last executing test programs: 1m49.59970564s ago: executing program 3 (id=3965): socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 1m48.997403432s ago: executing program 3 (id=3967): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xf, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0x5, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5a, 0xadae, 0x4618eccf, 0x3, 0x42ff, 0x6, 0x8, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x10000800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x40c302, 0x0) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x60680, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='Re\x04b)\x13ja\x12{\xedkun\xdd\xc7c\x9aF1\xec\xf5{B\xc4s\x90{\xe3\x913K1Q\x872\x96\x1cic\xac\xf4\x9b\xabu\xfa,?C\xf1\xb6\x97\xb6\xcf\xe0\xaf\x9b\xc7\xc5\x978\xd0\xf9/\xde\xd5Z\xe5X\\\xaa\xe9\xa2c\x9c0\x87\xa6Qs&\xcdF\xb6;\xa9\xfe\x875\x8e\xb2 \x1f\xad\xb7z\xa8\xe1)\x81\x1a\xa0\x9b\xd6D\x9d\xc4\xd0\x82;1:\a\xb7,\x9fz\xe5AE\t\xaa\xa9\xfdz8c\x04\xa8\xbe\x18)\xc7\xb5-\xacW\xe9):8_.\x19\x1c%^\xad\xcbm\xcb\x19\xac\x90\x8c\x065\xd2\r\x92\xd7\xce\xca\x17\xb0l#\xc4\x0e\xe9G\xfc\x8a\xfc\xdc\xb9', 0x8b) 1m47.920446731s ago: executing program 3 (id=3971): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xf, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0x5, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5a, 0xadae, 0x4618eccf, 0x3, 0x42ff, 0x6, 0x8, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x10000800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x40c302, 0x0) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x60680, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='Re\x04b)\x13ja\x12{\xedkun\xdd\xc7c\x9aF1\xec\xf5{B\xc4s\x90{\xe3\x913K1Q\x872\x96\x1cic\xac\xf4\x9b\xabu\xfa,?C\xf1\xb6\x97\xb6\xcf\xe0\xaf\x9b\xc7\xc5\x978\xd0\xf9/\xde\xd5Z\xe5X\\\xaa\xe9\xa2c\x9c0\x87\xa6Qs&\xcdF\xb6;\xa9\xfe\x875\x8e\xb2 \x1f\xad\xb7z\xa8\xe1)\x81\x1a\xa0\x9b\xd6D\x9d\xc4\xd0\x82;1:\a\xb7,\x9fz\xe5AE\t\xaa\xa9\xfdz8c\x04\xa8\xbe\x18)\xc7\xb5-\xacW\xe9):8_.\x19\x1c%^\xad\xcbm\xcb\x19\xac\x90\x8c\x065\xd2\r\x92\xd7\xce\xca\x17\xb0l#\xc4\x0e\xe9G\xfc\x8a\xfc\xdc\xb9', 0x8b) 1m46.792849997s ago: executing program 3 (id=3974): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xf, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0x5, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5a, 0xadae, 0x4618eccf, 0x3, 0x42ff, 0x6, 0x8, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x10000800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x40c302, 0x0) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x60680, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='Re\x04b)\x13ja\x12{\xedkun\xdd\xc7c\x9aF1\xec\xf5{B\xc4s\x90{\xe3\x913K1Q\x872\x96\x1cic\xac\xf4\x9b\xabu\xfa,?C\xf1\xb6\x97\xb6\xcf\xe0\xaf\x9b\xc7\xc5\x978\xd0\xf9/\xde\xd5Z\xe5X\\\xaa\xe9\xa2c\x9c0\x87\xa6Qs&\xcdF\xb6;\xa9\xfe\x875\x8e\xb2 \x1f\xad\xb7z\xa8\xe1)\x81\x1a\xa0\x9b\xd6D\x9d\xc4\xd0\x82;1:\a\xb7,\x9fz\xe5AE\t\xaa\xa9\xfdz8c\x04\xa8\xbe\x18)\xc7\xb5-\xacW\xe9):8_.\x19\x1c%^\xad\xcbm\xcb\x19\xac\x90\x8c\x065\xd2\r\x92\xd7\xce\xca\x17\xb0l#\xc4\x0e\xe9G\xfc\x8a\xfc\xdc\xb9', 0x8b) 1m45.728511706s ago: executing program 3 (id=3978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x40081, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) adjtimex$auto(0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000200)={0xf9, 0x2, 0x0, 0xd6, &(0x7f0000000080), 0x5, 0x7f, 0x8, @number_of_packets=0xff, 0x7ff, 0xf56, &(0x7f0000000100)="6b868ed1db6436758ffe4d5bb99ae9eb54c8b0f57199d56574b90d76ffd66e7a3fea26b2623e431eb0e15f60ef7c621379276cf5996d7c39bc26b57cd3a58756f6a5f755d981214acba9c92f29b4f50c6643830e470051712a803d2a31c32aaa1b1f51dad5eedf753a6b5bf82a4daa05d74d47599cd8c8b76983db72944bfc53fff6d6c06d1d5fc92b1b2c8d27d0f6317a169fff9c408da47e40fd9aefbbceb152681b8d5c3a5f6aa63ee7b2c9f9d0974b67ebb70e51466790ae8b3afa362768480507df68128f5abf5a1eadfe0a629c538ad2b794a288c275f20cc174ee29246b22597fbb6602d4d1b56248051d5cea18", [{0x2, 0x7, 0x282}, {0x4, 0x1}]}) getsid$auto(0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r5, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, r6, 0x23, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048008}, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$auto(r7, 0x29, 0x2f, 0x0, 0x22) futex$auto(0x0, 0xfff, 0x5, 0x0, 0x0, 0x802) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 1m44.383089412s ago: executing program 3 (id=3983): ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x5, 0xb) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x7ffe) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) prctl$auto(0x4b, 0x8, 0x0, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000480)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd|\x06O\x0e\xe4\xe0\xb9N\xca\xc0c\x91\xe2`\n\xbb:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00') ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = prctl$auto_SECCOMP_MODE_FILTER(0x101, 0x2, 0x0, 0x940, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000180)={0x1, 0x2}) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20040, 0x0) fsopen$auto(0x0, 0xfffffffb) socket(0x10, 0x2, 0x4) mmap$auto(0x3ffffffffffffd, 0x2020000000000005, 0x8000003fd, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) 1m29.300390107s ago: executing program 32 (id=3983): ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x5, 0xb) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x7ffe) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) prctl$auto(0x4b, 0x8, 0x0, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000480)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd|\x06O\x0e\xe4\xe0\xb9N\xca\xc0c\x91\xe2`\n\xbb:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00') ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = prctl$auto_SECCOMP_MODE_FILTER(0x101, 0x2, 0x0, 0x940, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000180)={0x1, 0x2}) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20040, 0x0) fsopen$auto(0x0, 0xfffffffb) socket(0x10, 0x2, 0x4) mmap$auto(0x3ffffffffffffd, 0x2020000000000005, 0x8000003fd, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) 10.416674064s ago: executing program 2 (id=4175): mmap$auto(0x0, 0x0, 0x400000006, 0x17, 0x401, 0x8000) r0 = socketpair$auto(0x8, 0x10001, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = open(0x0, 0x22240, 0x155) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) ioctl$auto_BLKSECDISCARD(r1, 0x127d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x6, 0x9) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r3 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r3, 0x4008bc0d, &(0x7f0000000000)={0x800}) syz_genetlink_get_family_id$auto_net_shaper(0x0, r2) msgrcv$auto(0x9, &(0x7f0000000080)={0xfffffffffffffffd, 0x1}, 0xffffffffffffffff, 0x7, 0x2) 10.316879142s ago: executing program 2 (id=4176): mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendto$auto(0x3, 0x0, 0x53, 0x8007, 0x0, 0xfffffffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_sigchld={0x0, 0x0, 0xc, 0x9, 0x401}}}) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0x101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x1c1041, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x4, 0x5, 0x8fd6, 0x948b, 0x1000, 0x15f4da0a, 0x3, 0x5, 0x2000000000062, 0x5, 0x20000005, 0x5, 0x800, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xa, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001b, 0x2000000007, 0x3, 0x6, 0x2, 0x6]}, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) socket(0x2, 0x1, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x5, 0x40000000011, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 9.761590969s ago: executing program 1 (id=4177): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0xd2a, 0x2) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd6/hctx0/tags_bitmap\x00', 0x60000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)="1a38") ioctl$auto(r2, 0xc10c5541, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xc7\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcfn\x15\xc5D\xcct\xff\x84\xd2*\xf8=\x1b\x90Z\xc0\xd72\xbc\x14R\x80\x00\x1b\xca\xbdV\xb0)\x1b\xa1\xbaC\x91\xc8\x16\xc9\x1e\xb2\xd7\xb7\x88g\x98\x7f\x95\xb2-F\xf7\xb4y\x19\x8e\xd2}uy\xfa\x1c\x82h\x01\x136\xfb\xef\x93\xdc\x1a@\x91bD\xcexS\x82C\xf9\xd2Y\xe2\x18o\xd8\xdc\xc3\xac\xb2\x1d\xebR\xa9\x98B\x19\x9c\x1e\x11\x91\x17\xce\xc0\xb47{\xc73\xeb\xdf7\x03\xf22\xdf\xa9\x90P\xfd\xaf\xed\xa3B\xec\xab\x8b\xdb\xbaP\x99;\xd6\x98x\xbbF\xb2\xd7\xc4g\xdc>\xe7>3\xd8\xbe\x8a2\xf283\xd6\xbd\x86Hs{#\x9d\x05\x05\xf8\x8d\x873W\xd9\xde\x12\x01e\x96\fVT\xefWSs\xda\xe33\xa3\xbc\xa4\x8b\xf7\\h\xaa_Q\x9a\xe3Z;\xa7\xe2Tzx\xa7]Dh5\xad(\xf8\xdb\xe6\xb6\x12\x91\xfa\xe2\xea`\x92\xce\xaf>', 0x100000a3d7) socket(0x1d, 0x2, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) read$auto(0xc8, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x8004) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/trace_marker\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xf, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) 9.043098179s ago: executing program 0 (id=4179): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x118, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x73e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x10}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x655}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}]}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x8}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x7f}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x2}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcd41}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) 8.965743196s ago: executing program 2 (id=4180): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000280)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\xe4\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xf5\xdc\x84\xc7\xb2\xa6\x88\xccT\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4\x00\t\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv/\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2={\x8f\xa9Ez\xea\xb4\x0f\xf3\xd7\xe6\x1f4F\xa4=\xc5Z\x19\xc6(\xd8\xd9\x14T\x12\xa7\r&\t\x9faR\x8c\r\xd4S\xd4\x8d\xae\xa5]\xfb\xab\x1a\xe0H8\xbf\x06\x83k\xef\xc3=\xb0-\x00'/325, 0x101) clone$auto(0x1002, 0x80000000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x7ffffffd) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_getevents$auto(0x1, 0x1ff, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0xb, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r2, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffff8}, 0x2) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) (async) madvise$auto(0x2, 0x5c61fa2c, 0xf) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="130029bd704fb068c18e97d09150d3fdaa6dd200fbdbdf25030000000400080914000180080002800400325908001400a9c12c20", @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 6.125453133s ago: executing program 0 (id=4181): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x1f000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6.121116281s ago: executing program 4 (id=4182): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) keyctl$auto(0x19, 0x0, 0x0, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x60) io_uring_setup$auto(0x25a8c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.059991658s ago: executing program 1 (id=4183): r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer1\x00', 0x2800, 0x0) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b3a, r1) 5.01560517s ago: executing program 0 (id=4184): writev$auto(0x3, 0x0, 0x8009) capset$auto(&(0x7f00000000c0)={0x10000}, &(0x7f0000000140)={0x6, 0x80, 0x6}) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0xc, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/023/001\x00', 0xa821, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/smp_affinity_list\x00', 0x2000, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vub300/parameters/disable_offload_processing\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/stat\x00', 0x149902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0xf0f7}, 0x1, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) 4.768391037s ago: executing program 1 (id=4185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000004540)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0xfcffffff, 0x0, 0x8000}, 0x0) 4.508205113s ago: executing program 1 (id=4186): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon9\x00', 0x10040, 0x0) mmap$auto(0x71b, 0x20009, 0x4000000000df, 0xeb3, r0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x3, 0x1, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40880) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0xfffffffffffff, 0x5) read$auto(r1, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000001c0)={0x0, 0x7}, 0x3) r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) accept$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0x2}, &(0x7f0000000380)=0x42) read$auto_trace_options_fops_trace(r5, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x1f) 4.388428695s ago: executing program 4 (id=4187): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r0 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) fstat$auto(r0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) read$auto(r3, 0x0, 0x1000) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x403, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) socket(0x22, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x488981, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x7fffffff, 0x300000000000) 4.085090334s ago: executing program 0 (id=4188): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x118, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x73e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x10}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x655}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}]}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x8}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x7f}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x2}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcd41}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) 3.983484511s ago: executing program 1 (id=4189): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(0x3, 0x0, 0x7) read$auto(0xffffffffffffffff, 0x0, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)="f223e240910a1628ea8acc93ee06cde328f9c8bd4d799d345d2b52cdac938654737033a6078daf7d04d94d699955df0b93ccb51f5c761611c86a99d9") write$auto(0x3, 0x0, 0xffd8) 3.881063768s ago: executing program 2 (id=4190): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x118, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x73e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x10}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x655}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}]}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x8}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x2}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcd41}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) 3.1409308s ago: executing program 4 (id=4191): mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendto$auto(0x3, 0x0, 0x53, 0x8007, 0x0, 0xfffffffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_sigchld={0x0, 0x0, 0xc, 0x9, 0x401}}}) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0x101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x1c1041, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x4, 0x5, 0x8fd6, 0x948b, 0x1000, 0x15f4da0a, 0x3, 0x5, 0x2000000000062, 0x5, 0x20000005, 0x5, 0x800, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xa, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001b, 0x2000000007, 0x3, 0x6, 0x2, 0x6]}, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) socket(0x2, 0x1, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x5, 0x40000000011, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 973.118353ms ago: executing program 4 (id=4192): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x5}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x51b1fc3395b77b81}, 0x40084084) semctl$auto(0x6, 0x6, 0x3, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 764.333533ms ago: executing program 0 (id=4193): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) r0 = socket(0x28, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(r1, 0x0, 0xc) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) fcntl$auto_F_GETSIG(r0, 0xb, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) close_range$auto(0x2, 0x8, 0x0) unlink$auto(&(0x7f0000000040)='./bus\x00') 684.278091ms ago: executing program 2 (id=4194): r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer1\x00', 0x2800, 0x0) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b3a, r1) 576.912851ms ago: executing program 0 (id=4195): statmount$auto(0x0, &(0x7f0000000640)={0x8001, 0x1, 0x201, 0x1, 0x2, 0x3, 0x3ffdf, 0x400, 0x4, 0x9, 0x9, 0x280000, 0x4, 0x1, 0xb2, 0x2, 0x9, 0x2, 0x4, 0x80000002a0, 0x0, 0x1, 0xffffffff, 0x200, 0x6, 0xbca7, 0x4, 0x80004000, 0x800, 0x800005, 0x0, [0x0, 0x4, 0x4, 0x4, 0x0, 0x8000000000, 0x0, 0x1, 0x0, 0xffffffeffffffffc, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x1, 0x2000000, 0x9, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x40000000, 0x8000000000000000, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x6, 0x400000000000000, 0x200, 0x80000000, 0x313c, 0x0, 0x9, 0x0, 0xe17, 0x0, 0x6], "47f243ebc9676da57f5738014d46696935422962869255df5abc5ca580464786f62dd9f1db3fddd5da7676f5fdaeffef41737b17d46a25bc7e34bb815ff1508758aa176da7d468250a9b39d246"}, 0x1fe, 0x20000009) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto_PR_SET_MM_ARG_END(0x1, 0x9, 0xffffffffffffffff, 0x6, 0x8) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r2}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x27, 0xd, 0x8fd6, 0x9, 0x1, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0xfff, 0x7d, 0xb, 0xb4a, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, r3) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r5, 