last executing test programs: 7.877607868s ago: executing program 3 (id=1000): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4604, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)='-7', 0xfffffc49) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) unshare$auto(0x1) fchdir$auto(0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x40002) lseek$auto(r1, 0x7ff, 0x1) settimeofday$auto(0x0, 0x0) 7.424547573s ago: executing program 2 (id=1003): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 6.350016349s ago: executing program 2 (id=1004): socket(0xa, 0x3, 0x3b) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ed03"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 6.346842332s ago: executing program 0 (id=1013): mmap$auto(0x0, 0x6, 0x4, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x84}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6.346258549s ago: executing program 1 (id=1005): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.descendants\x00', 0x22022, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, 0x0, 0xfdef) 5.848995025s ago: executing program 1 (id=1006): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) pidfd_open$auto(0x0, 0x1) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) readv$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 5.085459974s ago: executing program 0 (id=1007): mmap$auto(0x0, 0x6, 0x4, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x84}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'ip6gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 4.546632463s ago: executing program 3 (id=1009): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x8) sysfs$auto(0x2, 0x100000000000027, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x68000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x8040) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/dummy0\x00', 0x109800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.410406839s ago: executing program 2 (id=1010): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000440), r2) sendmsg$auto_NBD_CMD_CONNECT(r3, 0x0, 0x4) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) msgctl$auto(0xfe000000, 0x6, 0x0) getpid() sendmsg$auto_IPVS_CMD_NEW_DEST(r1, 0x0, 0x4000) socket(0x11, 0x80003, 0x300) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi0\x00', 0x2aa01, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(r0, r0, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8004) 3.858353654s ago: executing program 3 (id=1011): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5072c0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x4, 0x20000000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) prctl$auto_PR_SCHED_CORE_CREATE(0x10, 0x1, 0x0, 0x401, 0x6) getsockopt$auto(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x24040040) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) 3.392581765s ago: executing program 3 (id=1012): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) msgctl$auto(0x9, 0x2, &(0x7f0000000100)={{0x5, 0xee01, 0x0, 0x7, 0x0, 0x1000, 0x101}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x3, 0x6, 0x9, 0x5, 0x90, 0x3, 0xc, 0x8, 0x3f90, @inferred, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000340)={{0x8, 0xee00, 0x0, 0x9, 0x1, 0x9, 0x5}, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x6, 0x10000, 0x80000001, 0x8, 0x9, 0x4, 0x3, 0x0, 0x0, @raw=0x4, @raw=0x8}) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) setreuid$auto(r1, r2) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf250001000008000b0002007f"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="720100", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.39082187s ago: executing program 0 (id=1021): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x44860) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) lseek$auto(0x3, 0x6, 0x1) linkat$auto(0xffffffffffffffff, 0x0, r2, 0x0, 0x9) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) 2.329201929s ago: executing program 1 (id=1014): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 1.684169305s ago: executing program 0 (id=1015): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x1d, 0x2, 0x2) socket(0x10, 0x2, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x48000, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x4) socket(0x2, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket(0x1e, 0x1, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x8910, r0) 1.670248609s ago: executing program 2 (id=1016): close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2a2d01, 0x150) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/default/ignore_routes_with_linkdown\x00', 0x2, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) getsockopt$auto_SO_RXQ_OVFL(r6, 0x1, 0x28, &(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200)=0x1) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="66defe", @ANYRES16=r3, @ANYRES16, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT=r5, @ANYRES16, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX=r6], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x24000015) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x85, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r2, 0x8) 1.667161093s ago: executing program 3 (id=1017): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 1.326162987s ago: executing program 2 (id=1018): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x2e, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000880) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r4 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r4, 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r2, 0x4004550f, &(0x7f00000000c0)=0x2) munmap$auto(0x8000, 0xffffffff) 1.228491061s ago: executing program 0 (id=1019): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) open(0x0, 0x2a2d01, 0x150) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) getsockopt$auto_SO_RXQ_OVFL(r6, 0x1, 0x28, &(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200)=0x1) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="66defe", @ANYRES16=r3, @ANYRES16, @ANYRES32, @ANYRESDEC=r3, @ANYRESOCT=r5, @ANYRES16, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX=r6], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x24000015) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x85, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r2, 0x8) 1.032933819s ago: executing program 1 (id=1020): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea770", 0x17c) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) socket(0x2, 0x80802, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 883.645131ms ago: executing program 0 (id=1022): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0501, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) r1 = accept$auto(0x3, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{@raw=0x8, 0x7, 0x200, 0x481, "3baada912063aa08326de39b458c42c58e5697ae8758eb056ddc4a43c73a8cea18d4b45a80a1f49cedbb00f9", @raw=0x5}, 0x1, @iec958={"453c9e5773573d5a10ca31c4b0deec94b37e3ac12d8d3ee9", "a922ff7a0a491cb4d363dfd32f93c6be915f366dfb5d12993d074ca7f6e4e6060c7715b15719c67748abeb11aff0a9ddde9e6e75827c59dee29d81be296f3ad608a6488eaf1bab8dc5ead1821aacec961c7255a26382d30c73ff5c933f892c863cb840c659bf05a61e7c0397cb515a6daeadda67ce497aa9cb5444c69f6552d49168c6476c3637005321d3d36388af82d66120", 0x0, "9dcfc6e9"}, "a054e9c01cb2c8af6dc4bf831fc4b59231961a4479ad0964856da03461b2acee3c2802d94a3a45389079f564370b881309f1adae03c8ff7b3e98d461173da57cb08cc0e2021395f18adb1b333d8bc7c46c5075780ec2cc971726d532efc3f3f4daaaf56770b9cdcc5c86dc4de9ff00fcddb26b10d68199c9506e3d6ee4f38a62"}) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) 705.939619ms ago: executing program 3 (id=1023): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, 0x0, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 620.135622ms ago: executing program 1 (id=1024): mmap$auto(0x0, 0x6, 0x4, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x84}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'ip6gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 113.412185ms ago: executing program 1 (id=1025): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 0s ago: executing program 2 (id=1026): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x88040, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r1, 0x4008550c, r1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xffffff7c, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = fcntl$auto_F_DUPFD(r2, 0x0, r2) read$auto_tun_fops_tun(r3, &(0x7f0000000180)=""/106, 0x6a) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r3, 0x8004b709, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) connect$auto(0x3, 0x0, 0x54) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 87.678668][ T5817] cgroup: Unknown subsys name 'net' [ 87.830670][ T5817] cgroup: Unknown subsys name 'cpuset' [ 87.839708][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.714603][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.675938][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.685715][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.694132][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.705683][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.718889][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.769268][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.781429][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.791329][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.802485][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.811194][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.873150][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.883113][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.892485][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.908940][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.920957][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.945835][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.955483][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.964645][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.973816][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.982848][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.495671][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 