last executing test programs: 14m2.625364451s ago: executing program 2 (id=1862): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) lseek$auto(0x3, 0x8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) read$auto(r2, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) 13m59.606032914s ago: executing program 2 (id=1866): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x3, 0x6, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r4, 0x0, 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf2503000000040007800c000200050000000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) r10 = getpgid(0x0) kcmp$auto(r10, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x437d3aa500b0a75a}, 0xc, &(0x7f0000000080)={&(0x7f0000002640)=ANY=[@ANYBLOB="c0070000", @ANYRES16=r5, @ANYRESOCT=r6, @ANYRES32=r9, @ANYBLOB="0000b305f08008007000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0400638023898bcc092b59b07eb2e679784687ff62468df2c173cff8451e90a9c88039af4f8f7bb0f8e86fb708b2a6646f36d8127c2f11ea1193950ee0329109eac609631277430a1109fb6cf6390e1b729b74fa9a980d7897a1896a23cd1d5b8930d72981b5e5aa6e92d273e176ef4f513eb0ca472884061cec519cc5bf161a074bb03c0bd44ba0ffcf0dd6718e869a9c316d6ad11aa0ba8525684a82f940350400538008009900", @ANYRES32=r2, @ANYBLOB="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"], 0x7c0}, 0x1, 0x0, 0x0, 0x10008090}, 0x0) r11 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r12 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000200)=0x7ff) write$auto_tracing_free_buffer_fops_trace(r12, &(0x7f0000000240)="60a36a2d00839699d20fb7a0e311739bd8beb95878db30e46a2ecaacd4c833c624612bdbb692e7811a41f93da7ded584baacef654f3e0b49ee618e5f5ad272c5cd713633d6146bb6db16f6", 0x4b) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x28, 0xf, 0x66b, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) 13m58.213241248s ago: executing program 2 (id=1869): mmap$auto(0x0, 0x4, 0x1, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = eventfd$auto(0x7f) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) read$auto(r0, 0x0, 0xcc9c) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) 13m56.581185733s ago: executing program 2 (id=1872): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r0 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/auxv\x00', 0x22a82, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) readv$auto(r0, &(0x7f0000004a80)={&(0x7f0000004a40), 0x3}, 0x3) r2 = socket(0x2, 0x801, 0x106) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x2, 0x1, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) futex_requeue$auto(&(0x7f00000000c0)={0xfffffffffffffffa, 0x1, 0x7f}, 0x0, 0xfffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x34b}]}, 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c72f}, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r2) 13m55.586015211s ago: executing program 2 (id=1876): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250200000008000700", @ANYRES32, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0) lseek$auto(r0, 0xc5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) getsockopt$auto_SO_PEERNAME(r1, 0xc18, 0x1c, &(0x7f0000000080)='(^(*!-]#\x00', &(0x7f00000000c0)=0x3) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005600)='/proc/sys/dev/parport/default/timeslice\x00', 0x88281, 0x0) write$auto(r2, 0x0, 0x7fff) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DUMP_SEID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="19039f47e7e7fddbdf25d3cfa410a1beaefacde883277bb08bd20a70adcf9c6c30b98200659f99e8a7a998b49e01ac63ed4b4067e7c8a6c2c76bea2f6ec331"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) 13m54.188684209s ago: executing program 2 (id=1879): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x1}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x73}]}, 0x50}, 0x1, 0x0, 0x0, 0x44048020}, 0x4000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x7, 0x6, 0x3, 0x612, r2, 0x100000000000006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) bpf$auto(0x4, &(0x7f0000000180)=@query={@target_fd=r1, 0x9, 0x1, 0x6f7, 0x8, @count=0xf58000, 0x0, 0x7, 0x81, 0x0, 0xe}, 0x1) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop13\x00', 0x1cb002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) epoll_create$auto(0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r6, 0x0, 0x0) connect$auto(0x3, 0x0, 0x9) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) 13m38.562783826s ago: executing program 32 (id=1879): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x1}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x73}]}, 0x50}, 0x1, 0x0, 0x0, 0x44048020}, 0x4000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x7, 0x6, 0x3, 0x612, r2, 0x100000000000006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) bpf$auto(0x4, &(0x7f0000000180)=@query={@target_fd=r1, 0x9, 0x1, 0x6f7, 0x8, @count=0xf58000, 0x0, 0x7, 0x81, 0x0, 0xe}, 0x1) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop13\x00', 0x1cb002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) epoll_create$auto(0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r6, 0x0, 0x0) connect$auto(0x3, 0x0, 0x9) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) 6.697613018s ago: executing program 0 (id=4388): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b40, 0x1) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x1a, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x7b1800, 0x0) mount$auto(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) socket(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), r0) sendmsg$auto_NBD_CMD_STATUS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x2030, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_DEVICE_LIST={0x2004, 0x9, 0x0, 0x1, [@generic="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", @generic="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"]}]}, 0x2030}, 0x1, 0x0, 0x0, 0x8001}, 0x810) shutdown$auto(0x200000003, 0x2) 6.688666684s ago: executing program 4 (id=4389): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x2, 0x2) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x2, 0x2) (async) socket(0x11, 0x80003, 0x300) (async) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) 6.383125642s ago: executing program 4 (id=4391): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) (fail_nth: 1) 6.255614195s ago: executing program 1 (id=4392): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7e, 0x0, 0x3) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x7, 0x62, 0x4000000000008, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r5 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRES64=r4, @ANYRES32=r0], 0x51}, 0x1, 0x0, 0x0, 0x24010803}, 0x10004050) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x0, 0x13, 0x70bd2c, 0x27dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5cf8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) bpf$auto(0x20001fc, &(0x7f0000000380)=@link_create={@prog_fd=r2, @target_ifindex=r7, 0x793b, 0xd4, @netfilter={0x85d, 0x71, 0x3d6eef3e, 0x4}}, 0x3) madvise$auto(0x0, 0x4, 0x15) r8 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r8) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0x21eb, 0x7ff, 0x3, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x1) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 4.9104505s ago: executing program 1 (id=4395): r0 = socket(0x2b, 0x800, 0x10000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r2 = setfsuid$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfc(0x0, r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffc5d, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x2c, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0xc0302, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, r0, 0x0) getsockopt$auto_SO_GET_FILTER(r1, 0xa3, 0x1a, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000180)=0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) 4.810892291s ago: executing program 0 (id=4396): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x3, 0x6, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000a80)={0x7fffffff, [{[0x101, 0x10000, 0x4, 0x6aa, 0x1, 0x5, 0xa, 0x2]}, {[0x1ff, 0xfffffff0, 0xfffffffb, 0x7, 0x5, 0x4, 0x7, 0x4]}, {[0x1, 0x1, 0x9f8, 0x4, 0x2c, 0x3, 0xfaa0, 0x5c5]}], [{[0x401, 0xe3c0, 0x3, 0x896, 0x3, 0x3ff, 0xb, 0x9]}, {[0x5, 0x1ab05bb2, 0x7, 0x80, 0x4, 0xf089, 0x80000000, 0x4]}, {[0x7f, 0x3, 0x0, 0x7, 0x2, 0x3, 0xa7, 0x3]}, {[0x6, 0x5, 0x1, 0x80000001, 0x80, 0x4, 0x5, 0x80000001]}, {[0xab2e, 0xb, 0x93, 0x1, 0xd, 0x2, 0xff, 0x2]}], [{0x2, 0x5, 0x0, 0x0, 0x1}, {0xa, 0x0, 0x1, 0x1}, {0x1, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x2, 0xfffffffe, 0x1, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x1}, {0x7, 0xf847, 0x0, 0x1, 0x0, 0x1}, {0xe}, {0xffff0000, 0x7fffffff, 0x0, 0x0, 0x1}, {0x7, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x7, 0x1, 0x1}], [{0x100, 0xfffffffd, 0x0, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x1, 0x0, 0x1}, {0x4, 0x400, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x1}, {0xaa, 0x40, 0x0, 0x1}, {0xfffffff9, 0x71e, 0x0, 0x1, 0x0, 0x1}, {0xff, 0x6, 0x0, 0x0, 0x1}, {0x800, 0xa0, 0x0, 0x1, 0x1}, {0xe6be, 0xfffffff8}], 0xa, 0x762, 0x2, 0x5, 0x26ee, 0x5, 0x5, "741ec519b7de74bb316d18b6b094baff", "bf1bb08e6b9641a6904e14714ce4c03bdb902477a9fe806fefbef0d50a37042edb97dffed4cb59153f1cf0725626067a"}) r7 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r7, 0x29, 0x1, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) r10 = getpgid(0x0) kcmp$auto(r10, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x437d3aa500b0a75a}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0070020b57987db561ed72bf36947d7610edbc68e152bd001badd0553ac89f52a09d6dcc6f30104b1485073cc379f8d04a02ebee8f680002ac35b5ee3e9f7fc6b728f764729e5c368dc2c7f98c3c4ea1e8292a8dc2a9263ea69056cf86680abec52c7cfd56f49a0bdafcf35aca9d106319df3b9aff39b2cdef1ff62a63401bf78b7dd5a65b2f2fbed94f638a0b5e29e52b7a4ec07d6bb747fc81f31517918368cedce7439899afc7895830755799cadd26f2d252a5e415d774d8017e57fcb6570c652", @ANYRES32=r8, @ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="0000b305f08008007000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0400638023898bcc092b59b07eb2e679784687ff62468df2c173cff8451e9089c88039af4f8f7bb0f8e86fb708b2a6646f36d8127c2f11ea1193950ee0329109eac609631277430a1109fb6cf6390e1b729b74fa9a980d7897a1896a23cd1d5b8930d72981b5e5aa6e92d273e176ef4f513eb0ca472884061cec519cc5bf161a074bb03c0bd44ba0ffcf0dd6718e869a9c316d6ad11aa0ba8525684a82f940350400538008009900", @ANYRES32=r2, @ANYBLOB="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"], 0x7c0}, 0x1, 0x0, 0x0, 0x10008090}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0x8000000008011, 0x3, 0x0) r11 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000200)=0x7ff) write$auto_tracing_free_buffer_fops_trace(r11, &(0x7f0000000240)="60a36a2d00839699d20fb7a0e311739bd8beb95878db30e46a2ecaacd4c833c624612bdbb692e7811a41f93da7ded584baacef654f3e0b49ee618e5f5ad272c5cd713633d6146bb6db16f6", 0x4b) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x28, 0xf, 0x66b, 0x0, 0x5}, 0x4f4) 4.756214539s ago: executing program 3 (id=4397): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x1) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/usb16/busnum\x00', 0x141543, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x2, 0x9) ioctl$auto(r2, 0x400c4d06, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r3, 0x800064be, 0x1e6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) pkey_free$auto(0xfffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) epoll_create$auto(0x3e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, r4, 0x0) 4.599125111s ago: executing program 4 (id=4398): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/infiniband_mad/abi_version\x00', 0x20100, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0xc) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01"], 0x18}, 0x1, 0x9eff, 0x0, 0x60008004}, 0x80) 4.389594411s ago: executing program 1 (id=4399): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0x0, 0x3, 0x3c) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0x8000ab95, 0x495daf34, 0xffffffffffffffff, 0x5) keyctl$auto(0x200005, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) socket(0x11, 0x3, 0x9) pivot_root$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r2}, 0xa3) nanosleep$auto(0x0, 0x0) kexec_load$auto(0x9, 0x1, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000002, 0x2000060080000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 4.386450401s ago: executing program 4 (id=4400): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) acct$auto(&(0x7f0000000340)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/dT\x02\xa2%h\xdd\xfep\x0e\xe6\x96w\x05r\x9c\xb6L\t0\x0f\x954\xf6\b\xa0&C\x83L\xc0\xe9\t\"\xa5\x8f\xce\x03\xb6\x16\x90\xc3\x97\xb7\n\"zB\xedCf\xfd \x87\xdb\x8f\x87\xe9\xea\x89-B\x06\x97\xcb+\xf09\xa1\xa5\x8d\x9b\b\xc8\x15\xb6|\xc7 t\xc8#\xf8,\xab\x96\xf6\x03Z\x93\xf5\xc8\x87\xc9z}]\x85\xcc\xd5d\x02_\xd4>b\x96\xc5\x93\xb1\xa0E\xda\xb8\xb1\xa5G\r\xf4[\xec \"\xd9\x13\x803\xa6V\xe3\x06\xc72\xc0d|?\xfaA\xd2\xd6\xce\xfa\x9a\x98\x01\aXV.\xf15>;\xfaR\xcb\xc2v\x0f\xfc\xb3:f\x8f\xae\xcc\xbb\xd2\xfa\xef%\xfa\x85\xd9\x7fL\xad\xab\xd0\xd1\xc9v{Ze\x8a\xeb~\xf1V<\xc2p~\x90\xe6\x1c\xf86\xeb\x11\xe2\x90\rr\xda.\x82\xbd\x0f\xbd{\x861\x03\xda-#\\^`\xc8\x01%V\xab\r\b\xde\xaa\xf8s\x86K\bR\x12\xbc{\xef\xc5<\xfd\x02\xe2\xf0\br\xb4\n\xe4\xa6\v\xbcd\x1e\xe9\xbd\x18\x89\xa1\xe8w\x0e7\xae\x10e\xb6\xce\xe25\xdf\xd8\x12X`\xec\n\x87\x86X\x9b\x80i7\xcb\xed\xbdQ\xe4\xbb*\xedq\xb0>\x92\xb6W\b\x1eV\xadk\x11\xa9\xa1\x1f\xe1\xac\xb7\xd0\xcc\x94\xc1g\x8c\xe5\xf0\"\xe1\xc2. \\X\xe0\xd30\xa9X\x8d@\xb1\xddS\xbey\xb4]j \x96\xe3\x84\xcc\x02C\xd23\x16T\xden\"\xea\xf2j\b\xd2\xf6\xe5\xc2a\xaa\xefr\x80\rZ\x06s\xa0\xaf\x93MmM|\xfdN\x19\xf0RS\xc4\xca\x84H\x19T\xd4\xc4>\x8e\x050\x9c\x8f\xa9P\x8a\xd0\xd48\xb4\x0e0\xff\x98\xce\x01\'\x83i\xd9\x94\xcf\xd7\x03_|J\x9b\x06q\x0e\xdf_/u\xfa\xcd\xb9\"L\x17\xc3\xdc\x16\xc7\x02\xb7\x91\x85Ot\xd0r\xc2r\xee\xce\xefU\x1a\x89\xd6,\x04\x96o\xb9\x1b\x00\xec\xf17\xbbpu\xeeW\xd7HSXt\xe4\xf07+\xc8\xd3\x87|\x15\x9b\x95t\x195l\xcb\xfd\xae@\xbd>\xdcd\xaa\x19r\xec_>\xf2\x7f\xe6\xe7\x1c\x1dE\x87k(k\x98\x81\xe8\t\"\xed\x94\xe33\xfd*\xc1\xcc\x98\x1d\xdd\x9c\v\xc3\xef\x9b\xc3\xca\x14\xb54\x8aS\xa0`*\xc4\xe6|n\xc7\xbf1\x02yc\xc2\xf3\xb1\x0e\xb4\xc5\xf3\xe2\x10\xa9\xbdQ\xb6') connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, 0x54) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) bind$auto(0x3, 0x0, 0x6a) socket(0x1e, 0x1, 0x0) r2 = waitid$auto(0x204, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000140)={{0x8, 0x8001}, {0x2, 0x80000000}, 0x0, 0x3, 0xfffffffffffffe00, 0xc22, 0xfffffffffffff801, 0x8, 0x6, 0x2, 0x1, 0x3, 0x200, 0x8000000000000001, 0x800000000000003, 0x7}) r3 = prctl$auto_PR_SYS_DISPATCH_ON(0x80000002, 0x1, r2, 0x7, 0x4) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0xa2000, 0x0) dup2$auto(r3, r4) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000001c0), 0x7) read$auto_proc_mountinfo_operations_mnt_namespace(r3, 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x10303f, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.285105606s ago: executing program 0 (id=4401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x80, 0x0) read$auto(r0, 0x0, 0x200000fff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/SOCKET\x00', 0x20102, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000080)="97ca09bd689a850edbe36136c853df77fd9b3e", 0x13) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x80a02, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x5, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = fanotify_init$auto(0x200, 0x1) r5 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x180c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r7, 0x0, 0x48011) fanotify_mark$auto(0x0, 0x105, 0x8009, r5, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x72ff5d3bb42b923b, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7f}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4e4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x1) 2.530901872s ago: executing program 4 (id=4402): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r0 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x4ac0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0xf4000000, 0x2, 0x2, 0x0, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000280)={{0xfffffff3, 0xee01, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x7}, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x5, 0x1, 0x7, 0x9, 0x8000000000000001, 0x94be, 0x2, 0x8, 0x8001, @raw=0x7}) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x42c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PEER={0x2cc, 0x28, 0x0, 0x1, [@generic, @generic="06b3e7b5b80c", @typed={0x8, 0x94, 0x0, 0x0, @u32=0x5}, @generic="fe601577497044070478ddd331f79a7ca0e77d4a873c30afd99e5d05b4dea955c7f10a8b30289e1737bf05f64b3f2d99d1ece131f0ed5dc81def7cc0fc581d5766fd", @generic, @typed={0x4, 0xf4}, @nested={0x41, 0xe9, 0x0, 0x1, [@nested={0x4, 0x142}, @generic="654875ce4b0b520fe1a03d5a4591d3c018cdfd5811e683ba20621c3b5776d6c57c6fe12822815ede545497fad934e958e9620b5cd74623f384"]}, @nested={0x1c4, 0x71, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x78}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x13f}, @nested={0x4, 0x138}, @generic="b8b5ffc101a7e2f25680e7e2091fc46b931f1fd11ed71d828aa56b5c1c5c0a650c7dcb0ff0b24040f5f799f8479cbb111b417934cf23ef3a08ecfd629474028c3567f363cab44f26bb8859222c5153c321524be548981748c7c57b51b082f7c11737210820024df8666bca459497a7ecf968a31691afa8385e180c53dbc7c090d6160d34db2bd5d265fb84198ed683b9063d6e7c67d9fe3e49bc8b427d74385bae8846dddd2dc159d0c18dc0233a34373b60", @generic="06635d2b176492e06f53ea2d2aad3dc068f17a2b52d851c5baa38b1ea0c90931b12bffe60124ce6c1c51be8d83aedb79f9555be2f95248a1dc1b0c00c10c6ac808f737b361133f1bad5a6ad6b17af462f6a51c0c80ca7fa4578b352f033d3cf1b080814f5b34c68b5fe6b5761f50486f350edd8880f0aa89b52df6473d6db86db8cf2fbcb6f4f2169e03b97321b47a0f1de847c1ce945648eada061e77a0b7373091b8301c7f6aa98b864f082c660e7782fd60be951186a4bf6497ff717cb2dce01a1bf6be7cb0c84eb80a0934c01aec572c1819873b8db1ba1b1427d0ef411e331538dec1d3ca3d825b", @typed={0x8, 0x9f, 0x0, 0x0, @u32=0xa}]}, @generic="ec20b814b4488dbf105274c083cc1e6f46c65d4348e2b5f586a645b2142d2da75dc79d6756389dfac72a054a9da7c98fdf765f90edab03249ddafeb51ab4a8ffc6a3fb4e7a5b6e9030ca308e8cbdef1d44e24c18b3c89479c12c733f7dab2e5db1705540e6f7d4b664b157a6"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xee}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x74}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xfff1}, @NL802154_ATTR_SEC_DEVICE={0x129, 0x2e, 0x0, 0x1, [@generic="a41bb24c94e04ad86f41979d93bb1e38a15f1922e73818fe898a6df61a6f28fe84e59504880529f22de3ae257015ca816d641c2010128fb7c34d8460d34b83", @generic="db92340417e9cf01b447517c1b34baf56d5ad1c037e4001b90457d4f54d9746bffbca353e88c504bbe29d6cc36f322f1ad64528b835a48e035ac09bb18d7", @typed={0xa7, 0x55, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x1804) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) write$auto_full_fops_mem(r0, &(0x7f0000000080)="a22c0005", 0x4) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r6, 0x40189206, 0x0) pread64$auto(r5, 0x0, 0x40002000005, 0x1000000008) 1.802738055s ago: executing program 0 (id=4403): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x81, 0x2, 0x2007, 0xeb1, r0, 0x408000) mmap$auto(0x0, 0x802020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000, 0x0) ioctl$auto_TUNGETVNETBE(r1, 0x800454df, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) close_range$auto(0x2, r2, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/card0/list\x00', 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x10) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) r5 = socket(0xa, 0x801, 0x84) sendto$auto(r5, 0x0, 0x2000f, 0x20009, 0x0, 0x1c) shmctl$auto_IPC_INFO(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) fcntl$auto_F_OFD_SETLKW(r2, 0x26, 0x9) setsockopt$auto_SO_DOMAIN(r1, 0x8, 0x27, &(0x7f0000000000)=',!