last executing test programs: 5m3.738624798s ago: executing program 3 (id=988): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) 5m2.408848966s ago: executing program 3 (id=992): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x88b, 0x8000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1a2003, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(r0, 0x4008550d, r0) 4m59.940771753s ago: executing program 3 (id=998): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/first_error_time\x00', 0x406e80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x18, 0xa, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x26, 0x10004, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x5, 0x5, 0x4, 0x0, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0xbba, 0x0, 0x80000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xb0r\x93\x8d\x9b&C\xa7R\xe1\"\xdb \x19\x02\x11c\xdbWS\x01\xb6\xd8\xba\xeasp\xeaL\xde\xfb`\xc4\x1dDm5\xeeYEq+\x17ZEW\xfb\x8fdJ\aQ\xcc1M\x13k\xd6P\xd27\xf2\xc6E\xad1i\xf7\xab\xc3\'\x1ahq\xb1`E\xe7\xe4[\x00[\xf7gx\xe4\x9bK\xa8\xd7\x8a\x7f\x8a$E\xad5%?\xce~\x01E\x9a\x0f\xa1e]\xc9D\xc5p\xf6L\xef\xd6]\xbb\xc8\x1d\xeb\xef,\xab\x1dHk\x87\x95$\xc1\"\x98I!\x81\b\x9a6\xfa\xda\xf5\xe5l\xd9\x10\f:\x99\x0f\xea\xc4\x03h\xc6y\x1f\xb5f,\xa6*\xa2\"7i\xd0+mr\xd1\'\x9b\xd1\b\xef\xa6\xaa\xa3o\xa0', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) socket(0xa, 0x2, 0x88) write$auto_seq_oss_f_ops_seq_oss(r3, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001280)=""/4121, 0x1019) 4m55.581365951s ago: executing program 3 (id=1008): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) r1 = inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) close_range$auto(r4, r0, 0xffffffff) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fsconfig$auto_FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000340)="62b5cc0b17f5c56c8b747ec42530379ec4613d957defb39de1fbf442e2e98bf0ec8da9318338b70125b5243bbbafaf622599c4f5626d822bb1f73e59d9ca3bc9a9a52da92c0aa175ba260fca0532c66d5389a451cc2edf9eef12c83eb68eb4b72cd2f562cb08b2707d6df5480f9f16db43d3defa6207e9e3594bbee112f1bcc33522a114520f6b2b90361ebab49e11721319adb8220b5ce5cba0bcc49933381af53286e6068f17bb0c3151c8c8413359584808124645685f2b3ef9cb38ce6a38141908898f74d1a0e8c90f801fa764cc95c797213741bcba465e01f00ca3dc2f57642e3e39ee35d7bc152421", 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 4m53.220509269s ago: executing program 3 (id=1016): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000001, 0x400, 0x2}]}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) munmap$auto(0x0, 0xffffffff) 4m52.582197272s ago: executing program 3 (id=1018): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto(r1, 0x2201, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20091dfe4659ac142e2a6ecc441a000000", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf25030000000c0001800800020001040000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pim6reg1\x00'}) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r5, 0x83c0550b, 0x0) sendmsg$auto_NET_SHAPER_CMD_GET2(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x40000) r6 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1000}, 0x1, &(0x7f0000000280)={&(0x7f0000000580)="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", 0xffffffff}, 0x6, 0x4) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="a4030000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf2501000000050024000800000008000c000300000005001300ec000000780319800c00cd00000200000000000066039780a78bfeffe6e8fdcaf829ca1d148087adc51437ba6d47cf59e5e809a142c7edf2dbe2e2bbbb3149824b3761d2619ac2a1f0febb16636de4241e2a9e77754700de31e2d6b81037126b65f49fb5fec4d5aa5f6522deaa8d29b72c50c4a0904b86928a42f2ffea9c3a62e84e85c4636c0073a96e4cd221e4482b948e6f31673c2aeb33a3101b9a575b406de308f6a38d3ab917951e8a579600919b567f933e1afb1ffaa3e792797544794a1d93edeb52bb9410a67affcb611887948503c9f38433a7235008091dd48c4f4885cb175e00e5a1cbbe476d604aba447f8d70022980040062809fe46e4d58e9b3b9126a5fb23d756f78bddc803eeca3e0f477348ab53a01fde15c9d9030672e2d0c0d0193631edbf2ab72ec0265160756891b654160d206ed1452133c545c5feaf1e45e72ddae2a36c03e747456f566c808db0d5bd4a868c8dab506b7132e4a5bc79770e420abb15da674e977ff97a0c77c72724cfde19fdb8d379e809c6a5e1c5cf097c79d2a03cffdd6d82f6e96dab4c7927d6e8bb7e8c865d34ae2511b0b03e5940ce29fb9bf47c3bdcce86ab9bc2bc024ef28d7e135d72ac976dbdd8d26b43ca9b1e7a818f6c43552b41fcafa2895cfd3540ba340537b28ca22b3a72e45f4d2fd97a6a0d7d7f00bcbd7fe57753e29d1fc36f0a57db7056ff5c1d6d23aee8ed41fa132ab07f1052a6e484cc9c0b9c123df961426659e3626136149ad03ea344035e2dfd27bc992fdb857d8aa48e45b2d840b6d41e8581cf77681107f05b28b8dede5e93320d6160dbb7e52e07471738a357b33d4cdc09e04820c571478db18f791e6bfe81713bcb9d0e57faa68bf39603fd8c482974868e802e7a1c0eebd8b5a698d29bfe66143bd548dc1792b3dd97dba0012000faab8e458e18cff1fe1256e4bf5a0970981cc506f75bb612428d61565b13dc5dbac78a015b25a518743975737fc4b5f8898c736107ff6d6e46497c2217ef414114eeb758bd260b76df67a6361d78ff3ccbdbc10164c09a9d9d837f62c49e840de69b026414a683048adaad2531db102ce5092b33ef4cb02e61c2f8351c2765ce715c561eb1ae200a1263fdc134c4138e572bf6c8cad89a568baa49e7593870aca4976d77ace311a50ffe3b2b9487e274750bda5f93e0000040015801800de8014003b00fe88000000000000000000000000010100"/926], 0x3a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000) 4m36.91847427s ago: executing program 32 (id=1018): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto(r1, 0x2201, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20091dfe4659ac142e2a6ecc441a000000", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf25030000000c0001800800020001040000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pim6reg1\x00'}) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r5, 0x83c0550b, 0x0) sendmsg$auto_NET_SHAPER_CMD_GET2(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x40000) r6 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1000}, 0x1, &(0x7f0000000280)={&(0x7f0000000580)="e61fcab3c90c315e4e46f7ae873f02dcd03c100a000000a1cc8822e54d8277aa7dfc8cf43b3b4adb57cb05caf433890909a95229e83ab82e3fb5b3fa0cf64a3c87c2bf3f1b4fb481bd8db6596c06edaf7fae41d500bce496deff178024424e5ddc39921d0fbf56469daa0ace5a4cd5fe86335bffab6f6842874bfdf3d26fe2c8925d0a8a3011426b49a4858c12e1e245feca0d68a8f85a0712ad0535282ab8f53017472be4e4358ff84b4e18627135d09848caecad8085d49a9675b4387053ffe6f7e00c8fb51468af0356abc1d4a31d4af69b2623c35f5c47cfd863da01ba0e0a39d37bee0ce4b3fc9899a58a759d0c93e88e04cc4b5b385e179364f58235edfbbde2e4b6e8ccd7dc354a72aa039239ae270c52035d", 0xffffffff}, 0x6, 0x4) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="a4030000", @ANYRES16=0x0, @ANYBLOB="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"/926], 0x3a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000) 11.272422054s ago: executing program 4 (id=2058): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) (async) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) io_setup$auto(0x1, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 32) sysfs$auto(0x2, 0x10000000000002a, 0x81) (async, rerun: 32) connect$auto(0x3, 0x0, 0x58) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x191601, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async, rerun: 64) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) getxattrat$auto(r4, &(0x7f0000000080)='./file0\x00', 0x10001, &(0x7f0000000180)=':.)&)*\xdd\x00', &(0x7f00000001c0)={0x9, 0x7, 0x40}, 0x8001) 10.008862831s ago: executing program 4 (id=2060): r0 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x101002, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x03\x00\x00\x00\xc7\xd9\x88t?$\xe4W\x88Q\xe6e\xb2\xa5\xbbZ$\xc9\xa4@\xfb\xca|I\xb9\xdf\xb9\x81K\x02\xcb\t\x9f\x80\x187\xab\b\xd22\x14\xacj\x11\xd0\xa5E\x14\xc4n\xb7\xa4C\xb2C\x02\xb5L!\xc9_8\xe0r\xa8\a\x1d\x03/\xb0x\x83\xd8\x1d\xd3\x1e\xd0\xdd\x131\xca\x98\x96\xbc`\x06\a,\x88\x9dhT\xc6\x88\xa1\xd7\xe0\xb7\n\xbc\xbc\xf3\xd6\xf4g&\xed\xc2n\xee\x89\xfc\xf7F@\xf2\xddW;/%@\x185\x1ab\xf4*\xb8\x9a`D\xa3\xd0\xc3\x10\xff>\x87(\xba\xb4\xa0\x84\x89n9\x85\xa1\x8a\xce\x00'/176, 0x100081) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/binderfs/binder0\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc3, 0x8003, 0x10000fff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) (async) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc045}, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x420280, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) 9.388289708s ago: executing program 4 (id=2061): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x20000000008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xbfff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x4d5f, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315}, 0x1) 9.186434238s ago: executing program 2 (id=2063): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 8.556481359s ago: executing program 2 (id=2066): ioctl$auto(0xffffffffffffffff, 0x9, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001340)='/dev/binderfs/binder1\x00', 0x129102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D1\x00', 0x1202, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000001c0), 0x0) socket(0x11, 0x3, 0x400) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r3, &(0x7f0000005800)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000057c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='\f\r', @ANYRES16=0x0, @ANYBLOB="01002dbd700002080000051500000c07838040003b800700b8007d23000014002b0000000000000000000000ffffac14143004004d800800b600", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7400058004000280100064800c00120005000000000000004c0043802ed4584ba57295220ea81bfc57dd0ad6aa041637fd7a0f85fffdb314030eebc6ae6a356131ffeede0a4669b9fbeee146df75058649746eef598aa8a39cc2c807a458bc781ffae3cc08005100", @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0xd0c}, 0x1, 0x0, 0x0, 0x20044001}, 0x200081c) gettid() select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x8, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, &(0x7f00000000c0)) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1ac}}, 0x40000) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0x840, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @inferred=r1}}) 7.2711083s ago: executing program 1 (id=2069): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000004040)) r1 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0) read$auto_clk_dump_fops_(r1, &(0x7f00000005c0)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0xc1a5, 0x7, 0xeb4, r0, 0x10008000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x809, 0x2, 0x9, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/pagemap\x00', 0x400000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x2, 0x400, 0x100000, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x87, 0x2c, 0x4, 0x4}) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) ioctl$auto(0x3, 0x80000541b, 0x38) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f00000002c0)="81", 0x1) open(&(0x7f0000000200)='./file0\x00', 0x3e3580, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x0) mprotect$auto(0x78, 0x5, 0xfffffffefffffffe) io_uring_setup$auto(0x6, 0x0) 7.27087027s ago: executing program 2 (id=2070): close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0xd, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x8002) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vgem/name\x00', 0xa8201, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x261c2, 0x84) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=r1, r2, 0x8, 0x5, 0xffffffffffffffff, @relative_id=0x6, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) recvfrom$auto(0x3, 0x0, 0x1, 0xfc, 0x0, 0xfffffffffffffffd) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbduxsigma/remove_id\x00', 0x1c1643, 0x0) 6.535064879s ago: executing program 1 (id=2072): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x7f) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b300"/88, 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) 6.378978196s ago: executing program 2 (id=2073): socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0x1c94, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x80000008) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b959) close_range$auto(0x2, 0x8000, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x9, 0x7, 0x2e}, 0x6f4) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x4, 0xffffffffffffffff, 0x0) 6.19594949s ago: executing program 4 (id=2075): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mlockall$auto(0x7) getpid() select$auto(0x7, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0xff, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) 5.686365653s ago: executing program 0 (id=2076): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mlockall$auto(0x7) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0xff, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) 4.442788766s ago: executing program 1 (id=2077): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x48000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200000000000001, 0xffffffffff7f0005, 0x18) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2001, 0x0) mmap$auto(0x0, 0x4020009, 0x2, 0xbb3a, 0x401, 0xa000000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) mmap$auto(0x6, 0x5, 0x40200e0, 0x17, r1, 0x40000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r3 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r2}, 0x1) read$auto(0x3, 0x0, 0x80) 4.12145296s ago: executing program 2 (id=2078): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20881, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) mmap$auto(0x0, 0x200006, 0x0, 0x40eb1, r0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x80000, 0x106) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x418100, 0x155) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cpu/1/cpuid\x00', 0x30802, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x40045611, r1) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20001, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24ec00, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r3, 0x0) socket(0xa, 0x1, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x40107446, 0x0) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)=@query={@target_fd, 0x6, 0x200, 0x20000000, 0x1ff, @count=0x80000000, 0x0, 0x3, 0xfffffffffffffc00, 0xffffffffffffbf0f}, 0x40) open(0x0, 0x22240, 0x155) socket(0xa, 0x1, 0x84) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x48002, 0x0) 3.5631765s ago: executing program 4 (id=2079): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.116779727s ago: executing program 0 (id=2080): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown$auto(r0, 0xee00, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x10000000084, 0x77, 0x0, 0x14) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x28100, 0x0) ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x4, 0x7, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2.529130657s ago: executing program 0 (id=2081): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x3ab000, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video20/dev_debug\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x40c000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000100)={r2, 0x5}) socket(0x2, 0x3, 0x100) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) ioctl$auto_SNDCTL_DSP_NONBLOCK(r3, 0x500e, &(0x7f0000000380)="58942a7ce1eb772a583c96bbf6a68dca3705253b6146e4d7bbeab6ea5b0e97b5a46daa7ea2d6db6b85c12ed53e0bd27bf7f530703001b4a084ab930f060b15a7953e43572b3873dc32bcf9e724f0fa9133ef7d7cf1a8de579490d862607a23ef91df07907f0ef0e49349830e249920483ce49920fc944f6aba60ba8698e42c2e432a56fd") sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.365833778s ago: executing program 2 (id=2082): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x6, 0x4, 0xc) prctl$auto(0x349c, 0x1, 0x0, 0x5, 0x7) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0x7, 0xffffffffffffffff, 0x948b, 0x3, 0x15f4da0a, 0xe46b, 0x2, 0x62, 0x80000000, 0x0, 0x6d3c, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0xfffffff7, 0x41, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', &(0x7f00000000c0)=0x7ff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0xa, &(0x7f0000000080)={0x8001001}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30008881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x800, &(0x7f0000000100)={&(0x7f0000000040), 0x400096bc}, 0x8000000007, &(0x7f0000000340)="dc59bdf967d486f430b03d562364c9ff2962500c94b042abb51d35168c3e7430ffebb6c52e2b29c801c1677877895cb6f66db9e3db56d25c7783781e42ad5edbebf01363444ab4", 0xfff, 0x6}, 0xd}, 0x7, 0x4008) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 2.204366932s ago: executing program 0 (id=2083): process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x8000000000000001, 0x0, 0x0) r0 = socket(0x25, 0x800, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) ioctl$auto_X86_IOC_WRMSR_REGS(r1, 0xc02063a1, &(0x7f0000000440)=[0x7acb, 0x6, 0x9, 0x3, 0x4, 0x7f, 0x3, 0x2]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000426bd0f00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x24000014) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdf3) setsockopt$auto(r0, 0xd, 0xfffffffe, 0x0, 0x8) r4 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r4) 1.801570739s ago: executing program 0 (id=2084): mmap$auto(0x3, 0x81, 0xde, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb8d) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r0, 0x542e, r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r1, 0x4b4e, r1) socket(0x17, 0x4, 0x400000) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_configfs_file_operations_configfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) ioctl$auto(r3, 0x5646, r3) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x80000, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r3, 0x2400000, 0xffffffffffffffff) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x9, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xd58f) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x6, 