0x0, 0x801) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c0, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r7, 0x4b41, 0x7) read$auto_ftrace_event_format_fops_trace_events(r0, &(0x7f0000000100)=""/20, 0x14) 499.787311ms ago: executing program 2 (id=4196): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) keyctl$auto(0x19, 0x0, 0x0, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x60) io_uring_setup$auto(0x25a8c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0) close_range$auto(0x2, 0x8, 0x0) 474.832558ms ago: executing program 4 (id=4197): bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_fd, 0x41b5c1ff}, 0x92) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 196.220484ms ago: executing program 4 (id=4198): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/mcfilter\x00', 0x101000, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x101880, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000180)={0x63, 0x3, 0x7ff, 0xffffffffffffff01, 0x2, 0xffffffffffffffff}) process_vm_writev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000c80)="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", 0x10000000000007}, 0x6, 0x0, 0x5, 0x4) open(&(0x7f0000000140)='./file1\x00', 0x171342, 0xd3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x7) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) ioctl$auto_PPPIOCSMAXCID(r4, 0x40047451, 0x0) syslog$auto(0x2, 0x0, 0xcf) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000300000008000200", @ANYRES32=0x0, @ANYBLOB="0800030001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) socket(0x2, 0x3, 0x100) 0s ago: executing program 1 (id=4199): socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) writev$auto(0xe, 0x0, 0x3) socketpair$auto(0x6, 0x3, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="9bff29bd7000fbdbdf250100ffa6d533a1f92d6d62b7d3bf4ee526082fa7ca6c7f16c47609658de3bbefbc71f0ce1faeb0f9d9"], 0x14}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) kernel console output (not intermixed with test programs): ogrammable HW Seek: false [ 1320.710889][T22948] vivid-003: RDS Rx I/O Mode: Block I/O [ 1320.719035][T22948] vivid-003: Generate RBDS Instead of RDS: false [ 1320.768891][T22948] vivid-003: RDS Reception: true [ 1320.774092][T22948] vivid-003: RDS Program Type: 0 inactive [ 1320.813357][T22948] vivid-003: RDS PS Name: inactive [ 1320.819094][T22948] vivid-003: RDS Radio Text: inactive [ 1320.824716][T22948] vivid-003: RDS Traffic Announcement: false inactive [ 1320.831728][T22948] vivid-003: RDS Traffic Program: false inactive [ 1320.838384][T22948] vivid-003: RDS Music: false inactive [ 1320.848213][T22948] vivid-003: ================== END STATUS ================== [ 1322.278317][T22982] mkiss: ax0: crc mode is auto. [ 1325.641779][T23027] vivid-003: ================= START STATUS ================= [ 1325.661460][T23027] vivid-003: Radio HW Seek Mode: Bounded [ 1325.680020][T23027] vivid-003: Radio Programmable HW Seek: false [ 1325.696771][T23027] vivid-003: RDS Rx I/O Mode: Block I/O [ 1325.720890][T23027] vivid-003: Generate RBDS Instead of RDS: false [ 1325.750436][T23027] vivid-003: RDS Reception: true [ 1325.755501][T23027] vivid-003: RDS Program Type: 0 inactive [ 1325.761452][T23027] vivid-003: RDS PS Name: inactive [ 1325.766715][T23027] vivid-003: RDS Radio Text: inactive [ 1325.839942][T23027] vivid-003: RDS Traffic Announcement: false inactive [ 1325.846827][T23027] vivid-003: RDS Traffic Program: false inactive [ 1325.853718][T23027] vivid-003: RDS Music: false inactive [ 1325.859371][T23027] vivid-003: ================== END STATUS ================== [ 1327.284008][T23055] FAULT_INJECTION: forcing a failure. [ 1327.284008][T23055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.349858][T23055] CPU: 1 UID: 0 PID: 23055 Comm: syz.3.3517 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1327.349906][T23055] Tainted: [I]=FIRMWARE_WORKAROUND [ 1327.349917][T23055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1327.349935][T23055] Call Trace: [ 1327.349947][T23055] [ 1327.349959][T23055] dump_stack_lvl+0x16c/0x1f0 [ 1327.349999][T23055] should_fail_ex+0x512/0x640 [ 1327.350041][T23055] _copy_from_user+0x2e/0xd0 [ 1327.350086][T23055] video_usercopy+0xa40/0x1440 [ 1327.350124][T23055] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1327.350158][T23055] ? __pfx_video_usercopy+0x10/0x10 [ 1327.350220][T23055] v4l2_ioctl+0x1ba/0x250 [ 1327.350250][T23055] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1327.350284][T23055] __x64_sys_ioctl+0x18e/0x210 [ 1327.350338][T23055] do_syscall_64+0xcd/0x490 [ 1327.350376][T23055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.350416][T23055] RIP: 0033:0x7f282438ebe9 [ 1327.350441][T23055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.350473][T23055] RSP: 002b:00007f2825143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.350503][T23055] RAX: ffffffffffffffda RBX: 00007f28245b5fa0 RCX: 00007f282438ebe9 [ 1327.350524][T23055] RDX: 0000000000000000 RSI: 00000000c0205648 RDI: 0000000000000002 [ 1327.350544][T23055] RBP: 00007f2825143090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.350564][T23055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.350583][T23055] R13: 00007f28245b6038 R14: 00007f28245b5fa0 R15: 00007fff1072c658 [ 1327.350636][T23055] [ 1327.514996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.135618][T23066] snd_aloop snd_aloop.0: control 16781581:65539:5:é'x?F¢é/èìzFË·fCªáª:7 is already present [ 1328.560945][T23072] mkiss: ax0: crc mode is auto. [ 1329.416597][T23086] vivid-003: ================= START STATUS ================= [ 1329.425194][T23086] vivid-003: Radio HW Seek Mode: Bounded [ 1329.478714][T23086] vivid-003: Radio Programmable HW Seek: false [ 1329.642723][T23086] vivid-003: RDS Rx I/O Mode: Block I/O [ 1329.658994][T23086] vivid-003: Generate RBDS Instead of RDS: false [ 1329.665546][T23086] vivid-003: RDS Reception: true [ 1329.675567][T23086] vivid-003: RDS Program Type: 0 inactive [ 1329.681488][T23086] vivid-003: RDS PS Name: inactive [ 1329.687040][T23086] vivid-003: RDS Radio Text: inactive [ 1329.712805][T23086] vivid-003: RDS Traffic Announcement: false inactive [ 1329.761305][T23086] vivid-003: RDS Traffic Program: false inactive [ 1329.780803][T23086] vivid-003: RDS Music: false inactive [ 1329.786399][T23086] vivid-003: ================== END STATUS ================== [ 1329.878779][T23094] vivid-003: ================= START STATUS ================= [ 1329.913194][T23094] vivid-003: Radio HW Seek Mode: Bounded [ 1329.925485][T23094] vivid-003: Radio Programmable HW Seek: false [ 1330.004050][T23094] vivid-003: RDS Rx I/O Mode: Block I/O [ 1330.010656][T23094] vivid-003: Generate RBDS Instead of RDS: false [ 1330.130970][T23094] vivid-003: RDS Reception: true [ 1330.146738][T23094] vivid-003: RDS Program Type: 0 inactive [ 1330.171909][T23094] vivid-003: RDS PS Name: inactive [ 1330.196359][T23094] vivid-003: RDS Radio Text: inactive [ 1330.207616][T23094] vivid-003: RDS Traffic Announcement: false inactive [ 1330.244989][T23094] vivid-003: RDS Traffic Program: false inactive [ 1330.252933][T23094] vivid-003: RDS Music: false inactive [ 1330.260616][T23094] vivid-003: ================== END STATUS ================== [ 1330.436648][T23106] FAULT_INJECTION: forcing a failure. [ 1330.436648][T23106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1330.628904][T23106] CPU: 1 UID: 0 PID: 23106 Comm: syz.0.3527 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1330.628958][T23106] Tainted: [I]=FIRMWARE_WORKAROUND [ 1330.628970][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1330.628988][T23106] Call Trace: [ 1330.628999][T23106] [ 1330.629012][T23106] dump_stack_lvl+0x16c/0x1f0 [ 1330.629052][T23106] should_fail_ex+0x512/0x640 [ 1330.629090][T23106] _copy_to_user+0x32/0xd0 [ 1330.629125][T23106] simple_read_from_buffer+0xcb/0x170 [ 1330.629151][T23106] proc_fail_nth_read+0x197/0x240 [ 1330.629177][T23106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1330.629204][T23106] ? rw_verify_area+0xcf/0x6c0 [ 1330.629228][T23106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1330.629265][T23106] vfs_read+0x1e4/0xc60 [ 1330.629293][T23106] ? __pfx___mutex_lock+0x10/0x10 [ 1330.629317][T23106] ? __pfx_vfs_read+0x10/0x10 [ 1330.629348][T23106] ? __fget_files+0x20e/0x3c0 [ 1330.629380][T23106] ksys_read+0x12a/0x250 [ 1330.629403][T23106] ? __pfx_ksys_read+0x10/0x10 [ 1330.629428][T23106] ? getname_flags.part.0+0x1c5/0x550 [ 1330.629467][T23106] do_syscall_64+0xcd/0x490 [ 1330.629494][T23106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.629516][T23106] RIP: 0033:0x7f9507f8d5fc [ 1330.629533][T23106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1330.629554][T23106] RSP: 002b:00007f9508dca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1330.629574][T23106] RAX: ffffffffffffffda RBX: 00007f95081b5fa0 RCX: 00007f9507f8d5fc [ 1330.629589][T23106] RDX: 000000000000000f RSI: 00007f9508dca0a0 RDI: 0000000000000003 [ 1330.629602][T23106] RBP: 00007f9508dca090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.629615][T23106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.629628][T23106] R13: 00007f95081b6038 R14: 00007f95081b5fa0 R15: 00007ffe8274d338 [ 1330.629655][T23106] [ 1330.826230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.283882][T23120] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1331.452195][T23125] mkiss: ax0: crc mode is auto. [ 1332.328679][T23140] vivid-003: ================= START STATUS ================= [ 1332.452332][T23140] vivid-003: Radio HW Seek Mode: Bounded [ 1332.472250][T23140] vivid-003: Radio Programmable HW Seek: false [ 1332.510990][T23140] vivid-003: RDS Rx I/O Mode: Block I/O [ 1332.523915][T23140] vivid-003: Generate RBDS Instead of RDS: false [ 1332.560765][T23140] vivid-003: RDS Reception: true [ 1332.576145][T23140] vivid-003: RDS Program Type: 0 inactive [ 1332.604310][T23140] vivid-003: RDS PS Name: inactive [ 1332.647905][T23140] vivid-003: RDS Radio Text: inactive [ 1332.653582][T23140] vivid-003: RDS Traffic Announcement: false inactive [ 1332.660414][T23140] vivid-003: RDS Traffic Program: false inactive [ 1332.676975][T23140] vivid-003: RDS Music: false inactive [ 1332.691879][T23140] vivid-003: ================== END STATUS ================== [ 1333.800864][T23158] vivid-003: ================= START STATUS ================= [ 1333.825233][T23158] vivid-003: Radio HW Seek Mode: Bounded [ 1333.956637][T23158] vivid-003: Radio Programmable HW Seek: false [ 1333.963708][T23158] vivid-003: RDS Rx I/O Mode: Block I/O [ 1333.979564][T23158] vivid-003: Generate RBDS Instead of RDS: false [ 1333.996510][T23158] vivid-003: RDS Reception: true [ 1334.004990][T23158] vivid-003: RDS Program Type: 0 inactive [ 1334.017598][T23158] vivid-003: RDS PS Name: inactive [ 1334.042034][T23158] vivid-003: RDS Radio Text: inactive [ 1334.047974][T23158] vivid-003: RDS Traffic Announcement: false inactive [ 1334.106242][T23158] vivid-003: RDS Traffic Program: false inactive [ 1334.207390][T23158] vivid-003: RDS Music: false inactive [ 1334.332490][T23158] vivid-003: ================== END STATUS ================== [ 1335.542276][T23200] vivid-003: ================= START STATUS ================= [ 1335.555819][T23200] vivid-003: Radio HW Seek Mode: Bounded [ 1335.562514][T23200] vivid-003: Radio Programmable HW Seek: false [ 1335.569871][T23200] vivid-003: RDS Rx I/O Mode: Block I/O [ 1335.577701][T23200] vivid-003: Generate RBDS Instead of RDS: false [ 1335.609022][T23200] vivid-003: RDS Reception: true [ 1335.614533][T23200] vivid-003: RDS Program Type: 0 inactive [ 1335.620740][T23200] vivid-003: RDS PS Name: inactive [ 1335.739739][T23200] vivid-003: RDS Radio Text: inactive [ 1335.762208][T23200] vivid-003: RDS Traffic Announcement: false inactive [ 1335.818041][T23200] vivid-003: RDS Traffic Program: false inactive [ 1335.871969][T23200] vivid-003: RDS Music: false inactive [ 1335.901058][T23200] vivid-003: ================== END STATUS ================== [ 1337.114918][T23214] vivid-003: ================= START STATUS ================= [ 1337.177541][T23214] vivid-003: Radio HW Seek Mode: Bounded [ 1337.215200][T23214] vivid-003: Radio Programmable HW Seek: false [ 1337.254942][T23214] vivid-003: RDS Rx I/O Mode: Block I/O [ 1337.265092][T23214] vivid-003: Generate RBDS Instead of RDS: false [ 1337.288408][T23214] vivid-003: RDS Reception: true [ 1337.295240][T23214] vivid-003: RDS Program Type: 0 inactive [ 1337.301028][T23214] vivid-003: RDS PS Name: inactive [ 1337.356121][T23214] vivid-003: RDS Radio Text: inactive [ 1337.364556][T23214] vivid-003: RDS Traffic Announcement: false inactive [ 1337.404808][T23214] vivid-003: RDS Traffic Program: false inactive [ 1337.438908][T23214] vivid-003: RDS Music: false inactive [ 1337.447935][T23214] vivid-003: ================== END STATUS ================== [ 1338.934679][T23235] vivid-003: ================= START STATUS ================= [ 1338.952758][T23235] vivid-003: Radio HW Seek Mode: Bounded [ 1339.052711][T23235] vivid-003: Radio Programmable HW Seek: false [ 1339.084926][T23235] vivid-003: RDS Rx I/O Mode: Block I/O [ 1339.090525][T23235] vivid-003: Generate RBDS Instead of RDS: false [ 1339.125958][T23235] vivid-003: RDS Reception: true [ 1339.131074][T23235] vivid-003: RDS Program Type: 0 inactive [ 1339.137221][T23235] vivid-003: RDS PS Name: inactive [ 1339.142603][T23235] vivid-003: RDS Radio Text: inactive [ 1339.150848][T23235] vivid-003: RDS Traffic Announcement: false inactive [ 1339.158660][T23235] vivid-003: RDS Traffic Program: false inactive [ 1339.167976][T23235] vivid-003: RDS Music: false inactive [ 1339.173887][T23235] vivid-003: ================== END STATUS ================== [ 1339.495297][ T30] audit: type=1800 audit(4294977778.437:112): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3558" name="dbroot" dev="configfs" ino=93361 res=0 errno=0 [ 1343.891633][T23327] bridge0: port 3(team0) entered blocking state [ 1343.899240][T23327] bridge0: port 3(team0) entered disabled state [ 1343.905651][T23327] team0: entered allmulticast mode [ 1343.922602][T23327] team_slave_0: entered allmulticast mode [ 1343.947237][T23327] team_slave_1: entered allmulticast mode [ 1343.983354][T23327] team0: entered promiscuous mode [ 1344.032380][T23327] team_slave_0: entered promiscuous mode [ 1344.044742][T23327] team_slave_1: entered promiscuous mode [ 1344.070733][T23327] bridge0: port 3(team0) entered blocking state [ 1344.078933][T23327] bridge0: port 3(team0) entered forwarding state [ 1344.470223][T23337] program syz.2.3576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.855558][T23349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1346.414133][T23375] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1347.662840][T23391] mkiss: ax0: crc mode is auto. [ 1351.552232][T23451] kexec: Could not allocate control_code_buffer [ 1357.653714][T23567] mkiss: ax0: crc mode is auto. [ 1357.837640][ T30] audit: type=1326 audit(4294977796.871:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.1.3630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a5ab8ebe9 code=0x0 [ 1359.219539][T23595] vivid-003: ================= START STATUS ================= [ 1359.228733][T23595] vivid-003: Radio HW Seek Mode: Bounded [ 1359.235032][T23595] vivid-003: Radio Programmable HW Seek: false [ 1359.241950][T23595] vivid-003: RDS Rx I/O Mode: Block I/O [ 1359.345705][T23595] vivid-003: Generate RBDS Instead of RDS: false [ 1359.383936][T23595] vivid-003: RDS Reception: true [ 1359.406400][T23595] vivid-003: RDS Program Type: 0 inactive [ 1359.415782][T23595] vivid-003: RDS PS Name: inactive [ 1359.421800][T23595] vivid-003: RDS Radio Text: inactive [ 1359.427461][T23595] vivid-003: RDS Traffic Announcement: false inactive [ 1359.437856][T23595] vivid-003: RDS Traffic Program: false inactive [ 1359.445341][T23595] vivid-003: RDS Music: false inactive [ 1359.452513][T23595] vivid-003: ================== END STATUS ================== [ 1360.068625][T23607] FAULT_INJECTION: forcing a failure. [ 1360.068625][T23607] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.083783][T23607] CPU: 1 UID: 0 PID: 23607 Comm: syz.3.3639 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1360.083850][T23607] Tainted: [I]=FIRMWARE_WORKAROUND [ 1360.083862][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1360.083881][T23607] Call Trace: [ 1360.083891][T23607] [ 1360.083903][T23607] dump_stack_lvl+0x16c/0x1f0 [ 1360.083942][T23607] should_fail_ex+0x512/0x640 [ 1360.083977][T23607] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1360.084013][T23607] should_failslab+0xc2/0x120 [ 1360.084052][T23607] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1360.084081][T23607] ? find_held_lock+0x2b/0x80 [ 1360.084108][T23607] ? audit_log_d_path+0xe7/0x200 [ 1360.084151][T23607] audit_log_d_path+0xe7/0x200 [ 1360.084190][T23607] audit_log_d_path_exe+0x46/0x70 [ 1360.084229][T23607] audit_log_task+0x31d/0x3f0 [ 1360.084272][T23607] ? __pfx_audit_log_task+0x10/0x10 [ 1360.084319][T23607] ? arch_do_signal_or_restart+0x211/0x790 [ 1360.084369][T23607] audit_seccomp+0x79/0x1f0 [ 1360.084407][T23607] __secure_computing+0x2bf/0x320 [ 1360.084444][T23607] syscall_trace_enter+0x89/0x240 [ 1360.084490][T23607] do_syscall_64+0x347/0x490 [ 1360.084528][T23607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.084561][T23607] RIP: 0033:0x7f282438ebe9 [ 1360.084585][T23607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.084618][T23607] RSP: 002b:00007f28251429f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1360.084649][T23607] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f282438ebe9 [ 1360.084671][T23607] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 1360.084692][T23607] RBP: 00007f2825143040 R08: 00007f2825144000 R09: 000000000000000b [ 1360.084713][T23607] R10: 0000000000040f1c R11: 0000000000000246 R12: 0000000000000000 [ 1360.084733][T23607] R13: 00007f28245b6038 R14: 00007f28245b5fa0 R15: 00007fff1072c658 [ 1360.084783][T23607] [ 1360.085207][ T30] audit: type=1326 