Seek: false [ 986.876610][T20470] vivid-003: RDS Rx I/O Mode: Block I/O [ 986.876626][T20470] vivid-003: Generate RBDS Instead of RDS: false [ 986.876641][T20470] vivid-003: RDS Reception: true [ 986.876657][T20470] vivid-003: RDS Program Type: 0 inactive [ 986.876678][T20470] vivid-003: RDS PS Name: inactive [ 986.876696][T20470] vivid-003: RDS Radio Text: inactive [ 986.876714][T20470] vivid-003: RDS Traffic Announcement: false inactive [ 986.876732][T20470] vivid-003: RDS Traffic Program: false inactive [ 986.876750][T20470] vivid-003: RDS Music: false inactive [ 986.876769][T20470] vivid-003: ================== END STATUS ================== [ 986.922944][T20474] vivid-003: ================= START STATUS ================= [ 986.922960][T20474] vivid-003: Radio HW Seek Mode: Bounded [ 986.922980][T20474] vivid-003: Radio Programmable HW Seek: false [ 986.922997][T20474] vivid-003: RDS Rx I/O Mode: Block I/O [ 986.923012][T20474] vivid-003: Generate RBDS Instead of RDS: false [ 986.923029][T20474] vivid-003: RDS Reception: true [ 986.923044][T20474] vivid-003: RDS Program Type: 0 inactive [ 986.923064][T20474] vivid-003: RDS PS Name: inactive [ 986.923083][T20474] vivid-003: RDS Radio Text: inactive [ 986.923101][T20474] vivid-003: RDS Traffic Announcement: false inactive [ 986.923119][T20474] vivid-003: RDS Traffic Program: false inactive [ 986.923137][T20474] vivid-003: RDS Music: false inactive [ 986.923155][T20474] vivid-003: ================== END STATUS ================== [ 987.289006][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 987.992957][T20505] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2096996216 (4193992432 ns) > initial count (500876422 ns). Using initial count to start timer. [ 988.138538][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 989.100310][T20527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 989.119241][T20527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 989.148788][T20527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 989.180056][T20527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 989.207941][T20527] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 989.775039][T20550] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3132'. [ 990.347692][T20540] kexec: Could not allocate control_code_buffer [ 990.448393][T15570] Bluetooth: hci4: command 0x0c1a tx timeout [ 990.542637][T20566] tipc: Can't bind to reserved service type 0 [ 990.715403][T20577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 990.794148][T20572] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 991.163335][T15570] Bluetooth: hci2: command 0x0c1a tx timeout [ 991.169613][T15570] Bluetooth: hci1: command 0x0c1a tx timeout [ 991.234403][T20605] random: crng reseeded on system resumption [ 991.242406][T20599] Bluetooth: hci0: command 0x0c1a tx timeout [ 991.399622][T20612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3139'. [ 992.442484][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.448870][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.769663][T20634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 992.877005][T20634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 992.939233][T20634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 993.015734][T20634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 993.830597][T20681] binder: 20679:20681 unknown command 4294967282 [ 993.869390][T20681] binder: 20679:20681 ioctl c0306201 2000000000c0 returned -22 [ 994.029500][T20599] Bluetooth: hci4: command 0x0c1a tx timeout [ 994.514588][T20716] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3148'. [ 994.676514][T20732] netlink: 93 bytes leftover after parsing attributes in process `syz.3.3150'. [ 994.906991][T20599] Bluetooth: hci1: command 0x0c1a tx timeout [ 994.988056][T20599] Bluetooth: hci2: command 0x0c1a tx timeout [ 995.064679][T20599] Bluetooth: hci0: command 0x0c1a tx timeout [ 996.494924][T20803] zswap: compressor 000 not available [ 997.064572][T20833] FAULT_INJECTION: forcing a failure. [ 