92.537805][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 92.549194][ T9] cfg80211: failed to load regulatory.db [ 92.718458][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.760830][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.826828][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.834872][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.842938][ T5829] bridge_slave_0: entered allmulticast mode [ 92.850277][ T5829] bridge_slave_0: entered promiscuous mode [ 92.885691][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.893348][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.900886][ T5829] bridge_slave_1: entered allmulticast mode [ 92.908281][ T5829] bridge_slave_1: entered promiscuous mode [ 92.934413][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.941829][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.949363][ T5833] bridge_slave_0: entered allmulticast mode [ 92.956990][ T5833] bridge_slave_0: entered promiscuous mode [ 92.965608][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.972937][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.980651][ T5833] bridge_slave_1: entered allmulticast mode [ 92.988330][ T5833] bridge_slave_1: entered promiscuous mode [ 93.069124][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.097334][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.109254][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.143000][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.151088][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.158670][ T5838] bridge_slave_0: entered allmulticast mode [ 93.165955][ T5838] bridge_slave_0: entered promiscuous mode [ 93.176511][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.205296][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.213072][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.220352][ T5838] bridge_slave_1: entered allmulticast mode [ 93.227669][ T5838] bridge_slave_1: entered promiscuous mode [ 93.247339][ T5829] team0: Port device team_slave_0 added [ 93.253199][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.260607][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.268484][ T5836] bridge_slave_0: entered allmulticast mode [ 93.275748][ T5836] bridge_slave_0: entered promiscuous mode [ 93.306771][ T5829] team0: Port device team_slave_1 added [ 93.312771][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.320452][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.327856][ T5836] bridge_slave_1: entered allmulticast mode [ 93.335128][ T5836] bridge_slave_1: entered promiscuous mode [ 93.353883][ T5833] team0: Port device team_slave_0 added [ 93.383723][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.397233][ T5833] team0: Port device team_slave_1 added [ 93.427790][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.472832][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.481202][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.508561][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.524709][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.548027][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.555092][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.581754][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.594986][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.603535][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.631169][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.654721][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.680311][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.687943][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.714566][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.737087][ T5839] Bluetooth: hci0: command tx timeout [ 93.752590][ T5838] team0: Port device team_slave_0 added [ 93.769093][ T5836] team0: Port device team_slave_0 added [ 93.777923][ T5838] team0: Port device team_slave_1 added [ 93.805113][ T5836] team0: Port device team_slave_1 added [ 93.839331][ T5829] hsr_slave_0: entered promiscuous mode [ 93.847966][ T5829] hsr_slave_1: entered promiscuous mode [ 93.893950][ T5833] hsr_slave_0: entered promiscuous mode [ 93.900974][ T5833] hsr_slave_1: entered promiscuous mode [ 93.907405][ T5839] Bluetooth: hci1: command tx timeout [ 93.908003][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 93.919367][ T5833] Cannot create hsr debugfs directory [ 93.935006][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.942373][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.970847][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.986528][ T5839] Bluetooth: hci2: command tx timeout [ 94.008225][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.015262][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.041912][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.054367][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.061663][ T5839] Bluetooth: hci3: command tx timeout [ 94.067631][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.094560][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.125333][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.132574][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.159535][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.309462][ T5838] hsr_slave_0: entered promiscuous mode [ 94.317035][ T5838] hsr_slave_1: entered promiscuous mode [ 94.323467][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 94.329564][ T5838] Cannot create hsr debugfs directory [ 94.387282][ T5836] hsr_slave_0: entered promiscuous mode [ 94.393980][ T5836] hsr_slave_1: entered promiscuous mode [ 94.401802][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 94.407905][ T5836] Cannot create hsr debugfs directory [ 94.774587][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.788372][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.809188][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.822273][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.830596][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.841499][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.849696][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.861097][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.941505][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.952615][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.963554][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.978151][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.988003][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.999865][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.007913][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.018886][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.116044][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.127089][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.135909][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.148667][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.165786][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.176774][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.184970][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.194822][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.335951][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.350061][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.365909][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.378537][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.392580][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.403757][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.421415][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.433033][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.474061][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.527730][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.561808][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.609222][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.616958][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.635354][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.648827][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.665320][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.672616][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.709809][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.717308][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.735429][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.758311][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.765720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.792326][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.799756][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.818405][ T5839] Bluetooth: hci0: command tx timeout [ 95.829439][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.836799][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.915985][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.977506][ T5839] Bluetooth: hci1: command tx timeout [ 95.991087][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.029244][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.036597][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.056789][ T5839] Bluetooth: hci2: command tx timeout [ 96.085522][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.093501][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.141079][ T5839] Bluetooth: hci3: command tx timeout [ 96.454100][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.601509][ T5829] veth0_vlan: entered promiscuous mode [ 96.652401][ T5829] veth1_vlan: entered promiscuous mode [ 96.682366][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.711709][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.767969][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.795840][ T5829] veth0_macvtap: entered promiscuous mode [ 96.824965][ T5829] veth1_macvtap: entered promiscuous mode [ 96.893831][ T5838] veth0_vlan: entered promiscuous mode [ 96.905993][ T5833] veth0_vlan: entered promiscuous mode [ 96.921252][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.945116][ T5838] veth1_vlan: entered promiscuous mode [ 96.968923][ T5833] veth1_vlan: entered promiscuous mode [ 96.980494][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.000518][ T5836] veth0_vlan: entered promiscuous mode [ 97.020212][ T974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.032135][ T974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.047893][ T974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058575][ T974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.080835][ T5836] veth1_vlan: entered promiscuous mode [ 97.121495][ T5838] veth0_macvtap: entered promiscuous mode [ 97.150310][ T5838] veth1_macvtap: entered promiscuous mode [ 97.208840][ T5833] veth0_macvtap: entered promiscuous mode [ 97.244955][ T5833] veth1_macvtap: entered promiscuous mode [ 97.254534][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.263099][ T5836] veth0_macvtap: entered promiscuous mode [ 97.306945][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.324858][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.342463][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.354395][ T5836] veth1_macvtap: entered promiscuous mode [ 97.387424][ T974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.397205][ T974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.420828][ T974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.430845][ T974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.451088][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.459431][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.467920][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.503786][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.516549][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.557780][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.572445][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.599725][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.622599][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.624310][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.669083][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679458][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.705900][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.717892][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.734710][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.749557][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.762232][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.897068][ T5839] Bluetooth: hci0: command tx timeout [ 97.929373][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.941907][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.057273][ T5839] Bluetooth: hci1: command tx timeout [ 98.064777][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.075340][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.138482][ T5839] Bluetooth: hci2: command tx timeout [ 98.217786][ T5839] Bluetooth: hci3: command tx timeout [ 98.224220][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.263695][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.404058][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.433510][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.541479][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.570784][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.980641][ T5839] Bluetooth: hci0: command tx timeout [ 100.143376][ T5839] Bluetooth: hci1: command tx timeout [ 100.217911][ T5839] Bluetooth: hci2: command tx timeout [ 100.306387][ T5839] Bluetooth: hci3: command tx timeout [ 100.491107][ T5949] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.529622][ T5928] Zero length message leads to an empty skb [ 100.804656][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 100.826542][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.840456][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.916226][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.957784][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.965893][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.589187][ T30] audit: type=1800 audit(1776387685.092:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="sr0" dev="devtmpfs" ino=2800 res=0 errno=0 [ 105.493474][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 105.542220][ T6012] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 105.576297][ T6012] netlink: 51465 bytes leftover after parsing attributes in process `syz.1.20'. [ 106.974974][ T6032] random: crng reseeded on system resumption [ 109.214664][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 109.248747][ T6051] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 109.287314][ T6051] netlink: 'syz.0.28': attribute type 6 has an invalid length. [ 109.325328][ T6051] netlink: 51465 bytes leftover after parsing attributes in process `syz.0.28'. [ 109.361984][ T6051] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 110.884934][ T6075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.220671][ T6087] sp0: Synchronizing with TNC [ 113.805984][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 113.820085][ T6115] netlink: 5 bytes leftover after parsing attributes in process `syz.3.41'. [ 114.289047][ T30] audit: type=1807 audit(1776387695.792:3): UNKNOWN= res=0 [ 114.321209][ T30] audit: type=1802 audit(1776387695.792:4): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.46" res=0 errno=0 [ 114.580171][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 114.668261][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.732065][ T6128] bridge_slave_1 (unregistering): left allmulticast mode [ 114.755909][ T6128] bridge_slave_1 (unregistering): left promiscuous mode [ 114.782962][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.012322][ T6127] ima: policy update failed [ 115.036425][ T30] audit: type=1802 audit(1776387696.542:5): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.46" res=0 errno=0 [ 115.461979][ T6137] [U] " [ 115.465395][ T6137] [U] [ 115.468125][ T6137] [U] [ 115.470878][ T6137] [U] [ 115.496458][ T6137] [U] [ 115.499264][ T6137] [U] [ 115.501974][ T6137] [U] [ 115.504688][ T6137] [U] [ 115.533834][ T6137] [U] [ 115.536696][ T6137] [U] [ 115.539405][ T6137] [U] [ 115.542097][ T6137] [U] [ 115.595012][ T6137] [U] [ 115.597842][ T6137] [U] [ 115.600582][ T6137] [U] [ 115.603405][ T6137] [U] [ 115.626531][ T6137] [U] [ 115.629405][ T6137] [U] [ 115.632171][ T6137] [U] [ 115.634995][ T6137] [U] [ 115.662734][ T6137] [U] [ 115.665511][ T6137] [U] [ 115.668689][ T6137] [U] [ 115.671543][ T6137] [U] [ 115.706479][ T6137] [U] [ 115.709276][ T6137] [U] [ 115.711977][ T6137] [U] [ 115.714861][ T6137] [U] [ 115.746372][ T6137] [U] [ 115.749205][ T6137] [U] [ 115.751950][ T6137] [U] [ 115.754675][ T6137] [U] [ 115.795494][ T6137] [U] [ 115.798459][ T6137] [U] [ 115.801189][ T6137] [U] [ 115.803907][ T6137] [U] [ 115.820390][ T6137] [U] [ 115.823421][ T6137] [U] [ 115.826231][ T6137] [U] [ 115.829187][ T6137] [U] [ 115.861010][ T6137] [U] [ 115.863892][ T6137] [U] [ 115.866644][ T6137] [U] [ 115.869397][ T6137] [U] [ 115.909981][ T6137] [U] [ 115.912927][ T6137] [U] [ 115.916026][ T6137] [U] [ 115.918772][ T6137] [U] [ 115.921931][ T6137] [U] [ 115.924779][ T6137] [U] [ 115.927880][ T6137] [U] [ 115.930742][ T6137] [U] [ 115.933876][ T6137] [U] [ 115.936766][ T6137] [U] [ 115.939537][ T6137] [U] [ 115.942319][ T6137] [U] [ 115.949357][ T6137] [U] [ 115.952216][ T6137] [U] [ 115.955233][ T6137] [U] [ 115.958173][ T6137] [U] [ 115.961486][ T6137] [U] [ 115.964265][ T6137] [U] [ 115.967014][ T6137] [U] [ 115.969849][ T6137] [U] [ 115.975284][ T6137] [U] [ 115.978129][ T6137] [U] [ 115.980881][ T6137] [U] [ 115.984251][ T6137] [U] [ 115.989558][ T6136] MTRR 1 not used [ 115.990543][ T6137] [U] [ 115.996675][ T6137] [U] [ 115.999423][ T6137] [U] [ 116.002162][ T6137] [U] [ 116.012395][ T6137] [U] [ 116.015263][ T6137] [U] [ 116.017986][ T6137] [U] [ 116.020709][ T6137] [U] [ 116.026322][ T6137] [U] [ 116.029235][ T6137] [U] [ 116.031974][ T6137] [U] [ 116.035275][ T6137] [U] [ 116.038398][ T6137] [U] [ 116.041291][ T6137] [U] [ 116.044095][ T6137] [U] [ 116.046812][ T6137] [U] [ 116.051558][ T6137] [U] [ 116.054331][ T6137] [U] [ 116.057455][ T6137] [U] [ 116.061209][ T6137] [U] [ 116.095306][ T6137] [U] [ 116.098098][ T6137] [U] [ 116.100835][ T6137] [U] [ 116.103667][ T6137] [U] [ 116.121049][ T6137] [U] [ 116.123926][ T6137] [U] [ 116.126743][ T6137] [U] [ 116.129465][ T6137] [U] [ 116.142921][ T6137] [U] [ 116.145726][ T6137] [U] [ 116.148480][ T6137] [U] [ 116.151412][ T6137] [U] [ 116.166328][ T6137] [U] [ 116.169122][ T6137] [U] [ 116.171876][ T6137] [U] [ 116.174727][ T6137] [U] [ 116.196381][ T6137] [U] [ 116.199171][ T6137] [U] [ 116.201920][ T6137] [U] [ 116.204666][ T6137] [U] [ 116.244287][ T6137] [U] [ 116.247083][ T6137] [U] [ 116.249841][ T6137] [U] [ 116.252586][ T6137] [U] [ 116.305105][ T6137] [U] [ 117.177151][ T6147] hub 1-0:1.0: USB hub found [ 117.185320][ T6147] hub 1-0:1.0: 1 port detected [ 117.867015][ T6165] process 'syz.3.54' launched './file0' with NULL argv: empty string added [ 118.365553][ T6180] zram: Added device: zram1 [ 119.692830][ T6192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.889480][ T6192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.011131][ T6192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.436084][ T6192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.524953][ T6207] random: crng reseeded on system resumption [ 123.938798][ T6256] hub 1-0:1.0: USB hub found [ 123.972737][ T6256] hub 1-0:1.0: 1 port detected [ 124.243168][ T6261] netlink: 25 bytes leftover after parsing attributes in process `syz.0.73'. [ 125.906601][ T6282] MTRR 1 not used [ 127.032505][ T6307] random: crng reseeded on system resumption [ 