audit(4294977799.123:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.3.3639" exe="" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f282438ebe9 code=0x0 [ 1360.608826][T23622] mkiss: ax0: crc mode is auto. [ 1361.599787][T23647] vivid-003: ================= START STATUS ================= [ 1361.607719][T23647] vivid-003: Radio HW Seek Mode: Bounded [ 1361.617253][T23647] vivid-003: Radio Programmable HW Seek: false [ 1361.627212][T23647] vivid-003: RDS Rx I/O Mode: Block I/O [ 1361.882530][T23647] vivid-003: Generate RBDS Instead of RDS: false [ 1361.959078][T23647] vivid-003: RDS Reception: true [ 1361.991387][T23647] vivid-003: RDS Program Type: 0 inactive [ 1362.007178][T23647] vivid-003: RDS PS Name: inactive [ 1362.040066][T23647] vivid-003: RDS Radio Text: inactive [ 1362.045620][T23647] vivid-003: RDS Traffic Announcement: false inactive [ 1362.176106][T23647] vivid-003: RDS Traffic Program: false inactive [ 1362.182587][T23647] vivid-003: RDS Music: false inactive [ 1362.189023][T23647] vivid-003: ================== END STATUS ================== [ 1362.879962][T23672] FAULT_INJECTION: forcing a failure. [ 1362.879962][T23672] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.898731][T23672] CPU: 1 UID: 0 PID: 23672 Comm: syz.3.3651 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1362.898781][T23672] Tainted: [I]=FIRMWARE_WORKAROUND [ 1362.898792][T23672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1362.898811][T23672] Call Trace: [ 1362.898821][T23672] [ 1362.898833][T23672] dump_stack_lvl+0x16c/0x1f0 [ 1362.898871][T23672] should_fail_ex+0x512/0x640 [ 1362.898908][T23672] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1362.898950][T23672] should_failslab+0xc2/0x120 [ 1362.898991][T23672] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1362.899029][T23672] ? __alloc_skb+0x2b2/0x380 [ 1362.899060][T23672] ? ip_generic_getfrag+0x115/0x270 [ 1362.899102][T23672] __alloc_skb+0x2b2/0x380 [ 1362.899132][T23672] ? __pfx___alloc_skb+0x10/0x10 [ 1362.899167][T23672] ? raw_getfrag+0x235/0x2a0 [ 1362.899216][T23672] __ip_append_data+0x30c5/0x41c0 [ 1362.899262][T23672] ? __pfx_raw_getfrag+0x10/0x10 [ 1362.899307][T23672] ? ip_dst_mtu_maybe_forward.constprop.0+0x30a/0x6e0 [ 1362.899359][T23672] ? ip_dst_mtu_maybe_forward.constprop.0+0x314/0x6e0 [ 1362.899405][T23672] ? __pfx___ip_append_data+0x10/0x10 [ 1362.899451][T23672] ip_append_data+0x10f/0x1a0 [ 1362.899490][T23672] ? __pfx_raw_getfrag+0x10/0x10 [ 1362.899545][T23672] raw_sendmsg+0xeee/0x37e0 [ 1362.899605][T23672] ? __pfx_raw_sendmsg+0x10/0x10 [ 1362.899646][T23672] ? unwind_get_return_address+0x59/0xa0 [ 1362.899678][T23672] ? arch_stack_walk+0xa6/0x100 [ 1362.899714][T23672] ? __lock_acquire+0x62e/0x1ce0 [ 1362.899803][T23672] ? __pfx_raw_sendmsg+0x10/0x10 [ 1362.899851][T23672] inet_sendmsg+0x119/0x140 [ 1362.899895][T23672] sock_write_iter+0x4aa/0x5b0 [ 1362.899938][T23672] ? __pfx_sock_write_iter+0x10/0x10 [ 1362.899992][T23672] ? bpf_lsm_file_permission+0x9/0x10 [ 1362.900036][T23672] ? security_file_permission+0x71/0x210 [ 1362.900074][T23672] ? rw_verify_area+0xcf/0x6c0 [ 1362.900107][T23672] vfs_write+0x6c4/0x1150 [ 1362.900143][T23672] ? __pfx_sock_write_iter+0x10/0x10 [ 1362.900187][T23672] ? __pfx_vfs_write+0x10/0x10 [ 1362.900220][T23672] ? find_held_lock+0x2b/0x80 [ 1362.900273][T23672] ksys_write+0x1f8/0x250 [ 1362.900309][T23672] ? __pfx_ksys_write+0x10/0x10 [ 1362.900374][T23672] do_syscall_64+0xcd/0x490 [ 1362.900427][T23672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.900456][T23672] RIP: 0033:0x7f282438ebe9 [ 1362.900481][T23672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.900515][T23672] RSP: 002b:00007f2825143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1362.900543][T23672] RAX: ffffffffffffffda RBX: 00007f28245b5fa0 RCX: 00007f282438ebe9 [ 1362.900562][T23672] RDX: 0000000000000578 RSI: 0000000000000000 RDI: 0000000000000003 [ 1362.900579][T23672] RBP: 00007f2825143090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.900597][T23672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.900614][T23672] R13: 00007f28245b6038 R14: 00007f28245b5fa0 R15: 00007fff1072c658 [ 1362.900652][T23672] [ 1363.197489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.732315][T23686] mkiss: ax0: crc mode is auto. [ 1365.699603][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.706740][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.635455][T23741] vivid-003: ================= START STATUS ================= [ 1366.682574][T23741] vivid-003: Radio HW Seek Mode: Bounded [ 1366.720776][T23741] vivid-003: Radio Programmable HW Seek: false [ 1366.731516][T23741] vivid-003: RDS Rx I/O Mode: Block I/O [ 1366.833842][T23741] vivid-003: Generate RBDS Instead of RDS: false [ 1366.840631][T23741] vivid-003: RDS Reception: true [ 1366.848086][T23741] vivid-003: RDS Program Type: 0 inactive [ 1366.854327][T23741] vivid-003: RDS PS Name: inactive [ 1366.860086][T23741] vivid-003: RDS Radio Text: inactive [ 1366.870367][T23741] vivid-003: RDS Traffic Announcement: false inactive [ 1366.877312][T23741] vivid-003: RDS Traffic Program: false inactive [ 1366.887652][T23741] vivid-003: RDS Music: false inactive [ 1366.893814][T23741] vivid-003: ================== END STATUS ================== [ 1369.092943][T23807] busy [ 1369.668628][T23813] vivid-003: ================= START STATUS ================= [ 1369.703462][T23813] vivid-003: Radio HW Seek Mode: Bounded [ 1369.770797][T23813] vivid-003: Radio Programmable HW Seek: false [ 1369.793102][T23813] vivid-003: RDS Rx I/O Mode: Block I/O [ 1369.799166][T23813] vivid-003: Generate RBDS Instead of RDS: false [ 1369.807118][T23813] vivid-003: RDS Reception: true [ 1369.812353][T23813] vivid-003: RDS Program Type: 0 inactive [ 1369.819597][T23813] vivid-003: RDS PS Name: inactive [ 1369.827999][T23813] vivid-003: RDS Radio Text: inactive [ 1369.839402][T23813] vivid-003: RDS Traffic Announcement: false inactive [ 1369.846589][T23813] vivid-003: RDS Traffic Program: false inactive [ 1369.853179][T23813] vivid-003: RDS Music: false inactive [ 1369.893116][T23813] vivid-003: ================== END STATUS ================== [ 1370.919544][T23837] vivid-003: ================= START STATUS ================= [ 1370.927277][T23837] vivid-003: Radio HW Seek Mode: Bounded [ 1370.933470][T23837] vivid-003: Radio Programmable HW Seek: false [ 1370.939755][T23837] vivid-003: RDS Rx I/O Mode: Block I/O [ 1370.945389][T23837] vivid-003: Generate RBDS Instead of RDS: false [ 1370.951907][T23837] vivid-003: RDS Reception: true [ 1370.956933][T23837] vivid-003: RDS Program Type: 0 inactive [ 1370.962902][T23837] vivid-003: RDS PS Name: inactive [ 1370.968253][T23837] vivid-003: RDS Radio Text: inactive [ 1370.973818][T23837] vivid-003: RDS Traffic Announcement: false inactive [ 1370.980706][T23837] vivid-003: RDS Traffic Program: false inactive [ 1370.987122][T23837] vivid-003: RDS Music: false inactive [ 1370.994452][T23837] vivid-003: ================== END STATUS ================== [ 1371.561670][T23851] FAULT_INJECTION: forcing a failure. [ 1371.561670][T23851] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.594422][T23851] CPU: 1 UID: 0 PID: 23851 Comm: syz.2.3689 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1371.594486][T23851] Tainted: [I]=FIRMWARE_WORKAROUND [ 1371.594498][T23851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1371.594516][T23851] Call Trace: [ 1371.594527][T23851] [ 1371.594539][T23851] dump_stack_lvl+0x16c/0x1f0 [ 1371.594577][T23851] should_fail_ex+0x512/0x640 [ 1371.594614][T23851] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1371.594656][T23851] should_failslab+0xc2/0x120 [ 1371.594697][T23851] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1371.594735][T23851] ? alloc_inode+0x61/0x240 [ 1371.594783][T23851] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1371.594822][T23851] alloc_inode+0x61/0x240 [ 1371.594869][T23851] new_inode+0x22/0x1c0 [ 1371.594918][T23851] __debugfs_create_file+0x11c/0x6b0 [ 1371.594982][T23851] debugfs_create_file_full+0x41/0x60 [ 1371.595023][T23851] ref_tracker_dir_debugfs+0x19d/0x290 [ 1371.595065][T23851] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1371.595148][T23851] ? lockdep_init_map_type+0x5c/0x280 [ 1371.595203][T23851] preinit_net+0x296/0x8f0 [ 1371.595243][T23851] copy_net_ns+0x1da/0x5f0 [ 1371.595289][T23851] create_new_namespaces+0x3ea/0xa90 [ 1371.595338][T23851] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1371.595381][T23851] ksys_unshare+0x45b/0xa40 [ 1371.595429][T23851] ? __pfx_ksys_unshare+0x10/0x10 [ 1371.595474][T23851] ? ksys_write+0x1ac/0x250 [ 1371.595525][T23851] __x64_sys_unshare+0x31/0x40 [ 1371.595567][T23851] do_syscall_64+0xcd/0x490 [ 1371.595606][T23851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.595640][T23851] RIP: 0033:0x7fba72b8ebe9 [ 1371.595667][T23851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.595701][T23851] RSP: 002b:00007fba739e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1371.595732][T23851] RAX: ffffffffffffffda RBX: 00007fba72db5fa0 RCX: 00007fba72b8ebe9 [ 1371.595754][T23851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1371.595774][T23851] RBP: 00007fba739e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.595807][T23851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.595828][T23851] R13: 00007fba72db6038 R14: 00007fba72db5fa0 R15: 00007ffd4932b1b8 [ 1371.595871][T23851] [ 1371.964284][T23851] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88802333c9f0' [ 1372.169898][T23857] random: crng reseeded on system resumption [ 1372.308346][T21386] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:12: No space for directory leaf checksum. Please run e2fsck -D. [ 1372.409825][T23862] FAULT_INJECTION: forcing a failure. [ 1372.409825][T23862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.441302][T23862] CPU: 1 UID: 0 PID: 23862 Comm: syz.3.3691 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1372.441372][T23862] Tainted: [I]=FIRMWARE_WORKAROUND [ 1372.441385][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1372.441403][T23862] Call Trace: [ 1372.441415][T23862] [ 1372.441427][T23862] dump_stack_lvl+0x16c/0x1f0 [ 1372.441469][T23862] should_fail_ex+0x512/0x640 [ 1372.441516][T23862] _copy_from_user+0x2e/0xd0 [ 1372.441564][T23862] copy_msghdr_from_user+0x98/0x160 [ 1372.441601][T23862] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1372.441646][T23862] ? __lock_acquire+0x62e/0x1ce0 [ 1372.441691][T23862] ___sys_recvmsg+0xdb/0x1a0 [ 1372.441724][T23862] ? __pfx____sys_recvmsg+0x10/0x10 [ 1372.441753][T23862] ? find_held_lock+0x2b/0x80 [ 1372.441793][T23862] do_recvmmsg+0x2fe/0x750 [ 1372.441823][T23862] ? __pfx_do_recvmmsg+0x10/0x10 [ 1372.441848][T23862] ? ksys_write+0x190/0x250 [ 1372.441880][T23862] ? __mutex_unlock_slowpath+0x163/0x800 [ 1372.441918][T23862] ? __fget_files+0x20e/0x3c0 [ 1372.441950][T23862] __x64_sys_recvmmsg+0x22a/0x280 [ 1372.441980][T23862] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1372.442016][T23862] do_syscall_64+0xcd/0x490 [ 1372.442045][T23862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.442069][T23862] RIP: 0033:0x7f282438ebe9 [ 1372.442088][T23862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.442112][T23862] RSP: 002b:00007f2825143038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1372.442135][T23862] RAX: ffffffffffffffda RBX: 00007f28245b5fa0 RCX: 00007f282438ebe9 [ 1372.442150][T23862] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1372.442165][T23862] RBP: 00007f2825143090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.442179][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.442194][T23862] R13: 00007f28245b6038 R14: 00007f28245b5fa0 R15: 00007fff1072c658 [ 1372.442223][T23862] [ 1372.878107][T21386] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:12: checksumming directory block 0 [ 1372.950271][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1372.973788][T21386] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1373.015624][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1373.068791][T21386] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:12: No space for directory leaf checksum. Please run e2fsck -D. [ 1373.088375][T13823] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1373.225488][T21386] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:12: checksumming directory block 0 [ 1373.281881][T21386] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1373.291941][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1373.324528][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1373.349642][T13823] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1373.359798][T21386] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:12: No space for directory leaf checksum. Please run e2fsck -D. [ 1373.483364][T21386] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:12: checksumming directory block 0 [ 1373.618731][T21386] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1373.634902][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1373.693261][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1373.730353][T21386] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:12: No space for directory leaf checksum. Please run e2fsck -D. [ 1373.761877][T13823] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1373.876705][T21386] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:12: checksumming directory block 0 [ 1374.015163][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1374.042757][T21386] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1374.061594][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1374.075532][T21386] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1374.084664][T21386] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1374.092939][T13823] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1374.131512][T13823] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1374.145060][T13823] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1376.739605][T23911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1376.969742][T23917] FAULT_INJECTION: forcing a failure. [ 1376.969742][T23917] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.983750][T23917] CPU: 1 UID: 0 PID: 23917 Comm: syz.2.3702 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1376.983802][T23917] Tainted: [I]=FIRMWARE_WORKAROUND [ 1376.983815][T23917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1376.983834][T23917] Call Trace: [ 1376.983845][T23917] [ 1376.983857][T23917] dump_stack_lvl+0x16c/0x1f0 [ 1376.983896][T23917] should_fail_ex+0x512/0x640 [ 1376.983940][T23917] should_failslab+0xc2/0x120 [ 1376.983982][T23917] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1376.984020][T23917] ? skb_clone+0x190/0x3f0 [ 1376.984079][T23917] skb_clone+0x190/0x3f0 [ 1376.984107][T23917] netlink_deliver_tap+0xabd/0xd30 [ 1376.984140][T23917] netlink_dump+0xa5f/0xd30 [ 1376.984180][T23917] ? __pfx_netlink_dump+0x10/0x10 [ 1376.984233][T23917] ? __asan_memset+0x23/0x50 [ 1376.984257][T23917] ? genl_start+0x67f/0x980 [ 1376.984291][T23917] __netlink_dump_start+0x6d6/0x990 [ 1376.984323][T23917] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1376.984359][T23917] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1376.984390][T23917] ? genl_op_from_small+0x25/0x440 [ 1376.984425][T23917] ? __pfx_genl_get_cmd+0x10/0x10 [ 1376.984452][T23917] ? __pfx_genl_start+0x10/0x10 [ 1376.984480][T23917] ? __pfx_genl_dumpit+0x10/0x10 [ 1376.984508][T23917] ? __pfx_genl_done+0x10/0x10 [ 1376.984542][T23917] ? __radix_tree_lookup+0x21f/0x2c0 [ 1376.984571][T23917] genl_rcv_msg+0x46e/0x800 [ 1376.984605][T23917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1376.984637][T23917] ? __pfx_batadv_netlink_dump_hardif+0x10/0x10 [ 1376.984686][T23917] netlink_rcv_skb+0x155/0x420 [ 1376.984713][T23917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1376.984749][T23917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1376.984789][T23917] ? netlink_deliver_tap+0x1ae/0xd30 [ 1376.984819][T23917] genl_rcv+0x28/0x40 [ 1376.984845][T23917] netlink_unicast+0x5aa/0x870 [ 1376.984877][T23917] ? __pfx_netlink_unicast+0x10/0x10 [ 1376.984904][T23917] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1376.984929][T23917] ? __lock_acquire+0xb97/0x1ce0 [ 1376.984969][T23917] netlink_sendmsg+0x8d1/0xdd0 [ 1376.985000][T23917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1376.985031][T23917] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1376.985080][T23917] ____sys_sendmsg+0xa95/0xc70 [ 1376.985114][T23917] ? copy_msghdr_from_user+0x10a/0x160 [ 1376.985139][T23917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1376.985186][T23917] ___sys_sendmsg+0x134/0x1d0 [ 1376.985213][T23917] ? __pfx____sys_sendmsg+0x10/0x10 [ 1376.985276][T23917] ? __mutex_unlock_slowpath+0x140/0x800 [ 1376.985311][T23917] __sys_sendmsg+0x16d/0x220 [ 1376.985338][T23917] ? __pfx___sys_sendmsg+0x10/0x10 [ 1376.985382][T23917] do_syscall_64+0xcd/0x490 [ 1376.985410][T23917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.985434][T23917] RIP: 0033:0x7fba72b8ebe9 [ 1376.985452][T23917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1376.985475][T23917] RSP: 002b:00007fba739e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.985496][T23917] RAX: ffffffffffffffda RBX: 00007fba72db5fa0 RCX: 00007fba72b8ebe9 [ 1376.985512][T23917] RDX: 0000000004008000 RSI: 0000200000000980 RDI: 0000000000000005 [ 1376.985526][T23917] RBP: 00007fba739e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.985540][T23917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.985553][T23917] R13: 00007fba72db6038 R14: 00007fba72db5fa0 R15: 00007ffd4932b1b8 [ 1376.985582][T23917] [ 1378.226148][T23931] mkiss: ax0: crc mode is auto. [ 1387.468484][T24020] ubi: mtd0 is already attached to ubi0 [ 1388.190307][T24030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1388.657727][T24030] hsr_slave_0 (unregistering): left promiscuous mode [ 1389.628173][T24050] vivid-003: ================= START STATUS ================= [ 1389.638552][T24050] vivid-003: Radio HW Seek Mode: Bounded [ 1389.653514][T24050] vivid-003: Radio Programmable HW Seek: false [ 1389.695384][T24050] vivid-003: RDS Rx I/O Mode: Block I/O [ 1389.750686][T24050] vivid-003: Generate RBDS Instead of RDS: false [ 1389.899431][T24050] vivid-003: RDS Reception: true [ 1389.904461][T24050] vivid-003: RDS Program Type: 0 inactive [ 1389.927877][T24050] vivid-003: RDS PS Name: inactive [ 1389.948705][T24050] vivid-003: RDS Radio Text: inactive [ 1390.057303][T24050] vivid-003: RDS Traffic Announcement: false inactive [ 1390.064136][T24050] vivid-003: RDS Traffic Program: false inactive [ 1390.146807][T24050] vivid-003: RDS Music: false inactive [ 1390.176455][T24050] vivid-003: ================== END STATUS ================== [ 1392.854207][T24093] vivid-003: ================= START STATUS ================= [ 1392.862688][T24093] vivid-003: Radio HW Seek Mode: Bounded [ 1392.868639][T24093] vivid-003: Radio Programmable HW Seek: false [ 1392.876285][T24093] vivid-003: RDS Rx I/O Mode: Block I/O [ 1392.916769][T24093] vivid-003: Generate RBDS Instead of RDS: false [ 1392.978787][T24093] vivid-003: RDS Reception: true [ 1392.984191][T24093] vivid-003: RDS Program Type: 0 inactive [ 1392.990689][T24093] vivid-003: RDS PS Name: inactive [ 1392.998766][T24093] vivid-003: RDS Radio Text: inactive [ 1393.004810][T24093] vivid-003: RDS Traffic Announcement: false inactive [ 1393.015597][T24093] vivid-003: RDS Traffic Program: false inactive [ 1393.022124][T24093] vivid-003: RDS Music: false inactive [ 1393.027829][T24093] vivid-003: ================== END STATUS ================== [ 1393.725025][T24100] vivid-003: ================= START STATUS ================= [ 1393.776123][T24100] vivid-003: Radio HW Seek Mode: Bounded [ 1393.797983][T24100] vivid-003: Radio Programmable HW Seek: false [ 1393.815804][T24100] vivid-003: RDS Rx I/O Mode: Block I/O [ 1393.837498][T24100] vivid-003: Generate RBDS Instead of RDS: false [ 1393.853331][T24100] vivid-003: RDS Reception: true [ 1393.858752][T24100] vivid-003: RDS Program Type: 0 inactive [ 1393.864574][T24100] vivid-003: RDS PS Name: inactive [ 1393.874978][T24100] vivid-003: RDS Radio Text: inactive [ 1393.884845][T24100] vivid-003: RDS Traffic Announcement: false inactive [ 1393.891813][T24100] vivid-003: RDS Traffic Program: false inactive [ 1393.898717][T24100] vivid-003: RDS Music: false inactive [ 1393.906236][T24100] vivid-003: ================== END STATUS ================== [ 1395.299892][T24127] vivid-003: ================= START STATUS ================= [ 1395.308094][T24127] vivid-003: Radio HW Seek Mode: Bounded [ 1395.353271][T24127] vivid-003: Radio Programmable HW Seek: false [ 1395.405165][T24127] vivid-003: RDS Rx I/O Mode: Block I/O [ 1395.411332][T24127] vivid-003: Generate RBDS Instead of RDS: false [ 1395.427946][T24127] vivid-003: RDS Reception: true [ 1395.433052][T24127] vivid-003: RDS Program Type: 0 inactive [ 1395.439060][T24127] vivid-003: RDS PS Name: inactive [ 1395.444453][T24127] vivid-003: RDS Radio Text: inactive [ 1395.450249][T24127] vivid-003: RDS Traffic Announcement: false inactive [ 1395.458695][T24127] vivid-003: RDS Traffic Program: false inactive [ 1395.614497][T24127] vivid-003: RDS Music: false inactive [ 1395.623845][T24127] vivid-003: ================== END STATUS ================== [ 1397.366019][T24165] vivid-003: ================= START STATUS ================= [ 1397.375110][T24165] vivid-003: Radio HW Seek Mode: Bounded [ 1397.383209][T24165] vivid-003: Radio Programmable HW Seek: false [ 1397.405598][T24165] vivid-003: RDS Rx I/O Mode: Block I/O [ 1397.419012][T24165] vivid-003: Generate RBDS Instead of RDS: false [ 1397.431191][T24165] vivid-003: RDS Reception: true [ 1397.460608][T24165] vivid-003: RDS Program Type: 0 inactive [ 1397.547866][T24165] vivid-003: RDS PS Name: inactive [ 1397.553134][T24165] vivid-003: RDS Radio Text: inactive [ 1397.580820][T24174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1397.593618][T24165] vivid-003: RDS Traffic Announcement: false inactive [ 1397.600571][T24165] vivid-003: RDS Traffic Program: false inactive [ 1397.607001][T24165] vivid-003: RDS Music: false inactive [ 1397.612621][T24165] vivid-003: ================== END STATUS ================== [ 1397.721824][T24170] vivid-003: ================= START STATUS ================= [ 1397.746025][T24170] vivid-003: Radio HW Seek Mode: Bounded [ 1397.756635][T24170] vivid-003: Radio Programmable HW Seek: false [ 1397.795474][T24170] vivid-003: RDS Rx I/O Mode: Block I/O [ 1397.822785][T24170] vivid-003: Generate RBDS Instead of RDS: false [ 1397.829907][T24170] vivid-003: RDS Reception: true [ 1397.834961][T24170] vivid-003: RDS Program Type: 0 inactive [ 1397.872537][T24170] vivid-003: RDS PS Name: inactive [ 1397.878335][T24170] vivid-003: RDS Radio Text: inactive [ 1397.894133][T24170] vivid-003: RDS Traffic Announcement: false inactive [ 1397.997412][T24170] vivid-003: RDS Traffic Program: false inactive [ 1398.170670][T24174] hsr_slave_0 (unregistering): left promiscuous mode [ 1398.184543][T24170] vivid-003: RDS Music: false inactive [ 1398.191308][T24170] vivid-003: ================== END STATUS ================== [ 1399.761305][T24209] mkiss: ax0: crc mode is auto. [ 1405.130859][T24285] vivid-003: ================= START STATUS ================= [ 1405.207613][T24285] vivid-003: Radio HW Seek Mode: Bounded [ 1405.213404][T24285] vivid-003: Radio Programmable HW Seek: false [ 1405.308426][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1405.343738][T24285] vivid-003: RDS Rx I/O Mode: Block I/O [ 1405.361767][T24285] vivid-003: Generate RBDS Instead of RDS: false [ 1405.381672][T24285] vivid-003: RDS Reception: true [ 1405.400418][T24285] vivid-003: RDS Program Type: 0 inactive [ 1405.419737][T24285] vivid-003: RDS PS Name: inactive [ 1405.438990][T24285] vivid-003: RDS Radio Text: inactive [ 1405.444852][T24285] vivid-003: RDS Traffic Announcement: false inactive [ 1405.452138][T24285] vivid-003: RDS Traffic Program: false inactive [ 1405.458955][T24285] vivid-003: RDS Music: false inactive [ 1405.464825][T24285] vivid-003: ================== END STATUS ================== [ 1406.955731][T24307] vivid-003: ================= START STATUS ================= [ 1407.231854][T24307] vivid-003: Radio HW Seek Mode: Bounded [ 1407.260564][T24307] vivid-003: Radio Programmable HW Seek: false [ 1407.341824][T24307] vivid-003: RDS Rx I/O Mode: Block I/O [ 1407.350714][T24307] vivid-003: Generate RBDS Instead of RDS: false [ 1407.452310][T24307] vivid-003: RDS Reception: true [ 1407.504392][T24307] vivid-003: RDS Program Type: 0 inactive [ 1407.510547][T24307] vivid-003: RDS PS Name: inactive [ 1407.516088][T24307] vivid-003: RDS Radio Text: inactive [ 1407.530396][T24307] vivid-003: RDS Traffic Announcement: false inactive [ 1407.537551][T24307] vivid-003: RDS Traffic Program: false inactive [ 1407.544070][T24307] vivid-003: RDS Music: false inactive [ 1407.549794][T24307] vivid-003: ================== END STATUS ================== [ 1407.585181][T24306] vivid-003: ================= START STATUS ================= [ 1407.699685][T24306] vivid-003: Radio HW Seek Mode: Bounded [ 1407.719653][T24306] vivid-003: Radio Programmable HW Seek: false [ 1407.729561][T24306] vivid-003: RDS Rx I/O Mode: Block I/O [ 1407.773755][T24306] vivid-003: Generate RBDS Instead of RDS: false [ 1407.790868][T24306] vivid-003: RDS Reception: true [ 1407.835583][T24306] vivid-003: RDS Program Type: 0 inactive [ 1407.853195][T24306] vivid-003: RDS PS Name: inactive [ 1407.867397][T24306] vivid-003: RDS Radio Text: inactive [ 1407.893007][T24306] vivid-003: RDS Traffic Announcement: false inactive [ 1407.937753][T24306] vivid-003: RDS Traffic Program: false inactive [ 1407.995583][T24306] vivid-003: RDS Music: false inactive [ 1408.002917][T24306] vivid-003: ================== END STATUS ================== [ 1408.265202][ T30] audit: type=1400 audit(4294977847.568:115): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24320 comm="syz.2.3785" [ 1409.116117][T24339] vivid-003: ================= START STATUS ================= [ 1409.195215][T24339] vivid-003: Radio HW Seek Mode: Bounded [ 1409.201189][T24339] vivid-003: Radio Programmable HW Seek: false [ 1409.207544][T24339] vivid-003: RDS Rx I/O Mode: Block I/O [ 1409.213171][T24339] vivid-003: Generate RBDS Instead of RDS: false [ 1409.219669][T24339] vivid-003: RDS Reception: true [ 1409.224688][T24339] vivid-003: RDS Program Type: 0 inactive [ 1409.230592][T24339] vivid-003: RDS PS Name: inactive [ 1409.235886][T24339] vivid-003: RDS Radio Text: inactive [ 1409.241513][T24339] vivid-003: RDS Traffic Announcement: false inactive [ 1409.249444][T24339] vivid-003: RDS Traffic Program: false inactive [ 1409.255966][T24339] vivid-003: RDS Music: false inactive [ 1409.261647][T24339] vivid-003: ================== END STATUS ================== [ 1409.913076][T24349] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1410.940446][T24367] vivid-003: ================= START STATUS ================= [ 1410.959952][T24367] vivid-003: Radio HW Seek Mode: Bounded [ 1410.965688][T24367] vivid-003: Radio Programmable HW Seek: false [ 1411.002225][T24367] vivid-003: RDS Rx I/O Mode: Block I/O [ 1411.008315][T24367] vivid-003: Generate RBDS Instead of RDS: false [ 1411.014732][T24367] vivid-003: RDS Reception: true [ 1411.019930][T24367] vivid-003: RDS Program Type: 0 inactive [ 1411.027336][T24367] vivid-003: RDS PS Name: inactive [ 1411.032641][T24367] vivid-003: RDS Radio Text: inactive [ 1411.039841][T24367] vivid-003: RDS Traffic Announcement: false inactive [ 1411.047002][T24367] vivid-003: RDS Traffic Program: false inactive [ 1411.053615][T24367] vivid-003: RDS Music: false inactive [ 1411.059295][T24367] vivid-003: ================== END STATUS ================== [ 1411.092625][T24372] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1413.465256][T24392] ERROR: Out of memory at tomoyo_memory_ok. [ 1414.118431][T24410] vivid-003: ================= START STATUS ================= [ 1414.126234][T24410] vivid-003: Radio HW Seek Mode: Bounded [ 1414.132049][T24410] vivid-003: Radio Programmable HW Seek: false [ 1414.138292][T24410] vivid-003: RDS Rx I/O Mode: Block I/O [ 1414.143998][T24410] vivid-003: Generate RBDS Instead of RDS: false [ 1414.150409][T24410] vivid-003: RDS Reception: true [ 1414.155501][T24410] vivid-003: RDS Program Type: 0 inactive [ 1414.161376][T24410] vivid-003: RDS PS Name: inactive [ 1414.166729][T24410] vivid-003: RDS Radio Text: inactive [ 1414.173271][T24410] vivid-003: RDS Traffic Announcement: false inactive [ 1414.180170][T24410] vivid-003: RDS Traffic Program: false inactive [ 1414.186698][T24410] vivid-003: RDS Music: false inactive [ 1414.192364][T24410] vivid-003: ================== END STATUS ================== [ 1414.888743][T24412] vivid-003: ================= START STATUS ================= [ 1414.898217][T24412] vivid-003: Radio HW Seek Mode: Bounded [ 1414.903939][T24412] vivid-003: Radio Programmable HW Seek: false [ 1414.910288][T24412] vivid-003: RDS Rx I/O Mode: Block I/O [ 1414.915940][T24412] vivid-003: Generate RBDS Instead of RDS: false [ 1414.922445][T24412] vivid-003: RDS Reception: true [ 1414.927520][T24412] vivid-003: RDS Program Type: 0 inactive [ 1414.933348][T24412] vivid-003: RDS PS Name: inactive [ 1414.939178][T24412] vivid-003: RDS Radio Text: inactive [ 1414.976367][T24412] vivid-003: RDS Traffic Announcement: false inactive [ 1415.042273][T24412] vivid-003: RDS Traffic Program: false inactive [ 1415.097010][T24412] vivid-003: RDS Music: false inactive [ 1415.135513][T24412] vivid-003: ================== END STATUS ================== [ 1419.951049][T24493] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.3823: No space for directory leaf checksum. Please run e2fsck -D. [ 1419.967426][T24493] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.3823: checksumming directory block 0 [ 1419.981589][T24493] faux_driver regulatory: loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1420.031184][T24493] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.3823: No space for directory leaf checksum. Please run e2fsck -D. [ 1420.059891][T24493] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.3823: checksumming directory block 0 [ 1420.080045][T24493] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1420.092704][T24493] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.3823: No space for directory leaf checksum. Please run e2fsck -D. [ 1420.120733][T24493] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.3823: checksumming directory block 0 [ 1420.124624][T24490] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1420.388673][T24493] faux_driver regulatory: loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1420.411505][T24493] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.3823: No space for directory leaf checksum. Please run e2fsck -D. [ 1420.427220][T24493] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.3823: checksumming directory block 0 [ 1420.449070][T24493] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1420.459383][T24493] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1420.479724][T24493] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1423.192915][T24525] nvme_fabrics: missing parameter 'transport=%s' [ 1423.217720][T24525] nvme_fabrics: missing parameter 'nqn=%s' [ 1423.843902][T24544] netlink: 29 bytes leftover after parsing attributes in process `syz.1.3835'. [ 1424.258558][T24538] vivid-003: ================= START STATUS ================= [ 1424.277164][T24538] vivid-003: Radio HW Seek Mode: Bounded [ 1424.311815][T24538] vivid-003: Radio Programmable HW Seek: false [ 1424.327089][T24538] vivid-003: RDS Rx I/O Mode: Block I/O [ 1424.339939][T24538] vivid-003: Generate RBDS Instead of RDS: false [ 1424.346464][T24538] vivid-003: RDS Reception: true [ 1424.371247][T24538] vivid-003: RDS Program Type: 0 inactive [ 1424.390475][T24538] vivid-003: RDS PS Name: inactive [ 1424.396330][T24538] vivid-003: RDS Radio Text: inactive [ 1424.452985][T24549] ERROR: Out of memory at tomoyo_memory_ok. [ 1424.464841][T24538] vivid-003: RDS Traffic Announcement: false inactive [ 1424.473981][T24538] vivid-003: RDS Traffic Program: false inactive [ 1424.480588][T24538] vivid-003: RDS Music: false inactive [ 1424.486185][T24538] vivid-003: ================== END STATUS ================== [ 1424.499066][T24553] tc_dump_action: action bad kind [ 1426.802432][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1426.808831][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.845091][T24571] vivid-003: ================= START STATUS ================= [ 1426.868997][T24571] vivid-003: Radio HW Seek Mode: Bounded [ 1427.030872][T24571] vivid-003: Radio Programmable HW Seek: false [ 1427.067671][T24571] vivid-003: RDS Rx I/O Mode: Block I/O [ 1427.193955][T24571] vivid-003: Generate RBDS Instead of RDS: false [ 1427.411309][T24571] vivid-003: RDS Reception: true [ 1427.458024][T24571] vivid-003: RDS Program Type: 0 inactive [ 1427.464389][T24571] vivid-003: RDS PS Name: inactive [ 1427.470179][T24571] vivid-003: RDS Radio Text: inactive [ 1427.499246][T24571] vivid-003: RDS Traffic Announcement: false inactive [ 1427.508624][T24571] vivid-003: RDS Traffic Program: false inactive [ 1427.596135][T24571] vivid-003: RDS Music: false inactive [ 1427.631242][T24571] vivid-003: ================== END STATUS ================== [ 1428.681773][T24602] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3847'. [ 1429.406852][T24607] ERROR: Out of memory at tomoyo_memory_ok. [ 1429.627104][T24612] vivid-003: ================= START STATUS ================= [ 1429.639557][T24612] vivid-003: Radio HW Seek Mode: Bounded [ 1429.645424][T24612] vivid-003: Radio Programmable HW Seek: false [ 1429.656200][T24612] vivid-003: RDS Rx I/O Mode: Block I/O [ 1429.661889][T24612] vivid-003: Generate RBDS Instead of RDS: false [ 1429.670946][T24612] vivid-003: RDS Reception: true [ 1429.675960][T24612] vivid-003: RDS Program Type: 0 inactive [ 1429.681840][T24612] vivid-003: RDS PS Name: inactive [ 1429.687129][T24612] vivid-003: RDS Radio Text: inactive [ 1429.692726][T24612] vivid-003: RDS Traffic Announcement: false inactive [ 1429.699604][T24612] vivid-003: RDS Traffic Program: false inactive [ 1429.706023][T24612] vivid-003: RDS Music: false inactive [ 1429.711719][T24612] vivid-003: ================== END STATUS ================== [ 1430.545621][T24630] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1432.752748][T24667] vivid-003: ================= START STATUS ================= [ 1432.794786][T24667] vivid-003: Radio HW Seek Mode: Bounded [ 1432.802252][T24667] vivid-003: Radio Programmable HW Seek: false [ 1432.827320][T24667] vivid-003: RDS Rx I/O Mode: Block I/O [ 1432.851076][T24667] vivid-003: Generate RBDS Instead of RDS: false [ 1432.872134][T24667] vivid-003: RDS Reception: true [ 1432.877452][T24667] vivid-003: RDS Program Type: 0 inactive [ 1432.883361][T24667] vivid-003: RDS PS Name: inactive [ 1432.922747][T24667] vivid-003: RDS Radio Text: inactive [ 1432.928630][T24667] vivid-003: RDS Traffic Announcement: false inactive [ 1432.935924][T24667] vivid-003: RDS Traffic Program: false inactive [ 1432.942575][T24667] vivid-003: RDS Music: false inactive [ 1432.948267][T24667] vivid-003: ================== END STATUS ================== [ 1439.345455][T24750] vivid-003: ================= START STATUS ================= [ 1439.358931][T24750] vivid-003: Radio HW Seek Mode: Bounded [ 1439.368879][T24750] vivid-003: Radio Programmable HW Seek: false [ 1439.388157][T24750] vivid-003: RDS Rx I/O Mode: Block I/O [ 1439.394053][T24750] vivid-003: Generate RBDS Instead of RDS: false [ 1439.404983][T24750] vivid-003: RDS Reception: true [ 1439.410330][T24750] vivid-003: RDS Program Type: 0 inactive [ 1439.427048][T24750] vivid-003: RDS PS Name: inactive [ 1439.434182][T24750] vivid-003: RDS Radio Text: inactive [ 1439.447896][T24750] vivid-003: RDS Traffic Announcement: false inactive [ 1439.500545][T24750] vivid-003: RDS Traffic Program: false inactive [ 1439.523302][T24750] vivid-003: RDS Music: false inactive [ 