997.064572][T20833] name failslab, interval 1, probability 0, space 0, times 0 [ 997.077193][T20833] CPU: 0 UID: 0 PID: 20833 Comm: syz.1.3159 Tainted: G U syzkaller #0 PREEMPT(full) [ 997.077216][T20833] Tainted: [U]=USER [ 997.077221][T20833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 997.077231][T20833] Call Trace: [ 997.077237][T20833] [ 997.077243][T20833] dump_stack_lvl+0x116/0x1f0 [ 997.077270][T20833] should_fail_ex+0x512/0x640 [ 997.077295][T20833] should_failslab+0xc2/0x120 [ 997.077315][T20833] __kmalloc_cache_noprof+0x6a/0x3e0 [ 997.077331][T20833] ? snd_ctl_notify+0x3ab/0x710 [ 997.077355][T20833] snd_ctl_notify+0x3ab/0x710 [ 997.077379][T20833] snd_ctl_notify_one+0x122/0x240 [ 997.077399][T20833] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 997.077423][T20833] ? mark_held_locks+0x49/0x80 [ 997.077444][T20833] __snd_ctl_add_replace+0x63e/0x930 [ 997.077469][T20833] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 997.077492][T20833] ? trace_kmalloc+0x2b/0xd0 [ 997.077510][T20833] ? __kmalloc_noprof+0x242/0x510 [ 997.077526][T20833] ? snd_ctl_new+0x101/0x1a0 [ 997.077548][T20833] snd_ctl_elem_add+0x92c/0x14e0 [ 997.077572][T20833] ? find_held_lock+0x2b/0x80 [ 997.077585][T20833] ? __might_fault+0xe3/0x190 [ 997.077600][T20833] ? __might_fault+0xe3/0x190 [ 997.077615][T20833] ? __might_fault+0x13b/0x190 [ 997.077631][T20833] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 997.077658][T20833] snd_ctl_elem_add_user+0xc3/0x170 [ 997.077679][T20833] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 997.077724][T20833] snd_ctl_ioctl+0x799/0xf80 [ 997.077745][T20833] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 997.077768][T20833] ? __fget_files+0x20e/0x3c0 [ 997.077787][T20833] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 997.077809][T20833] __x64_sys_ioctl+0x18e/0x210 [ 997.077832][T20833] do_syscall_64+0xcd/0x4c0 [ 997.077855][T20833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.077870][T20833] RIP: 0033:0x7fe38d38eba9 [ 997.077883][T20833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.077897][T20833] RSP: 002b:00007fe38e2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.077912][T20833] RAX: ffffffffffffffda RBX: 00007fe38d5d5fa0 RCX: 00007fe38d38eba9 [ 997.077921][T20833] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 997.077931][T20833] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 997.077940][T20833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.077949][T20833] R13: 00007fe38d5d6038 R14: 00007fe38d5d5fa0 R15: 00007fffd2582da8 [ 997.077970][T20833] [ 997.077979][T20833] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 997.854695][T20856] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3163'. [ 998.777686][T20899] random: crng reseeded on system resumption [ 998.850069][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 999.824875][T20941] zswap: compressor 000 not available [ 1001.241644][T21027] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1002.601935][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 1002.658696][T21055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 1004.764643][T21127] FAULT_INJECTION: forcing a failure. [ 1004.764643][T21127] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.777254][T21127] CPU: 0 UID: 0 PID: 21127 Comm: syz.3.3191 Tainted: G U syzkaller #0 PREEMPT(full) [ 1004.777278][T21127] Tainted: [U]=USER [ 1004.777283][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1004.777292][T21127] Call Trace: [ 1004.777299][T21127] [ 1004.777304][T21127] dump_stack_lvl+0x116/0x1f0 [ 1004.777331][T21127] should_fail_ex+0x512/0x640 [ 1004.777356][T21127] should_failslab+0xc2/0x120 [ 1004.777376][T21127] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1004.777392][T21127] ? snd_ctl_notify+0x3ab/0x710 [ 1004.777414][T21127] snd_ctl_notify+0x3ab/0x710 [ 1004.777439][T21127] snd_ctl_notify_one+0x122/0x240 [ 1004.777458][T21127] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 1004.777484][T21127] ? mark_held_locks+0x49/0x80 [ 