&}\'\x00', 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0x1d, 0x3, 0x4) setsockopt$auto(r7, 0x65, 0x8, 0x0, 0x4) 1.799299391s ago: executing program 1 (id=4404): mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x0, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) pidfd_send_signal$auto_SIGCONT(0xffffffffffffffff, 0x12, 0x0, 0x7) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_SETLK(r1, 0x6, 0xd84) socket(0x2, 0x80002, 0x73) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r2 = socket(0x11, 0x3, 0x9) mq_notify$auto(0x1, 0xffffffffffffffff) write$auto_media_devnode_fops_mc_devnode(0xffffffffffffffff, &(0x7f0000000480)="9dfe", 0x2) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb2ca218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x1fc) close_range$auto(0x2, 0x8, 0x0) 1.778839539s ago: executing program 3 (id=4405): mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) 1.60611665s ago: executing program 1 (id=4406): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='1\x00', 0x2) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)) getdents$auto(r5, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(r0, r0, &(0x7f0000000040)=0x8, 0x0) 1.57649808s ago: executing program 3 (id=4407): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x10001) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) 916.973384ms ago: executing program 0 (id=4408): r0 = socket(0x2b, 0x800, 0x10000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r2 = setfsuid$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfc(0x0, r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffc5d, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x2c, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0xc0302, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, r0, 0x0) getsockopt$auto_SO_GET_FILTER(r1, 0xa3, 0x1a, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000180)=0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) 853.952362ms ago: executing program 4 (id=4409): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40802, 0x0) ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x10000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x9, 0x1, @relative_fd=0x2, 0x80}, 0x94) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x4ac0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0xf4000000, 0x2, 0x2, 0x0, 0x7, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose1/statistics/rx_missed_errors\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/44, 0x2c) prctl$auto(0x8000, 0x1, 0x0, 0x3, 0xfffffffffffffffd) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88400, 0x0) unshare$auto(0x20000080) io_uring_setup$auto(0x58, &(0x7f0000000080)={0x7fffffff, 0x2000d, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x23d8, 0x6, 0xf, 0x4000029f, 0x100, 0x7f, 0x80000, 0x6, 0x2}, {0x203, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x7, 0x100000000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x8000) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) writev$auto(r4, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 750.428751ms ago: executing program 1 (id=4410): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x3) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x3d4c}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) inotify_add_watch$auto(r1, &(0x7f0000000080)='./file0\x00', 0x8) 511.115508ms ago: executing program 3 (id=4411): socket(0x2b, 0x1, 0x7) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3914) getsockopt$auto(r0, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0xa00, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) epoll_create$auto(0x3e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) statmount$auto(0x0, 0x0, 0x9, 0xd) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4604, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setfsuid$auto(0xee00) 182.047409ms ago: executing program 3 (id=4412): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000f0", @ANYRES16=r0, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="05003d00f0"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) 5.33658ms ago: executing program 0 (id=4413): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0x0, 0x3, 0x3c) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0x8000ab95, 0x495daf34, 0xffffffffffffffff, 0x5) keyctl$auto(0x200005, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) socket(0x11, 0x3, 0x9) pivot_root$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r2}, 0xa3) nanosleep$auto(0x0, 0x0) kexec_load$auto(0x9, 0x1, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000002, 0x2000060080000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 0s ago: executing program 3 (id=4414): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x3, 0x6, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r4, 0x0, 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (fail_nth: 2) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) r10 = getpgid(0x0) kcmp$auto(r10, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x437d3aa500b0a75a}, 0xc, &(0x7f0000000080)={&(0x7f0000002640)=ANY=[@ANYBLOB="c0070000", @ANYRES16=r5, @ANYRESOCT=r6, @ANYRES32=r9, @ANYBLOB="0000b305f08008007000", @ANYRES32=r1, @ANYBLOB="3e011e80207a18e94bec4d250a12190242017ccfe1ce6181896acf54bac2f15e7974f97c30491fe0e60d8a48f24feb70dd221db028270fe9532d73ca0e40dfa2f835a0f37edee4b13a0e20c8f386173cb0bf3ffa4ab21bae525e4e5fb6ede29c0400ab80766c2c73bdfef31e5bc8e3cb6259d574ae0eb5e2fd4a1ccd45ccb74d87bdfbe55905c132ce79e43ca689279f0dfd068388f31e4d60c42e0db6e10c98d9a12508fc73586c6a8d3c1949a2e9a8ec270c3aec63c752e14ca5fc05c89068a43908666cdf802fc21f318472819e803c289153f0922b274e2870f4550d400030fb19620468ab8bb77c050060dcca2334e72b564030433b97802a15dbdb2a33fcab2da9fbbac99da49e740602f0bba2d81fdf38e6a5888babd29b7e706da947159df44bde9e0b4080f668b2667f40203ec038c19694a39bd4fbf2b90794000014004b00fe8800000000000000000000000000017f1cb62bcf467e67d638ede19965475d7ca748380275a86ed592c790dbabfc897a14b8998a47f0512b7feb7f82dc6e882da0b7c8ac9e44dda304d92142914fdca5005992a8a563826caa8108001a00ac14141ed472aa641329cc4d0af76ea9ae410a35db1d045fea0bbcf0208ec27c6d0cc5aecdfe23a75591d7862cfe3606c85305c8a919bfea54913d354d15ba8129d9c894a2ef8460c3e1e928b15e7d91bdd2f4b160e4e0eb117de70603b8fe33fdced875b589130f53b64d515c63a2a18c194d62d7e3fe73c330befdfbfee25be6f4076f6ace4063800dc3857945af3e3ef788f1b81579fe00a1d2d61979577cd9d905f5d2a986e27cf2670989e4b16dcd0886867f8a0970c550ade65ecaaf673e63b4d380f4c494dfb2b4e54003d30b72cd422c639987d0f424b58b7301ba523967aed791a0245b1953c4181c8c436b8af75ea8f25e92451e96a33ded847e3bb9445f60f0b503a41ee159314d289402735236cc80d8c238822f08428a77f40dc28362da004443107d23ee08a6b81395ec4ddbfc292ade85f6d38cc264147f34116182bae4f2a1b7a3f69a727bb13c8e16919baf44b17b92ab238dc29a8519041de8527e5c6735c6d730b7705076f5f2b1a46343487978aa8b1295e1278e6308df18d5c8986a89b27ae85b47d0d2929fb66bbac03db0005443b08e218a6872f3341e621033c89e46714a207c47387bb224d50b8f2c6b089e3aa408551e16151e247bcb69a77c05d1a44e10312ea75fa1750c428b59377a87b0d7fa0b17021e80f0486be2144d4b5a1ad5c0a70dc8fb28d8c28841222eee71c6697d0b783da334e2fbe3027d61d59823d836e57235dc49b10f172cebc1137129eeb76eaf8b1ff80021ae794b0f784421e71556453099f695b89646e083a18cad4a307763b7466470c9d4984c5d471ce4bfa1c9fcc0dc312bf95024e7f22abb68fd4fa9e93c596498f875a21d6408f30e6e7cf6f742453c7c1e1d75189907363ac97477afb154669aaad0a822f234aa12fde6804334a4c124db72c117ff7a4da3e8ee0f7ee6008283d2ea4d52de469b4a1637809d796f18f8f1fdc18fc17708009300", @ANYRES32=r10, @ANYBLOB="0400638023898bcc092b59b07eb2e679784687ff62468df2c173cff8451e90a9c88039af4f8f7bb0f8e86fb708b2a6646f36d8127c2f11ea1193950ee0329109eac609631277430a1109fb6cf6390e1b729b74fa9a980d7897a1896a23cd1d5b8930d72981b5e5aa6e92d273e176ef4f513eb0ca472884061cec519cc5bf161a074bb03c0bd44ba0ffcf0dd6718e869a9c316d6ad11aa0ba8525684a82f940350400538008009900", @ANYRES32=r2, @ANYBLOB="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"], 0x7c0}, 0x1, 0x0, 0x0, 0x10008090}, 0x0) r11 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r12 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000200)=0x7ff) write$auto_tracing_free_buffer_fops_trace(r12, &(0x7f0000000240)="60a36a2d00839699d20fb7a0e311739bd8beb95878db30e46a2ecaacd4c833c624612bdbb692e7811a41f93da7ded584baacef654f3e0b49ee618e5f5ad272c5cd713633d6146bb6db16f6", 0x4b) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x28, 0xf, 0x66b, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) kernel console output (not intermixed with test programs): [T21877] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1275.101861][T21877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1275.101874][T21877] Call Trace: [ 1275.101881][T21877] [ 1275.101889][T21877] dump_stack_lvl+0x16c/0x1f0 [ 1275.101926][T21877] should_fail_ex+0x512/0x640 [ 1275.101962][T21877] should_fail_alloc_page+0xe7/0x130 [ 1275.101992][T21877] prepare_alloc_pages+0x3c2/0x610 [ 1275.102028][T21877] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1275.102057][T21877] ? stack_trace_save+0x8e/0xc0 [ 1275.102081][T21877] ? __pfx_stack_trace_save+0x10/0x10 [ 1275.102104][T21877] ? stack_depot_save_flags+0x29/0x9c0 [ 1275.102141][T21877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1275.102169][T21877] ? kernel_clone+0xfc/0x930 [ 1275.102195][T21877] ? __do_sys_clone+0xce/0x120 [ 1275.102220][T21877] ? do_syscall_64+0xcd/0x4c0 [ 1275.102241][T21877] ? __lock_acquire+0x62e/0x1ce0 [ 1275.102290][T21877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1275.102325][T21877] ? policy_nodemask+0xea/0x4e0 [ 1275.102356][T21877] alloc_pages_mpol+0x1fb/0x550 [ 1275.102386][T21877] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1275.102423][T21877] alloc_pages_noprof+0x131/0x390 [ 1275.102453][T21877] pgd_alloc+0x4b/0x650 [ 1275.102480][T21877] mm_init+0x714/0x13a0 [ 1275.102502][T21877] ? copy_process+0x400f/0x7690 [ 1275.102534][T21877] copy_process+0x4063/0x7690 [ 1275.102573][T21877] ? __pfx_copy_process+0x10/0x10 [ 1275.102609][T21877] ? __pfx_garp_join_timer+0x10/0x10 [ 1275.102646][T21877] kernel_clone+0xfc/0x930 [ 1275.102687][T21877] ? __pfx_kernel_clone+0x10/0x10 [ 1275.102718][T21877] ? kvm_sched_clock_read+0x11/0x20 [ 1275.102745][T21877] ? sched_clock+0x38/0x60 [ 1275.102772][T21877] ? sched_clock_cpu+0x6c/0x530 [ 1275.102795][T21877] ? tmigr_handle_remote+0x132/0x380 [ 1275.102816][T21877] __do_sys_clone+0xce/0x120 [ 1275.102842][T21877] ? __pfx___do_sys_clone+0x10/0x10 [ 1275.102881][T21877] ? __pfx_handle_softirqs+0x10/0x10 [ 1275.102927][T21877] do_syscall_64+0xcd/0x4c0 [ 1275.102948][T21877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.102970][T21877] RIP: 0033:0x7f6a0bb8eec9 [ 1275.102987][T21877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1275.103008][T21877] RSP: 002b:00007f6a0c979fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1275.103028][T21877] RAX: ffffffffffffffda RBX: 00007f6a0bde5fa0 RCX: 00007f6a0bb8eec9 [ 1275.103043][T21877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020300000 [ 1275.103056][T21877] RBP: 00007f6a0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1275.103069][T21877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1275.103083][T21877] R13: 00007f6a0bde6038 R14: 00007f6a0bde5fa0 R15: 00007fffb5841668 [ 1275.103110][T21877] [ 1276.949438][T21904] netlink: 314 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1277.386410][T21916] block nbd7: not configured, cannot reconfigure [ 1277.573048][T21912] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1280.073183][T21925] kexec: Could not allocate control_code_buffer [ 1280.349547][T21948] nfs4: Unknown parameter 'nfsd' [ 1281.416020][T21970] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 1281.492153][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1282.443937][T21978] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1283.112884][T21984] random: crng reseeded on system resumption [ 1283.712378][T21990] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(24.33554468.7388459), cmd(10) [ 1284.286143][T21988] kexec: Could not allocate control_code_buffer [ 1284.508547][T22004] nfs4: Unknown parameter 'nfsd' [ 1284.622548][T22008] nfs4: Unknown parameter 'nfsd' [ 1285.397115][T22015] futex_wake_op: syz.3.3557 tries to shift op by -9; fix this program [ 1286.074872][T22020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 1286.128018][T22021] FAULT_INJECTION: forcing a failure. [ 1286.128018][T22021] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.156178][T22021] CPU: 1 UID: 0 PID: 22021 Comm: syz.0.3559 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1286.156224][T22021] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1286.156252][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1286.156273][T22021] Call Trace: [ 1286.156284][T22021] [ 1286.156295][T22021] dump_stack_lvl+0x16c/0x1f0 [ 1286.156357][T22021] should_fail_ex+0x512/0x640 [ 1286.156401][T22021] ? __kvmalloc_node_noprof+0x124/0x620 [ 1286.156438][T22021] should_failslab+0xc2/0x120 [ 1286.156478][T22021] __kvmalloc_node_noprof+0x137/0x620 [ 1286.156513][T22021] ? seq_read_iter+0x826/0x12c0 [ 1286.156548][T22021] ? seq_read_iter+0x826/0x12c0 [ 1286.156574][T22021] seq_read_iter+0x826/0x12c0 [ 1286.156621][T22021] seq_read+0x3a3/0x570 [ 1286.156659][T22021] ? __pfx_seq_read+0x10/0x10 [ 1286.156695][T22021] ? import_ubuf+0x1b6/0x220 [ 1286.156735][T22021] ? __pfx_seq_read+0x10/0x10 [ 1286.156761][T22021] proc_reg_read+0x240/0x330 [ 1286.156829][T22021] ? __pfx_proc_reg_read+0x10/0x10 [ 1286.156869][T22021] vfs_readv+0x5be/0x8b0 [ 1286.156909][T22021] ? __pfx_vfs_readv+0x10/0x10 [ 1286.156938][T22021] ? __mutex_lock+0x1c5/0x1060 [ 1286.156985][T22021] ? __pfx___mutex_lock+0x10/0x10 [ 1286.157041][T22021] ? __fget_files+0x20e/0x3c0 [ 1286.157071][T22021] ? __fget_files+0x1d0/0x3c0 [ 1286.157113][T22021] ? do_readv+0x132/0x340 [ 1286.157142][T22021] do_readv+0x132/0x340 [ 1286.157174][T22021] ? __pfx_do_readv+0x10/0x10 [ 1286.157217][T22021] do_syscall_64+0xcd/0x4c0 [ 1286.157247][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.157277][T22021] RIP: 0033:0x7f0cddd8eec9 [ 1286.157305][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.157340][T22021] RSP: 002b:00007f0cdbfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1286.157368][T22021] RAX: ffffffffffffffda RBX: 00007f0cddfe6090 RCX: 00007f0cddd8eec9 [ 1286.157388][T22021] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1286.157407][T22021] RBP: 00007f0cdbfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.157425][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.157442][T22021] R13: 00007f0cddfe6128 R14: 00007f0cddfe6090 R15: 00007ffc5fb2fd68 [ 1286.157482][T22021] [ 1286.757347][T22023] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1287.238995][T22034] random: crng reseeded on system resumption [ 1288.238834][T22041] kexec: Could not allocate control_code_buffer [ 1288.375516][T22047] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1289.898318][T22065] vidtv vidtv.0: No streaming. Skipping. [ 1290.773031][T22082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1290.865518][T22087] random: crng reseeded on system resumption [ 1291.518681][T22103] FAULT_INJECTION: forcing a failure. [ 1291.518681][T22103] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1291.532301][T22103] CPU: 0 UID: 0 PID: 22103 Comm: syz.1.3578 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1291.532353][T22103] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1291.532383][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1291.532400][T22103] Call Trace: [ 1291.532409][T22103] [ 1291.532421][T22103] dump_stack_lvl+0x16c/0x1f0 [ 1291.532473][T22103] should_fail_ex+0x512/0x640 [ 1291.532522][T22103] get_futex_key+0x1d0/0x1560 [ 1291.532580][T22103] ? __pfx_get_futex_key+0x10/0x10 [ 1291.532614][T22103] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1291.532662][T22103] ? lockdep_hardirqs_on+0x7c/0x110 [ 1291.532709][T22103] ? __destroy_inode+0x2e4/0x730 [ 1291.532750][T22103] ? __pfx_sock_free_inode+0x10/0x10 [ 1291.532788][T22103] futex_wake+0xea/0x530 [ 1291.532833][T22103] ? __pfx_evict+0x10/0x10 [ 1291.532874][T22103] ? __pfx_futex_wake+0x10/0x10 [ 1291.532923][T22103] ? iput+0x519/0x880 [ 1291.532972][T22103] do_futex+0x1e3/0x350 [ 1291.533012][T22103] ? __pfx_do_futex+0x10/0x10 [ 1291.533049][T22103] ? __sock_release+0x20b/0x270 [ 1291.533084][T22103] __x64_sys_futex+0x1e0/0x4c0 [ 1291.533126][T22103] ? __sys_socket+0xac/0x260 [ 1291.533172][T22103] ? __pfx___x64_sys_futex+0x10/0x10 [ 1291.533209][T22103] ? xfd_validate_state+0x61/0x180 [ 1291.533264][T22103] do_syscall_64+0xcd/0x4c0 [ 1291.533293][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.533323][T22103] RIP: 0033:0x7f0dd698eec9 [ 1291.533346][T22103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.533402][T22103] RSP: 002b:00007f0dd4bd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1291.533430][T22103] RAX: ffffffffffffffda RBX: 00007f0dd6be6098 RCX: 00007f0dd698eec9 [ 1291.533449][T22103] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0dd6be609c [ 1291.533468][T22103] RBP: 00007f0dd6be6090 R08: 00007f0dd771f000 R09: 0000000000000000 [ 1291.533488][T22103] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1291.533507][T22103] R13: 00007f0dd6be6128 R14: 00007ffec4a83e40 R15: 00007ffec4a83f28 [ 1291.533547][T22103] [ 1292.061924][T22117] nfs4: Unknown parameter 'nfsd' [ 1292.880100][T22129] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3585'. [ 1293.306225][T22142] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1293.555700][T22141] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1293.993971][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1294.043624][T22150] random: crng reseeded on system resumption [ 1295.474064][ T30] audit: type=1800 audit(4294967472.386:109): pid=22181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3593" name="features" dev="configfs" ino=210011 res=0 errno=0 [ 1296.211553][T22193] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1296.232012][T22193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1296.239363][T22193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1296.338322][T22193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1296.790313][T22206] FAULT_INJECTION: forcing a failure. [ 1296.790313][T22206] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.833524][T22206] CPU: 1 UID: 0 PID: 22206 Comm: syz.3.3598 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1296.833562][T22206] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1296.833570][T22206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.833599][T22206] Call Trace: [ 1296.833607][T22206] [ 1296.833615][T22206] dump_stack_lvl+0x16c/0x1f0 [ 1296.833653][T22206] should_fail_ex+0x512/0x640 [ 1296.833686][T22206] ? __kvmalloc_node_noprof+0x124/0x620 [ 1296.833713][T22206] should_failslab+0xc2/0x120 [ 1296.833741][T22206] __kvmalloc_node_noprof+0x137/0x620 [ 1296.833765][T22206] ? __pfx___mutex_lock+0x10/0x10 [ 1296.833783][T22206] ? traverse.part.0.constprop.0+0x392/0x640 [ 1296.833810][T22206] ? traverse.part.0.constprop.0+0x392/0x640 [ 