0x400008, 0x5, 0x11, 0xffffffffffffffff, 0x7ffe) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.755282071s ago: executing program 4 (id=2085): mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x200000000003, 0xeb1, 0xfffffffffffffffa, 0x8) r0 = socket(0x2, 0x2, 0x1) r1 = io_uring_setup$auto(0x6, 0x0) sendto$auto(r1, 0x0, 0x800000000b, 0x9, &(0x7f0000000000)=@in={0x2, 0xfffb, @rand_addr=0x64010101}, 0x1c) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa040, 0x0) r2 = socket(0x2, 0x2, 0x1) r3 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r2, 0xf23, r2}, 0x10) r5 = bpf$auto(0x1, &(0x7f0000000080)=@test={r3, 0x1a, 0x7ff, 0x6, 0x3, 0x9, 0x5, 0x7, 0xff, 0x9, 0xff00000000000000, 0xe3, 0x1, 0x9, 0xfffffffc}, 0x5) unshare$auto(0x40000080) fsconfig$auto(0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x2d) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r5) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r4], 0x2c}, 0x1, 0x1000000}, 0x20000014) unshare$auto(0x20000) mmap$auto(0x11ce9b0f, 0x40009, 0xe2, 0x11, 0xffffffffffffffff, 0x200000028000) socketpair$auto(0x1e, 0x1, 0xffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(0x3, &(0x7f0000000340)={0x0, 0x10003}, 0xbe) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="1300000008000300"/18, @ANYRES16=r8, @ANYRES32=r10, @ANYBLOB="088561020000000000f4ff0000000000", @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040890) 1.470992283s ago: executing program 1 (id=2086): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0xfd, 0x4000c, 0x3, 0x9b70, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) ioctl$auto(0xffffffffffffffff, 0x3b93, r1) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0xb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) r2 = io_uring_setup$auto(0x52, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) socket(0x8, 0x80000, 0x4) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0xfffffffc], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0xd11e, 0x8000000000000000}}) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8f, 0x5) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x810}, 0x4a000) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 196.201714ms ago: executing program 1 (id=2087): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x20000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 98.654091ms ago: executing program 0 (id=2088): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=2089): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyse\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000240)={0x0, 0x4}, 0x6) (async) mq_open$auto(&(0x7f0000000040)='/dev/ttyS0\x00', 0x7, 0x4, &(0x7f0000000080)={0x7fffffffffffffff, 0x8, 0x2, 0x400}) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4a0842, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$auto_SO_RCVLOWAT(r1, 0x2, 0x12, &(0x7f0000000400)='7\x00\x00\xec\x007\xfe(\xbd\x1c\xa4\b\x00\x00\x00\x86\xf6\xa3\x00kO\xb9\xcd\xb0\x86\xe0yK\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:e\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xbc\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf', 0x1) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) write$auto(r2, 0x0, 0x400000000003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) (async) getsid$auto(0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x180, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): 5077][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.765096][T12528] RSP: 002b:00007f894ee52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.765115][T12528] RAX: ffffffffffffffda RBX: 00007f894e1e6090 RCX: 00007f894df8f7c9 [ 531.765127][T12528] RDX: 0000000000000802 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 531.765138][T12528] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.765149][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.765159][T12528] R13: 00007f894e1e6128 R14: 00007f894e1e6090 R15: 00007ffede0dab18 [ 531.765182][T12528] [ 533.090065][T12515] Process accounting resumed [ 533.926313][T12558] NFSD: Failed to start, no listeners configured. [ 539.507184][T12633] rtc_cmos 00:00: Alarms can be up to one day in the future [ 539.739561][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 539.747567][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 539.826430][T12653] FAULT_INJECTION: forcing a failure. [ 539.826430][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 539.863911][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 539.911763][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 539.928724][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.1.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.928755][T12653] Tainted: [L]=SOFTLOCKUP [ 539.928761][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.928772][T12653] Call Trace: [ 539.928778][T12653] [ 539.928785][T12653] dump_stack_lvl+0x16c/0x1f0 [ 539.928812][T12653] should_fail_ex+0x512/0x640 [ 539.928841][T12653] ? kmem_cache_alloc_noprof+0x62/0x770 [ 539.928865][T12653] should_failslab+0xc2/0x120 [ 539.928893][T12653] kmem_cache_alloc_noprof+0x83/0x770 [ 539.928914][T12653] ? __pfx_acct_collect+0x10/0x10 [ 539.928938][T12653] ? taskstats_exit+0x654/0xbe0 [ 539.928967][T12653] ? taskstats_exit+0x654/0xbe0 [ 539.928991][T12653] taskstats_exit+0x654/0xbe0 [ 539.929018][T12653] ? __pfx_taskstats_exit+0x10/0x10 [ 539.929047][T12653] ? exit_signals+0x388/0xb00 [ 539.929074][T12653] do_exit+0x5e4/0x2bd0 [ 539.929096][T12653] ? __pfx_do_exit+0x10/0x10 [ 539.929112][T12653] ? do_raw_spin_lock+0x12c/0x2b0 [ 539.929133][T12653] ? find_held_lock+0x2b/0x80 [ 539.929162][T12653] do_group_exit+0xd3/0x2a0 [ 539.929182][T12653] get_signal+0x2671/0x26d0 [ 539.929214][T12653] ? __pfx_get_signal+0x10/0x10 [ 539.929241][T12653] ? do_futex+0x122/0x350 [ 539.929263][T12653] arch_do_signal_or_restart+0x8f/0x7a0 [ 539.929298][T12653] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 539.929334][T12653] ? fdget_pos+0x2b8/0x370 [ 539.929362][T12653] ? __pfx___x64_sys_futex+0x10/0x10 [ 539.929387][T12653] exit_to_user_mode_loop+0x8c/0x540 [ 539.929412][T12653] do_syscall_64+0x4ee/0xf80 [ 539.929436][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.929455][T12653] RIP: 0033:0x7fb1b738f7c9 [ 539.929471][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.929489][T12653] RSP: 002b:00007fb1b81cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 539.929508][T12653] RAX: fffffffffffffe00 RBX: 00007fb1b75e5fa8 RCX: 00007fb1b738f7c9 [ 539.929520][T12653] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb1b75e5fa8 [ 539.929530][T12653] RBP: 00007fb1b75e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 539.929541][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.929551][T12653] R13: 00007fb1b75e6038 R14: 00007ffd47545d20 R15: 00007ffd47545e08 [ 539.929574][T12653] [ 540.459405][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 541.741391][T12682] FAULT_INJECTION: forcing a failure. [ 541.741391][T12682] name failslab, interval 1, probability 0, space 0, times 0 [ 541.797234][T12682] CPU: 0 UID: 0 PID: 12682 Comm: syz.4.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.797267][T12682] Tainted: [L]=SOFTLOCKUP [ 541.797274][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.797284][T12682] Call Trace: [ 541.797291][T12682] [ 541.797298][T12682] dump_stack_lvl+0x16c/0x1f0 [ 541.797335][T12682] should_fail_ex+0x512/0x640 [ 541.797366][T12682] ? kmem_cache_alloc_noprof+0x62/0x770 [ 541.797391][T12682] should_failslab+0xc2/0x120 [ 541.797423][T12682] kmem_cache_alloc_noprof+0x83/0x770 [ 541.797444][T12682] ? __pfx_acct_collect+0x10/0x10 [ 541.797469][T12682] ? taskstats_exit+0x654/0xbe0 [ 541.797499][T12682] ? taskstats_exit+0x654/0xbe0 [ 541.797523][T12682] taskstats_exit+0x654/0xbe0 [ 541.797550][T12682] ? __pfx_taskstats_exit+0x10/0x10 [ 541.797578][T12682] ? exit_signals+0x388/0xb00 [ 541.797605][T12682] do_exit+0x5e4/0x2bd0 [ 541.797626][T12682] ? __pfx_do_exit+0x10/0x10 [ 541.797643][T12682] ? do_raw_spin_lock+0x12c/0x2b0 [ 541.797663][T12682] ? find_held_lock+0x2b/0x80 [ 541.797690][T12682] do_group_exit+0xd3/0x2a0 [ 541.797708][T12682] get_signal+0x2671/0x26d0 [ 541.797738][T12682] ? putname+0xf5/0x1a0 [ 541.797755][T12682] ? __pfx_get_signal+0x10/0x10 [ 541.797781][T12682] ? do_futex+0x122/0x350 [ 541.797804][T12682] arch_do_signal_or_restart+0x8f/0x7a0 [ 541.797831][T12682] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 541.797862][T12682] ? __x64_sys_openat+0x174/0x210 [ 541.797883][T12682] ? __pfx___x64_sys_futex+0x10/0x10 [ 541.797908][T12682] exit_to_user_mode_loop+0x8c/0x540 [ 541.797934][T12682] do_syscall_64+0x4ee/0xf80 [ 541.797958][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.797977][T12682] RIP: 0033:0x7fc361d8f7c9 [ 541.797992][T12682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.798009][T12682] RSP: 002b:00007fc362c4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.798027][T12682] RAX: fffffffffffffe00 RBX: 00007fc361fe5fa8 RCX: 00007fc361d8f7c9 [ 541.798039][T12682] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc361fe5fa8 [ 541.798050][T12682] RBP: 00007fc361fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 541.798060][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.798071][T12682] R13: 00007fc361fe6038 R14: 00007ffdb38183a0 R15: 00007ffdb3818488 [ 541.798094][T12682] [ 542.231671][T12687] CIFS: VFS: Invalid SecurityFlags: [ 543.142506][T12703] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1454'. [ 543.980817][T12725] FAULT_INJECTION: forcing a failure. [ 543.980817][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 544.058909][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.4.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.058943][T12725] Tainted: [L]=SOFTLOCKUP [ 544.058950][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.058961][T12725] Call Trace: [ 544.058968][T12725] [ 544.058975][T12725] dump_stack_lvl+0x16c/0x1f0 [ 544.059003][T12725] should_fail_ex+0x512/0x640 [ 544.059037][T12725] should_failslab+0xc2/0x120 [ 544.059066][T12725] __kmalloc_cache_noprof+0x80/0x800 [ 544.059087][T12725] ? __task_pid_nr_ns+0x1f5/0x500 [ 544.059104][T12725] ? proc_thread_self_get_link+0x1c6/0x240 [ 544.059130][T12725] ? proc_thread_self_get_link+0x1c6/0x240 [ 544.059152][T12725] proc_thread_self_get_link+0x1c6/0x240 [ 544.059175][T12725] pick_link+0xb09/0x13b0 [ 544.059198][T12725] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 544.059223][T12725] step_into_slowpath+0x6c6/0xf50 [ 544.059251][T12725] ? __pfx_step_into_slowpath+0x10/0x10 [ 544.059278][T12725] ? lookup_fast+0x156/0x610 [ 544.059298][T12725] ? inode_permission+0x37b/0x640 [ 544.059328][T12725] link_path_walk+0xd26/0x1c70 [ 544.059359][T12725] path_openat+0x1bd/0x3140 [ 544.059385][T12725] ? do_syscall_64+0xcd/0xf80 [ 544.059406][T12725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.059431][T12725] ? __pfx_path_openat+0x10/0x10 [ 544.059466][T12725] do_filp_open+0x20b/0x470 [ 544.059493][T12725] ? __pfx_do_filp_open+0x10/0x10 [ 544.059537][T12725] ? alloc_fd+0x471/0x7d0 [ 544.059569][T12725] do_sys_openat2+0x11f/0x280 [ 544.059590][T12725] ? __pfx_do_sys_openat2+0x10/0x10 [ 544.059618][T12725] __x64_sys_openat+0x174/0x210 [ 544.059639][T12725] ? __pfx___x64_sys_openat+0x10/0x10 [ 544.059668][T12725] do_syscall_64+0xcd/0xf80 [ 544.059692][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.059710][T12725] RIP: 0033:0x7fc361d8f7c9 [ 544.059726][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.059744][T12725] RSP: 002b:00007fc362c29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.059762][T12725] RAX: ffffffffffffffda RBX: 00007fc361fe6090 RCX: 00007fc361d8f7c9 [ 544.059774][T12725] RDX: 0000000000000802 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 544.059785][T12725] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 544.059795][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.059806][T12725] R13: 00007fc361fe6128 R14: 00007fc361fe6090 R15: 00007ffdb3818488 [ 544.059829][T12725] [ 544.444681][T12728] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1459'. [ 544.468530][T12728] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1459'. [ 546.073641][T12753] usbcore.quirks: string doesn't fit in 127 chars. [ 547.622744][T12786] raw_sendmsg: syz.0.1470 forgot to set AF_INET. Fix it! [ 548.287287][T12799] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 548.357382][T12805] usbcore.quirks: string doesn't fit in 127 chars. [ 551.840298][T12858] netlink: 'syz.0.1484': attribute type 64 has an invalid length. [ 551.898124][T12858] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1484'. [ 552.202886][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 552.222285][T12860] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1485'. syzkaller syzkaller login: [ 553.545938][T12883] Line length is too long: Should be less than 4094 [ 554.719230][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1496'. [ 554.871830][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.071965][T12915] FAULT_INJECTION: forcing a failure. [ 555.071965][T12915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.150254][T12915] CPU: 0 UID: 0 PID: 12915 Comm: syz.2.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.150294][T12915] Tainted: [L]=SOFTLOCKUP [ 555.150301][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.150312][T12915] Call Trace: [ 555.150319][T12915] [ 555.150327][T12915] dump_stack_lvl+0x16c/0x1f0 [ 555.150356][T12915] should_fail_ex+0x512/0x640 [ 555.150390][T12915] should_fail_alloc_page+0xe7/0x130 [ 555.150421][T12915] prepare_alloc_pages+0x401/0x670 [ 555.150450][T12915] ? kernel_text_address+0x8d/0x100 [ 555.150475][T12915] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 555.150508][T12915] ? stack_trace_save+0x8e/0xc0 [ 555.150538][T12915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 555.150562][T12915] ? trace_mm_page_alloc+0x11b/0x180 [ 555.150595][T12915] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 555.150617][T12915] ? __pmd_alloc+0xbf/0x9c0 [ 555.150643][T12915] ? __handle_mm_fault+0xbeb/0x2bb0 [ 555.150661][T12915] ? handle_mm_fault+0x3fe/0xad0 [ 555.150678][T12915] ? __get_user_pages+0x54e/0x3590 [ 555.150703][T12915] ? populate_vma_page_range+0x267/0x3f0 [ 555.150731][T12915] ? __mm_populate+0x1d8/0x380 [ 555.150757][T12915] ? vm_mmap_pgoff+0x37f/0x470 [ 555.150781][T12915] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 555.150805][T12915] ? __x64_sys_mmap+0x125/0x190 [ 555.150823][T12915] ? do_syscall_64+0xcd/0xf80 [ 555.150844][T12915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.150863][T12915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.150893][T12915] ? policy_nodemask+0xea/0x4e0 [ 555.150923][T12915] alloc_pages_mpol+0x1fb/0x550 [ 555.150951][T12915] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 555.150986][T12915] alloc_pages_noprof+0x131/0x390 [ 555.151015][T12915] pte_alloc_one+0x1e/0x3d0 [ 555.151041][T12915] __pte_alloc+0x6d/0x3f0 [ 555.151066][T12915] ? __pfx___pte_alloc+0x10/0x10 [ 555.151093][T12915] ? do_raw_spin_lock+0x12c/0x2b0 [ 555.151115][T12915] ? find_held_lock+0x2b/0x80 [ 555.151140][T12915] do_anonymous_page+0x1092/0x2190 [ 555.151168][T12915] ? do_raw_spin_unlock+0x172/0x230 [ 555.151190][T12915] ? _raw_spin_unlock+0x28/0x50 [ 555.151209][T12915] ? __pmd_alloc+0x6aa/0x9c0 [ 555.151239][T12915] __handle_mm_fault+0x1ecf/0x2bb0 [ 555.151264][T12915] ? __pfx___handle_mm_fault+0x10/0x10 [ 555.151304][T12915] handle_mm_fault+0x3fe/0xad0 [ 555.151328][T12915] __get_user_pages+0x54e/0x3590 [ 555.151365][T12915] ? __pfx___get_user_pages+0x10/0x10 [ 555.151400][T12915] populate_vma_page_range+0x267/0x3f0 [ 555.151430][T12915] ? __pfx_populate_vma_page_range+0x10/0x10 [ 555.151459][T12915] ? __pfx_find_vma_intersection+0x10/0x10 [ 555.151487][T12915] ? do_mmap+0x69c/0x1210 [ 555.151516][T12915] __mm_populate+0x1d8/0x380 [ 555.151546][T12915] ? __pfx___mm_populate+0x10/0x10 [ 555.151577][T12915] ? up_write+0x282/0x4e0 [ 555.151599][T12915] vm_mmap_pgoff+0x37f/0x470 [ 555.151628][T12915] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 555.151659][T12915] ? __x64_sys_futex+0x1e0/0x4c0 [ 555.151679][T12915] ? __x64_sys_futex+0x1e9/0x4c0 [ 555.151703][T12915] ksys_mmap_pgoff+0x7d/0x5c0 [ 555.151729][T12915] ? xfd_validate_state+0x61/0x180 [ 555.151746][T12915] ? __pfx_ksys_write+0x10/0x10 [ 555.151775][T12915] __x64_sys_mmap+0x125/0x190 [ 555.151797][T12915] do_syscall_64+0xcd/0xf80 [ 555.151822][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.151841][T12915] RIP: 0033:0x7f016b38f7c9 [ 555.151858][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.151877][T12915] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 555.151896][T12915] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 555.151908][T12915] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 555.151920][T12915] RBP: 00007f016b413f91 R08: 0000000000000002 R09: 0000000000008000 [ 555.151931][T12915] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 555.151942][T12915] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 555.151966][T12915] [ 556.519248][T12906] bridge_slave_1 (unregistering): left allmulticast mode [ 556.538582][T12906] bridge_slave_1 (unregistering): left promiscuous mode [ 556.547118][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.833005][T12935] binder: 12928:12935 ioctl 400c620e 2000000000c0 returned -22 [ 556.946255][T12935] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 557.471782][T12950] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1507'. [ 558.096821][T12964] FAULT_INJECTION: forcing a failure. [ 558.096821][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 558.160966][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.2.