1004.777510][T21127] __snd_ctl_add_replace+0x63e/0x930 [ 1004.777535][T21127] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 1004.777559][T21127] ? trace_kmalloc+0x2b/0xd0 [ 1004.777578][T21127] ? __kmalloc_noprof+0x242/0x510 [ 1004.777594][T21127] ? snd_ctl_new+0x101/0x1a0 [ 1004.777615][T21127] snd_ctl_elem_add+0x92c/0x14e0 [ 1004.777639][T21127] ? find_held_lock+0x2b/0x80 [ 1004.777653][T21127] ? __might_fault+0xe3/0x190 [ 1004.777668][T21127] ? __might_fault+0xe3/0x190 [ 1004.777683][T21127] ? __might_fault+0x13b/0x190 [ 1004.777699][T21127] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 1004.777726][T21127] snd_ctl_elem_add_user+0xc3/0x170 [ 1004.777747][T21127] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 1004.777792][T21127] snd_ctl_ioctl+0x799/0xf80 [ 1004.777813][T21127] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1004.777836][T21127] ? __fget_files+0x20e/0x3c0 [ 1004.777855][T21127] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1004.777877][T21127] __x64_sys_ioctl+0x18e/0x210 [ 1004.777900][T21127] do_syscall_64+0xcd/0x4c0 [ 1004.777923][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.777938][T21127] RIP: 0033:0x7f4b81d8eba9 [ 1004.777951][T21127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.777966][T21127] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.777981][T21127] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 1004.777991][T21127] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000008 [ 1004.778001][T21127] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1004.778010][T21127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.778019][T21127] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 1004.778038][T21127] [ 1004.778047][T21127] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 1005.260686][T21168] random: crng reseeded on system resumption [ 1005.525864][T21193] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1005.705190][T21199] ptrace attach of "./syz-executor exec"[16552] was attempted by "*Fr\x09qxT3eLm%_d'9}3?Hemi5TA%|dHH'R!RJč;M~Y'/C:k!)UIuߛsLwfl~+ƈ\x0dl)T?_}qMqʙj!>|JHPrfF{Pe|i9$;.b,3nf@^:JDT\x0dPp(`~䔤UUźwV-rKŬ|3=Wm:\x0d|ڂAj_b{OS5='8̣}llB ^@YyDxtG8b(rs9ȋ\x5cs/bĦ;\x092]LJϰ}p$Ø^7ɠK; $\x0b]V\x0aGna ڊcEGZ(fB$녑ZS?D(I*_y;]SCZDǎ\x22pFH*Ѻ\x0cfl-\x5c!Sks1r7\x0bzTr}@^ԀE\x5cy:&X-c/P,pH'E+g [ 1007.629350][T21226] ICMPv6: process `syz.1.3201' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1009.566980][T21336] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1009.676637][T21339] ptrace attach of "./syz-executor exec"[16887] was attempted by "tۍ9c}DI !& ezViL5MEW ܹ)2\x07]T Ԩ\x1bO?~՝@Lt|ho\x0b$h\x07׵xlI40=6lA61(ِ2|fp.2YtNdx;1&U\x0bZ(ć$~żl;gTq\x0d+hZ\x5cHsu`㩹QEҘf\x5c]#za\x0d[x ]u+I\x0a=4EG&TLY5K͉A0L>F!fu\x227c\x0a>ST~#6 [ 1010.484626][T21345] dump_stack_lvl+0x16c/0x1f0 [ 1010.484652][T21345] should_fail_ex+0x512/0x640 [ 1010.484677][T21345] should_fail_alloc_page+0xe7/0x130 [ 1010.484698][T21345] prepare_alloc_pages+0x3c2/0x610 [ 1010.484722][T21345] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1010.484740][T21345] ? __lock_acquire+0x62e/0x1ce0 [ 1010.484764][T21345] ? __lock_acquire+0x62e/0x1ce0 [ 1010.484783][T21345] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1010.484807][T21345] ? find_held_lock+0x2b/0x80 [ 1010.484821][T21345] ? is_bpf_text_address+0x8a/0x1a0 [ 1010.484839][T21345] ? bpf_ksym_find+0x124/0x1c0 [ 1010.484853][T21345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1010.484875][T21345] ? policy_nodemask+0xea/0x4e0 [ 1010.484895][T21345] alloc_pages_mpol+0x1fb/0x550 [ 1010.484914][T21345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1010.484937][T21345] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1010.484959][T21345] shmem_alloc_folio+0x135/0x160 [ 1010.484974][T21345] shmem_alloc_and_add_folio+0x499/0xc20 [ 1010.484994][T21345] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1010.485013][T21345] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1010.485032][T21345] shmem_get_folio_gfp+0x67f/0x1600 [ 