1296.833830][T22206] traverse.part.0.constprop.0+0x392/0x640 [ 1296.833860][T22206] seq_read_iter+0x932/0x12c0 [ 1296.833891][T22206] seq_read+0x3a3/0x570 [ 1296.833917][T22206] ? __pfx_seq_read+0x10/0x10 [ 1296.833942][T22206] ? get_pid_task+0xfc/0x250 [ 1296.833988][T22206] ? __pfx_seq_read+0x10/0x10 [ 1296.834008][T22206] proc_reg_read+0x240/0x330 [ 1296.834037][T22206] ? __pfx_proc_reg_read+0x10/0x10 [ 1296.834067][T22206] vfs_read+0x1e1/0xcf0 [ 1296.834097][T22206] ? __pfx_vfs_read+0x10/0x10 [ 1296.834119][T22206] ? find_held_lock+0x2b/0x80 [ 1296.834140][T22206] ? __fget_files+0x204/0x3c0 [ 1296.834170][T22206] ? __fget_files+0x20e/0x3c0 [ 1296.834191][T22206] ? __fget_files+0x1d0/0x3c0 [ 1296.834221][T22206] __x64_sys_pread64+0x1eb/0x250 [ 1296.834248][T22206] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1296.834282][T22206] do_syscall_64+0xcd/0x4c0 [ 1296.834303][T22206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.834325][T22206] RIP: 0033:0x7f150478eec9 [ 1296.834342][T22206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.834363][T22206] RSP: 002b:00007f15056c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1296.834382][T22206] RAX: ffffffffffffffda RBX: 00007f15049e5fa0 RCX: 00007f150478eec9 [ 1296.834396][T22206] RDX: 00000000000087ff RSI: 0000200000000280 RDI: 0000000000000003 [ 1296.834409][T22206] RBP: 00007f15056c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.834422][T22206] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1296.834434][T22206] R13: 00007f15049e6038 R14: 00007f15049e5fa0 R15: 00007ffe76134758 [ 1296.834461][T22206] [ 1297.572990][T22213] Unable to find swap-space signature [ 1298.280231][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 1298.280334][T21102] Bluetooth: hci0: command 0x0406 tx timeout [ 1298.286312][ T5878] Bluetooth: hci4: command 0x0c1a tx timeout [ 1298.360214][T22228] Bluetooth: hci3: command 0x0c1a tx timeout [ 1298.766458][T22236] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1299.815508][T22251] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1684630831), cmd(10) [ 1300.760624][T22262] nfs4: Unknown parameter 'nfsd' [ 1301.495787][T22265] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1301.543716][T22270] nfs4: Unknown parameter 'nfsd' [ 1304.676527][T22302] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 1305.144064][T22307] nfs4: Unknown parameter 'nfsd' [ 1305.179155][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.186734][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.721177][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1307.952748][T22323] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1308.114284][T22305] kexec: Could not allocate control_code_buffer [ 1309.126114][T22335] FAULT_INJECTION: forcing a failure. [ 1309.126114][T22335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1309.161502][T22335] CPU: 0 UID: 0 PID: 22335 Comm: syz.3.3630 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1309.161559][T22335] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1309.161573][T22335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1309.161592][T22335] Call Trace: [ 1309.161603][T22335] [ 1309.161616][T22335] dump_stack_lvl+0x16c/0x1f0 [ 1309.161676][T22335] should_fail_ex+0x512/0x640 [ 1309.161729][T22335] ? __lock_acquire+0xb97/0x1ce0 [ 1309.161779][T22335] get_futex_key+0x1d0/0x1560 [ 1309.161827][T22335] ? __pfx_get_futex_key+0x10/0x10 [ 1309.161869][T22335] ? do_raw_spin_lock+0x12c/0x2b0 [ 1309.161933][T22335] futex_wake+0xea/0x530 [ 1309.161990][T22335] ? find_held_lock+0x2b/0x80 [ 1309.162026][T22335] ? fd_install+0x225/0x750 [ 1309.162063][T22335] ? __pfx_futex_wake+0x10/0x10 [ 1309.162120][T22335] ? rcu_is_watching+0x12/0xc0 [ 1309.162156][T22335] ? io_uring_setup+0x17b5/0x20c0 [ 1309.162212][T22335] do_futex+0x1e3/0x350 [ 1309.162257][T22335] ? __pfx_do_futex+0x10/0x10 [ 1309.162314][T22335] __x64_sys_futex+0x1e0/0x4c0 [ 1309.162364][T22335] ? __pfx___x64_sys_futex+0x10/0x10 [ 1309.162410][T22335] ? xfd_validate_state+0x61/0x180 [ 1309.162477][T22335] do_syscall_64+0xcd/0x4c0 [ 1309.162512][T22335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.162546][T22335] RIP: 0033:0x7f150478eec9 [ 1309.162585][T22335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.162618][T22335] RSP: 002b:00007f15056600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1309.162648][T22335] RAX: ffffffffffffffda RBX: 00007f15049e6278 RCX: 00007f150478eec9 [ 1309.162671][T22335] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15049e627c [ 1309.162710][T22335] RBP: 00007f15049e6270 R08: 00007f15056c4000 R09: 0000000000000000 [ 1309.162733][T22335] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1309.162754][T22335] R13: 00007f15049e6308 R14: 00007ffe76134670 R15: 00007ffe76134758 [ 1309.162799][T22335] [ 1311.776957][T22369] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1314.093218][T22395] FAULT_INJECTION: forcing a failure. [ 1314.093218][T22395] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.152301][T22395] CPU: 1 UID: 0 PID: 22395 Comm: syz.1.3647 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1314.152343][T22395] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1314.152353][T22395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1314.152367][T22395] Call Trace: [ 1314.152375][T22395] [ 1314.152384][T22395] dump_stack_lvl+0x16c/0x1f0 [ 1314.152426][T22395] should_fail_ex+0x512/0x640 [ 1314.152462][T22395] ? fs_reclaim_acquire+0xae/0x150 [ 1314.152501][T22395] should_failslab+0xc2/0x120 [ 1314.152533][T22395] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1314.152571][T22395] ? do_fanotify_mark+0x270b/0x3600 [ 1314.152628][T22395] do_fanotify_mark+0x270b/0x3600 [ 1314.152676][T22395] ? __pfx_do_fanotify_mark+0x10/0x10 [ 1314.152713][T22395] ? __x64_sys_futex+0x1e9/0x4c0 [ 1314.152747][T22395] ? xfd_validate_state+0x61/0x180 [ 1314.152785][T22395] __x64_sys_fanotify_mark+0xbd/0x160 [ 1314.152805][T22395] ? do_syscall_64+0x91/0x4c0 [ 1314.152824][T22395] ? lockdep_hardirqs_on+0x7c/0x110 [ 1314.152857][T22395] do_syscall_64+0xcd/0x4c0 [ 1314.152878][T22395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.152901][T22395] RIP: 0033:0x7f0dd698eec9 [ 1314.152919][T22395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.152941][T22395] RSP: 002b:00007f0dd4bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 1314.152961][T22395] RAX: ffffffffffffffda RBX: 00007f0dd6be5fa0 RCX: 00007f0dd698eec9 [ 1314.152976][T22395] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 1314.152990][T22395] RBP: 00007f0dd6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1314.153003][T22395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1314.153017][T22395] R13: 00007f0dd6be6038 R14: 00007f0dd6be5fa0 R15: 00007ffec4a83f28 [ 1314.153044][T22395] [ 1314.872073][T22404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1317.566934][T22425] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1317.621065][T22417] kexec: Could not allocate control_code_buffer [ 1317.926546][T22440] nfs4: Unknown parameter 'nfsd' [ 1318.801775][T22445] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1322.723948][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1323.460887][T22472] kexec: Could not allocate control_code_buffer [ 1324.311799][T22495] FAULT_INJECTION: forcing a failure. [ 1324.311799][T22495] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.327842][T22495] CPU: 0 UID: 0 PID: 22495 Comm: syz.1.3669 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1324.327882][T22495] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1324.327892][T22495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1324.327907][T22495] Call Trace: [ 1324.327915][T22495] [ 1324.327924][T22495] dump_stack_lvl+0x16c/0x1f0 [ 1324.327966][T22495] should_fail_ex+0x512/0x640 [ 1324.328002][T22495] ? __kmalloc_node_noprof+0xc5/0x500 [ 1324.328035][T22495] should_failslab+0xc2/0x120 [ 1324.328068][T22495] __kmalloc_node_noprof+0xd8/0x500 [ 1324.328098][T22495] ? blk_mq_alloc_tag_set+0x534/0x1260 [ 1324.328139][T22495] blk_mq_alloc_tag_set+0x534/0x1260 [ 1324.328184][T22495] loop_add+0x3b2/0xb70 [ 1324.328214][T22495] ? __pfx_loop_add+0x10/0x10 [ 1324.328270][T22495] loop_control_ioctl+0x13e/0x630 [ 1324.328301][T22495] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1324.328336][T22495] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1324.328367][T22495] __x64_sys_ioctl+0x18b/0x210 [ 1324.328409][T22495] do_syscall_64+0xcd/0x4c0 [ 1324.328432][T22495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.328457][T22495] RIP: 0033:0x7f0dd698eec9 [ 1324.328474][T22495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.328499][T22495] RSP: 002b:00007f0dd4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.328522][T22495] RAX: ffffffffffffffda RBX: 00007f0dd6be5fa0 RCX: 00007f0dd698eec9 [ 1324.328538][T22495] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 1324.328552][T22495] RBP: 00007f0dd6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1324.328567][T22495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.328581][T22495] R13: 00007f0dd6be6038 R14: 00007f0dd6be5fa0 R15: 00007ffec4a83f28 [ 1324.328610][T22495] [ 1325.071308][ T5963] smpboot: CPU 0 is now offline [ 1325.867839][T22506] random: crng reseeded on system resumption [ 1326.784022][T22518] block nbd7: not configured, cannot reconfigure [ 1329.369651][T22529] kexec: Could not allocate control_code_buffer [ 1331.889697][T22548] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1335.419024][T22606] bridge0: port 3(team0) entered blocking state [ 1335.468521][T22606] bridge0: port 3(team0) entered disabled state [ 1335.515269][T22606] team0: entered allmulticast mode [ 1335.548672][T22606] team_slave_0: entered allmulticast mode [ 1335.569469][T22606] team_slave_1: entered allmulticast mode [ 1335.577854][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1335.607719][T22606] team0: entered promiscuous mode [ 1335.628060][T22606] team_slave_0: entered promiscuous mode [ 1335.654146][T22606] team_slave_1: entered promiscuous mode [ 1335.680732][T22606] bridge0: port 3(team0) entered blocking state [ 1335.687554][T22606] bridge0: port 3(team0) entered forwarding state [ 1335.754786][T22610] ipvlan0: entered promiscuous mode [ 1335.795658][T22610] ipvlan0: entered allmulticast mode [ 1335.830946][T22610] veth0_vlan: entered allmulticast mode [ 1336.483508][T22616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1336.617900][T22622] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1337.105108][T22630] nfs4: Unknown parameter 'nfsd' [ 1338.520658][ T30] audit: type=1800 audit(4294967515.477:110): pid=22648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3703" name="features" dev="configfs" ino=212342 res=0 errno=0 [ 1339.763428][T22667] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1341.801185][T22692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1343.967761][T12333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1343.980440][T12333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1343.988270][T12333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1343.996350][T12333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1344.007243][T12333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1344.574841][T22721] random: crng reseeded on system resumption [ 1344.863953][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.462865][T22737] random: crng reseeded on system resumption [ 1345.506220][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.982200][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.096425][T12333] Bluetooth: hci1: command tx timeout [ 1346.301233][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.400698][T22717] chnl_net:caif_netlink_parms(): no params data found [ 1346.754428][T22717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.777783][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.800452][T22717] bridge_slave_0: entered allmulticast mode [ 1346.814394][T22717] bridge_slave_0: entered promiscuous mode [ 1346.880716][T22717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.901543][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.920154][T22717] bridge_slave_1: entered allmulticast mode [ 1346.944592][T22717] bridge_slave_1: entered promiscuous mode [ 1347.042123][T22759] FAULT_INJECTION: forcing a failure. [ 1347.042123][T22759] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.122348][T22717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.175240][T22717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.334788][T22759] CPU: 1 UID: 0 PID: 22759 Comm: syz.4.3726 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1347.334829][T22759] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1347.334837][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1347.334850][T22759] Call Trace: [ 1347.334857][T22759] [ 1347.334865][T22759] dump_stack_lvl+0x16c/0x1f0 [ 1347.334902][T22759] should_fail_ex+0x512/0x640 [ 1347.334934][T22759] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1347.335020][T22759] should_failslab+0xc2/0x120 [ 1347.335067][T22759] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1347.335092][T22759] ? security_file_alloc+0x34/0x2b0 [ 1347.335126][T22759] security_file_alloc+0x34/0x2b0 [ 1347.335156][T22759] init_file+0x93/0x4c0 [ 1347.335186][T22759] alloc_empty_file+0x73/0x1e0 [ 1347.335229][T22759] alloc_file_pseudo+0x13a/0x230 [ 1347.335279][T22759] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1347.335313][T22759] ? alloc_fd+0x471/0x7d0 [ 1347.335340][T22759] sock_alloc_file+0x50/0x210 [ 1347.335367][T22759] __sys_socket+0x1c0/0x260 [ 1347.335395][T22759] ? __pfx___sys_socket+0x10/0x10 [ 1347.335421][T22759] ? xfd_validate_state+0x61/0x180 [ 1347.335460][T22759] __x64_sys_socket+0x72/0xb0 [ 1347.335485][T22759] ? lockdep_hardirqs_on+0x7c/0x110 [ 1347.335518][T22759] do_syscall_64+0xcd/0x4c0 [ 1347.335539][T22759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.335561][T22759] RIP: 0033:0x7f6a0bb8eec9 [ 1347.335578][T22759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.335599][T22759] RSP: 002b:00007f6a099d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1347.335619][T22759] RAX: ffffffffffffffda RBX: 00007f6a0bde6270 RCX: 00007f6a0bb8eec9 [ 1347.335634][T22759] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1347.335647][T22759] RBP: 00007f6a0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1347.335660][T22759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.335692][T22759] R13: 00007f6a0bde6308 R14: 00007f6a0bde6270 R15: 00007fffb5841668 [ 1347.335722][T22759] [ 1347.779174][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3730'. [ 1348.133576][T22773] ipvlan0: entered promiscuous mode [ 1348.177982][T12333] Bluetooth: hci1: command tx timeout [ 1348.207277][T22773] ipvlan0: entered allmulticast mode [ 1348.240367][T22773] veth0_vlan: entered allmulticast mode [ 1348.292825][T22717] team0: Port device team_slave_0 added [ 1348.352075][T22717] team0: Port device team_slave_1 added [ 1348.409687][ T1097] team0: left allmulticast mode [ 1348.449806][ T1097] team_slave_0: left allmulticast mode [ 1348.495241][ T1097] team_slave_1: left allmulticast mode [ 1348.500800][ T1097] team0: left promiscuous mode [ 1348.572146][ T1097] team_slave_0: left promiscuous mode [ 1348.618235][ T1097] team_slave_1: left promiscuous mode [ 1348.650202][ T1097] bridge0: port 3(team0) entered disabled state [ 1348.718879][ T1097] bridge_slave_1: left allmulticast mode [ 1348.724665][ T1097] bridge_slave_1: left promiscuous mode [ 1348.808298][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.059342][ T1097] bridge_slave_0: left allmulticast mode [ 1349.124605][ T1097] bridge_slave_0: left promiscuous mode [ 1349.130352][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.257223][T12333] Bluetooth: hci1: command tx timeout [ 1350.544270][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.585603][ T1097] bond_slave_0: left allmulticast mode [ 1350.629363][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.665145][ T1097] bond_slave_1: left allmulticast mode [ 1350.689747][ T1097] bond0 (unregistering): Released all slaves [ 1350.982303][ T1097] ovs_: left promiscuous mode [ 1351.073457][T22717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.150467][T22717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.310056][T22717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.390368][T22717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.448052][T22717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.590248][T22717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.333862][T12333] Bluetooth: hci1: command tx timeout [ 1352.368987][T22827] FAULT_INJECTION: forcing a failure. [ 1352.368987][T22827] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.448719][T22827] CPU: 1 UID: 0 PID: 22827 Comm: syz.0.3737 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1352.448772][T22827] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1352.448781][T22827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1352.448795][T22827] Call Trace: [ 1352.448803][T22827] [ 1352.448812][T22827] dump_stack_lvl+0x16c/0x1f0 [ 1352.448852][T22827] should_fail_ex+0x512/0x640 [ 1352.448887][T22827] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1352.448915][T22827] should_failslab+0xc2/0x120 [ 1352.448947][T22827] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1352.448971][T22827] ? kernfs_fop_open+0xa3a/0xda0 [ 1352.448998][T22827] kernfs_fop_open+0xa3a/0xda0 [ 1352.449038][T22827] do_dentry_open+0x97f/0x1530 [ 1352.449066][T22827] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1352.449092][T22827] vfs_open+0x82/0x3f0 [ 1352.449128][T22827] path_openat+0x1de4/0x2cb0 [ 1352.449163][T22827] ? __pfx_path_openat+0x10/0x10 [ 1352.449197][T22827] do_filp_open+0x20b/0x470 [ 1352.449224][T22827] ? __pfx_do_filp_open+0x10/0x10 [ 1352.449269][T22827] ? alloc_fd+0x471/0x7d0 [ 1352.449299][T22827] do_sys_openat2+0x11b/0x1d0 [ 1352.449333][T22827] ? __pfx_do_sys_openat2+0x10/0x10 [ 1352.449377][T22827] __x64_sys_openat+0x174/0x210 [ 1352.449397][T22827] ? __pfx___x64_sys_openat+0x10/0x10 [ 1352.449427][T22827] do_syscall_64+0xcd/0x4c0 [ 1352.449448][T22827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.449471][T22827] RIP: 0033:0x7f0cddd8eec9 [ 1352.449488][T22827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.449509][T22827] RSP: 002b:00007f0cdbff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1352.449530][T22827] RAX: ffffffffffffffda RBX: 00007f0cddfe5fa0 RCX: 00007f0cddd8eec9 [ 1352.449544][T22827] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1352.449567][T22827] RBP: 00007f0cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1352.449581][T22827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.449594][T22827] R13: 00007f0cddfe6038 R14: 00007f0cddfe5fa0 R15: 00007ffc5fb2fd68 [ 1352.449622][T22827] [ 1353.024233][T22717] hsr_slave_0: entered promiscuous mode [ 1353.030616][T22717] hsr_slave_1: entered promiscuous mode [ 1353.332694][T22833] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1358.238488][ T1097] hsr_slave_0: left promiscuous mode [ 1358.273447][ T1097] hsr_slave_1: left promiscuous mode [ 1358.279351][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.328179][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.363231][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.392684][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.502162][ T1097] veth1_macvtap: left promiscuous mode [ 1358.507711][ T1097] veth0_macvtap: left promiscuous mode [ 1358.543900][ T1097] veth1_vlan: left promiscuous mode [ 1358.549248][ T1097] veth0_vlan: left promiscuous mode [ 1360.274892][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 1360.456000][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 1362.437047][T22717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1362.508492][T22717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1362.586444][T22717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1362.641578][T22717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1363.022339][T22925] random: crng reseeded on system resumption [ 1363.170118][T22717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.262159][T22717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.323790][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.330991][ T8296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.422599][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.429761][ T8300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.473305][T22951] program syz.3.3756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1364.886050][T22717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.223046][T22717] veth0_vlan: entered promiscuous mode [ 1365.290740][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.297426][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.333546][T22717] veth1_vlan: entered promiscuous mode [ 1365.519836][T22970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1365.556220][T22971] random: crng reseeded on system resumption [ 1365.568669][T22717] veth0_macvtap: entered promiscuous mode [ 1365.643981][T22717] veth1_macvtap: entered promiscuous mode [ 1365.802185][T22717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.882700][T22717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.974900][ T1097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.046371][ T8303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.055619][ T8303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.155588][ T8303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.176160][T22976] nfs4: Unknown parameter 'nfsd' [ 1366.620966][T22979] nfs4: Unknown parameter 'nfsd' [ 1366.637156][ T8300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.645024][ T8300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.893441][ T8296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.981602][ T8296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.522223][T22992] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1369.194038][T23024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1371.455044][T23057] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1372.511484][T23084] netlink: 314 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1373.441280][T23097] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1373.525732][T23097] random: crng reseeded on system resumption [ 1374.438842][T23107] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1374.897431][T23115] nfs4: Unknown parameter 'nfsd' [ 1375.068917][T23121] nfs4: Unknown parameter 'nfsd' [ 1375.128024][T23113] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1375.908938][T23133] nfs4: Unknown parameter 'nfsd' [ 1376.551301][T23138] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 1378.007818][T23172] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1378.462038][T23182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1379.281325][T23193] FAULT_INJECTION: forcing a failure. [ 1379.281325][T23193] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.366859][T23193] CPU: 1 UID: 0 PID: 23193 Comm: syz.1.3801 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1379.366895][T23193] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1379.366904][T23193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1379.366917][T23193] Call Trace: [ 1379.366924][T23193] [ 1379.366933][T23193] dump_stack_lvl+0x16c/0x1f0 [ 1379.366968][T23193] should_fail_ex+0x512/0x640 [ 1379.367000][T23193] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1379.367025][T23193] should_failslab+0xc2/0x120 [ 1379.367052][T23193] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1379.367092][T23193] ? snd_seq_pool_new+0x44/0x230 [ 1379.367139][T23193] ? __pfx_snd_seq_open+0x10/0x10 [ 1379.367162][T23193] snd_seq_pool_new+0x44/0x230 [ 1379.367190][T23193] seq_create_client1+0x66/0x5e0 [ 1379.367215][T23193] ? __pfx_snd_seq_open+0x10/0x10 [ 1379.367237][T23193] snd_seq_open+0x59/0x550 [ 1379.367260][T23193] ? __pfx_snd_seq_open+0x10/0x10 [ 1379.367281][T23193] snd_open+0x22a/0x4c0 [ 1379.367304][T23193] ? __pfx_snd_open+0x10/0x10 [ 1379.367325][T23193] chrdev_open+0x231/0x6a0 [ 1379.367355][T23193] ? __pfx_apparmor_file_open+0x10/0x10 [ 1379.367382][T23193] ? __pfx_chrdev_open+0x10/0x10 [ 1379.367414][T23193] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1379.367446][T23193] do_dentry_open+0x97f/0x1530 [ 1379.367484][T23193] ? __pfx_chrdev_open+0x10/0x10 [ 1379.367521][T23193] vfs_open+0x82/0x3f0 [ 1379.367563][T23193] path_openat+0x1de4/0x2cb0 [ 1379.367618][T23193] ? __pfx_path_openat+0x10/0x10 [ 1379.367656][T23193] do_filp_open+0x20b/0x470 [ 1379.367685][T23193] ? __pfx_do_filp_open+0x10/0x10 [ 1379.367736][T23193] ? alloc_fd+0x471/0x7d0 [ 1379.367770][T23193] do_sys_openat2+0x11b/0x1d0 [ 1379.367808][T23193] ? __pfx_do_sys_openat2+0x10/0x10 [ 1379.367857][T23193] __x64_sys_openat+0x174/0x210 [ 1379.367878][T23193] ? __pfx___x64_sys_openat+0x10/0x10 [ 1379.367912][T23193] do_syscall_64+0xcd/0x4c0 [ 1379.367937][T23193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.367961][T23193] RIP: 0033:0x7f2c1a98eec9 [ 1379.367980][T23193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.368004][T23193] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1379.368027][T23193] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1379.368044][T23193] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1379.368060][T23193] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1379.368076][T23193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.368091][T23193] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1379.368121][T23193] [ 1380.429793][T23199] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1380.795315][T23207] random: crng reseeded on system resumption [ 1382.092452][T23219] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1384.274809][T23235] nfs4: Unknown parameter 'nfsd' [ 1384.447289][T23223] kexec: Could not allocate control_code_buffer [ 1385.500200][T23242] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3814'. [ 1386.539221][T23255] FAULT_INJECTION: forcing a failure. [ 1386.539221][T23255] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.871491][T23255] CPU: 1 UID: 0 PID: 23255 Comm: syz.4.3817 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1386.871525][T23255] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1386.871534][T23255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1386.871546][T23255] Call Trace: [ 1386.871553][T23255] [ 1386.871561][T23255] dump_stack_lvl+0x16c/0x1f0 [ 1386.871596][T23255] should_fail_ex+0x512/0x640 [ 1386.871631][T23255] should_failslab+0xc2/0x120 [ 1386.871659][T23255] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1386.871683][T23255] ? dst_alloc+0x99/0x1a0 [ 1386.871713][T23255] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1386.871730][T23255] dst_alloc+0x99/0x1a0 [ 1386.871758][T23255] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 1386.871787][T23255] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1386.871821][T23255] ip6_pol_route+0xd7b/0x1230 [ 1386.871850][T23255] ? __pfx_ip6_pol_route+0x10/0x10 [ 1386.871899][T23255] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1386.871928][T23255] fib6_rule_lookup+0x24c/0x720 [ 1386.871957][T23255] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1386.871993][T23255] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1386.872018][T23255] ? const_folio_flags+0x5b/0x100 [ 1386.872053][T23255] ip6_route_output_flags+0x1d0/0x640 [ 1386.872079][T23255] ip6_dst_lookup_tail.constprop.0+0x115a/0x2140 [ 1386.872113][T23255] ? finish_fault+0x738/0x1110 [ 1386.872145][T23255] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1386.872178][T23255] ? __lock_acquire+0x62e/0x1ce0 [ 1386.872207][T23255] ? do_pte_missing+0x56d/0x3ba0 [ 1386.872231][T23255] ip6_dst_lookup_flow+0x99/0x1d0 [ 1386.872259][T23255] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1386.872285][T23255] ? find_held_lock+0x2b/0x80 [ 1386.872305][T23255] ? rawv6_sendmsg+0xb6e/0x4820 [ 1386.872332][T23255] rawv6_sendmsg+0xe85/0x4820 [ 1386.872355][T23255] ? aa_label_sk_perm+0x195/0x600 [ 1386.872380][T23255] ? __lock_acquire+0x62e/0x1ce0 [ 1386.872409][T23255] ? aa_profile_af_perm+0x321/0x3a0 [ 1386.872438][T23255] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1386.872467][T23255] ? __up_read+0x1f8/0x750 [ 1386.872524][T23255] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1386.872550][T23255] ? inet_sendmsg+0x119/0x140 [ 1386.872572][T23255] inet_sendmsg+0x119/0x140 [ 1386.872597][T23255] ____sys_sendmsg+0x973/0xc70 [ 1386.872620][T23255] ? copy_msghdr_from_user+0x10a/0x160 [ 1386.872650][T23255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1386.872676][T23255] ? __pfx__kstrtoull+0x10/0x10 [ 1386.872708][T23255] ___sys_sendmsg+0x134/0x1d0 [ 1386.872739][T23255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1386.872801][T23255] ? find_held_lock+0x2b/0x80 [ 1386.872838][T23255] __sys_sendmmsg+0x200/0x420 [ 1386.872873][T23255] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1386.872921][T23255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1386.872966][T23255] ? fput+0x9b/0xd0 [ 1386.872996][T23255] ? ksys_write+0x1ac/0x250 [ 1386.873020][T23255] ? __pfx_ksys_write+0x10/0x10 [ 1386.873049][T23255] __x64_sys_sendmmsg+0x9c/0x100 [ 1386.873081][T23255] ? lockdep_hardirqs_on+0x7c/0x110 [ 1386.873112][T23255] do_syscall_64+0xcd/0x4c0 [ 1386.873133][T23255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.873155][T23255] RIP: 0033:0x7f6a0bb8eec9 [ 1386.873171][T23255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.873192][T23255] RSP: 002b:00007f6a09df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1386.873212][T23255] RAX: ffffffffffffffda RBX: 00007f6a0bde6180 RCX: 00007f6a0bb8eec9 [ 1386.873226][T23255] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1386.873238][T23255] RBP: 00007f6a09df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.873262][T23255] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 1386.873274][T23255] R13: 00007f6a0bde6218 R14: 00007f6a0bde6180 R15: 00007fffb5841668 [ 1386.873300][T23255] [ 1389.857902][T23283] zswap: compressor not available [ 1389.972349][T23290] FAULT_INJECTION: forcing a failure. [ 1389.972349][T23290] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.118597][T23290] CPU: 1 UID: 0 PID: 23290 Comm: syz.1.3824 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1390.118638][T23290] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1390.118648][T23290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1390.118662][T23290] Call Trace: [ 1390.118676][T23290] [ 1390.118685][T23290] dump_stack_lvl+0x16c/0x1f0 [ 1390.118726][T23290] should_fail_ex+0x512/0x640 [ 1390.118762][T23290] ? fs_reclaim_acquire+0xae/0x150 [ 1390.118799][T23290] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1390.118834][T23290] should_failslab+0xc2/0x120 [ 1390.118865][T23290] __kmalloc_noprof+0xd2/0x510 [ 1390.118899][T23290] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1390.118936][T23290] ? tomoyo_profile+0x47/0x60 [ 1390.118960][T23290] tomoyo_path_number_perm+0x245/0x580 [ 1390.118988][T23290] ? tomoyo_path_number_perm+0x237/0x580 [ 1390.119021][T23290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1390.119052][T23290] ? find_held_lock+0x2b/0x80 [ 1390.119098][T23290] ? find_held_lock+0x2b/0x80 [ 1390.119121][T23290] ? handle_mm_fault+0x2ab/0xd10 [ 1390.119144][T23290] ? hook_file_ioctl_common+0x145/0x410 [ 1390.119178][T23290] ? find_held_lock+0x2b/0x80 [ 1390.119209][T23290] security_file_ioctl+0x9b/0x240 [ 1390.119241][T23290] __x64_sys_ioctl+0xb7/0x210 [ 1390.119280][T23290] do_syscall_64+0xcd/0x4c0 [ 1390.119304][T23290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.119328][T23290] RIP: 0033:0x7f2c1a98eec9 [ 1390.119346][T23290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.119369][T23290] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.119392][T23290] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1390.119408][T23290] RDX: ffffffffffffffff RSI: 00000000c060ff0b RDI: 0000000000000003 [ 1390.119422][T23290] RBP: 00007f2c1b8d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.119436][T23290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.119462][T23290] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1390.119490][T23290] [ 1390.119499][T23290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1390.432881][T23298] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1390.462784][T23300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1391.375041][T23313] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1391.752680][T23319] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1395.084992][T23356] FAULT_INJECTION: forcing a failure. [ 1395.084992][T23356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.263919][T23356] CPU: 1 UID: 0 PID: 23356 Comm: syz.0.3839 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1395.263958][T23356] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1395.263967][T23356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1395.263981][T23356] Call Trace: [ 1395.263989][T23356] [ 1395.263997][T23356] dump_stack_lvl+0x16c/0x1f0 [ 1395.264038][T23356] should_fail_ex+0x512/0x640 [ 1395.264078][T23356] _copy_to_user+0x32/0xd0 [ 1395.264105][T23356] simple_read_from_buffer+0xcb/0x170 [ 1395.264130][T23356] proc_fail_nth_read+0x197/0x240 [ 1395.264156][T23356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.264193][T23356] ? rw_verify_area+0xcf/0x6c0 [ 1395.264215][T23356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1395.264244][T23356] vfs_read+0x1e1/0xcf0 [ 1395.264272][T23356] ? __pfx___mutex_lock+0x10/0x10 [ 1395.264292][T23356] ? __pfx_vfs_read+0x10/0x10 [ 1395.264323][T23356] ? __fget_files+0x20e/0x3c0 [ 1395.264354][T23356] ksys_read+0x12a/0x250 [ 1395.264377][T23356] ? __pfx_ksys_read+0x10/0x10 [ 1395.264409][T23356] do_syscall_64+0xcd/0x4c0 [ 1395.264430][T23356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.264452][T23356] RIP: 0033:0x7f0cddd8d8dc [ 1395.264469][T23356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1395.264490][T23356] RSP: 002b:00007f0cdbff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.264509][T23356] RAX: ffffffffffffffda RBX: 00007f0cddfe5fa0 RCX: 00007f0cddd8d8dc [ 1395.264523][T23356] RDX: 000000000000000f RSI: 00007f0cdbff60a0 RDI: 0000000000000004 [ 1395.264535][T23356] RBP: 00007f0cdbff6090 R08: 0000000000000000 R09: 0000000000008000 [ 1395.264549][T23356] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1395.264562][T23356] R13: 00007f0cddfe6038 R14: 00007f0cddfe5fa0 R15: 00007ffc5fb2fd68 [ 1395.264589][T23356] [ 1395.558639][T23359] nfs4: Unknown parameter 'nfsd' [ 1396.284207][T23366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1396.378668][T23366] ipvlan0: entered promiscuous mode [ 1396.454523][T23366] ipvlan0: entered allmulticast mode [ 1396.521937][T23366] veth0_vlan: entered allmulticast mode [ 1397.566448][T23377] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1397.829442][T23384] nfs4: Unknown parameter 'nfsd' [ 1398.025671][T23392] bridge0: port 3(team0) entered blocking state [ 1398.087297][T23392] bridge0: port 3(team0) entered disabled state [ 1398.138919][T23392] team0: entered allmulticast mode [ 1398.176267][T23392] team_slave_0: entered allmulticast mode [ 1398.224759][T23392] team_slave_1: entered allmulticast mode [ 1398.286071][T23392] team0: entered promiscuous mode [ 1398.328599][T23392] team_slave_0: entered promiscuous mode [ 1398.375371][T23392] team_slave_1: entered promiscuous mode [ 1398.414548][T23392] bridge0: port 3(team0) entered blocking state [ 1398.421011][T23392] bridge0: port 3(team0) entered forwarding state [ 1398.960267][T23397] block nbd7: not configured, cannot reconfigure [ 1402.244682][T23431] kexec: Could not allocate control_code_buffer [ 1402.634038][T23445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1402.919778][T23445] bond0: (slave bond_slave_0): Releasing backup interface [ 1403.101355][T23459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1404.665395][T23485] nfs4: Unknown parameter 'nfsd' [ 1406.028154][T23502] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1406.953098][T23517] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1408.703990][T23545] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1410.158812][T23558] zswap: compressor not available [ 1410.242445][T23564] Setting dangerous option i915.mitigations - tainting kernel [ 1410.771842][T23580] nfs4: Unknown parameter 'nfsd' [ 1411.766708][T23592] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1412.454346][ T30] audit: type=1800 audit(4294968612.407:111): pid=23588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3896" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1415.635116][T23654] FAULT_INJECTION: forcing a failure. [ 1415.635116][T23654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1415.664636][T23642] kexec: Could not allocate control_code_buffer [ 1415.724704][T23654] CPU: 1 UID: 0 PID: 23654 Comm: syz.1.3908 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1415.724740][T23654] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1415.724748][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1415.724760][T23654] Call Trace: [ 1415.724768][T23654] [ 1415.724775][T23654] dump_stack_lvl+0x16c/0x1f0 [ 1415.724812][T23654] should_fail_ex+0x512/0x640 [ 1415.724848][T23654] should_fail_alloc_page+0xe7/0x130 [ 1415.724878][T23654] prepare_alloc_pages+0x3c2/0x610 [ 1415.724913][T23654] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1415.724939][T23654] ? stack_trace_save+0x8e/0xc0 [ 1415.724963][T23654] ? __pfx_stack_trace_save+0x10/0x10 [ 1415.724985][T23654] ? rcu_is_watching+0x12/0xc0 [ 1415.725005][T23654] ? stack_depot_save_flags+0x29/0x9c0 [ 1415.725043][T23654] ? kasan_save_stack+0x42/0x60 [ 1415.725065][T23654] ? kasan_save_stack+0x33/0x60 [ 1415.725087][T23654] ? kasan_save_track+0x14/0x30 [ 1415.725110][T23654] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1415.725135][T23654] ? walk_pgd_range+0x88b/0x1f50 [ 1415.725159][T23654] ? walk_page_range_mm+0x461/0xb40 [ 1415.725184][T23654] ? madvise_walk_vmas+0x31f/0x9c0 [ 1415.725212][T23654] ? madvise_do_behavior+0x1e2/0x530 [ 1415.725241][T23654] ? do_madvise+0x176/0x240 [ 1415.725268][T23654] ? __x64_sys_madvise+0xa9/0x110 [ 1415.725296][T23654] ? do_syscall_64+0xcd/0x4c0 [ 1415.725313][T23654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.725345][T23654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1415.725377][T23654] ? policy_nodemask+0xea/0x4e0 [ 1415.725406][T23654] alloc_pages_mpol+0x1fb/0x550 [ 1415.725434][T23654] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1415.725469][T23654] alloc_pages_noprof+0x131/0x390 [ 1415.725497][T23654] pte_alloc_one+0x1c/0x3a0 [ 1415.725519][T23654] __pte_alloc+0x6d/0x3c0 [ 1415.725547][T23654] ? __pfx___pte_alloc+0x10/0x10 [ 1415.725576][T23654] ? _raw_spin_unlock+0x28/0x50 [ 1415.725602][T23654] ? __pmd_alloc+0x3fb/0x930 [ 1415.725643][T23654] walk_pgd_range+0xb84/0x1f50 [ 1415.725672][T23654] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1415.725700][T23654] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1415.725730][T23654] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1415.725761][T23654] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1415.725790][T23654] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1415.725818][T23654] ? __pfx_walk_pgd_range+0x10/0x10 [ 1415.725851][T23654] __walk_page_range+0x163/0x820 [ 1415.725878][T23654] ? find_vma+0xbf/0x140 [ 1415.725904][T23654] ? __pfx_find_vma+0x10/0x10 [ 1415.725933][T23654] ? walk_page_test+0x9b/0x180 [ 1415.725959][T23654] walk_page_range_mm+0x461/0xb40 [ 1415.725989][T23654] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1415.726022][T23654] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1415.726047][T23654] madvise_vma_behavior+0xa62/0x2d60 [ 1415.726080][T23654] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1415.726112][T23654] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1415.726145][T23654] ? __pfx_mas_prev+0x10/0x10 [ 1415.726182][T23654] ? find_vma_prev+0xda/0x160 [ 1415.726210][T23654] ? find_held_lock+0x2b/0x80 [ 1415.726230][T23654] ? __pfx_find_vma_prev+0x10/0x10 [ 1415.726259][T23654] ? futex_unqueue+0x133/0x2c0 [ 1415.726291][T23654] ? __futex_wait+0x24c/0x2f0 [ 1415.726324][T23654] madvise_walk_vmas+0x31f/0x9c0 [ 1415.726358][T23654] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1415.726395][T23654] madvise_do_behavior+0x1e2/0x530 [ 1415.726424][T23654] ? futex_private_hash_put+0x18a/0x300 [ 1415.726449][T23654] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1415.726480][T23654] ? down_read+0x13d/0x480 [ 1415.726512][T23654] do_madvise+0x176/0x240 [ 1415.726540][T23654] ? __pfx_do_madvise+0x10/0x10 [ 1415.726568][T23654] ? do_futex+0x122/0x350 [ 1415.726611][T23654] ? xfd_validate_state+0x61/0x180 [ 1415.726645][T23654] ? __pfx_ksys_write+0x10/0x10 [ 1415.726675][T23654] __x64_sys_madvise+0xa9/0x110 [ 1415.726705][T23654] ? lockdep_hardirqs_on+0x7c/0x110 [ 1415.726735][T23654] do_syscall_64+0xcd/0x4c0 [ 1415.726755][T23654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.726775][T23654] RIP: 0033:0x7f2c1a98eec9 [ 1415.726792][T23654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.726812][T23654] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1415.726831][T23654] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1415.726845][T23654] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1415.726858][T23654] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1415.726871][T23654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.726883][T23654] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1415.726909][T23654] [ 1416.187961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.070591][ T30] audit: type=1800 audit(4294968616.985:112): pid=23662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3908" name="features" dev="configfs" ino=217733 res=0 errno=0 [ 1419.260460][T23695] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1419.286577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.477644][T23695] CIFS mount error: No usable UNC path provided in device string! [ 1419.477644][T23695] [ 1419.579893][T23695] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1420.282313][T23706] nfs4: Unknown parameter 'nfsd' [ 1420.693369][T23712] nfs4: Unknown parameter 'nfsd' [ 1421.115036][T23715] FAULT_INJECTION: forcing a failure. [ 1421.115036][T23715] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.518993][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.0.3918 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1421.519032][T23715] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1421.519041][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1421.519054][T23715] Call Trace: [ 1421.519062][T23715] [ 1421.519071][T23715] dump_stack_lvl+0x16c/0x1f0 [ 1421.519109][T23715] should_fail_ex+0x512/0x640 [ 1421.519143][T23715] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1421.519168][T23715] should_failslab+0xc2/0x120 [ 1421.519198][T23715] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1421.519221][T23715] ? io_wq_create+0x6a/0x9a0 [ 1421.519252][T23715] io_wq_create+0x6a/0x9a0 [ 1421.519282][T23715] io_uring_alloc_task_context+0x1e1/0x650 [ 1421.519310][T23715] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1421.519337][T23715] ? alloc_file_pseudo+0x1b3/0x230 [ 1421.519375][T23715] __io_uring_add_tctx_node+0x2dd/0x500 [ 1421.519400][T23715] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1421.519428][T23715] ? __anon_inode_getfile+0x17c/0x280 [ 1421.519458][T23715] io_uring_setup+0x153d/0x20c0 [ 1421.519492][T23715] ? __pfx_io_uring_setup+0x10/0x10 [ 1421.519552][T23715] ? xfd_validate_state+0x61/0x180 [ 1421.519592][T23715] __x64_sys_io_uring_setup+0xc2/0x170 [ 1421.519625][T23715] do_syscall_64+0xcd/0x4c0 [ 1421.519647][T23715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.519673][T23715] RIP: 0033:0x7f0cddd8eec9 [ 1421.519690][T23715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1421.519712][T23715] RSP: 002b:00007f0cdbb91038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1421.519733][T23715] RAX: ffffffffffffffda RBX: 00007f0cddfe6270 RCX: 00007f0cddd8eec9 [ 1421.519747][T23715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1421.519760][T23715] RBP: 00007f0cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1421.519773][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.519786][T23715] R13: 00007f0cddfe6308 R14: 00007f0cddfe6270 R15: 00007ffc5fb2fd68 [ 1421.519813][T23715] [ 1422.631547][T23720] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1423.029688][T23739] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1424.403995][T23756] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1424.933719][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1427.696508][T23802] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1428.033542][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.041016][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.143708][T23808] FAULT_INJECTION: forcing a failure. [ 1428.143708][T23808] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.279772][T23808] CPU: 1 UID: 0 PID: 23808 Comm: syz.4.3943 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1428.279810][T23808] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1428.279819][T23808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1428.279833][T23808] Call Trace: [ 1428.279840][T23808] [ 1428.279849][T23808] dump_stack_lvl+0x16c/0x1f0 [ 1428.279887][T23808] should_fail_ex+0x512/0x640 [ 1428.279921][T23808] ? __kvmalloc_node_noprof+0x124/0x620 [ 1428.279949][T23808] should_failslab+0xc2/0x120 [ 1428.279978][T23808] __kvmalloc_node_noprof+0x137/0x620 [ 1428.280004][T23808] ? io_uring_setup+0x37f/0x20c0 [ 1428.280040][T23808] ? io_uring_setup+0x37f/0x20c0 [ 1428.280069][T23808] io_uring_setup+0x37f/0x20c0 [ 1428.280114][T23808] ? __pfx_io_uring_setup+0x10/0x10 [ 1428.280143][T23808] ? do_futex+0x122/0x350 [ 1428.280169][T23808] ? __pfx_do_futex+0x10/0x10 [ 1428.280197][T23808] ? find_held_lock+0x2b/0x80 [ 1428.280227][T23808] ? xfd_validate_state+0x61/0x180 [ 1428.280263][T23808] __x64_sys_io_uring_setup+0xc2/0x170 [ 1428.280294][T23808] do_syscall_64+0xcd/0x4c0 [ 1428.280314][T23808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.280335][T23808] RIP: 0033:0x7f6a0bb8eec9 [ 1428.280350][T23808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.280370][T23808] RSP: 002b:00007f6a0c97a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1428.280390][T23808] RAX: ffffffffffffffda RBX: 00007f6a0bde5fa0 RCX: 00007f6a0bb8eec9 [ 1428.280403][T23808] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1428.280415][T23808] RBP: 00007f6a0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1428.280428][T23808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.280440][T23808] R13: 00007f6a0bde6038 R14: 00007f6a0bde5fa0 R15: 00007fffb5841668 [ 1428.280464][T23808] [ 1428.945619][T23814] nfs4: Unknown parameter 'nfsd' [ 1431.478353][T23848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1432.603088][T23873] random: crng reseeded on system resumption [ 1434.167907][T23900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1434.588997][T23905] block nbd7: not configured, cannot reconfigure [ 1434.981092][T23912] random: crng reseeded on system resumption [ 1435.578818][T23926] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1436.423300][T23939] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1436.649856][T23945] FAULT_INJECTION: forcing a failure. [ 1436.649856][T23945] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.857353][T23945] CPU: 1 UID: 0 PID: 23945 Comm: syz.1.3968 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1436.857392][T23945] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1436.857402][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.857415][T23945] Call Trace: [ 1436.857423][T23945] [ 1436.857432][T23945] dump_stack_lvl+0x16c/0x1f0 [ 1436.857470][T23945] should_fail_ex+0x512/0x640 [ 1436.857504][T23945] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1436.857530][T23945] should_failslab+0xc2/0x120 [ 1436.857559][T23945] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1436.857585][T23945] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 1436.857617][T23945] ? io_uring_alloc_task_context+0x469/0x650 [ 1436.857668][T23945] io_uring_alloc_task_context+0x469/0x650 [ 1436.857699][T23945] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1436.857730][T23945] ? alloc_file_pseudo+0x1b3/0x230 [ 1436.857772][T23945] __io_uring_add_tctx_node+0x2dd/0x500 [ 1436.857800][T23945] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1436.857831][T23945] ? __anon_inode_getfile+0x17c/0x280 [ 1436.857865][T23945] io_uring_setup+0x153d/0x20c0 [ 1436.857903][T23945] ? __pfx_io_uring_setup+0x10/0x10 [ 1436.857963][T23945] ? xfd_validate_state+0x61/0x180 [ 1436.858008][T23945] __x64_sys_io_uring_setup+0xc2/0x170 [ 1436.858044][T23945] do_syscall_64+0xcd/0x4c0 [ 1436.858068][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.858093][T23945] RIP: 0033:0x7f2c1a98eec9 [ 1436.858112][T23945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1436.858135][T23945] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1436.858157][T23945] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1436.858173][T23945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1436.858188][T23945] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1436.858202][T23945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.858217][T23945] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1436.858247][T23945] [ 1437.372125][T23952] sp0: Synchronizing with TNC [ 1437.633956][T23957] nfs4: Unknown parameter 'nfsd' [ 1438.861185][T23973] deleting an unspecified loop device is not supported. [ 1439.224932][T23980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1440.068504][T23993] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1441.696190][T24024] FAULT_INJECTION: forcing a failure. [ 1441.696190][T24024] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.894393][T24024] CPU: 1 UID: 0 PID: 24024 Comm: syz.1.3981 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1441.894436][T24024] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1441.894447][T24024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1441.894462][T24024] Call Trace: [ 1441.894470][T24024] [ 1441.894479][T24024] dump_stack_lvl+0x16c/0x1f0 [ 1441.894521][T24024] should_fail_ex+0x512/0x640 [ 1441.894558][T24024] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1441.894592][T24024] should_failslab+0xc2/0x120 [ 1441.894637][T24024] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1441.894659][T24024] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 1441.894690][T24024] ? io_uring_alloc_task_context+0x469/0x650 [ 1441.894730][T24024] io_uring_alloc_task_context+0x469/0x650 [ 1441.894756][T24024] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1441.894780][T24024] ? alloc_file_pseudo+0x1b3/0x230 [ 1441.894815][T24024] __io_uring_add_tctx_node+0x2dd/0x500 [ 1441.894838][T24024] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1441.894863][T24024] ? __anon_inode_getfile+0x17c/0x280 [ 1441.894891][T24024] io_uring_setup+0x153d/0x20c0 [ 1441.894921][T24024] ? __pfx_io_uring_setup+0x10/0x10 [ 1441.894968][T24024] ? xfd_validate_state+0x61/0x180 [ 1441.895003][T24024] __x64_sys_io_uring_setup+0xc2/0x170 [ 1441.895033][T24024] do_syscall_64+0xcd/0x4c0 [ 1441.895053][T24024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.895073][T24024] RIP: 0033:0x7f2c1a98eec9 [ 1441.895088][T24024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.895108][T24024] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1441.895127][T24024] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1441.895140][T24024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1441.895152][T24024] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1441.895165][T24024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.895177][T24024] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1441.895203][T24024] [ 1442.769974][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1442.835013][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1443.930042][T24060] binder: 24059:24060 ioctl 40046210 0 returned -14 [ 1445.421511][ T30] audit: type=1800 audit(4294968645.361:113): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3992" name="members" dev="configfs" ino=219533 res=0 errno=0 [ 1445.585651][T24091] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1447.751655][T24124] FAULT_INJECTION: forcing a failure. [ 1447.751655][T24124] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.909913][T24124] CPU: 1 UID: 0 PID: 24124 Comm: syz.1.4002 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1447.909950][T24124] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1447.909959][T24124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1447.909972][T24124] Call Trace: [ 1447.909979][T24124] [ 1447.909987][T24124] dump_stack_lvl+0x16c/0x1f0 [ 1447.910025][T24124] should_fail_ex+0x512/0x640 [ 1447.910069][T24124] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1447.910094][T24124] should_failslab+0xc2/0x120 [ 1447.910139][T24124] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1447.910162][T24124] ? snd_seq_pool_new+0x44/0x230 [ 1447.910190][T24124] ? __pfx_snd_seq_open+0x10/0x10 [ 1447.910211][T24124] snd_seq_pool_new+0x44/0x230 [ 1447.910238][T24124] seq_create_client1+0x66/0x5e0 [ 1447.910261][T24124] ? __pfx_snd_seq_open+0x10/0x10 [ 1447.910282][T24124] snd_seq_open+0x59/0x550 [ 1447.910303][T24124] ? __pfx_snd_seq_open+0x10/0x10 [ 1447.910323][T24124] snd_open+0x22a/0x4c0 [ 1447.910349][T24124] ? __pfx_snd_open+0x10/0x10 [ 1447.910369][T24124] chrdev_open+0x231/0x6a0 [ 1447.910398][T24124] ? __pfx_apparmor_file_open+0x10/0x10 [ 1447.910427][T24124] ? __pfx_chrdev_open+0x10/0x10 [ 1447.910457][T24124] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1447.910487][T24124] do_dentry_open+0x97f/0x1530 [ 1447.910515][T24124] ? __pfx_chrdev_open+0x10/0x10 [ 1447.910549][T24124] vfs_open+0x82/0x3f0 [ 1447.910584][T24124] path_openat+0x1de4/0x2cb0 [ 1447.910619][T24124] ? __pfx_path_openat+0x10/0x10 [ 1447.910653][T24124] do_filp_open+0x20b/0x470 [ 1447.910679][T24124] ? __pfx_do_filp_open+0x10/0x10 [ 1447.910725][T24124] ? alloc_fd+0x471/0x7d0 [ 1447.910756][T24124] do_sys_openat2+0x11b/0x1d0 [ 1447.910789][T24124] ? __pfx_do_sys_openat2+0x10/0x10 [ 1447.910833][T24124] __x64_sys_openat+0x174/0x210 [ 1447.910853][T24124] ? __pfx___x64_sys_openat+0x10/0x10 [ 1447.910883][T24124] do_syscall_64+0xcd/0x4c0 [ 1447.910905][T24124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.910927][T24124] RIP: 0033:0x7f2c1a98eec9 [ 1447.910944][T24124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.910966][T24124] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1447.910986][T24124] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1447.911000][T24124] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1447.911014][T24124] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1447.911027][T24124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.911040][T24124] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1447.911067][T24124] [ 1449.154096][T24141] bridge0: port 3(team0) entered blocking state [ 1449.162592][T24141] bridge0: port 3(team0) entered disabled state [ 1449.162754][T24141] team0: entered allmulticast mode [ 1449.162772][T24141] team_slave_0: entered allmulticast mode [ 1449.162788][T24141] team_slave_1: entered allmulticast mode [ 1449.171797][T24141] team0: entered promiscuous mode [ 1449.171819][T24141] team_slave_0: entered promiscuous mode [ 1449.171986][T24141] team_slave_1: entered promiscuous mode [ 1449.175357][T24141] bridge0: port 3(team0) entered blocking state [ 1449.175463][T24141] bridge0: port 3(team0) entered forwarding state [ 1449.575947][T24145] nfs4: Unknown parameter 'nfsd' [ 1449.838687][T24129] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1449.873513][T24130] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1450.231217][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1450.867136][T24163] random: crng reseeded on system resumption [ 1451.424729][T24155] kexec: Could not allocate control_code_buffer [ 1452.967410][T24194] block nbd7: not configured, cannot reconfigure [ 1453.315022][T24200] nfs4: Unknown parameter 'nfsd' [ 1454.836886][T24221] FAULT_INJECTION: forcing a failure. [ 1454.836886][T24221] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.918567][T24221] CPU: 1 UID: 0 PID: 24221 Comm: syz.4.4032 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1454.918609][T24221] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1454.918620][T24221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1454.918634][T24221] Call Trace: [ 1454.918642][T24221] [ 1454.918651][T24221] dump_stack_lvl+0x16c/0x1f0 [ 1454.918692][T24221] should_fail_ex+0x512/0x640 [ 1454.918730][T24221] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1454.918759][T24221] should_failslab+0xc2/0x120 [ 1454.918808][T24221] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1454.918833][T24221] ? snd_seq_pool_new+0x44/0x230 [ 1454.918875][T24221] ? __pfx_snd_seq_open+0x10/0x10 [ 1454.918897][T24221] snd_seq_pool_new+0x44/0x230 [ 1454.918934][T24221] seq_create_client1+0x66/0x5e0 [ 1454.918956][T24221] ? __pfx_snd_seq_open+0x10/0x10 [ 1454.918975][T24221] snd_seq_open+0x59/0x550 [ 1454.918995][T24221] ? __pfx_snd_seq_open+0x10/0x10 [ 1454.919013][T24221] snd_open+0x22a/0x4c0 [ 1454.919033][T24221] ? __pfx_snd_open+0x10/0x10 [ 1454.919051][T24221] chrdev_open+0x231/0x6a0 [ 1454.919078][T24221] ? __pfx_apparmor_file_open+0x10/0x10 [ 1454.919102][T24221] ? __pfx_chrdev_open+0x10/0x10 [ 1454.919130][T24221] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1454.919158][T24221] do_dentry_open+0x97f/0x1530 [ 1454.919183][T24221] ? __pfx_chrdev_open+0x10/0x10 [ 1454.919215][T24221] vfs_open+0x82/0x3f0 [ 1454.919249][T24221] path_openat+0x1de4/0x2cb0 [ 1454.919282][T24221] ? __pfx_path_openat+0x10/0x10 [ 1454.919312][T24221] do_filp_open+0x20b/0x470 [ 1454.919337][T24221] ? __pfx_do_filp_open+0x10/0x10 [ 1454.919380][T24221] ? alloc_fd+0x471/0x7d0 [ 1454.919408][T24221] do_sys_openat2+0x11b/0x1d0 [ 1454.919440][T24221] ? __pfx_do_sys_openat2+0x10/0x10 [ 1454.919485][T24221] __x64_sys_openat+0x174/0x210 [ 1454.919503][T24221] ? __pfx___x64_sys_openat+0x10/0x10 [ 1454.919531][T24221] do_syscall_64+0xcd/0x4c0 [ 1454.919551][T24221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.919579][T24221] RIP: 0033:0x7f6a0bb8eec9 [ 1454.919596][T24221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.919616][T24221] RSP: 002b:00007f6a0c97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1454.919636][T24221] RAX: ffffffffffffffda RBX: 00007f6a0bde5fa0 RCX: 00007f6a0bb8eec9 [ 1454.919650][T24221] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1454.919663][T24221] RBP: 00007f6a0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1454.919676][T24221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.919688][T24221] R13: 00007f6a0bde6038 R14: 00007f6a0bde5fa0 R15: 00007fffb5841668 [ 1454.919715][T24221] [ 1455.184411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.549856][T24224] netlink: 'syz.3.4033': attribute type 11 has an invalid length. [ 1455.579717][T24224] netlink: 'syz.3.4033': attribute type 11 has an invalid length. [ 1456.230842][T24230] block nbd7: not configured, cannot reconfigure [ 1456.661157][T24243] synth uevent: /module/orangefs: unknown uevent action string [ 1456.753130][T24243] FAULT_INJECTION: forcing a failure. [ 1456.753130][T24243] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.817075][T24243] CPU: 1 UID: 0 PID: 24243 Comm: syz.3.4038 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1456.817115][T24243] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1456.817125][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1456.817139][T24243] Call Trace: [ 1456.817147][T24243] [ 1456.817155][T24243] dump_stack_lvl+0x16c/0x1f0 [ 1456.817200][T24243] should_fail_ex+0x512/0x640 [ 1456.817237][T24243] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1456.817268][T24243] should_failslab+0xc2/0x120 [ 1456.817299][T24243] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1456.817327][T24243] ? lockdep_init_map_type+0x5c/0x280 [ 1456.817359][T24243] ? seq_open+0x55/0x170 [ 1456.817396][T24243] seq_open+0x55/0x170 [ 1456.817436][T24243] kernfs_fop_open+0x59f/0xda0 [ 1456.817466][T24243] do_dentry_open+0x97f/0x1530 [ 1456.817496][T24243] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1456.817525][T24243] vfs_open+0x82/0x3f0 [ 1456.817563][T24243] path_openat+0x1de4/0x2cb0 [ 1456.817605][T24243] ? __pfx_path_openat+0x10/0x10 [ 1456.817641][T24243] do_filp_open+0x20b/0x470 [ 1456.817669][T24243] ? __pfx_do_filp_open+0x10/0x10 [ 1456.817736][T24243] ? alloc_fd+0x471/0x7d0 [ 1456.817771][T24243] do_sys_openat2+0x11b/0x1d0 [ 1456.817808][T24243] ? __pfx_do_sys_openat2+0x10/0x10 [ 1456.817857][T24243] __x64_sys_openat+0x174/0x210 [ 1456.817880][T24243] ? __pfx___x64_sys_openat+0x10/0x10 [ 1456.817913][T24243] do_syscall_64+0xcd/0x4c0 [ 1456.817937][T24243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.817961][T24243] RIP: 0033:0x7f150478eec9 [ 1456.817980][T24243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1456.818004][T24243] RSP: 002b:00007f15056c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1456.818026][T24243] RAX: ffffffffffffffda RBX: 00007f15049e5fa0 RCX: 00007f150478eec9 [ 1456.818043][T24243] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1456.818059][T24243] RBP: 00007f1504811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1456.818074][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.818088][T24243] R13: 00007f15049e6038 R14: 00007f15049e5fa0 R15: 00007ffe76134758 [ 1456.818118][T24243] [ 1457.040015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.890506][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1460.915831][T24271] kexec: Could not allocate control_code_buffer [ 1460.987364][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 1462.398950][T24313] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1465.362711][T24335] kexec: Could not allocate control_code_buffer [ 1466.126344][T24361] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1466.319017][T24364] nfs4: Unknown parameter 'nfsd' [ 1467.632285][T24380] FAULT_INJECTION: forcing a failure. [ 1467.632285][T24380] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.740735][T24380] CPU: 1 UID: 0 PID: 24380 Comm: syz.1.4073 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1467.740773][T24380] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1467.740783][T24380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1467.740796][T24380] Call Trace: [ 1467.740804][T24380] [ 1467.740812][T24380] dump_stack_lvl+0x16c/0x1f0 [ 1467.740856][T24380] should_fail_ex+0x512/0x640 [ 1467.740890][T24380] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1467.740920][T24380] should_failslab+0xc2/0x120 [ 1467.740950][T24380] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1467.740977][T24380] ? alloc_empty_file+0x55/0x1e0 [ 1467.741013][T24380] alloc_empty_file+0x55/0x1e0 [ 1467.741057][T24380] path_openat+0xda/0x2cb0 [ 1467.741080][T24380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.741127][T24380] ? __pfx_path_openat+0x10/0x10 [ 1467.741160][T24380] do_filp_open+0x20b/0x470 [ 1467.741186][T24380] ? __pfx_do_filp_open+0x10/0x10 [ 1467.741231][T24380] ? alloc_fd+0x471/0x7d0 [ 1467.741262][T24380] do_sys_openat2+0x11b/0x1d0 [ 1467.741296][T24380] ? __pfx_do_sys_openat2+0x10/0x10 [ 1467.741340][T24380] __x64_sys_openat+0x174/0x210 [ 1467.741359][T24380] ? __pfx___x64_sys_openat+0x10/0x10 [ 1467.741389][T24380] do_syscall_64+0xcd/0x4c0 [ 1467.741411][T24380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.741432][T24380] RIP: 0033:0x7f2c1a98eec9 [ 1467.741449][T24380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.741470][T24380] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1467.741489][T24380] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1467.741504][T24380] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1467.741518][T24380] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1467.741531][T24380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.741544][T24380] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1467.741570][T24380] [ 1467.948847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.088614][ T30] audit: type=1800 audit(4294968667.899:114): pid=24382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4071" name="features" dev="configfs" ino=221114 res=0 errno=0 [ 1468.144603][T24389] bridge0: port 3(team0) entered blocking state [ 1468.150993][T24389] bridge0: port 3(team0) entered disabled state [ 1468.157927][T24389] team0: entered allmulticast mode [ 1468.163048][T24389] team_slave_0: entered allmulticast mode [ 1468.169717][T24389] team_slave_1: entered allmulticast mode [ 1468.177555][T24389] team0: entered promiscuous mode [ 1468.182601][T24389] team_slave_0: entered promiscuous mode [ 1468.195224][T24389] team_slave_1: entered promiscuous mode [ 1468.222992][T24389] bridge0: port 3(team0) entered blocking state [ 1468.230488][T24389] bridge0: port 3(team0) entered forwarding state [ 1468.427669][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1468.504888][T24393] bridge0: port 3(team0) entered disabled state [ 1468.786311][T24409] FAULT_INJECTION: forcing a failure. [ 1468.786311][T24409] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.968911][T24409] CPU: 1 UID: 0 PID: 24409 Comm: syz.0.4077 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1468.968946][T24409] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1468.968955][T24409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1468.968967][T24409] Call Trace: [ 1468.968974][T24409] [ 1468.968981][T24409] dump_stack_lvl+0x16c/0x1f0 [ 1468.969016][T24409] should_fail_ex+0x512/0x640 [ 1468.969052][T24409] should_failslab+0xc2/0x120 [ 1468.969098][T24409] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1468.969125][T24409] ? dst_alloc+0x99/0x1a0 [ 1468.969157][T24409] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1468.969178][T24409] dst_alloc+0x99/0x1a0 [ 1468.969228][T24409] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 1468.969260][T24409] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1468.969298][T24409] ip6_pol_route+0xd7b/0x1230 [ 1468.969332][T24409] ? __pfx_ip6_pol_route+0x10/0x10 [ 1468.969363][T24409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1468.969393][T24409] ? kernel_text_address+0x8d/0x100 [ 1468.969416][T24409] ? unwind_get_return_address+0x59/0xa0 [ 1468.969440][T24409] ? arch_stack_walk+0xa6/0x100 [ 1468.969475][T24409] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1468.969507][T24409] fib6_rule_lookup+0x24c/0x720 [ 1468.969539][T24409] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1468.969569][T24409] ? stack_trace_save+0x8e/0xc0 [ 1468.969604][T24409] ? kasan_save_stack+0x42/0x60 [ 1468.969629][T24409] ? kasan_save_stack+0x33/0x60 [ 1468.969653][T24409] ? kasan_record_aux_stack+0xa7/0xc0 [ 1468.969687][T24409] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1468.969727][T24409] ip6_route_output_flags+0x1d0/0x640 [ 1468.969758][T24409] ip6_dst_lookup_tail.constprop.0+0x115a/0x2140 [ 1468.969802][T24409] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1468.969839][T24409] ? __lock_acquire+0x62e/0x1ce0 [ 1468.969884][T24409] ip6_dst_lookup_flow+0x99/0x1d0 [ 1468.969917][T24409] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1468.969947][T24409] ? find_held_lock+0x2b/0x80 [ 1468.969969][T24409] ? rawv6_sendmsg+0xb6e/0x4820 [ 1468.970001][T24409] rawv6_sendmsg+0xe85/0x4820 [ 1468.970026][T24409] ? aa_label_sk_perm+0x195/0x600 [ 1468.970054][T24409] ? __lock_acquire+0x62e/0x1ce0 [ 1468.970087][T24409] ? aa_profile_af_perm+0x321/0x3a0 [ 1468.970120][T24409] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1468.970154][T24409] ? __up_read+0x1f8/0x750 [ 1468.970220][T24409] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1468.970249][T24409] ? inet_sendmsg+0x119/0x140 [ 1468.970274][T24409] inet_sendmsg+0x119/0x140 [ 1468.970302][T24409] ____sys_sendmsg+0x973/0xc70 [ 1468.970328][T24409] ? copy_msghdr_from_user+0x10a/0x160 [ 1468.970363][T24409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1468.970392][T24409] ? kfree+0x24f/0x4d0 [ 1468.970411][T24409] ? __pfx__kstrtoull+0x10/0x10 [ 1468.970448][T24409] ___sys_sendmsg+0x134/0x1d0 [ 1468.970490][T24409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1468.970551][T24409] ? __pfx___might_resched+0x10/0x10 [ 1468.970581][T24409] __sys_sendmmsg+0x200/0x420 [ 1468.970619][T24409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1468.970669][T24409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1468.970717][T24409] ? fput+0x9b/0xd0 [ 1468.970749][T24409] ? ksys_write+0x1ac/0x250 [ 1468.970775][T24409] ? __pfx_ksys_write+0x10/0x10 [ 1468.970807][T24409] __x64_sys_sendmmsg+0x9c/0x100 [ 1468.970840][T24409] ? lockdep_hardirqs_on+0x7c/0x110 [ 1468.970874][T24409] do_syscall_64+0xcd/0x4c0 [ 1468.970896][T24409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.970919][T24409] RIP: 0033:0x7f0cddd8eec9 [ 1468.970937][T24409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.970972][T24409] RSP: 002b:00007f0cdbfb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1468.970992][T24409] RAX: ffffffffffffffda RBX: 00007f0cddfe6180 RCX: 00007f0cddd8eec9 [ 1468.971006][T24409] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1468.971018][T24409] RBP: 00007f0cdbfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.971031][T24409] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 1468.971043][T24409] R13: 00007f0cddfe6218 R14: 00007f0cddfe6180 R15: 00007ffc5fb2fd68 [ 1468.971071][T24409] [ 1469.377448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.721596][T24393] team0 (unregistering): left allmulticast mode [ 1469.728555][T24393] team_slave_0: left allmulticast mode [ 1469.734543][T24393] team_slave_1: left allmulticast mode [ 1469.740064][T24393] team0 (unregistering): left promiscuous mode [ 1469.746209][T24393] team_slave_0: left promiscuous mode [ 1469.751779][T24393] team_slave_1: left promiscuous mode [ 1469.757423][T24393] bridge0: port 3(team0) entered disabled state [ 1469.768179][T24416] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1469.828818][T24393] team0 (unregistering): Port device team_slave_0 removed [ 1469.840687][T24393] team0 (unregistering): Port device team_slave_1 removed [ 1469.858476][T24400] writes to the poll attribute are ignored. [ 1469.865545][T24400] please use driver specific parameters instead. [ 1470.396763][T24431] bridge0: port 3(team0) entered blocking state [ 1470.414365][T24431] bridge0: port 3(team0) entered disabled state [ 1470.442269][T24431] team0: entered allmulticast mode [ 1470.456792][T24431] team_slave_0: entered allmulticast mode [ 1470.468541][T24431] team_slave_1: entered allmulticast mode [ 1470.486287][T24431] team0: entered promiscuous mode [ 1470.518051][T24431] team_slave_0: entered promiscuous mode [ 1470.541540][T24431] team_slave_1: entered promiscuous mode [ 1470.573553][T24431] bridge0: port 3(team0) entered blocking state [ 1470.580088][T24431] bridge0: port 3(team0) entered forwarding state [ 1470.987446][T24436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4086'. [ 1471.810308][T24456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1471.890692][T22228] Bluetooth: hci1: command 0x0406 tx timeout [ 1472.634669][T24475] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1473.361766][T24486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1475.355317][T24500] FAULT_INJECTION: forcing a failure. [ 1475.355317][T24500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1475.417745][T24500] CPU: 1 UID: 0 PID: 24500 Comm: syz.0.4103 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1475.417785][T24500] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1475.417795][T24500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1475.417809][T24500] Call Trace: [ 1475.417817][T24500] [ 1475.417825][T24500] dump_stack_lvl+0x16c/0x1f0 [ 1475.417866][T24500] should_fail_ex+0x512/0x640 [ 1475.417909][T24500] get_futex_key+0x1d0/0x1560 [ 1475.417941][T24500] ? __pfx_get_futex_key+0x10/0x10 [ 1475.417976][T24500] ? __mutex_trylock_common+0xe9/0x250 [ 1475.418019][T24500] futex_wake+0xea/0x530 [ 1475.418057][T24500] ? __pfx_futex_wake+0x10/0x10 [ 1475.418104][T24500] do_futex+0x1e3/0x350 [ 1475.418134][T24500] ? __pfx_do_futex+0x10/0x10 [ 1475.418161][T24500] ? __might_fault+0xe3/0x190 [ 1475.418197][T24500] mm_release+0x24e/0x300 [ 1475.418225][T24500] do_exit+0x68e/0x2bf0 [ 1475.418263][T24500] ? __pfx_do_exit+0x10/0x10 [ 1475.418295][T24500] ? do_raw_spin_lock+0x12c/0x2b0 [ 1475.418331][T24500] ? find_held_lock+0x2b/0x80 [ 1475.418358][T24500] do_group_exit+0xd3/0x2a0 [ 1475.418393][T24500] get_signal+0x2673/0x26d0 [ 1475.418432][T24500] ? __pfx_get_signal+0x10/0x10 [ 1475.418459][T24500] ? do_futex+0x122/0x350 [ 1475.418488][T24500] ? __pfx_do_futex+0x10/0x10 [ 1475.418521][T24500] arch_do_signal_or_restart+0x8f/0x790 [ 1475.418553][T24500] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1475.418601][T24500] exit_to_user_mode_loop+0x84/0x110 [ 1475.418638][T24500] do_syscall_64+0x41c/0x4c0 [ 1475.418664][T24500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.418688][T24500] RIP: 0033:0x7f0cddd8eec9 [ 1475.418707][T24500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.418730][T24500] RSP: 002b:00007f0cdbff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1475.418752][T24500] RAX: fffffffffffffe00 RBX: 00007f0cddfe5fa8 RCX: 00007f0cddd8eec9 [ 1475.418768][T24500] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0cddfe5fa8 [ 1475.418782][T24500] RBP: 00007f0cddfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.418796][T24500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1475.418810][T24500] R13: 00007f0cddfe6038 R14: 00007ffc5fb2fc80 R15: 00007ffc5fb2fd68 [ 1475.418840][T24500] [ 1475.648126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.113587][T24518] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1476.349745][T24525] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1476.569909][T24529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1477.481081][T24549] random: crng reseeded on system resumption [ 1478.879154][T24567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4120'. [ 1479.737761][ T30] audit: type=1800 audit(4294968679.653:115): pid=24583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4123" name="members" dev="configfs" ino=222286 res=0 errno=0 [ 1480.388282][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1480.978346][T24595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1481.061355][T24601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1481.101988][T24602] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1481.890100][T24619] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1483.806141][T24644] nfs4: Unknown parameter 'nfsd' [ 1483.816719][T24642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1484.982448][T24656] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1485.399236][T24668] random: crng reseeded on system resumption [ 1486.684118][T24684] nfs4: Unknown parameter 'nfsd' [ 1489.085632][T24694] kexec: Could not allocate control_code_buffer [ 1489.468907][T24704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4151'. [ 1489.509166][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.515552][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.264499][T24737] kexec: Could not allocate control_code_buffer [ 1494.447048][T24768] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1494.936235][T24773] nfs4: Unknown parameter 'nfsd' [ 1495.906366][T24788] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1496.058038][T24789] nfs4: Unknown parameter 'nfsd' [ 1496.877341][T24799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1498.631750][T24813] nfs4: Unknown parameter 'nfsd' [ 1499.981817][T24819] nfs4: Unknown parameter 'nfsd' [ 1500.119133][T24801] kexec: Could not allocate control_code_buffer [ 1500.751943][T24831] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1501.013288][T24832] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1502.219384][T24854] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1503.091288][T24861] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1503.332385][T24865] ptrace attach of "./syz-executor exec"[16880] was attempted by ""[24865] [ 1503.397678][T24865] FAULT_INJECTION: forcing a failure. [ 1503.397678][T24865] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.432826][T24865] CPU: 1 UID: 0 PID: 24865 Comm: syz.0.4193 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1503.432866][T24865] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1503.432876][T24865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.432890][T24865] Call Trace: [ 1503.432898][T24865] [ 1503.432907][T24865] dump_stack_lvl+0x16c/0x1f0 [ 1503.432949][T24865] should_fail_ex+0x512/0x640 [ 1503.432985][T24865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1503.433016][T24865] should_failslab+0xc2/0x120 [ 1503.433047][T24865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1503.433074][T24865] ? d_instantiate+0x77/0x90 [ 1503.433103][T24865] ? alloc_empty_file+0x55/0x1e0 [ 1503.433142][T24865] alloc_empty_file+0x55/0x1e0 [ 1503.433178][T24865] alloc_file_pseudo+0x13a/0x230 [ 1503.433215][T24865] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1503.433253][T24865] ? do_raw_spin_unlock+0x172/0x230 [ 1503.433293][T24865] __anon_inode_getfile+0xe8/0x280 [ 1503.433325][T24865] anon_inode_getfile_fmode+0x37/0xa0 [ 1503.433356][T24865] __do_sys_fanotify_init+0x96d/0xc00 [ 