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.161001][T12964] Tainted: [L]=SOFTLOCKUP [ 558.161008][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.161019][T12964] Call Trace: [ 558.161026][T12964] [ 558.161034][T12964] dump_stack_lvl+0x16c/0x1f0 [ 558.161062][T12964] should_fail_ex+0x512/0x640 [ 558.161092][T12964] ? __kmalloc_noprof+0xca/0x910 [ 558.161115][T12964] should_failslab+0xc2/0x120 [ 558.161144][T12964] __kmalloc_noprof+0xeb/0x910 [ 558.161164][T12964] ? lsm_blob_alloc+0x68/0x90 [ 558.161198][T12964] ? lsm_blob_alloc+0x68/0x90 [ 558.161220][T12964] lsm_blob_alloc+0x68/0x90 [ 558.161243][T12964] security_sk_alloc+0x2f/0x270 [ 558.161272][T12964] sk_prot_alloc+0xfb/0x2a0 [ 558.161298][T12964] sk_alloc+0x36/0xe30 [ 558.161316][T12964] inet_create+0x3a1/0x1040 [ 558.161334][T12964] ? inet_create+0x93/0x1040 [ 558.161354][T12964] __sock_create+0x339/0x8a0 [ 558.161384][T12964] udp_sock_create4+0xa6/0x450 [ 558.161408][T12964] ? __pfx_udp_sock_create4+0x10/0x10 [ 558.161436][T12964] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.161459][T12964] ? crng_make_state+0x48e/0x6c0 [ 558.161489][T12964] rxrpc_open_socket+0x4f5/0x6b0 [ 558.161518][T12964] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 558.161558][T12964] ? rcu_is_watching+0x12/0xc0 [ 558.161587][T12964] rxrpc_lookup_local+0xa01/0x1220 [ 558.161620][T12964] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 558.161651][T12964] ? __local_bh_enable_ip+0xa4/0x120 [ 558.161681][T12964] rxrpc_sendmsg+0x37e/0x680 [ 558.161703][T12964] sock_write_iter+0x566/0x610 [ 558.161728][T12964] ? __pfx_sock_write_iter+0x10/0x10 [ 558.161761][T12964] ? bpf_lsm_file_permission+0x9/0x10 [ 558.161783][T12964] ? security_file_permission+0x71/0x210 [ 558.161803][T12964] ? rw_verify_area+0xcf/0x6c0 [ 558.161828][T12964] vfs_write+0x7d3/0x11d0 [ 558.161855][T12964] ? __pfx_sock_write_iter+0x10/0x10 [ 558.161882][T12964] ? __pfx_vfs_write+0x10/0x10 [ 558.161906][T12964] ? find_held_lock+0x2b/0x80 [ 558.161948][T12964] ksys_write+0x1f8/0x250 [ 558.161975][T12964] ? __pfx_ksys_write+0x10/0x10 [ 558.162007][T12964] do_syscall_64+0xcd/0xf80 [ 558.162032][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.162051][T12964] RIP: 0033:0x7f016b38f7c9 [ 558.162067][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.162087][T12964] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.162106][T12964] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 558.162118][T12964] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 558.162129][T12964] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.162141][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.162152][T12964] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 558.162177][T12964] [ 558.917407][T12972] FAULT_INJECTION: forcing a failure. [ 558.917407][T12972] name failslab, interval 1, probability 0, space 0, times 0 [ 558.970234][T12972] CPU: 0 UID: 0 PID: 12972 Comm: syz.2.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.970268][T12972] Tainted: [L]=SOFTLOCKUP [ 558.970276][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.970288][T12972] Call Trace: [ 558.970295][T12972] [ 558.970302][T12972] dump_stack_lvl+0x16c/0x1f0 [ 558.970331][T12972] should_fail_ex+0x512/0x640 [ 558.970361][T12972] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 558.970387][T12972] should_failslab+0xc2/0x120 [ 558.970415][T12972] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 558.970439][T12972] ? __d_alloc+0x35/0xa80 [ 558.970472][T12972] ? __d_alloc+0x35/0xa80 [ 558.970499][T12972] __d_alloc+0x35/0xa80 [ 558.970530][T12972] d_alloc_parallel+0x111/0x1510 [ 558.970554][T12972] ? __lock_acquire+0x436/0x2890 [ 558.970575][T12972] ? __lock_acquire+0x436/0x2890 [ 558.970599][T12972] ? __pfx_d_alloc_parallel+0x10/0x10 [ 558.970625][T12972] ? lockdep_init_map_type+0x5c/0x270 [ 558.970644][T12972] ? lockdep_init_map_type+0x5c/0x270 [ 558.970667][T12972] __lookup_slow+0x193/0x460 [ 558.970688][T12972] ? __pfx___lookup_slow+0x10/0x10 [ 558.970720][T12972] ? __d_lookup+0x266/0x4a0 [ 558.970747][T12972] lookup_slow+0x50/0x70 [ 558.970767][T12972] link_path_walk+0x12d8/0x1c70 [ 558.970800][T12972] path_openat+0x1bd/0x3140 [ 558.970826][T12972] ? do_syscall_64+0xcd/0xf80 [ 558.970847][T12972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.970873][T12972] ? __pfx_path_openat+0x10/0x10 [ 558.970909][T12972] do_filp_open+0x20b/0x470 [ 558.970937][T12972] ? __pfx_do_filp_open+0x10/0x10 [ 558.970982][T12972] ? alloc_fd+0x471/0x7d0 [ 558.971014][T12972] do_sys_openat2+0x11f/0x280 [ 558.971036][T12972] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.971065][T12972] __x64_sys_openat+0x174/0x210 [ 558.971086][T12972] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.971123][T12972] do_syscall_64+0xcd/0xf80 [ 558.971149][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.971167][T12972] RIP: 0033:0x7f016b38f7c9 [ 558.971183][T12972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.971202][T12972] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.971221][T12972] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 558.971234][T12972] RDX: 0000000000000500 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 558.971246][T12972] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.971258][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.971270][T12972] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 558.971295][T12972] [ 560.324195][T13000] FAULT_INJECTION: forcing a failure. [ 560.324195][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 560.406955][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.0.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.406990][T13000] Tainted: [L]=SOFTLOCKUP [ 560.406997][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.407008][T13000] Call Trace: [ 560.407015][T13000] [ 560.407023][T13000] dump_stack_lvl+0x16c/0x1f0 [ 560.407052][T13000] should_fail_ex+0x512/0x640 [ 560.407086][T13000] ? __kmalloc_cache_noprof+0x5f/0x800 [ 560.407110][T13000] should_failslab+0xc2/0x120 [ 560.407148][T13000] __kmalloc_cache_noprof+0x80/0x800 [ 560.407170][T13000] ? __pfx_find_ucounts+0x10/0x10 [ 560.407201][T13000] ? alloc_ucounts+0x13d/0x5c0 [ 560.407221][T13000] ? alloc_ucounts+0x13d/0x5c0 [ 560.407237][T13000] alloc_ucounts+0x13d/0x5c0 [ 560.407254][T13000] ? __pfx_alloc_ucounts+0x10/0x10 [ 560.407277][T13000] set_cred_ucounts+0xcd/0x200 [ 560.407302][T13000] __sys_setuid+0x2b6/0x440 [ 560.407327][T13000] do_syscall_64+0xcd/0xf80 [ 560.407358][T13000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.407377][T13000] RIP: 0033:0x7f894df8f7c9 [ 560.407395][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.407414][T13000] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 560.407433][T13000] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 560.407446][T13000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 560.407457][T13000] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.407469][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.407480][T13000] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 560.407503][T13000] [ 560.951258][T13006] [U] [ 560.954127][T13006] [U] [ 560.956837][T13006] [U] [ 560.959548][T13006] [U] [ 560.963877][T13006] [U] [ 560.966785][T13006] [U] [ 560.969492][T13006] [U] [ 560.972287][T13006] [U] [ 560.975524][T13006] [U] [ 560.978233][T13006] [U] [ 560.981018][T13006] [U] [ 560.983891][T13006] [U] [ 560.988060][T13006] [U] [ 560.990785][T13006] [U] [ 560.993576][T13006] [U] [ 560.996280][T13006] [U] [ 561.017579][T13006] [U] [ 561.020293][T13006] [U] ~?ɼNht [ 561.025409][T13006] [U] kФ [ 561.028609][T13006] [U] `OAXM#HCۻY Mʀus1g>gNCu/U U׀DRk [ 561.037110][T13006] [U] [ 561.039962][T13006] [U] wQj^be̽jm[XH:pg,U?&jYZJ8v[^c\…aר [ 561.048142][T13006] [U] 4!-PF{64h( 7C$XW 7`\a쪇(>zp@Z f֏BuXCsj\ 4ea("Xaǭt_X_Ⱦ@45AOΛ\RQҴUۣKܳN/[CW[\WwtUgHU}f8VYSu1jj@})eZpl});Px%zkUW֛痀-bʂz["s+-1Mt]EwB߰pcMH?YA.%EF qpX [ 561.080040][T13006] [U] p6N%ڵ4;V8sPOi~v Zcfh漪{Jґ} 0GOm"gCϒlhdUo8)Zxd`"5oN'+=eb+{6*C^\U [ 561.138264][T13006] [U] p'e !* 8`"{jڛd,yOJqx- [ 561.145269][T13006] [U] ăN:nGvW=m晘hy}ȑ՘Qq [ 561.152329][T13006] [U] [ 561.449846][T13010] FAULT_INJECTION: forcing a failure. [ 561.449846][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 561.516274][T13010] CPU: 0 UID: 0 PID: 13010 Comm: syz.0.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.516308][T13010] Tainted: [L]=SOFTLOCKUP [ 561.516316][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.516327][T13010] Call Trace: [ 561.516339][T13010] [ 561.516347][T13010] dump_stack_lvl+0x16c/0x1f0 [ 561.516376][T13010] should_fail_ex+0x512/0x640 [ 561.516406][T13010] ? __kmalloc_noprof+0xca/0x910 [ 561.516430][T13010] should_failslab+0xc2/0x120 [ 561.516459][T13010] __kmalloc_noprof+0xeb/0x910 [ 561.516480][T13010] ? lsm_blob_alloc+0x68/0x90 [ 561.516507][T13010] ? lsm_blob_alloc+0x68/0x90 [ 561.516528][T13010] lsm_blob_alloc+0x68/0x90 [ 561.516552][T13010] security_sk_alloc+0x2f/0x270 [ 561.516581][T13010] sk_prot_alloc+0xfb/0x2a0 [ 561.516607][T13010] sk_alloc+0x36/0xe30 [ 561.516625][T13010] inet_create+0x3a1/0x1040 [ 561.516643][T13010] ? inet_create+0x93/0x1040 [ 561.516664][T13010] __sock_create+0x339/0x8a0 [ 561.516693][T13010] udp_sock_create4+0xa6/0x450 [ 561.516717][T13010] ? __pfx_udp_sock_create4+0x10/0x10 [ 561.516744][T13010] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.516767][T13010] ? crng_make_state+0x48e/0x6c0 [ 561.516826][T13010] rxrpc_open_socket+0x4f5/0x6b0 [ 561.516857][T13010] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 561.516898][T13010] ? rcu_is_watching+0x12/0xc0 [ 561.516927][T13010] rxrpc_lookup_local+0xa01/0x1220 [ 561.516961][T13010] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 561.516993][T13010] ? __local_bh_enable_ip+0xa4/0x120 [ 561.517023][T13010] rxrpc_sendmsg+0x37e/0x680 [ 561.517045][T13010] sock_write_iter+0x566/0x610 [ 561.517070][T13010] ? __pfx_sock_write_iter+0x10/0x10 [ 561.517103][T13010] ? bpf_lsm_file_permission+0x9/0x10 [ 561.517126][T13010] ? security_file_permission+0x71/0x210 [ 561.517146][T13010] ? rw_verify_area+0xcf/0x6c0 [ 561.517180][T13010] vfs_write+0x7d3/0x11d0 [ 561.517207][T13010] ? __pfx_sock_write_iter+0x10/0x10 [ 561.517234][T13010] ? __pfx_vfs_write+0x10/0x10 [ 561.517258][T13010] ? find_held_lock+0x2b/0x80 [ 561.517296][T13010] ksys_write+0x1f8/0x250 [ 561.517322][T13010] ? __pfx_ksys_write+0x10/0x10 [ 561.517359][T13010] do_syscall_64+0xcd/0xf80 [ 561.517385][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.517404][T13010] RIP: 0033:0x7f894df8f7c9 [ 561.517420][T13010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.517439][T13010] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 561.517457][T13010] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 561.517469][T13010] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 561.517480][T13010] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.517492][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.517503][T13010] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 561.517527][T13010] [ 562.446948][T13006] [U] ϘCzmXTpXz"}[|T/sp=ur+ڠ`k~R=A?x ɯMpUDz:)uAY3@ٸ56K"َwB'Hn+?buM=r)M뭲]NIyTMui A:A1>r [ 563.061090][T13013] Process accounting paused [ 563.274651][T13040] FAULT_INJECTION: forcing a failure. [ 563.274651][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 563.330453][T13040] CPU: 0 UID: 0 PID: 13040 Comm: syz.0.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.330487][T13040] Tainted: [L]=SOFTLOCKUP [ 563.330494][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.330506][T13040] Call Trace: [ 563.330512][T13040] [ 563.330520][T13040] dump_stack_lvl+0x16c/0x1f0 [ 563.330549][T13040] should_fail_ex+0x512/0x640 [ 563.330582][T13040] should_failslab+0xc2/0x120 [ 563.330611][T13040] __kmalloc_cache_noprof+0x80/0x800 [ 563.330632][T13040] ? __task_pid_nr_ns+0x1f5/0x500 [ 563.330649][T13040] ? proc_self_get_link+0x1a9/0x230 [ 563.330675][T13040] ? proc_self_get_link+0x1a9/0x230 [ 563.330695][T13040] proc_self_get_link+0x1a9/0x230 [ 563.330718][T13040] pick_link+0xb09/0x13b0 [ 563.330742][T13040] ? __pfx_proc_self_get_link+0x10/0x10 [ 563.330766][T13040] step_into_slowpath+0x6c6/0xf50 [ 563.330795][T13040] ? __pfx_step_into_slowpath+0x10/0x10 [ 563.330822][T13040] ? lookup_fast+0x156/0x610 [ 563.330843][T13040] ? inode_permission+0x37b/0x640 [ 563.330866][T13040] link_path_walk+0xd26/0x1c70 [ 563.330898][T13040] path_openat+0x1bd/0x3140 [ 563.330924][T13040] ? do_syscall_64+0xcd/0xf80 [ 563.330947][T13040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.330972][T13040] ? __pfx_path_openat+0x10/0x10 [ 563.331008][T13040] do_filp_open+0x20b/0x470 [ 563.331036][T13040] ? __pfx_do_filp_open+0x10/0x10 [ 563.331079][T13040] ? alloc_fd+0x471/0x7d0 [ 563.331112][T13040] do_sys_openat2+0x11f/0x280 [ 563.331133][T13040] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.331162][T13040] __x64_sys_openat+0x174/0x210 [ 563.331184][T13040] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.331213][T13040] do_syscall_64+0xcd/0xf80 [ 563.331238][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.331256][T13040] RIP: 0033:0x7f894df8e010 [ 563.331273][T13040] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 563.331291][T13040] RSP: 002b:00007f894ee72f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 563.331310][T13040] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f894df8e010 [ 563.331323][T13040] RDX: 0000000000000002 RSI: 00007f894ee72fa0 RDI: 00000000ffffff9c [ 563.331334][T13040] RBP: 00007f894ee72fa0 R08: 0000000000000000 R09: 0000000000000000 [ 563.331345][T13040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 563.331365][T13040] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 563.331389][T13040] [ 564.365572][T13057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1532'. [ 565.719495][T13083] capability: warning: `syz.4.1539' uses deprecated v2 capabilities in a way that may be insecure [ 566.113711][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.121285][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.964758][T13121] warning: `syz.0.1546' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 569.287193][T13152] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1552'. [ 570.106277][T13162] FAULT_INJECTION: forcing a failure. [ 570.106277][T13162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.202264][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.0.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.202297][T13162] Tainted: [L]=SOFTLOCKUP [ 570.202304][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.202317][T13162] Call Trace: [ 570.202323][T13162] [ 570.202332][T13162] dump_stack_lvl+0x16c/0x1f0 [ 570.202368][T13162] should_fail_ex+0x512/0x640 [ 570.202403][T13162] _copy_from_iter+0x2a4/0x16c0 [ 570.202439][T13162] ? __pfx__copy_from_iter+0x10/0x10 [ 570.202474][T13162] ? __pfx___might_resched+0x10/0x10 [ 570.202511][T13162] file_tty_write.constprop.0+0x487/0x9b0 [ 570.202543][T13162] redirected_tty_write+0xd4/0x120 [ 570.202567][T13162] vfs_write+0x7d3/0x11d0 [ 570.202595][T13162] ? __pfx_redirected_tty_write+0x10/0x10 [ 570.202622][T13162] ? __pfx_vfs_write+0x10/0x10 [ 570.202647][T13162] ? find_held_lock+0x2b/0x80 [ 570.202686][T13162] ksys_write+0x12a/0x250 [ 570.202713][T13162] ? __pfx_ksys_write+0x10/0x10 [ 570.202747][T13162] do_syscall_64+0xcd/0xf80 [ 570.202773][T13162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.202793][T13162] RIP: 0033:0x7f894df8f7c9 [ 570.202809][T13162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.202828][T13162] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.202847][T13162] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 570.202860][T13162] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 570.202871][T13162] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 570.202883][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.202895][T13162] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 570.202919][T13162] [ 571.922489][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1558'. [ 571.972930][T13189] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 572.629720][T12323] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 573.203727][T13209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 573.259494][T13209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.335537][T13209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.406483][T13209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 573.617243][T13215] tipc: Started in network mode [ 573.635275][T13215] tipc: Node identity ffffffff, cluster identity 4711 [ 573.675606][T13215] tipc: Node number set to 4294967295 [ 573.993999][T13220] FAULT_INJECTION: forcing a failure. [ 573.993999][T13220] name failslab, interval 1, probability 0, space 0, times 0 [ 574.051321][T13220] CPU: 0 UID: 0 PID: 13220 Comm: syz.2.1567 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.051357][T13220] Tainted: [L]=SOFTLOCKUP [ 574.051365][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.051376][T13220] Call Trace: [ 574.051384][T13220] [ 574.051392][T13220] dump_stack_lvl+0x16c/0x1f0 [ 574.051420][T13220] should_fail_ex+0x512/0x640 [ 574.051450][T13220] ? __kmalloc_noprof+0xca/0x910 [ 574.051474][T13220] should_failslab+0xc2/0x120 [ 574.051503][T13220] __kmalloc_noprof+0xeb/0x910 [ 574.051523][T13220] ? lsm_blob_alloc+0x68/0x90 [ 574.051550][T13220] ? lsm_blob_alloc+0x68/0x90 [ 574.051572][T13220] lsm_blob_alloc+0x68/0x90 [ 574.051595][T13220] security_sk_alloc+0x2f/0x270 [ 574.051625][T13220] sk_prot_alloc+0xfb/0x2a0 [ 574.051652][T13220] sk_alloc+0x36/0xe30 [ 574.051670][T13220] inet_create+0x3a1/0x1040 [ 574.051688][T13220] ? inet_create+0x93/0x1040 [ 574.051708][T13220] __sock_create+0x339/0x8a0 [ 574.051738][T13220] udp_sock_create4+0xa6/0x450 [ 574.051762][T13220] ? __pfx_udp_sock_create4+0x10/0x10 [ 574.051788][T13220] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.051812][T13220] ? crng_make_state+0x48e/0x6c0 [ 574.051841][T13220] rxrpc_open_socket+0x4f5/0x6b0 [ 574.051871][T13220] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 574.051910][T13220] ? rcu_is_watching+0x12/0xc0 [ 574.051940][T13220] rxrpc_lookup_local+0xa01/0x1220 [ 574.051972][T13220] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 574.052003][T13220] ? __local_bh_enable_ip+0xa4/0x120 [ 574.052040][T13220] rxrpc_sendmsg+0x37e/0x680 [ 574.052061][T13220] sock_write_iter+0x566/0x610 [ 574.052087][T13220] ? __pfx_sock_write_iter+0x10/0x10 [ 574.052119][T13220] ? bpf_lsm_file_permission+0x9/0x10 [ 574.052141][T13220] ? security_file_permission+0x71/0x210 [ 574.052162][T13220] ? rw_verify_area+0xcf/0x6c0 [ 574.052189][T13220] vfs_write+0x7d3/0x11d0 [ 574.052216][T13220] ? __pfx_sock_write_iter+0x10/0x10 [ 574.052243][T13220] ? __pfx_vfs_write+0x10/0x10 [ 574.052267][T13220] ? find_held_lock+0x2b/0x80 [ 574.052304][T13220] ksys_write+0x1f8/0x250 [ 574.052330][T13220] ? __pfx_ksys_write+0x10/0x10 [ 574.052368][T13220] do_syscall_64+0xcd/0xf80 [ 574.052393][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.052412][T13220] RIP: 0033:0x7f016b38f7c9 [ 574.052428][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.052447][T13220] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.052466][T13220] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 574.052478][T13220] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 574.052490][T13220] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.052501][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.052512][T13220] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 574.052537][T13220] [ 574.935353][T13224] zero sized request [ 575.283320][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.295391][T12323] Bluetooth: hci1: command 0x0c1a tx timeout [ 575.360083][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 575.422328][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 576.323508][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1571'. [ 577.147909][T13253] FAULT_INJECTION: forcing a failure. [ 577.147909][T13253] name failslab, interval 1, probability 0, space 0, times 0 [ 577.221704][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.2.