1010.485053][T21345] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1010.485075][T21345] ? css_rstat_updated+0x1c2/0x510 [ 1010.485093][T21345] shmem_fault+0x1fe/0xa30 [ 1010.485110][T21345] ? __pfx_shmem_fault+0x10/0x10 [ 1010.485125][T21345] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 1010.485151][T21345] ? __pfx_filemap_map_pages+0x10/0x10 [ 1010.485169][T21345] ? pte_alloc_one+0x2b6/0x3a0 [ 1010.485187][T21345] ? __pfx_filemap_map_pages+0x10/0x10 [ 1010.485202][T21345] __do_fault+0x10a/0x490 [ 1010.485218][T21345] ? do_raw_spin_lock+0x12c/0x2b0 [ 1010.485240][T21345] ? __pfx_filemap_map_pages+0x10/0x10 [ 1010.485256][T21345] do_pte_missing+0x1a6/0x3ba0 [ 1010.485271][T21345] ? do_raw_spin_unlock+0x172/0x230 [ 1010.485294][T21345] ? __pmd_alloc+0x3fb/0x930 [ 1010.485316][T21345] __handle_mm_fault+0x152a/0x2a50 [ 1010.485333][T21345] ? mt_find+0x3ef/0xa30 [ 1010.485348][T21345] ? __pfx___handle_mm_fault+0x10/0x10 [ 1010.485361][T21345] ? __pfx_mt_find+0x10/0x10 [ 1010.485384][T21345] ? find_vma+0xbf/0x140 [ 1010.485402][T21345] ? __pfx_find_vma+0x10/0x10 [ 1010.485422][T21345] handle_mm_fault+0x589/0xd10 [ 1010.485437][T21345] ? trace_raw_output_exceptions+0x131/0x150 [ 1010.485460][T21345] do_user_addr_fault+0x7a6/0x1370 [ 1010.485483][T21345] ? rcu_is_watching+0x12/0xc0 [ 1010.485500][T21345] exc_page_fault+0x5c/0xb0 [ 1010.485521][T21345] asm_exc_page_fault+0x26/0x30 [ 1010.485535][T21345] RIP: 0010:__put_user_4+0xd/0x20 [ 1010.485556][T21345] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 68 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1010.485570][T21345] RSP: 0018:ffffc9000e4cfdf8 EFLAGS: 00050206 [ 1010.485582][T21345] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000004de7 [ 1010.485591][T21345] RDX: ffff88805fb15a00 RSI: ffffffff8237e0bb RDI: ffffffff8c163700 [ 1010.485600][T21345] RBP: 1ffff92001c99fc2 R08: d5e9e978e57f2557 R09: 0000000000000001 [ 1010.485610][T21345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004de7 [ 1010.485618][T21345] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1010.485632][T21345] ? do_fcntl+0xcfb/0x15a0 [ 1010.485655][T21345] do_fcntl+0xd06/0x15a0 [ 1010.485674][T21345] ? __pfx_do_fcntl+0x10/0x10 [ 1010.485698][T21345] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1010.485714][T21345] __x64_sys_fcntl+0x163/0x200 [ 1010.485735][T21345] do_syscall_64+0xcd/0x4c0 [ 1010.485756][T21345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.485770][T21345] RIP: 0033:0x7f6ee878eba9 [ 1010.485781][T21345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.485794][T21345] RSP: 002b:00007f6ee95b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1010.485807][T21345] RAX: ffffffffffffffda RBX: 00007f6ee89d5fa0 RCX: 00007f6ee878eba9 [ 1010.485816][T21345] RDX: 0000000000004de7 RSI: 0000000000000011 RDI: 0000000000000000 [ 1010.485825][T21345] RBP: 00007f6ee95b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.485833][T21345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.485841][T21345] R13: 00007f6ee89d6038 R14: 00007f6ee89d5fa0 R15: 00007fff0e3fd908 [ 1010.485859][T21345] [ 1011.052679][T21354] ICMPv6: process `syz.0.3214' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1011.206673][T21358] bond0: option all_slaves_active: invalid value () [ 1012.654369][T21432] blktrace: Concurrent blktraces are not allowed on ram7 [ 1012.894317][T21398] Process accounting resumed [ 1014.098632][T21455] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1014.220450][T21454] bond0: option all_slaves_active: invalid value () [ 1014.745238][T21495] hub 1-0:1.0: USB hub found [ 1014.792406][T21495] hub 1-0:1.0: 1 port detected [ 1015.006871][T21495] FAULT_INJECTION: forcing a failure. [ 1015.006871][T21495] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.100570][T21495] CPU: 0 UID: 0 PID: 21495 Comm: syz.3.3229 Tainted: G U syzkaller #0 PREEMPT(full) [ 1015.100597][T21495] Tainted: [U]=USER [ 1015.100602][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.100611][T21495] Call Trace: [ 1015.100617][T21495] [ 1015.100624][T21495] dump_stack_lvl+0x16c/0x1f0 [ 1015.100650][T21495] should_fail_ex+0x512/0x640 [ 1015.100672][T21495] ? fs_reclaim_acquire+0xae/0x150 [ 1015.100695][T21495] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1015.100716][T21495] should_failslab+0xc2/0x120 [ 1015.100742][T21495] __kmalloc_noprof+0xd2/0x510 [ 1015.100764][T21495] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1015.100790][T21495] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1015.100812][T21495] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1015.100849][T21495] ? do_raw_spin_lock+0x12c/0x2b0 [ 1015.100877][T21495] tomoyo_file_open+0x6b/0x90 [ 1015.100891][T21495] security_file_open+0x84/0x1e0 [ 1015.100911][T21495] do_dentry_open+0x596/0x1530 [ 1015.100935][T21495] vfs_open+0x82/0x3f0 [ 1015.100958][T21495] path_openat+0x1de4/0x2cb0 [ 1015.100981][T21495] ? __pfx_path_openat+0x10/0x10 [ 1015.101003][T21495] do_filp_open+0x20b/0x470 [ 1015.101021][T21495] ? __pfx_do_filp_open+0x10/0x10 [ 1015.101052][T21495] ? alloc_fd+0x471/0x7d0 [ 1015.101073][T21495] do_sys_openat2+0x11b/0x1d0 [ 1015.101093][T21495] ? __pfx_do_sys_openat2+0x10/0x10 [ 1015.101122][T21495] __x64_sys_openat+0x174/0x210 [ 1015.101135][T21495] ? __pfx___x64_sys_openat+0x10/0x10 [ 1015.101156][T21495] do_syscall_64+0xcd/0x4c0 [ 1015.101179][T21495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.101193][T21495] RIP: 0033:0x7f4b81d8eba9 [ 1015.101206][T21495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.101219][T21495] RSP: 002b:00007f4b82c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1015.101234][T21495] RAX: ffffffffffffffda RBX: 00007f4b81fd5fa0 RCX: 00007f4b81d8eba9 [ 1015.101243][T21495] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1015.101252][T21495] RBP: 00007f4b81e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1015.101261][T21495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.101270][T21495] R13: 00007f4b81fd6038 R14: 00007f4b81fd5fa0 R15: 00007ffdaab6bda8 [ 1015.101289][T21495] [ 1015.101316][T21495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1015.372238][T21525] random: crng reseeded on system resumption [ 1015.586347][T21530] FAULT_INJECTION: forcing a failure. [ 1015.586347][T21530] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.661010][T21530] CPU: 0 UID: 0 PID: 21530 Comm: syz.1.3231 Tainted: G U syzkaller #0 PREEMPT(full) [ 1015.661036][T21530] Tainted: [U]=USER [ 1015.661041][T21530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.661050][T21530] Call Trace: [ 1015.661056][T21530] [ 1015.661062][T21530] dump_stack_lvl+0x16c/0x1f0 [ 1015.661087][T21530] should_fail_ex+0x512/0x640 [ 1015.661109][T21530] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1015.661132][T21530] should_failslab+0xc2/0x120 [ 1015.661150][T21530] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1015.661170][T21530] ? __kthread_create_on_node+0x186/0x3f0 [ 1015.661192][T21530] kvasprintf+0xbc/0x160 [ 1015.661208][T21530] ? __pfx_kvasprintf+0x10/0x10 [ 1015.661230][T21530] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 1015.661252][T21530] __kthread_create_on_node+0x186/0x3f0 [ 1015.661271][T21530] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1015.661297][T21530] ? __lock_acquire+0xb97/0x1ce0 [ 1015.661316][T21530] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 1015.661343][T21530] kthread_create_on_node+0xc7/0x100 [ 1015.661361][T21530] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1015.661383][T21530] ? mark_held_locks+0x49/0x80 [ 1015.661402][T21530] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1015.661421][T21530] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.661445][T21530] dvb_frontend_open+0xf47/0x1730 [ 1015.661471][T21530] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1015.661493][T21530] dvb_device_open+0x26d/0x3b0 [ 1015.661507][T21530] ? __pfx_dvb_device_open+0x10/0x10 [ 1015.661520][T21530] chrdev_open+0x234/0x6a0 [ 1015.661538][T21530] ? __pfx_apparmor_file_open+0x10/0x10 [ 1015.661555][T21530] ? __pfx_chrdev_open+0x10/0x10 [ 