last executing test programs: 5.663753709s ago: executing program 3 (id=495): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 5.193348889s ago: executing program 0 (id=497): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x53c, 0x2, 0xeb1, 0xfffffffffffffffa, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="8b970000", @ANYRES16=r1, @ANYBLOB="01000abd7000fddbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008080) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x6480, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = pidfd_open$auto(0x1, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x02^#\x00', 0x3, 0x7fff) setns(r4, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x3b, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x6, 0x0) r5 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$auto_SO_DEBUG(r3, 0x1, 0x1, 0x0, 0x7fff) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000000c0)={r5}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x400000062, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 5.131040499s ago: executing program 1 (id=499): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x86000, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 4.850713584s ago: executing program 2 (id=501): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 3.898783678s ago: executing program 0 (id=502): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r1, 0x921064a4, 0x1000000000000003) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) r4 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2800, 0x0) r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r5, &(0x7f0000000140)={0x0, 0x3}, 0x1) r6 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r6, 0x0) r7 = openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy2/rts_threshold\x00', 0x163000, 0x0) r8 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) write$auto_tracing_mark_fops_trace(r8, 0x0, 0x0) pread64$auto(r7, 0x0, 0x4, 0x4800) write$auto(0x3, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6b2eef7cde2f326d086b92484fcfdd0561f93877d2", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="7846d1298688d33ac6811184e4214238accc402858922255ce9f1f79dff9ac09230d90e5145050ee84ba6322369f", @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x560}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x6, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xf, 0xf, 0xfffffffffffffffc, 0x40, 0xc4, 0xd59, 0x2, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa40, 0x0) ioctl$auto(0x3, 0x5521, 0x1) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) 3.890399158s ago: executing program 1 (id=503): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.607126491s ago: executing program 2 (id=504): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.487814607s ago: executing program 0 (id=505): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x86000, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 3.215774786s ago: executing program 3 (id=506): select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x0, 0x1000, 0xb, 0x9, 0x2, 0xb]}, 0x0) 2.927230048s ago: executing program 1 (id=507): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 2.926078403s ago: executing program 3 (id=515): select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x0, 0x1000, 0xb, 0x9, 0x2, 0xb]}, 0x0) 2.655239145s ago: executing program 1 (id=508): rseq$auto(0x0, 0x40, 0x0, 0x27) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x0, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x300000000000000) 2.65476037s ago: executing program 3 (id=509): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000000c0)={r0}) read$auto_proc_timers_operations_base(r1, 0x0, 0x0) getrandom$auto(0xfffffffffffffffd, 0x8, 0x3) fanotify_init$auto(0x5, 0x0) mmap$auto(0xfffffffffffffffa, 0x20009, 0x4000000000df, 0xebe, 0xa, 0x3fc) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x1c380, 0x82}, 0x1, 0x0, 0x0, 0x623d) io_uring_setup$auto(0xc3dc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/amidi2\x00', 0x0, 0x0) socket(0xa, 0x801, 0x8000084) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) r2 = prctl$auto(0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000480)='/dev/audio1\x00\xe9\x1a\"\xc2D\xfdy\x9e\x1aa\xf9\xda\x97S\xca9\x02V\'\xffhG_\x0ew\x13u\xbe\x96\xeeD5\x8e\xcd!\xa5\x06]\xebM+\xe4\xf4\x92\xaa\nV\x91\xf0\x9c\xff\x84\xb2\xb5q\xf7\xab\x93\xe27Y%\x8d\x15(\xaf_M\xe7\xac\xc3\x11\xea\xfc\xeb\xa3F$~Cs2\xce\xda\xaf)\xfa%\xab\x90\x88\xd6\xc6lao\x94\x84p\x9d[\xf4m?@$\x93v\xf5f?\x89I\xf2X&\xd2\xf1\xd9\xcd\xe2\a\x8f\xd5\xbfS\xec\xd7\xe9\xf9\xb1\x91x\x00;e\x19Q\xe8{\xecr\f\xb5\xcdp\'\x82\x17t\x84\\\x9a\xdf#\xa4@\xd0\r\xfc\xa8\x8d>g#v\xe7^L\n\xa3#\xa1\xfd\xe14_\x1b\xfb', 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000340)={[0xffff, 0x16, 0x400000d, 0x38, 0x948b, 0x0, 0x1, 0x6, 0x10, 0x120000000, 0x80000020, 0xfffffffffffffffa, 0x3, 0xf, 0x8000000000000000, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x5, 0x10001, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0xd, 0xffffffffffffff81, 0x4]}, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x185400, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event2\x00', 0x60200, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x200, 0xd7e, 0x1, 0x948b, 0x100000000003, 0x95b45a07, 0x8000000000000003, 0xe05, 0x8000000000008001, 0x80000001, 0x8ac, 0x6d3f, 0x9, 0x800, 0x4]}, 0x0) r3 = socket(0x26, 0x100a, 0x9) ioctl$auto_VHOST_SET_VRING_CALL2(r2, 0x4008af21, &(0x7f0000000280)={0x3e, r3}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4d010}, 0x40) 2.648414055s ago: executing program 2 (id=510): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) socket(0x1e, 0x1, 0x106) read$auto(0x3, 0x0, 0x7fffffff) read$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x2, 0x1, 0x8, 0x103, &(0x7f0000000080)}) 2.425100776s ago: executing program 0 (id=511): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x86000, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x84000, 0x0) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 1.63507495s ago: executing program 3 (id=512): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 1.199647058s ago: executing program 0 (id=513): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x86000, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 1.135182883s ago: executing program 1 (id=514): ioctl$auto_KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001040)={0x80000000, [0x2, 0xff, 0x8]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000080003000000000008000100050001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x101703, 0x0) read$auto(r0, &(0x7f00000010c0)='/dev/ttyS1\x00', 0x5000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 853.287693ms ago: executing program 2 (id=516): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event2\x00', 0x20881, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x2b, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="dedd892bd95c9463b1e02a6ab961f38fc41aeb1ad02892dae87095df86f84462ec9cff130731941b563559ae23f175b01b8761a9e4cc615b29fbea84ac61ff62cd989b9404550f1cec632079dc3e1c670bc413af8eccf049f903adb6d9e2e31960b2c77d232c3b0a46515fc22353f92ac42855238ab1be93a3d6f9ec705a69064d0e2336e74f88da153b33b04159c991e7ffffa2d55e24a4215e3ee7a4fb6a1de4a844854ddaebe8480ec939014e5d5a864e775740a8a771a42816389e6c2f0f9b1e4c731889dce91e69b00100"/220], 0x20}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop9\x00', 0x482901, 0x0) close$auto(r8) mmap$auto(0x0, 0x400008, 0x4305, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socket(0x1d, 0x3, 0x1) setsockopt$auto(0xffffffffffffffff, 0x2, 0x7f, 0x0, 0x840) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r9 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r10}, 0x6a) r11 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000006c0), r0) sendmsg$auto_NET_DM_CMD_STOP(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c22b63a", @ANYRES16=r11, @ANYBLOB="00082cbd7000fedbdf25040000000400140072000000a049499a562f6d18580da08435b44c14626cfeaee6cf4b322a93ea111e56cee94b7a618127f0af004a340744878237af42b9362b5da463b54c4ae55fd66fe9f52e7a4b3e3580d86fe0f08f90fa5737b151b83bd9507a065e0ef0256d7b0ca60e978fccf854f9cdb5fc78c4af32970000"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x240448c5) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r7, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252e0000004400018008000300db560000080003000500000008000300000100001400020076657468305f746f5f626f6e64000000140002007663616e3000000000000000000000003800018008000100", @ANYRESHEX=0x0, @ANYRES16=r10, @ANYRES32=r4, @ANYBLOB="080003004af3000008000300b10200008000018008000100", @ANYRES32=r5, @ANYBLOB="1400020073797a6b616c6c657230000000000000140002006c6f000000000000000000000000000014000200677265746170300000000000000000001400020076657468315f766972745f7769666900080003000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020062617461647630000000000000000000400001800800030008000000080003000c0000000800030005000000080003000002000008000300030000001400020077657468314c52c08f1c01f64dbf2d8cf46f69175f746f5f627269646765003800018008000100", @ANYRES32=0x0, @ANYRES64=0x0], 0x1a4}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004088) 573.793209ms ago: executing program 3 (id=517): ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x1, 0x0, 0xffffffffffffffff}) close_range$auto(r0, 0x8, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = getpgid$auto(0x0) rt_tgsigqueueinfo$auto_SIGCONT(0x0, r1, 0x12, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(r2, 0x0, 0x80, 0x230) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 571.38351ms ago: executing program 2 (id=525): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x3f, 0x9, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x3, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop7\x00', 0x420500, 0x0) timerfd_create$auto_CLOCK_TAI(0xb, 0xca) r1 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = timerfd_create$auto(0xfffffff8, 0x0) mmap$auto(0x6, 0x9, 0x2, 0x1d7, r2, 0x20080000001) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x1) rename$auto(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='./file1\x00') write$auto(r0, 