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.221739][T13253] Tainted: [L]=SOFTLOCKUP [ 577.221746][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.221758][T13253] Call Trace: [ 577.221765][T13253] [ 577.221773][T13253] dump_stack_lvl+0x16c/0x1f0 [ 577.221802][T13253] should_fail_ex+0x512/0x640 [ 577.221831][T13253] ? __kmalloc_noprof+0xca/0x910 [ 577.221855][T13253] should_failslab+0xc2/0x120 [ 577.221884][T13253] __kmalloc_noprof+0xeb/0x910 [ 577.221904][T13253] ? lsm_blob_alloc+0x68/0x90 [ 577.221931][T13253] ? lsm_blob_alloc+0x68/0x90 [ 577.221952][T13253] lsm_blob_alloc+0x68/0x90 [ 577.221976][T13253] security_sk_alloc+0x2f/0x270 [ 577.222014][T13253] sk_prot_alloc+0xfb/0x2a0 [ 577.222041][T13253] sk_alloc+0x36/0xe30 [ 577.222059][T13253] inet_create+0x3a1/0x1040 [ 577.222078][T13253] ? inet_create+0x93/0x1040 [ 577.222098][T13253] __sock_create+0x339/0x8a0 [ 577.222128][T13253] udp_sock_create4+0xa6/0x450 [ 577.222154][T13253] ? __pfx_udp_sock_create4+0x10/0x10 [ 577.222181][T13253] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.222204][T13253] ? crng_make_state+0x48e/0x6c0 [ 577.222240][T13253] rxrpc_open_socket+0x4f5/0x6b0 [ 577.222270][T13253] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 577.222310][T13253] ? rcu_is_watching+0x12/0xc0 [ 577.222340][T13253] rxrpc_lookup_local+0xa01/0x1220 [ 577.222372][T13253] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 577.222405][T13253] ? __local_bh_enable_ip+0xa4/0x120 [ 577.222434][T13253] rxrpc_sendmsg+0x37e/0x680 [ 577.222456][T13253] sock_write_iter+0x566/0x610 [ 577.222480][T13253] ? __pfx_sock_write_iter+0x10/0x10 [ 577.222513][T13253] ? bpf_lsm_file_permission+0x9/0x10 [ 577.222536][T13253] ? security_file_permission+0x71/0x210 [ 577.222556][T13253] ? rw_verify_area+0xcf/0x6c0 [ 577.222582][T13253] vfs_write+0x7d3/0x11d0 [ 577.222608][T13253] ? __pfx_sock_write_iter+0x10/0x10 [ 577.222636][T13253] ? __pfx_vfs_write+0x10/0x10 [ 577.222659][T13253] ? find_held_lock+0x2b/0x80 [ 577.222697][T13253] ksys_write+0x1f8/0x250 [ 577.222723][T13253] ? __pfx_ksys_write+0x10/0x10 [ 577.222756][T13253] do_syscall_64+0xcd/0xf80 [ 577.222781][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.222800][T13253] RIP: 0033:0x7f016b38f7c9 [ 577.222817][T13253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.222835][T13253] RSP: 002b:00007f01695f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.222854][T13253] RAX: ffffffffffffffda RBX: 00007f016b5e6090 RCX: 00007f016b38f7c9 [ 577.222867][T13253] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000005 [ 577.222878][T13253] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.222889][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.222901][T13253] R13: 00007f016b5e6128 R14: 00007f016b5e6090 R15: 00007ffd66ea5b68 [ 577.222925][T13253] [ 577.929355][T13267] [U] [ 577.932184][T13267] [U] [ 577.934911][T13267] [U] [ 577.937628][T13267] [U] [ 577.981042][T13267] [U] [ 577.983793][T13267] [U] [ 577.986599][T13267] [U] [ 577.989307][T13267] [U] [ 578.010980][T13267] [U] [ 578.013730][T13267] [U] [ 578.016528][T13267] [U] [ 578.019233][T13267] [U] [ 578.091425][T13267] [U] [ 578.094203][T13267] [U] $%pA<"B@ |x!x6Sנ~ [ 578.100785][T13267] [U] 2u [ 578.103722][T13267] [U] kg"5J=Yϟ@fH^5 [ 578.109607][T13267] [U] p_h|5dB-m [ 578.113929][T13267] [U] V4)A$D)[ [ 578.118272][T13267] [U] nv\^- +-HN* ]W tMg-Mm*t@bv* [ 578.126946][T13267] [U] R 8JVwtTvĢ2ڨ à@tGP˰7iAb AM9S9i [ 578.136677][T13267] [U] iD.oewnr2G\}34Ii8JޭA'q7w#fי'ۍV M*I{ejv%@G [ 578.149430][T13267] [U] F Ǡ~s)g6\`1h^݋zi#ELE3 [ 578.155184][T13267] [U] _SˬkU[!!FMR@07ӅLm³{cPM~C[КW'&*Ip-Ū5kWtzF`9p]&r^Bu04%t䐌~v'n0>w܊[ɀ"*`dGgM?6Vvpi [ 578.174712][T13267] [U] * [ 578.177557][T13267] [U] IW7eѸXBWa$UسYd/m@f\1`irG+ [ 578.184405][T13267] [U] =*:/DF'5zbFk4Uf0j|RQ&\{_d׹~e$p`?PH4RXb,&7OJ5PZ9,1ts|K~X{L/Uf_~xi}, "~ĩY!u>Ky&"h?(+N>Kh Zw [ 578.205151][T13267] [U] u:v]C.(ϣV#Or. صwp҃${fк؏+&(ъPH{8v'YH.jTBհw"likד> cI[;GS92@;9o iERIv U [ 578.222444][T13267] [U] 13ӎ?Z'K [ 578.226446][T13267] [U] fIi:Ul4T JR [ 581.998748][T13331] dump_stack_lvl+0x16c/0x1f0 [ 581.998776][T13331] should_fail_ex+0x512/0x640 [ 581.998809][T13331] get_futex_key+0x293/0x15f0 [ 581.998832][T13331] ? __pfx_get_futex_key+0x10/0x10 [ 581.998858][T13331] futex_wake+0xea/0x530 [ 581.998885][T13331] ? __pfx_futex_wake+0x10/0x10 [ 581.998919][T13331] do_futex+0x1e3/0x350 [ 581.998940][T13331] ? __pfx_do_futex+0x10/0x10 [ 581.998960][T13331] ? __might_fault+0xe3/0x190 [ 581.998994][T13331] mm_release+0x24e/0x300 [ 581.999021][T13331] do_exit+0x69e/0x2bd0 [ 581.999042][T13331] ? __pfx_do_exit+0x10/0x10 [ 581.999059][T13331] ? do_raw_spin_lock+0x12c/0x2b0 [ 581.999080][T13331] ? find_held_lock+0x2b/0x80 [ 581.999107][T13331] do_group_exit+0xd3/0x2a0 [ 581.999126][T13331] get_signal+0x2671/0x26d0 [ 581.999159][T13331] ? __pfx_get_signal+0x10/0x10 [ 581.999186][T13331] ? do_futex+0x122/0x350 [ 581.999209][T13331] arch_do_signal_or_restart+0x8f/0x7a0 [ 581.999238][T13331] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 581.999269][T13331] ? fdget_pos+0x2b8/0x370 [ 581.999297][T13331] ? __pfx___x64_sys_futex+0x10/0x10 [ 581.999322][T13331] exit_to_user_mode_loop+0x8c/0x540 [ 581.999349][T13331] do_syscall_64+0x4ee/0xf80 [ 581.999374][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.999392][T13331] RIP: 0033:0x7f894df8f7c9 [ 581.999409][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.999427][T13331] RSP: 002b:00007f894ee730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 581.999446][T13331] RAX: fffffffffffffe00 RBX: 00007f894e1e5fa8 RCX: 00007f894df8f7c9 [ 581.999458][T13331] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f894e1e5fa8 [ 581.999470][T13331] RBP: 00007f894e1e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 581.999481][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.999491][T13331] R13: 00007f894e1e6038 R14: 00007ffede0daa30 R15: 00007ffede0dab18 [ 581.999514][T13331] [ 584.078202][T13348] __vm_enough_memory: pid: 13348, comm: syz.0.1595, bytes: 4398046511104 not enough memory for the allocation [ 585.619751][T13394] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 585.619751][T13394] program syz.2.1609 not setting count and/or reply_len properly [ 586.256321][T13407] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 587.810908][T13418] __vm_enough_memory: pid: 13418, comm: syz.2.1613, bytes: 4398046511104 not enough memory for the allocation [ 588.072704][T13435] ima: policy update failed [ 588.100911][ T30] audit: type=1802 audit(4294967316.852:21): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1617" res=0 errno=0 [ 588.416221][T13445] FAULT_INJECTION: forcing a failure. [ 588.416221][T13445] name failslab, interval 1, probability 0, space 0, times 0 [ 588.462237][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.1.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.462271][T13445] Tainted: [L]=SOFTLOCKUP [ 588.462278][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.462290][T13445] Call Trace: [ 588.462297][T13445] [ 588.462305][T13445] dump_stack_lvl+0x16c/0x1f0 [ 588.462333][T13445] should_fail_ex+0x512/0x640 [ 588.462363][T13445] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 588.462390][T13445] should_failslab+0xc2/0x120 [ 588.462419][T13445] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 588.462444][T13445] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 588.462478][T13445] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 588.462507][T13445] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 588.462536][T13445] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 588.462566][T13445] alloc_inode+0x64/0x240 [ 588.462587][T13445] new_inode+0x22/0x1c0 [ 588.462609][T13445] hugetlbfs_get_inode+0x354/0x700 [ 588.462630][T13445] hugetlb_file_setup+0x15b/0x620 [ 588.462652][T13445] ksys_mmap_pgoff+0x189/0x5c0 [ 588.462682][T13445] __x64_sys_mmap+0x125/0x190 [ 588.462703][T13445] do_syscall_64+0xcd/0xf80 [ 588.462728][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.462746][T13445] RIP: 0033:0x7fb1b738f7c9 [ 588.462763][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.462781][T13445] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 588.462800][T13445] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 588.462812][T13445] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 588.462823][T13445] RBP: 00007fb1b7413f91 R08: 0000000000000602 R09: 0000300000000000 [ 588.462835][T13445] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 588.462846][T13445] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 588.462869][T13445] [ 589.338870][T13459] bond0: option all_slaves_active: invalid value () [ 589.914724][T13479] random: crng reseeded on system resumption [ 589.949638][T13471] zswap: compressor not available [ 589.990003][T13479] Restarting kernel threads ... [ 590.006973][T13479] Done restarting kernel threads. [ 591.049296][T13496] FAULT_INJECTION: forcing a failure. [ 591.049296][T13496] name failslab, interval 1, probability 0, space 0, times 0 [ 591.062246][T13496] CPU: 0 UID: 0 PID: 13496 Comm: syz.1.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.062278][T13496] Tainted: [L]=SOFTLOCKUP [ 591.062285][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.062297][T13496] Call Trace: [ 591.062305][T13496] [ 591.062314][T13496] dump_stack_lvl+0x116/0x1f0 [ 591.062342][T13496] should_fail_ex+0x512/0x640 [ 591.062375][T13496] should_failslab+0xc2/0x120 [ 591.062404][T13496] __kmalloc_cache_noprof+0x80/0x800 [ 591.062424][T13496] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 591.062448][T13496] ? snd_ctl_notify+0x3ab/0x710 [ 591.062471][T13496] ? snd_ctl_notify+0x3ab/0x710 [ 591.062489][T13496] snd_ctl_notify+0x3ab/0x710 [ 591.062516][T13496] snd_ctl_notify_one+0x122/0x240 [ 591.062537][T13496] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 591.062562][T13496] ? mark_held_locks+0x49/0x80 [ 591.062582][T13496] __snd_ctl_add_replace+0x63e/0x930 [ 591.062608][T13496] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 591.062635][T13496] ? snd_ctl_elem_add+0x56f/0x14e0 [ 591.062660][T13496] snd_ctl_elem_add+0x92c/0x14e0 [ 591.062686][T13496] ? find_held_lock+0x2b/0x80 [ 591.062709][T13496] ? __might_fault+0xe3/0x190 [ 591.062729][T13496] ? __might_fault+0xe3/0x190 [ 591.062748][T13496] ? __might_fault+0x13b/0x190 [ 591.062769][T13496] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 591.062797][T13496] snd_ctl_elem_add_user+0xc3/0x170 [ 591.062819][T13496] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 591.062841][T13496] ? find_held_lock+0x2b/0x80 [ 591.062882][T13496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.062911][T13496] ? do_vfs_ioctl+0x128/0x14f0 [ 591.062943][T13496] snd_ctl_ioctl+0x9cd/0x13e0 [ 591.062965][T13496] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 591.062990][T13496] ? find_held_lock+0x2b/0x80 [ 591.063013][T13496] ? hook_file_ioctl_common+0x144/0x410 [ 591.063036][T13496] ? __fget_files+0x20e/0x3c0 [ 591.063067][T13496] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 591.063091][T13496] __x64_sys_ioctl+0x18e/0x210 [ 591.063116][T13496] do_syscall_64+0xcd/0xf80 [ 591.063141][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.063161][T13496] RIP: 0033:0x7fb1b738f7c9 [ 591.063178][T13496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.063197][T13496] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.063216][T13496] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 591.063229][T13496] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000007 [ 591.063242][T13496] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.063254][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.063266][T13496] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 591.063289][T13496] [ 591.063301][T13496] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 592.359811][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 593.602193][T13516] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 593.647906][T13496] Process accounting resumed [ 594.429226][T13536] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1641'. [ 595.057065][ T5150] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 595.177255][T13551] FAULT_INJECTION: forcing a failure. [ 595.177255][T13551] name failslab, interval 1, probability 0, space 0, times 0 [ 595.333628][T13554] FAULT_INJECTION: forcing a failure. [ 595.333628][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 595.467081][T13551] CPU: 0 UID: 0 PID: 13551 Comm: syz.2.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.467114][T13551] Tainted: [L]=SOFTLOCKUP [ 595.467122][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.467134][T13551] Call Trace: [ 595.467141][T13551] [ 595.467149][T13551] dump_stack_lvl+0x16c/0x1f0 [ 595.467177][T13551] should_fail_ex+0x512/0x640 [ 595.467207][T13551] ? __kvmalloc_node_noprof+0x129/0xa40 [ 595.467236][T13551] should_failslab+0xc2/0x120 [ 595.467265][T13551] __kvmalloc_node_noprof+0x14a/0xa40 [ 595.467292][T13551] ? io_alloc_cache_init+0x38/0x170 [ 595.467322][T13551] ? io_alloc_cache_init+0x38/0x170 [ 595.467346][T13551] ? __init_waitqueue_head+0xca/0x150 [ 595.467371][T13551] io_alloc_cache_init+0x38/0x170 [ 595.467397][T13551] io_uring_setup+0x5da/0x1f60 [ 595.467420][T13551] ? __pfx_io_uring_setup+0x10/0x10 [ 595.467442][T13551] ? do_futex+0x122/0x350 [ 595.467463][T13551] ? __pfx_do_futex+0x10/0x10 [ 595.467495][T13551] ? xfd_validate_state+0x61/0x180 [ 595.467517][T13551] __x64_sys_io_uring_setup+0xc2/0x170 [ 595.467539][T13551] do_syscall_64+0xcd/0xf80 [ 595.467564][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.467583][T13551] RIP: 0033:0x7f016b38f7c9 [ 595.467599][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.467617][T13551] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 595.467636][T13551] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 595.467649][T13551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 595.467661][T13551] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.467672][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.467684][T13551] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 595.467708][T13551] [ 595.723679][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.2.