127.257470][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 129.498850][ T6358] random: crng reseeded on system resumption [ 129.654589][ T6363] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.983561][ T6366] zram: Added device: zram2 [ 133.514804][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.528083][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.548751][ T30] audit: type=1807 audit(1776387716.062:6): UNKNOWN= res=0 [ 134.548807][ T30] audit: type=1802 audit(1776387716.062:7): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.116" res=0 errno=0 [ 134.552769][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 134.553264][ T6445] netlink: 25 bytes leftover after parsing attributes in process `syz.1.115'. [ 134.855861][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 134.889250][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.898984][ T6452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.909551][ T6449] bridge_slave_1 (unregistering): left allmulticast mode [ 134.909598][ T6449] bridge_slave_1 (unregistering): left promiscuous mode [ 134.909722][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.013423][ T6448] ima: policy update failed [ 135.016793][ T30] audit: type=1802 audit(1776387716.532:8): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.116" res=0 errno=0 [ 135.176679][ T6453] zram: Added device: zram3 [ 137.779785][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 137.803323][ T6493] netlink: 25 bytes leftover after parsing attributes in process `syz.2.125'. [ 140.012338][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 140.028912][ T6531] netlink: 25 bytes leftover after parsing attributes in process `syz.0.136'. [ 143.120389][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 147.162836][ T6653] random: crng reseeded on system resumption [ 147.901394][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 149.913127][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 149.926411][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 150.465901][ T6708] random: crng reseeded on system resumption [ 151.323878][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 152.311769][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 152.439894][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 154.911904][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 155.533418][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 155.761505][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 159.689528][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 162.028351][ T6875] smpboot: CPU 1 is now offline [ 164.730160][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 167.451792][ T6929] random: crng reseeded on system resumption [ 167.495369][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 168.582301][ T6952] syz.0.239 uses obsolete (PF_INET,SOCK_PACKET) [ 169.067676][ T30] audit: type=1800 audit(1776387750.572:9): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="sr0" dev="devtmpfs" ino=2800 res=0 errno=0 [ 172.310686][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 175.519869][ T7034] Process accounting resumed [ 175.715970][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 176.074626][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 176.546397][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.263'. [ 179.604628][ T7112] random: crng reseeded on system resumption [ 180.051685][ T7115] vivid-007: ================= START STATUS ================= [ 180.103751][ T7115] vivid-007: Generate PTS: true [ 180.142918][ T7115] vivid-007: Generate SCR: true [ 180.193968][ T7115] tpg source WxH: 320x240 (Y'CbCr) [ 180.240958][ T7115] tpg field: 1 [ 180.268684][ T7115] tpg crop: (0,0)/320x240 [ 180.296435][ T7115] tpg compose: (0,0)/320x240 [ 180.313740][ T7115] tpg colorspace: 8 [ 180.332391][ T7115] tpg transfer function: 0/0 [ 180.352751][ T7115] tpg Y'CbCr encoding: 0/0 [ 180.377079][ T7115] tpg quantization: 0/0 [ 180.397105][ T7115] tpg RGB range: 0/2 [ 180.418682][ T7115] vivid-007: ================== END STATUS ================== [ 183.161422][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 183.640774][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 183.699864][ T7174] netlink: 354 bytes leftover after parsing attributes in process `syz.2.288'. [ 184.034047][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.290'. [ 185.989949][ T7204] random: crng reseeded on system resumption [ 186.752989][ T7202] Process accounting resumed [ 187.587372][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 188.258289][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 189.572198][ T7259] random: crng reseeded on system resumption [ 190.292061][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 193.663744][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.675556][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.841739][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'. [ 194.252640][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 195.624487][ T7374] random: crng reseeded on system resumption [ 196.540930][ T7386] random: crng reseeded on system resumption [ 197.788738][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 197.882994][ T7421] random: crng reseeded on system resumption [ 198.314730][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 199.664263][ T7439] mmap: syz.0.349 (7439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.126515][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 201.228964][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 206.044796][ T7528] Process accounting paused [ 208.881400][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'. [ 210.798398][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 211.252795][ T7602] vivid-007: ================= START STATUS ================= [ 211.300482][ T7602] vivid-007: Generate PTS: true [ 211.341260][ T7602] vivid-007: Generate SCR: true [ 211.368797][ T7602] tpg source WxH: 320x240 (Y'CbCr) [ 211.412517][ T7602] tpg field: 1 [ 211.478417][ T7602] tpg crop: (0,0)/320x240 [ 211.511390][ T7602] tpg compose: (0,0)/320x240 [ 211.533443][ T7602] tpg colorspace: 8 [ 211.554192][ T7602] tpg transfer function: 0/0 [ 211.574279][ T7602] tpg Y'CbCr encoding: 0/0 [ 211.600886][ T7602] tpg quantization: 0/0 [ 211.619956][ T7602] tpg RGB range: 0/2 [ 211.640497][ T7602] vivid-007: ================== END STATUS ================== [ 213.234139][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 213.872034][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 214.743845][ T7647] vivid-007: ================= START STATUS ================= [ 214.818382][ T7647] vivid-007: Generate PTS: true [ 214.878014][ T7647] vivid-007: Generate SCR: true [ 214.946458][ T7647] tpg source WxH: 320x240 (Y'CbCr) [ 214.999601][ T7647] tpg field: 1 [ 215.026200][ T7647] tpg crop: (0,0)/320x240 [ 215.072549][ T7647] tpg compose: (0,0)/320x240 [ 215.121100][ T7647] tpg colorspace: 8 [ 215.151586][ T7647] tpg transfer function: 0/0 [ 215.200885][ T7647] tpg Y'CbCr encoding: 0/0 [ 215.236995][ T7647] tpg quantization: 0/0 [ 215.270759][ T7647] tpg RGB range: 0/2 [ 215.312512][ T7647] vivid-007: ================== END STATUS ================== [ 217.364012][ T7668] Process accounting paused [ 217.501219][ T7655] Bluetooth: hci0: command 0x0406 tx timeout [ 217.510587][ T7655] Bluetooth: hci1: command 0x0406 tx timeout [ 217.517303][ T7655] Bluetooth: hci2: command 0x0406 tx timeout [ 217.524845][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 223.673989][ T7754] vivid-007: ================= START STATUS ================= [ 223.853882][ T7754] vivid-007: Generate PTS: true [ 223.955586][ T7754] vivid-007: Generate SCR: true [ 224.067435][ T7754] tpg source WxH: 320x240 (Y'CbCr) [ 224.184443][ T7754] tpg field: 1 [ 224.283161][ T7754] tpg crop: (0,0)/320x240 [ 224.365188][ T7754] tpg compose: (0,0)/320x240 [ 224.403051][ T7761] random: crng reseeded on system resumption [ 224.464765][ T7754] tpg colorspace: 8 [ 224.539762][ T7754] tpg transfer function: 0/0 [ 224.624011][ T7754] tpg Y'CbCr encoding: 0/0 [ 224.715192][ T7754] tpg quantization: 0/0 [ 224.787853][ T7754] tpg RGB range: 0/2 [ 224.859891][ T7754] vivid-007: ================== END STATUS ================== [ 224.877996][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 224.958564][ T7768] random: crng reseeded on system resumption [ 227.999680][ T7809] vivid-007: ================= START STATUS ================= [ 228.111061][ T7809] vivid-007: Generate PTS: true [ 228.212041][ T7809] vivid-007: Generate SCR: true [ 228.274133][ T7809] tpg source WxH: 320x240 (Y'CbCr) [ 228.350897][ T7809] tpg field: 1 [ 228.402544][ T7809] tpg crop: (0,0)/320x240 [ 228.483201][ T7809] tpg compose: (0,0)/320x240 [ 228.595485][ T7809] tpg colorspace: 8 [ 228.657322][ T7809] tpg transfer function: 0/0 [ 228.746835][ T7809] tpg Y'CbCr encoding: 0/0 [ 228.806180][ T7809] tpg quantization: 0/0 [ 228.866695][ T7809] tpg RGB range: 0/2 [ 228.935794][ T7809] vivid-007: ================== END STATUS ================== [ 230.444625][ T7840] random: crng reseeded on system resumption [ 231.094328][ T7856] random: crng reseeded on system resumption [ 234.737994][ T7908] random: crng reseeded on system resumption [ 235.286873][ T7911] random: crng reseeded on system resumption [ 236.455789][ T7919] Process accounting resumed [ 239.958296][ T7970] random: crng reseeded on system resumption [ 242.533087][ T8014] vivid-007: ================= START STATUS ================= [ 242.732724][ T8014] vivid-007: Generate PTS: true [ 242.857192][ T8014] vivid-007: Generate SCR: true [ 242.975525][ T8014] tpg source WxH: 320x240 (Y'CbCr) [ 243.099692][ T8014] tpg field: 1 [ 243.181911][ T8014] tpg crop: (0,0)/320x240 [ 243.242383][ T8020] random: crng reseeded on system resumption [ 243.283930][ T8014] tpg compose: (0,0)/320x240 [ 243.415589][ T8014] tpg colorspace: 8 [ 243.505997][ T8014] tpg transfer function: 0/0 [ 243.626444][ T8014] tpg Y'CbCr encoding: 0/0 [ 243.716739][ T8014] tpg quantization: 0/0 [ 243.813769][ T8014] tpg RGB range: 