0x0, 0x2) fcntl$auto(r2, 0x502, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x17, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r4) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042bbd7000fbdbdf251100000008000600000010000800060001000000080004000900000008000600ffffff7f28b3645e700075bb8968773c08e122168ebdd944aca22e1b1be8290cd2424feb9a95ee545fc0f0ef8967904fa0093e874392bfdebf092ae0551a6cd4d79cfe3d43f3924237f295cff9dc6f123e25aedb8c110a312a467e8a3b23acbda383eab5492725a9f51052e1f396a3df862fbcde21cd9ff17324c077dadf80b9e82c72cb3189636b178be337fdbb8500"/201], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) 331.367927ms ago: executing program 2 (id=518): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)="0a609b", 0x3) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) io_uring_enter$auto(0x3, 0x1, 0xfffffaf0, 0x5, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x586, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x40000000029, 0x6, 0xfffffffffffffffe, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000000000)='(\x00', &(0x7f0000000040)='\x14\'\x00', &(0x7f0000000280)="5b0d9e7519417dedebde621abc9a4e162e2603067bca43500e7fd1d21559dde1631b0127557a46d29b64dddf81ac9946c3bf88f6cc34e485a942766e7195db59a8b80edc0c9ba5791b6e931acaba023ff3d269c4c696f19d09bd584191d2e9819429283bc3bc275804e6579d516629fcee826afec9fad076114960051a0a35645639c04f878bc646661371ce0a1803671931f70ab0f96c03f5b2c3270580d410976ae1dd3dd3834e82119fcf73552189cf577a5035667ccd9d64c98c9bf7174a80badf2050a6618be20df8cc59bb2e35c8b1e5d9340af897e126ed0eead5665cc67ab67158a572b5a8a4894fd26848e1f9976bdedf2fecbbdcf4b81a68f93d8220c725ef85f07015739f104678bceeddd37fdd34a2adb72fa0e72397371a9248067809d1465ca8bcc50ffbc215fe012224675643dadbc1ac737d9e6f380cdd9bea0b5efdea37a6842e5a11112eb79dd37ebd7b44a6b1b1e3860e66ebc79674edfbc7c1890777f3f4e9d3b24f3ded32ed4b0261817a2f5d62f5b1319b6427be49ebac0c48ff435723e5316059453e322b0b25e8cd7a77d4bd0819f218811ef20d7116045ec5c2cdedc041fa97d2f0882b3c3eee8ba3b5ec04df261a6c92f25b6cb4afefa79fbbe97e9522cc3f49a23e337930aa93b51bb55e719c883aa0ea700a9e1c60c921f25a8b0826294bf0c8e9c947aad28c19b33d2aaa0785e20f76cf0950b772cf70ec71f5a1dbc49d85d52cc6b46e04fcfc959470059ff5338bbd527c9b643340e5c61b754a269c015c608dd5b6741c543bd80526beb84e8d0a4e84e68bd04af7fb57ffef81bff53f85c84c70715e59d906cf4cabd3a2d63cc1925ef8e01d329585239e9cc2e829238615ada213fecd3d534bc80274baa5c7a91ace95084c29b6fbc102f8c6d391b348fd6e810973a2d87de3c900655ca0d1ee2098dbe41a02f56920f0f02c9b33bdd3835de5e0dbdacbf5b75fd6ab19828c6abc711d556479b247cb0ef1ea37c46cd2bcef49ee1faeb9a27031fbc8f527e6497f06946d3980311e7b611c72e26a9252a4518a3c962610c28df64f3dcb4e2ecbc4d9813328880f609c02bf3c49d6f83731009e60ca08a835edba0f596b6860949d20ad81948f55a35d21777efd6c4eeeb9f21b2d813e684add5efd9c383487d6c3bd534f6de575faad8eadca480721f653307d7df6af2927e812dce43ad95d38c24a6d37974edeca77e4bf4ae3e94ef8b0703277bd52d4423d533f84e680613d185eb31b1dcf1499fc088d116f7cbbc5ab3df3fd5f8f0391bd6d75756442cac02699598d67718d102368f85a766dce898bf41698605fa8a71b0376ff9287fa54487158ada164e243e9ab48aa5d68bf7a9ca9bc1fb6e6f4e1a52d03a21cd329939105dbf5fa68adfdf993172d284f6c257cab12ba5507faa8f2396a3565faecb144b2c3a141f5ebd28f7bb7903863211e53f015bf22b32bc54ca1e1e656b669eb929db54e4f72a7641f6c4f3125aab103d3d099dd2b27457158bb921306380d385fc391378e4b5f5aa5686624c583244fc08c04fe21f9fe2837d838b44f2a1798c65c8034f0c51f1698ddb4b8a9d75f336489fedc3c934a745ee7ea5f4016740b4b2c0c96abfe379a5eb39d6621e7dcc2cbed152738710bec9e22c64660fd870a4a91c8c447578b5b91acef346ba3c7920d960ab7e641775d5cce3b9a30b22e61e884d533caf5e5cc46b8c65f28b50d1001eb85567adfb82e0beb1f03502512da4932b109486de2b5e39df3d733d01b2702130e4e98d3e591c6faf873cdfa3e8cbd578f2dbc4b711a99e365066822ce6f0e2a929e7c0ceaa2326626d013c5cddd9071457a39d4fbf6d33d8b19aac38925dadc8bd5fc091517951b3445580cf43009673dd35e5d45c1d2742e747e998bb18aea00285e9e0ded50f4a63272f34ee92942c02d8731599b2af714828b4762489965bc4b3d99fb0dd0a7371f20096cfc53110a936c9237a896d666e8cc8e052efe675a8dd4134814f95b4fd59ba8be9f7f1f3d830dad6cb87a4cec0e4d81f3da3bc70fbe73717e736d6e91290ec8db8add7acda106c50bee411c191e847fabded11afc93869f38231f863cacdf89f3266fb506a2268e78b43799fc8f7f0bebbd173c3011984cff9f2358135819fe9041c05ba075c025e308f9bf546fe09c83ca81d4f0ef8d65f38c1e10e2f78d637716e067d734035f4fd34e7b108339d23f6a864d90fc612db5a023d7e0a8edd4571b2ab6d2863ea9060eabac485d94c43271db1c2193db580538fa3caa936f6a4acf634e8b411d49709d680885de959312a2d93e01e2e1b2f7a63c0cde6b39f433f4e54eb30cbee4fd1b7920d95ccad20c3fccedef36bab1038f6428ea6c20d9c765f28f9ee8d9346ded7d5f7f1458c0f77f2c841d5e7c0bd6a391b3003b39641aba36bcfc00849387175122263a016dfb4013dc570a3550396ad62c7c5935f88af70bdeb0a791bd3a96d6bcec5e94bc4bbe1385dd3f14317b17d6fedf5c8c0716354fdf01786824a7904c138d7efbe1909dd8cb1386b638823fd7345985220ffe6b4e5608bae472313944e4700aad9b74790166be5213bb8d5bbe6e7e60a94bad889c3856d86943e3983e17ae147908fb592e39046a59243acd08a3201657d351efc86a49ddde4c739f1b604312b63dda58faf6ed074d08eca3048ed898a36270a2131eb93bb6dca8cae4c826892ec3190ed17124af15d3fc9336ae653169bf0216a609c14d930073d604929d6805ab8a524ff2b8fd87e721bee22391f208a7a921c1ecb2a590d6a7009ba5368c839badb31ff308399980a057bf884147446d6a4f521e6fc39c6df9cf403d1448e83b26885e666c85badad233f225928806525bcbdd5008ebec80eaf563c20d2dde80e151fc5f9e74e9e69714fedd3d9b47d76b6e18a66d194bc127c45cf153dd04cdedd0854ae98e5a1c9551bf81914f94a0c1e32e0808e4e18b6fc4f5bbfdfe6c9409c4c5cd49ef2568e306f1526fc812094abbb4ceaec4903c2d348c5d1200b2db9dd3c4b95ad642d1d992b0fd58d0762e54bbc0d22af0669ddb3b1e1512116be3ccf7efa41b1b686c7dcca2c471135d85de44c4a3f762591be2a7407f0bfaf69b30de33c89d9ca699386d13ae260dd34f7beea0da33d546f78589c6670226851a4a825fc3ce9357877de30d79117080b7909202d2ffc61d969b197798e50c1951ac363d41542a759ffd5df82aa93421b0a01818fd4e45b928c85092713aeb48fed18850fbaf85f7c2247ca964fe4692f93a180df85f230770fee83625183e0943187f4a6fb0a36a852bfef0d84b89d68fc4f9ae36f27b4c94b36b0eacdf250be05ed5680c471c165ca246c3d518890583c959a4c645b113ccf92f1a7fd06baaa3a62286c75565fd137c0469e5e3350fb046eb29cc733e49740b1d772008056ceaa755217e253eabf4f99aa99d76bb5c186c6930467d845e4c05bce451d9ea1c58de0c7dc90d508794e8eb4b609663cd488bf9497da67be91a3953ce56c1dd4bada875e48ee280dd339b89189fffa689f6bc5ea119fe8570005261ab33023f339ac561032781159a1a29d2c8dcca4ecb1c685340fe8fe82ae87501ef9593afdfac02f00bd0fad52cdae7aa7324634292f21f937402a0405b9ec3bf21dff082e13fad590b1532f9a3a7c8bd71786c5dab73926a9dba324d1063546c3b042133c4fd18235f1abbac551ec8a591a034e57767ac3c2670f7349c01510609d002f70ae6d5c5b8423a2f98abe0f70d571a17431611bec8f4e1a02724d8d8f6bcc3e802fd80cc36135bce5bdec5cb9f086f9da62eced55e296206ca1bb9ee56a69be34f66dc31367935a2ed4253f60e5319ecf3661493db2c8d9e8cb4c874495e61483e6a1b4fb2a354e94dc2ace9512726370b9f6869480f7e491eb96eba9f2ab06a8956eeac02bd3467f1edcdf5261d4760c511de8904fb8adb317dc26952d4d6c1e9fcfb9b1cdd9b3681635689b016a367ff5b9ba3cb3ea641cdb164ad11754be95ddd757f564395f8c7d881d038324f703971d2af2b0bdc4f8f3fc13f56568486af58aad0acf1e4a8ec0dc04d97e53943e365163120ae5f74d41d6e5b16cb8b7de349f0fc38d6f6eef6c07dfa6a071695f044ffe2be186542a09693171d2695245b5b955c2e79974b265322c8b141459a78c7f62e02288ea7630e4ad3777e2d7b7d050436e2a54579626d617cc36e30a16619bf80f77c2b496ee7726d75debfc38f9a899b5b30918bb109b9315a2d9371f98555451c26e29d5d59e02409592c9322b2f489e76d4d2a3d1754175715e60d83f5c01ef37f4293b3f6aab146000763b8a31e5b52124b116f1a690dcae837a40a75f54418c2598551bab625df72f3ee14a8d07f31adbf8374693b7c4d111bd5e0193b179854c805f81a3a2d043b72830bfed2d6d7ad21776ab912891c20a450a217aceace3bd90f90620fb0e32b9419efe65521011a848b4fbbc7e27f7a0e1e6f03dd64ffd816518cb9809fda5a8af7d49d9e0af8f01109e96854049089834197eec5321660c6a7ae7abf5dcdd2750a9890ea5648bdd5e4c62bb3db74ac64a5e329412ba7d9d9e27bb4736b4cc6663a883bde78c332abc4f44fdf7fc490f602d9a159528f3cd1b8af89e2afee1e15966e7a518c5877f43e7c23247f2c79f6d3c1f08853b34a731745f705aabef2f836735f26f79828212fd506ecb80560ecfbcacd37f987e0b1d8c5388fb26b2b31760e25c4a8e86caca748fea4084c06a9fe8d7d11198faff7dd3de323daa7fd7ca52bcec63ed4cdbcb9f3c50f604a4c9c3794e988d7d1618852f42c23655ef3e28e4c9db3c8c86a725b72e7ebbfc6869293748b892160a75b523db369d958cb646bfbe58233a794d0de2a0e8ab9d22acbc369a64dc916d540a149aba7aa5b140f329a42be7124fa09b3b46fc857420715586fafc10b04a832aa013486caa7ff2948efd3267a019dc8d0a3f8afdd72635b567f871e9d9029744b5b8867fca659b5525d6ffd87cb2687f70cd15293f033b98d5d65a853b5e71f584cc6f79bfe59f474d8c6276af9f8c3d684a773c919ee945f4f33e01e73c471901747736296c4247b955368922a196b62e17e69eae0ff9c2bfb646be0cfcb0a0a002822ad617999cbb18207f887dcda35f591fb7aef8e0aff9aececb9bd166070af9d76566052b055dbb345dbea1c72f76c5e39ed4e9597ec0342e2cc8b21efc316290ccb31b974a73c450abbcf1f2bd0bb7830b7ea74a0448537fc1a88709ac9f9653c8ff444add6c23c7c2477374caa5a5b34c4caff64b24a462c8dadfe099916c41fab82d720053fc5d0c32589348165c9170645b51d994bcc38255218ef558a23978938fd5a2ff41d92178ea2335eb4af8cf7852a9a4c4023a113e891ce3672cc2f2065653e511e48bbf1118acbe58300a26b4862ffd89e1af1ce44d2db3e8af812c08f7f291c9a2eaba4511f8866dff6c738f38dc6fd1deea5f8cffcd21aecc32e5708f5950ba54cf0c458c409862d24a84e26584c5bbc39d5ba42fbf4202cfb3cb96de8c47e5fc1e385e2df4636769c567bb64d4d7a2213adcdbb9bf53830fc11a5197f0ba512c7eacb3937c837c1ba3158d1dbb801244d5e996bc6fc69b3df53d8b46719cb124b75d0e844298e8e08c587dc917c42c04b134d85ff8a41d77dc092b7ac8eb150fd0ff4f71f597c810283e631146b9490c9e7306b81db7135cfa26fd1a921197ecdffe0ba23f71a6315dc6ab304c1c3d641e7a8ecce43", 0x5, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x3}, 0x3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 76.622344ms ago: executing program 1 (id=519): mmap$auto(0x4, 0x7, 0x1000000df, 0xeb1, 0xffffffffffffffff, 0x200000009b500) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)="a11e1829fd03635a78677a8363092638915d6c000000000000000000", 0x454}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x6) r2 = gettid() r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec24\x00', 0x4080, 0x0) ioctl$auto_CEC_RECEIVE(r3, 0xc0386106, &(0x7f00000000c0)={0xffffffffffffffba, 0x4000000000000, 0x2, 0xbdfd, 0x400, 0x3, "39e03613486fad6c041e1293032cfb01", 0x7, 0x40, 0x80, 0x8, 0xc, 0x2, 0x9}) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b3e", 0xfdef) kill$auto(r2, 