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.723714][T13554] Tainted: [L]=SOFTLOCKUP [ 595.723721][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.723732][T13554] Call Trace: [ 595.723739][T13554] [ 595.723747][T13554] dump_stack_lvl+0x16c/0x1f0 [ 595.723776][T13554] should_fail_ex+0x512/0x640 [ 595.723805][T13554] ? fs_reclaim_acquire+0xae/0x150 [ 595.723859][T13554] should_failslab+0xc2/0x120 [ 595.723887][T13554] __kmalloc_noprof+0xeb/0x910 [ 595.723908][T13554] ? tomoyo_encode2+0x100/0x3e0 [ 595.723933][T13554] ? tomoyo_encode2+0x100/0x3e0 [ 595.723953][T13554] tomoyo_encode2+0x100/0x3e0 [ 595.723977][T13554] tomoyo_encode+0x29/0x50 [ 595.723997][T13554] tomoyo_realpath_from_path+0x18f/0x6e0 [ 595.724025][T13554] tomoyo_check_open_permission+0x2ab/0x3c0 [ 595.724059][T13554] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 595.724111][T13554] ? do_raw_spin_lock+0x12c/0x2b0 [ 595.724139][T13554] tomoyo_file_open+0x6b/0x90 [ 595.724165][T13554] security_file_open+0x84/0x1e0 [ 595.724185][T13554] do_dentry_open+0x597/0x1590 [ 595.724214][T13554] ? security_inode_permission+0xbf/0x260 [ 595.724248][T13554] vfs_open+0x82/0x3f0 [ 595.724270][T13554] path_openat+0x2078/0x3140 [ 595.724304][T13554] ? __pfx_path_openat+0x10/0x10 [ 595.724340][T13554] do_filp_open+0x20b/0x470 [ 595.724369][T13554] ? __pfx_do_filp_open+0x10/0x10 [ 595.724412][T13554] ? alloc_fd+0x471/0x7d0 [ 595.724444][T13554] do_sys_openat2+0x11f/0x280 [ 595.724464][T13554] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.724493][T13554] __x64_sys_openat+0x174/0x210 [ 595.724514][T13554] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.724544][T13554] do_syscall_64+0xcd/0xf80 [ 595.724570][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.724589][T13554] RIP: 0033:0x7f016b38f7c9 [ 595.724605][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.724624][T13554] RSP: 002b:00007f01695f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.724643][T13554] RAX: ffffffffffffffda RBX: 00007f016b5e6090 RCX: 00007f016b38f7c9 [ 595.724655][T13554] RDX: 0000000000101200 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 595.724667][T13554] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.724678][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.724689][T13554] R13: 00007f016b5e6128 R14: 00007f016b5e6090 R15: 00007ffd66ea5b68 [ 595.724713][T13554] [ 595.724734][T13554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.441319][T13556] zswap: compressor not available [ 596.525344][T13570] FAULT_INJECTION: forcing a failure. [ 596.525344][T13570] name failslab, interval 1, probability 0, space 0, times 0 [ 596.600062][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.4.1648 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.600095][T13570] Tainted: [L]=SOFTLOCKUP [ 596.600102][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.600114][T13570] Call Trace: [ 596.600121][T13570] [ 596.600129][T13570] dump_stack_lvl+0x16c/0x1f0 [ 596.600158][T13570] should_fail_ex+0x512/0x640 [ 596.600188][T13570] ? __kmalloc_noprof+0xca/0x910 [ 596.600211][T13570] should_failslab+0xc2/0x120 [ 596.600240][T13570] __kmalloc_noprof+0xeb/0x910 [ 596.600260][T13570] ? lsm_blob_alloc+0x68/0x90 [ 596.600289][T13570] ? lsm_blob_alloc+0x68/0x90 [ 596.600310][T13570] lsm_blob_alloc+0x68/0x90 [ 596.600334][T13570] security_sk_alloc+0x2f/0x270 [ 596.600363][T13570] sk_prot_alloc+0xfb/0x2a0 [ 596.600389][T13570] sk_alloc+0x36/0xe30 [ 596.600407][T13570] inet_create+0x3a1/0x1040 [ 596.600425][T13570] ? inet_create+0x93/0x1040 [ 596.600445][T13570] __sock_create+0x339/0x8a0 [ 596.600474][T13570] udp_sock_create4+0xa6/0x450 [ 596.600498][T13570] ? __pfx_udp_sock_create4+0x10/0x10 [ 596.600525][T13570] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.600548][T13570] ? crng_make_state+0x48e/0x6c0 [ 596.600578][T13570] rxrpc_open_socket+0x4f5/0x6b0 [ 596.600607][T13570] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 596.600647][T13570] ? rcu_is_watching+0x12/0xc0 [ 596.600676][T13570] rxrpc_lookup_local+0xa01/0x1220 [ 596.600709][T13570] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 596.600739][T13570] ? __local_bh_enable_ip+0xa4/0x120 [ 596.600769][T13570] rxrpc_sendmsg+0x37e/0x680 [ 596.600790][T13570] sock_write_iter+0x566/0x610 [ 596.600815][T13570] ? __pfx_sock_write_iter+0x10/0x10 [ 596.600848][T13570] ? bpf_lsm_file_permission+0x9/0x10 [ 596.600872][T13570] ? security_file_permission+0x71/0x210 [ 596.600902][T13570] ? rw_verify_area+0xcf/0x6c0 [ 596.600929][T13570] vfs_write+0x7d3/0x11d0 [ 596.600956][T13570] ? __pfx_sock_write_iter+0x10/0x10 [ 596.600984][T13570] ? __pfx_vfs_write+0x10/0x10 [ 596.601008][T13570] ? find_held_lock+0x2b/0x80 [ 596.601047][T13570] ksys_write+0x1f8/0x250 [ 596.601074][T13570] ? __pfx_ksys_write+0x10/0x10 [ 596.601108][T13570] do_syscall_64+0xcd/0xf80 [ 596.601134][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.601153][T13570] RIP: 0033:0x7fc361d8f7c9 [ 596.601169][T13570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.601188][T13570] RSP: 002b:00007fc362c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.601208][T13570] RAX: ffffffffffffffda RBX: 00007fc361fe5fa0 RCX: 00007fc361d8f7c9 [ 596.601221][T13570] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 596.601233][T13570] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.601244][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.601256][T13570] R13: 00007fc361fe6038 R14: 00007fc361fe5fa0 R15: 00007ffdb3818488 [ 596.601280][T13570] [ 599.053103][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'. [ 599.685577][T13615] FAULT_INJECTION: forcing a failure. [ 599.685577][T13615] name failslab, interval 1, probability 0, space 0, times 0 [ 599.828287][T13615] CPU: 0 UID: 0 PID: 13615 Comm: syz.0.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.828321][T13615] Tainted: [L]=SOFTLOCKUP [ 599.828328][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.828340][T13615] Call Trace: [ 599.828347][T13615] [ 599.828354][T13615] dump_stack_lvl+0x16c/0x1f0 [ 599.828383][T13615] should_fail_ex+0x512/0x640 [ 599.828412][T13615] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 599.828439][T13615] should_failslab+0xc2/0x120 [ 599.828467][T13615] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 599.828492][T13615] ? __d_alloc+0x35/0xa80 [ 599.828524][T13615] ? __d_alloc+0x35/0xa80 [ 599.828551][T13615] __d_alloc+0x35/0xa80 [ 599.828578][T13615] ? stack_trace_save+0x8e/0xc0 [ 599.828610][T13615] d_alloc_parallel+0x111/0x1510 [ 599.828641][T13615] ? __pfx_d_alloc_parallel+0x10/0x10 [ 599.828666][T13615] ? lockdep_init_map_type+0x5c/0x270 [ 599.828686][T13615] ? lockdep_init_map_type+0x5c/0x270 [ 599.828709][T13615] __lookup_slow+0x193/0x460 [ 599.828730][T13615] ? __pfx___lookup_slow+0x10/0x10 [ 599.828761][T13615] ? __d_lookup+0x266/0x4a0 [ 599.828788][T13615] lookup_slow+0x50/0x70 [ 599.828808][T13615] link_path_walk+0x12d8/0x1c70 [ 599.828839][T13615] path_openat+0x1bd/0x3140 [ 599.828866][T13615] ? do_syscall_64+0xcd/0xf80 [ 599.828894][T13615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.828919][T13615] ? __pfx_path_openat+0x10/0x10 [ 599.828954][T13615] do_filp_open+0x20b/0x470 [ 599.828983][T13615] ? __pfx_do_filp_open+0x10/0x10 [ 599.829025][T13615] ? alloc_fd+0x471/0x7d0 [ 599.829057][T13615] do_sys_openat2+0x11f/0x280 [ 599.829078][T13615] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.829107][T13615] __x64_sys_openat+0x174/0x210 [ 599.829128][T13615] ? __pfx___x64_sys_openat+0x10/0x10 [ 599.829150][T13615] ? syscall_user_dispatch+0x78/0x140 [ 599.829180][T13615] do_syscall_64+0xcd/0xf80 [ 599.829204][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.829221][T13615] RIP: 0033:0x7f894df8f7c9 [ 599.829237][T13615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.829256][T13615] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.829275][T13615] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 599.829288][T13615] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 599.829299][T13615] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.829315][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.829326][T13615] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 599.829350][T13615] [ 602.446789][T13660] vivid-007: ================= START STATUS ================= [ 602.484504][T13660] vivid-007: Generate PTS: true [ 602.489998][T13660] vivid-007: Generate SCR: true [ 602.533214][T13660] tpg source WxH: 320x240 (Y'CbCr) [ 602.564460][T13664] FAULT_INJECTION: forcing a failure. [ 602.564460][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 602.586461][T13660] tpg field: 1 [ 602.595440][T13660] tpg crop: (0,0)/320x240 [ 602.622403][T13660] tpg compose: (0,0)/320x240 [ 602.630314][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.1.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.630345][T13664] Tainted: [L]=SOFTLOCKUP [ 602.630352][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.630365][T13664] Call Trace: [ 602.630372][T13664] [ 602.630379][T13664] dump_stack_lvl+0x16c/0x1f0 [ 602.630408][T13664] should_fail_ex+0x512/0x640 [ 602.630443][T13664] ? kmem_cache_alloc_noprof+0x62/0x770 [ 602.630477][T13664] should_failslab+0xc2/0x120 [ 602.630507][T13664] kmem_cache_alloc_noprof+0x83/0x770 [ 602.630530][T13664] ? getname_flags.part.0+0x4c/0x550 [ 602.630555][T13664] ? getname_flags.part.0+0x4c/0x550 [ 602.630574][T13664] getname_flags.part.0+0x4c/0x550 [ 602.630597][T13664] getname_flags+0x93/0xf0 [ 602.630623][T13664] do_sys_openat2+0xb8/0x280 [ 602.630644][T13664] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.630673][T13664] __x64_sys_openat+0x174/0x210 [ 602.630694][T13664] ? __pfx___x64_sys_openat+0x10/0x10 [ 602.630724][T13664] do_syscall_64+0xcd/0xf80 [ 602.630750][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.630769][T13664] RIP: 0033:0x7fb1b738f7c9 [ 602.630793][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.630812][T13664] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.630831][T13664] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 602.630843][T13664] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 602.630855][T13664] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.630866][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.630877][T13664] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 602.630901][T13664] [ 602.829643][T13660] tpg colorspace: 8 [ 602.833572][T13660] tpg transfer function: 0/0 [ 602.838582][T13660] tpg Y'CbCr encoding: 0/0 [ 602.843237][T13660] tpg quantization: 0/0 [ 602.847565][T13660] tpg RGB range: 0/2 [ 602.851548][T13660] vivid-007: ================== END STATUS ================== [ 602.954360][T13664] FAULT_INJECTION: forcing a failure. [ 602.954360][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 602.967250][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.1.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.967282][T13664] Tainted: [L]=SOFTLOCKUP [ 602.967289][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.967302][T13664] Call Trace: [ 602.967309][T13664] [ 602.967317][T13664] dump_stack_lvl+0x16c/0x1f0 [ 602.967346][T13664] should_fail_ex+0x512/0x640 [ 602.967382][T13664] ? kmem_cache_alloc_noprof+0x62/0x770 [ 602.967407][T13664] should_failslab+0xc2/0x120 [ 602.967435][T13664] kmem_cache_alloc_noprof+0x83/0x770 [ 602.967458][T13664] ? alloc_empty_file+0x55/0x1e0 [ 602.967481][T13664] ? alloc_empty_file+0x55/0x1e0 [ 602.967499][T13664] alloc_empty_file+0x55/0x1e0 [ 602.967519][T13664] alloc_file_pseudo+0x13a/0x230 [ 602.967540][T13664] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 602.967561][T13664] ? security_inode_init_security_anon+0x79/0x240 [ 602.967596][T13664] __anon_inode_getfile+0xe8/0x280 [ 602.967617][T13664] new_userfaultfd+0x25e/0x4d0 [ 602.967643][T13664] __x64_sys_userfaultfd+0x4b/0xb0 [ 602.967670][T13664] do_syscall_64+0xcd/0xf80 [ 602.967695][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.967714][T13664] RIP: 0033:0x7fb1b738f7c9 [ 602.967730][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.967749][T13664] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 602.967768][T13664] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 602.967780][T13664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 602.967791][T13664] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.967803][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.967814][T13664] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 602.967836][T13664] [ 603.763076][T13683] Console: switching to colour frame buffer device 128x48 [ 604.056852][T13692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 604.387025][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.410773][T13655] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 604.459232][T13655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 604.498868][T13655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 604.526495][T13655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 606.392235][T13730] FAULT_INJECTION: forcing a failure. [ 606.392235][T13730] name failslab, interval 1, probability 0, space 0, times 0 [ 606.453938][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 606.470421][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.4.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.470454][T13730] Tainted: [L]=SOFTLOCKUP [ 606.470461][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.470473][T13730] Call Trace: [ 606.470480][T13730] [ 606.470488][T13730] dump_stack_lvl+0x16c/0x1f0 [ 606.470518][T13730] should_fail_ex+0x512/0x640 [ 606.470548][T13730] ? __kmalloc_noprof+0xca/0x910 [ 606.470571][T13730] should_failslab+0xc2/0x120 [ 606.470600][T13730] __kmalloc_noprof+0xeb/0x910 [ 606.470621][T13730] ? lsm_blob_alloc+0x68/0x90 [ 606.470648][T13730] ? lsm_blob_alloc+0x68/0x90 [ 606.470669][T13730] lsm_blob_alloc+0x68/0x90 [ 606.470693][T13730] security_sk_alloc+0x2f/0x270 [ 606.470722][T13730] sk_prot_alloc+0xfb/0x2a0 [ 606.470751][T13730] sk_alloc+0x36/0xe30 [ 606.470770][T13730] inet_create+0x3a1/0x1040 [ 606.470788][T13730] ? inet_create+0x93/0x1040 [ 606.470808][T13730] __sock_create+0x339/0x8a0 [ 606.470837][T13730] udp_sock_create4+0xa6/0x450 [ 606.470862][T13730] ? __pfx_udp_sock_create4+0x10/0x10 [ 606.470888][T13730] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.470912][T13730] ? crng_make_state+0x48e/0x6c0 [ 606.470941][T13730] rxrpc_open_socket+0x4f5/0x6b0 [ 606.470970][T13730] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 606.471018][T13730] ? rcu_is_watching+0x12/0xc0 [ 606.471048][T13730] rxrpc_lookup_local+0xa01/0x1220 [ 606.471081][T13730] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 606.471111][T13730] ? __local_bh_enable_ip+0xa4/0x120 [ 606.471141][T13730] rxrpc_sendmsg+0x37e/0x680 [ 606.471164][T13730] sock_write_iter+0x566/0x610 [ 606.471189][T13730] ? __pfx_sock_write_iter+0x10/0x10 [ 606.471222][T13730] ? bpf_lsm_file_permission+0x9/0x10 [ 606.471244][T13730] ? security_file_permission+0x71/0x210 [ 606.471264][T13730] ? rw_verify_area+0xcf/0x6c0 [ 606.471290][T13730] vfs_write+0x7d3/0x11d0 [ 606.471317][T13730] ? __pfx_sock_write_iter+0x10/0x10 [ 606.471344][T13730] ? __pfx_vfs_write+0x10/0x10 [ 606.471368][T13730] ? find_held_lock+0x2b/0x80 [ 606.471405][T13730] ksys_write+0x1f8/0x250 [ 606.471431][T13730] ? __pfx_ksys_write+0x10/0x10 [ 606.471464][T13730] do_syscall_64+0xcd/0xf80 [ 606.471489][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.471508][T13730] RIP: 0033:0x7fc361d8f7c9 [ 606.471524][T13730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.471542][T13730] RSP: 002b:00007fc362c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.471561][T13730] RAX: ffffffffffffffda RBX: 00007fc361fe5fa0 RCX: 00007fc361d8f7c9 [ 606.471573][T13730] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000002 [ 606.471585][T13730] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.471596][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.471607][T13730] R13: 00007fc361fe6038 R14: 00007fc361fe5fa0 R15: 00007ffdb3818488 [ 606.471631][T13730] [ 606.883908][T13733] Console: switching to colour VGA+ 80x25 [ 607.044538][T13734] Console: switching to colour frame buffer device 128x48 [ 607.101856][T13743] vivid-007: ================= START STATUS ================= [ 607.101891][T13743] vivid-007: Generate PTS: true [ 607.101919][T13743] vivid-007: Generate SCR: true [ 607.101939][T13743] tpg source WxH: 320x240 (Y'CbCr) [ 607.101952][T13743] tpg field: 1 [ 607.101959][T13743] tpg crop: (0,0)/320x240 [ 607.101983][T13743] tpg compose: (0,0)/320x240 [ 607.101996][T13743] tpg colorspace: 8 [ 607.102004][T13743] tpg transfer function: 0/0 [ 607.102014][T13743] tpg Y'CbCr encoding: 0/0 [ 607.102023][T13743] tpg quantization: 0/0 [ 607.102040][T13743] tpg RGB range: 0/2 [ 607.102049][T13743] vivid-007: ================== END STATUS ================== [ 607.120654][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.123981][T12323] Bluetooth: hci2: command 0x0c1a tx timeout [ 607.652001][T13747] FAULT_INJECTION: forcing a failure. [ 607.652001][T13747] name failslab, interval 1, probability 0, space 0, times 0 [ 607.686522][T13747] CPU: 0 UID: 0 PID: 13747 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.686555][T13747] Tainted: [L]=SOFTLOCKUP [ 607.686562][T13747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.686573][T13747] Call Trace: [ 607.686580][T13747] [ 607.686587][T13747] dump_stack_lvl+0x16c/0x1f0 [ 607.686616][T13747] should_fail_ex+0x512/0x640 [ 607.686645][T13747] ? kmem_cache_alloc_noprof+0x62/0x770 [ 607.686671][T13747] should_failslab+0xc2/0x120 [ 607.686699][T13747] kmem_cache_alloc_noprof+0x83/0x770 [ 607.686722][T13747] ? __kernfs_new_node+0xd2/0x990 [ 607.686749][T13747] ? __kernfs_new_node+0xd2/0x990 [ 607.686768][T13747] __kernfs_new_node+0xd2/0x990 [ 607.686792][T13747] ? __pfx___kernfs_new_node+0x10/0x10 [ 607.686819][T13747] ? find_held_lock+0x2b/0x80 [ 607.686854][T13747] ? kernfs_root+0xee/0x2a0 [ 607.686880][T13747] kernfs_new_node+0x13c/0x1e0 [ 607.686908][T13747] __kernfs_create_file+0x53/0x350 [ 607.686940][T13747] sysfs_add_file_mode_ns+0x207/0x3c0 [ 607.686965][T13747] internal_create_group+0x597/0xf70 [ 607.686994][T13747] ? __pfx_internal_create_group+0x10/0x10 [ 607.687020][T13747] ? kernfs_create_link+0x1bd/0x240 [ 607.687054][T13747] internal_create_groups+0x9d/0x150 [ 607.687080][T13747] device_add+0x6f7/0x1980 [ 607.687104][T13747] ? __pfx_device_add+0x10/0x10 [ 607.687126][T13747] ? lockdep_init_map_type+0x5c/0x270 [ 607.687145][T13747] ? __init_waitqueue_head+0xca/0x150 [ 607.687172][T13747] netdev_register_kobject+0x1a9/0x3d0 [ 607.687201][T13747] register_netdevice+0x13ac/0x21d0 [ 607.687228][T13747] ? __pfx_register_netdevice+0x10/0x10 [ 607.687258][T13747] __ip_tunnel_create+0x540/0x6b0 [ 607.687286][T13747] ? __pfx___ip_tunnel_create+0x10/0x10 [ 607.687318][T13747] ip_tunnel_init_net+0x22f/0x7d0 [ 607.687347][T13747] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 607.687387][T13747] ? trace_kmalloc+0x2b/0xb0 [ 607.687412][T13747] ? __kmalloc_noprof+0x35d/0x910 [ 607.687434][T13747] ? __pfx_vti_init_net+0x10/0x10 [ 607.687461][T13747] vti_init_net+0x2e/0x140 [ 607.687489][T13747] ops_init+0x1e2/0x5f0 [ 607.687513][T13747] setup_net+0x11d/0x3a0 [ 607.687534][T13747] ? __pfx_setup_net+0x10/0x10 [ 607.687553][T13747] ? lockdep_init_map_type+0x5c/0x270 [ 607.687573][T13747] ? mutex_init_lockep+0x110/0x150 [ 607.687595][T13747] copy_net_ns+0x351/0x7c0 [ 607.687621][T13747] create_new_namespaces+0x3ea/0xab0 [ 607.687652][T13747] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 607.687680][T13747] ksys_unshare+0x45b/0xa40 [ 607.687711][T13747] ? __pfx_ksys_unshare+0x10/0x10 [ 607.687741][T13747] ? xfd_validate_state+0x61/0x180 [ 607.687765][T13747] __x64_sys_unshare+0x31/0x40 [ 607.687794][T13747] do_syscall_64+0xcd/0xf80 [ 607.687819][T13747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.687845][T13747] RIP: 0033:0x7fb1b738f7c9 [ 607.687862][T13747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.687880][T13747] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 607.687899][T13747] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 607.687911][T13747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 607.687923][T13747] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 607.687934][T13747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.687945][T13747] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 607.687970][T13747] [ 608.048062][T13737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 608.054159][T13737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.060318][T13737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.066436][T13737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.040485][T13777] random: crng reseeded on system resumption [ 609.239153][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 609.354876][T13778] zswap: compressor not available [ 610.276373][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 610.282431][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 610.288551][T13756] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.712265][T13834] Console: switching to colour VGA+ 80x25 [ 612.121512][T13834] Console: switching to colour frame buffer device 128x48 [ 612.561148][T13848] [U] 0="/ [ 612.564565][T13848] [U] [ 612.693100][T13848] [U] EeQ@ [ 614.676752][T13902] sysfs_service_op_store: Client not running :-5: [ 614.733202][T13905] sysfs_service_op_store: Client not running :-5: [ 614.782772][T13906] FAULT_INJECTION: forcing a failure. [ 614.782772][T13906] name failslab, interval 1, probability 0, space 0, times 0 [ 614.872611][T13906] CPU: 0 UID: 0 PID: 13906 Comm: syz.4.