0/2 [ 243.846496][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 243.919251][ T8014] vivid-007: ================== END STATUS ================== [ 244.868678][ T8055] vivid-007: ================= START STATUS ================= [ 244.993421][ T8055] vivid-007: Generate PTS: true [ 245.076770][ T8055] vivid-007: Generate SCR: true [ 245.155377][ T8055] tpg source WxH: 320x240 (Y'CbCr) [ 245.223659][ T8055] tpg field: 1 [ 245.274056][ T8055] tpg crop: (0,0)/320x240 [ 245.338377][ T8055] tpg compose: (0,0)/320x240 [ 245.404344][ T8055] tpg colorspace: 8 [ 245.455081][ T8055] tpg transfer function: 0/0 [ 245.522595][ T8055] tpg Y'CbCr encoding: 0/0 [ 245.590170][ T8055] tpg quantization: 0/0 [ 245.652575][ T8055] tpg RGB range: 0/2 [ 245.749134][ T8055] vivid-007: ================== END STATUS ================== [ 246.961851][ T8079] random: crng reseeded on system resumption [ 247.271481][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 248.080047][ T8085] Process accounting resumed [ 248.833980][ T8120] vivid-007: ================= START STATUS ================= [ 248.917819][ T8120] vivid-007: Generate PTS: true [ 248.970483][ T8120] vivid-007: Generate SCR: true [ 249.031669][ T8120] tpg source WxH: 320x240 (Y'CbCr) [ 249.079400][ T8120] tpg field: 1 [ 249.115833][ T8120] tpg crop: (0,0)/320x240 [ 249.149489][ T8120] tpg compose: (0,0)/320x240 [ 249.195565][ T8120] tpg colorspace: 8 [ 249.231392][ T8120] tpg transfer function: 0/0 [ 249.277741][ T8120] tpg Y'CbCr encoding: 0/0 [ 249.320366][ T8120] tpg quantization: 0/0 [ 249.360068][ T8120] tpg RGB range: 0/2 [ 249.399262][ T8120] vivid-007: ================== END STATUS ================== [ 251.780785][ T8175] vivid-007: ================= START STATUS ================= [ 251.859860][ T8175] vivid-007: Generate PTS: true [ 251.906756][ T8175] vivid-007: Generate SCR: true [ 251.974511][ T8175] tpg source WxH: 320x240 (Y'CbCr) [ 252.019284][ T8175] tpg field: 1 [ 252.053062][ T8175] tpg crop: (0,0)/320x240 [ 252.090388][ T8175] tpg compose: (0,0)/320x240 [ 252.138302][ T8175] tpg colorspace: 8 [ 252.173459][ T8175] tpg transfer function: 0/0 [ 252.210575][ T8175] tpg Y'CbCr encoding: 0/0 [ 252.249618][ T8175] tpg quantization: 0/0 [ 252.272722][ T8175] tpg RGB range: 0/2 [ 252.287895][ T8175] vivid-007: ================== END STATUS ================== [ 252.611889][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 253.265432][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 255.121588][ T8235] vivid-007: ================= START STATUS ================= [ 255.178480][ T8235] vivid-007: Generate PTS: true [ 255.213696][ T8235] vivid-007: Generate SCR: true [ 255.245114][ T8235] tpg source WxH: 320x240 (Y'CbCr) [ 255.273629][ T8235] tpg field: 1 [ 255.328352][ T8235] tpg crop: (0,0)/320x240 [ 255.359034][ T8235] tpg compose: (0,0)/320x240 [ 255.385136][ T8235] tpg colorspace: 8 [ 255.412026][ T8235] tpg transfer function: 0/0 [ 255.440845][ T8235] tpg Y'CbCr encoding: 0/0 [ 255.460762][ T8235] tpg quantization: 0/0 [ 255.480991][ T8235] tpg RGB range: 0/2 [ 255.501570][ T8235] vivid-007: ================== END STATUS ================== [ 255.940628][ T8254] random: crng reseeded on system resumption [ 256.338711][ T8258] vivid-007: ================= START STATUS ================= [ 256.380135][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.391258][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.403393][ T8258] vivid-007: Generate PTS: true [ 256.425972][ T8258] vivid-007: Generate SCR: true [ 256.446333][ T8258] tpg source WxH: 320x240 (Y'CbCr) [ 256.465715][ T8258] tpg field: 1 [ 256.477921][ T8258] tpg crop: (0,0)/320x240 [ 256.495334][ T8258] tpg compose: (0,0)/320x240 [ 256.551036][ T8258] tpg colorspace: 8 [ 256.574619][ T8258] tpg transfer function: 0/0 [ 256.610376][ T8258] tpg Y'CbCr encoding: 0/0 [ 256.636785][ T8258] tpg quantization: 0/0 [ 256.654738][ T8258] tpg RGB range: 0/2 [ 256.677882][ T8258] vivid-007: ================== END STATUS ================== [ 256.927505][ T8268] random: crng reseeded on system resumption [ 260.056199][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 260.063597][ T8295] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.600664][ T8295] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.623431][ T8295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.630520][ T8295] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.643959][ T8295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.650496][ T8295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 260.660754][ T8295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.667874][ T8295] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.136191][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 262.697105][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 262.703194][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 262.709273][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 262.924820][ T8366] random: crng reseeded on system resumption [ 263.430446][ T8383] vivid-007: ================= START STATUS ================= [ 263.466654][ T8383] vivid-007: Generate PTS: true [ 263.490903][ T8383] vivid-007: Generate SCR: true [ 263.518093][ T8383] tpg source WxH: 320x240 (Y'CbCr) [ 263.537384][ T8383] tpg field: 1 [ 263.562124][ T8383] tpg crop: (0,0)/320x240 [ 263.596602][ T8383] tpg compose: (0,0)/320x240 [ 263.622399][ T8383] tpg colorspace: 8 [ 263.640524][ T8383] tpg transfer function: 0/0 [ 263.664170][ T8383] tpg Y'CbCr encoding: 0/0 [ 263.688225][ T8383] tpg quantization: 0/0 [ 263.711421][ T8383] tpg RGB range: 0/2 [ 263.727825][ T8383] vivid-007: ================== END STATUS ================== [ 263.770733][ T8388] vivid-007: ================= START STATUS ================= [ 263.863223][ T8388] vivid-007: Generate PTS: true [ 263.936254][ T8388] vivid-007: Generate SCR: true [ 263.994836][ T8388] tpg source WxH: 320x240 (Y'CbCr) [ 264.049774][ T8388] tpg field: 1 [ 264.094265][ T8388] tpg crop: (0,0)/320x240 [ 264.143588][ T8388] tpg compose: (0,0)/320x240 [ 264.189275][ T8388] tpg colorspace: 8 [ 264.238879][ T8388] tpg transfer function: 0/0 [ 264.284611][ T8388] tpg Y'CbCr encoding: 0/0 [ 264.337381][ T8388] tpg quantization: 0/0 [ 264.390995][ T8388] tpg RGB range: 0/2 [ 264.429491][ T8388] vivid-007: ================== END STATUS ================== [ 264.776380][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 264.782529][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 264.788881][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 267.292633][ T8446] Process accounting paused [ 267.427797][ T8454] vivid-007: ================= START STATUS ================= [ 267.499102][ T8454] vivid-007: Generate PTS: true [ 267.552810][ T8454] vivid-007: Generate SCR: true [ 267.613668][ T8454] tpg source WxH: 320x240 (Y'CbCr) [ 267.663687][ T8454] tpg field: 1 [ 267.699169][ T8454] tpg crop: (0,0)/320x240 [ 267.737447][ T8454] tpg compose: (0,0)/320x240 [ 267.775930][ T8454] tpg colorspace: 8 [ 267.816647][ T8454] tpg transfer function: 0/0 [ 267.853969][ T8454] tpg Y'CbCr encoding: 0/0 [ 267.898146][ T8454] tpg quantization: 0/0 [ 267.947704][ T8454] tpg RGB range: 0/2 [ 267.987299][ T8454] vivid-007: ================== END STATUS ================== [ 268.068397][ T8457] vivid-007: ================= START STATUS ================= [ 268.144176][ T8457] vivid-007: Generate PTS: true [ 268.194312][ T8457] vivid-007: Generate SCR: true [ 268.245856][ T8457] tpg source WxH: 320x240 (Y'CbCr) [ 268.299384][ T8457] tpg field: 1 [ 268.338693][ T8457] tpg crop: (0,0)/320x240 [ 268.377734][ T8457] tpg compose: (0,0)/320x240 [ 268.421288][ T8457] tpg colorspace: 8 [ 268.456014][ T8457] tpg transfer function: 0/0 [ 268.506870][ T8457] tpg Y'CbCr encoding: 0/0 [ 268.556617][ T8457] tpg quantization: 0/0 [ 268.589387][ T8457] tpg RGB range: 0/2 [ 268.630819][ T8457] vivid-007: ================== END STATUS ================== [ 269.214074][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 272.182996][ T8530] random: crng reseeded on system resumption [ 274.512421][ T8562] random: crng reseeded on system resumption [ 274.739867][ T8568] random: crng reseeded on system resumption [ 275.119300][ T8573] vivid-007: ================= START STATUS ================= [ 275.165725][ T8573] vivid-007: Generate PTS: true [ 275.202899][ T8573] vivid-007: Generate SCR: true [ 275.231450][ T8573] tpg source WxH: 320x240 (Y'CbCr) [ 275.258005][ T8573] tpg field: 1 [ 275.300346][ T8573] tpg crop: (0,0)/320x240 [ 275.323029][ T8573] tpg compose: (0,0)/320x240 [ 275.353380][ T8573] tpg colorspace: 8 [ 275.376017][ T8573] tpg transfer function: 0/0 [ 275.405683][ T8573] tpg Y'CbCr encoding: 0/0 [ 275.437710][ T8573] tpg quantization: 0/0 [ 275.456752][ T8573] tpg RGB range: 0/2 [ 275.475538][ T8573] vivid-007: ================== END STATUS ================== [ 275.608146][ T8579] random: crng reseeded on system resumption [ 276.943175][ T8616] random: crng reseeded on system resumption [ 277.617282][ T8624] random: crng reseeded on system resumption [ 278.185841][ T8623] Process accounting paused [ 279.564171][ T8662] random: crng reseeded on system resumption [ 280.126168][ T8674] random: crng reseeded on system resumption [ 281.202175][ T8689] random: crng reseeded on system resumption [ 281.648766][ T8705] vivid-007: ================= START STATUS ================= [ 281.728110][ T8705] vivid-007: Generate PTS: true [ 281.790941][ T8705] vivid-007: Generate SCR: true [ 281.849296][ T8705] tpg source WxH: 320x240 (Y'CbCr) [ 281.883865][ T8705] tpg field: 1 [ 281.914534][ T8705] tpg crop: (0,0)/320x240 [ 281.955701][ T8705] tpg compose: (0,0)/320x240 [ 281.997693][ T8705] tpg colorspace: 8 [ 282.038539][ T8705] tpg transfer function: 0/0 [ 282.052859][ T8700] vcan0: tx drop: invalid da for name 0x000000000000003f [ 282.088356][ T8705] tpg Y'CbCr encoding: 0/0 [ 282.129681][ T8705] tpg quantization: 0/0 [ 282.166145][ T8705] tpg RGB range: 0/2 [ 282.203693][ T8705] vivid-007: ================== END STATUS ================== [ 