0x11) io_uring_setup$auto(0x59, &(0x7f0000001100)={0x7, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xa00], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x110001, 0x1, 0x1, 0x40, 0x76c5, 0x8, 0x100000005}}) 0s ago: executing program 0 (id=520): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 249 > 4 [ 75.085373][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.092431][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.100696][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.118372][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.672597][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 75.715731][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 75.726607][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 75.778203][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 75.973851][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.981736][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.989001][ T5824] bridge_slave_0: entered allmulticast mode [ 75.996264][ T5824] bridge_slave_0: entered promiscuous mode [ 76.010500][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.017723][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.025402][ T5822] bridge_slave_0: entered allmulticast mode [ 76.032528][ T5822] bridge_slave_0: entered promiscuous mode [ 76.051376][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.058758][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.066017][ T5824] bridge_slave_1: entered allmulticast mode [ 76.073325][ T5824] bridge_slave_1: entered promiscuous mode [ 76.090976][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.098123][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.105574][ T5822] bridge_slave_1: entered allmulticast mode [ 76.112618][ T5822] bridge_slave_1: entered promiscuous mode [ 76.120050][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.127187][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.134649][ T5825] bridge_slave_0: entered allmulticast mode [ 76.141777][ T5825] bridge_slave_0: entered promiscuous mode [ 76.178697][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.185966][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.193211][ T5825] bridge_slave_1: entered allmulticast mode [ 76.200471][ T5825] bridge_slave_1: entered promiscuous mode [ 76.216621][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.223890][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.231198][ T5823] bridge_slave_0: entered allmulticast mode [ 76.238406][ T5823] bridge_slave_0: entered promiscuous mode [ 76.268543][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.280933][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.290176][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.297298][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.305190][ T5823] bridge_slave_1: entered allmulticast mode [ 76.312391][ T5823] bridge_slave_1: entered promiscuous mode [ 76.330705][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.343128][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.394647][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.417404][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.439421][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.450595][ T5824] team0: Port device team_slave_0 added [ 76.458635][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.470155][ T5822] team0: Port device team_slave_0 added [ 76.487232][ T5824] team0: Port device team_slave_1 added [ 76.513275][ T5822] team0: Port device team_slave_1 added [ 76.565807][ T5823] team0: Port device team_slave_0 added [ 76.573483][ T5825] team0: Port device team_slave_0 added [ 76.580133][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.587104][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.613301][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.639702][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.646660][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.672714][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.685360][ T5823] team0: Port device team_slave_1 added [ 76.693021][ T5825] team0: Port device team_slave_1 added [ 76.712654][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.719658][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.745758][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.783373][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.790612][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.816659][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.851273][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858247][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.884530][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.916153][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.923822][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.950324][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.962480][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.969651][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.995608][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.007598][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.014809][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.040737][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.066821][ T5824] hsr_slave_0: entered promiscuous mode [ 77.073414][ T5824] hsr_slave_1: entered promiscuous mode [ 77.120549][ T5822] hsr_slave_0: entered promiscuous mode [ 77.127444][ T5822] hsr_slave_1: entered promiscuous mode [ 77.133802][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 77.139727][ T5822] Cannot create hsr debugfs directory [ 77.159682][ T5837] Bluetooth: hci3: command tx timeout [ 77.165655][ T5837] Bluetooth: hci2: command tx timeout [ 77.169071][ T51] Bluetooth: hci1: command tx timeout [ 77.171983][ T5143] Bluetooth: hci0: command tx timeout [ 77.210640][ T5825] hsr_slave_0: entered promiscuous mode [ 77.217127][ T5825] hsr_slave_1: entered promiscuous mode [ 77.223499][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 77.229382][ T5825] Cannot create hsr debugfs directory [ 77.295111][ T5823] hsr_slave_0: entered promiscuous mode [ 77.301690][ T5823] hsr_slave_1: entered promiscuous mode [ 77.307733][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 77.313581][ T5823] Cannot create hsr debugfs directory [ 77.727085][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.741404][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.752324][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.772361][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.826681][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.852579][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.862820][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.908655][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.962369][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.972482][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.999847][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.014479][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.088343][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.101550][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.116861][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.127179][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.196385][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.247854][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.294696][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.302075][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.313623][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.320751][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.366156][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.385171][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.428721][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.462474][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.469664][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.495539][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.502749][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.519185][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.531578][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.578007][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.585212][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.598342][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.605561][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.625972][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.686293][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.693495][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.737314][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.744579][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.994199][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.137067][ T5822] veth0_vlan: entered promiscuous mode [ 79.156838][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.206931][ T5822] veth1_vlan: entered promiscuous mode [ 79.248951][ T5143] Bluetooth: hci1: command tx timeout [ 79.249135][ T5837] Bluetooth: hci0: command tx timeout [ 79.254395][ T51] Bluetooth: hci2: command tx timeout [ 79.259899][ T5826] Bluetooth: hci3: command tx timeout [ 79.294680][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.329467][ T5822] veth0_macvtap: entered promiscuous mode [ 79.345563][ T5822] veth1_macvtap: entered promiscuous mode [ 79.380289][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.403784][ T5824] veth0_vlan: entered promiscuous mode [ 79.417663][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.442241][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.464112][ T5824] veth1_vlan: entered promiscuous mode [ 79.491397][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.502165][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.520965][ T5825] veth0_vlan: entered promiscuous mode [ 79.528409][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.537438][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.581480][ T5825] veth1_vlan: entered promiscuous mode [ 79.627141][ T5823] veth0_vlan: entered promiscuous mode [ 79.647428][ T5824] veth0_macvtap: entered promiscuous mode [ 79.674309][ T5824] veth1_macvtap: entered promiscuous mode [ 79.699228][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.708471][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.728230][ T5823] veth1_vlan: entered promiscuous mode [ 79.766343][ T5825] veth0_macvtap: entered promiscuous mode [ 79.780828][ T5825] veth1_macvtap: entered promiscuous mode [ 79.792609][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.800154][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.807927][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.833236][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.867076][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.875327][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.891421][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914399][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.931436][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.947307][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956843][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.979093][ T174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.988272][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.001069][ T5823] veth0_macvtap: entered promiscuous mode [ 80.017056][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.037552][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.074769][ T5823] veth1_macvtap: entered promiscuous mode [ 80.165442][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.197593][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.270585][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.282823][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.311937][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.335748][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.352076][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.362801][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.380203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.388858][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.466707][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.485830][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.494424][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.502944][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.641738][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.672755][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.744437][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.769119][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.783809][ T5916] Zero length message leads to an empty skb [ 81.323779][ T5837] Bluetooth: hci1: command tx timeout [ 81.329326][ T5826] Bluetooth: hci2: command tx timeout [ 81.329357][ T51] Bluetooth: hci3: command tx timeout [ 81.341069][ T5143] Bluetooth: hci0: command tx timeout [ 81.597394][ T5933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 82.126465][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 82.132982][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 82.139638][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 82.146207][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 82.252599][ T5936] process 'syz.2.7' launched './file0' with NULL argv: empty string added [ 82.647231][ T5941] nvme_fcloop: unknown parameter or missing value '7="­ÿù;¤°&Lë=j³"Yq'R"' [ 82.902733][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c328800: rx timeout, send abort [ 83.140636][ T5956] netlink: 'syz.2.12': attribute type 11 has an invalid length. [ 83.148521][ T5956] netlink: 'syz.2.12': attribute type 11 has an invalid length. [ 83.398895][ T51] Bluetooth: hci3: command tx timeout [ 83.404395][ T51] Bluetooth: hci0: command tx timeout [ 83.410280][ T5143] Bluetooth: hci1: command tx timeout [ 83.410303][ T5837] Bluetooth: hci2: command tx timeout [ 83.415709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c328800: abort rx timeout. Force session deactivation [ 83.820679][ T5961] ip_vti0: entered allmulticast mode [ 84.067546][ T5973] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[5973] [ 84.273585][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.971179][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 85.998977][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.014872][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.037032][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.064196][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.096766][ T6010] netlink: 'syz.3.23': attribute type 11 has an invalid length. [ 86.117425][ T6010] netlink: 'syz.3.23': attribute type 11 has an invalid length. [ 86.139185][ T6010] netlink: 'syz.3.23': attribute type 11 has an invalid length. [ 86.843263][ T24] cfg80211: failed to load regulatory.db [ 88.567222][ T5823] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 88.723735][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 88.723773][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.723797][ T5823] Call Trace: [ 88.723806][ T5823] [ 88.723820][ T5823] dump_stack_lvl+0x100/0x190 [ 88.723865][ T5823] dump_header+0xfb/0x606 [ 88.723896][ T5823] oom_kill_process.cold+0xd/0x330 [ 88.723929][ T5823] out_of_memory+0x340/0x14f0 [ 88.723978][ T5823] ? __pfx_out_of_memory+0x10/0x10 [ 88.724030][ T5823] mem_cgroup_out_of_memory+0xc6/0x130 [ 88.724069][ T5823] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 88.724112][ T5823] ? find_held_lock+0x2b/0x80 [ 88.724147][ T5823] ? do_raw_spin_unlock+0x145/0x1e0 [ 88.724189][ T5823] ? _raw_spin_unlock+0x28/0x50 [ 88.724234][ T5823] try_charge_memcg+0x652/0xc90 [ 88.724273][ T5823] ? __pfx_try_charge_memcg+0x10/0x10 [ 88.724312][ T5823] ? find_held_lock+0x2b/0x80 [ 88.724337][ T5823] ? rcu_read_unlock+0x17/0x60 [ 88.724368][ T5823] ? rcu_read_unlock+0x17/0x60 [ 88.724403][ T5823] charge_memcg+0xa6/0x280 [ 88.724434][ T5823] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 88.724474][ T5823] __swap_cache_prepare_and_add+0x817/0x9f0 [ 88.724517][ T5823] ? alloc_pages_mpol+0x25a/0x550 [ 88.724549][ T5823] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.724581][ T5823] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 88.724620][ T5823] ? __pfx_swap_entry_swapped+0x10/0x10 [ 88.724661][ T5823] swap_cache_alloc_folio+0x1cb/0x300 [ 88.724703][ T5823] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 88.724744][ T5823] ? do_raw_spin_unlock+0x145/0x1e0 [ 88.724785][ T5823] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.724833][ T5823] swap_cluster_readahead+0x411/0x770 [ 88.724872][ T5823] ? __pfx_debug_object_activate+0x10/0x10 [ 88.724911][ T5823] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 88.724975][ T5823] ? get_vma_policy+0x23d/0x3b0 [ 88.725011][ T5823] swapin_readahead+0x160/0x12c0 [ 88.725063][ T5823] ? __pfx_swapin_readahead+0x10/0x10 [ 88.725108][ T5823] ? find_held_lock+0x2b/0x80 [ 88.725133][ T5823] ? swap_table_get+0x103/0x2c0 [ 88.725169][ T5823] ? swap_table_get+0x103/0x2c0 [ 88.725212][ T5823] ? swap_table_get+0x10d/0x2c0 [ 88.725249][ T5823] ? swap_cache_get_folio+0x1ae/0x600 [ 88.725290][ T5823] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 88.725326][ T5823] ? __pfx_get_swap_device+0x10/0x10 [ 88.725363][ T5823] ? do_swap_page+0xb2e/0x6900 [ 88.725399][ T5823] do_swap_page+0xb2e/0x6900 [ 88.725456][ T5823] ? __pfx_do_swap_page+0x10/0x10 [ 88.725495][ T5823] ? __free_object+0x2a8/0x400 [ 88.725520][ T5823] ? lockdep_hardirqs_on+0x78/0x100 [ 88.725552][ T5823] ? rcu_is_watching+0x12/0xc0 [ 88.725594][ T5823] ? __pte_offset_map+0x179/0x310 [ 88.725628][ T5823] __handle_mm_fault+0x18c7/0x2b60 [ 88.725674][ T5823] ? reacquire_held_locks+0xce/0x1e0 [ 88.725711][ T5823] ? __pfx___handle_mm_fault+0x10/0x10 [ 88.725755][ T5823] ? lock_vma_under_rcu+0x17c/0x590 [ 88.725815][ T5823] handle_mm_fault+0x36d/0xa20 [ 88.725860][ T5823] do_user_addr_fault+0x5a3/0x12f0 [ 88.725894][ T5823] exc_page_fault+0x6f/0xd0 [ 88.725922][ T5823] asm_exc_page_fault+0x26/0x30 [ 88.725949][ T5823] RIP: 0033:0x7fc58415d04e [ 88.725975][ T5823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.726001][ T5823] RSP: 002b:00007ffffe067b88 EFLAGS: 00010246 [ 88.726023][ T5823] RAX: 0000000000000000 RBX: 0000555569ba7500 RCX: 00007fc58415d04e [ 88.726038][ T5823] RDX: 00007ffffe067be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.726052][ T5823] RBP: 00007ffffe067c4c R08: 0000000000000000 R09: 0000000000000000 [ 88.726067][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 88.726088][ T5823] R13: 00000000000927c0 R14: 00000000000158a5 R15: 00007ffffe067ca0 [ 88.726121][ T5823] [ 88.726131][ T5823] memory: usage 307200kB, limit 307200kB, failcnt 310 [ 89.208941][ T5823] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 89.251052][ T5823] kmem: usage 306920kB, limit 9007199254740988kB, failcnt 0 [ 89.283317][ T5823] Memory cgroup stats for /syz3: [ 89.283749][ T5823] cache 0 [ 89.350612][ T5823] rss 0 [ 89.368322][ T5823] rss_huge 0 [ 89.389476][ T5823] shmem 0 [ 89.392515][ T5823] mapped_file 0 [ 89.395987][ T5823] dirty 0 [ 89.399847][ T6045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.438888][ T5823] writeback 0 [ 89.442222][ T5823] workingset_refault_anon 398 [ 89.446911][ T5823] workingset_refault_file 0 [ 89.519121][ T5823] swap 204800 [ 89.574572][ T5823] swapcached 2359296 [ 89.578516][ T5823] pgpgin 19661 [ 89.619783][ T5823] pgpgout 19653 [ 89.693944][ T5823] pgfault 20512 [ 89.697462][ T5823] pgmajfault 36 [ 89.738926][ T5823] inactive_anon 28672 [ 89.748849][ T5823] active_anon 0 [ 89.788941][ T5823] inactive_file 0 [ 89.792727][ T5823] active_file 0 [ 89.796200][ T5823] unevictable 0 [ 89.888879][ T5823] hierarchical_memory_limit 314572800 [ 89.939900][ T5823] hierarchical_memsw_limit 9223372036854771712 [ 89.946109][ T5823] total_cache 0 [ 89.988882][ T5823] total_rss 0 [ 89.992285][ T5823] total_rss_huge 0 [ 90.044238][ T5823] total_shmem 0 [ 90.047747][ T5823] total_mapped_file 0 [ 90.118059][ T5823] total_dirty 0 [ 90.138092][ T5823] total_writeback 0 [ 90.148473][ T5823] total_workingset_refault_anon 398 [ 90.158921][ T5823] total_workingset_refault_file 0 [ 90.174546][ T5823] total_swap 204800 [ 90.188895][ T5823] total_swapcached 2359296 [ 90.199187][ T5823] total_pgpgin 19661 [ 90.203133][ T5823] total_pgpgout 19653 [ 90.229902][ T5823] total_pgfault 20512 [ 90.239549][ T5823] total_pgmajfault 36 [ 90.288865][ T5823] total_inactive_anon 28672 [ 90.293470][ T5823] total_active_anon 0 [ 90.297460][ T5823] total_inactive_file 0 [ 90.313686][ T5823] total_active_file 0 [ 90.330583][ T5823] total_unevictable 0 [ 90.353795][ T5823] anon_cost 0 [ 90.360860][ T5823] file_cost 0 [ 90.374505][ T5823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.28,pid=6033,uid=0 [ 90.452711][ T5823] Memory cgroup out of memory: OOM victim 6033 (syz.3.28) is already exiting. Skip killing the task [ 91.414672][ T6062] FAULT_INJECTION: forcing a failure. [ 91.414672][ T6062] name failslab, interval 1, probability 0, space 0, times 1 [ 91.414727][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 91.414758][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.414773][ T6062] Call Trace: [ 91.414782][ T6062] [ 91.414792][ T6062] dump_stack_lvl+0x100/0x190 [ 91.414839][ T6062] should_fail_ex.cold+0x5/0xa [ 91.414872][ T6062] should_failslab+0xc2/0x120 [ 91.414905][ T6062] __kmalloc_cache_noprof+0x7a/0x6f0 [ 91.414946][ T6062] ? __debugfs_file_get+0x2ac/0x860 [ 91.414997][ T6062] __debugfs_file_get+0x2ac/0x860 [ 91.415048][ T6062] ? __pfx___debugfs_file_get+0x10/0x10 [ 91.415094][ T6062] ? __pfx_apparmor_file_open+0x10/0x10 [ 91.415125][ T6062] ? path_get+0x61/0x80 [ 91.415163][ T6062] full_proxy_open_regular+0x4f/0x370 [ 91.415196][ T6062] do_dentry_open+0x6d8/0x1660 [ 91.415225][ T6062] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 91.415259][ T6062] vfs_open+0x82/0x3f0 [ 91.415297][ T6062] path_openat+0x208c/0x31a0 [ 91.415336][ T6062] ? __pfx_path_openat+0x10/0x10 [ 91.415378][ T6062] do_file_open+0x20e/0x430 [ 91.415410][ T6062] ? __pfx_do_file_open+0x10/0x10 [ 91.415464][ T6062] ? alloc_fd+0x476/0x790 [ 91.415496][ T6062] ? do_getname+0x191/0x390 [ 91.415540][ T6062] do_sys_openat2+0x10d/0x1e0 [ 91.415580][ T6062] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.415620][ T6062] ? do_raw_spin_lock+0x128/0x260 [ 91.415673][ T6062] __x64_sys_openat+0x12d/0x210 [ 91.415714][ T6062] ? __pfx___x64_sys_openat+0x10/0x10 [ 91.415766][ T6062] do_syscall_64+0x106/0xf80 [ 91.415795][ T6062] ? clear_bhb_loop+0x40/0x90 [ 91.415832][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.415861][ T6062] RIP: 0033:0x7f7ffa79c819 [ 91.415885][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.415912][ T6062] RSP: 002b:00007f7ff85b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.415939][ T6062] RAX: ffffffffffffffda RBX: 00007f7ffaa16270 RCX: 00007f7ffa79c819 [ 91.415958][ T6062] RDX: 0000000000000880 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.415981][ T6062] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 91.415999][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.416022][ T6062] R13: 00007f7ffaa16308 R14: 00007f7ffaa16270 R15: 00007ffc111caca8 [ 91.416060][ T6062] [ 91.424426][ T6075] netlink: 334 bytes leftover after parsing attributes in process `syz.2.35'. [ 91.567329][ T6061] mmap: syz.3.32 (6061) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.942966][ T6075] Invalid ELF header magic: != ELF [ 95.779778][ T5826] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 96.121310][ T6147] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.989635][ T6161] vivid-007: ================= START STATUS ================= [ 97.012916][ T6161] vivid-007: Generate PTS: true [ 97.031117][ T6161] vivid-007: Generate SCR: true [ 97.036096][ T6161] tpg source WxH: 320x240 (Y'CbCr) [ 97.043870][ T6161] tpg field: 1 [ 97.047342][ T6161] tpg crop: (0,0)/320x240 [ 97.052119][ T6161] tpg compose: (0,0)/320x240 [ 97.056800][ T6161] tpg colorspace: 8 [ 97.064643][ T6161] tpg transfer function: 0/0 [ 97.082769][ T6161] tpg Y'CbCr encoding: 0/0 [ 97.087334][ T6161] tpg quantization: 0/0 [ 97.219994][ T6161] tpg RGB range: 0/2 [ 97.249124][ T6161] vivid-007: ================== END STATUS ================== [ 98.626077][ T6185] syz.1.57 uses obsolete (PF_INET,SOCK_PACKET) [ 99.490775][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.532803][ T6185] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.656682][ T6185] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.758269][ T6185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.780703][ T6185] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.845271][ T6185] FAULT_INJECTION: forcing a failure. [ 99.845271][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 99.889528][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(full) [ 99.889562][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.889579][ T6185] Call Trace: [ 99.889588][ T6185] [ 99.889598][ T6185] dump_stack_lvl+0x100/0x190 [ 99.889626][ T6185] should_fail_ex.cold+0x5/0xa [ 99.889645][ T6185] ? kobject_get_path+0xcf/0x2c0 [ 99.889661][ T6185] should_failslab+0xc2/0x120 [ 99.889678][ T6185] __kmalloc_noprof+0xe0/0x850 [ 99.889707][ T6185] kobject_get_path+0xcf/0x2c0 [ 99.889729][ T6185] kobject_uevent_env+0x287/0x18b0 [ 99.889752][ T6185] ? bus_to_subsys+0x114/0x150 [ 99.889777][ T6185] device_del+0x605/0x9b0 [ 99.889795][ T6185] ? __pfx_device_del+0x10/0x10 [ 99.889811][ T6185] ? __pfx_device_find_child+0x10/0x10 [ 99.889835][ T6185] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.889857][ T6185] device_unregister+0x1d/0xe0 [ 99.889873][ T6185] hci_conn_del_sysfs+0xb9/0x1a0 [ 99.889890][ T6185] hci_conn_del+0x506/0x1180 [ 99.889908][ T6185] hci_abort_conn_sync+0x7d9/0xb20 [ 99.889927][ T6185] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 99.889947][ T6185] ? find_held_lock+0x2b/0x80 [ 99.889982][ T6185] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 99.890002][ T6185] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 99.890024][ T6185] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 99.890045][ T6185] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 99.890066][ T6185] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 99.890087][ T6185] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 99.890108][ T6185] hci_suspend_sync+0x8b7/0xa70 [ 99.890128][ T6185] ? __pfx_hci_suspend_sync+0x10/0x10 [ 99.890147][ T6185] ? mgmt_pending_find+0x13e/0x1a0 [ 99.890173][ T6185] hci_suspend_dev+0x31d/0x540 [ 99.890194][ T6185] ? __pfx_hci_suspend_dev+0x10/0x10 [ 99.890217][ T6185] ? kobject_get+0xbb/0x150 [ 99.890232][ T6185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.890249][ T6185] hci_suspend_notifier+0x21e/0x330 [ 99.890274][ T6185] notifier_call_chain+0x99/0x420 [ 99.890297][ T6185] blocking_notifier_call_chain_robust+0xc8/0x160 [ 99.890319][ T6185] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 99.890353][ T6185] pm_notifier_call_chain_robust+0x27/0x60 [ 99.890386][ T6185] snapshot_open+0x189/0x2a0 [ 99.890404][ T6185] ? __pfx_snapshot_open+0x10/0x10 [ 99.890423][ T6185] misc_open+0x26d/0x450 [ 99.890442][ T6185] ? __pfx_misc_open+0x10/0x10 [ 99.890460][ T6185] chrdev_open+0x234/0x6a0 [ 99.890477][ T6185] ? __pfx_chrdev_open+0x10/0x10 [ 99.890494][ T6185] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 99.890515][ T6185] do_dentry_open+0x6d8/0x1660 [ 99.890530][ T6185] ? __pfx_chrdev_open+0x10/0x10 [ 99.890555][ T6185] vfs_open+0x82/0x3f0 [ 99.890577][ T6185] path_openat+0x208c/0x31a0 [ 99.890601][ T6185] ? __pfx_path_openat+0x10/0x10 [ 99.890624][ T6185] do_file_open+0x20e/0x430 [ 99.890646][ T6185] ? __pfx_do_file_open+0x10/0x10 [ 99.890677][ T6185] ? alloc_fd+0x476/0x790 [ 99.890695][ T6185] ? do_getname+0x191/0x390 [ 99.890715][ T6185] do_sys_openat2+0x10d/0x1e0 [ 99.890735][ T6185] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.890757][ T6185] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 99.890785][ T6185] __x64_sys_openat+0x12d/0x210 [ 99.890809][ T6185] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.890837][ T6185] do_syscall_64+0x106/0xf80 [ 99.890852][ T6185] ? clear_bhb_loop+0x40/0x90 [ 99.890870][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.890885][ T6185] RIP: 0033:0x7f7ffa79c819 [ 99.890899][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.890913][ T6185] RSP: 002b:00007f7ffb589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.890927][ T6185] RAX: ffffffffffffffda RBX: 00007f7ffaa15fa0 RCX: 00007f7ffa79c819 [ 99.890937][ T6185] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 99.890946][ T6185] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 99.890955][ T6185] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 99.890970][ T6185] R13: 00007f7ffaa16038 R14: 00007f7ffaa15fa0 R15: 00007ffc111caca8 [ 99.890991][ T6185] [ 99.894082][ T6185] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.400296][ T6185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.406342][ T6185] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.453272][ T6185] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.486809][ T6185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.493548][ T6185] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.502923][ T6185] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.545090][ T30] audit: type=1800 audit(1775530407.234:2): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.60" name="sr0" dev="devtmpfs" ino=2794 res=0 errno=0 [ 100.847871][ T6212] netlink: 4394 bytes leftover after parsing attributes in process `syz.2.62'. [ 101.000218][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.027437][ T6215] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.799965][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.450665][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.521574][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.098195][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.635131][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 103.685664][ T6250] FAULT_INJECTION: forcing a failure. [ 103.685664][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 103.733381][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 103.733417][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.733434][ T6250] Call Trace: [ 103.733443][ T6250] [ 103.733453][ T6250] dump_stack_lvl+0x100/0x190 [ 103.733510][ T6250] should_fail_ex.cold+0x5/0xa [ 103.733544][ T6250] should_failslab+0xc2/0x120 [ 103.733575][ T6250] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 103.733620][ T6250] ? __alloc_skb+0x140/0x710 [ 103.733668][ T6250] __alloc_skb+0x140/0x710 [ 103.733707][ T6250] ? __alloc_skb+0x5b7/0x710 [ 103.733744][ T6250] ? __pfx___alloc_skb+0x10/0x10 [ 103.733783][ T6250] ? genl_rcv_msg+0x4be/0x800 [ 103.733825][ T6250] netlink_ack+0x117/0xb80 [ 103.733867][ T6250] netlink_rcv_skb+0x333/0x420 [ 103.733897][ T6250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.733933][ T6250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.733978][ T6250] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.734013][ T6250] genl_rcv+0x28/0x40 [ 103.734042][ T6250] netlink_unicast+0x5aa/0x870 [ 103.734079][ T6250] ? __pfx_netlink_unicast+0x10/0x10 [ 103.734107][ T6250] ? __pfx___might_resched+0x10/0x10 [ 103.734144][ T6250] ? __lock_acquire+0x4a5/0x2630 [ 103.734184][ T6250] netlink_sendmsg+0x8b0/0xda0 [ 103.734216][ T6250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.734239][ T6250] ? __import_iovec+0x1d2/0x640 [ 103.734276][ T6250] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 103.734311][ T6250] ____sys_sendmsg+0x9e1/0xb70 [ 103.734343][ T6250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.734376][ T6250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.734428][ T6250] ___sys_sendmsg+0x190/0x1e0 [ 103.734473][ T6250] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.734550][ T6250] __sys_sendmsg+0x170/0x220 [ 103.734579][ T6250] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.734631][ T6250] do_syscall_64+0x106/0xf80 [ 103.734659][ T6250] ? clear_bhb_loop+0x40/0x90 [ 103.734693][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.734721][ T6250] RIP: 0033:0x7f733019c819 [ 103.734745][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.734770][ T6250] RSP: 002b:00007f732e3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.734796][ T6250] RAX: ffffffffffffffda RBX: 00007f7330415fa0 RCX: 00007f733019c819 [ 103.734814][ T6250] RDX: 0000000004008884 RSI: 0000200000000e80 RDI: 0000000000000003 [ 103.734830][ T6250] RBP: 00007f732e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.734846][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.734862][ T6250] R13: 00007f7330416038 R14: 00007f7330415fa0 R15: 00007ffe037e8a98 [ 103.734898][ T6250] [ 104.008137][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.519463][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.598884][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.158895][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.462903][ T6279] netlink: 4394 bytes leftover after parsing attributes in process `syz.3.78'. [ 106.040385][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.599453][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.699381][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.887294][ T6300] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 106.896595][ T6300] netlink: 322 bytes leftover after parsing attributes in process `syz.0.88'. [ 107.201511][ T6300] random: crng reseeded on system resumption [ 107.224670][ T6306] FAULT_INJECTION: forcing a failure. [ 107.224670][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 107.244869][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 107.244904][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.244919][ T6306] Call Trace: [ 107.244927][ T6306] [ 107.244937][ T6306] dump_stack_lvl+0x100/0x190 [ 107.244982][ T6306] should_fail_ex.cold+0x5/0xa [ 107.245000][ T6306] should_failslab+0xc2/0x120 [ 107.245017][ T6306] __kmalloc_cache_noprof+0x7a/0x6f0 [ 107.245037][ T6306] ? hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 107.245056][ T6306] hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 107.245069][ T6306] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 107.245089][ T6306] mmap_action_complete+0x231/0x400 [ 107.245108][ T6306] __mmap_region+0xd16/0x29e0 [ 107.245135][ T6306] ? __pfx___mmap_region+0x10/0x10 [ 107.245162][ T6306] ? kasan_quarantine_put+0x104/0x240 [ 107.245190][ T6306] ? find_held_lock+0x2b/0x80 [ 107.245214][ T6306] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.245239][ T6306] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 107.245257][ T6306] ? process_measurement+0x1f4/0x2350 [ 107.245298][ T6306] ? rcu_is_watching+0x12/0xc0 [ 107.245321][ T6306] ? cap_capable+0x107/0x460 [ 107.245339][ T6306] mmap_region+0x30a/0x3e0 [ 107.245365][ T6306] do_mmap+0xc63/0x12f0 [ 107.245386][ T6306] ? __pfx_do_mmap+0x10/0x10 [ 107.245403][ T6306] ? __pfx_down_write_killable+0x10/0x10 [ 107.245425][ T6306] vm_mmap_pgoff+0x29e/0x470 [ 107.245446][ T6306] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.245461][ T6306] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 107.245482][ T6306] ? hugetlbfs_get_inode+0x36e/0x750 [ 107.245497][ T6306] ? __fget_files+0x215/0x3d0 [ 107.245517][ T6306] ksys_mmap_pgoff+0x273/0x650 [ 107.245536][ T6306] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 107.245551][ T6306] ? fput+0x79/0x100 [ 107.245568][ T6306] ? ksys_write+0x1ac/0x250 [ 107.245587][ T6306] ? __pfx_ksys_write+0x10/0x10 [ 107.245605][ T6306] __x64_sys_mmap+0x125/0x190 [ 107.245630][ T6306] do_syscall_64+0x106/0xf80 [ 107.245644][ T6306] ? clear_bhb_loop+0x40/0x90 [ 107.245662][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.245677][ T6306] RIP: 0033:0x7fc58419c819 [ 107.245690][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.245703][ T6306] RSP: 002b:00007fc585004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.245717][ T6306] RAX: ffffffffffffffda RBX: 00007fc584416090 RCX: 00007fc58419c819 [ 107.245727][ T6306] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 107.245735][ T6306] RBP: 00007fc585004090 R08: 0000000000000401 R09: 0000300000000000 [ 107.245744][ T6306] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 107.245752][ T6306] R13: 00007fc584416128 R14: 00007fc584416090 R15: 00007ffffe0678a8 [ 107.245774][ T6306] [ 107.245809][ T6306] HugeTLB: unable to allocate vma specific lock [ 108.037834][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 108.059509][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.066943][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.083915][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.092811][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.527735][ T6334] vivid-007: ================= START STATUS ================= [ 108.535681][ T6334] vivid-007: Generate PTS: true [ 108.541599][ T6334] vivid-007: Generate SCR: true [ 108.546870][ T6334] tpg source WxH: 320x240 (Y'CbCr) [ 108.555583][ T6334] tpg field: 1 [ 108.560389][ T6334] tpg crop: (0,0)/320x240 [ 108.564758][ T6334] tpg compose: (0,0)/320x240 [ 108.570193][ T6334] tpg colorspace: 8 [ 108.574104][ T6334] tpg transfer function: 0/0 [ 108.579211][ T6334] tpg Y'CbCr encoding: 0/0 [ 108.585849][ T6334] tpg quantization: 0/0 [ 108.590479][ T6334] tpg RGB range: 0/2 [ 108.594557][ T6334] vivid-007: ================== END STATUS ================== [ 108.896148][ T30] audit: type=1800 audit(1775530415.544:3): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="sr0" dev="devtmpfs" ino=2794 res=0 errno=0 [ 109.292943][ T6338] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 109.295012][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 109.308887][ T6338] netlink: 322 bytes leftover after parsing attributes in process `syz.2.93'. [ 109.574568][ T6355] netlink: 504 bytes leftover after parsing attributes in process `syz.3.98'. [ 109.708753][ T6351] random: crng reseeded on system resumption [ 109.820030][ T6362] FAULT_INJECTION: forcing a failure. [ 109.820030][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.880225][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 109.880263][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.880277][ T6362] Call Trace: [ 109.880285][ T6362] [ 109.880294][ T6362] dump_stack_lvl+0x100/0x190 [ 109.880338][ T6362] should_fail_ex.cold+0x5/0xa [ 109.880369][ T6362] _copy_to_user+0x32/0xd0 [ 109.880405][ T6362] rng_dev_read+0x223/0x910 [ 109.880434][ T6362] ? __pfx_virtio_read+0x10/0x10 [ 109.880465][ T6362] ? __pfx_rng_dev_read+0x10/0x10 [ 109.880497][ T6362] ? bpf_lsm_file_permission+0x9/0x10 [ 109.880522][ T6362] ? security_file_permission+0x76/0x210 [ 109.880556][ T6362] ? rw_verify_area+0xce/0x6d0 [ 109.880592][ T6362] ? __pfx_rng_dev_read+0x10/0x10 [ 109.880620][ T6362] vfs_read+0x1e4/0xb30 [ 109.880650][ T6362] ? __pfx_vfs_read+0x10/0x10 [ 109.880671][ T6362] ? find_held_lock+0x2b/0x80 [ 109.880695][ T6362] ? __fget_files+0x215/0x3d0 [ 109.880721][ T6362] ? __fget_files+0x215/0x3d0 [ 109.880752][ T6362] ? __fget_files+0x21f/0x3d0 [ 109.880786][ T6362] ksys_read+0x12a/0x250 [ 109.880810][ T6362] ? __pfx_ksys_read+0x10/0x10 [ 109.880851][ T6362] do_syscall_64+0x106/0xf80 [ 109.880877][ T6362] ? clear_bhb_loop+0x40/0x90 [ 109.880908][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.880934][ T6362] RIP: 0033:0x7f709ff9c819 [ 109.880955][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.880979][ T6362] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.881002][ T6362] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 109.881019][ T6362] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000003 [ 109.881034][ T6362] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 109.881048][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.881063][ T6362] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 109.881097][ T6362] [ 110.991263][ T6391] program syz.0.