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.872644][T13906] Tainted: [L]=SOFTLOCKUP [ 614.872651][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.872662][T13906] Call Trace: [ 614.872669][T13906] [ 614.872677][T13906] dump_stack_lvl+0x16c/0x1f0 [ 614.872705][T13906] should_fail_ex+0x512/0x640 [ 614.872738][T13906] ? kmem_cache_alloc_noprof+0x62/0x770 [ 614.872764][T13906] should_failslab+0xc2/0x120 [ 614.872794][T13906] kmem_cache_alloc_noprof+0x83/0x770 [ 614.872816][T13906] ? security_file_alloc+0x34/0x2b0 [ 614.872840][T13906] ? security_file_alloc+0x34/0x2b0 [ 614.872858][T13906] security_file_alloc+0x34/0x2b0 [ 614.872878][T13906] init_file+0x93/0x4c0 [ 614.872897][T13906] alloc_empty_file+0x73/0x1e0 [ 614.872917][T13906] path_openat+0xde/0x3140 [ 614.872943][T13906] ? do_syscall_64+0xcd/0xf80 [ 614.872966][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.873001][T13906] ? __pfx_path_openat+0x10/0x10 [ 614.873037][T13906] do_filp_open+0x20b/0x470 [ 614.873066][T13906] ? __pfx_do_filp_open+0x10/0x10 [ 614.873109][T13906] ? alloc_fd+0x471/0x7d0 [ 614.873143][T13906] do_sys_openat2+0x11f/0x280 [ 614.873164][T13906] ? __pfx_do_sys_openat2+0x10/0x10 [ 614.873192][T13906] __x64_sys_openat+0x174/0x210 [ 614.873214][T13906] ? __pfx___x64_sys_openat+0x10/0x10 [ 614.873244][T13906] do_syscall_64+0xcd/0xf80 [ 614.873269][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.873288][T13906] RIP: 0033:0x7fc361d8f7c9 [ 614.873304][T13906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.873324][T13906] RSP: 002b:00007fc362c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 614.873344][T13906] RAX: ffffffffffffffda RBX: 00007fc361fe5fa0 RCX: 00007fc361d8f7c9 [ 614.873357][T13906] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 614.873369][T13906] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 614.873381][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.873393][T13906] R13: 00007fc361fe6038 R14: 00007fc361fe5fa0 R15: 00007ffdb3818488 [ 614.873416][T13906] [ 615.677146][T13914] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 615.842032][T13919] Console: switching to colour VGA+ 80x25 [ 616.203229][T13924] Console: switching to colour frame buffer device 128x48 [ 616.306092][T13935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 616.589813][T13938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 616.766928][T13936] ptp ptp0: only physical clock in use now [ 619.043473][T13989] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 622.469971][T14060] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1747'. [ 623.162296][T13860] [U]  [ 624.250697][T14070] Process accounting paused [ 625.648916][T14101] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 626.068313][T14111] zswap: compressor not available [ 627.230290][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.240249][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.514690][T14181] openvswitch: netlink: IP tunnel dst address not specified [ 629.802598][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 629.945525][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'. [ 630.180001][T14195] ima: policy update failed [ 630.184688][ T30] audit: type=1802 audit(4294967359.151:22): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1780" res=0 errno=0 [ 631.877931][T14239] FAULT_INJECTION: forcing a failure. [ 631.877931][T14239] name failslab, interval 1, probability 0, space 0, times 0 [ 631.925753][T14239] CPU: 0 UID: 0 PID: 14239 Comm: syz.0.1793 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.925788][T14239] Tainted: [L]=SOFTLOCKUP [ 631.925796][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.925808][T14239] Call Trace: [ 631.925815][T14239] [ 631.925823][T14239] dump_stack_lvl+0x16c/0x1f0 [ 631.925860][T14239] should_fail_ex+0x512/0x640 [ 631.925893][T14239] ? __kmalloc_cache_noprof+0x5f/0x800 [ 631.925917][T14239] should_failslab+0xc2/0x120 [ 631.925946][T14239] __kmalloc_cache_noprof+0x80/0x800 [ 631.926030][T14239] ? resv_map_alloc+0x7e/0x400 [ 631.926064][T14239] ? resv_map_alloc+0x7e/0x400 [ 631.926088][T14239] resv_map_alloc+0x7e/0x400 [ 631.926116][T14239] hugetlb_reserve_pages+0x5b5/0xfc0 [ 631.926150][T14239] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 631.926182][T14239] ? atime_needs_update+0x8b/0x710 [ 631.926211][T14239] hugetlbfs_file_mmap_prepare+0x3d3/0x640 [ 631.926247][T14239] __mmap_region+0xed8/0x2a00 [ 631.926273][T14239] ? __pfx___mmap_region+0x10/0x10 [ 631.926302][T14239] ? is_bpf_text_address+0x8a/0x1a0 [ 631.926328][T14239] ? bpf_ksym_find+0x124/0x1c0 [ 631.926348][T14239] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 631.926378][T14239] ? is_bpf_text_address+0x94/0x1a0 [ 631.926403][T14239] ? kernel_text_address+0x8d/0x100 [ 631.926425][T14239] ? __kernel_text_address+0xd/0x40 [ 631.926447][T14239] ? unwind_get_return_address+0x59/0xa0 [ 631.926484][T14239] ? stack_trace_save+0x8e/0xc0 [ 631.926544][T14239] ? rcu_is_watching+0x12/0xc0 [ 631.926589][T14239] mmap_region+0x1ab/0x3f0 [ 631.926611][T14239] ? __get_unmapped_area+0x267/0x3f0 [ 631.926643][T14239] do_mmap+0xa3e/0x1210 [ 631.926676][T14239] ? __pfx_do_mmap+0x10/0x10 [ 631.926704][T14239] ? __pfx_down_write_killable+0x10/0x10 [ 631.926738][T14239] vm_mmap_pgoff+0x29e/0x470 [ 631.926769][T14239] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 631.926793][T14239] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 631.926820][T14239] ? hugetlbfs_get_inode+0x31f/0x700 [ 631.926845][T14239] ksys_mmap_pgoff+0x1c8/0x5c0 [ 631.926876][T14239] __x64_sys_mmap+0x125/0x190 [ 631.926898][T14239] do_syscall_64+0xcd/0xf80 [ 631.926931][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.926951][T14239] RIP: 0033:0x7f894df8f7c9 [ 631.926969][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.926988][T14239] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 631.927007][T14239] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 631.927020][T14239] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 631.927032][T14239] RBP: 00007f894e013f91 R08: ffffffffffffffff R09: 0000308000000000 [ 631.927044][T14239] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 631.927055][T14239] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 631.927080][T14239] [ 632.465232][T14249] ubi0: attaching mtd0 [ 632.470634][T14249] ubi0: scanning is finished [ 632.475468][T14249] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 632.636752][T14258] FAULT_INJECTION: forcing a failure. [ 632.636752][T14258] name failslab, interval 1, probability 0, space 0, times 0 [ 632.658137][T14258] CPU: 0 UID: 0 PID: 14258 Comm: syz.1.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.658174][T14258] Tainted: [L]=SOFTLOCKUP [ 632.658181][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.658193][T14258] Call Trace: [ 632.658200][T14258] [ 632.658208][T14258] dump_stack_lvl+0x16c/0x1f0 [ 632.658236][T14258] should_fail_ex+0x512/0x640 [ 632.658266][T14258] ? __kmalloc_cache_noprof+0x5f/0x800 [ 632.658292][T14258] should_failslab+0xc2/0x120 [ 632.658320][T14258] __kmalloc_cache_noprof+0x80/0x800 [ 632.658341][T14258] ? lockdep_init_map_type+0x5c/0x270 [ 632.658360][T14258] ? landlock_merge_ruleset+0x118/0x870 [ 632.658389][T14258] ? mutex_init_lockep+0x110/0x150 [ 632.658410][T14258] ? landlock_merge_ruleset+0x118/0x870 [ 632.658438][T14258] landlock_merge_ruleset+0x118/0x870 [ 632.658467][T14258] ? prepare_creds+0x5ea/0x940 [ 632.658491][T14258] __do_sys_landlock_restrict_self+0x2a1/0x910 [ 632.658522][T14258] do_syscall_64+0xcd/0xf80 [ 632.658547][T14258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.658566][T14258] RIP: 0033:0x7fb1b738f7c9 [ 632.658582][T14258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.658601][T14258] RSP: 002b:00007fb1b816c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 632.658620][T14258] RAX: ffffffffffffffda RBX: 00007fb1b75e6270 RCX: 00007fb1b738f7c9 [ 632.658632][T14258] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000c [ 632.658643][T14258] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.658654][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.658665][T14258] R13: 00007fb1b75e6308 R14: 00007fb1b75e6270 R15: 00007ffd47545e08 [ 632.658689][T14258] [ 632.869665][T14249] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 633.657642][T14269] zswap: compressor not available [ 634.592352][T14287] 0x000000000001-0x0000fffffff1 : "" [ 634.634462][T14287] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 634.757486][T14297] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 634.806401][T14287] ftl_cs: FTL header corrupt! [ 635.169995][T14301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 635.253487][T14292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 635.282049][T14292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.452435][T14292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.491088][T14292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.616509][T13756] Bluetooth: hci0: command 0x0c1a tx timeout [ 637.332371][T13756] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.491412][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.497834][T13756] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.469481][T14432] device-mapper: ioctl: Unable to rename non-existent device, to uuid O4ʕ [ 642.469481][T14432] Dw:/B#ơ-rnMpd$ dҪ !}NOO=R+R +HG=0n  [ 644.506513][T14470] FAULT_INJECTION: forcing a failure. [ 644.506513][T14470] name failslab, interval 1, probability 0, space 0, times 0 [ 644.562370][T14470] CPU: 0 UID: 0 PID: 14470 Comm: syz.4.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.562404][T14470] Tainted: [L]=SOFTLOCKUP [ 644.562412][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.562424][T14470] Call Trace: [ 644.562431][T14470] [ 644.562439][T14470] dump_stack_lvl+0x16c/0x1f0 [ 644.562477][T14470] should_fail_ex+0x512/0x640 [ 644.562508][T14470] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 644.562539][T14470] should_failslab+0xc2/0x120 [ 644.562568][T14470] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 644.562596][T14470] ? __kthread_create_on_node+0x186/0x3f0 [ 644.562630][T14470] ? kvasprintf+0xbc/0x150 [ 644.562646][T14470] kvasprintf+0xbc/0x150 [ 644.562662][T14470] ? __pfx_kvasprintf+0x10/0x10 [ 644.562686][T14470] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 644.562714][T14470] __kthread_create_on_node+0x186/0x3f0 [ 644.562744][T14470] ? __pfx___kthread_create_on_node+0x10/0x10 [ 644.562781][T14470] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 644.562814][T14470] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 644.562842][T14470] kthread_create_on_node+0xc7/0x100 [ 644.562871][T14470] ? __pfx_kthread_create_on_node+0x10/0x10 [ 644.562902][T14470] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 644.562926][T14470] ? find_held_lock+0x2b/0x80 [ 644.562949][T14470] ? __pfx_sdr_cap_buf_queue+0x10/0x10 [ 644.562978][T14470] sdr_cap_start_streaming+0x390/0x570 [ 644.563005][T14470] ? __pfx_sdr_cap_buf_queue+0x10/0x10 [ 644.563030][T14470] ? __pfx_sdr_cap_start_streaming+0x10/0x10 [ 644.563058][T14470] vb2_start_streaming+0x162/0x5a0 [ 644.563087][T14470] ? __bitmap_weight+0xd7/0x110 [ 644.563110][T14470] vb2_core_streamon+0x2a7/0x450 [ 644.563141][T14470] __vb2_init_fileio+0xdbb/0x1100 [ 644.563171][T14470] ? __pfx_vb2_vmalloc_vaddr+0x10/0x10 [ 644.563206][T14470] vb2_core_poll+0x5ec/0x700 [ 644.563236][T14470] vb2_poll+0x4b/0xe0 [ 644.563261][T14470] vb2_fop_poll+0x10f/0x2c0 [ 644.563289][T14470] ? __pfx_vb2_fop_poll+0x10/0x10 [ 644.563315][T14470] v4l2_poll+0x163/0x320 [ 644.563337][T14470] ? __pfx_v4l2_poll+0x10/0x10 [ 644.563356][T14470] do_sys_poll+0x55c/0xdf0 [ 644.563388][T14470] ? __pfx_do_sys_poll+0x10/0x10 [ 644.563432][T14470] ? __futex_wait+0x24b/0x2f0 [ 644.563484][T14470] ? __pfx___pollwait+0x10/0x10 [ 644.563510][T14470] ? __pfx_pollwake+0x10/0x10 [ 644.563566][T14470] ? __pfx_timespec64_add_safe+0x10/0x10 [ 644.563589][T14470] ? ktime_get_ts64+0x2d2/0x400 [ 644.563609][T14470] ? read_tsc+0x9/0x20 [ 644.563634][T14470] ? ktime_get_ts64+0x256/0x400 [ 644.563658][T14470] __x64_sys_poll+0x1a6/0x450 [ 644.563684][T14470] ? __pfx___x64_sys_poll+0x10/0x10 [ 644.563718][T14470] do_syscall_64+0xcd/0xf80 [ 644.563742][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.563762][T14470] RIP: 0033:0x7fc361d8f7c9 [ 644.563778][T14470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.563797][T14470] RSP: 002b:00007fc362c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 644.563815][T14470] RAX: ffffffffffffffda RBX: 00007fc361fe5fa0 RCX: 00007fc361d8f7c9 [ 644.563828][T14470] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 644.563839][T14470] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.563850][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.563862][T14470] R13: 00007fc361fe6038 R14: 00007fc361fe5fa0 R15: 00007ffdb3818488 [ 644.563885][T14470] [ 644.563907][T14470] vivid-012: kernel_thread() failed [ 646.184532][T14475] zswap: compressor not available [ 647.359121][ T30] audit: type=1400 audit(4294967376.410:23): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14523 comm="syz.0.1851" [ 647.666495][T14533] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1850'. [ 649.752854][T14576] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1858'. [ 650.595884][T14594] FAULT_INJECTION: forcing a failure. [ 650.595884][T14594] name failslab, interval 1, probability 0, space 0, times 0 [ 650.883494][T14594] CPU: 0 UID: 0 PID: 14594 Comm: syz.2.1862 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.883527][T14594] Tainted: [L]=SOFTLOCKUP [ 650.883534][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.883546][T14594] Call Trace: [ 650.883553][T14594] [ 650.883561][T14594] dump_stack_lvl+0x16c/0x1f0 [ 650.883589][T14594] should_fail_ex+0x512/0x640 [ 650.883620][T14594] ? kmem_cache_alloc_noprof+0x62/0x770 [ 650.883645][T14594] should_failslab+0xc2/0x120 [ 650.883675][T14594] kmem_cache_alloc_noprof+0x83/0x770 [ 650.883700][T14594] ? __proc_create+0x2c8/0x8d0 [ 650.883729][T14594] ? __proc_create+0x2c8/0x8d0 [ 650.883752][T14594] __proc_create+0x2c8/0x8d0 [ 650.883778][T14594] ? __pfx___proc_create+0x10/0x10 [ 650.883808][T14594] ? mark_held_locks+0x49/0x80 [ 650.883828][T14594] _proc_mkdir+0xb9/0x210 [ 650.883853][T14594] ? __pfx__proc_mkdir+0x10/0x10 [ 650.883885][T14594] sctp_proc_init+0x59/0x270 [ 650.883908][T14594] ? __pfx_sctp_defaults_init+0x10/0x10 [ 650.883931][T14594] sctp_defaults_init+0x758/0xd90 [ 650.883956][T14594] ? __pfx_sctp_defaults_init+0x10/0x10 [ 650.883979][T14594] ops_init+0x1e2/0x5f0 [ 650.884004][T14594] setup_net+0x11d/0x3a0 [ 650.884025][T14594] ? __pfx_setup_net+0x10/0x10 [ 650.884045][T14594] ? lockdep_init_map_type+0x5c/0x270 [ 650.884064][T14594] ? mutex_init_lockep+0x110/0x150 [ 650.884087][T14594] copy_net_ns+0x351/0x7c0 [ 650.884112][T14594] create_new_namespaces+0x3ea/0xab0 [ 650.884143][T14594] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 650.884171][T14594] ksys_unshare+0x45b/0xa40 [ 650.884201][T14594] ? __pfx_ksys_unshare+0x10/0x10 [ 650.884231][T14594] ? xfd_validate_state+0x61/0x180 [ 650.884255][T14594] __x64_sys_unshare+0x31/0x40 [ 650.884284][T14594] do_syscall_64+0xcd/0xf80 [ 650.884312][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.884332][T14594] RIP: 0033:0x7f016b38f7c9 [ 650.884348][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.884367][T14594] RSP: 002b:00007f01695f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 650.884386][T14594] RAX: ffffffffffffffda RBX: 00007f016b5e6090 RCX: 00007f016b38f7c9 [ 650.884399][T14594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 650.884410][T14594] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 650.884421][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.884432][T14594] R13: 00007f016b5e6128 R14: 00007f016b5e6090 R15: 00007ffd66ea5b68 [ 650.884465][T14594] [ 654.252274][T14655] ptp ptp0: only physical clock in use now [ 654.294556][T14660] usb usb3: usbfs: process 14660 (syz.2.1874) did not claim interface 2 before use [ 657.867182][T14724] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 658.051272][T14724] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 658.591306][T14761] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 658.643667][T14761] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 658.767307][T14761] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 658.818273][T14771] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1892'. [ 658.858178][T14761] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 658.943193][T14761] page dumped because: unmovable page [ 658.984719][T14761] page_owner info is not present (never set?) [ 659.686740][T14778] FAULT_INJECTION: forcing a failure. [ 659.686740][T14778] name failslab, interval 1, probability 0, space 0, times 0 [ 659.729599][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.2.