last executing test programs: 19m9.756735203s ago: executing program 0 (id=1): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN2(r0, 0x4008af14, &(0x7f0000000140)={0x1, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x6, 0x15) fchdir$auto(r2) pselect6$auto(0x6, &(0x7f0000000040)={[0xff, 0x0, 0x8, 0x7, 0x5, 0x6, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x4, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r4 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) socket(0xa, 0x2, 0x88) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) 19m9.478108216s ago: executing program 3 (id=5): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) 19m9.146382055s ago: executing program 3 (id=6): set_mempolicy$auto(0xf02, &(0x7f0000000000)=0x7e, 0xffffffff) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000001480)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00\xf9Z\x98/V\xfeSi\xc2?Jav\xa4\xbb\x84j\xf1\x93se\x00\x7f\xd62\x0f\xaf\x1e\xacn\xd6\x88\xd8~Y\x8en\xff\xa4\xd7\xb7\x96k{\xb1e\xee\x8e|\xa5\x1a\xa9~\x86g\f\xf8g\xd2(`\xb6rY\xf2)\xfd\x8e\xe6\x03T\x1d\xdb\xec\xe0l\xaa\xe0X\x15\x7f\xb6d[\x9f\x98o\x9f\x94v>\xf7,\xa3\xd5^\xb1b\xa1\b\x00\x00\x00\xa1\x1e\xb2&J\xc4\xa8K\xdc\xaf\aD\xfd5Y\x90\x03\x7f\xab\xf4\xf5\xa3\\x&\x00i\xd7\x93}v\"\x05\xefd\xfc7\xeaJ\x12;\x9a\xe4\xdc\f\xba6\xce\x9a\x85W\'\xb7\xc3iEH\xee\xdfWU\xc3\xabr\xe3k\xf4\xedP\x8d/\xab\xf9L\xeb0\xbd\x95G\xa4\xca\xeb\xae\xd9n&\xb5y\xbb\xa61O\xb5\xd4R\x17\xab\x94\xf0oA\x06Y\x17\x82\xfd~z?ZaX\x91J\xd3\f\xf9\xf1y:8PB8~9\x8f\xf8gG\t\x98&\x9b\xb5\xa6\tV\xc4IY\xf5A\x99\x93\xd5\xd2\x80\x98\x13\xda\xfd\xf2\xc6\x97I5\xacD\xdd\xff\xac\xb1\xd4!#.7\xc7\x005\x1f\r\xbe\xf4M\xe1\xff\xb6\xd9`\xb2\xf1\xc9\xcd\x83\xa9\xd8\ta#\xe1\xf3\x8a\a\xf5\x84Aq\x9b\xa2\xac\x02T<\ts\xc0\x93\xf1\xfc\xb2\x83\x985_\b{\xee\xaa\xd0\x0f\xeb\xeaE\x91X\xe7E\xc8O\xf9\xdb\x14>X*\x93\xc7\v\x8av\xcd]g\x8c{@\xbf\x89\xad\xf3\x8b\xe5t\xea\x15\x92Z\x19x\x84', 0x80000000000007) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r3 = socket(0x23, 0x5, 0x0) listen$auto(r3, 0x5ed) unshare$auto(0x40000080) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x428c2, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x448041, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) r5 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC0D0c\x00', 0x24500, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r6, 0x40084149, 0x0) 19m8.728648112s ago: executing program 0 (id=7): r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(0x0, r2) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf2502000000060002000400000005000d000200000006001d000100000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x200000000ae18, 0x0, 0x37, r4, 0x8000) connect$auto(0x3, 0x0, 0x55) r7 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r6, 0x0, 0x5c8) close_range$auto(r7, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r8, r0, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) 19m8.671954025s ago: executing program 3 (id=8): ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, 0x0, 0xab700, 0x0) read$auto_proc_timers_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x2000000008, 0xeb0, 0xfffffffffffffffa, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, 0xffffffffffffffff) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_SG_IO2(r2, 0x2285, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) socket(0xf, 0x3, 0x2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xc451, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x8000000003, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0xa]}, 0x0) r6 = socket(0x23, 0x5, 0x0) bind$auto(r6, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xd) ioprio_get$auto(0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) 19m8.182787926s ago: executing program 32 (id=7): r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(0x0, r2) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf2502000000060002000400000005000d000200000006001d000100000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x200000000ae18, 0x0, 0x37, r4, 0x8000) connect$auto(0x3, 0x0, 0x55) r7 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r6, 0x0, 0x5c8) close_range$auto(r7, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r8, r0, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) 19m7.5732505s ago: executing program 3 (id=11): mmap$auto(0x1, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x208000) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x367a05, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port4/connect_type\x00', 0x103902, 0x0) sendfile$auto(r4, r4, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) getsockopt$auto_SO_TIMESTAMPNS_OLD(r2, 0x9, 0x23, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000380)=0x8a1f) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x91e4, 0x8, 0x5) ioctl$auto_OSS_GETVERSION2(0xffffffffffffffff, 0x80044d76, 0x0) 19m5.933099393s ago: executing program 3 (id=16): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN2(r0, 0x4008af14, &(0x7f0000000140)={0x1, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x6, 0x15) fchdir$auto(r2) pselect6$auto(0x6, &(0x7f0000000040)={[0xff, 0x0, 0x8, 0x7, 0x5, 0x6, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x4, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r4 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) socket(0xa, 0x2, 0x88) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) 19m4.040457138s ago: executing program 3 (id=18): unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) io_uring_setup$auto(0x1406, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/vcan0/base_reachable_time\x00', 0x63ec49235cfa58cd, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_rb_simple_fops_trace(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a) r3 = dup$auto(0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xdf, 0x517b, r3, 0x1000) write$auto_fops_atomic_t_(r3, 0x0, 0x0) r4 = socket(0x10, 0x5, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, r4, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) umask$auto(0xa738) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 19m3.694055622s ago: executing program 33 (id=18): unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) io_uring_setup$auto(0x1406, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/vcan0/base_reachable_time\x00', 0x63ec49235cfa58cd, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_rb_simple_fops_trace(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a) r3 = dup$auto(0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xdf, 0x517b, r3, 0x1000) write$auto_fops_atomic_t_(r3, 0x0, 0x0) r4 = socket(0x10, 0x5, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, r4, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) umask$auto(0xa738) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 17.488073854s ago: executing program 1 (id=3488): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x3, 0x4, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x2, 0x5, 0x2, 0x8ebe, 0x48, 0x6, 0x2c3, 0x5, 0x92}, 0xc65b51e) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) r1 = getpid() (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r2 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r2) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async, rerun: 64) r3 = getpid() (rerun: 64) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x23, 0x2, 0x4) pipe2$auto(0x0, 0x7) (async, rerun: 32) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0x1e, 0x1, 0x0) (async, rerun: 64) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) (async) socket(0x28, 0x5, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) pipe2$auto(0x0, 0x80) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async, rerun: 64) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) (rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) 16.043065678s ago: executing program 1 (id=3495): mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000004) signalfd$auto(0x4, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mmap$auto(0x4, 0x80000000000000, 0x0, 0x40eb1, r0, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0x800, 0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xbc, &(0x7f00000002c0)={0x0, 0xfdef}, 0x8001, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) close_range$auto(0x0, 0x5, 0x0) r2 = pipe$auto(0x0) pipe$auto(0x0) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000100)=""/94, 0xfffffe44) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x200000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0xffffffffffffffff, 0x201800008000) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x401901, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) 14.968190414s ago: executing program 1 (id=3500): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000480)="f77f969c12e4c15197f49654d7d736e5b837568999ca9e0af004dcfe13ff59e4fb06eff4d2e3cb4b0644de3db70a84e65268dbb68bbfddff9d98969cd4804e0013df8060291a05f70fb764a31a95ad89a1b9f802cdb117cd52e8ebf467c9ba9ec920c3d82e40e4354c3b963562335c7f651c10ce01e412a425f813a6f7cf9c3d8ea597c7ba698a3daa12e66284ffbadfb23390d9eef34878864ae6a1ab9775a99695b1c3799b0d4f9df6f247faca9ecd1b7be608384862639b4ec81ba15c4c85c93b530b238889c504c258e870e077f2cd69", 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x100}, 0x5, &(0x7f0000000180), 0x1, 0x1000}, 0x5}, 0xd0b7, 0x100) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2) r4 = socket(0x1c, 0x6, 0x6) setsockopt$auto(r4, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/chk_general\x00', 0x92000, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000400)={r5, &(0x7f00000001c0)="2b1ffaddc58e354331242e15517c0da9fc87c41c324c4c8af4f7d871944db159f512bd90c154d90e1446ea8f32248052918fbf101d74f9b65b8ddfccd846bc648bee071a72a6456191efe84e", 0xffffffff, &(0x7f0000000240)="b1803f1c1489122f03639133c04aba9a51c33591020a56447f0637f7f6e1a10f399f83688b328d9f80148d426813fa8e06cc0225dacc4dc6c8ae06819dcef5c8b16f5f623bb13a1e9a8cad55b8134619dcb93640ee20ee1da7f560ff5b3e218242028ab4a5c309", 0x9, &(0x7f0000000340)="1793374ad8ef7f42e28c3ea007cf9e8c2776df95bbf785c9696199fbb9698db520208747b4c3cb4c14b0339aaf98faa32ee9c148a857643a142bb307788f6df929d6048fef7418fada1d0a7aeb8fa2e0a96b8e1e6dde2cee4ab7d99d9a0d2d2d218e2792547d406d53eb9d6372e590b15b2819542559fe24e3a0be0263f84a74cb4b9ad5ff069b6d", &(0x7f00000002c0)}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff, &(0x7f0000000440)={0x7fff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x988\xdfZf\xb8&\x959-\n\xcc[w\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x7, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) 13.742984617s ago: executing program 1 (id=3504): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket$nl_generic(0x10, 0x3, 0x10) 12.812699794s ago: executing program 1 (id=3509): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) socket(0xa, 0x2, 0x88) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) 11.660763392s ago: executing program 1 (id=3513): syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x503400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/hw_queues\x00', 0x82, 0x0) preadv$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x5, 0x37, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x104c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x1004, 0x2e, 0x0, 0x1, [@generic="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"]}, @NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, ':\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x7}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xb1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}]}, 0x104c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) close_range$auto(0x0, r0, 0x2002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r5, 0x110, 0x5, 0x0, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 11.007837493s ago: executing program 34 (id=3513): syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x503400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/hw_queues\x00', 0x82, 0x0) preadv$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x5, 0x37, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x104c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x1004, 0x2e, 0x0, 0x1, [@generic="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"]}, @NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, ':\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x7}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xb1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}]}, 0x104c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) close_range$auto(0x0, r0, 0x2002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r5, 0x110, 0x5, 0x0, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 7.138351775s ago: executing program 2 (id=3526): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ff) (async) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f0000000300)={{0x80000001, 0xee01, 0x0, 0xffff, 0x40000000, 0x3, 0x3589}, 0x5, 0x7, 0xffffffffffffffff, 0xe, @raw=0x2, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f00000000c0)="bf0144acefb29c50ce9e19490c98cf09619f0657078ae1c9654027c3d0904beec427359992a2fe7e1f9f1cf52b57a5da5e930b83006a4cf160ca2a61f418619a55f7d959a060a5fcdee4c6c83f41dc03b49529ba2fa6b3318b490ba58ba6737b9b2c889989d2d837a5a7ff2b494e67f38ee135c4639e3c335178949dc0a6db6272e2db3687569f2aee97f9797c2c1732f6a3377a59fa84372d0c69d1fd352576586301aeae35dac06775d64cacd578810d822ce02d35b3439dfb674806193c", &(0x7f00000001c0)="c65b1e38a7a248932f53f25ecb6ced329d6213d1844864b9f53bbf63a63aefd5f9719a36f0826133eb96a76339fdce7d1935d2db9909194e4f03dca2320f942bbc4d023f7a005ea7fd217baa4fae44ff4ebb5cdc69bf001e6d732746d984e3c5407944aa3ff226af7977db8c3d7ba4fc59ed60d7749d951d7f609807543a959eb194cfa4e64ffa5203f9ff338229d7f3907cf929ef3565c8397cb335819404beb8ad9e26cbacc50725ce2bb4"}) r4 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000440), 0x480100, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r4, 0x5, &(0x7f0000000480)="76fde053cfa8380bfefe241d68e8c68a9a890c68632dab2bc996bf70de87f1efb6e6c48d98851ffe96e5d3921b65321db5ea19979a92a58e0272b3c787faac8d0bd0d25935e9aec6d99e4b8cd03452f77a78a1c645695fcbdd") (async) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=r1, @ANYBLOB="000427bd7000fddbdf257c00000008005200", @ANYRES32, @ANYBLOB="0400870025004f001d439ca3de90bc8d412bfdf8e045eaf69abd3bd053d0a1c24b1db680356f7d8fb50000002a025a80b300cb0090a9a489f28bc34c408eb9172f790c63cd9fd40dfccdec13bcded93d53376744e51337b3c96deb580e94c62a3de1fb979f5fc17b1228e3f0c45300c321e5e5ae61a32fd5d28d1176593b841fd04fd5bfcb5b98ec6d415228bb0417746c9b0511d59a84200eef0778ddfff7289f01c0a11e81dda2697c7f92778df84ab77dae72e238d8e27a0ea41ecf4931253eda78fadc2fe599f69c6677990418c877b565796769f915e7648b4cf3deec740f84eb0014005c800800bb00", @ANYRES32, @ANYBLOB="0400da80040037801000c400", @ANYRES32=r3, @ANYBLOB="ca004300cef96b1cd97f7be14dae1689517718ce4af932bb13017461ce99061e7d927019928eccfabcfff20e5ffe9f97067eb962c0726a365075bd3320fff287111f3559d12ff77aeffb006b758f01206d26fefbfc77f54b7106ec4bc940d8a1596f2e105b5c6d4787462941eae1eb1a781fe106a2d1347dffe402abfc00913901f4c9856b69dee96a990310ff8bffe91a0f5aa4488be0e7c972590b7c167868b74f8da310758ce4f2629b1f04719f3af388a4a86c5257679623dc15d72081878ae037986f76234efe170000180063800800f8007f0000010800e600", @ANYRES32, @ANYBLOB="0400ff80648cef2dd40f4cbca4b4eea0ac18aff4d4a5d81478e63284ace9e039dc5eeb8788ba079b71fef3db06ca04444655bdf58d301d260f3e40c342f34de33c2cb19f3b88267656fd8b9a352205d1c570d8dffada5ed1b0cd14004f00fe8000000000000000000000000000aa0000"], 0x274}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x4000) (async) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x100}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x80000001}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r6}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r6}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x4000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x181482, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) socket(0x2, 0x80802, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) io_cancel$auto(0x3, 0x0, 0x0) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=@token_create={0x3, r0}, 0x3) 6.730311663s ago: executing program 2 (id=3528): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket$nl_generic(0x10, 0x3, 0x10) 6.658871373s ago: executing program 5 (id=3529): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0xffffffffffffffff, 0x1) read$auto(0x3, 0x0, 0x80) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r1, 0x0, 0x881) sysinfo$auto(&(0x7f0000000100)={0xffffffffffff0ee8, [0x6, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x80, 0x0, 0x100000000, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 6.526364884s ago: executing program 4 (id=3530): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, r1, 0x1) read$auto(0x3, 0x0, 0x80) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xffffffffffffff83}, 0x5, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x881) sysinfo$auto(&(0x7f0000000100)={0xffffffffffff0ee8, [0x6, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x80, 0x0, 0x100000000, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.967002239s ago: executing program 5 (id=3531): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) prctl$auto(0x44, 0x7, 0x0, 0x6fffffffffffffff, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r2) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0x14, r3, 0x305, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) 5.744158402s ago: executing program 2 (id=3532): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, r1, 0x1) read$auto(0x3, 