284.551720][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 284.953076][ T8747] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 285.005083][ T8747] netlink: 9 bytes leftover after parsing attributes in process `syz.1.629'. [ 286.187721][ T8760] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 286.221332][ T8760] netlink: 9 bytes leftover after parsing attributes in process `syz.3.633'. [ 286.565857][ T8766] random: crng reseeded on system resumption [ 286.672523][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 286.836699][ T8780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.634'. [ 287.119760][ T8782] random: crng reseeded on system resumption [ 289.737839][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 289.846710][ T8841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.648'. [ 289.856318][ T8831] random: crng reseeded on system resumption [ 291.287355][ T8865] vivid-007: ================= START STATUS ================= [ 291.357377][ T8865] vivid-007: Generate PTS: true [ 291.401712][ T8865] vivid-007: Generate SCR: true [ 291.494841][ T8865] tpg source WxH: 320x240 (Y'CbCr) [ 291.559757][ T8865] tpg field: 1 [ 291.608270][ T8865] tpg crop: (0,0)/320x240 [ 291.665156][ T8865] tpg compose: (0,0)/320x240 [ 291.708185][ T8865] tpg colorspace: 8 [ 291.733774][ T8873] random: crng reseeded on system resumption [ 291.752774][ T8865] tpg transfer function: 0/0 [ 291.802942][ T8865] tpg Y'CbCr encoding: 0/0 [ 291.848345][ T8865] tpg quantization: 0/0 [ 291.892442][ T8865] tpg RGB range: 0/2 [ 291.941758][ T8865] vivid-007: ================== END STATUS ================== [ 293.097784][ T8901] random: crng reseeded on system resumption [ 295.377380][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 297.982599][ T8968] Process accounting resumed [ 299.834167][ T8996] vivid-007: ================= START STATUS ================= [ 299.916391][ T8996] vivid-007: Generate PTS: true [ 299.959422][ T8996] vivid-007: Generate SCR: true [ 300.004782][ T8996] tpg source WxH: 320x240 (Y'CbCr) [ 300.041888][ T8996] tpg field: 1 [ 300.068323][ T8996] tpg crop: (0,0)/320x240 [ 300.099871][ T8996] tpg compose: (0,0)/320x240 [ 300.134946][ T8996] tpg colorspace: 8 [ 300.164224][ T8996] tpg transfer function: 0/0 [ 300.202816][ T8996] tpg Y'CbCr encoding: 0/0 [ 300.234964][ T8996] tpg quantization: 0/0 [ 300.267112][ T8996] tpg RGB range: 0/2 [ 300.290550][ T8996] vivid-007: ================== END STATUS ================== [ 301.363415][ T9022] random: crng reseeded on system resumption [ 303.190184][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 303.415384][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'. [ 303.445202][ T9051] random: crng reseeded on system resumption [ 303.738478][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 304.021171][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 305.785821][ T9098] random: crng reseeded on system resumption [ 306.874111][ T9117] block2mtd: illegal erase size [ 308.269925][ T9136] random: crng reseeded on system resumption [ 308.552194][ T9145] Process accounting resumed [ 309.664639][ T9173] random: crng reseeded on system resumption [ 310.658802][ T9195] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 313.003602][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.722'. [ 313.820655][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 314.083147][ T9240] random: crng reseeded on system resumption [ 314.553320][ T9252] random: crng reseeded on system resumption [ 316.019584][ T9278] random: crng reseeded on system resumption [ 317.217288][ T9294] random: crng reseeded on system resumption [ 317.548643][ T9301] random: crng reseeded on system resumption [ 317.824616][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.833843][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.102238][ T9307] random: crng reseeded on system resumption [ 320.367829][ T9345] random: crng reseeded on system resumption [ 321.001389][ T9354] random: crng reseeded on system resumption [ 321.354387][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 323.780360][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 323.980511][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'. [ 325.035899][ T9407] random: crng reseeded on system resumption [ 327.185792][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 327.283149][ T9450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.773'. [ 327.827709][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'. [ 328.071812][ T9459] Process accounting paused [ 328.803905][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 329.380631][ T9491] random: crng reseeded on system resumption [ 329.492053][ T9476] binder: 9470:9476 ioctl c0306201 200000001100 returned -14 [ 330.056993][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'. [ 330.163607][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.783'. [ 333.060548][ T9538] block2mtd: illegal erase size [ 336.755677][ T9598] random: crng reseeded on system resumption [ 337.140971][ T9608] vivid-007: ================= START STATUS ================= [ 337.181100][ T9608] vivid-007: Generate PTS: true [ 337.200903][ T9608] vivid-007: Generate SCR: true [ 337.235432][ T9608] tpg source WxH: 320x240 (Y'CbCr) [ 337.268552][ T9608] tpg field: 1 [ 337.279320][ T9608] tpg crop: (0,0)/320x240 [ 337.324134][ T9608] tpg compose: (0,0)/320x240 [ 337.355319][ T9608] tpg colorspace: 8 [ 337.368961][ T9608] tpg transfer function: 0/0 [ 337.384468][ T9608] tpg Y'CbCr encoding: 0/0 [ 337.401797][ T9608] tpg quantization: 0/0 [ 337.413601][ T9608] tpg RGB range: 0/2 [ 337.427078][ T9608] vivid-007: ================== END STATUS ================== [ 339.602783][ T9635] Process accounting paused [ 340.922712][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.822'. [ 342.922532][ T9707] random: crng reseeded on system resumption [ 343.290534][ T9709] random: crng reseeded on system resumption [ 344.856245][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 345.487997][ T9717] random: crng reseeded on system resumption [ 347.745853][ T9747] random: crng reseeded on system resumption [ 348.410118][ T9759] random: crng reseeded on system resumption [ 349.147318][ T9770] ubi0: attaching mtd0 [ 349.242722][ T9770] ubi0: scanning is finished [ 349.301340][ T9770] ubi0: empty MTD device detected [ 349.566917][ T9774] random: crng reseeded on system resumption [ 349.946099][ T9770] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 350.058811][ T9770] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 350.138663][ T9770] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 350.230135][ T9770] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 350.327295][ T9770] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 350.430509][ T9770] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 350.546567][ T9770] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4157539620 [ 350.622642][ T9770] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 350.696769][ T9779] ubi0: background thread "ubi_bgt0d" started, PID 9779 [ 352.287716][ T9791] netlink: 186 bytes leftover after parsing attributes in process `syz.3.846'. [ 353.824415][ T9821] random: crng reseeded on system resumption [ 354.294157][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'. [ 354.330122][ T9838] vivid-007: ================= START STATUS ================= [ 354.428968][ T9838] vivid-007: Generate PTS: true [ 354.513351][ T9838] vivid-007: Generate SCR: true [ 354.583340][ T9838] tpg source WxH: 320x240 (Y'CbCr) [ 354.652989][ T9838] tpg field: 1 [ 354.704522][ T9838] tpg crop: (0,0)/320x240 [ 354.920862][ T9838] tpg compose: (0,0)/320x240 [ 354.995703][ T9838] tpg colorspace: 8 [ 355.059949][ T9838] tpg transfer function: 0/0 [ 355.142414][ T9838] tpg Y'CbCr encoding: 0/0 [ 355.198935][ T9838] tpg quantization: 0/0 [ 355.243286][ T9838] tpg RGB range: 0/2 [ 355.301097][ T9838] vivid-007: ================== END STATUS ================== [ 356.482784][ T9873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 358.123992][ T9899] vivid-007: ================= START STATUS ================= [ 358.153145][ T9899] vivid-007: Generate PTS: true [ 358.172579][ T9899] vivid-007: Generate SCR: true [ 358.190694][ T9899] tpg source WxH: 320x240 (Y'CbCr) [ 358.224589][ T9899] tpg field: 1 [ 358.241034][ T9899] tpg crop: (0,0)/320x240 [ 358.261384][ T9899] tpg compose: (0,0)/320x240 [ 358.312324][ T9899] tpg colorspace: 8 [ 358.333978][ T9899] tpg transfer function: 0/0 [ 358.357948][ T9899] tpg Y'CbCr encoding: 0/0 [ 358.381873][ T9899] tpg quantization: 0/0 [ 358.399847][ T9899] tpg RGB range: 0/2 [ 358.413940][ T9899] vivid-007: ================== END STATUS ================== [ 358.456610][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.104255][ T9907] Process accounting resumed [ 359.454925][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 359.484768][ T9929] random: crng reseeded on system resumption [ 360.467438][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.879'. [ 362.778483][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'. [ 363.420561][ T9995] random: crng reseeded on system resumption [ 363.815429][T10000] random: crng reseeded on system resumption [ 364.958398][T10010] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 365.657681][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 365.856216][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 366.569970][T10035] random: crng reseeded on system resumption [ 366.637669][T10029] FAULT_INJECTION: forcing a failure. [ 366.637669][T10029] name failslab, interval 1, probability 0, space 0, times 1 [ 366.703771][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.2.