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.729632][T14778] Tainted: [L]=SOFTLOCKUP [ 659.729640][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.729650][T14778] Call Trace: [ 659.729665][T14778] [ 659.729673][T14778] dump_stack_lvl+0x16c/0x1f0 [ 659.729702][T14778] should_fail_ex+0x512/0x640 [ 659.729732][T14778] ? __kmalloc_noprof+0xca/0x910 [ 659.729756][T14778] should_failslab+0xc2/0x120 [ 659.729785][T14778] __kmalloc_noprof+0xeb/0x910 [ 659.729806][T14778] ? process_preds+0x46c/0x1c50 [ 659.729835][T14778] ? process_preds+0x46c/0x1c50 [ 659.729858][T14778] process_preds+0x46c/0x1c50 [ 659.729887][T14778] ? create_filter_start.constprop.0+0x56/0x300 [ 659.729915][T14778] create_filter+0x140/0x210 [ 659.729940][T14778] ? __pfx_create_filter+0x10/0x10 [ 659.729964][T14778] ? __pfx___mutex_lock+0x10/0x10 [ 659.729990][T14778] ? find_held_lock+0x2b/0x80 [ 659.730016][T14778] apply_event_filter+0x220/0x500 [ 659.730043][T14778] ? __pfx_apply_event_filter+0x10/0x10 [ 659.730075][T14778] event_filter_write+0x16d/0x290 [ 659.730094][T14778] ? __pfx_event_filter_write+0x10/0x10 [ 659.730111][T14778] vfs_write+0x2a0/0x11d0 [ 659.730138][T14778] ? __pfx___mutex_lock+0x10/0x10 [ 659.730164][T14778] ? __pfx_vfs_write+0x10/0x10 [ 659.730196][T14778] ? __fget_files+0x20e/0x3c0 [ 659.730228][T14778] ksys_write+0x12a/0x250 [ 659.730254][T14778] ? __pfx_ksys_write+0x10/0x10 [ 659.730287][T14778] do_syscall_64+0xcd/0xf80 [ 659.730312][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.730331][T14778] RIP: 0033:0x7f016b38f7c9 [ 659.730347][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.730366][T14778] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.730384][T14778] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 659.730397][T14778] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 659.730408][T14778] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 659.730419][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.730430][T14778] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 659.730453][T14778] [ 660.687186][T14793] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 660.884644][T14725] Bluetooth: hci4: unexpected event 0x14 length: 438 > 6 [ 663.047474][T14848] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 663.472966][T14848] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 663.701913][T14848] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 663.891068][T14848] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 663.923127][T14864] nvme_fcloop: unknown parameter or missing value '7' [ 664.101582][T14848] page dumped because: unmovable page [ 664.314301][T14848] page_owner info is not present (never set?) [ 665.104359][T14725] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 668.766006][T14957] Invalid ELF header magic: != ELF [ 670.504458][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1941'. [ 672.360278][T15020] FAULT_INJECTION: forcing a failure. [ 672.360278][T15020] name failslab, interval 1, probability 0, space 0, times 0 [ 672.400303][T15020] CPU: 0 UID: 0 PID: 15020 Comm: syz.0.1946 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.400347][T15020] Tainted: [L]=SOFTLOCKUP [ 672.400354][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.400365][T15020] Call Trace: [ 672.400373][T15020] [ 672.400380][T15020] dump_stack_lvl+0x16c/0x1f0 [ 672.400409][T15020] should_fail_ex+0x512/0x640 [ 672.400440][T15020] ? __kmalloc_noprof+0xca/0x910 [ 672.400463][T15020] should_failslab+0xc2/0x120 [ 672.400493][T15020] __kmalloc_noprof+0xeb/0x910 [ 672.400514][T15020] ? lsm_blob_alloc+0x68/0x90 [ 672.400540][T15020] ? lsm_blob_alloc+0x68/0x90 [ 672.400562][T15020] lsm_blob_alloc+0x68/0x90 [ 672.400585][T15020] security_prepare_creds+0x2f/0x270 [ 672.400608][T15020] prepare_creds+0x5d6/0x940 [ 672.400634][T15020] set_current_groups+0x15/0xd0 [ 672.400654][T15020] __do_sys_setgroups+0x3e0/0x4f0 [ 672.400677][T15020] do_syscall_64+0xcd/0xf80 [ 672.400703][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.400722][T15020] RIP: 0033:0x7f894df8f7c9 [ 672.400738][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.400757][T15020] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 672.400776][T15020] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 672.400789][T15020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 672.400800][T15020] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 672.400811][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.400823][T15020] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 672.400846][T15020] [ 672.734791][T15029] [U]  [ 672.737719][T15029] [U] [ 672.740424][T15029] [U] [ 672.743118][T15029] [U] [ 672.746059][T15029] [U] [ 672.748853][T15029] [U] [ 672.751545][T15029] [U] [ 672.754329][T15029] [U] [ 672.758537][T15029] [U] [ 672.761338][T15029] [U] [ 672.764060][T15029] [U] [ 672.766755][T15029] [U] [ 672.769668][T15029] [U] [ 672.772369][T15029] [U] [ 672.775149][T15029] [U] [ 672.777971][T15029] [U] [ 672.784600][T15029] [U] [ 672.787312][T15029] [U] [ 672.790014][T15029] [U] [ 672.792824][T15029] [U] [ 672.821818][T15029] [U] [ 672.824566][T15029] [U] [ 672.827274][T15029] [U] [ 672.829972][T15029] [U] [ 672.843839][T15029] [U] [ 672.846567][T15029] [U] [ 672.849317][T15029] [U] [ 672.852027][T15029] [U] [ 672.865657][T15029] [U] [ 672.868389][T15029] [U] [ 672.871084][T15029] [U] [ 672.873779][T15029] [U] [ 672.890704][T15029] [U] [ 672.893522][T15029] [U] [ 672.896358][T15029] [U] [ 672.899067][T15029] [U] [ 672.917260][T15029] [U] [ 672.919994][T15029] [U] [ 672.922707][T15029] [U] [ 672.925401][T15029] [U] [ 672.941405][T15029] [U] [ 672.944155][T15029] [U] [ 672.946871][T15029] [U] [ 672.949673][T15029] [U] [ 672.961568][T15026] Invalid ELF header magic: != ELF [ 672.967151][T15029] [U] [ 672.969874][T15029] [U] [ 672.972586][T15029] [U] [ 672.975365][T15029] [U] [ 672.988637][T15029] [U] [ 672.991370][T15029] [U] [ 672.994098][T15029] [U] [ 672.996881][T15029] [U] [ 673.012551][T15029] [U] [ 673.015290][T15029] [U] [ 673.017996][T15029] [U] [ 673.020810][T15029] [U] [ 673.038863][T15029] [U] [ 673.041606][T15029] [U] [ 673.044331][T15029] [U] [ 673.047030][T15029] [U] [ 673.071360][T15029] [U] [ 673.074094][T15029] [U] [ 673.076806][T15029] [U] [ 673.079587][T15029] [U] [ 673.149008][T15029] [U] [ 673.151752][T15029] [U] [ 673.154552][T15029] [U] [ 673.157255][T15029] [U] [ 673.206858][T15029] [U] [ 673.209875][T15029] [U] [ 673.212925][T15029] [U] [ 673.215709][T15029] [U] [ 673.265021][T15029] [U] [ 673.267784][T15029] [U] [ 673.270482][T15029] [U] [ 673.273176][T15029] [U] [ 673.316859][T15029] [U] [ 673.319594][T15029] [U] [ 673.322288][T15029] [U] [ 673.324982][T15029] [U] [ 673.362362][T15029] [U] [ 673.365105][T15029] [U] [ 673.367805][T15029] [U] [ 673.370587][T15029] [U] [ 673.410467][T15029] [U] [ 673.413485][T15029] [U] [ 673.416216][T15029] [U] [ 673.418998][T15029] [U] [ 673.461201][T15029] [U] [ 673.463983][T15029] [U] [ 673.466707][T15029] [U] [ 673.469512][T15029] [U] [ 673.508047][T15029] [U] [ 673.510785][T15029] [U] [ 673.513573][T15029] [U] [ 673.516302][T15029] [U] [ 673.576368][T15029] [U] [ 674.433762][T15063] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1958'. [ 674.499705][T15064] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1958'. [ 674.521188][T15049] hub 1-0:1.0: USB hub found [ 674.542906][T15063] vxcan1: entered promiscuous mode [ 674.559845][T15049] hub 1-0:1.0: 1 port detected getty: ttyS0: read error: Resour[ 676.019522][T15085] mkiss: ax0: crc mode is auto. [ 676.149699][T15087] mkiss: ax0: crc mode is auto. [ 676.451880][T15095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1965'. [ 676.966681][T14743] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 677.634636][T15119] FAULT_INJECTION: forcing a failure. [ 677.634636][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 677.735187][T15119] CPU: 0 UID: 0 PID: 15119 Comm: syz.0.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.735228][T15119] Tainted: [L]=SOFTLOCKUP [ 677.735235][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.735247][T15119] Call Trace: [ 677.735255][T15119] [ 677.735263][T15119] dump_stack_lvl+0x16c/0x1f0 [ 677.735292][T15119] should_fail_ex+0x512/0x640 [ 677.735321][T15119] ? __kmalloc_noprof+0xca/0x910 [ 677.735344][T15119] should_failslab+0xc2/0x120 [ 677.735373][T15119] __kmalloc_noprof+0xeb/0x910 [ 677.735394][T15119] ? process_preds+0x46c/0x1c50 [ 677.735424][T15119] ? process_preds+0x46c/0x1c50 [ 677.735447][T15119] process_preds+0x46c/0x1c50 [ 677.735476][T15119] ? create_filter_start.constprop.0+0x56/0x300 [ 677.735505][T15119] create_filter+0x140/0x210 [ 677.735531][T15119] ? __pfx_create_filter+0x10/0x10 [ 677.735555][T15119] ? __pfx___mutex_lock+0x10/0x10 [ 677.735581][T15119] ? find_held_lock+0x2b/0x80 [ 677.735608][T15119] apply_event_filter+0x220/0x500 [ 677.735634][T15119] ? __pfx_apply_event_filter+0x10/0x10 [ 677.735666][T15119] event_filter_write+0x16d/0x290 [ 677.735686][T15119] ? __pfx_event_filter_write+0x10/0x10 [ 677.735703][T15119] vfs_write+0x2a0/0x11d0 [ 677.735731][T15119] ? __pfx___mutex_lock+0x10/0x10 [ 677.735757][T15119] ? __pfx_vfs_write+0x10/0x10 [ 677.735789][T15119] ? __fget_files+0x20e/0x3c0 [ 677.735821][T15119] ksys_write+0x12a/0x250 [ 677.735847][T15119] ? __pfx_ksys_write+0x10/0x10 [ 677.735880][T15119] do_syscall_64+0xcd/0xf80 [ 677.735905][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.735924][T15119] RIP: 0033:0x7f894df8f7c9 [ 677.735941][T15119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.735959][T15119] RSP: 002b:00007f894ee73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.735978][T15119] RAX: ffffffffffffffda RBX: 00007f894e1e5fa0 RCX: 00007f894df8f7c9 [ 677.735990][T15119] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.736001][T15119] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.736013][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.736024][T15119] R13: 00007f894e1e6038 R14: 00007f894e1e5fa0 R15: 00007ffede0dab18 [ 677.736048][T15119] [ 678.121718][T15135] hub 1-0:1.0: USB hub found [ 678.130064][T15135] hub 1-0:1.0: 1 port detected [ 678.777124][T15145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 679.493843][T15147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 680.663627][T14743] Bluetooth: hci0: unexpected subevent 0x01 length: 5 < 18 [ 681.057274][T15195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'. [ 681.517372][T15212] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1991'. [ 682.820873][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 683.701824][T15257] netlink: 302 bytes leftover after parsing attributes in process `syz.0.2003'. [ 684.904927][T15270] random: crng reseeded on system resumption [ 685.407985][T15278] random: crng reseeded on system resumption [ 685.604346][T15278] FAULT_INJECTION: forcing a failure. [ 685.604346][T15278] name failslab, interval 1, probability 0, space 0, times 0 [ 685.904264][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.4.2008 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.904299][T15278] Tainted: [L]=SOFTLOCKUP [ 685.904307][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.904319][T15278] Call Trace: [ 685.904327][T15278] [ 685.904335][T15278] dump_stack_lvl+0x16c/0x1f0 [ 685.904364][T15278] should_fail_ex+0x512/0x640 [ 685.904394][T15278] ? __kmalloc_cache_noprof+0x5f/0x800 [ 685.904418][T15278] should_failslab+0xc2/0x120 [ 685.904447][T15278] __kmalloc_cache_noprof+0x80/0x800 [ 685.904469][T15278] ? memory_bm_create+0x154/0x810 [ 685.904498][T15278] ? memory_bm_create+0x154/0x810 [ 685.904521][T15278] memory_bm_create+0x154/0x810 [ 685.904555][T15278] create_basic_memory_bitmaps+0x10b/0x370 [ 685.904586][T15278] snapshot_open+0x235/0x2b0 [ 685.904614][T15278] ? __pfx_snapshot_open+0x10/0x10 [ 685.904643][T15278] misc_open+0x26d/0x450 [ 685.904661][T15278] ? __pfx_misc_open+0x10/0x10 [ 685.904677][T15278] chrdev_open+0x234/0x6a0 [ 685.904705][T15278] ? __pfx_apparmor_file_open+0x10/0x10 [ 685.904733][T15278] ? __pfx_chrdev_open+0x10/0x10 [ 685.904763][T15278] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 685.904797][T15278] do_dentry_open+0x748/0x1590 [ 685.904823][T15278] ? __pfx_chrdev_open+0x10/0x10 [ 685.904858][T15278] vfs_open+0x82/0x3f0 [ 685.904880][T15278] path_openat+0x2078/0x3140 [ 685.904915][T15278] ? __pfx_path_openat+0x10/0x10 [ 685.904960][T15278] do_filp_open+0x20b/0x470 [ 685.904989][T15278] ? __pfx_do_filp_open+0x10/0x10 [ 685.905034][T15278] ? alloc_fd+0x471/0x7d0 [ 685.905067][T15278] do_sys_openat2+0x11f/0x280 [ 685.905088][T15278] ? __pfx_do_sys_openat2+0x10/0x10 [ 685.905118][T15278] __x64_sys_openat+0x174/0x210 [ 685.905248][T15278] ? __pfx___x64_sys_openat+0x10/0x10 [ 685.905280][T15278] do_syscall_64+0xcd/0xf80 [ 685.905306][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.905325][T15278] RIP: 0033:0x7fc361d8f7c9 [ 685.905341][T15278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.905361][T15278] RSP: 002b:00007fc362ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 685.905380][T15278] RAX: ffffffffffffffda RBX: 00007fc361fe6450 RCX: 00007fc361d8f7c9 [ 685.905392][T15278] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 685.905403][T15278] RBP: 00007fc361e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 685.905415][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.905426][T15278] R13: 00007fc361fe64e8 R14: 00007fc361fe6450 R15: 00007ffdb3818488 [ 685.905449][T15278] [ 687.507126][T15116] mkiss: ax0: crc mode is auto. [ 688.373801][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.380865][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.427275][T15341] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2011'. [ 688.984287][T15349] futex_wake_op: syz.0.2025 tries to shift op by -2048; fix this program [ 689.113025][T15352] zero sized request [ 689.228974][T15358] openvswitch: netlink: IP tunnel dst address not specified [ 689.315427][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 689.801086][T15367] FAULT_INJECTION: forcing a failure. [ 689.801086][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 689.878226][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.2.2028 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.878259][T15367] Tainted: [L]=SOFTLOCKUP [ 689.878267][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.878278][T15367] Call Trace: [ 689.878285][T15367] [ 689.878293][T15367] dump_stack_lvl+0x16c/0x1f0 [ 689.878322][T15367] should_fail_ex+0x512/0x640 [ 689.878352][T15367] ? __kmalloc_cache_noprof+0x5f/0x800 [ 689.878376][T15367] should_failslab+0xc2/0x120 [ 689.878405][T15367] __kmalloc_cache_noprof+0x80/0x800 [ 689.878427][T15367] ? alloc_tty_struct+0x96/0x8c0 [ 689.878464][T15367] ? alloc_tty_struct+0x96/0x8c0 [ 689.878487][T15367] alloc_tty_struct+0x96/0x8c0 [ 689.878513][T15367] ? __pfx_alloc_tty_struct+0x10/0x10 [ 689.878544][T15367] tty_init_dev.part.0+0x1e/0x500 [ 689.878571][T15367] tty_open+0xa4f/0xf90 [ 689.878598][T15367] ? __pfx_tty_open+0x10/0x10 [ 689.878623][T15367] ? chrdev_open+0x58c/0x6a0 [ 689.878655][T15367] ? __pfx_tty_open+0x10/0x10 [ 689.878678][T15367] chrdev_open+0x234/0x6a0 [ 689.878707][T15367] ? __pfx_chrdev_open+0x10/0x10 [ 689.878737][T15367] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 689.878770][T15367] do_dentry_open+0x748/0x1590 [ 689.878797][T15367] ? __pfx_chrdev_open+0x10/0x10 [ 689.878836][T15367] vfs_open+0x82/0x3f0 [ 689.878858][T15367] path_openat+0x2078/0x3140 [ 689.878892][T15367] ? __pfx_path_openat+0x10/0x10 [ 689.878928][T15367] do_filp_open+0x20b/0x470 [ 689.878956][T15367] ? __pfx_do_filp_open+0x10/0x10 [ 689.879001][T15367] ? alloc_fd+0x471/0x7d0 [ 689.879034][T15367] do_sys_openat2+0x11f/0x280 [ 689.879054][T15367] ? __pfx_do_sys_openat2+0x10/0x10 [ 689.879083][T15367] __x64_sys_openat+0x174/0x210 [ 689.879105][T15367] ? __pfx___x64_sys_openat+0x10/0x10 [ 689.879135][T15367] do_syscall_64+0xcd/0xf80 [ 689.879160][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.879179][T15367] RIP: 0033:0x7f016b38f7c9 [ 689.879195][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.879215][T15367] RSP: 002b:00007f016c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.879234][T15367] RAX: ffffffffffffffda RBX: 00007f016b5e5fa0 RCX: 00007f016b38f7c9 [ 689.879246][T15367] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 689.879258][T15367] RBP: 00007f016b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 689.879269][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.879280][T15367] R13: 00007f016b5e6038 R14: 00007f016b5e5fa0 R15: 00007ffd66ea5b68 [ 689.879304][T15367] [ 690.272060][T15376] phram: illegal start address [ 690.332431][T15381] FAULT_INJECTION: forcing a failure. [ 690.332431][T15381] name failslab, interval 1, probability 0, space 0, times 0 [ 690.382203][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.0.2029 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.382237][T15381] Tainted: [L]=SOFTLOCKUP [ 690.382245][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.382257][T15381] Call Trace: [ 690.382264][T15381] [ 690.382272][T15381] dump_stack_lvl+0x16c/0x1f0 [ 690.382301][T15381] should_fail_ex+0x512/0x640 [ 690.382331][T15381] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 690.382358][T15381] should_failslab+0xc2/0x120 [ 690.382387][T15381] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 690.382415][T15381] ? __pfx___debug_object_init+0x10/0x10 [ 690.382441][T15381] ? __d_alloc+0x35/0xa80 [ 690.382474][T15381] ? __d_alloc+0x35/0xa80 [ 690.382502][T15381] __d_alloc+0x35/0xa80 [ 690.382533][T15381] d_alloc_pseudo+0x1c/0xc0 [ 690.382556][T15381] alloc_file_pseudo+0xcf/0x230 [ 690.382577][T15381] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 690.382598][T15381] ? alloc_fd+0x471/0x7d0 [ 690.382628][T15381] sock_alloc_file+0x50/0x210 [ 690.382652][T15381] __sys_socket+0x1c0/0x260 [ 690.382678][T15381] ? __pfx___sys_socket+0x10/0x10 [ 690.382704][T15381] ? xfd_validate_state+0x61/0x180 [ 690.382721][T15381] ? __pfx_ksys_write+0x10/0x10 [ 690.382751][T15381] __x64_sys_socket+0x72/0xb0 [ 690.382776][T15381] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.382800][T15381] do_syscall_64+0xcd/0xf80 [ 690.382826][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.382845][T15381] RIP: 0033:0x7f894df8f7c9 [ 690.382861][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.382882][T15381] RSP: 002b:00007f894ee31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 690.382901][T15381] RAX: ffffffffffffffda RBX: 00007f894e1e6180 RCX: 00007f894df8f7c9 [ 690.382914][T15381] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 690.382926][T15381] RBP: 00007f894e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 690.382938][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.382949][T15381] R13: 00007f894e1e6218 R14: 00007f894e1e6180 R15: 00007ffede0dab18 [ 690.382972][T15381] [ 690.718287][T15380] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 692.110976][T15411] vhci_hcd vhci_hcd.2: default hub control req: 2304 v0002 i0002 l8 [ 692.153097][T15416] bond0: option all_slaves_active: invalid value () [ 692.830739][T15430] FAULT_INJECTION: forcing a failure. [ 692.830739][T15430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 692.935534][T15430] CPU: 0 UID: 0 PID: 15430 Comm: syz.1.