0x0, 0x80) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xffffffffffffff83}, 0x5, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x881) sysinfo$auto(&(0x7f0000000100)={0xffffffffffff0ee8, [0x6, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x80, 0x0, 0x100000000, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.556485352s ago: executing program 4 (id=3533): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket$nl_generic(0x10, 0x3, 0x10) 4.590823046s ago: executing program 2 (id=3534): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b140, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) fcntl$auto(0x3, 0x4, 0xa553) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0xdcbf, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @raw=0x2, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05b1bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1000000000000000200"}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) mmap$auto(0xfffffffffffffffc, 0x2, 0x1, 0x19, 0x7, 0x28801) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) 3.327342444s ago: executing program 4 (id=3535): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0xffffffffffffffff, 0x1) read$auto(0x3, 0x0, 0x80) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r1, 0x0, 0x881) sysinfo$auto(&(0x7f0000000100)={0xffffffffffff0ee8, [0x6, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x80, 0x0, 0x100000000, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.30586222s ago: executing program 5 (id=3536): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x0, 0x36ec}, 0x1, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) setfsuid$auto(0x401) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) socketpair$auto(0x3, 0x80001, 0x7d, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto(0x3, 0x541b, 0x38) 3.169812481s ago: executing program 4 (id=3537): msgctl$auto_IPC_STAT(0x7e0, 0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x2, 0x9, 0x3}, 0x0, &(0x7f00000001c0)=0x80, 0x6, 0x0, 0x0, 0x2, 0x4, 0x79, 0xff80, 0x7, @raw=0x8}) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)="78fb0061d8de2cf07a61e53c4bf3ac7c360ebad7bbe37a6530667defb2a5c22348fb02695d8284efab4c1d99f3da8d5290ddd76af3a614da71f401e1bc4060a3b81b0fc1511c7f90fdfabbd9e1e23d3f821f28681b1cebd43c5325ebd3fb56421b0f1efae995b0a44e6ffd4d") landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = epoll_create$auto(0x3e) mq_open$auto(0x0, 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x8, 0x1, 0x3, 0x1, "e205a4a21d2ddd2d6313691c349dd9f8278b9af0992431a1d29c8fb607713f6c"}) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0xc0a00, 0x0) pread64$auto(r3, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94p\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x10fd42, 0x9) 2.88965114s ago: executing program 5 (id=3538): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000180), r0) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x6) clone$auto(0xfffc, 0x8000000004, 0x0, 0x0, 0x8744) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r6, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 1.888203647s ago: executing program 2 (id=3539): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, r1, 0x1) read$auto(0x3, 0x0, 0x80) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xffffffffffffff83}, 0x5, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x881) sysinfo$auto(&(0x7f0000000100)={0xffffffffffff0ee8, [0x6, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x80, 0x0, 0x100000000, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.887481663s ago: executing program 5 (id=3540): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x4, 0xa6ad, 0x7, 0xca4b, @prog_cnt=0x40, 0x0, 0x4, 0x0, 0x100, 0x2}, 0x122) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key=0x7, 0x6}, 0x6b) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) r0 = socket(0xa, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socketpair$auto(0x20004, 0x1, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x3823db16596e4f38, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1.307728362s ago: executing program 4 (id=3541): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = memfd_create$auto(0x0, 0xb) write$auto(r1, 0x0, 0xfd94) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mprotect$auto(0xc000, 0x8, 0x8) 701.270367ms ago: executing program 2 (id=3542): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) madvise$auto(0x8, 0x2000040080000000, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card2/id\x00', 0x400000, 0x0) pread64$auto(r2, 0x0, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x4, 0x400053, 0x5) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video43\x00', 0xe500, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8) ioctl$auto(0x3, 0x80087601, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip6_flowlabel\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x2) r5 = getsockopt$auto(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xfffffffffffffffa, 0x200000008000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r5) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x91c1987690a418b8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x41) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r5) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140)=0x3f, 0x0, 0x2) 585.476831ms ago: executing program 5 (id=3543): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=3544): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x401f, @inferred=r1, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0) write$auto(r5, &(0x7f0000000000)='y\x8c', 0x2) fadvise64$auto(r4, 0x8, 0x400000000000006, 0x4) socket(0x29, 0xa, 0x6) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x268bc2, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) kernel console output (not intermixed with test programs): 965.699131][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.699177][T19985] RIP: 0033:0x7f876558eec9 [ 965.699204][T19985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.699236][T19985] RSP: 002b:00007f87664db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 965.699268][T19985] RAX: ffffffffffffffda RBX: 00007f87657e6090 RCX: 00007f876558eec9 [ 965.699291][T19985] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 965.699313][T19985] RBP: 00007f8765611f91 R08: 0000000000000000 R09: 0000000000000000 [ 965.699342][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.699362][T19985] R13: 00007f87657e6128 R14: 00007f87657e6090 R15: 00007fff8cd0a078 [ 965.699406][T19985] [ 966.004328][T19167] team0 (unregistering): Port device team_slave_1 removed [ 966.049580][T19167] team0 (unregistering): Port device team_slave_0 removed [ 967.211646][T19814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 967.248467][T19814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 967.298217][T19984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 967.312947][T19984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 967.358994][T19984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 967.381863][T19984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 967.398837][T19984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 967.460916][T19984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 967.502245][T19984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 967.525884][T20002] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2531'. [ 967.550116][T19984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 967.619038][T19984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 967.642560][T19984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.663124][T19984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.787682][T19984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.879867][T19814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.966168][T19814] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.998303][T19165] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.005473][T19165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.115359][T19165] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.122531][T19165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.367504][ T9731] Bluetooth: hci0: command 0x0c1a tx timeout [ 969.448990][ T9731] Bluetooth: hci3: command 0x0c1a tx timeout [ 969.527911][ T9731] Bluetooth: hci4: command 0x0c1a tx timeout [ 969.696485][ T9731] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.071921][T20035] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2539'. [ 970.550658][T19814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.002486][T20055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 971.456821][ T9731] Bluetooth: hci0: command 0x0c1a tx timeout [ 971.527481][ T9731] Bluetooth: hci3: command 0x0c1a tx timeout [ 971.614340][ T9731] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.843559][ T9731] Bluetooth: hci1: command 0x0c1a tx timeout [ 972.548425][T20091] snd_aloop snd_aloop.0: control 1:6:6:ª¸è^ [ 972.548425][T20091] :0 is already present [ 972.582512][T18754] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 972.692835][T19814] veth0_vlan: entered promiscuous mode [ 972.739254][T19814] veth1_vlan: entered promiscuous mode [ 972.946770][T19814] veth0_macvtap: entered promiscuous mode [ 972.961586][T19814] veth1_macvtap: entered promiscuous mode [ 973.116085][T19814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.207698][T19814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.285837][T19147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.352295][T20102] delete_channel: no stack [ 973.390760][T19147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.415008][T19147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.526635][T18754] Bluetooth: hci0: command 0x0c1a tx timeout [ 973.555456][T19147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.609198][T18754] Bluetooth: hci3: command 0x0c1a tx timeout [ 973.686761][T18754] Bluetooth: hci4: command 0x0c1a tx timeout [ 973.912891][T19144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.931978][T18754] Bluetooth: hci1: command 0x0c1a tx timeout [ 973.981422][T19144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.059463][T19167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.081894][T19167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.182903][T20121] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 974.508060][T20127] FAULT_INJECTION: forcing a failure. [ 974.508060][T20127] name failslab, interval 1, probability 0, space 0, times 0 [ 974.597904][T20127] CPU: 1 UID: 0 PID: 20127 Comm: syz.5.2494 Tainted: G U syzkaller #0 PREEMPT(full) [ 974.597954][T20127] Tainted: [U]=USER [ 974.597965][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 974.597984][T20127] Call Trace: [ 974.597995][T20127] [ 974.598007][T20127] dump_stack_lvl+0x16c/0x1f0 [ 974.598080][T20127] should_fail_ex+0x512/0x640 [ 974.598139][T20127] ? fs_reclaim_acquire+0xae/0x150 [ 974.598194][T20127] ? tomoyo_encode2+0x100/0x3e0 [ 974.598240][T20127] should_failslab+0xc2/0x120 [ 974.598283][T20127] __kmalloc_noprof+0xd2/0x510 [ 974.598320][T20127] ? d_absolute_path+0x136/0x1a0 [ 974.598379][T20127] tomoyo_encode2+0x100/0x3e0 [ 974.598433][T20127] tomoyo_encode+0x29/0x50 [ 974.598479][T20127] tomoyo_realpath_from_path+0x18f/0x6e0 [ 974.598548][T20127] tomoyo_path_number_perm+0x245/0x580 [ 974.598589][T20127] ? tomoyo_path_number_perm+0x237/0x580 [ 974.598635][T20127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 974.598680][T20127] ? find_held_lock+0x2b/0x80 [ 974.598751][T20127] ? find_held_lock+0x2b/0x80 [ 974.598783][T20127] ? hook_file_ioctl_common+0x145/0x410 [ 974.598837][T20127] ? __fget_files+0x20e/0x3c0 [ 974.598881][T20127] security_file_ioctl+0x9b/0x240 [ 974.598926][T20127] __x64_sys_ioctl+0xb7/0x210 [ 974.598979][T20127] do_syscall_64+0xcd/0x4c0 [ 974.599033][T20127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.599066][T20127] RIP: 0033:0x7f4496f8eec9 [ 974.599092][T20127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.599124][T20127] RSP: 002b:00007f4497dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.599156][T20127] RAX: ffffffffffffffda RBX: 00007f44971e6090 RCX: 00007f4496f8eec9 [ 974.599178][T20127] RDX: 00002000000002c0 RSI: 00000000c1105517 RDI: 0000000000000006 [ 974.599199][T20127] RBP: 00007f4497dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 974.599220][T20127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.599240][T20127] R13: 00007f44971e6128 R14: 00007f44971e6090 R15: 00007ffe1fafdbb8 [ 974.599303][T20127] [ 974.818413][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.855838][T20127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 974.865679][T20127] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 977.906354][T20181] FAULT_INJECTION: forcing a failure. [ 977.906354][T20181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.009022][T20181] CPU: 0 UID: 0 PID: 20181 Comm: syz.5.2567 Tainted: G U syzkaller #0 PREEMPT(full) [ 978.009074][T20181] Tainted: [U]=USER [ 978.009086][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 978.009106][T20181] Call Trace: [ 978.009117][T20181] [ 978.009130][T20181] dump_stack_lvl+0x16c/0x1f0 [ 978.009185][T20181] should_fail_ex+0x512/0x640 [ 978.009252][T20181] _copy_from_user+0x2e/0xd0 [ 978.009291][T20181] snd_ctl_elem_add_user+0x9b/0x170 [ 978.009346][T20181] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 978.009451][T20181] snd_ctl_ioctl+0x799/0xf80 [ 978.009504][T20181] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 978.009562][T20181] ? __fget_files+0x20e/0x3c0 [ 978.009606][T20181] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 978.009661][T20181] __x64_sys_ioctl+0x18b/0x210 [ 978.009718][T20181] do_syscall_64+0xcd/0x4c0 [ 978.009773][T20181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.009807][T20181] RIP: 0033:0x7f4496f8eec9 [ 978.009832][T20181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.009864][T20181] RSP: 002b:00007f4497dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.009895][T20181] RAX: ffffffffffffffda RBX: 00007f44971e6090 RCX: 00007f4496f8eec9 [ 978.009917][T20181] RDX: 00002000000002c0 RSI: 00000000c1105517 RDI: 0000000000000006 [ 978.009938][T20181] RBP: 00007f4497dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 978.009958][T20181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.009979][T20181] R13: 00007f44971e6128 R14: 00007f44971e6090 R15: 00007ffe1fafdbb8 [ 978.010022][T20181] [ 978.677629][T20190] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2570'. [ 979.351114][T20189] zswap: compressor not available [ 979.607851][T20202] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2571'. [ 979.640770][T20204] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2574'. [ 980.438303][T20223] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 981.383915][T20244] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 983.391298][T20257] FAULT_INJECTION: forcing a failure. [ 983.391298][T20257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 983.456979][T20257] CPU: 1 UID: 0 PID: 20257 Comm: syz.2.2585 Tainted: G U syzkaller #0 PREEMPT(full) [ 983.457032][T20257] Tainted: [U]=USER [ 983.457044][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 983.457065][T20257] Call Trace: [ 983.457077][T20257] [ 983.457090][T20257] dump_stack_lvl+0x16c/0x1f0 [ 983.457149][T20257] should_fail_ex+0x512/0x640 [ 983.457207][T20257] should_fail_alloc_page+0xe7/0x130 [ 983.457256][T20257] prepare_alloc_pages+0x3c2/0x610 [ 983.457305][T20257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.457346][T20257] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 983.457408][T20257] ? __lock_acquire+0xb97/0x1ce0 [ 983.457453][T20257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 983.457521][T20257] ? __pfx___mutex_trylock_common+0x10/0x10 [ 983.457571][T20257] ? __pfx___might_resched+0x10/0x10 [ 983.457608][T20257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 983.457662][T20257] ? policy_nodemask+0xea/0x4e0 [ 983.457709][T20257] alloc_pages_mpol+0x1fb/0x550 [ 983.457753][T20257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 983.457796][T20257] ? __pfx___mutex_lock+0x10/0x10 [ 983.457857][T20257] ___kmalloc_large_node+0xed/0x160 [ 983.457917][T20257] __kmalloc_large_noprof+0x1c/0x70 [ 983.457991][T20257] uhid_char_open+0x24/0x250 [ 983.458030][T20257] ? __pfx_uhid_char_open+0x10/0x10 [ 983.458070][T20257] misc_open+0x35a/0x420 [ 983.458114][T20257] ? __pfx_misc_open+0x10/0x10 [ 983.458155][T20257] chrdev_open+0x231/0x6a0 [ 983.458199][T20257] ? __pfx_apparmor_file_open+0x10/0x10 [ 983.458238][T20257] ? __pfx_chrdev_open+0x10/0x10 [ 983.458285][T20257] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 983.458333][T20257] do_dentry_open+0x97f/0x1530 [ 983.458378][T20257] ? __pfx_chrdev_open+0x10/0x10 [ 983.458431][T20257] vfs_open+0x82/0x3f0 [ 983.458487][T20257] path_openat+0x1de4/0x2cb0 [ 983.458550][T20257] ? __pfx_path_openat+0x10/0x10 [ 983.458604][T20257] do_filp_open+0x20b/0x470 [ 983.458647][T20257] ? __pfx_do_filp_open+0x10/0x10 [ 983.458720][T20257] ? alloc_fd+0x471/0x7d0 [ 983.458769][T20257] do_sys_openat2+0x11b/0x1d0 [ 983.458822][T20257] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.458895][T20257] __x64_sys_openat+0x174/0x210 [ 983.458926][T20257] ? __pfx___x64_sys_openat+0x10/0x10 [ 983.458975][T20257] do_syscall_64+0xcd/0x4c0 [ 983.459032][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.459067][T20257] RIP: 0033:0x7f876558eec9 [ 983.459106][T20257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.459140][T20257] RSP: 002b:00007f87664db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 