1015.661574][T21530] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1015.661594][T21530] do_dentry_open+0x982/0x1530 [ 1015.661612][T21530] ? __pfx_chrdev_open+0x10/0x10 [ 1015.661634][T21530] vfs_open+0x82/0x3f0 [ 1015.661657][T21530] path_openat+0x1de4/0x2cb0 [ 1015.661690][T21530] ? __pfx_path_openat+0x10/0x10 [ 1015.661713][T21530] do_filp_open+0x20b/0x470 [ 1015.661731][T21530] ? __pfx_do_filp_open+0x10/0x10 [ 1015.661763][T21530] ? alloc_fd+0x471/0x7d0 [ 1015.661785][T21530] do_sys_openat2+0x11b/0x1d0 [ 1015.661806][T21530] ? __pfx_do_sys_openat2+0x10/0x10 [ 1015.661835][T21530] __x64_sys_openat+0x174/0x210 [ 1015.661848][T21530] ? __pfx___x64_sys_openat+0x10/0x10 [ 1015.661869][T21530] do_syscall_64+0xcd/0x4c0 [ 1015.661891][T21530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.661906][T21530] RIP: 0033:0x7fe38d38eba9 [ 1015.661919][T21530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.661933][T21530] RSP: 002b:00007fe38e282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1015.661949][T21530] RAX: ffffffffffffffda RBX: 00007fe38d5d6090 RCX: 00007fe38d38eba9 [ 1015.661959][T21530] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1015.661968][T21530] RBP: 00007fe38d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1015.661978][T21530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.661987][T21530] R13: 00007fe38d5d6128 R14: 00007fe38d5d6090 R15: 00007fffd2582da8 [ 1015.662007][T21530] [ 1015.662057][T21530] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 1015.925607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.343076][T21571] QAT: failed to copy from user cfg_data. [ 1016.634361][T21575] ================================================================== [ 1016.642436][T21575] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1016.650136][T21575] Read of size 8 at addr ffff888029ee2418 by task syz.0.3234/21575 [ 1016.658003][T21575] [ 1016.660316][T21575] CPU: 0 UID: 0 PID: 21575 Comm: syz.0.3234 Tainted: G U syzkaller #0 PREEMPT(full) [ 1016.660338][T21575] Tainted: [U]=USER [ 1016.660343][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.660353][T21575] Call Trace: [ 1016.660360][T21575] [ 1016.660366][T21575] dump_stack_lvl+0x116/0x1f0 [ 1016.660391][T21575] print_report+0xcd/0x630 [ 1016.660409][T21575] ? __virt_addr_valid+0x81/0x610 [ 1016.660427][T21575] ? __phys_addr+0xe8/0x180 [ 1016.660444][T21575] ? dvb_device_open+0x36a/0x3b0 [ 1016.660458][T21575] kasan_report+0xe0/0x110 [ 1016.660476][T21575] ? dvb_device_open+0x36a/0x3b0 [ 1016.660491][T21575] ? __pfx_dvb_device_open+0x10/0x10 [ 1016.660504][T21575] dvb_device_open+0x36a/0x3b0 [ 1016.660517][T21575] ? __pfx_dvb_device_open+0x10/0x10 [ 1016.660530][T21575] chrdev_open+0x234/0x6a0 [ 1016.660548][T21575] ? __pfx_apparmor_file_open+0x10/0x10 [ 1016.660564][T21575] ? __pfx_chrdev_open+0x10/0x10 [ 1016.660587][T21575] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1016.660606][T21575] do_dentry_open+0x982/0x1530 [ 1016.660623][T21575] ? __pfx_chrdev_open+0x10/0x10 [ 1016.660643][T21575] vfs_open+0x82/0x3f0 [ 1016.660665][T21575] path_openat+0x1de4/0x2cb0 [ 1016.660684][T21575] ? __pfx_path_openat+0x10/0x10 [ 1016.660702][T21575] do_filp_open+0x20b/0x470 [ 1016.660718][T21575] ? __pfx_do_filp_open+0x10/0x10 [ 1016.660744][T21575] ? alloc_fd+0x471/0x7d0 [ 1016.660761][T21575] do_sys_openat2+0x11b/0x1d0 [ 1016.660781][T21575] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.660806][T21575] __x64_sys_openat+0x174/0x210 [ 1016.660819][T21575] ? __pfx___x64_sys_openat+0x10/0x10 [ 1016.660835][T21575] do_syscall_64+0xcd/0x4c0 [ 1016.660857][T21575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.660872][T21575] RIP: 0033:0x7f9249d8eba9 [ 1016.660885][T21575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.660900][T21575] RSP: 002b:00007f924ac43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1016.660915][T21575] RAX: ffffffffffffffda RBX: 00007f9249fd5fa0 RCX: 00007f9249d8eba9 [ 1016.660925][T21575] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1016.660934][T21575] RBP: 