1439.574246][T24750] vivid-003: ================== END STATUS ================== [ 1442.328109][T24788] vivid-003: ================= START STATUS ================= [ 1442.338530][T24788] vivid-003: Radio HW Seek Mode: Bounded [ 1442.344335][T24788] vivid-003: Radio Programmable HW Seek: false [ 1442.350551][T24788] vivid-003: RDS Rx I/O Mode: Block I/O [ 1442.375240][T24788] vivid-003: Generate RBDS Instead of RDS: false [ 1442.381978][T24788] vivid-003: RDS Reception: true [ 1442.405065][T24788] vivid-003: RDS Program Type: 0 inactive [ 1442.411849][T24788] vivid-003: RDS PS Name: inactive [ 1442.418448][T24788] vivid-003: RDS Radio Text: inactive [ 1442.425394][T24788] vivid-003: RDS Traffic Announcement: false inactive [ 1442.440289][T24788] vivid-003: RDS Traffic Program: false inactive [ 1442.457434][T24788] vivid-003: RDS Music: false inactive [ 1442.475646][T24788] vivid-003: ================== END STATUS ================== [ 1443.352512][T24803] phram: not enough arguments [ 1443.701214][T24815] mkiss: ax0: crc mode is auto. [ 1444.964547][T24833] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1445.496356][T24839] ERROR: Out of memory at tomoyo_memory_ok. [ 1445.609810][T24839] FAULT_INJECTION: forcing a failure. [ 1445.609810][T24839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.632258][T24839] CPU: 1 UID: 0 PID: 24839 Comm: syz.1.3900 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1445.632310][T24839] Tainted: [I]=FIRMWARE_WORKAROUND [ 1445.632323][T24839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1445.632345][T24839] Call Trace: [ 1445.632356][T24839] [ 1445.632368][T24839] dump_stack_lvl+0x16c/0x1f0 [ 1445.632416][T24839] should_fail_ex+0x512/0x640 [ 1445.632459][T24839] _copy_from_user+0x2e/0xd0 [ 1445.632503][T24839] memdup_user+0x6b/0xe0 [ 1445.632542][T24839] strndup_user+0x78/0xe0 [ 1445.632581][T24839] __x64_sys_mount+0x180/0x310 [ 1445.632623][T24839] ? __pfx___x64_sys_mount+0x10/0x10 [ 1445.632674][T24839] do_syscall_64+0xcd/0x490 [ 1445.632713][T24839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.632743][T24839] RIP: 0033:0x7f3a5ab8ebe9 [ 1445.632773][T24839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.632802][T24839] RSP: 002b:00007f3a5ba56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1445.632831][T24839] RAX: ffffffffffffffda RBX: 00007f3a5adb5fa0 RCX: 00007f3a5ab8ebe9 [ 1445.632851][T24839] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1445.632872][T24839] RBP: 00007f3a5ac11e19 R08: 0000200000000240 R09: 0000000000000000 [ 1445.632891][T24839] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1445.632910][T24839] R13: 00007f3a5adb6038 R14: 00007f3a5adb5fa0 R15: 00007ffdd5f03c08 [ 1445.632948][T24839] [ 1445.788539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.982289][T24848] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 1446.231030][T24857] random: crng reseeded on system resumption [ 1446.261111][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.352469][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1446.366031][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.385550][T13725] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1446.401084][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1446.414308][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.431140][T21397] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1446.521831][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1446.668222][T13725] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1446.679051][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.717734][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1446.730715][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.747030][T21397] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1446.757106][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1446.785203][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1446.815268][T13725] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1446.830887][T24864] vivid-003: ================= START STATUS ================= [ 1446.860062][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1446.914058][T24864] vivid-003: Radio HW Seek Mode: Bounded [ 1446.936299][T21397] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1446.949168][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1447.050479][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1447.063602][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1447.079614][T13725] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1447.093212][T13725] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1447.104283][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1447.118985][T13725] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1447.127506][T21397] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1447.138025][T21397] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1447.151325][T21397] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1447.162218][T24864] vivid-003: Radio Programmable HW Seek: false [ 1447.172318][T24864] vivid-003: RDS Rx I/O Mode: Block I/O [ 1447.180073][T24864] vivid-003: Generate RBDS Instead of RDS: false [ 1447.190723][T24864] vivid-003: RDS Reception: true [ 1447.196278][T24864] vivid-003: RDS Program Type: 0 inactive [ 1447.202453][T24864] vivid-003: RDS PS Name: inactive [ 1447.207891][T24864] vivid-003: RDS Radio Text: inactive [ 1447.213441][T24864] vivid-003: RDS Traffic Announcement: false inactive [ 1447.220326][T24864] vivid-003: RDS Traffic Program: false inactive [ 1447.226768][T24864] vivid-003: RDS Music: false inactive [ 1447.232368][T24864] vivid-003: ================== END STATUS ================== [ 1449.589668][T24890] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1457.434581][T24904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1457.925177][T24917] ERROR: Out of memory at tomoyo_memory_ok. [ 1458.954301][T24942] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1460.097663][T24950] vivid-003: ================= START STATUS ================= [ 1460.138013][T24950] vivid-003: Radio HW Seek Mode: Bounded [ 1460.167054][T24950] vivid-003: Radio Programmable HW Seek: false [ 1460.189797][T24950] vivid-003: RDS Rx I/O Mode: Block I/O [ 1460.197368][T24950] vivid-003: Generate RBDS Instead of RDS: false [ 1460.209121][T24950] vivid-003: RDS Reception: true [ 1460.218422][T24950] vivid-003: RDS Program Type: 0 inactive [ 1460.229498][T24950] vivid-003: RDS PS Name: inactive [ 1460.234844][T24950] vivid-003: RDS Radio Text: inactive [ 1460.241523][T24950] vivid-003: RDS Traffic Announcement: false inactive [ 1460.249574][T24950] vivid-003: RDS Traffic Program: false inactive [ 1460.301479][T24950] vivid-003: RDS Music: false inactive [ 1460.346975][T24950] vivid-003: ================== END STATUS ================== [ 1463.015796][T25017] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1463.467915][T25030] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1465.629542][T25072] mkiss: ax0: crc mode is auto. [ 1466.410609][T25065] ima: policy update failed [ 1466.428130][T25082] vivid-003: ================= START STATUS ================= [ 1466.435815][T25082] vivid-003: Radio HW Seek Mode: Bounded [ 1466.443280][T25082] vivid-003: Radio Programmable HW Seek: false [ 1466.450891][T25082] vivid-003: RDS Rx I/O Mode: Block I/O [ 1466.456515][T25082] vivid-003: Generate RBDS Instead of RDS: false [ 1466.464555][T25082] vivid-003: RDS Reception: true [ 1466.470472][T25082] vivid-003: RDS Program Type: 0 inactive [ 1466.476455][T25082] vivid-003: RDS PS Name: inactive [ 1466.481879][T25082] vivid-003: RDS Radio Text: inactive [ 1466.487621][T25082] vivid-003: RDS Traffic Announcement: false inactive [ 1466.494496][T25082] vivid-003: RDS Traffic Program: false inactive [ 1466.501153][T25082] vivid-003: RDS Music: false inactive [ 1466.507169][T25082] vivid-003: ================== END STATUS ================== [ 1466.515326][ T30] audit: type=1802 audit(4294977906.022:116): pid=25065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3951" res=0 errno=0 [ 1467.681596][T25094] vivid-003: ================= START STATUS ================= [ 1467.689610][T25094] vivid-003: Radio HW Seek Mode: Bounded [ 1467.695743][T25094] vivid-003: Radio Programmable HW Seek: false [ 1467.702523][T25094] vivid-003: RDS Rx I/O Mode: Block I/O [ 1467.708170][T25094] vivid-003: Generate RBDS Instead of RDS: false [ 1467.790105][T25094] vivid-003: RDS Reception: true [ 1467.795228][T25094] vivid-003: RDS Program Type: 0 inactive [ 1467.809947][T25094] vivid-003: RDS PS Name: inactive [ 1467.820160][T25094] vivid-003: RDS Radio Text: inactive [ 1467.825969][T25094] vivid-003: RDS Traffic Announcement: false inactive [ 1467.833709][T25094] vivid-003: RDS Traffic Program: false inactive [ 1467.840521][T25094] vivid-003: RDS Music: false inactive [ 1467.849944][T25094] vivid-003: ================== END STATUS ================== [ 1469.284529][T25121] vivid-003: ================= START STATUS ================= [ 1469.324491][T25121] vivid-003: Radio HW Seek Mode: Bounded [ 1469.462008][T25121] vivid-003: Radio Programmable HW Seek: false [ 1469.468345][T25121] vivid-003: RDS Rx I/O Mode: Block I/O [ 1469.482181][T25121] vivid-003: Generate RBDS Instead of RDS: false [ 1469.501735][T25121] vivid-003: RDS Reception: true [ 1469.516038][T25121] vivid-003: RDS Program Type: 0 inactive [ 1469.522287][T25121] vivid-003: RDS PS Name: inactive [ 1469.527819][T25121] vivid-003: RDS Radio Text: inactive [ 1469.536067][T25121] vivid-003: RDS Traffic Announcement: false inactive [ 1469.549606][T25121] vivid-003: RDS Traffic Program: false inactive [ 1469.556605][T25121] vivid-003: RDS Music: false inactive [ 1469.562866][T25121] vivid-003: ================== END STATUS ================== [ 1470.139950][T25127] vivid-003: ================= START STATUS ================= [ 1470.147914][T25127] vivid-003: Radio HW Seek Mode: Bounded [ 1470.157567][T25127] vivid-003: Radio Programmable HW Seek: false [ 1470.163959][T25127] vivid-003: RDS Rx I/O Mode: Block I/O [ 1470.169992][T25127] vivid-003: Generate RBDS Instead of RDS: false [ 1470.179601][T25127] vivid-003: RDS Reception: true [ 1470.184574][T25127] vivid-003: RDS Program Type: 0 inactive [ 1470.213182][T25127] vivid-003: RDS PS Name: inactive [ 1470.225303][T25127] vivid-003: RDS Radio Text: inactive [ 1470.242397][T25127] vivid-003: RDS Traffic Announcement: false inactive [ 1470.274183][T25127] vivid-003: RDS Traffic Program: false inactive [ 1470.280993][T25127] vivid-003: RDS Music: false inactive [ 1470.292973][T25127] vivid-003: ================== END STATUS ================== [ 1475.597935][T25205] ima: policy update failed [ 1475.621995][ T30] audit: type=1802 audit(4294977915.270:117): pid=25205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3982" res=0 errno=0 [ 1475.683083][T25210] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1475.742450][T25216] ERROR: Out of memory at tomoyo_memory_ok. [ 1476.594558][T25232] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1476.919226][T25241] mkiss: ax0: crc mode is auto. [ 1478.279136][T25258] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1478.948290][T25269] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1479.112408][T25266] vivid-003: ================= START STATUS ================= [ 1479.120191][T25266] vivid-003: Radio HW Seek Mode: Bounded [ 1479.133539][T25272] FAULT_INJECTION: forcing a failure. [ 1479.133539][T25272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.160855][T25266] vivid-003: Radio Programmable HW Seek: false [ 1479.195925][T25272] CPU: 1 UID: 0 PID: 25272 Comm: syz.1.3995 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1479.195979][T25272] Tainted: [I]=FIRMWARE_WORKAROUND [ 1479.195992][T25272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1479.196012][T25272] Call Trace: [ 1479.196023][T25272] [ 1479.196037][T25272] dump_stack_lvl+0x16c/0x1f0 [ 1479.196080][T25272] should_fail_ex+0x512/0x640 [ 1479.196125][T25272] _copy_to_user+0x32/0xd0 [ 1479.196173][T25272] simple_read_from_buffer+0xcb/0x170 [ 1479.196210][T25272] proc_fail_nth_read+0x197/0x240 [ 1479.196247][T25272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1479.196286][T25272] ? rw_verify_area+0xcf/0x6c0 [ 1479.196318][T25272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1479.196354][T25272] vfs_read+0x1e4/0xc60 [ 1479.196399][T25272] ? __pfx_vfs_read+0x10/0x10 [ 1479.196437][T25272] ? do_sys_openat2+0x157/0x1d0 [ 1479.196486][T25272] ? __pfx_do_sys_openat2+0x10/0x10 [ 1479.196565][T25272] ksys_read+0x12a/0x250 [ 1479.196603][T25272] ? __pfx_ksys_read+0x10/0x10 [ 1479.196653][T25272] do_syscall_64+0xcd/0x490 [ 1479.196693][T25272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.196726][T25272] RIP: 0033:0x7f3a5ab8d5fc [ 1479.196752][T25272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1479.196784][T25272] RSP: 002b:00007f3a5ba56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1479.196814][T25272] RAX: ffffffffffffffda RBX: 00007f3a5adb5fa0 RCX: 00007f3a5ab8d5fc [ 1479.196835][T25272] RDX: 000000000000000f RSI: 00007f3a5ba560a0 RDI: 0000000000000002 [ 1479.196855][T25272] RBP: 00007f3a5ba56090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.196875][T25272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.196893][T25272] R13: 00007f3a5adb6038 R14: 00007f3a5adb5fa0 R15: 00007ffdd5f03c08 [ 1479.196932][T25272] [ 1479.388301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.479773][T25266] vivid-003: RDS Rx I/O Mode: Block I/O [ 1479.485446][T25266] vivid-003: Generate RBDS Instead of RDS: false [ 1479.492140][T25266] vivid-003: RDS Reception: true [ 1479.497194][T25266] vivid-003: RDS Program Type: 0 inactive [ 1479.503049][T25266] vivid-003: RDS PS Name: inactive [ 1479.508320][T25266] vivid-003: RDS Radio Text: inactive [ 1479.513936][T25266] vivid-003: RDS Traffic Announcement: false inactive [ 1479.520833][T25266] vivid-003: RDS Traffic Program: false inactive [ 1479.527243][T25266] vivid-003: RDS Music: false inactive [ 1479.532838][T25266] vivid-003: ================== END STATUS ================== [ 1479.944898][T25279] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3997'. [ 1484.414531][T25349] vivid-003: ================= START STATUS ================= [ 1484.422439][T25349] vivid-003: Radio HW Seek Mode: Bounded [ 1484.428610][T25349] vivid-003: Radio Programmable HW Seek: false [ 1484.435228][T25349] vivid-003: RDS Rx I/O Mode: Block I/O [ 1484.440853][T25349] vivid-003: Generate RBDS Instead of RDS: false [ 1484.447319][T25349] vivid-003: RDS Reception: true [ 1484.452335][T25349] vivid-003: RDS Program Type: 0 inactive [ 1484.458278][T25349] vivid-003: RDS PS Name: inactive [ 1484.463609][T25349] vivid-003: RDS Radio Text: inactive [ 1484.470679][T25349] vivid-003: RDS Traffic Announcement: false inactive [ 1484.478918][T25349] vivid-003: RDS Traffic Program: false inactive [ 1484.485399][T25349] vivid-003: RDS Music: false inactive [ 1484.490969][T25349] vivid-003: ================== END STATUS ================== [ 1487.112460][T25381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4011'. [ 1487.663067][T25388] mkiss: ax0: crc mode is auto. [ 1487.945657][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.962904][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.025409][T25391] busy [ 1489.141672][T25407] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1490.856869][T25421] random: crng reseeded on system resumption [ 1490.864549][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.882320][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1490.900879][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.916816][T13725] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1490.931157][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1490.995234][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.011433][T13823] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1491.029674][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1491.050160][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.066245][T13725] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1491.076121][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1491.094934][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.112598][T13823] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1491.122856][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1491.139663][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.156352][T13725] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1491.240756][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1491.267309][T13725] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.283934][T13823] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1491.316757][T13725] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:2: checksumming directory block 0 [ 1491.356683][T13823] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1491.373385][T13725] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1491.516587][T13725] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1491.529176][T13823] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:4: checksumming directory block 0 [ 1491.575493][T13725] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1491.613021][T25435] mkiss: ax0: crc mode is auto. [ 1491.635725][T13823] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1491.675795][T13823] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1491.717487][T13823] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1493.511424][T25458] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1494.784597][T25465] vivid-003: ================= START STATUS ================= [ 1494.808622][T25465] vivid-003: Radio HW Seek Mode: Bounded [ 1494.828785][T25465] vivid-003: Radio Programmable HW Seek: false [ 1494.878820][T25465] vivid-003: RDS Rx I/O Mode: Block I/O [ 1494.888947][T25465] vivid-003: Generate RBDS Instead of RDS: false [ 1494.917959][T25465] vivid-003: RDS Reception: true [ 1494.941308][T25465] vivid-003: RDS Program Type: 0 inactive [ 1494.947289][T25465] vivid-003: RDS PS Name: inactive [ 