983.459171][T20257] RAX: ffffffffffffffda RBX: 00007f87657e6090 RCX: 00007f876558eec9 [ 983.459194][T20257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 983.459217][T20257] RBP: 00007f8765611f91 R08: 0000000000000000 R09: 0000000000000000 [ 983.459238][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.459258][T20257] R13: 00007f87657e6128 R14: 00007f87657e6090 R15: 00007fff8cd0a078 [ 983.459301][T20257] [ 983.956492][T20265] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2587'. [ 985.691857][T20283] blktrace: Concurrent blktraces are not allowed on ram7 [ 987.627746][T20314] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 987.707729][T20317] FAULT_INJECTION: forcing a failure. [ 987.707729][T20317] name failslab, interval 1, probability 0, space 0, times 0 [ 987.740949][T20317] CPU: 1 UID: 0 PID: 20317 Comm: syz.1.2601 Tainted: G U syzkaller #0 PREEMPT(full) [ 987.740998][T20317] Tainted: [U]=USER [ 987.741010][T20317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 987.741029][T20317] Call Trace: [ 987.741040][T20317] [ 987.741052][T20317] dump_stack_lvl+0x16c/0x1f0 [ 987.741108][T20317] should_fail_ex+0x512/0x640 [ 987.741158][T20317] ? __kmalloc_noprof+0xbf/0x510 [ 987.741200][T20317] ? snd_ctl_elem_add+0x56f/0x14e0 [ 987.741248][T20317] should_failslab+0xc2/0x120 [ 987.741292][T20317] __kmalloc_noprof+0xd2/0x510 [ 987.741338][T20317] ? snd_ctl_new+0x13c/0x1a0 [ 987.741387][T20317] snd_ctl_elem_add+0x56f/0x14e0 [ 987.741446][T20317] ? find_held_lock+0x2b/0x80 [ 987.741477][T20317] ? __might_fault+0xe3/0x190 [ 987.741513][T20317] ? __might_fault+0xe3/0x190 [ 987.741547][T20317] ? __might_fault+0x13b/0x190 [ 987.741584][T20317] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 987.741659][T20317] snd_ctl_elem_add_user+0xc3/0x170 [ 987.741706][T20317] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 987.741802][T20317] snd_ctl_ioctl+0x799/0xf80 [ 987.741850][T20317] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 987.741899][T20317] ? __fget_files+0x20e/0x3c0 [ 987.741939][T20317] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 987.741987][T20317] __x64_sys_ioctl+0x18b/0x210 [ 987.742038][T20317] do_syscall_64+0xcd/0x4c0 [ 987.742106][T20317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.742139][T20317] RIP: 0033:0x7f0f6f18eec9 [ 987.742163][T20317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.742196][T20317] RSP: 002b:00007f0f6d3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.742226][T20317] RAX: ffffffffffffffda RBX: 00007f0f6f3e6090 RCX: 00007f0f6f18eec9 [ 987.742247][T20317] RDX: 00002000000002c0 RSI: 00000000c1105517 RDI: 0000000000000006 [ 987.742268][T20317] RBP: 00007f0f6d3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 987.742288][T20317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.742308][T20317] R13: 00007f0f6f3e6128 R14: 00007f0f6f3e6090 R15: 00007ffe8ea5b338 [ 987.742357][T20317] [ 988.367869][T20327] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2604'. [ 989.209851][T20333] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 989.773597][T18754] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 990.238022][T20347] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 990.275093][T20347] FAULT_INJECTION: forcing a failure. [ 990.275093][T20347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.341880][T20347] CPU: 1 UID: 0 PID: 20347 Comm: syz.4.2615 Tainted: G U syzkaller #0 PREEMPT(full) [ 990.341926][T20347] Tainted: [U]=USER [ 990.341936][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 990.341954][T20347] Call Trace: [ 990.341964][T20347] [ 990.341975][T20347] dump_stack_lvl+0x16c/0x1f0 [ 990.342025][T20347] should_fail_ex+0x512/0x640 [ 990.342079][T20347] _copy_to_user+0x32/0xd0 [ 990.342115][T20347] simple_read_from_buffer+0xcb/0x170 [ 990.342150][T20347] proc_fail_nth_read+0x197/0x240 [ 990.342184][T20347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.342220][T20347] ? rw_verify_area+0xcf/0x6c0 [ 990.342251][T20347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.342285][T20347] vfs_read+0x1e1/0xcf0 [ 990.342325][T20347] ? __pfx___mutex_lock+0x10/0x10 [ 990.342372][T20347] ? __pfx_vfs_read+0x10/0x10 [ 990.342418][T20347] ? __fget_files+0x20e/0x3c0 [ 990.342448][T20347] ? rcu_watching_snap_stopped_since+0xc0/0x110 [ 990.342495][T20347] ksys_read+0x12a/0x250 [ 990.342530][T20347] ? __pfx_ksys_read+0x10/0x10 [ 990.342575][T20347] do_syscall_64+0xcd/0x4c0 [ 990.342625][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.342655][T20347] RIP: 0033:0x7fd07558d8dc [ 990.342678][T20347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 990.342707][T20347] RSP: 002b:00007fd0764a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 990.342735][T20347] RAX: ffffffffffffffda RBX: 00007fd0757e6090 RCX: 00007fd07558d8dc [ 990.342756][T20347] RDX: 000000000000000f RSI: 00007fd0764a20a0 RDI: 0000000000000007 [ 990.342775][T20347] RBP: 00007fd0764a2090 R08: 0000000000000000 R09: 0000000000000000 [ 990.342794][T20347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.342812][T20347] R13: 00007fd0757e6128 R14: 00007fd0757e6090 R15: 00007ffdabfa1ac8 [ 990.342858][T20347] [ 990.847512][T20361] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 991.086924][T20351] blktrace: Concurrent blktraces are not allowed on ram7 [ 991.899175][T20377] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 992.336384][T18754] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 993.183078][T20397] zswap: compressor not available [ 993.368729][T20402] Setting dangerous option i915.mitigations - tainting kernel [ 995.192973][T20446] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2623'. [ 996.111687][T20458] FAULT_INJECTION: forcing a failure. [ 996.111687][T20458] name failslab, interval 1, probability 0, space 0, times 0 [ 996.160794][T20458] CPU: 1 UID: 0 PID: 20458 Comm: syz.2.2626 Tainted: G U syzkaller #0 PREEMPT(full) [ 996.160843][T20458] Tainted: [U]=USER [ 996.160854][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.160873][T20458] Call Trace: [ 996.160883][T20458] [ 996.160896][T20458] dump_stack_lvl+0x16c/0x1f0 [ 996.160958][T20458] should_fail_ex+0x512/0x640 [ 996.161022][T20458] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 996.161066][T20458] should_failslab+0xc2/0x120 [ 996.161110][T20458] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 996.161149][T20458] ? __alloc_skb+0x2b2/0x380 [ 996.161199][T20458] __alloc_skb+0x2b2/0x380 [ 996.161241][T20458] ? __pfx___alloc_skb+0x10/0x10 [ 996.161289][T20458] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 996.161347][T20458] netlink_alloc_large_skb+0x69/0x130 [ 996.161409][T20458] netlink_sendmsg+0x6a1/0xdd0 [ 996.161475][T20458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.161523][T20458] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 996.161561][T20458] sock_write_iter+0x4fc/0x5b0 [ 996.161596][T20458] ? __pfx_sock_write_iter+0x10/0x10 [ 996.161642][T20458] ? bpf_lsm_file_permission+0x9/0x10 [ 996.161686][T20458] ? security_file_permission+0x71/0x210 [ 996.161730][T20458] ? rw_verify_area+0xcf/0x6c0 [ 996.161765][T20458] vfs_write+0x7d3/0x11d0 [ 996.161800][T20458] ? __pfx_sock_write_iter+0x10/0x10 [ 996.161837][T20458] ? __pfx_vfs_write+0x10/0x10 [ 996.161868][T20458] ? find_held_lock+0x2b/0x80 [ 996.161921][T20458] ksys_write+0x1f8/0x250 [ 996.161956][T20458] ? __pfx_ksys_write+0x10/0x10 [ 996.162003][T20458] do_syscall_64+0xcd/0x4c0 [ 996.162053][T20458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.162082][T20458] RIP: 0033:0x7f876558eec9 [ 996.162102][T20458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.162127][T20458] RSP: 002b:00007f87664fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 996.162152][T20458] RAX: ffffffffffffffda RBX: 00007f87657e5fa0 RCX: 00007f876558eec9 [ 996.162168][T20458] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 996.162184][T20458] RBP: 00007f87664fc090 R08: 0000000000000000 R09: 0000000000000000 [ 996.162199][T20458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.162214][T20458] R13: 00007f87657e6038 R14: 00007f87657e5fa0 R15: 00007fff8cd0a078 [ 996.162245][T20458] [ 996.635881][T20470] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2631'. [ 997.174321][T20478] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2633'. [ 997.201189][T20479] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2634'. [ 997.488280][T20483] snd_aloop snd_aloop.0: control 1:6:6:ª¸è^ [ 997.488280][T20483] :0 is already present [ 997.642287][T18754] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 998.308240][T18754] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 998.336462][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.356436][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.416436][T20526] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2647'. [ 999.592810][T20532] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1001.995895][T20589] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1002.703542][T20603] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1003.292803][T20609] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1003.480727][T20613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1003.943147][T20621] snd_aloop snd_aloop.0: control 1:6:6:ª¸è^ [ 1003.943147][T20621] :0 is already present [ 1003.957057][T20613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.995477][T20613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.009452][T20613] bond0 (unregistering): Released all slaves [ 1004.028016][T18754] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 1005.873177][T20657] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1006.408240][T20668] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1006.781070][T20677] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1008.764310][T20708] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2686'. [ 1009.138601][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2688'. [ 1009.182496][T20715] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1009.446956][T20714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.459952][T20714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.490512][T20714] bond0 (unregistering): Released all slaves [ 1010.741384][T20745] snd_aloop snd_aloop.0: control 1:6:6:ª¸è^ [ 1010.741384][T20745] :0 is already present [ 1010.902497][T18754] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 1012.236192][T20761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2698'. [ 1012.553165][T20772] netlink: 'syz.5.2700': attribute type 11 has an invalid length. [ 1012.591752][T20772] netlink: 'syz.5.2700': attribute type 11 has an invalid length. [ 1013.927788][T20795] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1015.066186][T20809] FAULT_INJECTION: forcing a failure. [ 1015.066186][T20809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1015.114156][T20816] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1015.161236][T20809] CPU: 1 UID: 0 PID: 20809 Comm: syz.2.2707 Tainted: G U syzkaller #0 PREEMPT(full) [ 1015.161279][T20809] Tainted: [U]=USER [ 1015.161289][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.161306][T20809] Call Trace: [ 1015.161315][T20809] [ 1015.161326][T20809] dump_stack_lvl+0x16c/0x1f0 [ 1015.161373][T20809] should_fail_ex+0x512/0x640 [ 1015.161441][T20809] should_fail_alloc_page+0xe7/0x130 [ 1015.161485][T20809] prepare_alloc_pages+0x3c2/0x610 [ 1015.161537][T20809] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1015.161596][T20809] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1015.161639][T20809] ? __might_fault+0xe3/0x190 [ 1015.161673][T20809] ? __might_fault+0xe3/0x190 [ 1015.161715][T20809] ? __might_fault+0x13b/0x190 [ 1015.161757][T20809] ? _copy_from_iter+0x15d/0x1720 [ 1015.161789][T20809] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.161836][T20809] ? policy_nodemask+0xea/0x4e0 [ 1015.161884][T20809] alloc_pages_mpol+0x1fb/0x550 [ 1015.161924][T20809] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1015.161973][T20809] alloc_pages_noprof+0x131/0x390 [ 1015.162013][T20809] anon_pipe_write+0xbc2/0x1a90 [ 1015.162064][T20809] ? __pfx_anon_pipe_write+0x10/0x10 [ 1015.162103][T20809] ? common_file_perm+0x1a9/0x340 [ 1015.162141][T20809] ? bpf_lsm_file_permission+0x9/0x10 [ 1015.162183][T20809] ? security_file_permission+0x71/0x210 [ 1015.162223][T20809] ? rw_verify_area+0xcf/0x6c0 [ 1015.162257][T20809] vfs_write+0x7d3/0x11d0 [ 1015.162291][T20809] ? __pfx_anon_pipe_write+0x10/0x10 [ 1015.162332][T20809] ? __pfx_vfs_write+0x10/0x10 [ 1015.162363][T20809] ? find_held_lock+0x2b/0x80 [ 1015.162415][T20809] ksys_write+0x1f8/0x250 [ 1015.162449][T20809] ? __pfx_ksys_write+0x10/0x10 [ 1015.162493][T20809] do_syscall_64+0xcd/0x4c0 [ 1015.162540][T20809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.162608][T20809] RIP: 0033:0x7f876558eec9 [ 1015.162632][T20809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.162681][T20809] RSP: 002b:00007f87664db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.162711][T20809] RAX: ffffffffffffffda RBX: 00007f87657e6090 RCX: 00007f876558eec9 [ 1015.162733][T20809] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1015.162753][T20809] RBP: 00007f87664db090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.162773][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.162793][T20809] R13: 00007f87657e6128 R14: 00007f87657e6090 R15: 00007fff8cd0a078 [ 1015.162836][T20809] [ 1016.411075][T20835] snd_aloop snd_aloop.0: control 1:6:6:ª¸è^ [ 1016.411075][T20835] :0 is already present [ 1016.817848][T20841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1018.993900][T20877] FAULT_INJECTION: forcing a failure. [ 1018.993900][T20877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.046759][T20877] CPU: 1 UID: 0 PID: 20877 Comm: syz.2.2723 Tainted: G U syzkaller #0 PREEMPT(full) [ 1019.046809][T20877] Tainted: [U]=USER [ 1019.046821][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1019.046839][T20877] Call Trace: [ 1019.046850][T20877] [ 1019.046862][T20877] dump_stack_lvl+0x16c/0x1f0 [ 1019.046917][T20877] should_fail_ex+0x512/0x640 [ 1019.046974][T20877] _copy_from_iter+0x29f/0x1720 [ 1019.047012][T20877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1019.047067][T20877] ? __pfx__copy_from_iter+0x10/0x10 [ 1019.047102][T20877] ? alloc_pages_mpol+0x25a/0x550 [ 1019.047149][T20877] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1019.047201][T20877] copy_page_from_iter+0xde/0x180 [ 1019.047254][T20877] anon_pipe_write+0xbe7/0x1a90 [ 1019.047314][T20877] ? __pfx_anon_pipe_write+0x10/0x10 [ 1019.047359][T20877] ? common_file_perm+0x1a9/0x340 [ 1019.047404][T20877] ? bpf_lsm_file_permission+0x9/0x10 [ 1019.047452][T20877] ? security_file_permission+0x71/0x210 [ 1019.047499][T20877] ? rw_verify_area+0xcf/0x6c0 [ 1019.047537][T20877] vfs_write+0x7d3/0x11d0 [ 1019.047576][T20877] ? __pfx_anon_pipe_write+0x10/0x10 [ 1019.047622][T20877] ? __pfx_vfs_write+0x10/0x10 [ 1019.047658][T20877] ? find_held_lock+0x2b/0x80 [ 1019.047720][T20877] ksys_write+0x1f8/0x250 [ 1019.047757][T20877] ? __pfx_ksys_write+0x10/0x10 [ 1019.047809][T20877] do_syscall_64+0xcd/0x4c0 [ 1019.047864][T20877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.047897][T20877] RIP: 0033:0x7f876558eec9 [ 1019.047923][T20877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.047957][T20877] RSP: 002b:00007f87664db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.047987][T20877] RAX: ffffffffffffffda RBX: 00007f87657e6090 RCX: 00007f876558eec9 [ 1019.048009][T20877] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1019.048029][T20877] RBP: 00007f87664db090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.048050][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.048070][T20877] R13: 00007f87657e6128 R14: 00007f87657e6090 R15: 00007fff8cd0a078 [ 1019.048114][T20877] [ 1020.481467][T20909] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1022.492562][T20939] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1023.229242][T20949] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1023.441090][T20956] FAULT_INJECTION: forcing a failure. [ 1023.441090][T20956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.483267][T20956] CPU: 1 UID: 0 PID: 20956 Comm: syz.5.2738 Tainted: G U syzkaller #0 PREEMPT(full) [ 1023.483310][T20956] Tainted: [U]=USER [ 1023.483320][T20956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1023.483336][T20956] Call Trace: [ 1023.483345][T20956] [ 1023.483355][T20956] dump_stack_lvl+0x16c/0x1f0 [ 1023.483402][T20956] should_fail_ex+0x512/0x640 [ 1023.483468][T20956] _copy_to_user+0x32/0xd0 [ 1023.483503][T20956] simple_read_from_buffer+0xcb/0x170 [ 1023.483537][T20956] proc_fail_nth_read+0x197/0x240 [ 1023.483570][T20956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.483606][T20956] ? rw_verify_area+0xcf/0x6c0 [ 1023.483647][T20956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.483677][T20956] vfs_read+0x1e1/0xcf0 [ 1023.483714][T20956] ? __pfx___mutex_lock+0x10/0x10 [ 1023.483760][T20956] ? __pfx_vfs_read+0x10/0x10 [ 1023.483801][T20956] ? __fget_files+0x20e/0x3c0 [ 1023.483862][T20956] ksys_read+0x12a/0x250 [ 1023.483897][T20956] ? __pfx_ksys_read+0x10/0x10 [ 1023.483943][T20956] do_syscall_64+0xcd/0x4c0 [ 1023.483995][T20956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.484025][T20956] RIP: 0033:0x7f4496f8d8dc [ 1023.484055][T20956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1023.484083][T20956] RSP: 002b:00007f4497dde030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1023.484111][T20956] RAX: ffffffffffffffda RBX: 00007f44971e5fa0 RCX: 00007f4496f8d8dc [ 1023.484131][T20956] RDX: 000000000000000f RSI: 00007f4497dde0a0 RDI: 0000000000000006 [ 1023.484149][T20956] RBP: 00007f4497dde090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.484169][T20956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.484188][T20956] R13: 00007f44971e6038 R14: 00007f44971e5fa0 R15: 00007ffe1fafdbb8 [ 1023.484228][T20956] [ 1023.821310][T20960] FAULT_INJECTION: forcing a failure. [ 1023.821310][T20960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.840856][T20960] CPU: 1 UID: 0 PID: 20960 Comm: syz.5.2739 Tainted: G U syzkaller #0 PREEMPT(full) [ 1023.840898][T20960] Tainted: [U]=USER [ 1023.840908][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1023.840925][T20960] Call Trace: [ 1023.840935][T20960] [ 1023.840945][T20960] dump_stack_lvl+0x16c/0x1f0 [ 1023.840992][T20960] should_fail_ex+0x512/0x640 [ 1023.841042][T20960] _copy_from_user+0x2e/0xd0 [ 1023.841072][T20960] copy_msghdr_from_user+0x98/0x160 [ 1023.841116][T20960] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1023.841180][T20960] ___sys_sendmsg+0xfe/0x1d0 [ 1023.841225][T20960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.841307][T20960] __sys_sendmsg+0x16d/0x220 [ 1023.841350][T20960] ? __pfx___sys_sendmsg+0x10/0x10 [ 1023.841436][T20960] do_syscall_64+0xcd/0x4c0 [ 1023.841485][T20960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.841516][T20960] RIP: 0033:0x7f4496f8eec9 [ 1023.841538][T20960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.841568][T20960] RSP: 002b:00007f4497dde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.841595][T20960] RAX: ffffffffffffffda RBX: 00007f44971e5fa0 RCX: 00007f4496f8eec9 [ 1023.841615][T20960] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 1023.841634][T20960] RBP: 00007f4497dde090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.841652][T20960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.841669][T20960] R13: 00007f44971e6038 R14: 00007f44971e5fa0 R15: 00007ffe1fafdbb8 [ 1023.841708][T20960] [ 1026.221969][T21000] FAULT_INJECTION: forcing a failure. [ 1026.221969][T21000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.274454][T21000] CPU: 1 UID: 0 PID: 21000 Comm: syz.1.2749 Tainted: G U syzkaller #0 PREEMPT(full) [ 1026.274503][T21000] Tainted: [U]=USER [ 1026.274514][T21000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.274533][T21000] Call Trace: [ 1026.274544][T21000] [ 1026.274569][T21000] dump_stack_lvl+0x16c/0x1f0 [ 1026.274625][T21000] should_fail_ex+0x512/0x640 [ 1026.274682][T21000] _copy_from_iter+0x29f/0x1720 [ 1026.274730][T21000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1026.274785][T21000] ? __pfx__copy_from_iter+0x10/0x10 [ 1026.274822][T21000] ? alloc_pages_mpol+0x25a/0x550 [ 1026.274868][T21000] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1026.274919][T21000] copy_page_from_iter+0xde/0x180 [ 1026.274959][T21000] anon_pipe_write+0xbe7/0x1a90 [ 1026.275017][T21000] ? __pfx_anon_pipe_write+0x10/0x10 [ 1026.275062][T21000] ? common_file_perm+0x1a9/0x340 [ 1026.275107][T21000] ? bpf_lsm_file_permission+0x9/0x10 [ 1026.275155][T21000] ? security_file_permission+0x71/0x210 [ 1026.275200][T21000] ? rw_verify_area+0xcf/0x6c0 [ 1026.275237][T21000] vfs_write+0x7d3/0x11d0 [ 1026.275277][T21000] ? __pfx_anon_pipe_write+0x10/0x10 [ 1026.275322][T21000] ? __pfx_vfs_write+0x10/0x10 [ 1026.275358][T21000] ? find_held_lock+0x2b/0x80 [ 1026.275436][T21000] ksys_write+0x1f8/0x250 [ 1026.275475][T21000] ? __pfx_ksys_write+0x10/0x10 [ 1026.275527][T21000] do_syscall_64+0xcd/0x4c0 [ 1026.275592][T21000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.275626][T21000] RIP: 0033:0x7f0f6f18eec9 [ 1026.275653][T21000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.275686][T21000] RSP: 002b:00007f0f6d3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.275718][T21000] RAX: ffffffffffffffda RBX: 00007f0f6f3e6090 RCX: 00007f0f6f18eec9 [ 1026.275750][T21000] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1026.275770][T21000] RBP: 00007f0f6d3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.275791][T21000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.275811][T21000] R13: 00007f0f6f3e6128 R14: 00007f0f6f3e6090 R15: 00007ffe8ea5b338 [ 1026.275856][T21000] [ 1026.580258][T21005] FAULT_INJECTION: forcing a failure. [ 1026.580258][T21005] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.612897][T21005] CPU: 0 UID: 0 PID: 21005 Comm: syz.2.2750 Tainted: G U syzkaller #0 PREEMPT(full) [ 1026.612947][T21005] Tainted: [U]=USER [ 1026.612958][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.612978][T21005] Call Trace: [ 1026.612988][T21005] [ 1026.613001][T21005] dump_stack_lvl+0x16c/0x1f0 [ 1026.613055][T21005] should_fail_ex+0x512/0x640 [ 1026.613104][T21005] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1026.613157][T21005] should_failslab+0xc2/0x120 [ 1026.613199][T21005] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1026.613245][T21005] ? __alloc_skb+0x2b2/0x380 [ 1026.613296][T21005] __alloc_skb+0x2b2/0x380 [ 1026.613349][T21005] ? __pfx___alloc_skb+0x10/0x10 [ 1026.613399][T21005] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1026.613446][T21005] ? __lock_acquire+0xb97/0x1ce0 [ 1026.613494][T21005] netlink_alloc_large_skb+0x69/0x130 [ 1026.613547][T21005] netlink_sendmsg+0x6a1/0xdd0 [ 1026.613603][T21005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.613658][T21005] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1026.613711][T21005] ____sys_sendmsg+0xa98/0xc70 [ 1026.613746][T21005] ? copy_msghdr_from_user+0x10a/0x160 [ 1026.613801][T21005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.613855][T21005] ___sys_sendmsg+0x134/0x1d0 [ 1026.613911][T21005] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.614007][T21005] __sys_sendmsg+0x16d/0x220 [ 1026.614056][T21005] ? __pfx___sys_sendmsg+0x10/0x10 [ 1026.614131][T21005] do_syscall_64+0xcd/0x4c0 [ 1026.614185][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.614217][T21005] RIP: 0033:0x7f876558eec9 [ 1026.614241][T21005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.614273][T21005] RSP: 002b:00007f87664fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.614304][T21005] RAX: ffffffffffffffda RBX: 00007f87657e5fa0 RCX: 00007f876558eec9 [ 1026.614326][T21005] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 1026.614346][T21005] RBP: 00007f87664fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.614366][T21005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.614395][T21005] R13: 00007f87657e6038 R14: 00007f87657e5fa0 R15: 00007fff8cd0a078 [ 1026.614437][T21005] [ 1027.519507][T21027] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2756'. [ 1029.637818][T21062] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1031.774374][T21104] FAULT_INJECTION: forcing a failure. [ 1031.774374][T21104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.815582][T21104] CPU: 0 UID: 0 PID: 21104 Comm: syz.4.2770 Tainted: G U syzkaller #0 PREEMPT(full) [ 1031.815628][T21104] Tainted: [U]=USER [ 1031.815639][T21104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1031.815658][T21104] Call Trace: [ 1031.815669][T21104] [ 1031.815682][T21104] dump_stack_lvl+0x16c/0x1f0 [ 1031.815735][T21104] should_fail_ex+0x512/0x640 [ 1031.815791][T21104] _copy_from_iter+0x29f/0x1720 [ 1031.815831][T21104] ? __alloc_skb+0x200/0x380 [ 1031.815876][T21104] ? __pfx__copy_from_iter+0x10/0x10 [ 1031.815914][T21104] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1031.815962][T21104] ? __lock_acquire+0xb97/0x1ce0 [ 1031.816014][T21104] netlink_sendmsg+0x829/0xdd0 [ 1031.816079][T21104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.816136][T21104] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1031.816178][T21104] ____sys_sendmsg+0xa98/0xc70 [ 1031.816217][T21104] ? copy_msghdr_from_user+0x10a/0x160 [ 1031.816266][T21104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.816322][T21104] ___sys_sendmsg+0x134/0x1d0 [ 1031.816373][T21104] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.816475][T21104] __sys_sendmsg+0x16d/0x220 [ 1031.816522][T21104] ? __pfx___sys_sendmsg+0x10/0x10 [ 1031.816596][T21104] do_syscall_64+0xcd/0x4c0 [ 1031.816648][T21104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.816680][T21104] RIP: 0033:0x7fd07558eec9 [ 1031.816704][T21104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.816734][T21104] RSP: 002b:00007fd0764c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.816762][T21104] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558eec9 [ 1031.816783][T21104] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 1031.816803][T21104] RBP: 00007fd0764c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.816822][T21104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.816842][T21104] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1031.816882][T21104] [ 1033.943990][T21151] syz.5.2776: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1033.978271][T21151] CPU: 0 UID: 0 PID: 21151 Comm: syz.5.2776 Tainted: G U syzkaller #0 PREEMPT(full) [ 1033.978323][T21151] Tainted: [U]=USER [ 1033.978334][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.978355][T21151] Call Trace: [ 1033.978367][T21151] [ 1033.978381][T21151] dump_stack_lvl+0x16c/0x1f0 [ 1033.978438][T21151] warn_alloc+0x248/0x3a0 [ 1033.978483][T21151] ? __pfx_warn_alloc+0x10/0x10 [ 1033.978553][T21151] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.978594][T21151] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1033.978631][T21151] ? __pfx___might_resched+0x10/0x10 [ 1033.978670][T21151] ? rcu_is_watching+0x12/0xc0 [ 1033.978706][T21151] ? trace_contention_end+0xdd/0x130 [ 1033.978757][T21151] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.978803][T21151] ? tomoyo_path_number_perm+0x295/0x580 [ 1033.978850][T21151] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1033.978884][T21151] ? __pfx___mutex_lock+0x10/0x10 [ 1033.978953][T21151] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.978993][T21151] __vmalloc_node_noprof+0xad/0xf0 [ 1033.979026][T21151] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.979070][T21151] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.979120][T21151] ? do_vfs_ioctl+0x128/0x14f0 [ 1033.979183][T21151] dvb_usercopy+0x164/0x340 [ 1033.979226][T21151] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1033.979267][T21151] ? __pfx_dvb_usercopy+0x10/0x10 [ 1033.979316][T21151] ? __fget_files+0x20e/0x3c0 [ 1033.979362][T21151] dvb_demux_ioctl+0x29/0x40 [ 1033.979393][T21151] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1033.979428][T21151] __x64_sys_ioctl+0x18b/0x210 [ 1033.979485][T21151] do_syscall_64+0xcd/0x4c0 [ 1033.979541][T21151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.979575][T21151] RIP: 0033:0x7f4496f8eec9 [ 1033.979601][T21151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.979635][T21151] RSP: 002b:00007f4497dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.979668][T21151] RAX: ffffffffffffffda RBX: 00007f44971e6090 RCX: 00007f4496f8eec9 [ 1033.979691][T21151] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 1033.979713][T21151] RBP: 00007f4497011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.979735][T21151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.979756][T21151] R13: 00007f44971e6128 R14: 00007f44971e6090 R15: 00007ffe1fafdbb8 [ 1033.979801][T21151] [ 1033.979813][T21151] Mem-Info: [ 1034.251162][T21151] active_anon:14056 inactive_anon:6017 isolated_anon:0 [ 1034.251162][T21151] active_file:12287 inactive_file:39657 isolated_file:0 [ 1034.251162][T21151] unevictable:768 dirty:795 writeback:0 [ 1034.251162][T21151] slab_reclaimable:12422 slab_unreclaimable:95670 [ 1034.251162][T21151] mapped:26156 shmem:3288 pagetables:1477 [ 1034.251162][T21151] sec_pagetables:0 bounce:0 [ 1034.251162][T21151] kernel_misc_reclaimable:0 [ 1034.251162][T21151] free:1317945 free_pcp:11824 free_cma:0 [ 1034.415095][T21151] Node 0 active_anon:56224kB inactive_anon:26868kB active_file:48992kB inactive_file:158496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104624kB dirty:3180kB writeback:0kB shmem:11616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12408kB pagetables:5760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1034.490133][T21157] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2777'. [ 1034.507954][T21151] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1034.659593][T21151] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.743936][T21151] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1034.763335][T21151] Node 0 DMA32 free:1356960kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56176kB inactive_anon:26764kB active_file:47756kB inactive_file:158424kB unevictable:1536kB writepending:3180kB present:3129332kB managed:2539528kB mlocked:0kB bounce:0kB free_pcp:43328kB local_pcp:27688kB free_cma:0kB [ 1034.824068][T21151] lowmem_reserve[]: 0 0 1 1 1 [ 1034.831803][T21151] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:4kB active_file:1236kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1034.870283][T21151] lowmem_reserve[]: 0 0 0 0 0 [ 1034.876161][T21151] Node 1 Normal free:3901252kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1034.928095][T21151] lowmem_reserve[]: 0 0 0 0 0 [ 1034.934395][T21151] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1034.973570][T21151] Node 0 DMA32: 1971*4kB (UM) 718*8kB (UME) 1173*16kB (UME) 717*32kB (UME) 620*64kB (UME) 555*128kB (UME) 354*256kB (UM) 259*512kB (UME) 111*1024kB (UME) 11*2048kB (UME) 203*4096kB (UM) = 1356972kB [ 1035.056652][T21151] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1035.086782][T21151] Node 1 Normal: 247*4kB (UM) 64*8kB (UME) 36*16kB (UME) 270*32kB (UME) 122*64kB (UME) 38*128kB (UME) 14*256kB (UME) 9*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 943*4096kB (UM) = 3901276kB [ 1035.130129][T21151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.164855][T21151] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1035.188549][T21151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.199065][T21151] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1035.210793][T21151] 55229 total pagecache pages [ 1035.215579][T21151] 1 pages in swap cache [ 1035.236961][T21151] Free swap = 123468kB [ 1035.244620][T21151] Total swap = 124996kB [ 1035.256859][T21151] 2097051 pages RAM [ 1035.285146][T21151] 0 pages HighMem/MovableOnly [ 1035.303349][T21151] 430207 pages reserved [ 1035.332938][T21151] 0 pages cma reserved [ 1035.921217][ T30] audit: type=1800 audit(6138071936.203:16): pid=21183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=95510 res=0 errno=0 [ 1036.367738][T21190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 1036.626561][T21169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1036.632859][T21169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1036.640519][T21169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1036.647200][T21169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1036.678965][T21193] FAULT_INJECTION: forcing a failure. [ 1036.678965][T21193] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.775797][T21193] CPU: 1 UID: 0 PID: 21193 Comm: syz.2.2784 Tainted: G U syzkaller #0 PREEMPT(full) [ 1036.775845][T21193] Tainted: [U]=USER [ 1036.775853][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1036.775866][T21193] Call Trace: [ 1036.775874][T21193] [ 1036.775883][T21193] dump_stack_lvl+0x16c/0x1f0 [ 1036.775921][T21193] should_fail_ex+0x512/0x640 [ 1036.775956][T21193] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1036.775987][T21193] should_failslab+0xc2/0x120 [ 1036.776018][T21193] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1036.776046][T21193] ? __d_alloc+0x32/0xae0 [ 1036.776078][T21193] __d_alloc+0x32/0xae0 [ 1036.776109][T21193] d_alloc_pseudo+0x1c/0xc0 [ 1036.776143][T21193] alloc_file_pseudo+0xcf/0x230 [ 1036.776179][T21193] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1036.776214][T21193] ? alloc_fd+0x471/0x7d0 [ 1036.776242][T21193] sock_alloc_file+0x50/0x210 [ 1036.776264][T21193] __sys_socket+0x1c0/0x260 [ 1036.776292][T21193] ? __pfx___sys_socket+0x10/0x10 [ 1036.776319][T21193] ? xfd_validate_state+0x61/0x180 [ 1036.776351][T21193] ? __pfx_ksys_write+0x10/0x10 [ 1036.776383][T21193] __x64_sys_socket+0x72/0xb0 [ 1036.776409][T21193] ? lockdep_hardirqs_on+0x7c/0x110 [ 1036.776442][T21193] do_syscall_64+0xcd/0x4c0 [ 1036.776489][T21193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.776520][T21193] RIP: 0033:0x7f876558eec9 [ 1036.776545][T21193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.776577][T21193] RSP: 002b:00007f87664fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1036.776607][T21193] RAX: ffffffffffffffda RBX: 00007f87657e5fa0 RCX: 00007f876558eec9 [ 1036.776628][T21193] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010 [ 1036.776647][T21193] RBP: 00007f8765611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1036.776666][T21193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.776685][T21193] R13: 00007f87657e6038 R14: 00007f87657e5fa0 R15: 00007fff8cd0a078 [ 1036.776725][T21193] [ 1037.584356][T21205] random: crng reseeded on system resumption [ 1038.078406][T21210] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2789'. [ 1038.567296][T21223] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1038.651827][T18754] Bluetooth: hci3: command 0x0c1a tx timeout [ 1038.658470][ T9731] Bluetooth: hci0: command 0x0c1a tx timeout [ 1038.727098][ T9731] Bluetooth: hci4: command 0x0c1a tx timeout [ 1038.733246][T18754] Bluetooth: hci1: command 0x0c1a tx timeout [ 