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.703801][T10029] Tainted: [L]=SOFTLOCKUP [ 366.703808][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.703826][T10029] Call Trace: [ 366.703832][T10029] [ 366.703840][T10029] dump_stack_lvl+0x100/0x190 [ 366.703876][T10029] should_fail_ex.cold+0x5/0xa [ 366.703901][T10029] should_failslab+0xc2/0x120 [ 366.703920][T10029] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 366.703950][T10029] ? acpi_ut_create_generic_state+0x61/0xc0 [ 366.703978][T10029] acpi_ut_create_generic_state+0x61/0xc0 [ 366.703999][T10029] acpi_ds_scope_stack_push+0x70/0x790 [ 366.704025][T10029] acpi_ds_init_aml_walk+0x2d8/0x680 [ 366.704050][T10029] acpi_ps_execute_method+0x39d/0xe90 [ 366.704080][T10029] acpi_ns_evaluate+0x640/0x1670 [ 366.704110][T10029] acpi_evaluate_object+0x420/0xe00 [ 366.704129][T10029] ? kasan_save_stack+0x30/0x50 [ 366.704155][T10029] ? kasan_save_track+0x14/0x30 [ 366.704180][T10029] ? __kasan_kmalloc+0xaa/0xb0 [ 366.704205][T10029] ? __kvmalloc_node_noprof+0x360/0xa00 [ 366.704234][T10029] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 366.704252][T10029] ? lock_acquire+0x1b1/0x370 [ 366.704286][T10029] acpi_evaluate_integer+0xdf/0x220 [ 366.704313][T10029] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 366.704350][T10029] ? __pfx_status_show+0x10/0x10 [ 366.704368][T10029] status_show+0xa0/0x120 [ 366.704386][T10029] ? __pfx_status_show+0x10/0x10 [ 366.704410][T10029] dev_attr_show+0x52/0xa0 [ 366.704433][T10029] ? __pfx_dev_attr_show+0x10/0x10 [ 366.704454][T10029] sysfs_kf_seq_show+0x217/0x3a0 [ 366.704484][T10029] seq_read_iter+0x32f/0x1270 [ 366.704509][T10029] ? lock_acquire+0x1b1/0x370 [ 366.704546][T10029] kernfs_fop_read_iter+0x46c/0x610 [ 366.704568][T10029] ? rw_verify_area+0xce/0x6d0 [ 366.704592][T10029] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 366.704615][T10029] vfs_read+0x825/0xb30 [ 366.704645][T10029] ? __pfx_vfs_read+0x10/0x10 [ 366.704688][T10029] ksys_read+0x12a/0x250 [ 366.704715][T10029] ? __pfx_ksys_read+0x10/0x10 [ 366.704744][T10029] ? rcu_is_watching+0x12/0xc0 [ 366.704767][T10029] do_syscall_64+0x10b/0xf80 [ 366.704787][T10029] ? clear_bhb_loop+0x40/0x90 [ 366.704809][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.704835][T10029] RIP: 0033:0x7ff2adf9c819 [ 366.704851][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.704868][T10029] RSP: 002b:00007ff2aef35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.704885][T10029] RAX: ffffffffffffffda RBX: 00007ff2ae215fa0 RCX: 00007ff2adf9c819 [ 366.704896][T10029] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 366.704906][T10029] RBP: 00007ff2ae032c91 R08: 0000000000000000 R09: 0000000000000000 [ 366.704917][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.704927][T10029] R13: 00007ff2ae216038 R14: 00007ff2ae215fa0 R15: 00007ffd44c56c28 [ 366.704951][T10029] [ 367.351032][T10029] ACPI Error: ffff88803027c000 walk still has a scope list (20251212/dswstate-694) [ 367.536309][T10039] vivid-007: ================= START STATUS ================= [ 367.557672][T10039] vivid-007: Generate PTS: true [ 367.570245][T10039] vivid-007: Generate SCR: true [ 367.578381][T10039] tpg source WxH: 320x240 (Y'CbCr) [ 367.591435][T10039] tpg field: 1 [ 367.596705][T10039] tpg crop: (0,0)/320x240 [ 367.604724][T10039] tpg compose: (0,0)/320x240 [ 367.621218][T10039] tpg colorspace: 8 [ 367.633297][T10039] tpg transfer function: 0/0 [ 367.647621][T10039] tpg Y'CbCr encoding: 0/0 [ 367.655073][T10039] tpg quantization: 0/0 [ 367.663776][T10039] tpg RGB range: 0/2 [ 367.678356][T10039] vivid-007: ================== END STATUS ================== [ 367.733337][T10044] random: crng reseeded on system resumption [ 369.048640][T10074] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 369.333766][T10081] netlink: 186 bytes leftover after parsing attributes in process `syz.2.909'. [ 370.447761][T10068] Process accounting resumed [ 371.244423][T10100] random: crng reseeded on system resumption [ 373.917114][T10145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.001208][T10145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.073554][T10152] vivid-007: ================= START STATUS ================= [ 374.125093][T10152] vivid-007: Generate PTS: true [ 374.134337][T10145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.166261][T10152] vivid-007: Generate SCR: true [ 374.207578][T10152] tpg source WxH: 320x240 (Y'CbCr) [ 374.235716][T10152] tpg field: 1 [ 374.254432][T10145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.269188][T10152] tpg crop: (0,0)/320x240 [ 374.302301][T10152] tpg compose: (0,0)/320x240 [ 374.338553][T10152] tpg colorspace: 8 [ 374.361072][T10152] tpg transfer function: 0/0 [ 374.391740][T10152] tpg Y'CbCr encoding: 0/0 [ 374.423220][T10152] tpg quantization: 0/0 [ 374.448125][T10152] tpg RGB range: 0/2 [ 374.478752][T10152] vivid-007: ================== END STATUS ================== [ 374.830615][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 375.540778][T10176] random: crng reseeded on system resumption [ 375.737402][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 375.939298][T10181] random: crng reseeded on system resumption [ 376.057263][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 376.136915][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 376.296294][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 378.804269][T10241] random: crng reseeded on system resumption [ 379.261535][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.270777][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.664248][T10299] random: crng reseeded on system resumption [ 382.169349][T10306] random: crng reseeded on system resumption [ 382.793441][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 382.806245][T10316] random: crng reseeded on system resumption [ 383.933613][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.963'. [ 385.193009][T10361] futex_wake_op: syz.1.965 tries to shift op by -2048; fix this program [ 386.572779][T10378] vivid-007: ================= START STATUS ================= [ 386.684054][T10378] vivid-007: Generate PTS: true [ 386.772738][T10378] vivid-007: Generate SCR: true [ 386.843437][T10378] tpg source WxH: 320x240 (Y'CbCr) [ 386.913114][T10378] tpg field: 1 [ 386.962488][T10378] tpg crop: (0,0)/320x240 [ 387.016635][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 387.047309][T10378] tpg compose: (0,0)/320x240 [ 387.186753][T10378] tpg colorspace: 8 [ 387.275026][T10378] tpg transfer function: 0/0 [ 387.383137][T10378] tpg Y'CbCr encoding: 0/0 [ 387.467904][T10378] tpg quantization: 0/0 [ 387.568082][T10378] tpg RGB range: 0/2 [ 387.573161][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 387.639668][T10378] vivid-007: ================== END STATUS ================== [ 388.286808][T10392] FAULT_INJECTION: forcing a failure. [ 388.286808][T10392] name failslab, interval 1, probability 0, space 0, times 0 [ 388.357464][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.3.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.357499][T10392] Tainted: [L]=SOFTLOCKUP [ 388.357506][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.357516][T10392] Call Trace: [ 388.357523][T10392] [ 388.357530][T10392] dump_stack_lvl+0x100/0x190 [ 388.357565][T10392] should_fail_ex.cold+0x5/0xa [ 388.357588][T10392] should_failslab+0xc2/0x120 [ 388.357606][T10392] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 388.357631][T10392] ? do_getname+0x35/0x390 [ 388.357657][T10392] do_getname+0x35/0x390 [ 388.357680][T10392] do_sys_openat2+0xc5/0x1e0 [ 388.357702][T10392] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.357739][T10392] __x64_sys_openat+0x12d/0x210 [ 388.357762][T10392] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.357789][T10392] ? rcu_is_watching+0x12/0xc0 [ 388.357812][T10392] do_syscall_64+0x10b/0xf80 [ 388.357831][T10392] ? clear_bhb_loop+0x40/0x90 [ 388.357854][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.357872][T10392] RIP: 0033:0x7eff73f9c819 [ 388.357888][T10392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.357904][T10392] RSP: 002b:00007eff721f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.357922][T10392] RAX: ffffffffffffffda RBX: 00007eff74215fa0 RCX: 00007eff73f9c819 [ 388.357934][T10392] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 388.357944][T10392] RBP: 00007eff74032c91 R08: 0000000000000000 R09: 0000000000000000 [ 388.357955][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.357966][T10392] R13: 00007eff74216038 R14: 00007eff74215fa0 R15: 00007ffe08479298 [ 388.357989][T10392] [ 388.985815][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 389.022981][T10407] netlink: 354 bytes leftover after parsing attributes in process `syz.1.978'. [ 389.217130][T10411] random: crng reseeded on system resumption [ 389.326742][T10391] Process accounting paused [ 389.849871][T10408] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 391.242306][T10438] random: crng reseeded on system resumption [ 392.152282][T10448] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 393.452649][T10471] random: crng reseeded on system resumption [ 393.685935][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.995'. [ 393.760945][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.995'. [ 393.935390][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'. [ 396.032665][T10506] random: crng reseeded on system resumption [ 397.477873][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 397.676234][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 398.978242][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 399.439282][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 401.233120][T10593] FAULT_INJECTION: forcing a failure. [ 401.233120][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 401.353950][T10593] CPU: 0 UID: 0 PID: 10593 Comm: syz.0.