1494.953091][T25465] vivid-003: RDS Radio Text: inactive [ 1494.968196][T25465] vivid-003: RDS Traffic Announcement: false inactive [ 1494.983934][T25465] vivid-003: RDS Traffic Program: false inactive [ 1494.993898][T25465] vivid-003: RDS Music: false inactive [ 1495.004123][T25465] vivid-003: ================== END STATUS ================== [ 1496.464182][T25474] vivid-003: ================= START STATUS ================= [ 1496.492289][T25474] vivid-003: Radio HW Seek Mode: Bounded [ 1496.498009][T25474] vivid-003: Radio Programmable HW Seek: false [ 1496.509700][T25474] vivid-003: RDS Rx I/O Mode: Block I/O [ 1496.529726][T25474] vivid-003: Generate RBDS Instead of RDS: false [ 1496.540069][T25474] vivid-003: RDS Reception: true [ 1496.545060][T25474] vivid-003: RDS Program Type: 0 inactive [ 1496.560721][T25474] vivid-003: RDS PS Name: inactive [ 1496.565998][T25474] vivid-003: RDS Radio Text: inactive [ 1496.581721][T25474] vivid-003: RDS Traffic Announcement: false inactive [ 1496.595433][T25474] vivid-003: RDS Traffic Program: false inactive [ 1496.606023][T25474] vivid-003: RDS Music: false inactive [ 1496.616656][T25474] vivid-003: ================== END STATUS ================== [ 1498.444131][T25490] mkiss: ax0: crc mode is auto. [ 1502.022022][T25497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1502.058065][T13723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1502.077575][T13723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1502.085798][T13723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1502.094627][T13723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1502.105108][T13723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1502.482869][T25513] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1503.393423][T25524] vivid-003: ================= START STATUS ================= [ 1503.401385][T25524] vivid-003: Radio HW Seek Mode: Bounded [ 1503.407187][T25524] vivid-003: Radio Programmable HW Seek: false [ 1503.413479][T25524] vivid-003: RDS Rx I/O Mode: Block I/O [ 1503.420576][T25524] vivid-003: Generate RBDS Instead of RDS: false [ 1503.428520][T25524] vivid-003: RDS Reception: true [ 1503.433598][T25524] vivid-003: RDS Program Type: 0 inactive [ 1503.439412][T25524] vivid-003: RDS PS Name: inactive [ 1503.444787][T25524] vivid-003: RDS Radio Text: inactive [ 1503.450334][T25524] vivid-003: RDS Traffic Announcement: false inactive [ 1503.457255][T25524] vivid-003: RDS Traffic Program: false inactive [ 1503.463783][T25524] vivid-003: RDS Music: false inactive [ 1503.469328][T25524] vivid-003: ================== END STATUS ================== [ 1503.670204][T25437] chnl_net:caif_netlink_parms(): no params data found [ 1503.738172][T25528] netlink: 29 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1504.166280][T13723] Bluetooth: hci0: command tx timeout [ 1504.618781][T25437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.654953][T25437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.677758][T25437] bridge_slave_0: entered allmulticast mode [ 1504.722066][T25437] bridge_slave_0: entered promiscuous mode [ 1504.748294][T25437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.756814][T25437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.764374][T25437] bridge_slave_1: entered allmulticast mode [ 1504.782961][T25437] bridge_slave_1: entered promiscuous mode [ 1504.934940][T25437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.985927][T25437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.553857][T25551] random: crng reseeded on system resumption [ 1505.604971][T21384] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:10: No space for directory leaf checksum. Please run e2fsck -D. [ 1505.621546][T21384] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:10: checksumming directory block 0 [ 1505.641900][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1505.665602][T21384] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1505.683169][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1505.701953][T21384] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:10: No space for directory leaf checksum. Please run e2fsck -D. [ 1505.723108][T21397] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1505.736103][T21384] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:10: checksumming directory block 0 [ 1505.752558][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1505.771444][T21384] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1505.781761][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1505.805853][T25437] team0: Port device team_slave_0 added [ 1505.836495][T25437] team0: Port device team_slave_1 added [ 1505.852257][T21397] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1505.863734][T21384] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:10: No space for directory leaf checksum. Please run e2fsck -D. [ 1506.041133][T21384] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:10: checksumming directory block 0 [ 1506.060495][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1506.081651][T21384] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db.p7s failed with error -74 [ 1506.096528][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1506.112301][T21384] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:10: No space for directory leaf checksum. Please run e2fsck -D. [ 1506.128338][T21397] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-11952-g6e64f4580381/regulatory.db failed with error -74 [ 1506.216288][T21384] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:10: checksumming directory block 0 [ 1506.229035][T13723] Bluetooth: hci0: command tx timeout [ 1506.305365][T21397] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm kworker/u10:16: No space for directory leaf checksum. Please run e2fsck -D. [ 1506.321502][T21384] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1506.323234][T25437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.358236][T21384] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1506.381681][T21397] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm kworker/u10:16: checksumming directory block 0 [ 1506.399816][T21384] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1506.422184][T25437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.467020][T21397] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1506.499176][T25437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.509781][T21397] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1506.509830][T21397] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1506.539401][T25437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.554630][T25437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.607350][T25437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.707970][T25437] hsr_slave_0: entered promiscuous mode [ 1506.750338][T25437] hsr_slave_1: entered promiscuous mode [ 1506.794845][T25437] debugfs: 'hsr0' already exists in 'hsr' [ 1506.828936][T25437] Cannot create hsr debugfs directory [ 1507.735977][T25563] vivid-003: ================= START STATUS ================= [ 1507.744457][T25563] vivid-003: Radio HW Seek Mode: Bounded [ 1507.754568][T25563] vivid-003: Radio Programmable HW Seek: false [ 1507.764900][T25563] vivid-003: RDS Rx I/O Mode: Block I/O [ 1507.769403][T25437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1507.795905][T25563] vivid-003: Generate RBDS Instead of RDS: false [ 1507.810208][T25563] vivid-003: RDS Reception: true [ 1507.844413][T25563] vivid-003: RDS Program Type: 0 inactive [ 1507.856599][T25563] vivid-003: RDS PS Name: inactive [ 1507.863701][T25437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1507.870646][T25563] vivid-003: RDS Radio Text: inactive [ 1507.876297][T25563] vivid-003: RDS Traffic Announcement: false inactive [ 1507.883489][T25563] vivid-003: RDS Traffic Program: false inactive [ 1507.894156][T25563] vivid-003: RDS Music: false inactive [ 1507.901719][T25563] vivid-003: ================== END STATUS ================== [ 1507.940889][T25437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1507.969312][T25437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1508.300095][T13723] Bluetooth: hci0: command tx timeout [ 1508.452269][T25437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.570861][T25437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.625129][T21386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.632329][T21386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.952863][T21399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.960064][T21399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.274145][T25579] mkiss: ax0: crc mode is auto. [ 1510.270548][T25437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.357288][T13723] Bluetooth: hci0: command tx timeout [ 1510.854644][T25599] vivid-003: ================= START STATUS ================= [ 1510.863424][T25599] vivid-003: Radio HW Seek Mode: Bounded [ 1510.869941][T25599] vivid-003: Radio Programmable HW Seek: false [ 1510.877418][T25599] vivid-003: RDS Rx I/O Mode: Block I/O [ 1510.883724][T25599] vivid-003: Generate RBDS Instead of RDS: false [ 1510.891467][T25599] vivid-003: RDS Reception: true [ 1510.897272][T25599] vivid-003: RDS Program Type: 0 inactive [ 1510.912569][T25599] vivid-003: RDS PS Name: inactive [ 1510.929998][T25599] vivid-003: RDS Radio Text: inactive [ 1510.946911][T25599] vivid-003: RDS Traffic Announcement: false inactive [ 1511.026186][T25599] vivid-003: RDS Traffic Program: false inactive [ 1511.032641][T25599] vivid-003: RDS Music: false inactive [ 1511.038753][T25599] vivid-003: ================== END STATUS ================== [ 1511.438456][T25437] veth0_vlan: entered promiscuous mode [ 1511.533612][T25437] veth1_vlan: entered promiscuous mode [ 1511.731101][T25437] veth0_macvtap: entered promiscuous mode [ 1511.749966][T25437] veth1_macvtap: entered promiscuous mode [ 1511.793308][T25437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.841482][T25437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.995001][T14441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.004661][T14441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.035086][T14441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.055372][T14441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.778430][T21384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.809193][T21384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.954814][T21384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.978369][T21384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.466828][T25629] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1517.591674][T25626] vivid-003: ================= START STATUS ================= [ 1517.633368][T25626] vivid-003: Radio HW Seek Mode: Bounded [ 1517.674818][T25626] vivid-003: Radio Programmable HW Seek: false [ 1517.728631][T25626] vivid-003: RDS Rx I/O Mode: Block I/O [ 1517.740925][T25626] vivid-003: Generate RBDS Instead of RDS: false [ 1517.747353][T25626] vivid-003: RDS Reception: true [ 1517.963944][T25626] vivid-003: RDS Program Type: 0 inactive [ 1517.970148][T25626] vivid-003: RDS PS Name: inactive [ 1517.975477][T25626] vivid-003: RDS Radio Text: inactive [ 1517.981964][T25626] vivid-003: RDS Traffic Announcement: false inactive [ 1517.992057][T25626] vivid-003: RDS Traffic Program: false inactive [ 1518.080945][T25626] vivid-003: RDS Music: false inactive [ 1518.140100][T25626] vivid-003: ================== END STATUS ================== [ 1518.181096][T25630] vivid-003: ================= START STATUS ================= [ 1518.205760][T25630] vivid-003: Radio HW Seek Mode: Bounded [ 1518.366315][T25630] vivid-003: Radio Programmable HW Seek: false [ 1518.372603][T25630] vivid-003: RDS Rx I/O Mode: Block I/O [ 1518.647161][T25630] vivid-003: Generate RBDS Instead of RDS: false [ 1518.653571][T25630] vivid-003: RDS Reception: true [ 1518.714742][T25630] vivid-003: RDS Program Type: 0 inactive [ 1518.914731][T25630] vivid-003: RDS PS Name: inactive [ 1518.920003][T25630] vivid-003: RDS Radio Text: inactive [ 1519.062336][T25630] vivid-003: RDS Traffic Announcement: false inactive [ 1519.101657][T25630] vivid-003: RDS Traffic Program: false inactive [ 1519.179453][T25630] vivid-003: RDS Music: false inactive [ 1519.200832][T25630] vivid-003: ================== END STATUS ================== [ 1522.273575][T25687] netlink: 29 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1522.527362][T25686] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1523.117376][T25688] vivid-003: ================= START STATUS ================= [ 1523.125164][T25688] vivid-003: Radio HW Seek Mode: Bounded [ 1523.130986][T25688] vivid-003: Radio Programmable HW Seek: false [ 1523.137429][T25688] vivid-003: RDS Rx I/O Mode: Block I/O [ 1523.143362][T25688] vivid-003: Generate RBDS Instead of RDS: false [ 1523.149771][T25688] vivid-003: RDS Reception: true [ 1523.157217][T25688] vivid-003: RDS Program Type: 0 inactive [ 1523.163104][T25688] vivid-003: RDS PS Name: inactive [ 1523.168445][T25688] vivid-003: RDS Radio Text: inactive [ 1523.174202][T25688] vivid-003: RDS Traffic Announcement: false inactive [ 1523.181167][T25688] vivid-003: RDS Traffic Program: false inactive [ 1523.187640][T25688] vivid-003: RDS Music: false inactive [ 1523.193396][T25688] vivid-003: ================== END STATUS ================== [ 1525.355414][T25710] vivid-003: ================= START STATUS ================= [ 1525.363199][T25710] vivid-003: Radio HW Seek Mode: Bounded [ 1525.368999][T25710] vivid-003: Radio Programmable HW Seek: false [ 1525.375240][T25710] vivid-003: RDS Rx I/O Mode: Block I/O [ 1525.380914][T25710] vivid-003: Generate RBDS Instead of RDS: false [ 1525.387318][T25710] vivid-003: RDS Reception: true [ 1525.392385][T25710] vivid-003: RDS Program Type: 0 inactive [ 1525.398207][T25710] vivid-003: RDS PS Name: inactive [ 1525.403665][T25710] vivid-003: RDS Radio Text: inactive [ 1525.413050][T25710] vivid-003: RDS Traffic Announcement: false inactive [ 1525.421518][T25710] vivid-003: RDS Traffic Program: false inactive [ 1525.427949][T25710] vivid-003: RDS Music: false inactive [ 1525.435357][T25710] vivid-003: ================== END STATUS ================== [ 1525.874829][T25714] vivid-003: ================= START STATUS ================= [ 1526.085761][T25714] vivid-003: Radio HW Seek Mode: Bounded [ 1526.091466][T25714] vivid-003: Radio Programmable HW Seek: false [ 1526.134576][T25714] vivid-003: RDS Rx I/O Mode: Block I/O [ 1526.164638][T25714] vivid-003: Generate RBDS Instead of RDS: false [ 1526.171041][T25714] vivid-003: RDS Reception: true [ 1526.238569][T25714] vivid-003: RDS Program Type: 0 inactive [ 1526.246213][T25714] vivid-003: RDS PS Name: inactive [ 1526.274368][T25714] vivid-003: RDS Radio Text: inactive [ 1526.291548][T25714] vivid-003: RDS Traffic Announcement: false inactive [ 1526.298915][T25714] vivid-003: RDS Traffic Program: false inactive [ 1526.324073][T25714] vivid-003: RDS Music: false inactive [ 1526.330078][T25714] vivid-003: ================== END STATUS ================== [ 1529.531777][T25768] vivid-003: ================= START STATUS ================= [ 1529.561867][T25768] vivid-003: Radio HW Seek Mode: Bounded [ 1529.626593][T25768] vivid-003: Radio Programmable HW Seek: false [ 1529.632813][T25768] vivid-003: RDS Rx I/O Mode: Block I/O [ 1529.717413][T25768] vivid-003: Generate RBDS Instead of RDS: false [ 1529.817812][T25768] vivid-003: RDS Reception: true [ 1529.822822][T25768] vivid-003: RDS Program Type: 0 inactive [ 1529.850475][T25768] vivid-003: RDS PS Name: inactive [ 1529.856106][T25768] vivid-003: RDS Radio Text: inactive [ 1529.877626][T25768] vivid-003: RDS Traffic Announcement: false inactive [ 1529.918951][T25768] vivid-003: RDS Traffic Program: false inactive [ 1529.970090][T25768] vivid-003: RDS Music: false inactive [ 1530.072430][T25768] vivid-003: ================== END STATUS ================== [ 1531.738326][T25801] vivid-003: ================= START STATUS ================= [ 1531.746365][T25801] vivid-003: Radio HW Seek Mode: Bounded [ 1531.752072][T25801] vivid-003: Radio Programmable HW Seek: false [ 1531.771453][T25801] vivid-003: RDS Rx I/O Mode: Block I/O [ 1531.857622][T25801] vivid-003: Generate RBDS Instead of RDS: false [ 1531.881739][T25801] vivid-003: RDS Reception: true [ 1531.892084][T25801] vivid-003: RDS Program Type: 0 inactive [ 1531.905850][T25801] vivid-003: RDS PS Name: inactive [ 1531.920469][T25801] vivid-003: RDS Radio Text: inactive [ 1531.944195][T25801] vivid-003: RDS Traffic Announcement: false inactive [ 1531.965412][T25801] vivid-003: RDS Traffic Program: false inactive [ 1532.001205][T25801] vivid-003: RDS Music: false inactive [ 1532.015306][T25801] vivid-003: ================== END STATUS ================== [ 1532.117934][T25809] mkiss: ax0: crc mode is auto. [ 1533.221655][T25819] mkiss: ax0: crc mode is auto. [ 1536.019595][T25852] vivid-003: ================= START STATUS ================= [ 1536.095907][T25852] vivid-003: Radio HW Seek Mode: Bounded [ 1536.101646][T25852] vivid-003: Radio Programmable HW Seek: false [ 1536.234054][T25852] vivid-003: RDS Rx I/O Mode: Block I/O [ 1536.239697][T25852] vivid-003: Generate RBDS Instead of RDS: false [ 1536.300601][T25852] vivid-003: RDS Reception: true [ 1536.306211][T25852] vivid-003: RDS Program Type: 0 inactive [ 1536.312226][T25852] vivid-003: RDS PS Name: inactive [ 1536.342653][T25852] vivid-003: RDS Radio Text: inactive [ 1536.556430][T25852] vivid-003: RDS Traffic Announcement: false inactive [ 1536.582757][T25852] vivid-003: RDS Traffic Program: false inactive [ 1536.589203][T25852] vivid-003: RDS Music: false inactive [ 1536.640675][T25852] vivid-003: ================== END STATUS ================== [ 1537.486199][T25858] vivid-003: ================= START STATUS ================= [ 1537.493881][T25858] vivid-003: Radio HW Seek Mode: Bounded [ 1537.535875][T25858] vivid-003: Radio Programmable HW Seek: false [ 1537.613657][T25858] vivid-003: RDS Rx I/O Mode: Block I/O [ 1537.665649][T25858] vivid-003: Generate