1039.224725][T21231] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1041.441432][T21262] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1041.592966][T21264] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1043.212478][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1043.363133][T21302] hsr0: entered allmulticast mode [ 1043.385131][T21302] hsr_slave_0: entered allmulticast mode [ 1043.427491][T21302] hsr_slave_1: entered allmulticast mode [ 1044.322305][T21326] Invalid ELF header magic: != ELF [ 1044.448322][T21326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2816'. [ 1045.217456][T21313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1045.235647][T21313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1045.255318][T21313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.302928][T21313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1045.664408][T21365] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1046.636198][T21381] FAULT_INJECTION: forcing a failure. [ 1046.636198][T21381] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.679372][T21381] CPU: 0 UID: 0 PID: 21381 Comm: syz.2.2825 Tainted: G U syzkaller #0 PREEMPT(full) [ 1046.679419][T21381] Tainted: [U]=USER [ 1046.679431][T21381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1046.679451][T21381] Call Trace: [ 1046.679462][T21381] [ 1046.679475][T21381] dump_stack_lvl+0x16c/0x1f0 [ 1046.679529][T21381] should_fail_ex+0x512/0x640 [ 1046.679578][T21381] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1046.679616][T21381] should_failslab+0xc2/0x120 [ 1046.679658][T21381] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1046.679716][T21381] ? seg6_genl_sethmac+0x38b/0x5b0 [ 1046.679782][T21381] seg6_genl_sethmac+0x38b/0x5b0 [ 1046.679824][T21381] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1046.679863][T21381] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1046.679897][T21381] ? rcu_is_watching+0x12/0xc0 [ 1046.679946][T21381] ? bpf_lsm_capable+0x9/0x10 [ 1046.679977][T21381] ? security_capable+0x7e/0x260 [ 1046.680018][T21381] genl_rcv_msg+0x55c/0x800 [ 1046.680059][T21381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.680095][T21381] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 1046.680147][T21381] netlink_rcv_skb+0x158/0x420 [ 1046.680198][T21381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.680236][T21381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1046.680317][T21381] genl_rcv+0x28/0x40 [ 1046.680346][T21381] netlink_unicast+0x5a7/0x870 [ 1046.680405][T21381] ? __pfx_netlink_unicast+0x10/0x10 [ 1046.680459][T21381] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1046.680509][T21381] ? __lock_acquire+0xb97/0x1ce0 [ 1046.680564][T21381] netlink_sendmsg+0x8d1/0xdd0 [ 1046.680625][T21381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.680689][T21381] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1046.680735][T21381] ____sys_sendmsg+0xa98/0xc70 [ 1046.680774][T21381] ? copy_msghdr_from_user+0x10a/0x160 [ 1046.680824][T21381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.680896][T21381] ___sys_sendmsg+0x134/0x1d0 [ 1046.680949][T21381] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.681050][T21381] __sys_sendmsg+0x16d/0x220 [ 1046.681100][T21381] ? __pfx___sys_sendmsg+0x10/0x10 [ 1046.681176][T21381] do_syscall_64+0xcd/0x4c0 [ 1046.681230][T21381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.681263][T21381] RIP: 0033:0x7f876558eec9 [ 1046.681289][T21381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.681320][T21381] RSP: 002b:00007f87664fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.681350][T21381] RAX: ffffffffffffffda RBX: 00007f87657e5fa0 RCX: 00007f876558eec9 [ 1046.681371][T21381] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 1046.681392][T21381] RBP: 00007f87664fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.681412][T21381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.681432][T21381] R13: 00007f87657e6038 R14: 00007f87657e5fa0 R15: 00007fff8cd0a078 [ 1046.681481][T21381] [ 1047.127067][T18754] Bluetooth: hci0: command 0x0c1a tx timeout [ 1047.290305][T18754] Bluetooth: hci4: command 0x0c1a tx timeout [ 1047.296402][ T9731] Bluetooth: hci3: command 0x0c1a tx timeout [ 1047.371257][T18754] Bluetooth: hci1: command 0x0c1a tx timeout [ 1048.381703][T21416] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2830'. [ 1048.622169][T21422] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2831'. [ 1052.308416][T21508] FAULT_INJECTION: forcing a failure. [ 1052.308416][T21508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.396593][T21508] CPU: 1 UID: 0 PID: 21508 Comm: syz.1.2844 Tainted: G U syzkaller #0 PREEMPT(full) [ 1052.396640][T21508] Tainted: [U]=USER [ 1052.396650][T21508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1052.396667][T21508] Call Trace: [ 1052.396677][T21508] [ 1052.396688][T21508] dump_stack_lvl+0x16c/0x1f0 [ 1052.396739][T21508] should_fail_ex+0x512/0x640 [ 1052.396790][T21508] _copy_to_user+0x32/0xd0 [ 1052.396824][T21508] simple_read_from_buffer+0xcb/0x170 [ 1052.396859][T21508] proc_fail_nth_read+0x197/0x240 [ 1052.396894][T21508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.396930][T21508] ? rw_verify_area+0xcf/0x6c0 [ 1052.396961][T21508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.396993][T21508] vfs_read+0x1e1/0xcf0 [ 1052.397033][T21508] ? __pfx___mutex_lock+0x10/0x10 [ 1052.397080][T21508] ? __pfx_vfs_read+0x10/0x10 [ 1052.397124][T21508] ? __fget_files+0x20e/0x3c0 [ 1052.397177][T21508] ksys_read+0x12a/0x250 [ 1052.397231][T21508] ? __pfx_ksys_read+0x10/0x10 [ 1052.397268][T21508] ? fput+0x9b/0xd0 [ 1052.397319][T21508] do_syscall_64+0xcd/0x4c0 [ 1052.397372][T21508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.397404][T21508] RIP: 0033:0x7f0f6f18d8dc [ 1052.397430][T21508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1052.397462][T21508] RSP: 002b:00007f0f6d3ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.397492][T21508] RAX: ffffffffffffffda RBX: 00007f0f6f3e5fa0 RCX: 00007f0f6f18d8dc [ 1052.397513][T21508] RDX: 000000000000000f RSI: 00007f0f6d3ee0a0 RDI: 0000000000000004 [ 1052.397533][T21508] RBP: 00007f0f6d3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.397553][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.397572][T21508] R13: 00007f0f6f3e6038 R14: 00007f0f6f3e5fa0 R15: 00007ffe8ea5b338 [ 1052.397615][T21508] [ 1053.063516][T21516] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1054.528578][T21539] random: crng reseeded on system resumption [ 1056.093482][T21568] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1056.156986][T21570] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1057.282683][T21588] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1057.457366][T21591] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1058.540088][T21612] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1059.055974][T21615] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2863'. [ 1059.577075][T21623] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1059.784058][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.791287][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.419534][T21635] ptrace attach of "./syz-executor exec"[18851] was attempted by "./syz-executor exec"[21635] [ 1060.726941][T21642] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2869'. [ 1061.004458][T21652] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1064.471854][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1064.621452][T21727] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1065.319669][ T30] audit: type=1804 audit(6138071965.593:17): pid=21736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2890" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1065.501658][T21746] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1066.330951][T21758] ======================================================= [ 1066.330951][T21758] WARNING: The mand mount option has been deprecated and [ 1066.330951][T21758] and is ignored by this kernel. Remove the mand [ 1066.330951][T21758] option from the mount to silence this warning. [ 1066.330951][T21758] ======================================================= [ 1066.783673][T21767] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1067.452837][T21780] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1068.139218][T21789] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1069.188411][T21799] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2908'. [ 1070.588581][T21830] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1070.872227][T21831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1071.706441][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1072.298040][T21861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1072.566465][T21870] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1073.328393][T21881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1073.575771][T21890] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1073.710386][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2921'. [ 1074.035311][T21897] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1075.162593][T21924] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1075.404886][T21911] ptrace attach of "./syz-executor exec"[19814] was attempted by "./syz-executor exec"[21911] [ 1077.956130][T21976] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1078.506821][T21986] netlink: 223 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1080.555200][T22016] can: request_module (can-proto-5) failed. [ 1081.121160][T22032] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1082.301045][T22045] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1083.226619][T22064] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1085.031627][T22088] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1085.484712][T22096] FAULT_INJECTION: forcing a failure. [ 1085.484712][T22096] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.534883][T22096] CPU: 1 UID: 0 PID: 22096 Comm: syz.1.2964 Tainted: G U syzkaller #0 PREEMPT(full) [ 1085.534930][T22096] Tainted: [U]=USER [ 1085.534938][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1085.534954][T22096] Call Trace: [ 1085.534963][T22096] [ 1085.534973][T22096] dump_stack_lvl+0x16c/0x1f0 [ 1085.535015][T22096] should_fail_ex+0x512/0x640 [ 1085.535055][T22096] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1085.535089][T22096] should_failslab+0xc2/0x120 [ 1085.535122][T22096] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1085.535152][T22096] ? kasan_save_track+0x14/0x30 [ 1085.535180][T22096] ? __kasan_kmalloc+0xaa/0xb0 [ 1085.535208][T22096] ? __d_alloc+0x32/0xae0 [ 1085.535239][T22096] ? drm_file_alloc+0x5c6/0xb40 [ 1085.535268][T22096] __d_alloc+0x32/0xae0 [ 1085.535297][T22096] ? put_dec_trunc8+0x28b/0x370 [ 1085.535327][T22096] d_alloc_parallel+0x111/0x1480 [ 1085.535371][T22096] ? __pfx_number+0x10/0x10 [ 1085.535402][T22096] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1085.535450][T22096] ? lockdep_init_map_type+0x5c/0x280 [ 1085.535489][T22096] ? lockdep_init_map_type+0x5c/0x280 [ 1085.535528][T22096] __lookup_slow+0x193/0x460 [ 1085.535568][T22096] ? __pfx___lookup_slow+0x10/0x10 [ 1085.535610][T22096] ? perf_trace_mm_compaction_suitable_template+0x110/0x5e0 [ 1085.535655][T22096] ? perf_trace_mm_compaction_suitable_template+0x110/0x5e0 [ 1085.535693][T22096] ? d_lookup+0xe7/0x190 [ 1085.535736][T22096] lookup_noperm+0xe1/0x110 [ 1085.535775][T22096] simple_start_creating+0xd1/0x1b0 [ 1085.535804][T22096] start_creating.part.0+0x82/0x190 [ 1085.535833][T22096] debugfs_create_dir+0x6c/0x5f0 [ 1085.535865][T22096] drm_debugfs_clients_add+0x6f/0x200 [ 1085.535891][T22096] drm_file_alloc+0x5c6/0xb40 [ 1085.535923][T22096] drm_open_helper+0x204/0x550 [ 1085.535954][T22096] drm_open+0x1a0/0x3e0 [ 1085.535980][T22096] ? __pfx_drm_open+0x10/0x10 [ 1085.536007][T22096] drm_stub_open+0x20c/0x380 [ 1085.536035][T22096] ? __pfx_drm_stub_open+0x10/0x10 [ 1085.536061][T22096] chrdev_open+0x231/0x6a0 [ 1085.536093][T22096] ? __pfx_apparmor_file_open+0x10/0x10 [ 1085.536135][T22096] ? __pfx_chrdev_open+0x10/0x10 [ 1085.536169][T22096] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1085.536204][T22096] do_dentry_open+0x97f/0x1530 [ 1085.536236][T22096] ? __pfx_chrdev_open+0x10/0x10 [ 1085.536274][T22096] vfs_open+0x82/0x3f0 [ 1085.536314][T22096] path_openat+0x1de4/0x2cb0 [ 1085.536353][T22096] ? __pfx_path_openat+0x10/0x10 [ 1085.536390][T22096] do_filp_open+0x20b/0x470 [ 1085.536419][T22096] ? __pfx_do_filp_open+0x10/0x10 [ 1085.536493][T22096] ? alloc_fd+0x471/0x7d0 [ 1085.536553][T22096] do_sys_openat2+0x11b/0x1d0 [ 1085.536607][T22096] ? __pfx_do_sys_openat2+0x10/0x10 [ 1085.536680][T22096] __x64_sys_openat+0x174/0x210 [ 1085.536710][T22096] ? __pfx___x64_sys_openat+0x10/0x10 [ 1085.536759][T22096] do_syscall_64+0xcd/0x4c0 [ 1085.536816][T22096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.536852][T22096] RIP: 0033:0x7f0f6f18eec9 [ 1085.536879][T22096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.536913][T22096] RSP: 002b:00007f0f6d3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.536947][T22096] RAX: ffffffffffffffda RBX: 00007f0f6f3e5fa0 RCX: 00007f0f6f18eec9 [ 1085.536970][T22096] RDX: 0000000000129843 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1085.536993][T22096] RBP: 00007f0f6f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1085.537015][T22096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.537036][T22096] R13: 00007f0f6f3e6038 R14: 00007f0f6f3e5fa0 R15: 00007ffe8ea5b338 [ 1085.537082][T22096] [ 1086.227623][T22110] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1086.251515][T22108] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1086.622858][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1089.946467][T22169] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1091.835978][T22195] random: crng reseeded on system resumption [ 1095.572409][T22261] FAULT_INJECTION: forcing a failure. [ 1095.572409][T22261] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.626594][T22261] CPU: 1 UID: 0 PID: 22261 Comm: syz.4.2993 Tainted: G U syzkaller #0 PREEMPT(full) [ 1095.626644][T22261] Tainted: [U]=USER [ 1095.626655][T22261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1095.626674][T22261] Call Trace: [ 1095.626684][T22261] [ 1095.626697][T22261] dump_stack_lvl+0x16c/0x1f0 [ 1095.626749][T22261] should_fail_ex+0x512/0x640 [ 1095.626797][T22261] ? __kmalloc_noprof+0xbf/0x510 [ 1095.626838][T22261] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 1095.626885][T22261] should_failslab+0xc2/0x120 [ 1095.626927][T22261] __kmalloc_noprof+0xd2/0x510 [ 1095.626974][T22261] devlink_fmsg_put_name+0xf0/0x3f0 [ 1095.627026][T22261] devlink_fmsg_u8_pair_put+0xff/0x2f0 [ 1095.627058][T22261] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 1095.627094][T22261] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 1095.627152][T22261] nsim_dev_dummy_fmsg_put+0x39/0x1e0 [ 1095.627203][T22261] devlink_health_do_dump+0x243/0x620 [ 1095.627240][T22261] devlink_health_report+0x3c9/0x9c0 [ 1095.627288][T22261] ? __pfx_devlink_health_report+0x10/0x10 [ 1095.627322][T22261] ? _copy_from_user+0x59/0xd0 [ 1095.627369][T22261] nsim_dev_health_break_write+0x166/0x210 [ 1095.627415][T22261] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1095.627491][T22261] full_proxy_write+0x12e/0x1a0 [ 1095.627543][T22261] ? __pfx_full_proxy_write+0x10/0x10 [ 1095.627591][T22261] vfs_write+0x29d/0x11d0 [ 1095.627633][T22261] ? __pfx___mutex_lock+0x10/0x10 [ 1095.627682][T22261] ? __pfx_vfs_write+0x10/0x10 [ 1095.627729][T22261] ? __fget_files+0x20e/0x3c0 [ 1095.627786][T22261] ksys_write+0x12a/0x250 [ 1095.627821][T22261] ? __pfx_ksys_write+0x10/0x10 [ 1095.627868][T22261] do_syscall_64+0xcd/0x4c0 [ 1095.627916][T22261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.627946][T22261] RIP: 0033:0x7fd07558eec9 [ 1095.627974][T22261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.628021][T22261] RSP: 002b:00007fd0764c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1095.628054][T22261] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558eec9 [ 1095.628079][T22261] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 1095.628101][T22261] RBP: 00007fd075611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1095.628124][T22261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.628145][T22261] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1095.628192][T22261] [ 1098.595053][T22327] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1099.603198][T22359] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1099.694013][T22364] random: crng reseeded on system resumption [ 1099.998881][T22374] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1101.105500][T22390] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1102.387867][T22422] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1102.905975][T22422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1104.207096][T22360] cgroup: fork rejected by pids controller in /syz1 [ 1105.361510][T22521] bridge0: port 3(bond0) entered blocking state [ 1105.409784][T22521] bridge0: port 3(bond0) entered disabled state [ 1105.416290][T22521] bond0: entered allmulticast mode [ 1105.476663][T22521] bond_slave_0: entered allmulticast mode [ 1105.496640][T22521] bond_slave_1: entered allmulticast mode [ 1105.515206][T22521] bond0: entered promiscuous mode [ 1105.530617][T22521] bond_slave_0: entered promiscuous mode [ 1105.560666][T22521] bond_slave_1: entered promiscuous mode [ 1105.570793][T22521] bridge0: port 3(bond0) entered blocking state [ 1105.577803][T22521] bridge0: port 3(bond0) entered forwarding state [ 1107.265540][T21828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.278223][T22554] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1107.528658][T21828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.773755][T21828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.994935][T21828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.387616][ T9731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1108.402969][ T9731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1108.411900][ T9731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1108.424677][ T9731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1108.447319][ T9731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1108.742412][T22584] overlayfs: missing 'lowerdir' [ 1108.933493][T21828] bridge_slave_1: left allmulticast mode [ 1108.946284][T21828] bridge_slave_1: left promiscuous mode [ 1108.954534][T21828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.020582][T21828] bridge_slave_0: left allmulticast mode [ 1109.047936][T21828] bridge_slave_0: left promiscuous mode [ 1109.081666][T21828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.619249][T22608] __vm_enough_memory: pid: 22608, comm: syz.5.3041, bytes: 4398046511104 not enough memory for the allocation [ 1110.005610][T22614] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3042'. [ 1110.204185][T22616] sp0: Synchronizing with TNC [ 1110.566828][T18754] Bluetooth: hci2: command tx timeout [ 1111.130000][T22627] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1111.305470][T21828] hsr_slave_0: left promiscuous mode [ 1111.330447][T21828] hsr_slave_1: left promiscuous mode [ 1111.355452][T21828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.405086][T21828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.430418][T21828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.466010][T21828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.547881][T21828] veth1_macvtap: left promiscuous mode [ 1111.553441][T21828] veth0_macvtap: left promiscuous mode [ 1111.567204][T21828] veth1_vlan: left promiscuous mode [ 1111.573113][T21828] veth0_vlan: left promiscuous mode [ 1112.368070][T21828] team0 (unregistering): Port device team_slave_1 removed [ 1112.428017][T21828] team0 (unregistering): Port device team_slave_0 removed [ 1112.646596][T18754] Bluetooth: hci2: command tx timeout [ 1113.388875][T22575] chnl_net:caif_netlink_parms(): no params data found [ 1113.931004][T22575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.962512][T22575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.008461][T22575] bridge_slave_0: entered allmulticast mode [ 1114.067063][T22575] bridge_slave_0: entered promiscuous mode [ 1114.253437][T22575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.349714][T22575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.394446][T22575] bridge_slave_1: entered allmulticast mode [ 1114.414993][T22575] bridge_slave_1: entered promiscuous mode [ 1114.726593][T18754] Bluetooth: hci2: command tx timeout [ 1114.755986][T22575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.865753][T22575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.031173][T22575] team0: Port device team_slave_0 added [ 1115.105446][T22690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1115.164259][T22575] team0: Port device team_slave_1 added [ 1115.463254][T22575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.506559][T22575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.546048][T22575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.667567][T22575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.743364][T22575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.792411][T22575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.380992][T22575] hsr_slave_0: entered promiscuous mode [ 1116.392667][T22575] hsr_slave_1: entered promiscuous mode [ 1116.412138][T22575] debugfs: 'hsr0' already exists in 'hsr' [ 1116.425188][T22575] Cannot create hsr debugfs directory [ 1116.806714][T18754] Bluetooth: hci2: command tx timeout [ 1118.091194][T22740] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1118.171834][T22575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.284491][T22575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.322764][T22575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1118.520049][T22749] netlink: 326 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1118.620168][T22575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1118.654598][T22749] veth1_macvtap: left promiscuous mode [ 1119.146346][T22575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.456364][T22575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.647836][T21826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.655027][T21826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.199255][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.206482][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.425930][T22793] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1121.214572][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.220965][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.621545][T22818] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1121.696217][T22575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.412290][T22575] veth0_vlan: entered promiscuous mode [ 1122.580001][T22575] veth1_vlan: entered promiscuous mode [ 1122.608126][T22832] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1122.770015][T22834] random: crng reseeded on system resumption [ 1123.185344][T22575] veth0_macvtap: entered promiscuous mode [ 1123.397102][T22575] veth1_macvtap: entered promiscuous mode [ 1123.445698][T22856] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1123.585200][T22575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.729868][T22575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.226608][ T9084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.238623][T19152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.256598][T19152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.308820][ T6800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.557515][T21828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.585599][T21828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.688436][T21828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.711476][T21828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.785064][T22894] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1126.164254][T22898] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1126.739354][ T30] audit: type=1107 audit(6138072027.023:18): pid=22911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1126.741426][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1126.807128][ T30] audit: type=1107 audit(6138072027.023:19): pid=22911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1126.829442][T22916] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1128.825013][T22923] netlink: 'syz.1.3093': attribute type 1 has an invalid length. [ 1129.851305][T22977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1129.939691][T22974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3103'. [ 1130.883995][T22994] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1132.310795][T23028] random: crng reseeded on system resumption [ 1134.511513][T23071] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1134.620936][T23074] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1135.576419][T23091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1137.282410][T23110] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1138.435878][T23135] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1140.710273][T23166] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1140.866768][T23172] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3136'. [ 1141.873334][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 1142.635185][T23213] netlink: 'syz.1.3142': attribute type 1 has an invalid length. [ 1142.951713][T23213] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1143.989136][T23235] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1144.021005][T23202] netlink: 'syz.5.3143': attribute type 1 has an invalid length. [ 1144.522779][T23243] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1144.907250][T23247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1144.947597][T23247] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1145.466841][T23259] Invalid ELF header magic: != ELF [ 1146.240343][T23276] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1147.850973][T23291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1148.994317][T23301] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1149.764045][T23320] __vm_enough_memory: pid: 23320, comm: syz.1.3171, bytes: 4398046511104 not enough memory for the allocation [ 1150.457750][T23339] FAULT_INJECTION: forcing a failure. [ 1150.457750][T23339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.480033][T23339] CPU: 0 UID: 0 PID: 23339 Comm: syz.4.3175 Tainted: G U syzkaller #0 PREEMPT(full) [ 1150.480083][T23339] Tainted: [U]=USER [ 1150.480094][T23339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1150.480114][T23339] Call Trace: [ 1150.480124][T23339] [ 1150.480136][T23339] dump_stack_lvl+0x16c/0x1f0 [ 1150.480190][T23339] should_fail_ex+0x512/0x640 [ 1150.480243][T23339] _copy_from_user+0x2e/0xd0 [ 1150.480280][T23339] copy_msghdr_from_user+0x98/0x160 [ 1150.480329][T23339] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1150.480398][T23339] ___sys_sendmsg+0xfe/0x1d0 [ 1150.480457][T23339] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.480555][T23339] __sys_sendmsg+0x16d/0x220 [ 1150.480605][T23339] ? __pfx___sys_sendmsg+0x10/0x10 [ 1150.480681][T23339] do_syscall_64+0xcd/0x4c0 [ 1150.480734][T23339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.480766][T23339] RIP: 0033:0x7fd07558eec9 [ 1150.480792][T23339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.480823][T23339] RSP: 002b:00007fd0764c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.480853][T23339] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558eec9 [ 1150.480876][T23339] RDX: 0000000000008044 RSI: 0000200000000240 RDI: 0000000000000005 [ 1150.480897][T23339] RBP: 00007fd0764c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.480917][T23339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.480936][T23339] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1150.480977][T23339] [ 1150.725716][T23341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3176'. [ 1151.132088][T23352] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1151.861457][T23362] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1152.580353][T23370] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1153.636529][ T30] audit: type=1800 audit(6138072053.903:20): pid=23381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3185" name="discovery_nqn" dev="configfs" ino=105349 res=0 errno=0 [ 1153.795262][T23389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1154.031823][T23394] FAULT_INJECTION: forcing a failure. [ 1154.031823][T23394] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.080060][T23394] CPU: 1 UID: 0 PID: 23394 Comm: syz.4.3187 Tainted: G U syzkaller #0 PREEMPT(full) [ 1154.080110][T23394] Tainted: [U]=USER [ 1154.080121][T23394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1154.080148][T23394] Call Trace: [ 1154.080159][T23394] [ 1154.080171][T23394] dump_stack_lvl+0x16c/0x1f0 [ 1154.080226][T23394] should_fail_ex+0x512/0x640 [ 1154.080274][T23394] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1154.080317][T23394] should_failslab+0xc2/0x120 [ 1154.080361][T23394] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1154.080400][T23394] ? __alloc_skb+0x2b2/0x380 [ 1154.080452][T23394] __alloc_skb+0x2b2/0x380 [ 1154.080496][T23394] ? __pfx___alloc_skb+0x10/0x10 [ 1154.080545][T23394] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1154.080592][T23394] ? __lock_acquire+0xb97/0x1ce0 [ 1154.080642][T23394] netlink_alloc_large_skb+0x69/0x130 [ 1154.080697][T23394] netlink_sendmsg+0x6a1/0xdd0 [ 1154.080755][T23394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.080808][T23394] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1154.080851][T23394] ____sys_sendmsg+0xa98/0xc70 [ 1154.080887][T23394] ? copy_msghdr_from_user+0x10a/0x160 [ 1154.080935][T23394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1154.080990][T23394] ___sys_sendmsg+0x134/0x1d0 [ 1154.081041][T23394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1154.081148][T23394] __sys_sendmsg+0x16d/0x220 [ 1154.081199][T23394] ? __pfx___sys_sendmsg+0x10/0x10 [ 1154.081273][T23394] do_syscall_64+0xcd/0x4c0 [ 1154.081328][T23394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.081362][T23394] RIP: 0033:0x7fd07558eec9 [ 1154.081387][T23394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.081420][T23394] RSP: 002b:00007fd0764c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.081450][T23394] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558eec9 [ 1154.081472][T23394] RDX: 0000000000008044 RSI: 0000200000000240 RDI: 0000000000000005 [ 1154.081493][T23394] RBP: 00007fd0764c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.081513][T23394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.081533][T23394] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1154.081575][T23394] [ 1154.480662][T23400] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3189'. [ 1154.805375][T23410] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1156.553651][T23451] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.735487][T23470] Invalid ELF header magic: != ELF [ 1158.794031][T23491] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3202'. [ 1159.733875][T23506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3204'. [ 1162.667794][T23566] netlink: 93 bytes leftover after parsing attributes in process `syz.4.3215'. [ 1164.558824][T23599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1165.367920][T23626] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1166.076849][T23641] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1167.054636][T23664] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1167.133725][T23664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3229'. [ 1167.517213][T23664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.564766][T23664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.582314][T23664] bond0 (unregistering): Released all slaves [ 1170.592186][T23718] Invalid ELF header magic: != ELF [ 1170.806942][T18754] Bluetooth: hci2: command 0x0c1a tx timeout [ 1170.818692][T20898] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1170.846911][T23721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1171.787718][T23744] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1172.886569][T20898] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1172.886610][T18754] Bluetooth: hci2: command 0x0c1a tx timeout [ 1174.506725][T23788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1174.589921][T23790] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1174.638459][T23792] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1174.732019][T23756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 1174.966889][T20898] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1174.967459][T18754] Bluetooth: hci2: command 0x0c1a tx timeout [ 1175.345454][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 1178.487335][T23858] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1178.655757][T23863] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1179.064759][T23871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1180.476390][T23896] vhci_hcd: default hub control req: 2306 v0008 i0007 l2048 [ 1181.031334][T23910] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1181.738997][T23922] FAULT_INJECTION: forcing a failure. [ 1181.738997][T23922] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.832333][T23922] CPU: 1 UID: 0 PID: 23922 Comm: syz.1.3279 Tainted: G U syzkaller #0 PREEMPT(full) [ 1181.832386][T23922] Tainted: [U]=USER [ 1181.832398][T23922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1181.832419][T23922] Call Trace: [ 1181.832430][T23922] [ 1181.832443][T23922] dump_stack_lvl+0x16c/0x1f0 [ 1181.832509][T23922] should_fail_ex+0x512/0x640 [ 1181.832558][T23922] ? __kmalloc_noprof+0xbf/0x510 [ 1181.832607][T23922] ? nfc_llcp_build_tlv+0xfd/0x230 [ 1181.832655][T23922] should_failslab+0xc2/0x120 [ 1181.832697][T23922] __kmalloc_noprof+0xd2/0x510 [ 1181.832743][T23922] nfc_llcp_build_tlv+0xfd/0x230 [ 1181.832795][T23922] nfc_llcp_build_gb.isra.0+0x193/0x400 [ 1181.832841][T23922] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 1181.832894][T23922] ? nfc_genl_dump_ses+0x920/0x980 [ 1181.832930][T23922] ? lockdep_init_map_type+0x5c/0x280 [ 1181.832980][T23922] nfc_llcp_register_device+0x600/0xa60 [ 1181.833030][T23922] nfc_register_device+0x6d/0x3c0 [ 1181.833082][T23922] nci_register_device+0x7f1/0xb80 [ 1181.833125][T23922] ? __pfx_nci_register_device+0x10/0x10 [ 1181.833172][T23922] ? lockdep_init_map_type+0x5c/0x280 [ 1181.833224][T23922] virtual_ncidev_open+0x141/0x220 [ 1181.833264][T23922] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1181.833303][T23922] misc_open+0x35a/0x420 [ 1181.833346][T23922] ? __pfx_misc_open+0x10/0x10 [ 1181.833384][T23922] chrdev_open+0x231/0x6a0 [ 1181.833425][T23922] ? __pfx_apparmor_file_open+0x10/0x10 [ 1181.833460][T23922] ? __pfx_chrdev_open+0x10/0x10 [ 