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.353982][T10593] Tainted: [L]=SOFTLOCKUP [ 401.353988][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 401.353998][T10593] Call Trace: [ 401.354005][T10593] [ 401.354020][T10593] dump_stack_lvl+0x100/0x190 [ 401.354055][T10593] should_fail_ex.cold+0x5/0xa [ 401.354079][T10593] should_failslab+0xc2/0x120 [ 401.354097][T10593] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 401.354123][T10593] ? security_file_alloc+0x34/0x2c0 [ 401.354143][T10593] ? trace_kmem_cache_alloc+0xd5/0x100 [ 401.354164][T10593] security_file_alloc+0x34/0x2c0 [ 401.354185][T10593] init_file+0x95/0x480 [ 401.354206][T10593] alloc_empty_file+0x79/0x1c0 [ 401.354229][T10593] path_openat+0xe8/0x31a0 [ 401.354246][T10593] ? kasan_save_stack+0x3f/0x50 [ 401.354271][T10593] ? kasan_save_stack+0x30/0x50 [ 401.354296][T10593] ? kasan_save_track+0x14/0x30 [ 401.354321][T10593] ? __kasan_slab_alloc+0x89/0x90 [ 401.354347][T10593] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 401.354372][T10593] ? do_getname+0x35/0x390 [ 401.354391][T10593] ? do_sys_openat2+0xc5/0x1e0 [ 401.354412][T10593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.354434][T10593] ? __pfx_path_openat+0x10/0x10 [ 401.354459][T10593] do_file_open+0x20e/0x430 [ 401.354478][T10593] ? __pfx_do_file_open+0x10/0x10 [ 401.354514][T10593] ? alloc_fd+0x476/0x790 [ 401.354563][T10593] ? do_getname+0x191/0x390 [ 401.354586][T10593] do_sys_openat2+0x10d/0x1e0 [ 401.354609][T10593] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.354640][T10593] __x64_sys_openat+0x12d/0x210 [ 401.354665][T10593] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.354691][T10593] ? rcu_is_watching+0x12/0xc0 [ 401.354714][T10593] do_syscall_64+0x10b/0xf80 [ 401.354734][T10593] ? clear_bhb_loop+0x40/0x90 [ 401.354755][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.354774][T10593] RIP: 0033:0x7fe220f9c819 [ 401.354790][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.354807][T10593] RSP: 002b:00007fe221dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.354825][T10593] RAX: ffffffffffffffda RBX: 00007fe221215fa0 RCX: 00007fe220f9c819 [ 401.354836][T10593] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 401.354846][T10593] RBP: 00007fe221032c91 R08: 0000000000000000 R09: 0000000000000000 [ 401.354857][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.354867][T10593] R13: 00007fe221216038 R14: 00007fe221215fa0 R15: 00007ffdca0fb5a8 [ 401.354889][T10593] [ 401.682035][T10593] Process accounting paused [ 402.030270][T10610] vivid-007: ================= START STATUS ================= [ 402.065136][T10610] vivid-007: Generate PTS: true [ 402.081681][T10609] can0: slcan on ptm0. [ 402.086552][T10610] vivid-007: Generate SCR: true [ 402.101233][T10610] tpg source WxH: 320x240 (Y'CbCr) [ 402.121418][T10610] tpg field: 1 [ 402.137520][T10610] tpg crop: (0,0)/320x240 [ 402.151266][T10610] tpg compose: (0,0)/320x240 [ 402.162741][T10610] tpg colorspace: 8 [ 402.171310][T10610] tpg transfer function: 0/0 [ 402.196847][T10610] tpg Y'CbCr encoding: 0/0 [ 402.211937][T10610] tpg quantization: 0/0 [ 402.225841][T10610] tpg RGB range: 0/2 [ 402.236110][T10610] vivid-007: ================== END STATUS ================== [ 402.320198][T10606] can0 (unregistered): slcan off ptm0. [ 402.475364][T10622] vivid-007: ================= START STATUS ================= [ 402.492971][T10622] vivid-007: Generate PTS: true [ 402.503997][T10622] vivid-007: Generate SCR: true [ 402.515943][T10622] tpg source WxH: 320x240 (Y'CbCr) [ 402.528839][T10622] tpg field: 1 [ 402.536515][T10622] tpg crop: (0,0)/320x240 [ 402.548506][T10622] tpg compose: (0,0)/320x240 [ 402.573923][T10622] tpg colorspace: 8 [ 402.590275][T10622] tpg transfer function: 0/0 [ 402.621551][T10622] tpg Y'CbCr encoding: 0/0 [ 402.637636][T10622] tpg quantization: 0/0 [ 402.651754][T10622] tpg RGB range: 0/2 [ 402.665676][T10622] vivid-007: ================== END STATUS ================== [ 402.813207][T10629] random: crng reseeded on system resumption [ 403.228747][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 403.739839][T10651] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 403.902739][T10632] [ 403.905128][T10632] ====================================================== [ 403.912418][T10632] WARNING: possible circular locking dependency detected [ 403.919540][T10632] syzkaller #0 Tainted: G L [ 403.925671][T10632] ------------------------------------------------------ [ 403.932899][T10632] syz.0.1022/10632 is trying to acquire lock: [ 403.939154][T10632] ffff88802ae13c68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 403.950925][T10632] [ 403.950925][T10632] but task is already holding lock: [ 403.958293][T10632] ffff88802ae140e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 403.967353][T10632] [ 403.967353][T10632] which lock already depends on the new lock. [ 403.967353][T10632] [ 403.977749][T10632] [ 403.977749][T10632] the existing dependency chain (in reverse order) is: [ 403.986773][T10632] [ 403.986773][T10632] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 403.994598][T10632] lock_sock_nested+0x41/0xf0 [ 403.999899][T10632] smc_listen_out+0x1f5/0x4b0 [ 404.005109][T10632] smc_listen_work+0x4c2/0x50e0 [ 404.010500][T10632] process_one_work+0xa0e/0x1980 [ 404.016000][T10632] worker_thread+0x5ef/0xe50 [ 404.021304][T10632] kthread+0x370/0x450 [ 404.025989][T10632] ret_from_fork+0x72b/0xd50 [ 404.031122][T10632] ret_from_fork_asm+0x1a/0x30 [ 404.036434][T10632] [ 404.036434][T10632] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 404.046895][T10632] __lock_acquire+0x14b8/0x2630 [ 404.052322][T10632] lock_acquire+0x1b1/0x370 [ 404.057383][T10632] __flush_work+0x4de/0xcb0 [ 404.062548][T10632] cancel_work_sync+0xd1/0xf0 [ 404.067789][T10632] smc_clcsock_release+0x5f/0xe0 [ 404.073270][T10632] __smc_release+0x5c2/0x880 [ 404.078410][T10632] smc_close_non_accepted+0xda/0x200 [ 404.084233][T10632] smc_close_active+0x4ff/0x1070 [ 404.089797][T10632] __smc_release+0x634/0x880 [ 404.095018][T10632] smc_release+0x1fc/0x620 [ 404.099989][T10632] __sock_release+0xb3/0x260 [ 404.105135][T10632] sock_close+0x1c/0x30 [ 404.109838][T10632] __fput+0x3ff/0xb50 [ 404.114359][T10632] task_work_run+0x150/0x240 [ 404.119504][T10632] get_signal+0x1bd/0x21e0 [ 404.124450][T10632] arch_do_signal_or_restart+0x91/0x770 [ 404.130710][T10632] exit_to_user_mode_loop+0x86/0x4a0 [ 404.136551][T10632] do_syscall_64+0x6f2/0xf80 [ 404.141693][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.148704][T10632] [ 404.148704][T10632] other info that might help us debug this: [ 404.148704][T10632] [ 404.158974][T10632] Possible unsafe locking scenario: [ 404.158974][T10632] [ 404.166422][T10632] CPU0 CPU1 [ 404.171794][T10632] ---- ---- [ 404.177156][T10632] lock(sk_lock-AF_SMC/1); [ 404.181668][T10632] lock((work_completion)(&new_smc->smc_listen_work)); [ 404.191209][T10632] lock(sk_lock-AF_SMC/1); [ 404.198249][T10632] lock((work_completion)(&new_smc->smc_listen_work)); [ 404.205314][T10632] [ 404.205314][T10632] *** DEADLOCK *** [ 404.205314][T10632] [ 404.213551][T10632] 3 locks held by syz.0.1022/10632: [ 404.218835][T10632] #0: ffff88805e153840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 404.229384][T10632] #1: ffff88802ae140e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 404.238808][T10632] #2: ffffffff8e7e6ce0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 404.247983][T10632] [ 404.247983][T10632] stack backtrace: [ 404.253893][T10632] CPU: 0 UID: 0 PID: 10632 Comm: syz.0.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.253922][T10632] Tainted: [L]=SOFTLOCKUP [ 404.253928][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.253938][T10632] Call Trace: [ 404.253945][T10632] [ 404.253953][T10632] dump_stack_lvl+0x100/0x190 [ 404.253986][T10632] print_circular_bug.cold+0x178/0x1c7 [ 404.254021][T10632] check_noncircular+0x146/0x160 [ 404.254050][T10632] __lock_acquire+0x14b8/0x2630 [ 404.254081][T10632] lock_acquire+0x1b1/0x370 [ 404.254107][T10632] ? __flush_work+0x4ca/0xcb0 [ 404.254124][T10632] ? preempt_schedule_thunk+0x16/0x30 [ 404.254151][T10632] ? __flush_work+0x4ca/0xcb0 [ 404.254167][T10632] __flush_work+0x4de/0xcb0 [ 404.254182][T10632] ? __flush_work+0x4ca/0xcb0 [ 404.254199][T10632] ? __pfx___flush_work+0x10/0x10 [ 404.254217][T10632] ? __pfx_wq_barrier_func+0x10/0x10 [ 404.254242][T10632] ? __pfx___might_resched+0x10/0x10 [ 404.254259][T10632] ? __smc_release+0x5ba/0x880 [ 404.254287][T10632] cancel_work_sync+0xd1/0xf0 [ 404.254307][T10632] smc_clcsock_release+0x5f/0xe0 [ 404.254337][T10632] __smc_release+0x5c2/0x880 [ 404.254364][T10632] ? __pfx_sock_def_readable+0x10/0x10 [ 404.254385][T10632] smc_close_non_accepted+0xda/0x200 [ 404.254415][T10632] smc_close_active+0x4ff/0x1070 [ 404.254445][T10632] __smc_release+0x634/0x880 [ 404.254472][T10632] smc_release+0x1fc/0x620 [ 404.254498][T10632] __sock_release+0xb3/0x260 [ 404.254521][T10632] ? __pfx_sock_close+0x10/0x10 [ 404.254558][T10632] sock_close+0x1c/0x30 [ 404.254581][T10632] __fput+0x3ff/0xb50 [ 404.254601][T10632] task_work_run+0x150/0x240 [ 404.254630][T10632] ? __pfx_task_work_run+0x10/0x10 [ 404.254661][T10632] get_signal+0x1bd/0x21e0 [ 404.254682][T10632] ? task_work_add+0x201/0x3b0 [ 404.254710][T10632] ? __pfx_task_work_add+0x10/0x10 [ 404.254739][T10632] ? __pfx_get_signal+0x10/0x10 [ 404.254760][T10632] ? __fput_deferred+0x217/0x4a0 [ 404.254780][T10632] arch_do_signal_or_restart+0x91/0x770 [ 404.254806][T10632] ? __sys_accept4+0x1cb/0x200 [ 404.254824][T10632] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 404.254853][T10632] ? __pfx___sys_accept4+0x10/0x10 [ 404.254872][T10632] ? rcu_is_watching+0x12/0xc0 [ 404.254892][T10632] exit_to_user_mode_loop+0x86/0x4a0 [ 404.254920][T10632] ? do_syscall_64+0x519/0xf80 [ 404.254939][T10632] do_syscall_64+0x6f2/0xf80 [ 404.254958][T10632] ? clear_bhb_loop+0x40/0x90 [ 404.254978][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.254997][T10632] RIP: 0033:0x7fe220f9c819 [ 404.255018][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.255036][T10632] RSP: 002b:00007fe221dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 404.255053][T10632] RAX: fffffffffffffe00 RBX: 00007fe221215fa0 RCX: 00007fe220f9c819 [ 404.255065][T10632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 404.255075][T10632] RBP: 00007fe221032c91 R08: 0000000000000000 R09: 0000000000000000 [ 404.255085][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.255096][T10632] R13: 00007fe221216038 R14: 00007fe221215fa0 R15: 00007ffdca0fb5a8 [ 404.255111][T10632]