RBDS Instead of RDS: false [ 1537.673453][T25858] vivid-003: RDS Reception: true [ 1537.679092][T25858] vivid-003: RDS Program Type: 0 inactive [ 1537.749094][T25858] vivid-003: RDS PS Name: inactive [ 1537.913543][T25858] vivid-003: RDS Radio Text: inactive [ 1537.919243][T25858] vivid-003: RDS Traffic Announcement: false inactive [ 1537.932690][T25858] vivid-003: RDS Traffic Program: false inactive [ 1537.939327][T25858] vivid-003: RDS Music: false inactive [ 1537.951687][T25858] vivid-003: ================== END STATUS ================== [ 1538.669538][T25879] vivid-003: ================= START STATUS ================= [ 1538.680095][T25879] vivid-003: Radio HW Seek Mode: Bounded [ 1538.685791][T25879] vivid-003: Radio Programmable HW Seek: false [ 1538.695385][T25879] vivid-003: RDS Rx I/O Mode: Block I/O [ 1538.720855][T25879] vivid-003: Generate RBDS Instead of RDS: false [ 1538.815483][T25879] vivid-003: RDS Reception: true [ 1538.820653][T25879] vivid-003: RDS Program Type: 0 inactive [ 1538.826525][T25879] vivid-003: RDS PS Name: inactive [ 1538.831997][T25879] vivid-003: RDS Radio Text: inactive [ 1538.837638][T25879] vivid-003: RDS Traffic Announcement: false inactive [ 1538.844701][T25879] vivid-003: RDS Traffic Program: false inactive [ 1538.851548][T25879] vivid-003: RDS Music: false inactive [ 1538.857092][T25879] vivid-003: ================== END STATUS ================== [ 1539.128938][T25884] mkiss: ax0: crc mode is auto. [ 1540.211557][T25892] vivid-003: ================= START STATUS ================= [ 1540.226314][T25892] vivid-003: Radio HW Seek Mode: Bounded [ 1540.233881][T25892] vivid-003: Radio Programmable HW Seek: false [ 1540.471767][T25892] vivid-003: RDS Rx I/O Mode: Block I/O [ 1540.483119][T25892] vivid-003: Generate RBDS Instead of RDS: false [ 1540.492605][T25892] vivid-003: RDS Reception: true [ 1540.658200][T25892] vivid-003: RDS Program Type: 0 inactive [ 1540.767030][T25892] vivid-003: RDS PS Name: inactive [ 1540.774838][T25892] vivid-003: RDS Radio Text: inactive [ 1540.786786][T25892] vivid-003: RDS Traffic Announcement: false inactive [ 1540.810609][T25892] vivid-003: RDS Traffic Program: false inactive [ 1540.822186][T25892] vivid-003: RDS Music: false inactive [ 1540.848037][T25892] vivid-003: ================== END STATUS ================== [ 1542.821709][T25937] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1543.474583][T25949] vivid-003: ================= START STATUS ================= [ 1543.483372][T25949] vivid-003: Radio HW Seek Mode: Bounded [ 1543.489845][T25949] vivid-003: Radio Programmable HW Seek: false [ 1543.506989][T25949] vivid-003: RDS Rx I/O Mode: Block I/O [ 1543.588836][T25949] vivid-003: Generate RBDS Instead of RDS: false [ 1543.597938][T25949] vivid-003: RDS Reception: true [ 1543.609469][T25949] vivid-003: RDS Program Type: 0 inactive [ 1543.676854][T25949] vivid-003: RDS PS Name: inactive [ 1543.686366][T25949] vivid-003: RDS Radio Text: inactive [ 1543.691970][T25949] vivid-003: RDS Traffic Announcement: false inactive [ 1543.699153][T25949] vivid-003: RDS Traffic Program: false inactive [ 1543.705766][T25949] vivid-003: RDS Music: false inactive [ 1543.711449][T25949] vivid-003: ================== END STATUS ================== [ 1544.572702][T25964] netlink: 531 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1545.748342][T25976] vivid-003: ================= START STATUS ================= [ 1545.818257][T25976] vivid-003: Radio HW Seek Mode: Bounded [ 1545.824484][T25976] vivid-003: Radio Programmable HW Seek: false [ 1545.835061][T25976] vivid-003: RDS Rx I/O Mode: Block I/O [ 1545.840717][T25976] vivid-003: Generate RBDS Instead of RDS: false [ 1545.848434][T25976] vivid-003: RDS Reception: true [ 1545.853586][T25976] vivid-003: RDS Program Type: 0 inactive [ 1545.865364][T25976] vivid-003: RDS PS Name: inactive [ 1545.959454][T25976] vivid-003: RDS Radio Text: inactive [ 1545.966036][T25976] vivid-003: RDS Traffic Announcement: false inactive [ 1546.131040][T25976] vivid-003: RDS Traffic Program: false inactive [ 1546.158262][T25976] vivid-003: RDS Music: false inactive [ 1546.647298][T25976] vivid-003: ================== END STATUS ================== [ 1546.674990][T25975] vivid-003: ================= START STATUS ================= [ 1546.702779][T25975] vivid-003: Radio HW Seek Mode: Bounded [ 1546.728499][T25975] vivid-003: Radio Programmable HW Seek: false [ 1546.735079][T25975] vivid-003: RDS Rx I/O Mode: Block I/O [ 1546.741243][T25975] vivid-003: Generate RBDS Instead of RDS: false [ 1546.916558][T25975] vivid-003: RDS Reception: true [ 1546.921618][T25975] vivid-003: RDS Program Type: 0 inactive [ 1547.232708][T25975] vivid-003: RDS PS Name: inactive [ 1547.348301][T25975] vivid-003: RDS Radio Text: inactive [ 1547.432296][T25975] vivid-003: RDS Traffic Announcement: false inactive [ 1547.439637][T25975] vivid-003: RDS Traffic Program: false inactive [ 1547.459773][T25975] vivid-003: RDS Music: false inactive [ 1547.529915][T25975] vivid-003: ================== END STATUS ================== [ 1548.315995][T13723] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1549.051904][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.064595][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.732221][T26004] vivid-003: ================= START STATUS ================= [ 1549.739904][T26004] vivid-003: Radio HW Seek Mode: Bounded [ 1549.771289][T26004] vivid-003: Radio Programmable HW Seek: false [ 1549.802855][T26004] vivid-003: RDS Rx I/O Mode: Block I/O [ 1549.827658][T26004] vivid-003: Generate RBDS Instead of RDS: false [ 1549.924159][T26004] vivid-003: RDS Reception: true [ 1549.930748][T26004] vivid-003: RDS Program Type: 0 inactive [ 1549.936724][T26004] vivid-003: RDS PS Name: inactive [ 1549.944046][T26004] vivid-003: RDS Radio Text: inactive [ 1549.949829][T26004] vivid-003: RDS Traffic Announcement: false inactive [ 1549.956940][T26004] vivid-003: RDS Traffic Program: false inactive [ 1549.979924][T26004] vivid-003: RDS Music: false inactive [ 1550.049718][T26004] vivid-003: ================== END STATUS ================== [ 1551.962856][T26034] vivid-003: ================= START STATUS ================= [ 1551.970801][T26034] vivid-003: Radio HW Seek Mode: Bounded [ 1551.976517][T26034] vivid-003: Radio Programmable HW Seek: false [ 1551.983543][T26034] vivid-003: RDS Rx I/O Mode: Block I/O [ 1551.989603][T26034] vivid-003: Generate RBDS Instead of RDS: false [ 1551.996448][T26034] vivid-003: RDS Reception: true [ 1552.003594][T26034] vivid-003: RDS Program Type: 0 inactive [ 1552.009837][T26034] vivid-003: RDS PS Name: inactive [ 1552.049313][T26034] vivid-003: RDS Radio Text: inactive [ 1552.069987][T26034] vivid-003: RDS Traffic Announcement: false inactive [ 1552.076834][T26034] vivid-003: RDS Traffic Program: false inactive [ 1552.165601][T26034] vivid-003: RDS Music: false inactive [ 1552.171544][T26034] vivid-003: ================== END STATUS ================== [ 1552.303022][T26038] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1553.352669][T26056] binder: 26054:26056 ioctl c00c620f 200000000240 returned -22 [ 1553.396580][ T30] audit: type=1804 audit(4294977993.467:118): pid=26056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4134" name="/newroot/20/file0" dev="tmpfs" ino=120 res=1 errno=0 [ 1554.978941][T26083] vivid-003: ================= START STATUS ================= [ 1555.010522][T26083] vivid-003: Radio HW Seek Mode: Bounded [ 1555.053687][T26083] vivid-003: Radio Programmable HW Seek: false [ 1555.060139][T26083] vivid-003: RDS Rx I/O Mode: Block I/O [ 1555.083238][T26083] vivid-003: Generate RBDS Instead of RDS: false [ 1555.149519][T26083] vivid-003: RDS Reception: true [ 1555.175981][T26083] vivid-003: RDS Program Type: 0 inactive [ 1555.186360][T26083] vivid-003: RDS PS Name: inactive [ 1555.193909][T26083] vivid-003: RDS Radio Text: inactive [ 1555.199485][T26083] vivid-003: RDS Traffic Announcement: false inactive [ 1555.207365][T26083] vivid-003: RDS Traffic Program: false inactive [ 1555.217241][T26083] vivid-003: RDS Music: false inactive [ 1555.243400][T26083] vivid-003: ================== END STATUS ================== [ 1555.905949][T26100] vivid-003: ================= START STATUS ================= [ 1555.913852][T26100] vivid-003: Radio HW Seek Mode: Bounded [ 1555.919643][T26100] vivid-003: Radio Programmable HW Seek: false [ 1555.938323][T26100] vivid-003: RDS Rx I/O Mode: Block I/O [ 1555.944252][T26100] vivid-003: Generate RBDS Instead of RDS: false [ 1555.950830][T26100] vivid-003: RDS Reception: true [ 1555.955896][T26100] vivid-003: RDS Program Type: 0 inactive [ 1555.962031][T26100] vivid-003: RDS PS Name: inactive [ 1555.967332][T26100] vivid-003: RDS Radio Text: inactive [ 1556.063660][T26100] vivid-003: RDS Traffic Announcement: false inactive [ 1556.123466][T26100] vivid-003: RDS Traffic Program: false inactive [ 1556.287645][T26100] vivid-003: RDS Music: false inactive [ 1556.475349][T26100] vivid-003: ================== END STATUS ================== [ 1556.569832][T26096] vivid-003: ================= START STATUS ================= [ 1556.577673][T26096] vivid-003: Radio HW Seek Mode: Bounded [ 1556.583384][T26096] vivid-003: Radio Programmable HW Seek: false [ 1556.589792][T26096] vivid-003: RDS Rx I/O Mode: Block I/O [ 1556.595482][T26096] vivid-003: Generate RBDS Instead of RDS: false [ 1556.602000][T26096] vivid-003: RDS Reception: true [ 1556.607137][T26096] vivid-003: RDS Program Type: 0 inactive [ 1556.612981][T26096] vivid-003: RDS PS Name: inactive [ 1556.618360][T26096] vivid-003: RDS Radio Text: inactive [ 1556.625460][T26096] vivid-003: RDS Traffic Announcement: false inactive [ 1556.632380][T26096] vivid-003: RDS Traffic Program: false inactive [ 1556.638944][T26096] vivid-003: RDS Music: false inactive [ 1556.644586][T26096] vivid-003: ================== END STATUS ================== [ 1556.713099][T26106] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1556.763718][T26101] vivid-003: ================= START STATUS ================= [ 1556.811598][T26101] vivid-003: Radio HW Seek Mode: Bounded [ 1556.820027][T26101] vivid-003: Radio Programmable HW Seek: false [ 1556.864556][T26101] vivid-003: RDS Rx I/O Mode: Block I/O [ 1556.878323][T26101] vivid-003: Generate RBDS Instead of RDS: false [ 1556.895448][T26101] vivid-003: RDS Reception: true [ 1556.900482][T26101] vivid-003: RDS Program Type: 0 inactive [ 1557.072355][T26101] vivid-003: RDS PS Name: inactive [ 1557.360031][T26101] vivid-003: RDS Radio Text: inactive [ 1557.397010][T26101] vivid-003: RDS Traffic Announcement: false inactive [ 1557.404126][T26101] vivid-003: RDS Traffic Program: false inactive [ 1557.412651][T26101] vivid-003: RDS Music: false inactive [ 1557.460894][T26101] vivid-003: ================== END STATUS ================== [ 1559.120054][T26124] vivid-003: ================= START STATUS ================= [ 1559.128218][T26124] vivid-003: Radio HW Seek Mode: Bounded [ 1559.146251][T26132] warning: `syz.4.4149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1559.301547][T26124] vivid-003: Radio Programmable HW Seek: false [ 1559.312411][T26124] vivid-003: RDS Rx I/O Mode: Block I/O [ 1559.318034][T26124] vivid-003: Generate RBDS Instead of RDS: false [ 1559.393045][T26124] vivid-003: RDS Reception: true [ 1559.416230][T26124] vivid-003: RDS Program Type: 0 inactive [ 1559.539886][T26124] vivid-003: RDS PS Name: inactive [ 1559.547851][T26124] vivid-003: RDS Radio Text: inactive [ 1559.553780][T26124] vivid-003: RDS Traffic Announcement: false inactive [ 1559.562907][T26124] vivid-003: RDS Traffic Program: false inactive [ 1559.574356][T26124] vivid-003: RDS Music: false inactive [ 1559.818765][T26124] vivid-003: ================== END STATUS ================== [ 1559.983476][T26122] vivid-003: ================= START STATUS ================= [ 1559.994253][T26122] vivid-003: Radio HW Seek Mode: Bounded [ 1560.000434][T26122] vivid-003: Radio Programmable HW Seek: false [ 1560.007058][T26122] vivid-003: RDS Rx I/O Mode: Block I/O [ 1560.012871][T26122] vivid-003: Generate RBDS Instead of RDS: false [ 1560.019376][T26122] vivid-003: RDS Reception: true [ 1560.024487][T26122] vivid-003: RDS Program Type: 0 inactive [ 1560.030759][T26122] vivid-003: RDS PS Name: inactive [ 1560.036183][T26122] vivid-003: RDS Radio Text: inactive [ 1560.041900][T26122] vivid-003: RDS Traffic Announcement: false inactive [ 1560.049002][T26122] vivid-003: RDS Traffic Program: false inactive [ 1560.055434][T26122] vivid-003: RDS Music: false inactive [ 1560.635707][T26122] vivid-003: ================== END STATUS ================== [ 1561.456988][T26148] vivid-003: ================= START STATUS ================= [ 1561.465082][T26148] vivid-003: Radio HW Seek Mode: Bounded [ 1561.471453][T26148] vivid-003: Radio Programmable HW Seek: false [ 1561.477867][T26148] vivid-003: RDS Rx I/O Mode: Block I/O [ 1561.567272][T26148] vivid-003: Generate RBDS Instead of RDS: false [ 1561.599061][T26148] vivid-003: RDS Reception: true [ 1561.610051][T26148] vivid-003: RDS Program Type: 0 inactive [ 1561.620224][T26148] vivid-003: RDS PS Name: inactive [ 1561.626089][T26148] vivid-003: RDS Radio Text: inactive [ 1561.632889][T26148] vivid-003: RDS Traffic Announcement: false inactive [ 1561.641608][T26148] vivid-003: RDS Traffic Program: false inactive [ 1561.792214][T26148] vivid-003: RDS Music: false inactive [ 1561.797817][T26148] vivid-003: ================== END STATUS ================== [ 1562.006748][T26160] mkiss: ax0: crc mode is auto. [ 1562.724986][T26171] busy [ 1563.033918][T26173] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1563.130406][T26176] FAULT_INJECTION: forcing a failure. [ 1563.130406][T26176] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.153452][T26176] CPU: 0 UID: 0 PID: 26176 Comm: syz.2.4158 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1563.153502][T26176] Tainted: [I]=FIRMWARE_WORKAROUND [ 1563.153514][T26176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1563.153531][T26176] Call Trace: [ 1563.153543][T26176] [ 1563.153555][T26176] dump_stack_lvl+0x16c/0x1f0 [ 1563.153595][T26176] should_fail_ex+0x512/0x640 [ 1563.153633][T26176] ? fs_reclaim_acquire+0xae/0x150 [ 1563.153684][T26176] should_failslab+0xc2/0x120 [ 1563.153727][T26176] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1563.153767][T26176] ? security_inode_alloc+0x3b/0x2b0 [ 1563.153804][T26176] security_inode_alloc+0x3b/0x2b0 [ 1563.153834][T26176] inode_init_always_gfp+0xce4/0x1030 [ 1563.153877][T26176] alloc_inode+0x86/0x240 [ 1563.153977][T26176] new_inode+0x22/0x1c0 [ 1563.154025][T26176] __debugfs_create_file+0x11c/0x6b0 [ 1563.154059][T26176] debugfs_create_file_full+0x41/0x60 [ 1563.154085][T26176] ref_tracker_dir_debugfs+0x19d/0x290 [ 1563.154116][T26176] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1563.154171][T26176] ? lockdep_init_map_type+0x5c/0x280 [ 1563.154208][T26176] preinit_net+0x296/0x8f0 [ 1563.154236][T26176] copy_net_ns+0x1da/0x5f0 [ 1563.154268][T26176] create_new_namespaces+0x3ea/0xa90 [ 1563.154302][T26176] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1563.154332][T26176] ksys_unshare+0x45b/0xa40 [ 1563.154365][T26176] ? __pfx_ksys_unshare+0x10/0x10 [ 1563.154396][T26176] ? ksys_write+0x1ac/0x250 [ 1563.154432][T26176] __x64_sys_unshare+0x31/0x40 [ 1563.154462][T26176] do_syscall_64+0xcd/0x490 [ 1563.154491][T26176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.154514][T26176] RIP: 0033:0x7fba72b8ebe9 [ 1563.154532][T26176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.154555][T26176] RSP: 002b:00007fba739e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1563.154577][T26176] RAX: ffffffffffffffda RBX: 00007fba72db5fa0 RCX: 00007fba72b8ebe9 [ 1563.154592][T26176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1563.154606][T26176] RBP: 00007fba739e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.154620][T26176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.154633][T26176] R13: 00007fba72db6038 R14: 00007fba72db5fa0 R15: 00007ffd4932b1b8 [ 1563.154662][T26176] [ 1563.154699][T26176] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880761449f0' [ 1564.882398][T26192] vivid-003: ================= START STATUS ================= [ 1564.890151][T26192] vivid-003: Radio HW Seek Mode: Bounded [ 1564.895960][T26192] vivid-003: Radio Programmable HW Seek: false [ 1564.911884][T26192] vivid-003: RDS Rx I/O Mode: Block I/O [ 1564.917546][T26192] vivid-003: Generate RBDS Instead of RDS: false [ 1564.924011][T26192] vivid-003: RDS Reception: true [ 1564.929041][T26192] vivid-003: RDS Program Type: 0 inactive [ 1564.934996][T26192] vivid-003: RDS PS Name: inactive [ 1564.940289][T26192] vivid-003: RDS Radio Text: inactive [ 1564.987447][T26192] vivid-003: RDS Traffic Announcement: false inactive [ 1565.081839][T26192] vivid-003: RDS Traffic Program: false inactive [ 1565.088346][T26192] vivid-003: RDS Music: false inactive [ 1565.158920][T26192] vivid-003: ================== END STATUS ================== [ 1565.212253][T26200] mkiss: ax0: crc mode is auto. [ 1565.243109][T26188] vivid-003: ================= START STATUS ================= [ 1565.492140][T26188] vivid-003: Radio HW Seek Mode: Bounded [ 1565.498093][T26188] vivid-003: Radio Programmable HW Seek: false [ 1565.505092][T26188] vivid-003: RDS Rx I/O Mode: Block I/O [ 1565.511277][T26188] vivid-003: Generate RBDS Instead of RDS: false [ 1565.517918][T26188] vivid-003: RDS Reception: true [ 1565.523557][T26188] vivid-003: RDS Program Type: 0 inactive [ 1565.529947][T26188] vivid-003: RDS PS Name: inactive [ 1565.535355][T26188] vivid-003: RDS Radio Text: inactive [ 1565.541619][T26188] vivid-003: RDS Traffic Announcement: false inactive [ 1565.552453][T26188] vivid-003: RDS Traffic Program: false inactive [ 1565.608691][T26188] vivid-003: RDS Music: false inactive [ 1565.702187][T26188] vivid-003: ================== END STATUS ================== [ 1567.181173][T26217] vivid-003: ================= START STATUS ================= [ 1567.188973][T26217] vivid-003: Radio HW Seek Mode: Bounded [ 1567.194785][T26217] vivid-003: Radio Programmable HW Seek: false [ 1567.201079][T26217] vivid-003: RDS Rx I/O Mode: Block I/O [ 1567.206719][T26217] vivid-003: Generate RBDS Instead of RDS: false [ 1567.213189][T26217] vivid-003: RDS Reception: true [ 1567.218240][T26217] vivid-003: RDS Program Type: 0 inactive [ 1567.224111][T26217] vivid-003: RDS PS Name: inactive [ 1567.229559][T26217] vivid-003: RDS Radio Text: inactive [ 1567.235160][T26217] vivid-003: RDS Traffic Announcement: false inactive [ 1567.242170][T26217] vivid-003: RDS Traffic Program: false inactive [ 1567.248633][T26217] vivid-003: RDS Music: false inactive [ 1567.254446][T26217] vivid-003: ================== END STATUS ================== [ 1568.831624][T26238] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1569.053105][T26249] mkiss: ax0: crc mode is auto. [ 1570.824540][T26270] vivid-003: ================= START STATUS ================= [ 1570.874361][T26270] vivid-003: Radio HW Seek Mode: Bounded [ 1570.971559][T26270] vivid-003: Radio Programmable HW Seek: false [ 1570.977787][T26270] vivid-003: RDS Rx I/O Mode: Block I/O [ 1571.024934][T26270] vivid-003: Generate RBDS Instead of RDS: false [ 1571.031532][T26270] vivid-003: RDS Reception: true [ 1571.136891][T26270] vivid-003: RDS Program Type: 0 inactive [ 1571.142918][T26270] vivid-003: RDS PS Name: inactive [ 1571.213559][T26270] vivid-003: RDS Radio Text: inactive [ 1571.308520][T26270] vivid-003: RDS Traffic Announcement: false inactive [ 1571.315380][T26270] vivid-003: RDS Traffic Program: false inactive [ 1571.607369][T26270] vivid-003: RDS Music: false inactive [ 1571.613078][T26270] vivid-003: ================== END STATUS ================== [ 1572.197628][T26276] vivid-003: ================= START STATUS ================= [ 1572.205979][T26276] vivid-003: Radio HW Seek Mode: Bounded [ 1572.212166][T26271] FAULT_INJECTION: forcing a failure. [ 1572.212166][T26271] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.225519][T26276] vivid-003: Radio Programmable HW Seek: false [ 1572.231731][T26276] vivid-003: RDS Rx I/O Mode: Block I/O [ 1572.237860][T26271] CPU: 1 UID: 0 PID: 26271 Comm: syz.1.4177 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1572.237907][T26271] Tainted: [I]=FIRMWARE_WORKAROUND [ 1572.237917][T26271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.237931][T26271] Call Trace: [ 1572.237939][T26271] [ 1572.237947][T26271] dump_stack_lvl+0x16c/0x1f0 [ 1572.237979][T26271] should_fail_ex+0x512/0x640 [ 1572.238006][T26271] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1572.238038][T26271] should_failslab+0xc2/0x120 [ 1572.238068][T26271] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1572.238096][T26271] ? mas_alloc_nodes+0x18b/0x8b0 [ 1572.238122][T26271] mas_alloc_nodes+0x18b/0x8b0 [ 1572.238150][T26271] mas_node_count_gfp+0x105/0x130 [ 1572.238173][T26271] mas_preallocate+0x7e0/0xde0 [ 1572.238211][T26271] ? __memcg_slab_post_alloc_hook+0x482/0x960 [ 1572.238249][T26271] ? __pfx_mas_preallocate+0x10/0x10 [ 1572.238289][T26271] ? anon_vma_name+0x81/0x2f0 [ 1572.238328][T26271] __split_vma+0x34a/0x1070 [ 1572.238359][T26271] ? __pfx___split_vma+0x10/0x10 [ 1572.238390][T26271] ? __pfx_mas_prev+0x10/0x10 [ 1572.238422][T26271] vms_gather_munmap_vmas+0x3b1/0x1340 [ 1572.238454][T26271] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1572.238485][T26271] ? mas_walk+0x6f5/0x980 [ 1572.238516][T26271] __mmap_region+0x436/0x27b0 [ 1572.238545][T26271] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1572.238570][T26271] ? __pfx___mmap_region+0x10/0x10 [ 1572.238596][T26271] ? rcu_is_watching+0x12/0xc0 [ 1572.238626][T26271] ? rcu_is_watching+0x12/0xc0 [ 1572.238649][T26271] ? trace_sched_exit_tp+0xd1/0x120 [ 1572.238686][T26271] ? __schedule+0x11a3/0x5de0 [ 1572.238707][T26271] ? __lock_acquire+0x62e/0x1ce0 [ 1572.238748][T26271] ? __lock_acquire+0x62e/0x1ce0 [ 1572.238781][T26271] ? __pfx___schedule+0x10/0x10 [ 1572.238843][T26271] ? rcu_is_watching+0x12/0xc0 [ 1572.238875][T26271] mmap_region+0x1ab/0x3f0 [ 1572.238909][T26271] do_mmap+0xa3e/0x1210 [ 1572.238956][T26271] ? __pfx_do_mmap+0x10/0x10 [ 1572.238990][T26271] ? __pfx_down_write_killable+0x10/0x10 [ 1572.239045][T26271] vm_mmap_pgoff+0x29e/0x470 [ 1572.239098][T26271] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1572.239139][T26271] ? __x64_sys_futex+0x1e0/0x4c0 [ 1572.239168][T26271] ? __x64_sys_futex+0x1e9/0x4c0 [ 1572.239206][T26271] ksys_mmap_pgoff+0x7d/0x5c0 [ 1572.239239][T26271] ? xfd_validate_state+0x61/0x180 [ 1572.239273][T26271] ? up_write+0x1b2/0x520 [ 1572.239309][T26271] __x64_sys_mmap+0x125/0x190 [ 1572.239349][T26271] do_syscall_64+0xcd/0x490 [ 1572.239378][T26271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.239402][T26271] RIP: 0033:0x7f3a5ab8ebe9 [ 1572.239420][T26271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.239443][T26271] RSP: 002b:00007f3a5ba35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1572.239464][T26271] RAX: ffffffffffffffda RBX: 00007f3a5adb6090 RCX: 00007f3a5ab8ebe9 [ 1572.239480][T26271] RDX: 00004000000000df RSI: 000000000000000f RDI: 0000000000000000 [ 1572.239494][T26271] RBP: 00007f3a5ac11e19 R08: 0000000000000401 R09: 0000000000008000 [ 1572.239509][T26271] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1572.239523][T26271] R13: 00007f3a5adb6128 R14: 00007f3a5adb6090 R15: 00007ffdd5f03c08 [ 1572.239552][T26271] [ 1572.565322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.601557][T26276] vivid-003: Generate RBDS Instead of RDS: false [ 1572.607978][T26276] vivid-003: RDS Reception: true [ 1572.613022][T26276] vivid-003: RDS Program Type: 0 inactive [ 1572.618773][T26276] vivid-003: RDS PS Name: inactive [ 1572.624082][T26276] vivid-003: RDS Radio Text: inactive [ 1572.629575][T26276] vivid-003: RDS Traffic Announcement: false inactive [ 1572.636470][T26276] vivid-003: RDS Traffic Program: false inactive [ 1572.642895][T26276] vivid-003: RDS Music: false inactive [ 1572.648392][T26276] vivid-003: ================== END STATUS ================== [ 1573.817701][T26305] FAULT_INJECTION: forcing a failure. [ 1573.817701][T26305] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.835343][T26305] CPU: 1 UID: 0 PID: 26305 Comm: syz.0.4181 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1573.835400][T26305] Tainted: [I]=FIRMWARE_WORKAROUND [ 1573.835413][T26305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1573.835434][T26305] Call Trace: [ 1573.835446][T26305] [ 1573.835458][T26305] dump_stack_lvl+0x16c/0x1f0 [ 1573.835501][T26305] should_fail_ex+0x512/0x640 [ 1573.835540][T26305] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1573.835587][T26305] should_failslab+0xc2/0x120 [ 1573.835630][T26305] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1573.835669][T26305] ? vma_merge_new_range+0x3ae/0xa50 [ 1573.835705][T26305] ? vm_area_alloc+0x1f/0x160 [ 1573.835742][T26305] vm_area_alloc+0x1f/0x160 [ 1573.835776][T26305] __mmap_region+0xf90/0x27b0 [ 1573.835833][T26305] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1573.835871][T26305] ? __pfx___mmap_region+0x10/0x10 [ 1573.835912][T26305] ? rcu_is_watching+0x12/0xc0 [ 1573.835957][T26305] ? rcu_is_watching+0x12/0xc0 [ 1573.835991][T26305] ? trace_sched_exit_tp+0xd1/0x120 [ 1573.836044][T26305] ? __schedule+0x11a3/0x5de0 [ 1573.836073][T26305] ? __lock_acquire+0x62e/0x1ce0 [ 1573.836139][T26305] ? __pfx___schedule+0x10/0x10 [ 1573.836221][T26305] ? mm_get_unmapped_area+0x95/0xe0 [ 1573.836280][T26305] mmap_region+0x1ab/0x3f0 [ 1573.836321][T26305] ? __get_unmapped_area+0x267/0x440 [ 1573.836375][T26305] do_mmap+0xa3e/0x1210 [ 1573.836429][T26305] ? __pfx_do_mmap+0x10/0x10 [ 1573.836479][T26305] ? __pfx_down_write_killable+0x10/0x10 [ 1573.836529][T26305] vm_mmap_pgoff+0x29e/0x470 [ 1573.836586][T26305] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1573.836634][T26305] ? __do_sys_getcwd+0x4d6/0x930 [ 1573.836688][T26305] ? __x64_sys_futex+0x1e0/0x4c0 [ 1573.836729][T26305] ? __x64_sys_futex+0x1e9/0x4c0 [ 1573.836778][T26305] ksys_mmap_pgoff+0x7d/0x5c0 [ 1573.836836][T26305] ? xfd_validate_state+0x61/0x180 [ 1573.836885][T26305] ? __pfx_ksys_write+0x10/0x10 [ 1573.836929][T26305] __x64_sys_mmap+0x125/0x190 [ 1573.836985][T26305] do_syscall_64+0xcd/0x490 [ 1573.837025][T26305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.837060][T26305] RIP: 0033:0x7f9507f8ebe9 [ 1573.837086][T26305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.837120][T26305] RSP: 002b:00007f9508dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1573.837154][T26305] RAX: ffffffffffffffda RBX: 00007f95081b5fa0 RCX: 00007f9507f8ebe9 [ 1573.837177][T26305] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 000000001f000000 [ 1573.837198][T26305] RBP: 00007f9508011e19 R08: fffffffffffffffa R09: 0000000000008000 [ 1573.837220][T26305] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1573.837241][T26305] R13: 00007f95081b6038 R14: 00007f95081b5fa0 R15: 00007ffe8274d338 [ 1573.837285][T26305] [ 1574.122344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.926521][T26341] vivid-003: ================= START STATUS ================= [ 1576.934423][T26341] vivid-003: Radio HW Seek Mode: Bounded [ 1576.998560][T26341] vivid-003: Radio Programmable HW Seek: false [ 1577.005042][T26341] vivid-003: RDS Rx I/O Mode: Block I/O [ 1577.015150][T26341] vivid-003: Generate RBDS Instead of RDS: false [ 1577.022664][T26341] vivid-003: RDS Reception: true [ 1577.048587][T26341] vivid-003: RDS Program Type: 0 inactive [ 1577.054419][T26341] vivid-003: RDS PS Name: inactive [ 1577.098021][T26341] vivid-003: RDS Radio Text: inactive [ 1577.103563][T26341] vivid-003: RDS Traffic Announcement: false inactive [ 1577.170644][T26341] vivid-003: RDS Traffic Program: false inactive [ 1577.217311][T26341] vivid-003: RDS Music: false inactive [ 1577.222855][T26341] vivid-003: ================== END STATUS ================== [ 1577.316359][T26335] vivid-003: ================= START STATUS ================= [ 1577.327497][T26335] vivid-003: Radio HW Seek Mode: Bounded [ 1577.333309][T26335] vivid-003: Radio Programmable HW Seek: false [ 1577.402316][T26335] vivid-003: RDS Rx I/O Mode: Block I/O [ 1577.437045][T26335] vivid-003: Generate RBDS Instead of RDS: false [ 1577.444080][T26335] vivid-003: RDS Reception: true [ 1577.558659][T26335] vivid-003: RDS Program Type: 0 inactive [ 1577.735111][T26335] vivid-003: RDS PS Name: inactive [ 1577.935260][T26335] vivid-003: RDS Radio Text: inactive [ 1577.948977][T26335] vivid-003: RDS Traffic Announcement: false inactive [ 1578.117024][T26335] vivid-003: RDS Traffic Program: false inactive [ 1578.143711][T26335] vivid-003: RDS Music: false inactive [ 1578.153944][T26335] vivid-003: ================== END STATUS ================== [ 1578.927893][T26357] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1579.533206][T26369] ubi: mtd0 is already attached to ubi0 [ 1580.276709][T26368] ------------[ cut here ]------------ [ 1580.282282][T26368] WARNING: CPU: 1 PID: 26368 at kernel/trace/trace.c:8594 tracing_buffers_mmap_close+0xdd/0x130 [ 1580.292809][T26368] Modules linked in: [ 1580.297195][T26368] CPU: 1 UID: 0 PID: 26368 Comm: syz.0.4195 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1580.310560][T26368] Tainted: [I]=FIRMWARE_WORKAROUND [ 1580.315998][T26368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.326131][T26368] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1580.332670][T26368] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 71 ba 60 00 eb 87 e8 9a [ 1580.352480][T26368] RSP: 0018:ffffc9000b937990 EFLAGS: 00010293 [ 1580.358565][T26368] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfb219 [ 1580.366572][T26368] RDX: ffff888056f29e00 RSI: ffffffff81bfb22c RDI: 0000000000000005 [ 1580.374589][T26368] RBP: ffffffff81bfb150 R08: 0000000000000005 R09: 0000000000000000 [ 1580.382595][T26368] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880422e4548 [ 1580.390575][T26368] R13: dffffc0000000000 R14: ffffc9000b937a28 R15: 0000000000000000 [ 1580.398607][T26368] FS: 0000000000000000(0000) GS:ffff8881247cc000(0000) knlGS:0000000000000000 [ 1580.407778][T26368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1580.414423][T26368] CR2: 0000200000054000 CR3: 0000000029a40000 CR4: 00000000003526f0 [ 1580.422461][T26368] Call Trace: [ 1580.425747][T26368] [ 1580.428692][T26368] remove_vma+0x85/0x160 [ 1580.433001][T26368] exit_mmap+0x511/0xb90 [ 1580.437272][T26368] ? __pfx_exit_mmap+0x10/0x10 [ 1580.442139][T26368] ? __lock_acquire+0xb97/0x1ce0 [ 1580.447133][T26368] __mmput+0x12a/0x410 [ 1580.451262][T26368] mmput+0x62/0x70 [ 1580.455030][T26368] do_exit+0x7c7/0x2bf0 [ 1580.459204][T26368] ? __pfx___might_resched+0x10/0x10 [ 1580.464539][T26368] ? __pfx_do_exit+0x10/0x10 [ 1580.469151][T26368] ? do_raw_spin_lock+0x12c/0x2b0 [ 1580.474246][T26368] ? find_held_lock+0x2b/0x80 [ 1580.478966][T26368] do_group_exit+0xd3/0x2a0 [ 1580.483539][T26368] get_signal+0x2673/0x26d0 [ 1580.488080][T26368] ? __pfx_task_work_add+0x10/0x10 [ 1580.493250][T26368] ? __pfx_get_signal+0x10/0x10 [ 1580.498124][T26368] arch_do_signal_or_restart+0x8f/0x790 [ 1580.503738][T26368] ? __fget_files+0x20e/0x3c0 [ 1580.508436][T26368] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1580.514658][T26368] ? ksys_write+0x1ac/0x250 [ 1580.519191][T26368] ? __pfx_ksys_write+0x10/0x10 [ 1580.524116][T26368] exit_to_user_mode_loop+0x84/0x110 [ 1580.529458][T26368] do_syscall_64+0x3f6/0x490 [ 1580.534191][T26368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.540150][T26368] RIP: 0033:0x7f9507f8ebe9 [ 1580.544630][T26368] Code: Unable to access opcode bytes at 0x7f9507f8ebbf. [ 1580.551717][T26368] RSP: 002b:00007f9508da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1580.560204][T26368] RAX: 000000000084b000 RBX: 00007f95081b6090 RCX: 00007f9507f8ebe9 [ 1580.568195][T26368] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1580.576238][T26368] RBP: 00007f9508011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1580.584281][T26368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.592297][T26368] R13: 00007f95081b6128 R14: 00007f95081b6090 R15: 00007ffe8274d338 [ 1580.600320][T26368] [ 1580.603347][T26368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1580.610629][T26368] CPU: 1 UID: 0 PID: 26368 Comm: syz.0.4195 Tainted: G I 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1580.623922][T26368] Tainted: [I]=FIRMWARE_WORKAROUND [ 1580.629026][T26368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.639119][T26368] Call Trace: [ 1580.642415][T26368] [ 1580.645356][T26368] dump_stack_lvl+0x3d/0x1f0 [ 1580.649964][T26368] vpanic+0x6e8/0x7a0 [ 1580.653969][T26368] ? __pfx_vpanic+0x10/0x10 [ 1580.658497][T26368] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1580.664317][T26368] panic+0xca/0xd0 [ 1580.668084][T26368] ? __pfx_panic+0x10/0x10 [ 1580.672566][T26368] ? check_panic_on_warn+0x1f/0xb0 [ 1580.677693][T26368] check_panic_on_warn+0xab/0xb0 [ 1580.682653][T26368] __warn+0xf6/0x3c0 [ 1580.686568][T26368] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1580.692391][T26368] report_bug+0x3c3/0x580 [ 1580.696750][T26368] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1580.702574][T26368] handle_bug+0x184/0x210 [ 1580.706926][T26368] exc_invalid_op+0x17/0x50 [ 1580.711488][T26368] asm_exc_invalid_op+0x1a/0x20 [ 1580.716351][T26368] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1580.722782][T26368] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 71 ba 60 00 eb 87 e8 9a [ 1580.742411][T26368] RSP: 0018:ffffc9000b937990 EFLAGS: 00010293 [ 1580.748496][T26368] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfb219 [ 1580.756477][T26368] RDX: ffff888056f29e00 RSI: ffffffff81bfb22c RDI: 0000000000000005 [ 1580.764455][T26368] RBP: ffffffff81bfb150 R08: 0000000000000005 R09: 0000000000000000 [ 1580.772437][T26368] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880422e4548 [ 1580.780419][T26368] R13: dffffc0000000000 R14: ffffc9000b937a28 R15: 0000000000000000 [ 1580.788399][T26368] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 1580.794658][T26368] ? tracing_buffers_mmap_close+0xc9/0x130 [ 1580.800485][T26368] ? tracing_buffers_mmap_close+0xdc/0x130 [ 1580.806310][T26368] remove_vma+0x85/0x160 [ 1580.810568][T26368] exit_mmap+0x511/0xb90 [ 1580.814839][T26368] ? __pfx_exit_mmap+0x10/0x10 [ 1580.819634][T26368] ? __lock_acquire+0xb97/0x1ce0 [ 1580.824612][T26368] __mmput+0x12a/0x410 [ 1580.828732][T26368] mmput+0x62/0x70 [ 1580.832470][T26368] do_exit+0x7c7/0x2bf0 [ 1580.836649][T26368] ? __pfx___might_resched+0x10/0x10 [ 1580.841996][T26368] ? __pfx_do_exit+0x10/0x10 [ 1580.846612][T26368] ? do_raw_spin_lock+0x12c/0x2b0 [ 1580.851768][T26368] ? find_held_lock+0x2b/0x80 [ 1580.856460][T26368] do_group_exit+0xd3/0x2a0 [ 1580.860987][T26368] get_signal+0x2673/0x26d0 [ 1580.865515][T26368] ? __pfx_task_work_add+0x10/0x10 [ 1580.870656][T26368] ? __pfx_get_signal+0x10/0x10 [ 1580.875528][T26368] arch_do_signal_or_restart+0x8f/0x790 [ 1580.881094][T26368] ? __fget_files+0x20e/0x3c0 [ 1580.885790][T26368] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1580.891969][T26368] ? ksys_write+0x1ac/0x250 [ 1580.896491][T26368] ? __pfx_ksys_write+0x10/0x10 [ 1580.901359][T26368] exit_to_user_mode_loop+0x84/0x110 [ 1580.906664][T26368] do_syscall_64+0x3f6/0x490 [ 1580.911272][T26368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.917200][T26368] RIP: 0033:0x7f9507f8ebe9 [ 1580.921619][T26368] Code: Unable to access opcode bytes at 0x7f9507f8ebbf. [ 1580.928637][T26368] RSP: 002b:00007f9508da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1580.937094][T26368] RAX: 000000000084b000 RBX: 00007f95081b6090 RCX: 00007f9507f8ebe9 [ 1580.945116][T26368] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1580.953114][T26368] RBP: 00007f9508011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1580.961099][T26368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.969099][T26368] R13: 00007f95081b6128 R14: 00007f95081b6090 R15: 00007ffe8274d338 [ 1580.977096][T26368] [ 1580.980491][T26368] Kernel Offset: disabled [ 1580.984825][T26368] Rebooting in 86400 seconds..