1181.833504][T23922] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1181.833547][T23922] do_dentry_open+0x97f/0x1530 [ 1181.833584][T23922] ? __pfx_chrdev_open+0x10/0x10 [ 1181.833642][T23922] vfs_open+0x82/0x3f0 [ 1181.833694][T23922] path_openat+0x1de4/0x2cb0 [ 1181.833746][T23922] ? __pfx_path_openat+0x10/0x10 [ 1181.833796][T23922] do_filp_open+0x20b/0x470 [ 1181.833835][T23922] ? __pfx_do_filp_open+0x10/0x10 [ 1181.833901][T23922] ? alloc_fd+0x471/0x7d0 [ 1181.833948][T23922] do_sys_openat2+0x11b/0x1d0 [ 1181.833996][T23922] ? __pfx_do_sys_openat2+0x10/0x10 [ 1181.834060][T23922] __x64_sys_openat+0x174/0x210 [ 1181.834089][T23922] ? __pfx___x64_sys_openat+0x10/0x10 [ 1181.834133][T23922] do_syscall_64+0xcd/0x4c0 [ 1181.834185][T23922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.834217][T23922] RIP: 0033:0x7f83c258eec9 [ 1181.834251][T23922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.834283][T23922] RSP: 002b:00007f83c34e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1181.834313][T23922] RAX: ffffffffffffffda RBX: 00007f83c27e5fa0 RCX: 00007f83c258eec9 [ 1181.834334][T23922] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1181.834353][T23922] RBP: 00007f83c2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1181.834391][T23922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.834411][T23922] R13: 00007f83c27e6038 R14: 00007f83c27e5fa0 R15: 00007fff8f056cf8 [ 1181.834455][T23922] [ 1182.373727][T23935] can: request_module (can-proto-0) failed. [ 1182.651196][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.690280][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.448299][T23954] FAULT_INJECTION: forcing a failure. [ 1183.448299][T23954] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.472211][T23957] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1183.497723][T23954] CPU: 1 UID: 0 PID: 23954 Comm: syz.1.3283 Tainted: G U syzkaller #0 PREEMPT(full) [ 1183.497765][T23954] Tainted: [U]=USER [ 1183.497773][T23954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1183.497787][T23954] Call Trace: [ 1183.497795][T23954] [ 1183.497804][T23954] dump_stack_lvl+0x16c/0x1f0 [ 1183.497844][T23954] should_fail_ex+0x512/0x640 [ 1183.497880][T23954] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1183.497908][T23954] should_failslab+0xc2/0x120 [ 1183.497939][T23954] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1183.497964][T23954] ? kvm_dev_ioctl+0xa7a/0x1af0 [ 1183.497993][T23954] kvm_dev_ioctl+0xa7a/0x1af0 [ 1183.498021][T23954] ? find_held_lock+0x2b/0x80 [ 1183.498063][T23954] ? hook_file_ioctl_common+0x145/0x410 [ 1183.498097][T23954] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1183.498125][T23954] ? __fget_files+0x20e/0x3c0 [ 1183.498156][T23954] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1183.498193][T23954] __x64_sys_ioctl+0x18b/0x210 [ 1183.498235][T23954] do_syscall_64+0xcd/0x4c0 [ 1183.498276][T23954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.498301][T23954] RIP: 0033:0x7f83c258eec9 [ 1183.498320][T23954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.498344][T23954] RSP: 002b:00007f83c34e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.498367][T23954] RAX: ffffffffffffffda RBX: 00007f83c27e5fa0 RCX: 00007f83c258eec9 [ 1183.498384][T23954] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 1183.498399][T23954] RBP: 00007f83c2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1183.498414][T23954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.498428][T23954] R13: 00007f83c27e6038 R14: 00007f83c27e5fa0 R15: 00007fff8f056cf8 [ 1183.498459][T23954] [ 1184.724582][T23981] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1185.659545][T23991] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1185.671276][T23993] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3292'. [ 1187.139492][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1187.897649][T24027] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3301'. [ 1187.911145][T24026] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1187.975160][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1188.041930][T24032] random: crng reseeded on system resumption [ 1189.147867][T24046] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1189.157828][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3305'. [ 1189.196067][T24045] team0: entered promiscuous mode [ 1189.230423][T24045] team_slave_0: entered promiscuous mode [ 1189.236345][T24045] team_slave_1: entered promiscuous mode [ 1189.298662][T24045] team0: entered allmulticast mode [ 1189.320007][T24045] team_slave_0: entered allmulticast mode [ 1189.369963][T24045] team_slave_1: entered allmulticast mode [ 1189.390935][T24051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1190.340361][T24063] cougar: G6 mapped to space [ 1190.377118][T24063] FAULT_INJECTION: forcing a failure. [ 1190.377118][T24063] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.421374][T24063] CPU: 1 UID: 0 PID: 24063 Comm: syz.1.3310 Tainted: G U syzkaller #0 PREEMPT(full) [ 1190.421413][T24063] Tainted: [U]=USER [ 1190.421421][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1190.421435][T24063] Call Trace: [ 1190.421444][T24063] [ 1190.421454][T24063] dump_stack_lvl+0x16c/0x1f0 [ 1190.421496][T24063] should_fail_ex+0x512/0x640 [ 1190.421534][T24063] ? __kmalloc_noprof+0xbf/0x510 [ 1190.421565][T24063] ? lsm_blob_alloc+0x68/0x90 [ 1190.421586][T24063] should_failslab+0xc2/0x120 [ 1190.421618][T24063] __kmalloc_noprof+0xd2/0x510 [ 1190.421652][T24063] lsm_blob_alloc+0x68/0x90 [ 1190.421675][T24063] security_sk_alloc+0x30/0x270 [ 1190.421703][T24063] sk_prot_alloc+0xfb/0x2a0 [ 1190.421732][T24063] sk_alloc+0x36/0xc20 [ 1190.421767][T24063] __vsock_create.constprop.0+0x3c/0xbb0 [ 1190.421801][T24063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1190.421846][T24063] vsock_create+0x139/0x500 [ 1190.421885][T24063] __sock_create+0x338/0x8d0 [ 1190.421919][T24063] __sys_socket+0x14d/0x260 [ 1190.421948][T24063] ? __pfx___sys_socket+0x10/0x10 [ 1190.421990][T24063] ? xfd_validate_state+0x61/0x180 [ 1190.422024][T24063] ? __task_pid_nr_ns+0x17c/0x500 [ 1190.422063][T24063] __x64_sys_socket+0x72/0xb0 [ 1190.422089][T24063] ? lockdep_hardirqs_on+0x7c/0x110 [ 1190.422124][T24063] do_syscall_64+0xcd/0x4c0 [ 1190.422163][T24063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.422187][T24063] RIP: 0033:0x7f83c258eec9 [ 1190.422206][T24063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.422230][T24063] RSP: 002b:00007f83c34e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1190.422253][T24063] RAX: ffffffffffffffda RBX: 00007f83c27e5fa0 RCX: 00007f83c258eec9 [ 1190.422270][T24063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1190.422284][T24063] RBP: 00007f83c2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1190.422299][T24063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.422313][T24063] R13: 00007f83c27e6038 R14: 00007f83c27e5fa0 R15: 00007fff8f056cf8 [ 1190.422342][T24063] [ 1190.760706][T24069] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3312'. [ 1192.091715][T24095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1192.219422][T24098] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1192.905964][T24106] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1194.336154][T24130] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1194.593955][T24126] program syz.2.3326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1194.683234][T24136] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 1197.921694][T18754] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1200.019614][ T9731] Bluetooth: hci2: command 0x0c1a tx timeout [ 1200.320626][T24239] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1200.921167][T24250] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1200.960329][T24259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3355'. [ 1203.596711][T24307] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1203.627652][T24307] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1203.667950][T24307] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1203.738167][T24307] futex_wake_op: syz.5.3363 tries to shift op by -9; fix this program [ 1203.891467][T24321] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1204.086380][T24327] input: f¬ as /devices/virtual/input/input59 [ 1204.651049][T24339] zswap: compressor 000 not available [ 1205.169667][T24352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1207.306342][T24380] openvswitch: netlink: Missing valid actions attribute. [ 1210.180202][T24430] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1211.676173][T24464] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1212.131396][T24468] vivid-007: ================= START STATUS ================= [ 1212.139540][T24468] vivid-007: Generate PTS: true [ 1212.146272][T24468] vivid-007: Generate SCR: true [ 1212.152055][T24468] tpg source WxH: 320x240 (Y'CbCr) [ 1212.158180][T24468] tpg field: 1 [ 1212.161738][T24468] tpg crop: (0,0)/320x240 [ 1212.166174][T24468] tpg compose: (0,0)/320x240 [ 1212.171430][T24468] tpg colorspace: 8 [ 1212.175323][T24468] tpg transfer function: 0/0 [ 1212.215163][T24468] tpg Y'CbCr encoding: 0/0 [ 1212.258823][T24468] tpg quantization: 0/0 [ 1212.263647][T24468] tpg RGB range: 0/2 [ 1212.269012][T24468] vivid-007: ================== END STATUS ================== [ 1213.264187][T24498] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3401'. [ 1213.706323][T24514] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1214.741437][T24544] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1217.365309][T24606] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1217.449728][T24610] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1218.528763][T24640] ICMPv6: process `syz.4.3424' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1222.544483][T24709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1223.305299][T24714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1223.362349][T24714] bridge0: port 3(bond0) entered disabled state [ 1223.731405][T24714] bond0 (unregistering): left allmulticast mode [ 1223.768662][T24714] bond_slave_0: left allmulticast mode [ 1223.795298][T24714] bond_slave_1: left allmulticast mode [ 1223.810556][T24714] bond0 (unregistering): left promiscuous mode [ 1223.832309][T24714] bond_slave_0: left promiscuous mode [ 1223.844858][T24714] bond_slave_1: left promiscuous mode [ 1223.852906][T24714] bridge0: port 3(bond0) entered disabled state [ 1223.932784][T24714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.946285][T24714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.978153][T24714] bond0 (unregistering): Released all slaves [ 1224.026064][T24728] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1224.211618][T24730] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1224.227467][T24730] FAULT_INJECTION: forcing a failure. [ 1224.227467][T24730] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.256492][T24730] CPU: 1 UID: 0 PID: 24730 Comm: syz.4.3446 Tainted: G U syzkaller #0 PREEMPT(full) [ 1224.256548][T24730] Tainted: [U]=USER [ 1224.256558][T24730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1224.256576][T24730] Call Trace: [ 1224.256587][T24730] [ 1224.256599][T24730] dump_stack_lvl+0x16c/0x1f0 [ 1224.256653][T24730] should_fail_ex+0x512/0x640 [ 1224.256704][T24730] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1224.256749][T24730] should_failslab+0xc2/0x120 [ 1224.256793][T24730] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1224.256834][T24730] ? __alloc_skb+0x2b2/0x380 [ 1224.256886][T24730] __alloc_skb+0x2b2/0x380 [ 1224.256930][T24730] ? __pfx___alloc_skb+0x10/0x10 [ 1224.256991][T24730] netlink_ack+0x15d/0xb80 [ 1224.257043][T24730] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1224.257093][T24730] netlink_rcv_skb+0x332/0x420 [ 1224.257143][T24730] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1224.257185][T24730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1224.257254][T24730] ? ns_capable+0xd7/0x110 [ 1224.257295][T24730] nfnetlink_rcv+0x1b3/0x430 [ 1224.257333][T24730] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1224.257371][T24730] ? netlink_deliver_tap+0x1ae/0xd30 [ 1224.257428][T24730] netlink_unicast+0x5a7/0x870 [ 1224.257484][T24730] ? __pfx_netlink_unicast+0x10/0x10 [ 1224.257548][T24730] ? __asan_memset+0x23/0x50 [ 1224.257581][T24730] ? __build_skb_around+0x278/0x3b0 [ 1224.257623][T24730] ? is_vmalloc_addr+0x86/0xa0 [ 1224.257667][T24730] netlink_sendmsg+0x8d1/0xdd0 [ 1224.257725][T24730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.257782][T24730] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1224.257825][T24730] sock_write_iter+0x4fc/0x5b0 [ 1224.257864][T24730] ? __pfx_sock_write_iter+0x10/0x10 [ 1224.257915][T24730] ? bpf_lsm_file_permission+0x9/0x10 [ 1224.257961][T24730] ? security_file_permission+0x71/0x210 [ 1224.258009][T24730] ? rw_verify_area+0xcf/0x6c0 [ 1224.258047][T24730] vfs_write+0x7d3/0x11d0 [ 1224.258105][T24730] ? __pfx_sock_write_iter+0x10/0x10 [ 1224.258147][T24730] ? __pfx_vfs_write+0x10/0x10 [ 1224.258184][T24730] ? find_held_lock+0x2b/0x80 [ 1224.258244][T24730] ksys_write+0x1f8/0x250 [ 1224.258285][T24730] ? __pfx_ksys_write+0x10/0x10 [ 1224.258337][T24730] do_syscall_64+0xcd/0x4c0 [ 1224.258393][T24730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.258427][T24730] RIP: 0033:0x7fd07558eec9 [ 1224.258453][T24730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.258485][T24730] RSP: 002b:00007fd0764c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1224.258522][T24730] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558eec9 [ 1224.258544][T24730] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 1224.258565][T24730] RBP: 00007fd0764c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.258586][T24730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.258606][T24730] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1224.258650][T24730] [ 1224.701003][T24733] netlink: 5276 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1224.710431][T24733] netlink: 1297 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1224.917216][T24739] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1225.269934][T24748] syz.1.3451: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1225.298022][T24748] CPU: 1 UID: 0 PID: 24748 Comm: syz.1.3451 Tainted: G U syzkaller #0 PREEMPT(full) [ 1225.298056][T24748] Tainted: [U]=USER [ 1225.298063][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1225.298076][T24748] Call Trace: [ 1225.298084][T24748] [ 1225.298111][T24748] dump_stack_lvl+0x16c/0x1f0 [ 1225.298152][T24748] warn_alloc+0x248/0x3a0 [ 1225.298183][T24748] ? __pfx_warn_alloc+0x10/0x10 [ 1225.298230][T24748] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1225.298258][T24748] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1225.298284][T24748] ? __pfx___might_resched+0x10/0x10 [ 1225.298311][T24748] ? rcu_is_watching+0x12/0xc0 [ 1225.298335][T24748] ? trace_contention_end+0xdd/0x130 [ 1225.298377][T24748] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1225.298409][T24748] ? tomoyo_path_number_perm+0x295/0x580 [ 1225.298442][T24748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1225.298466][T24748] ? __pfx___mutex_lock+0x10/0x10 [ 1225.298517][T24748] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1225.298544][T24748] __vmalloc_node_noprof+0xad/0xf0 [ 1225.298566][T24748] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1225.298597][T24748] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1225.298626][T24748] ? do_vfs_ioctl+0x128/0x14f0 [ 1225.298669][T24748] dvb_usercopy+0x164/0x340 [ 1225.298691][T24748] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1225.298719][T24748] ? __pfx_dvb_usercopy+0x10/0x10 [ 1225.298753][T24748] ? __fget_files+0x20e/0x3c0 [ 1225.298786][T24748] dvb_demux_ioctl+0x29/0x40 [ 1225.298808][T24748] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1225.298832][T24748] __x64_sys_ioctl+0x18b/0x210 [ 1225.298873][T24748] do_syscall_64+0xcd/0x4c0 [ 1225.298913][T24748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.298938][T24748] RIP: 0033:0x7f83c258eec9 [ 1225.298958][T24748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.298983][T24748] RSP: 002b:00007f83c34c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.299006][T24748] RAX: ffffffffffffffda RBX: 00007f83c27e6090 RCX: 00007f83c258eec9 [ 1225.299022][T24748] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 1225.299038][T24748] RBP: 00007f83c2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1225.299054][T24748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.299072][T24748] R13: 00007f83c27e6128 R14: 00007f83c27e6090 R15: 00007fff8f056cf8 [ 1225.299104][T24748] [ 1225.299232][T24748] Mem-Info: [ 1225.555186][T24748] active_anon:16276 inactive_anon:6215 isolated_anon:0 [ 1225.555186][T24748] active_file:19323 inactive_file:40012 isolated_file:0 [ 1225.555186][T24748] unevictable:768 dirty:1020 writeback:0 [ 1225.555186][T24748] slab_reclaimable:12392 slab_unreclaimable:96209 [ 1225.555186][T24748] mapped:27780 shmem:4558 pagetables:1432 [ 1225.555186][T24748] sec_pagetables:0 bounce:0 [ 1225.555186][T24748] kernel_misc_reclaimable:0 [ 1225.555186][T24748] free:1303671 free_pcp:10453 free_cma:0 [ 1225.640156][T24748] Node 0 active_anon:63204kB inactive_anon:26908kB active_file:77088kB inactive_file:159920kB unevictable:1536kB isolated(anon):100kB isolated(file):0kB mapped:111120kB dirty:4076kB writeback:0kB