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.935570][T15430] Tainted: [L]=SOFTLOCKUP [ 692.935577][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 692.935589][T15430] Call Trace: [ 692.935596][T15430] [ 692.935603][T15430] dump_stack_lvl+0x16c/0x1f0 [ 692.935632][T15430] should_fail_ex+0x512/0x640 [ 692.935665][T15430] get_futex_key+0x1d0/0x15f0 [ 692.935689][T15430] ? __pfx_get_futex_key+0x10/0x10 [ 692.935716][T15430] futex_wake+0xea/0x530 [ 692.935743][T15430] ? __pfx_futex_wake+0x10/0x10 [ 692.935774][T15430] ? kmem_cache_free+0x171/0x770 [ 692.935802][T15430] do_futex+0x1e3/0x350 [ 692.935823][T15430] ? __pfx_do_futex+0x10/0x10 [ 692.935844][T15430] ? __pfx___might_resched+0x10/0x10 [ 692.935871][T15430] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 692.935895][T15430] ? _raw_spin_unlock_irq+0x23/0x50 [ 692.935918][T15430] __x64_sys_futex+0x1e0/0x4c0 [ 692.935941][T15430] ? __do_sys_close_range+0x278/0x730 [ 692.935970][T15430] ? __pfx___x64_sys_futex+0x10/0x10 [ 692.935992][T15430] ? xfd_validate_state+0x61/0x180 [ 692.936017][T15430] do_syscall_64+0xcd/0xf80 [ 692.936041][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.936060][T15430] RIP: 0033:0x7fb1b738f7c9 [ 692.936075][T15430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.936093][T15430] RSP: 002b:00007fb1b818d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 692.936112][T15430] RAX: ffffffffffffffda RBX: 00007fb1b75e6188 RCX: 00007fb1b738f7c9 [ 692.936124][T15430] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb1b75e618c [ 692.936136][T15430] RBP: 00007fb1b75e6180 R08: 00007fb1b81d0000 R09: 0000000000000000 [ 692.936147][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.936159][T15430] R13: 00007fb1b75e6218 R14: 00007ffd47545d20 R15: 00007ffd47545e08 [ 692.936189][T15430] [ 693.196201][T15416] bond0: option all_slaves_active: invalid value () [ 693.624565][T15425] bond0: option fail_over_mac: invalid value () [ 693.817506][T15442] vhci_hcd vhci_hcd.1: invalid port number 21 [ 693.922344][T15444] mkiss: ax0: crc mode is auto. [ 694.363513][T15455] mkiss: ax1: crc mode is auto. [ 698.575730][T15527] zswap: compressor not available [ 699.404373][T15539] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2063'. [ 699.780390][T15554] vivid-003: ================= START STATUS ================= [ 699.838374][T15554] vivid-003: Radio HW Seek Mode: Bounded [ 699.913363][T15554] vivid-003: Radio Programmable HW Seek: false [ 699.982827][T15554] vivid-003: RDS Rx I/O Mode: Block I/O [ 700.041358][T15554] vivid-003: Generate RBDS Instead of RDS: false [ 700.093549][T15554] vivid-003: RDS Reception: true [ 700.115208][T15554] vivid-003: RDS Program Type: 0 inactive [ 700.150722][T15554] vivid-003: RDS PS Name: inactive [ 700.185462][T15554] vivid-003: RDS Radio Text: inactive [ 700.214329][T15554] vivid-003: RDS Traffic Announcement: false inactive [ 700.244493][T15554] vivid-003: RDS Traffic Program: false inactive [ 700.288050][T15554] vivid-003: RDS Music: false inactive [ 700.318504][T15554] vivid-003: ================== END STATUS ================== [ 700.641870][T15561] netlink: 'syz.1.2068': attribute type 4 has an invalid length. [ 700.681391][T15561] netlink: 'syz.1.2068': attribute type 4 has an invalid length. [ 700.729381][T15561] netlink: 'syz.1.2068': attribute type 4 has an invalid length. [ 701.861925][T15572] FAULT_INJECTION: forcing a failure. [ 701.861925][T15572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.970139][T15572] CPU: 0 UID: 0 PID: 15572 Comm: syz.1.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.970173][T15572] Tainted: [L]=SOFTLOCKUP [ 701.970180][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.970192][T15572] Call Trace: [ 701.970199][T15572] [ 701.970207][T15572] dump_stack_lvl+0x16c/0x1f0 [ 701.970236][T15572] should_fail_ex+0x512/0x640 [ 701.970269][T15572] _copy_from_user+0x2e/0xd0 [ 701.970300][T15572] memdup_user+0x6b/0xe0 [ 701.970323][T15572] snd_ctl_ioctl+0xe8b/0x13e0 [ 701.970347][T15572] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 701.970372][T15572] ? find_held_lock+0x2b/0x80 [ 701.970396][T15572] ? hook_file_ioctl_common+0x144/0x410 [ 701.970419][T15572] ? __fget_files+0x20e/0x3c0 [ 701.970449][T15572] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 701.970473][T15572] __x64_sys_ioctl+0x18e/0x210 [ 701.970499][T15572] do_syscall_64+0xcd/0xf80 [ 701.970524][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.970544][T15572] RIP: 0033:0x7fb1b738f7c9 [ 701.970561][T15572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.970579][T15572] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.970598][T15572] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 701.970610][T15572] RDX: 0000000000000000 RSI: 00000000c4c85512 RDI: 0000000000000004 [ 701.970621][T15572] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 701.970633][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.970644][T15572] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 701.970666][T15572] [ 705.631117][T15465] mkiss: ax0: crc mode is auto. [ 705.748553][T15630] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2081'. [ 706.616447][T15648] vivid-007: ================= START STATUS ================= [ 706.751365][T15648] vivid-007: Generate PTS: true [ 706.871706][T15648] vivid-007: Generate SCR: true [ 706.876788][T15648] tpg source WxH: 320x240 (Y'CbCr) [ 706.998509][T15648] tpg field: 1 [ 707.073725][T15648] tpg crop: (0,0)/320x240 [ 707.128810][T15648] tpg compose: (0,0)/320x240 [ 707.198503][T15648] tpg colorspace: 8 [ 707.242645][T15648] tpg transfer function: 0/0 [ 707.305025][T15648] tpg Y'CbCr encoding: 0/0 [ 707.359629][T15648] tpg quantization: 0/0 [ 707.432287][T15648] tpg RGB range: 0/2 [ 707.479588][T15648] vivid-007: ================== END STATUS ================== [ 708.804163][T15675] ================================================================== [ 708.812461][T15675] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 708.820287][T15675] Read of size 8 at addr ffff888143ff4e18 by task syz.1.2089/15675 [ 708.828273][T15675] [ 708.830615][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.1.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.830642][T15675] Tainted: [L]=SOFTLOCKUP [ 708.830649][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.830661][T15675] Call Trace: [ 708.830668][T15675] [ 708.830676][T15675] dump_stack_lvl+0x116/0x1f0 [ 708.830703][T15675] print_report+0xcd/0x630 [ 708.830731][T15675] ? __virt_addr_valid+0x81/0x610 [ 708.830760][T15675] ? __phys_addr+0xe8/0x180 [ 708.830787][T15675] ? dvb_device_open+0x36a/0x3b0 [ 708.830811][T15675] kasan_report+0xe0/0x110 [ 708.830838][T15675] ? dvb_device_open+0x36a/0x3b0 [ 708.830864][T15675] ? __pfx_dvb_device_open+0x10/0x10 [ 708.830888][T15675] dvb_device_open+0x36a/0x3b0 [ 708.830912][T15675] ? __pfx_dvb_device_open+0x10/0x10 [ 708.830937][T15675] chrdev_open+0x234/0x6a0 [ 708.830965][T15675] ? __pfx_apparmor_file_open+0x10/0x10 [ 708.830993][T15675] ? __pfx_chrdev_open+0x10/0x10 [ 708.831021][T15675] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 708.831057][T15675] do_dentry_open+0x748/0x1590 [ 708.831084][T15675] ? __pfx_chrdev_open+0x10/0x10 [ 708.831114][T15675] vfs_open+0x82/0x3f0 [ 708.831134][T15675] path_openat+0x2078/0x3140 [ 708.831164][T15675] ? __pfx_path_openat+0x10/0x10 [ 708.831194][T15675] do_filp_open+0x20b/0x470 [ 708.831221][T15675] ? __pfx_do_filp_open+0x10/0x10 [ 708.831255][T15675] ? alloc_fd+0x471/0x7d0 [ 708.831283][T15675] do_sys_openat2+0x11f/0x280 [ 708.831303][T15675] ? __pfx_do_sys_openat2+0x10/0x10 [ 708.831327][T15675] __x64_sys_openat+0x174/0x210 [ 708.831347][T15675] ? __pfx___x64_sys_openat+0x10/0x10 [ 708.831372][T15675] do_syscall_64+0xcd/0xf80 [ 708.831395][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.831415][T15675] RIP: 0033:0x7fb1b738f7c9 [ 708.831430][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.831449][T15675] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 708.831467][T15675] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 708.831480][T15675] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 708.831492][T15675] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.831503][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.831515][T15675] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 708.831533][T15675] [ 708.831539][T15675] [ 709.082607][T15675] Allocated by task 1: [ 709.086679][T15675] kasan_save_stack+0x33/0x60 [ 709.091454][T15675] kasan_save_track+0x14/0x30 [ 709.096166][T15675] __kasan_kmalloc+0xaa/0xb0 [ 709.100853][T15675] dvb_register_device+0x1e4/0x2370 [ 709.106215][T15675] dvb_register_frontend+0x5a6/0x8a0 [ 709.111529][T15675] vidtv_bridge_probe+0x459/0xa90 [ 709.116657][T15675] platform_probe+0x106/0x1d0 [ 709.121430][T15675] really_probe+0x241/0xb20 [ 709.126279][T15675] __driver_probe_device+0x1de/0x470 [ 709.131651][T15675] driver_probe_device+0x4c/0x1b0 [ 709.136873][T15675] __driver_attach+0x283/0x5e0 [ 709.141821][T15675] bus_for_each_dev+0x13e/0x1d0 [ 709.146708][T15675] bus_add_driver+0x30f/0x6c0 [ 709.151391][T15675] driver_register+0x15c/0x4b0 [ 709.156382][T15675] vidtv_bridge_init+0x45/0x80 [ 709.161231][T15675] do_one_initcall+0x123/0x680 [ 709.166045][T15675] kernel_init_freeable+0x5c8/0x920 [ 709.171768][T15675] kernel_init+0x1c/0x2b0 [ 709.176193][T15675] ret_from_fork+0x983/0xb10 [ 709.180783][T15675] ret_from_fork_asm+0x1a/0x30 [ 709.185759][T15675] [ 709.188168][T15675] Freed by task 15380: [ 709.192324][T15675] kasan_save_stack+0x33/0x60 [ 709.197010][T15675] kasan_save_track+0x14/0x30 [ 709.201792][T15675] kasan_save_free_info+0x3b/0x60 [ 709.206818][T15675] __kasan_slab_free+0x5f/0x80 [ 709.211585][T15675] kfree+0x2f8/0x6e0 [ 709.215561][T15675] dvb_device_put.part.0+0x60/0x90 [ 709.220676][T15675] dvb_device_open+0x2a4/0x3b0 [ 709.225662][T15675] chrdev_open+0x234/0x6a0 [ 709.230093][T15675] do_dentry_open+0x748/0x1590 [ 709.234873][T15675] vfs_open+0x82/0x3f0 [ 709.238939][T15675] path_openat+0x2078/0x3140 [ 709.243673][T15675] do_filp_open+0x20b/0x470 [ 709.248306][T15675] do_sys_openat2+0x11f/0x280 [ 709.252987][T15675] __x64_sys_openat+0x174/0x210 [ 709.257843][T15675] do_syscall_64+0xcd/0xf80 [ 709.262353][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.268386][T15675] [ 709.270789][T15675] The buggy address belongs to the object at ffff888143ff4e00 [ 709.270789][T15675] which belongs to the cache kmalloc-256 of size 256 [ 709.284844][T15675] The buggy address is located 24 bytes inside of [ 709.284844][T15675] freed 256-byte region [ffff888143ff4e00, ffff888143ff4f00) [ 709.298722][T15675] [ 709.301040][T15675] The buggy address belongs to the physical page: [ 709.307533][T15675] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888143ff4e00 pfn:0x143ff4 [ 709.317765][T15675] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 709.326268][T15675] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 709.335209][T15675] page_type: f5(slab) [ 709.339319][T15675] raw: 057ff00000000240 ffff88813ff26b40 ffff888140400708 ffffea000503b710 [ 709.348087][T15675] raw: ffff888143ff4e00 000000000010000f 00000000f5000000 0000000000000000 [ 709.356780][T15675] head: 057ff00000000240 ffff88813ff26b40 ffff888140400708 ffffea000503b710 [ 709.365486][T15675] head: ffff888143ff4e00 000000000010000f 00000000f5000000 0000000000000000 [ 709.374340][T15675] head: 057ff00000000001 ffffea00050ffd01 00000000ffffffff 00000000ffffffff [ 709.383534][T15675] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 709.392304][T15675] page dumped because: kasan: bad access detected [ 709.398712][T15675] page_owner tracks the page as allocated [ 709.404422][T15675] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23961443870, free_ts 0 [ 709.424487][T15675] post_alloc_hook+0x1af/0x220 [ 709.429260][T15675] get_page_from_freelist+0xd0b/0x31a0 [ 709.434733][T15675] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 709.440626][T15675] alloc_pages_mpol+0x1fb/0x550 [ 709.445481][T15675] new_slab+0x2c3/0x430 [ 709.449663][T15675] ___slab_alloc+0xe18/0x1c90 [ 709.454366][T15675] __slab_alloc.constprop.0+0x63/0x110 [ 709.460044][T15675] __kmalloc_cache_noprof+0x485/0x800 [ 709.465413][T15675] bus_add_driver+0x92/0x6c0 [ 709.470077][T15675] driver_register+0x15c/0x4b0 [ 709.474841][T15675] usb_register_driver+0x216/0x4d0 [ 709.479980][T15675] do_one_initcall+0x123/0x680 [ 709.485124][T15675] kernel_init_freeable+0x5c8/0x920 [ 709.490421][T15675] kernel_init+0x1c/0x2b0 [ 709.494934][T15675] ret_from_fork+0x983/0xb10 [ 709.499710][T15675] ret_from_fork_asm+0x1a/0x30 [ 709.504683][T15675] page_owner free stack trace missing [ 709.510492][T15675] [ 709.512871][T15675] Memory state around the buggy address: [ 709.518502][T15675] ffff888143ff4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 709.526736][T15675] ffff888143ff4d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 709.534890][T15675] >ffff888143ff4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 709.543039][T15675] ^ [ 709.547969][T15675] ffff888143ff4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 709.556202][T15675] ffff888143ff4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 709.564428][T15675] ================================================================== [ 710.300796][T15675] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 710.308047][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.1.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.318988][T15675] Tainted: [L]=SOFTLOCKUP [ 710.323484][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.333912][T15675] Call Trace: [ 710.337367][T15675] [ 710.340310][T15675] dump_stack_lvl+0x3d/0x1f0 [ 710.344909][T15675] vpanic+0x640/0x6f0 [ 710.349176][T15675] panic+0xca/0xd0 [ 710.353014][T15675] ? __pfx_panic+0x10/0x10 [ 710.357641][T15675] ? dvb_device_open+0x36a/0x3b0 [ 710.362591][T15675] ? preempt_schedule_common+0x44/0xc0 [ 710.368244][T15675] ? preempt_schedule_thunk+0x16/0x30 [ 710.373631][T15675] ? check_panic_on_warn+0x1f/0xb0 [ 710.378788][T15675] check_panic_on_warn+0xab/0xb0 [ 710.383754][T15675] end_report+0x107/0x160 [ 710.388400][T15675] kasan_report+0xee/0x110 [ 710.392829][T15675] ? dvb_device_open+0x36a/0x3b0 [ 710.397785][T15675] ? __pfx_dvb_device_open+0x10/0x10 [ 710.403077][T15675] dvb_device_open+0x36a/0x3b0 [ 710.407867][T15675] ? __pfx_dvb_device_open+0x10/0x10 [ 710.413242][T15675] chrdev_open+0x234/0x6a0 [ 710.417762][T15675] ? __pfx_apparmor_file_open+0x10/0x10 [ 710.423328][T15675] ? __pfx_chrdev_open+0x10/0x10 [ 710.428289][T15675] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 710.434642][T15675] do_dentry_open+0x748/0x1590 [ 710.439453][T15675] ? __pfx_chrdev_open+0x10/0x10 [ 710.444683][T15675] vfs_open+0x82/0x3f0 [ 710.448993][T15675] path_openat+0x2078/0x3140 [ 710.453615][T15675] ? __pfx_path_openat+0x10/0x10 [ 710.458611][T15675] do_filp_open+0x20b/0x470 [ 710.463324][T15675] ? __pfx_do_filp_open+0x10/0x10 [ 710.468600][T15675] ? alloc_fd+0x471/0x7d0 [ 710.473321][T15675] do_sys_openat2+0x11f/0x280 [ 710.478681][T15675] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.483913][T15675] __x64_sys_openat+0x174/0x210 [ 710.488973][T15675] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.494376][T15675] do_syscall_64+0xcd/0xf80 [ 710.499084][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.504986][T15675] RIP: 0033:0x7fb1b738f7c9 [ 710.509509][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.529408][T15675] RSP: 002b:00007fb1b81cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.537939][T15675] RAX: ffffffffffffffda RBX: 00007fb1b75e5fa0 RCX: 00007fb1b738f7c9 [ 710.545923][T15675] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 710.553995][T15675] RBP: 00007fb1b7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 710.562000][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.569985][T15675] R13: 00007fb1b75e6038 R14: 00007fb1b75e5fa0 R15: 00007ffd47545e08 [ 710.577980][T15675] [ 710.581119][T15675] Kernel Offset: disabled [ 710.585532][T15675] Rebooting in 86400 seconds..