00007f9249e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1016.660943][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.660952][T21575] R13: 00007f9249fd6038 R14: 00007f9249fd5fa0 R15: 00007ffd1ddca2b8 [ 1016.660967][T21575] [ 1016.660973][T21575] [ 1016.905256][T21575] Allocated by task 1: [ 1016.909299][T21575] kasan_save_stack+0x33/0x60 [ 1016.913956][T21575] kasan_save_track+0x14/0x30 [ 1016.918610][T21575] __kasan_kmalloc+0xaa/0xb0 [ 1016.923187][T21575] dvb_register_device+0x1e4/0x2370 [ 1016.928361][T21575] dvb_register_frontend+0x5a6/0x880 [ 1016.933630][T21575] vidtv_bridge_probe+0x459/0xa90 [ 1016.938657][T21575] platform_probe+0x103/0x1d0 [ 1016.943314][T21575] really_probe+0x241/0xa90 [ 1016.947806][T21575] __driver_probe_device+0x1de/0x440 [ 1016.953076][T21575] driver_probe_device+0x4c/0x1b0 [ 1016.958090][T21575] __driver_attach+0x283/0x580 [ 1016.962843][T21575] bus_for_each_dev+0x13e/0x1d0 [ 1016.967682][T21575] bus_add_driver+0x2e9/0x690 [ 1016.972343][T21575] driver_register+0x15c/0x4b0 [ 1016.977083][T21575] vidtv_bridge_init+0x45/0x80 [ 1016.981824][T21575] do_one_initcall+0x120/0x6e0 [ 1016.986566][T21575] kernel_init_freeable+0x5c2/0x910 [ 1016.991765][T21575] kernel_init+0x1c/0x2b0 [ 1016.996071][T21575] ret_from_fork+0x56d/0x730 [ 1017.000650][T21575] ret_from_fork_asm+0x1a/0x30 [ 1017.005397][T21575] [ 1017.007713][T21575] Freed by task 21530: [ 1017.011761][T21575] kasan_save_stack+0x33/0x60 [ 1017.016436][T21575] kasan_save_track+0x14/0x30 [ 1017.021113][T21575] kasan_save_free_info+0x3b/0x60 [ 1017.026133][T21575] __kasan_slab_free+0x60/0x70 [ 1017.030882][T21575] kfree+0x2b4/0x4d0 [ 1017.034756][T21575] dvb_device_put.part.0+0x60/0x90 [ 1017.039868][T21575] dvb_device_open+0x2a4/0x3b0 [ 1017.044609][T21575] chrdev_open+0x234/0x6a0 [ 1017.049005][T21575] do_dentry_open+0x982/0x1530 [ 1017.053748][T21575] vfs_open+0x82/0x3f0 [ 1017.057802][T21575] path_openat+0x1de4/0x2cb0 [ 1017.062376][T21575] do_filp_open+0x20b/0x470 [ 1017.066858][T21575] do_sys_openat2+0x11b/0x1d0 [ 1017.071515][T21575] __x64_sys_openat+0x174/0x210 [ 1017.076347][T21575] do_syscall_64+0xcd/0x4c0 [ 1017.080832][T21575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.086701][T21575] [ 1017.089004][T21575] The buggy address belongs to the object at ffff888029ee2400 [ 1017.089004][T21575] which belongs to the cache kmalloc-256 of size 256 [ 1017.103034][T21575] The buggy address is located 24 bytes inside of [ 1017.103034][T21575] freed 256-byte region [ffff888029ee2400, ffff888029ee2500) [ 1017.116716][T21575] [ 1017.119034][T21575] The buggy address belongs to the physical page: [ 1017.125440][T21575] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29ee2 [ 1017.134198][T21575] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1017.142680][T21575] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1017.150212][T21575] page_type: f5(slab) [ 1017.154175][T21575] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1017.162768][T21575] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1017.171332][T21575] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1017.179977][T21575] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1017.188629][T21575] head: 00fff00000000001 ffffea0000a7b881 00000000ffffffff 00000000ffffffff [ 1017.197276][T21575] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1017.205917][T21575] page dumped because: kasan: bad access detected [ 1017.212310][T21575] page_owner tracks the page as allocated [ 1017.217994][T21575] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18688670279, free_ts 0 [ 1017.237678][T21575] post_alloc_hook+0x1c0/0x230 [ 1017.242422][T21575] get_page_from_freelist+0x132b/0x38e0 [ 1017.247946][T21575] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1017.253817][T21575] alloc_pages_mpol+0x1fb/0x550 [ 1017.258647][T21575] new_slab+0x247/0x330 [ 1017.262790][T21575] ___slab_alloc+0xcf2/0x1750 [ 1017.267442][T21575] __slab_alloc.constprop.0+0x56/0xb0 [ 1017.272788][T21575] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1017.278046][T21575] bus_add_driver+0x92/0x690 [ 1017.282630][T21575] driver_register+0x15c/0x4b0 [ 1017.287382][T21575] i2c_register_driver+0xd9/0x1c0 [ 1017.292486][T21575] do_one_initcall+0x120/0x6e0 [ 1017.297240][T21575] kernel_init_freeable+0x5c2/0x910 [ 1017.302424][T21575] kernel_init+0x1c/0x2b0 [ 1017.306733][T21575] ret_from_fork+0x56d/0x730 [ 1017.311323][T21575] ret_from_fork_asm+0x1a/0x30 [ 1017.316073][T21575] page_owner free stack trace missing [ 1017.321416][T21575] [ 1017.323713][T21575] Memory state around the buggy address: [ 1017.329316][T21575] ffff888029ee2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1017.337350][T21575] ffff888029ee2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1017.345386][T21575] >ffff888029ee2400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1017.353415][T21575] ^ [ 1017.358236][T21575] ffff888029ee2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1017.366283][T21575] ffff888029ee2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1017.374316][T21575] ================================================================== [ 1017.382404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.170165][T21575] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1018.177376][T21575] CPU: 0 UID: 0 PID: 21575 Comm: syz.0.3234 Tainted: G U syzkaller #0 PREEMPT(full) [ 1018.188293][T21575] Tainted: [U]=USER [ 1018.192071][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.202101][T21575] Call Trace: [ 1018.205360][T21575] [ 1018.208272][T21575] dump_stack_lvl+0x3d/0x1f0 [ 1018.212853][T21575] vpanic+0x6e8/0x7a0 [ 1018.216821][T21575] ? __pfx_vpanic+0x10/0x10 [ 1018.221308][T21575] ? __pfx_vprintk_emit+0x10/0x10 [ 1018.226391][T21575] ? dvb_device_open+0x36a/0x3b0 [ 1018.231327][T21575] panic+0xca/0xd0 [ 1018.235044][T21575] ? __pfx_panic+0x10/0x10 [ 1018.239448][T21575] ? dvb_device_open+0x36a/0x3b0 [ 1018.244410][T21575] ? preempt_schedule_common+0x44/0xc0 [ 1018.249872][T21575] ? preempt_schedule_thunk+0x16/0x30 [ 1018.255232][T21575] check_panic_on_warn+0xab/0xb0 [ 1018.260158][T21575] end_report+0x107/0x170 [ 1018.264470][T21575] kasan_report+0xee/0x110 [ 1018.268886][T21575] ? dvb_device_open+0x36a/0x3b0 [ 1018.273820][T21575] ? __pfx_dvb_device_open+0x10/0x10 [ 1018.279081][T21575] dvb_device_open+0x36a/0x3b0 [ 1018.283821][T21575] ? __pfx_dvb_device_open+0x10/0x10 [ 1018.289083][T21575] chrdev_open+0x234/0x6a0 [ 1018.293498][T21575] ? __pfx_apparmor_file_open+0x10/0x10 [ 1018.299025][T21575] ? __pfx_chrdev_open+0x10/0x10 [ 1018.303945][T21575] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1018.310250][T21575] do_dentry_open+0x982/0x1530 [ 1018.314994][T21575] ? __pfx_chrdev_open+0x10/0x10 [ 1018.319915][T21575] vfs_open+0x82/0x3f0 [ 1018.323982][T21575] path_openat+0x1de4/0x2cb0 [ 1018.328557][T21575] ? __pfx_path_openat+0x10/0x10 [ 1018.333475][T21575] do_filp_open+0x20b/0x470 [ 1018.337968][T21575] ? __pfx_do_filp_open+0x10/0x10 [ 1018.342984][T21575] ? alloc_fd+0x471/0x7d0 [ 1018.347304][T21575] do_sys_openat2+0x11b/0x1d0 [ 1018.351964][T21575] ? __pfx_do_sys_openat2+0x10/0x10 [ 1018.357145][T21575] __x64_sys_openat+0x174/0x210 [ 1018.361971][T21575] ? __pfx___x64_sys_openat+0x10/0x10 [ 1018.367323][T21575] do_syscall_64+0xcd/0x4c0 [ 1018.371814][T21575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.377685][T21575] RIP: 0033:0x7f9249d8eba9 [ 1018.382078][T21575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.401681][T21575] RSP: 002b:00007f924ac43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1018.410074][T21575] RAX: ffffffffffffffda RBX: 00007f9249fd5fa0 RCX: 00007f9249d8eba9 [ 1018.418025][T21575] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1018.425974][T21575] RBP: 00007f9249e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1018.434009][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.441954][T21575] R13: 00007f9249fd6038 R14: 00007f9249fd5fa0 R15: 00007ffd1ddca2b8 [ 1018.449915][T21575] [ 1018.452962][T21575] Kernel Offset: disabled [ 1018.457271][T21575] Rebooting in 86400 seconds..