shmem:16696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12632kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1225.675350][T24748] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1225.705891][T24748] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1225.734798][T24748] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1225.806701][T24748] Node 0 DMA32 free:1296944kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60052kB inactive_anon:28760kB active_file:75852kB inactive_file:159848kB unevictable:1536kB writepending:4076kB present:3129332kB managed:2539528kB mlocked:0kB bounce:0kB free_pcp:34852kB local_pcp:11528kB free_cma:0kB [ 1225.905955][T24748] lowmem_reserve[]: 0 0 1 1 1 [ 1225.922396][T24748] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:4kB active_file:1236kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1225.993506][T24748] lowmem_reserve[]: 0 0 0 0 0 [ 1226.056525][T24748] Node 1 Normal free:3892152kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:128kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9244kB local_pcp:8220kB free_cma:0kB [ 1226.123236][T24748] lowmem_reserve[]: 0 0 0 0 0 [ 1226.186844][T24748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1226.237894][T24748] Node 0 DMA32: 1635*4kB (UME) 537*8kB (UME) 890*16kB (UME) 930*32kB (UME) 374*64kB (UME) 521*128kB (ME) 355*256kB (UME) 270*512kB (UME) 122*1024kB (UME) 2*2048kB (UE) 195*4096kB (UM) = 1302324kB [ 1226.308123][T24748] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1226.371455][T24748] Node 1 Normal: 253*4kB (UM) 66*8kB (UME) 25*16kB (UME) 203*32kB (UME) 129*64kB (UME) 41*128kB (UME) 21*256kB (UME) 9*512kB (UME) 0*1024kB 3*2048kB (UME) 941*4096kB (UM) = 3892404kB [ 1226.550725][T24748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.583470][T24748] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1226.631634][T24748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1226.642343][T24748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1226.670949][T24748] 66610 total pagecache pages [ 1226.715092][T24748] 1 pages in swap cache [ 1226.731903][T24748] Free swap = 123468kB [ 1226.786151][T24748] Total swap = 124996kB [ 1226.812660][T24748] 2097051 pages RAM [ 1226.820290][T24748] 0 pages HighMem/MovableOnly [ 1226.830191][T24748] 430207 pages reserved [ 1226.834388][T24748] 0 pages cma reserved [ 1228.391023][T24793] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1228.907641][T24811] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1229.980270][T24831] netlink: 5276 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1230.008057][T24831] netlink: 1297 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1232.683413][T24895] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1232.889646][T24900] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1232.921972][T24900] FAULT_INJECTION: forcing a failure. [ 1232.921972][T24900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.986617][T24900] CPU: 0 UID: 0 PID: 24900 Comm: syz.4.3485 Tainted: G U syzkaller #0 PREEMPT(full) [ 1232.986725][T24900] Tainted: [U]=USER [ 1232.986737][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1232.986756][T24900] Call Trace: [ 1232.986768][T24900] [ 1232.986781][T24900] dump_stack_lvl+0x16c/0x1f0 [ 1232.986835][T24900] should_fail_ex+0x512/0x640 [ 1232.986891][T24900] _copy_to_user+0x32/0xd0 [ 1232.986928][T24900] simple_read_from_buffer+0xcb/0x170 [ 1232.986964][T24900] proc_fail_nth_read+0x197/0x240 [ 1232.987002][T24900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1232.987042][T24900] ? rw_verify_area+0xcf/0x6c0 [ 1232.987075][T24900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1232.987111][T24900] vfs_read+0x1e1/0xcf0 [ 1232.987154][T24900] ? __pfx___mutex_lock+0x10/0x10 [ 1232.987205][T24900] ? __pfx_vfs_read+0x10/0x10 [ 1232.987253][T24900] ? __fget_files+0x20e/0x3c0 [ 1232.987301][T24900] ksys_read+0x12a/0x250 [ 1232.987338][T24900] ? __pfx_ksys_read+0x10/0x10 [ 1232.987389][T24900] do_syscall_64+0xcd/0x4c0 [ 1232.987443][T24900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.987476][T24900] RIP: 0033:0x7fd07558d8dc [ 1232.987501][T24900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1232.987532][T24900] RSP: 002b:00007fd0764c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1232.987562][T24900] RAX: ffffffffffffffda RBX: 00007fd0757e5fa0 RCX: 00007fd07558d8dc [ 1232.987584][T24900] RDX: 000000000000000f RSI: 00007fd0764c30a0 RDI: 0000000000000003 [ 1232.987603][T24900] RBP: 00007fd0764c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.987623][T24900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.987643][T24900] R13: 00007fd0757e6038 R14: 00007fd0757e5fa0 R15: 00007ffdabfa1ac8 [ 1232.987692][T24900] [ 1233.478801][T24911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3487'. [ 1234.904286][T24943] random: crng reseeded on system resumption [ 1235.123232][T24953] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1237.577708][T24988] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1237.613332][T24988] CIFS mount error: No usable UNC path provided in device string! [ 1237.613332][T24988] [ 1237.628932][T24988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1237.768009][T24993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1238.073253][T24996] [U]  [ 1238.076114][T24996] [U] [ 1238.078872][T24996] [U] [ 1238.081617][T24996] [U] [ 1238.146020][T24996] [U] [ 1238.148844][T24996] [U] [ 1238.151598][T24996] [U] [ 1238.154342][T24996] [U] [ 1238.159696][T24996] [U] [ 1238.162459][T24996] [U] [ 1238.165202][T24996] [U] [ 1238.167946][T24996] [U] [ 1238.171616][T24996] [U] [ 1238.174352][T24996] [U] [ 1238.177067][T24996] [U] [ 1238.179782][T24996] [U] [ 1238.187390][T24996] [U] [ 1238.190138][T24996] [U] [ 1238.192883][T24996] [U] [ 1238.195631][T24996] [U] [ 1238.236764][T24996] [U] [ 1238.239620][T24996] [U] [ 1238.242385][T24996] [U] [ 1238.245144][T24996] [U] [ 1238.270066][T24996] [U] [ 1238.272867][T24996] [U] [ 1238.275616][T24996] [U] [ 1238.278369][T24996] [U] [ 1238.307137][T24996] [U] [ 1238.309928][T24996] [U] [ 1238.312714][T24996] [U] [ 1238.315465][T24996] [U] [ 1238.327049][T24996] [U] [ 1238.329811][T24996] [U] [ 1238.332550][T24996] [U] [ 1238.335300][T24996] [U] [ 1238.356775][T24996] [U] [ 1238.359544][T24996] [U] [ 1238.362295][T24996] [U] [ 1238.365048][T24996] [U] [ 1238.393800][T24996] [U] [ 1238.396565][T24996] [U] [ 1238.399309][T24996] [U] [ 1238.402015][T24996] [U] [ 1238.487723][T24996] [U] [ 1238.490506][T24996] [U] [ 1238.493226][T24996] [U] [ 1238.495942][T24996] [U] [ 1238.501518][T24996] [U] [ 1238.504310][T24996] [U] [ 1238.507056][T24996] [U] [ 1238.509788][T24996] [U] [ 1238.513577][T24996] [U] [ 1238.516344][T24996] [U] [ 1238.519108][T24996] [U] [ 1238.521861][T24996] [U] [ 1238.529806][T24996] [U] [ 1238.532575][T24996] [U] [ 1238.535339][T24996] [U] [ 1238.538109][T24996] [U] [ 1238.650818][T24996] [U] [ 1239.012180][T25008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1239.082994][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1239.096512][T25008] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1239.712626][T25014] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1239.730675][ T9083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.040882][ T9083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.173740][ T9083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.384511][ T9083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.627541][T25029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.639938][T25029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1240.648812][T25029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1240.669843][T25029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1240.681813][T25029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1240.900164][ T9083] bridge_slave_1: left allmulticast mode [ 1240.905876][ T9083] bridge_slave_1: left promiscuous mode [ 1240.927533][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.969859][ T9083] bridge_slave_0: left allmulticast mode [ 1240.984736][ T9083] bridge_slave_0: left promiscuous mode [ 1241.011143][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.726710][T25029] Bluetooth: hci2: command tx timeout [ 1243.408257][T25072] vhci_hcd: invalid port number 23 [ 1243.413654][T25063] vhci_hcd: invalid port number 23 [ 1243.726892][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1243.841586][T25027] chnl_net:caif_netlink_parms(): no params data found [ 1244.090614][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.097129][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.213260][ T9083] hsr_slave_0: left promiscuous mode [ 1244.269307][ T9083] hsr_slave_1: left promiscuous mode [ 1244.290695][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.514810][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.750070][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.813425][T25029] Bluetooth: hci2: command tx timeout [ 1244.833460][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.054476][T25108] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1245.171607][ T9083] veth1_macvtap: left promiscuous mode [ 1245.188835][ T9083] veth0_macvtap: left promiscuous mode [ 1245.194438][ T9083] veth1_vlan: left promiscuous mode [ 1245.268025][ T9083] veth0_vlan: left promiscuous mode [ 1246.335088][T25123] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1246.605744][ T9083] team0 (unregistering): Port device team_slave_1 removed [ 1246.669953][ T9083] team0 (unregistering): Port device team_slave_0 removed [ 1246.888593][T25029] Bluetooth: hci2: command tx timeout [ 1247.620952][T25027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.656689][T25027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.677554][T25027] bridge_slave_0: entered allmulticast mode [ 1247.685356][T25027] bridge_slave_0: entered promiscuous mode [ 1247.750951][T25027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.797490][T25027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.817712][T25027] bridge_slave_1: entered allmulticast mode [ 1247.848553][T25027] bridge_slave_1: entered promiscuous mode [ 1248.064087][T25027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.204652][T25027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.391913][T25027] team0: Port device team_slave_0 added [ 1248.413633][T25027] team0: Port device team_slave_1 added [ 1248.713284][T25027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.737000][T25027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.816511][T25027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.964540][T25027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.972089][T25029] Bluetooth: hci2: command tx timeout [ 1248.987996][T25027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.021977][T25027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.265835][T25027] hsr_slave_0: entered promiscuous mode [ 1249.272618][T25027] hsr_slave_1: entered promiscuous mode [ 1249.282381][T25027] debugfs: 'hsr0' already exists in 'hsr' [ 1249.295996][T25027] Cannot create hsr debugfs directory [ 1251.440836][T25027] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1251.482423][T25143] ------------[ cut here ]------------ [ 1251.488219][T25143] WARNING: CPU: 1 PID: 25143 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 1251.499243][T25143] Modules linked in: [ 1251.503735][T25143] CPU: 1 UID: 0 PID: 25143 Comm: syz.5.3538 Tainted: G U syzkaller #0 PREEMPT(full) [ 1251.514759][T25143] Tainted: [U]=USER [ 1251.518615][T25143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1251.528769][T25143] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1251.535213][T25143] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 1251.554925][T25143] RSP: 0018:ffffc9000b3279c0 EFLAGS: 00010293 [ 1251.561094][T25143] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 1251.569144][T25143] RDX: ffff8880277a3c00 RSI: ffffffff81bfac8c RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1251.577223][T25143] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 1251.585224][T25143] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807ea4ae08 [ 1251.593424][T25143] R13: dffffc0000000000 R14: ffffc9000b327a58 R15: 0000000000000000 [ 1251.601837][T25143] FS: 0000000000000000(0000) GS:ffff8881247ba000(0000) knlGS:0000000000000000 [ 1251.610846][T25143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1251.617576][T25143] CR2: 00007f525ff135c0 CR3: 0000000021fee000 CR4: 00000000003526f0 [ 1251.625764][T25143] Call Trace: [ 1251.629103][T25143] [ 1251.632042][T25143] remove_vma+0x88/0x160 [ 1251.636298][T25143] exit_mmap+0x511/0xb90 [ 1251.640675][T25143] ? __pfx_exit_mmap+0x10/0x10 [ 1251.645495][T25143] ? __lock_acquire+0xb97/0x1ce0 [ 1251.650509][T25143] __mmput+0x12a/0x410 [ 1251.654599][T25143] mmput+0x62/0x70 [ 1251.658369][T25143] do_exit+0x7c7/0x2bf0 [ 1251.662552][T25143] ? proc_coredump_connector+0x2d1/0x4f0 [ 1251.668236][T25143] ? __pfx_do_exit+0x10/0x10 [ 1251.672859][T25143] do_group_exit+0xd3/0x2a0 [ 1251.677435][T25143] get_signal+0x2673/0x26d0 [ 1251.682000][T25143] ? force_sig_fault+0xc4/0x100 [ 1251.686939][T25143] ? __pfx_get_signal+0x10/0x10 [ 1251.691851][T25143] arch_do_signal_or_restart+0x8f/0x790 [ 1251.697482][T25143] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1251.703617][T25143] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1251.709999][T25143] irqentry_exit_to_user_mode+0x13e/0x290 [ 1251.715903][T25143] asm_exc_page_fault+0x26/0x30 [ 1251.720824][T25143] RIP: 0033:0x7f4496f8eed1 [ 1251.725271][T25143] Code: Unable to access opcode bytes at 0x7f4496f8eea7. [ 1251.732337][T25143] RSP: 002b:0000008000000004 EFLAGS: 00010217 [ 1251.738540][T25143] RAX: 0000000000000000 RBX: 00007f44971e5fa0 RCX: 00007f4496f8eec9 [ 1251.746572][T25143] RDX: 0000000000000000 RSI: 0000008000000004 RDI: 000000000000fffc [ 1251.754576][T25143] RBP: 00007f4497011f91 R08: 0000000000008744 R09: 0000000000000000 [ 1251.762582][T25143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.770613][T25143] R13: 00007f44971e6038 R14: 00007f44971e5fa0 R15: 00007ffe1fafdbb8 [ 1251.778652][T25143] [ 1251.781684][T25143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1251.788997][T25143] CPU: 1 UID: 0 PID: 25143 Comm: syz.5.3538 Tainted: G U syzkaller #0 PREEMPT(full) [ 1251.800049][T25143] Tainted: [U]=USER [ 1251.803849][T25143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1251.813898][T25143] Call Trace: [ 1251.817190][T25143] [ 1251.820123][T25143] dump_stack_lvl+0x3d/0x1f0 [ 1251.824732][T25143] vpanic+0x6e8/0x7a0 [ 1251.828737][T25143] ? __pfx_vpanic+0x10/0x10 [ 1251.833312][T25143] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1251.839159][T25143] panic+0xca/0xd0 [ 1251.842898][T25143] ? __pfx_panic+0x10/0x10 [ 1251.847346][T25143] ? check_panic_on_warn+0x1f/0xb0 [ 1251.852472][T25143] check_panic_on_warn+0xab/0xb0 [ 1251.857434][T25143] __warn+0xf6/0x3c0 [ 1251.861397][T25143] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1251.867242][T25143] report_bug+0x3c3/0x580 [ 1251.871601][T25143] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1251.877428][T25143] handle_bug+0x184/0x210 [ 1251.881771][T25143] exc_invalid_op+0x17/0x50 [ 1251.886307][T25143] asm_exc_invalid_op+0x1a/0x20 [ 1251.891171][T25143] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1251.897603][T25143] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 1251.917222][T25143] RSP: 0018:ffffc9000b3279c0 EFLAGS: 00010293 [ 1251.923291][T25143] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 1251.931268][T25143] RDX: ffff8880277a3c00 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 1251.939263][T25143] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 1251.947268][T25143] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807ea4ae08 [ 1251.955258][T25143] R13: dffffc0000000000 R14: ffffc9000b327a58 R15: 0000000000000000 [ 1251.963249][T25143] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 1251.969513][T25143] ? tracing_buffers_mmap_close+0xc9/0x130 [ 1251.975348][T25143] ? tracing_buffers_mmap_close+0xdc/0x130 [ 1251.981197][T25143] remove_vma+0x88/0x160 [ 1251.985463][T25143] exit_mmap+0x511/0xb90 [ 1251.989749][T25143] ? __pfx_exit_mmap+0x10/0x10 [ 1251.994549][T25143] ? __lock_acquire+0xb97/0x1ce0 [ 1251.999540][T25143] __mmput+0x12a/0x410 [ 1252.003627][T25143] mmput+0x62/0x70 [ 1252.007366][T25143] do_exit+0x7c7/0x2bf0 [ 1252.011565][T25143] ? proc_coredump_connector+0x2d1/0x4f0 [ 1252.017220][T25143] ? __pfx_do_exit+0x10/0x10 [ 1252.021844][T25143] do_group_exit+0xd3/0x2a0 [ 1252.026382][T25143] get_signal+0x2673/0x26d0 [ 1252.030920][T25143] ? force_sig_fault+0xc4/0x100 [ 1252.035793][T25143] ? __pfx_get_signal+0x10/0x10 [ 1252.040686][T25143] arch_do_signal_or_restart+0x8f/0x790 [ 1252.046259][T25143] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1252.052362][T25143] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1252.058556][T25143] irqentry_exit_to_user_mode+0x13e/0x290 [ 1252.064312][T25143] asm_exc_page_fault+0x26/0x30 [ 1252.069184][T25143] RIP: 0033:0x7f4496f8eed1 [ 1252.073626][T25143] Code: Unable to access opcode bytes at 0x7f4496f8eea7. [ 1252.080648][T25143] RSP: 002b:0000008000000004 EFLAGS: 00010217 [ 1252.086729][T25143] RAX: 0000000000000000 RBX: 00007f44971e5fa0 RCX: 00007f4496f8eec9 [ 1252.094716][T25143] RDX: 0000000000000000 RSI: 0000008000000004 RDI: 000000000000fffc [ 1252.102693][T25143] RBP: 00007f4497011f91 R08: 0000000000008744 R09: 0000000000000000 [ 1252.110670][T25143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.118649][T25143] R13: 00007f44971e6038 R14: 00007f44971e5fa0 R15: 00007ffe1fafdbb8 [ 1252.126733][T25143] [ 1252.130072][T25143] Kernel Offset: disabled [ 1252.134405][T25143] Rebooting in 86400 seconds..