1503.433398][T24865] do_syscall_64+0xcd/0x4c0 [ 1503.433421][T24865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.433444][T24865] RIP: 0033:0x7f0cddd8eec9 [ 1503.433462][T24865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.433485][T24865] RSP: 002b:00007f0cdbff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1503.433506][T24865] RAX: ffffffffffffffda RBX: 00007f0cddfe5fa0 RCX: 00007f0cddd8eec9 [ 1503.433522][T24865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ba [ 1503.433536][T24865] RBP: 00007f0cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1503.433550][T24865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.433564][T24865] R13: 00007f0cddfe6038 R14: 00007f0cddfe5fa0 R15: 00007ffc5fb2fd68 [ 1503.433593][T24865] [ 1503.883712][T24868] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1504.570243][T24877] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1504.602628][T24880] Unable to find swap-space signature [ 1504.624166][T24881] nfs4: Unknown parameter 'nfsd' [ 1505.376510][T24893] vhci_hcd: default hub control req: 3400 v0000 i0000 l0 [ 1505.870568][T24897] nfs4: Unknown parameter 'nfsd' [ 1506.741512][T24906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1507.261289][T24916] block nbd7: not configured, cannot reconfigure [ 1507.323603][T24913] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1509.506236][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1509.641306][T24953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1510.022820][T24960] block nbd7: not configured, cannot reconfigure [ 1510.301603][T24966] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1510.786720][T12333] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1513.177250][ T30] audit: type=1800 audit(4294968713.067:116): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4227" name="features" dev="configfs" ino=224735 res=0 errno=0 [ 1513.472774][T25006] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1513.848718][T25015] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1514.600478][T25020] random: crng reseeded on system resumption [ 1516.304159][T25052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1517.036302][T25064] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1519.475519][T25091] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1519.565724][T25094] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1519.840042][T25104] block nbd7: not configured, cannot reconfigure [ 1521.506750][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'. [ 1521.568242][T25143] block nbd7: not configured, cannot reconfigure [ 1522.038743][T25151] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1522.459347][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1522.783047][T25168] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4268'. [ 1525.606542][T25194] FAULT_INJECTION: forcing a failure. [ 1525.606542][T25194] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.885062][T25194] CPU: 1 UID: 0 PID: 25194 Comm: syz.1.4273 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1525.885103][T25194] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1525.885112][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1525.885126][T25194] Call Trace: [ 1525.885133][T25194] [ 1525.885142][T25194] dump_stack_lvl+0x16c/0x1f0 [ 1525.885181][T25194] should_fail_ex+0x512/0x640 [ 1525.885216][T25194] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1525.885243][T25194] should_failslab+0xc2/0x120 [ 1525.885272][T25194] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1525.885296][T25194] ? snd_seq_pool_new+0x44/0x230 [ 1525.885324][T25194] ? __pfx_snd_seq_open+0x10/0x10 [ 1525.885346][T25194] snd_seq_pool_new+0x44/0x230 [ 1525.885372][T25194] seq_create_client1+0x66/0x5e0 [ 1525.885396][T25194] ? __pfx_snd_seq_open+0x10/0x10 [ 1525.885417][T25194] snd_seq_open+0x59/0x550 [ 1525.885438][T25194] ? __pfx_snd_seq_open+0x10/0x10 [ 1525.885458][T25194] snd_open+0x22a/0x4c0 [ 1525.885480][T25194] ? __pfx_snd_open+0x10/0x10 [ 1525.885500][T25194] chrdev_open+0x231/0x6a0 [ 1525.885528][T25194] ? __pfx_apparmor_file_open+0x10/0x10 [ 1525.885553][T25194] ? __pfx_chrdev_open+0x10/0x10 [ 1525.885583][T25194] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1525.885613][T25194] do_dentry_open+0x97f/0x1530 [ 1525.885642][T25194] ? __pfx_chrdev_open+0x10/0x10 [ 1525.885675][T25194] vfs_open+0x82/0x3f0 [ 1525.885712][T25194] path_openat+0x1de4/0x2cb0 [ 1525.885748][T25194] ? __pfx_path_openat+0x10/0x10 [ 1525.885781][T25194] do_filp_open+0x20b/0x470 [ 1525.885807][T25194] ? __pfx_do_filp_open+0x10/0x10 [ 1525.885853][T25194] ? alloc_fd+0x471/0x7d0 [ 1525.885884][T25194] do_sys_openat2+0x11b/0x1d0 [ 1525.885918][T25194] ? __pfx_do_sys_openat2+0x10/0x10 [ 1525.885964][T25194] __x64_sys_openat+0x174/0x210 [ 1525.885983][T25194] ? __pfx___x64_sys_openat+0x10/0x10 [ 1525.886025][T25194] do_syscall_64+0xcd/0x4c0 [ 1525.886049][T25194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.886073][T25194] RIP: 0033:0x7f2c1a98eec9 [ 1525.886092][T25194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.886114][T25194] RSP: 002b:00007f2c1b8d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1525.886135][T25194] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa0 RCX: 00007f2c1a98eec9 [ 1525.886149][T25194] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1525.886163][T25194] RBP: 00007f2c1aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1525.886177][T25194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.886190][T25194] R13: 00007f2c1abe6038 R14: 00007f2c1abe5fa0 R15: 00007ffeb0b34718 [ 1525.886217][T25194] [ 1526.155461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.221579][T25188] kexec: Could not allocate control_code_buffer [ 1527.917432][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1528.748746][T25229] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1528.855394][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4280'. [ 1529.024594][T25229] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1529.471071][T25239] FAULT_INJECTION: forcing a failure. [ 1529.471071][T25239] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1529.550286][T25239] CPU: 1 UID: 0 PID: 25239 Comm: syz.1.4284 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1529.550341][T25239] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1529.550350][T25239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1529.550363][T25239] Call Trace: [ 1529.550371][T25239] [ 1529.550379][T25239] dump_stack_lvl+0x16c/0x1f0 [ 1529.550418][T25239] should_fail_ex+0x512/0x640 [ 1529.550456][T25239] get_futex_key+0x1d0/0x1560 [ 1529.550487][T25239] ? __pfx_get_futex_key+0x10/0x10 [ 1529.550511][T25239] ? futex_private_hash_put+0x176/0x300 [ 1529.550545][T25239] futex_wake+0xea/0x530 [ 1529.550575][T25239] ? futex_wait+0x120/0x380 [ 1529.550607][T25239] ? __pfx_futex_wait+0x10/0x10 [ 1529.550639][T25239] ? __pfx_futex_wake+0x10/0x10 [ 1529.550674][T25239] ? vfs_write+0x15d/0x11d0 [ 1529.550706][T25239] do_futex+0x1e3/0x350 [ 1529.550733][T25239] ? __pfx_do_futex+0x10/0x10 [ 1529.550762][T25239] ? fdget+0x187/0x210 [ 1529.550789][T25239] __x64_sys_futex+0x1e0/0x4c0 [ 1529.550827][T25239] ? __pfx___x64_sys_futex+0x10/0x10 [ 1529.550866][T25239] do_syscall_64+0xcd/0x4c0 [ 1529.550888][T25239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.550909][T25239] RIP: 0033:0x7f2c1a98eec9 [ 1529.550926][T25239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.550947][T25239] RSP: 002b:00007f2c1b8d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1529.550967][T25239] RAX: ffffffffffffffda RBX: 00007f2c1abe5fa8 RCX: 00007f2c1a98eec9 [ 1529.550982][T25239] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c1abe5fac [ 1529.550995][T25239] RBP: 00007f2c1abe5fa0 R08: 00007f2c1b8d6000 R09: 0000000000000000 [ 1529.551009][T25239] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1529.551022][T25239] R13: 00007f2c1abe6038 R14: 00007ffeb0b34630 R15: 00007ffeb0b34718 [ 1529.551049][T25239] [ 1529.774247][ T30] audit: type=1800 audit(4294968729.658:117): pid=25242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4283" name="features" dev="configfs" ino=226094 res=0 errno=0 [ 1530.872555][T25255] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1531.115258][T25261] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1531.467420][T25266] FAULT_INJECTION: forcing a failure. [ 1531.467420][T25266] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.697096][T25266] CPU: 1 UID: 0 PID: 25266 Comm: syz.4.4291 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1531.697131][T25266] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1531.697139][T25266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1531.697151][T25266] Call Trace: [ 1531.697157][T25266] [ 1531.697165][T25266] dump_stack_lvl+0x16c/0x1f0 [ 1531.697200][T25266] should_fail_ex+0x512/0x640 [ 1531.697232][T25266] ? __kvmalloc_node_noprof+0x124/0x620 [ 1531.697258][T25266] should_failslab+0xc2/0x120 [ 1531.697285][T25266] __kvmalloc_node_noprof+0x137/0x620 [ 1531.697308][T25266] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1531.697328][T25266] ? proc_sys_call_handler+0x281/0x570 [ 1531.697356][T25266] ? ns_capable_noaudit+0xda/0x110 [ 1531.697383][T25266] ? proc_sys_call_handler+0x281/0x570 [ 1531.697411][T25266] proc_sys_call_handler+0x281/0x570 [ 1531.697442][T25266] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1531.697470][T25266] ? trace_kmalloc+0x2b/0xd0 [ 1531.697506][T25266] copy_splice_read+0x618/0xc20 [ 1531.697532][T25266] ? __pfx_copy_splice_read+0x10/0x10 [ 1531.697555][T25266] ? look_up_lock_class+0x59/0x150 [ 1531.697590][T25266] ? lockdep_init_map_type+0x5c/0x280 [ 1531.697620][T25266] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1531.697651][T25266] ? __pfx_copy_splice_read+0x10/0x10 [ 1531.697688][T25266] do_splice_read+0x282/0x370 [ 1531.697715][T25266] splice_direct_to_actor+0x2a1/0xa30 [ 1531.697741][T25266] ? __pfx_direct_splice_actor+0x10/0x10 [ 1531.697772][T25266] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1531.697795][T25266] ? get_pid_task+0xfc/0x250 [ 1531.697843][T25266] do_splice_direct+0x174/0x240 [ 1531.697868][T25266] ? __pfx_do_splice_direct+0x10/0x10 [ 1531.697893][T25266] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1531.697922][T25266] ? rw_verify_area+0xcf/0x6c0 [ 1531.697949][T25266] do_sendfile+0xb06/0xe50 [ 1531.697979][T25266] ? __pfx_do_sendfile+0x10/0x10 [ 1531.698005][T25266] ? __fget_files+0x20e/0x3c0 [ 1531.698038][T25266] __x64_sys_sendfile64+0x1d8/0x220 [ 1531.698069][T25266] ? ksys_write+0x1ac/0x250 [ 1531.698096][T25266] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1531.698137][T25266] do_syscall_64+0xcd/0x4c0 [ 1531.698161][T25266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.698184][T25266] RIP: 0033:0x7f6a0bb8eec9 [ 1531.698202][T25266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.698225][T25266] RSP: 002b:00007f6a0c959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1531.698247][T25266] RAX: ffffffffffffffda RBX: 00007f6a0bde6090 RCX: 00007f6a0bb8eec9 [ 1531.698263][T25266] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1531.698276][T25266] RBP: 00007f6a0c959090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.698290][T25266] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 1531.698304][T25266] R13: 00007f6a0bde6128 R14: 00007f6a0bde6090 R15: 00007fffb5841668 [ 1531.698333][T25266] [ 1533.365447][T25279] kexec: Could not allocate control_code_buffer [ 1533.761644][T25301] block nbd7: not configured, cannot reconfigure [ 1534.148736][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1534.284716][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1534.902068][T25317] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1535.365726][T25326] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1536.793531][T25359] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1537.171056][T25365] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1537.195019][ T30] audit: type=1800 audit(4294968737.085:118): pid=25366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4310" name="features" dev="configfs" ino=226780 res=0 errno=0 [ 1537.870698][T25378] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1538.245022][T25384] nfs4: Unknown parameter 'nfsd' [ 1538.962636][T25393] block nbd7: not configured, cannot reconfigure [ 1541.431649][T25443] misc userio: No port type given on /dev/userio [ 1541.554248][T25443] random: crng reseeded on system resumption [ 1542.270880][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4338'. [ 1543.344368][T25492] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1543.855284][T25499] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:0 is already present [ 1544.752609][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1546.348070][T25541] kexec: Could not allocate control_code_buffer [ 1546.666547][T25560] nfs4: Unknown parameter 'nfsd' [ 1547.545494][T25577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1547.619514][T25577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1547.710634][T25577] netlink: 'syz.0.4364': attribute type 1 has an invalid length. [ 1547.753259][T25577] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1547.821590][T25583] ima: policy update failed [ 1547.857182][ T30] audit: type=1802 audit(4294968747.749:119): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4364" res=0 errno=0 [ 1547.990162][T25590] mkiss: ax0: crc mode is auto. [ 1548.134883][T25594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1550.974195][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.981996][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.018160][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4378'. [ 1551.032288][T25632] FAULT_INJECTION: forcing a failure. [ 1551.032288][T25632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1551.108543][T25632] CPU: 1 UID: 0 PID: 25632 Comm: syz.3.4380 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1551.108586][T25632] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1551.108596][T25632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1551.108610][T25632] Call Trace: [ 1551.108619][T25632] [ 1551.108628][T25632] dump_stack_lvl+0x16c/0x1f0 [ 1551.108670][T25632] should_fail_ex+0x512/0x640 [ 1551.108713][T25632] get_futex_key+0x1d0/0x1560 [ 1551.108743][T25632] ? get_pid_task+0x106/0x250 [ 1551.108778][T25632] ? __pfx_get_futex_key+0x10/0x10 [ 1551.108805][T25632] ? rcu_is_watching+0x12/0xc0 [ 1551.108829][T25632] ? kfree+0x24f/0x4d0 [ 1551.108860][T25632] futex_wake+0xea/0x530 [ 1551.108898][T25632] ? __pfx_futex_wake+0x10/0x10 [ 1551.108933][T25632] ? __pfx_vfs_writev+0x10/0x10 [ 1551.108958][T25632] ? __mutex_lock+0x1c5/0x1060 [ 1551.108981][T25632] ? do_writev+0x218/0x340 [ 1551.109012][T25632] do_futex+0x1e3/0x350 [ 1551.109043][T25632] ? __pfx_do_futex+0x10/0x10 [ 1551.109072][T25632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1551.109119][T25632] __x64_sys_futex+0x1e0/0x4c0 [ 1551.109166][T25632] ? __pfx___x64_sys_futex+0x10/0x10 [ 1551.109197][T25632] ? __pfx_do_writev+0x10/0x10 [ 1551.109230][T25632] do_syscall_64+0xcd/0x4c0 [ 1551.109253][T25632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.109276][T25632] RIP: 0033:0x7f150478eec9 [ 1551.109294][T25632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.109317][T25632] RSP: 002b:00007f15056c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1551.109338][T25632] RAX: ffffffffffffffda RBX: 00007f15049e5fa8 RCX: 00007f150478eec9 [ 1551.109353][T25632] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15049e5fac [ 1551.109368][T25632] RBP: 00007f15049e5fa0 R08: 00007f15056c4000 R09: 0000000000000000 [ 1551.109392][T25632] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1551.109406][T25632] R13: 00007f15049e6038 R14: 00007ffe76134670 R15: 00007ffe76134758 [ 1551.109435][T25632] [ 1551.847827][T25650] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1552.093614][T25654] snd_aloop snd_aloop.0: control 16781581:65580:5:'x?F/zF˷fC:7 is already present [ 1552.479821][T25661] nfs4: Unknown parameter 'nfsd' [ 1552.514657][T25663] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1553.042632][T25670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1553.482962][T25682] FAULT_INJECTION: forcing a failure. [ 1553.482962][T25682] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.559633][T25682] CPU: 1 UID: 0 PID: 25682 Comm: syz.4.4391 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1553.559676][T25682] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1553.559686][T25682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1553.559700][T25682] Call Trace: [ 1553.559708][T25682] [ 1553.559717][T25682] dump_stack_lvl+0x16c/0x1f0 [ 1553.559760][T25682] should_fail_ex+0x512/0x640 [ 1553.559796][T25682] ? fs_reclaim_acquire+0xae/0x150 [ 1553.559834][T25682] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1553.559869][T25682] should_failslab+0xc2/0x120 [ 1553.559901][T25682] __kmalloc_noprof+0xd2/0x510 [ 1553.559942][T25682] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1553.559980][T25682] ? tomoyo_profile+0x47/0x60 [ 1553.560005][T25682] tomoyo_path_number_perm+0x245/0x580 [ 1553.560033][T25682] ? tomoyo_path_number_perm+0x237/0x580 [ 1553.560065][T25682] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1553.560096][T25682] ? find_held_lock+0x2b/0x80 [ 1553.560145][T25682] ? find_held_lock+0x2b/0x80 [ 1553.560167][T25682] ? hook_file_ioctl_common+0x145/0x410 [ 1553.560205][T25682] ? __fget_files+0x20e/0x3c0 [ 1553.560235][T25682] security_file_ioctl+0x9b/0x240 [ 1553.560267][T25682] __x64_sys_ioctl+0xb7/0x210 [ 1553.560307][T25682] do_syscall_64+0xcd/0x4c0 [ 1553.560330][T25682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.560354][T25682] RIP: 0033:0x7f6a0bb8eec9 [ 1553.560371][T25682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.560394][T25682] RSP: 002b:00007f6a0c97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.560416][T25682] RAX: ffffffffffffffda RBX: 00007f6a0bde5fa0 RCX: 00007f6a0bb8eec9 [ 1553.560431][T25682] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 1553.560445][T25682] RBP: 00007f6a0c97a090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.560460][T25682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.560474][T25682] R13: 00007f6a0bde6038 R14: 00007f6a0bde5fa0 R15: 00007fffb5841668 [ 1553.560504][T25682] [ 1553.560513][T25682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1553.806241][T25680] FAULT_INJECTION: forcing a failure. [ 1553.806241][T25680] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.862844][T25680] CPU: 1 UID: 0 PID: 25680 Comm: syz.0.4388 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1553.862891][T25680] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1553.862901][T25680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1553.862916][T25680] Call Trace: [ 1553.862924][T25680] [ 1553.862933][T25680] dump_stack_lvl+0x16c/0x1f0 [ 1553.862975][T25680] should_fail_ex+0x512/0x640 [ 1553.863013][T25680] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1553.863042][T25680] should_failslab+0xc2/0x120 [ 1553.863074][T25680] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1553.863099][T25680] ? kobject_uevent_env+0x265/0x1870 [ 1553.863130][T25680] kobject_uevent_env+0x265/0x1870 [ 1553.863157][T25680] ? __pfx_dev_uevent_name+0x10/0x10 [ 1553.863191][T25680] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1553.863216][T25680] ? bus_to_subsys+0x131/0x160 [ 1553.863246][T25680] ? bus_to_subsys+0x131/0x160 [ 1553.863278][T25680] device_add+0x10dd/0x1aa0 [ 1553.863307][T25680] ? __pfx_device_add+0x10/0x10 [ 1553.863332][T25680] ? lockdep_init_map_type+0x5c/0x280 [ 1553.863368][T25680] ? __init_waitqueue_head+0xca/0x150 [ 1553.863412][T25680] wakeup_source_device_create+0x214/0x2a0 [ 1553.863441][T25680] wakeup_source_sysfs_add+0x1c/0x90 [ 1553.863473][T25680] wakeup_source_register+0x154/0x3e0 [ 1553.863512][T25680] ep_create_wakeup_source+0x1dd/0x2e0 [ 1553.863539][T25680] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1553.863571][T25680] ? do_epoll_ctl+0x1565/0x3790 [ 1553.863616][T25680] do_epoll_ctl+0x1f60/0x3790 [ 1553.863654][T25680] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1553.863678][T25680] ? find_held_lock+0x2b/0x80 [ 1553.863700][T25680] ? __might_fault+0xe3/0x190 [ 1553.863726][T25680] ? __might_fault+0xe3/0x190 [ 1553.863764][T25680] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1553.863789][T25680] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1553.863816][T25680] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1553.863852][T25680] do_syscall_64+0xcd/0x4c0 [ 1553.863875][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.863905][T25680] RIP: 0033:0x7f0cddd8eec9 [ 1553.863923][T25680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.863947][T25680] RSP: 002b:00007f0cdbfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1553.863969][T25680] RAX: ffffffffffffffda RBX: 00007f0cddfe6090 RCX: 00007f0cddd8eec9 [ 1553.863984][T25680] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 1553.863999][T25680] RBP: 00007f0cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1553.864013][T25680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.864026][T25680] R13: 00007f0cddfe6128 R14: 00007f0cddfe6090 R15: 00007ffc5fb2fd68 [ 1553.864055][T25680] [ 1554.144359][T25686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 1555.111890][T25704] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1555.157393][T25707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4397'. [ 1555.263944][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4398'. [ 1555.280939][T25708] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1555.615866][T25720] random: crng reseeded on system resumption [ 1556.449742][T25719] FAULT_INJECTION: forcing a failure. [ 1556.449742][T25719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.076539][T25719] CPU: 1 UID: 0 PID: 25719 Comm: syz.0.4401 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1557.076582][T25719] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1557.076591][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1557.076604][T25719] Call Trace: [ 1557.076612][T25719] [ 1557.076620][T25719] dump_stack_lvl+0x16c/0x1f0 [ 1557.076666][T25719] should_fail_ex+0x512/0x640 [ 1557.076724][T25719] _copy_from_user+0x2e/0xd0 [ 1557.076748][T25719] get_timespec64+0x8b/0x1b0 [ 1557.076775][T25719] ? __pfx_get_timespec64+0x10/0x10 [ 1557.076800][T25719] ? ktime_get+0x200/0x310 [ 1557.076831][T25719] __x64_sys_futex+0x288/0x4c0 [ 1557.076862][T25719] ? __pfx___x64_sys_futex+0x10/0x10 [ 1557.076890][T25719] ? xfd_validate_state+0x61/0x180 [ 1557.076929][T25719] do_syscall_64+0xcd/0x4c0 [ 1557.076950][T25719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.076972][T25719] RIP: 0033:0x7f0cddd8eec9 [ 1557.076988][T25719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.077008][T25719] RSP: 002b:00007ffc5fb2fec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1557.077028][T25719] RAX: ffffffffffffffda RBX: 000000000017c027 RCX: 00007f0cddd8eec9 [ 1557.077042][T25719] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0cddfe609c [ 1557.077055][T25719] RBP: 0000000000000032 R08: 00007f0cdeb3d000 R09: 0000000f5fb301bf [ 1557.077068][T25719] R10: 00007ffc5fb2ffc0 R11: 0000000000000246 R12: 00007f0cddfe609c [ 1557.077082][T25719] R13: 00007ffc5fb2ffc0 R14: 000000000017c059 R15: 00007ffc5fb2ffe0 [ 1557.077118][T25719] [ 1557.462086][T25722] FAULT_INJECTION: forcing a failure. [ 1557.462086][T25722] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.512046][T25724] kexec: Could not allocate control_code_buffer [ 1557.528592][T25722] CPU: 1 UID: 0 PID: 25722 Comm: syz.0.4401 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1557.528633][T25722] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1557.528643][T25722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1557.528657][T25722] Call Trace: [ 1557.528665][T25722] [ 1557.528674][T25722] dump_stack_lvl+0x16c/0x1f0 [ 1557.528717][T25722] should_fail_ex+0x512/0x640 [ 1557.528755][T25722] ? __kmalloc_noprof+0xbf/0x510 [ 1557.528785][T25722] ? sk_prot_alloc+0x1a8/0x2a0 [ 1557.528809][T25722] should_failslab+0xc2/0x120 [ 1557.528842][T25722] __kmalloc_noprof+0xd2/0x510 [ 1557.528889][T25722] sk_prot_alloc+0x1a8/0x2a0 [ 1557.528915][T25722] sk_alloc+0x36/0xc20 [ 1557.528961][T25722] __netlink_create+0x5e/0x2c0 [ 1557.528988][T25722] ? __wake_up+0x3f/0x60 [ 1557.529013][T25722] netlink_create+0x39e/0x620 [ 1557.529042][T25722] ? __pfx_genl_bind+0x10/0x10 [ 1557.529061][T25722] ? __pfx_genl_unbind+0x10/0x10 [ 1557.529080][T25722] ? __pfx_genl_release+0x10/0x10 [ 1557.529104][T25722] __sock_create+0x335/0x8d0 [ 1557.529134][T25722] __sys_socket+0x14d/0x260 [ 1557.529161][T25722] ? __pfx___sys_socket+0x10/0x10 [ 1557.529207][T25722] ? xfd_validate_state+0x61/0x180 [ 1557.529249][T25722] __x64_sys_socket+0x72/0xb0 [ 1557.529277][T25722] ? lockdep_hardirqs_on+0x7c/0x110 [ 1557.529313][T25722] do_syscall_64+0xcd/0x4c0 [ 1557.529336][T25722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.529360][T25722] RIP: 0033:0x7f0cddd8eec9 [ 1557.529379][T25722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.529403][T25722] RSP: 002b:00007f0cdbff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1557.529426][T25722] RAX: ffffffffffffffda RBX: 00007f0cddfe5fa0 RCX: 00007f0cddd8eec9 [ 1557.529442][T25722] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1557.529457][T25722] RBP: 00007f0cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1557.529471][T25722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.529486][T25722] R13: 00007f0cddfe6038 R14: 00007f0cddfe5fa0 R15: 00007ffc5fb2fd68 [ 1557.529516][T25722] [ 1558.523958][T25739] can: request_module (can-proto-4) failed. [ 1559.283982][T25759] snd_aloop snd_aloop.0: control 16781581:65539:44:'x?F/zF˷fC:7 is already present [ 1559.888252][T25774] ================================================================== [ 1559.896372][T25774] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1559.904098][T25774] Read of size 8 at addr ffff88802ac93218 by task syz.3.4414/25774 [ 1559.911979][T25774] [ 1559.914299][T25774] CPU: 1 UID: 0 PID: 25774 Comm: syz.3.4414 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1559.914330][T25774] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1559.914338][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1559.914350][T25774] Call Trace: [ 1559.914358][T25774] [ 1559.914365][T25774] dump_stack_lvl+0x116/0x1f0 [ 1559.914397][T25774] print_report+0xcd/0x630 [ 1559.914423][T25774] ? __virt_addr_valid+0x81/0x610 [ 1559.914448][T25774] ? __phys_addr+0xe8/0x180 [ 1559.914472][T25774] ? dvb_device_open+0x36a/0x3b0 [ 1559.914489][T25774] kasan_report+0xe0/0x110 [ 1559.914514][T25774] ? dvb_device_open+0x36a/0x3b0 [ 1559.914534][T25774] ? __pfx_dvb_device_open+0x10/0x10 [ 1559.914552][T25774] dvb_device_open+0x36a/0x3b0 [ 1559.914570][T25774] ? __pfx_dvb_device_open+0x10/0x10 [ 1559.914592][T25774] chrdev_open+0x231/0x6a0 [ 1559.914618][T25774] ? __pfx_apparmor_file_open+0x10/0x10 [ 1559.914641][T25774] ? __pfx_chrdev_open+0x10/0x10 [ 1559.914667][T25774] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1559.914692][T25774] do_dentry_open+0x97f/0x1530 [ 1559.914716][T25774] ? __pfx_chrdev_open+0x10/0x10 [ 1559.914744][T25774] vfs_open+0x82/0x3f0 [ 1559.914773][T25774] path_openat+0x1de4/0x2cb0 [ 1559.914800][T25774] ? __pfx_path_openat+0x10/0x10 [ 1559.914826][T25774] do_filp_open+0x20b/0x470 [ 1559.914849][T25774] ? __pfx_do_filp_open+0x10/0x10 [ 1559.914881][T25774] ? alloc_fd+0x471/0x7d0 [ 1559.914904][T25774] do_sys_openat2+0x11b/0x1d0 [ 1559.914934][T25774] ? __pfx_do_sys_openat2+0x10/0x10 [ 1559.914963][T25774] ? __pfx_do_sys_openat2+0x10/0x10 [ 1559.914997][T25774] __x64_sys_openat+0x174/0x210 [ 1559.915015][T25774] ? __pfx___x64_sys_openat+0x10/0x10 [ 1559.915037][T25774] do_syscall_64+0xcd/0x4c0 [ 1559.915056][T25774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.915076][T25774] RIP: 0033:0x7f150478eec9 [ 1559.915091][T25774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.915111][T25774] RSP: 002b:00007f15056c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1559.915130][T25774] RAX: ffffffffffffffda RBX: 00007f15049e5fa0 RCX: 00007f150478eec9 [ 1559.915143][T25774] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1559.915156][T25774] RBP: 00007f1504811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.915168][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.915180][T25774] R13: 00007f15049e6038 R14: 00007f15049e5fa0 R15: 00007ffe76134758 [ 1559.915200][T25774] [ 1559.915207][T25774] [ 1560.167926][T25774] Allocated by task 1: [ 1560.172003][T25774] kasan_save_stack+0x33/0x60 [ 1560.176681][T25774] kasan_save_track+0x14/0x30 [ 1560.181353][T25774] __kasan_kmalloc+0xaa/0xb0 [ 1560.185947][T25774] dvb_register_device+0x1e4/0x2370 [ 1560.191152][T25774] dvb_register_frontend+0x5a6/0x880 [ 1560.196451][T25774] vidtv_bridge_probe+0x459/0xa90 [ 1560.201480][T25774] platform_probe+0x106/0x1d0 [ 1560.206179][T25774] really_probe+0x23e/0xa90 [ 1560.210716][T25774] __driver_probe_device+0x1de/0x440 [ 1560.216005][T25774] driver_probe_device+0x4c/0x1b0 [ 1560.221040][T25774] __driver_attach+0x283/0x580 [ 1560.225807][T25774] bus_for_each_dev+0x13b/0x1d0 [ 1560.230659][T25774] bus_add_driver+0x2e9/0x690 [ 1560.235340][T25774] driver_register+0x15c/0x4b0 [ 1560.240101][T25774] vidtv_bridge_init+0x45/0x80 [ 1560.244877][T25774] do_one_initcall+0x120/0x6e0 [ 1560.249644][T25774] kernel_init_freeable+0x5c2/0x910 [ 1560.254841][T25774] kernel_init+0x1c/0x2b0 [ 1560.259166][T25774] ret_from_fork+0x56d/0x730 [ 1560.263759][T25774] ret_from_fork_asm+0x1a/0x30 [ 1560.268523][T25774] [ 1560.270840][T25774] Freed by task 25708: [ 1560.274893][T25774] kasan_save_stack+0x33/0x60 [ 1560.279576][T25774] kasan_save_track+0x14/0x30 [ 1560.284427][T25774] kasan_save_free_info+0x3b/0x60 [ 1560.289451][T25774] __kasan_slab_free+0x60/0x70 [ 1560.294215][T25774] kfree+0x2b4/0x4d0 [ 1560.298113][T25774] dvb_device_put.part.0+0x60/0x90 [ 1560.303242][T25774] dvb_device_open+0x2a4/0x3b0 [ 1560.308003][T25774] chrdev_open+0x231/0x6a0 [ 1560.312430][T25774] do_dentry_open+0x97f/0x1530 [ 1560.317189][T25774] vfs_open+0x82/0x3f0 [ 1560.321274][T25774] path_openat+0x1de4/0x2cb0 [ 1560.325881][T25774] do_filp_open+0x20b/0x470 [ 1560.330395][T25774] do_sys_openat2+0x11b/0x1d0 [ 1560.335089][T25774] __x64_sys_openat+0x174/0x210 [ 1560.339934][T25774] do_syscall_64+0xcd/0x4c0 [ 1560.344431][T25774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.350328][T25774] [ 1560.352661][T25774] The buggy address belongs to the object at ffff88802ac93200 [ 1560.352661][T25774] which belongs to the cache kmalloc-256 of size 256 [ 1560.366809][T25774] The buggy address is located 24 bytes inside of [ 1560.366809][T25774] freed 256-byte region [ffff88802ac93200, ffff88802ac93300) [ 1560.380513][T25774] [ 1560.382826][T25774] The buggy address belongs to the physical page: [ 1560.389234][T25774] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ac92 [ 1560.397996][T25774] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1560.406498][T25774] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1560.414042][T25774] page_type: f5(slab) [ 1560.418022][T25774] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1560.426610][T25774] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1560.435190][T25774] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1560.443871][T25774] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1560.452556][T25774] head: 00fff00000000001 ffffea0000ab2481 00000000ffffffff 00000000ffffffff [ 1560.461223][T25774] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1560.469880][T25774] page dumped because: kasan: bad access detected [ 1560.476368][T25774] page_owner tracks the page as allocated [ 1560.482092][T25774] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24965863128, free_ts 0 [ 1560.501816][T25774] post_alloc_hook+0x1c0/0x230 [ 1560.506592][T25774] get_page_from_freelist+0x132b/0x38e0 [ 1560.512140][T25774] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1560.518039][T25774] alloc_pages_mpol+0x1fb/0x550 [ 1560.522899][T25774] new_slab+0x247/0x330 [ 1560.527053][T25774] ___slab_alloc+0xcf2/0x1750 [ 1560.531723][T25774] __slab_alloc.constprop.0+0x56/0xb0 [ 1560.537091][T25774] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1560.542367][T25774] bus_add_driver+0x92/0x690 [ 1560.546958][T25774] driver_register+0x15c/0x4b0 [ 1560.551717][T25774] usb_register_driver+0x216/0x4d0 [ 1560.556829][T25774] do_one_initcall+0x120/0x6e0 [ 1560.561627][T25774] kernel_init_freeable+0x5c2/0x910 [ 1560.566831][T25774] kernel_init+0x1c/0x2b0 [ 1560.571158][T25774] ret_from_fork+0x56d/0x730 [ 1560.575761][T25774] ret_from_fork_asm+0x1a/0x30 [ 1560.580532][T25774] page_owner free stack trace missing [ 1560.585892][T25774] [ 1560.588223][T25774] Memory state around the buggy address: [ 1560.593848][T25774] ffff88802ac93100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1560.601923][T25774] ffff88802ac93180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1560.609986][T25774] >ffff88802ac93200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.618044][T25774] ^ [ 1560.622888][T25774] ffff88802ac93280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1560.630937][T25774] ffff88802ac93300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1560.638990][T25774] ================================================================== [ 1561.619702][T25784] FAULT_INJECTION: forcing a failure. [ 1561.619702][T25784] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.649719][T25784] CPU: 1 UID: 0 PID: 25784 Comm: syz.3.4414 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1561.649755][T25784] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1561.649763][T25784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1561.649776][T25784] Call Trace: [ 1561.649783][T25784] [ 1561.649791][T25784] dump_stack_lvl+0x16c/0x1f0 [ 1561.649828][T25784] should_fail_ex+0x512/0x640 [ 1561.649861][T25784] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1561.649891][T25784] should_failslab+0xc2/0x120 [ 1561.649931][T25784] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1561.649957][T25784] ? __alloc_skb+0x2b2/0x380 [ 1561.649991][T25784] __alloc_skb+0x2b2/0x380 [ 1561.650020][T25784] ? __pfx___alloc_skb+0x10/0x10 [ 1561.650052][T25784] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1561.650085][T25784] ? __lock_acquire+0xb97/0x1ce0 [ 1561.650117][T25784] netlink_alloc_large_skb+0x69/0x130 [ 1561.650152][T25784] netlink_sendmsg+0x6a1/0xdd0 [ 1561.650188][T25784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.650229][T25784] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1561.650257][T25784] ____sys_sendmsg+0xa95/0xc70 [ 1561.650281][T25784] ? copy_msghdr_from_user+0x10a/0x160 [ 1561.650313][T25784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.650349][T25784] ___sys_sendmsg+0x134/0x1d0 [ 1561.650381][T25784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.650444][T25784] __sys_sendmsg+0x16d/0x220 [ 1561.650476][T25784] ? __pfx___sys_sendmsg+0x10/0x10 [ 1561.650525][T25784] do_syscall_64+0xcd/0x4c0 [ 1561.650546][T25784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.650567][T25784] RIP: 0033:0x7f150478eec9 [ 1561.650583][T25784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.650604][T25784] RSP: 002b:00007f15056a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.650624][T25784] RAX: ffffffffffffffda RBX: 00007f15049e6090 RCX: 00007f150478eec9 [ 1561.650638][T25784] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000007 [ 1561.650651][T25784] RBP: 00007f15056a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.650663][T25784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.650676][T25784] R13: 00007f15049e6128 R14: 00007f15049e6090 R15: 00007ffe76134758 [ 1561.650702][T25784] [ 1562.001380][T25779] kexec: Could not allocate control_code_buffer [ 1562.058758][T25774] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1562.065986][T25774] CPU: 1 UID: 0 PID: 25774 Comm: syz.3.4414 Tainted: G U I syzkaller #0 PREEMPT(full) [ 1562.077019][T25774] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1562.083001][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1562.093051][T25774] Call Trace: [ 1562.096346][T25774] [ 1562.099274][T25774] dump_stack_lvl+0x3d/0x1f0 [ 1562.103885][T25774] vpanic+0x6e8/0x7a0 [ 1562.107894][T25774] ? __pfx_vpanic+0x10/0x10 [ 1562.112412][T25774] ? __pfx_vprintk_emit+0x10/0x10 [ 1562.117439][T25774] ? dvb_device_open+0x36a/0x3b0 [ 1562.122376][T25774] panic+0xca/0xd0 [ 1562.126105][T25774] ? __pfx_panic+0x10/0x10 [ 1562.130526][T25774] ? dvb_device_open+0x36a/0x3b0 [ 1562.135474][T25774] ? preempt_schedule_common+0x44/0xc0 [ 1562.141027][T25774] ? preempt_schedule_thunk+0x16/0x30 [ 1562.146405][T25774] ? check_panic_on_warn+0x1f/0xb0 [ 1562.151520][T25774] check_panic_on_warn+0xab/0xb0 [ 1562.156468][T25774] end_report+0x107/0x170 [ 1562.160798][T25774] kasan_report+0xee/0x110 [ 1562.165220][T25774] ? dvb_device_open+0x36a/0x3b0 [ 1562.170171][T25774] ? __pfx_dvb_device_open+0x10/0x10 [ 1562.175454][T25774] dvb_device_open+0x36a/0x3b0 [ 1562.180219][T25774] ? __pfx_dvb_device_open+0x10/0x10 [ 1562.185502][T25774] chrdev_open+0x231/0x6a0 [ 1562.189918][T25774] ? __pfx_apparmor_file_open+0x10/0x10 [ 1562.195458][T25774] ? __pfx_chrdev_open+0x10/0x10 [ 1562.200415][T25774] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1562.206838][T25774] do_dentry_open+0x97f/0x1530 [ 1562.211613][T25774] ? __pfx_chrdev_open+0x10/0x10 [ 1562.216564][T25774] vfs_open+0x82/0x3f0 [ 1562.220639][T25774] path_openat+0x1de4/0x2cb0 [ 1562.225262][T25774] ? __pfx_path_openat+0x10/0x10 [ 1562.230207][T25774] do_filp_open+0x20b/0x470 [ 1562.234726][T25774] ? __pfx_do_filp_open+0x10/0x10 [ 1562.239766][T25774] ? alloc_fd+0x471/0x7d0 [ 1562.244114][T25774] do_sys_openat2+0x11b/0x1d0 [ 1562.248814][T25774] ? __pfx_do_sys_openat2+0x10/0x10 [ 1562.254051][T25774] ? __pfx_do_sys_openat2+0x10/0x10 [ 1562.259268][T25774] __x64_sys_openat+0x174/0x210 [ 1562.264135][T25774] ? __pfx___x64_sys_openat+0x10/0x10 [ 1562.269519][T25774] do_syscall_64+0xcd/0x4c0 [ 1562.274018][T25774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.279909][T25774] RIP: 0033:0x7f150478eec9 [ 1562.284318][T25774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.303929][T25774] RSP: 002b:00007f15056c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1562.312343][T25774] RAX: ffffffffffffffda RBX: 00007f15049e5fa0 RCX: 00007f150478eec9 [ 1562.320405][T25774] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1562.328375][T25774] RBP: 00007f1504811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1562.336530][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.344496][T25774] R13: 00007f15049e6038 R14: 00007f15049e5fa0 R15: 00007ffe76134758 [ 1562.352478][T25774] [ 1562.355553][T25774] Kernel Offset: disabled [ 1562.359877][T25774] Rebooting in 86400 seconds..