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.085503][ T6391] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.741007][ T6397] zswap: compressor not available [ 112.492776][ T6413] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 112.508913][ T6413] netlink: 322 bytes leftover after parsing attributes in process `syz.3.112'. [ 113.262845][ T6447] binder: 6446:6447 ioctl 400c620e 0 returned -22 [ 113.373480][ T6454] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 113.409115][ T6453] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 113.509648][ T6458] FAULT_INJECTION: forcing a failure. [ 113.509648][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 113.509722][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 113.509753][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.509768][ T6458] Call Trace: [ 113.509776][ T6458] [ 113.509785][ T6458] dump_stack_lvl+0x100/0x190 [ 113.509832][ T6458] should_fail_ex.cold+0x5/0xa [ 113.509866][ T6458] should_failslab+0xc2/0x120 [ 113.509896][ T6458] __kmalloc_cache_noprof+0x7a/0x6f0 [ 113.509933][ T6458] ? open_substream+0xec/0x9e0 [ 113.509980][ T6458] open_substream+0xec/0x9e0 [ 113.510011][ T6458] ? lockdep_hardirqs_on+0x78/0x100 [ 113.510043][ T6458] rawmidi_open_priv+0x524/0x6f0 [ 113.510089][ T6458] snd_rawmidi_open+0x4c9/0xba0 [ 113.510136][ T6458] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 113.510176][ T6458] ? __pfx_default_wake_function+0x10/0x10 [ 113.510202][ T6458] ? soundcore_open+0x231/0x5a0 [ 113.510229][ T6458] ? soundcore_open+0x231/0x5a0 [ 113.510261][ T6458] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 113.510304][ T6458] soundcore_open+0x2e3/0x5a0 [ 113.510337][ T6458] ? __pfx_soundcore_open+0x10/0x10 [ 113.510370][ T6458] chrdev_open+0x234/0x6a0 [ 113.510398][ T6458] ? __pfx_apparmor_file_open+0x10/0x10 [ 113.510429][ T6458] ? __pfx_chrdev_open+0x10/0x10 [ 113.510467][ T6458] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 113.510506][ T6458] do_dentry_open+0x6d8/0x1660 [ 113.510535][ T6458] ? __pfx_chrdev_open+0x10/0x10 [ 113.510573][ T6458] vfs_open+0x82/0x3f0 [ 113.510612][ T6458] path_openat+0x208c/0x31a0 [ 113.510656][ T6458] ? __pfx_path_openat+0x10/0x10 [ 113.510701][ T6458] do_file_open+0x20e/0x430 [ 113.510735][ T6458] ? __pfx_do_file_open+0x10/0x10 [ 113.510794][ T6458] ? alloc_fd+0x476/0x790 [ 113.510825][ T6458] ? do_getname+0x191/0x390 [ 113.510863][ T6458] do_sys_openat2+0x10d/0x1e0 [ 113.510896][ T6458] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.510933][ T6458] ? __fget_files+0x21f/0x3d0 [ 113.510965][ T6458] __x64_sys_openat+0x12d/0x210 [ 113.511003][ T6458] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.511053][ T6458] do_syscall_64+0x106/0xf80 [ 113.511080][ T6458] ? clear_bhb_loop+0x40/0x90 [ 113.511114][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.511138][ T6458] RIP: 0033:0x7fc58419c819 [ 113.511159][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.511181][ T6458] RSP: 002b:00007fc585025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.511205][ T6458] RAX: ffffffffffffffda RBX: 00007fc584415fa0 RCX: 00007fc58419c819 [ 113.511220][ T6458] RDX: 0000000000002000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.511235][ T6458] RBP: 00007fc584232c91 R08: 0000000000000000 R09: 0000000000000000 [ 113.511249][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.511263][ T6458] R13: 00007fc584416038 R14: 00007fc584415fa0 R15: 00007ffffe0678a8 [ 113.511299][ T6458] [ 113.540295][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 113.543867][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.684500][ T6459] bridge_slave_1 (unregistering): left allmulticast mode [ 113.684534][ T6459] bridge_slave_1 (unregistering): left promiscuous mode [ 113.685977][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.783372][ T6474] vivid-007: ================= START STATUS ================= [ 113.783409][ T6474] vivid-007: Generate PTS: true [ 113.783446][ T6474] vivid-007: Generate SCR: true [ 113.783476][ T6474] tpg source WxH: 320x240 (Y'CbCr) [ 113.783494][ T6474] tpg field: 1 [ 113.783504][ T6474] tpg crop: (0,0)/320x240 [ 113.783522][ T6474] tpg compose: (0,0)/320x240 [ 113.783540][ T6474] tpg colorspace: 8 [ 113.783551][ T6474] tpg transfer function: 0/0 [ 113.783565][ T6474] tpg Y'CbCr encoding: 0/0 [ 113.783578][ T6474] tpg quantization: 0/0 [ 113.783593][ T6474] tpg RGB range: 0/2 [ 113.783605][ T6474] vivid-007: ================== END STATUS ================== [ 114.026147][ T6484] capability: warning: `syz.3.131' uses 32-bit capabilities (legacy support in use) [ 114.154637][ T6490] FAULT_INJECTION: forcing a failure. [ 114.154637][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 114.265819][ T6494] vivid-007: ================= START STATUS ================= [ 114.288696][ T6492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.298344][ T6494] vivid-007: Generate PTS: [ 114.319314][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 114.319353][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.319369][ T6490] Call Trace: [ 114.319377][ T6490] [ 114.319387][ T6490] dump_stack_lvl+0x100/0x190 [ 114.319434][ T6490] should_fail_ex.cold+0x5/0xa [ 114.319467][ T6490] ? tomoyo_realpath_from_path+0xb6/0x690 [ 114.319508][ T6490] should_failslab+0xc2/0x120 [ 114.319538][ T6490] __kmalloc_noprof+0xe0/0x850 [ 114.319587][ T6490] tomoyo_realpath_from_path+0xb6/0x690 [ 114.319635][ T6490] tomoyo_check_open_permission+0x2af/0x3c0 [ 114.319672][ T6490] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 114.319740][ T6490] ? do_raw_spin_lock+0x128/0x260 [ 114.319784][ T6490] ? path_get+0x61/0x80 [ 114.319820][ T6490] tomoyo_file_open+0x6b/0x90 [ 114.319849][ T6490] security_file_open+0xb5/0x1e0 [ 114.319887][ T6490] do_dentry_open+0x5aa/0x1660 [ 114.319917][ T6490] ? security_inode_permission+0xbf/0x250 [ 114.319957][ T6490] vfs_open+0x82/0x3f0 [ 114.319996][ T6490] path_openat+0x208c/0x31a0 [ 114.320038][ T6490] ? __pfx_path_openat+0x10/0x10 [ 114.320081][ T6490] do_file_open+0x20e/0x430 [ 114.320118][ T6490] ? __pfx_do_file_open+0x10/0x10 [ 114.320169][ T6490] ? alloc_fd+0x476/0x790 [ 114.320200][ T6490] ? do_getname+0x191/0x390 [ 114.320240][ T6490] do_sys_openat2+0x10d/0x1e0 [ 114.320279][ T6490] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.320330][ T6490] __x64_sys_openat+0x12d/0x210 [ 114.320375][ T6490] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.320431][ T6490] do_syscall_64+0x106/0xf80 [ 114.320460][ T6490] ? clear_bhb_loop+0x40/0x90 [ 114.320495][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.320525][ T6490] RIP: 0033:0x7f7ffa79c819 [ 114.320549][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.320576][ T6490] RSP: 002b:00007f7ffb589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.320602][ T6490] RAX: ffffffffffffffda RBX: 00007f7ffaa15fa0 RCX: 00007f7ffa79c819 [ 114.320621][ T6490] RDX: 0000000000000000 RSI: 0000200000002b40 RDI: ffffffffffffff9c [ 114.320639][ T6490] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 114.320657][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.320674][ T6490] R13: 00007f7ffaa16038 R14: 00007f7ffaa15fa0 R15: 00007ffc111caca8 [ 114.320713][ T6490] [ 114.320790][ T6490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.688602][ T6494] true [ 114.688626][ T6494] vivid-007: Generate SCR: true [ 114.688657][ T6494] tpg source WxH: 320x240 (Y'CbCr) [ 114.688672][ T6494] tpg field: 1 [ 114.688680][ T6494] tpg crop: (0,0)/320x240 [ 114.688695][ T6494] tpg compose: (0,0)/320x240 [ 114.688711][ T6494] tpg colorspace: 8 [ 114.688721][ T6494] tpg transfer function: 0/0 [ 114.688731][ T6494] tpg Y'CbCr encoding: 0/0 [ 114.688742][ T6494] tpg quantization: 0/0 [ 114.688755][ T6494] tpg RGB range: 0/2 [ 114.688768][ T6494] vivid-007: ================== END STATUS ================== [ 115.063054][ T6510] vivid-007: ================= START STATUS ================= [ 115.089007][ T6510] vivid-007: Generate PTS: true [ 115.093991][ T6510] vivid-007: Generate SCR: true [ 115.100419][ T6510] tpg source WxH: 320x240 (Y'CbCr) [ 115.108867][ T6510] tpg field: 1 [ 115.116730][ T6510] tpg crop: (0,0)/320x240 [ 115.123467][ T6510] tpg compose: (0,0)/320x240 [ 115.128209][ T6510] tpg colorspace: 8 [ 115.133702][ T6510] tpg transfer function: 0/0 [ 115.138425][ T6510] tpg Y'CbCr encoding: 0/0 [ 115.178872][ T6510] tpg quantization: 0/0 [ 115.183088][ T6510] tpg RGB range: 0/2 [ 115.195875][ T6510] vivid-007: ================== END STATUS ================== [ 115.580294][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.059645][ T6525] netlink: 334 bytes leftover after parsing attributes in process `syz.3.143'. [ 116.375043][ T6525] Invalid ELF header magic: != ELF [ 116.809493][ T6529] zswap: compressor not available [ 117.582378][ T6551] vivid-007: ================= START STATUS ================= [ 117.680719][ T6551] vivid-007: Generate PTS: true [ 117.706087][ T6551] vivid-007: Generate SCR: true [ 117.770682][ T6551] tpg source WxH: 320x240 (Y'CbCr) [ 117.775869][ T6551] tpg field: 1 [ 117.839093][ T6551] tpg crop: (0,0)/320x240 [ 117.845713][ T6551] tpg compose: (0,0)/320x240 [ 117.858898][ T6551] tpg colorspace: 8 [ 117.862768][ T6551] tpg transfer function: 0/0 [ 117.867376][ T6551] tpg Y'CbCr encoding: 0/0 [ 117.945531][ T6551] tpg quantization: 0/0 [ 117.996341][ T6551] tpg RGB range: 0/2 [ 118.006460][ T6551] vivid-007: ================== END STATUS ================== [ 118.814105][ T6563] random: crng reseeded on system resumption [ 119.529109][ T6565] FAULT_INJECTION: forcing a failure. [ 119.529109][ T6565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.568939][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 119.568975][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.568990][ T6565] Call Trace: [ 119.568999][ T6565] [ 119.569009][ T6565] dump_stack_lvl+0x100/0x190 [ 119.569071][ T6565] should_fail_ex.cold+0x5/0xa [ 119.569098][ T6565] ? prepare_alloc_pages+0x16d/0x5f0 [ 119.569132][ T6565] should_fail_alloc_page+0xeb/0x140 [ 119.569163][ T6565] prepare_alloc_pages+0x1f0/0x5f0 [ 119.569198][ T6565] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 119.569238][ T6565] ? stack_depot_save_flags+0x479/0x9d0 [ 119.569274][ T6565] ? rcu_is_watching+0x12/0xc0 [ 119.569316][ T6565] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.569358][ T6565] ? lockdep_hardirqs_on+0x78/0x100 [ 119.569386][ T6565] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.569436][ T6565] ? stack_depot_save_flags+0x479/0x9d0 [ 119.569477][ T6565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.569520][ T6565] ? kasan_save_stack+0x3f/0x50 [ 119.569543][ T6565] ? kasan_save_track+0x14/0x30 [ 119.569568][ T6565] ? rds_cong_from_addr+0x50/0x540 [ 119.569604][ T6565] ? rds_cong_get_maps+0x21/0xe0 [ 119.569640][ T6565] ? __rds_conn_create+0xa7c/0x2590 [ 119.569678][ T6565] ? rds_conn_create_outgoing+0x44/0x60 [ 119.569719][ T6565] ? rds_sendmsg+0x10da/0x3480 [ 119.569749][ T6565] ? ____sys_sendmsg+0x9e1/0xb70 [ 119.569780][ T6565] ? ___sys_sendmsg+0x190/0x1e0 [ 119.569811][ T6565] ? __sys_sendmsg+0x170/0x220 [ 119.569835][ T6565] ? do_syscall_64+0x106/0xf80 [ 119.569874][ T6565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.569901][ T6565] ? policy_nodemask+0xed/0x4f0 [ 119.569931][ T6565] alloc_pages_mpol+0x1fb/0x550 [ 119.569963][ T6565] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.569996][ T6565] ? lockdep_init_map_type+0x5c/0x250 [ 119.570029][ T6565] alloc_pages_noprof+0x136/0x390 [ 119.570055][ T6565] get_zeroed_page_noprof+0x18/0xb0 [ 119.570078][ T6565] rds_cong_from_addr+0x1ad/0x540 [ 119.570118][ T6565] rds_cong_get_maps+0x21/0xe0 [ 119.570153][ T6565] ? __ipv6_addr_type+0xe8/0x2e0 [ 119.570187][ T6565] __rds_conn_create+0xa7c/0x2590 [ 119.570242][ T6565] ? __pfx___rds_conn_create+0x10/0x10 [ 119.570281][ T6565] ? rcu_is_watching+0x12/0xc0 [ 119.570321][ T6565] ? trace_kmalloc+0x101/0x130 [ 119.570351][ T6565] ? lockdep_init_map_type+0x5c/0x250 [ 119.570400][ T6565] rds_conn_create_outgoing+0x44/0x60 [ 119.570450][ T6565] rds_sendmsg+0x10da/0x3480 [ 119.570498][ T6565] ? __pfx_rds_sendmsg+0x10/0x10 [ 119.570537][ T6565] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.570581][ T6565] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 119.570615][ T6565] ? ____sys_sendmsg+0x9e1/0xb70 [ 119.570646][ T6565] ____sys_sendmsg+0x9e1/0xb70 [ 119.570677][ T6565] ? __pfx_rds_sendmsg+0x10/0x10 [ 119.570712][ T6565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.570762][ T6565] ___sys_sendmsg+0x190/0x1e0 [ 119.570800][ T6565] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.570878][ T6565] __sys_sendmsg+0x170/0x220 [ 119.570906][ T6565] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.570955][ T6565] do_syscall_64+0x106/0xf80 [ 119.570982][ T6565] ? clear_bhb_loop+0x40/0x90 [ 119.571015][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.571043][ T6565] RIP: 0033:0x7f709ff9c819 [ 119.571074][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.571099][ T6565] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.571124][ T6565] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 119.571142][ T6565] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 119.571158][ T6565] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 119.571174][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.571189][ T6565] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 119.571225][ T6565] [ 120.069806][ T6567] netlink: 334 bytes leftover after parsing attributes in process `syz.3.153'. [ 120.274243][ T6567] Invalid ELF header magic: != ELF [ 121.334212][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 121.386786][ T6587] veth0_macvtap: left promiscuous mode [ 121.770464][ T6593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.777430][ T6586] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 121.829993][ T6586] netlink: 322 bytes leftover after parsing attributes in process `syz.3.159'. [ 121.874453][ T6596] zswap: compressor not available [ 121.993692][ T6603] FAULT_INJECTION: forcing a failure. [ 121.993692][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 122.049202][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT(full) [ 122.049237][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.049252][ T6603] Call Trace: [ 122.049260][ T6603] [ 122.049270][ T6603] dump_stack_lvl+0x100/0x190 [ 122.049314][ T6603] should_fail_ex.cold+0x5/0xa [ 122.049345][ T6603] should_failslab+0xc2/0x120 [ 122.049375][ T6603] __kvmalloc_node_noprof+0xfa/0xa00 [ 122.049399][ T6603] ? seq_read_iter+0x819/0x1270 [ 122.049446][ T6603] seq_read_iter+0x819/0x1270 [ 122.049485][ T6603] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 122.049533][ T6603] kernfs_fop_read_iter+0x46c/0x610 [ 122.049570][ T6603] copy_splice_read+0x4ba/0xb90 [ 122.049604][ T6603] ? __pfx_copy_splice_read+0x10/0x10 [ 122.049642][ T6603] ? __fget_files+0x215/0x3d0 [ 122.049673][ T6603] ? __pfx_copy_splice_read+0x10/0x10 [ 122.049702][ T6603] do_splice_read+0x285/0x370 [ 122.049736][ T6603] splice_file_to_pipe+0x82/0x120 [ 122.049771][ T6603] do_sendfile+0x366/0xe20 [ 122.049823][ T6603] ? __pfx_do_sendfile+0x10/0x10 [ 122.049868][ T6603] ? __fget_files+0x21f/0x3d0 [ 122.049906][ T6603] __x64_sys_sendfile64+0x1d8/0x220 [ 122.049939][ T6603] ? ksys_write+0x1ac/0x250 [ 122.049967][ T6603] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 122.050013][ T6603] do_syscall_64+0x106/0xf80 [ 122.050042][ T6603] ? clear_bhb_loop+0x40/0x90 [ 122.050077][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.050115][ T6603] RIP: 0033:0x7f7ffa79c819 [ 122.050139][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.050164][ T6603] RSP: 002b:00007f7ffb589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 122.050191][ T6603] RAX: ffffffffffffffda RBX: 00007f7ffaa15fa0 RCX: 00007f7ffa79c819 [ 122.050209][ T6603] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 122.050229][ T6603] RBP: 00007f7ffb589090 R08: 0000000000000000 R09: 0000000000000000 [ 122.050246][ T6603] R10: 400000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 122.050263][ T6603] R13: 00007f7ffaa16038 R14: 00007f7ffaa15fa0 R15: 00007ffc111caca8 [ 122.050301][ T6603] [ 122.888628][ T6618] syz.0.170 (6618) used greatest stack depth: 19672 bytes left [ 122.967602][ T6626] netlink: 334 bytes leftover after parsing attributes in process `syz.3.169'. [ 123.087281][ T6612] program syz.1.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.100363][ T30] audit: type=1807 audit(1775530429.794:4): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 123.113926][ T6611] ima: policy update failed [ 123.146660][ T30] audit: type=1802 audit(1775530429.794:5): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.167" res=0 errno=0 [ 123.199075][ T30] audit: type=1802 audit(1775530429.804:6): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.167" res=0 errno=0 [ 124.826449][ T6653] vivid-007: ================= START STATUS ================= [ 124.837887][ T6653] vivid-007: Generate PTS: true [ 124.844303][ T6653] vivid-007: Generate SCR: true [ 124.849490][ T6653] tpg source WxH: 320x240 (Y'CbCr) [ 124.854624][ T6653] tpg field: 1 [ 124.858008][ T6653] tpg crop: (0,0)/320x240 [ 124.862720][ T6653] tpg compose: (0,0)/320x240 [ 124.867379][ T6653] tpg colorspace: 8 [ 124.871355][ T6653] tpg transfer function: 0/0 [ 124.886339][ T6653] tpg Y'CbCr encoding: 0/0 [ 124.894730][ T6653] tpg quantization: 0/0 [ 124.899214][ T6653] tpg RGB range: 0/2 [ 124.903141][ T6653] vivid-007: ================== END STATUS ================== [ 126.076477][ T6650] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 126.088768][ T6650] netlink: 322 bytes leftover after parsing attributes in process `syz.0.177'. [ 127.098074][ T6688] vivid-007: ================= START STATUS ================= [ 127.118226][ T6688] vivid-007: Generate PTS: true [ 127.139220][ T6688] vivid-007: Generate SCR: true [ 127.144152][ T6688] tpg source WxH: 320x240 (Y'CbCr) [ 127.174043][ T6688] tpg field: 1 [ 127.177461][ T6688] tpg crop: (0,0)/320x240 [ 127.185527][ T6688] tpg compose: (0,0)/320x240 [ 127.190553][ T6688] tpg colorspace: 8 [ 127.194478][ T6688] tpg transfer function: 0/0 [ 127.199619][ T6688] tpg Y'CbCr encoding: 0/0 [ 127.204061][ T6688] tpg quantization: 0/0 [ 127.208332][ T6688] tpg RGB range: 0/2 [ 127.212948][ T6688] vivid-007: ================== END STATUS ================== [ 128.168621][ T6721] netlink: 334 bytes leftover after parsing attributes in process `syz.3.196'. [ 128.210394][ T6721] netlink: 334 bytes leftover after parsing attributes in process `syz.3.196'. [ 128.882525][ T6734] vivid-007: ================= START STATUS ================= [ 128.892499][ T6734] vivid-007: Generate PTS: true [ 128.897429][ T6734] vivid-007: Generate SCR: true [ 128.906266][ T6734] tpg source WxH: 320x240 (Y'CbCr) [ 128.950734][ T6734] tpg field: 1 [ 128.962599][ T6734] tpg crop: (0,0)/320x240 [ 128.975703][ T6734] tpg compose: (0,0)/320x240 [ 128.981760][ T6734] tpg colorspace: 8 [ 128.985838][ T6734] tpg transfer function: 0/0 [ 128.995817][ T6734] tpg Y'CbCr encoding: 0/0 [ 129.002655][ T6734] tpg quantization: 0/0 [ 129.019777][ T6734] tpg RGB range: 0/2 [ 129.023828][ T6734] vivid-007: ================== END STATUS ================== [ 130.949294][ T6788] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 130.956861][ T6788] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 131.470263][ T6800] vivid-007: ================= START STATUS ================= [ 131.498127][ T6800] vivid-007: Generate PTS: true [ 131.526242][ T6800] vivid-007: Generate SCR: true [ 131.547470][ T6800] tpg source WxH: 320x240 (Y'CbCr) [ 131.580793][ T6800] tpg field: 1 [ 131.608019][ T6800] tpg crop: (0,0)/320x240 [ 131.642476][ T6800] tpg compose: (0,0)/320x240 [ 131.677601][ T6800] tpg colorspace: 8 [ 131.700097][ T6800] tpg transfer function: 0/0 [ 131.704836][ T6800] tpg Y'CbCr encoding: 0/0 [ 131.721948][ T6800] tpg quantization: 0/0 [ 131.726254][ T6800] tpg RGB range: 0/2 [ 131.786828][ T6800] vivid-007: ================== END STATUS ================== [ 132.091932][ T6806] mkiss: ax0: crc mode is auto. [ 132.927969][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935525][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.383157][ T6852] vivid-007: ================= START STATUS ================= [ 134.401248][ T6845] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 134.446076][ T6852] vivid-007: Generate PTS: true [ 134.466897][ T6845] netlink: 322 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.477426][ T6852] vivid-007: Generate SCR: true [ 134.492120][ T6852] tpg source WxH: 320x240 (Y'CbCr) [ 134.527574][ T6852] tpg field: 1 [ 134.548537][ T6852] tpg crop: (0,0)/320x240 [ 134.594622][ T6852] tpg compose: (0,0)/320x240 [ 134.619104][ T6852] tpg colorspace: 8 [ 134.631435][ T6852] tpg transfer function: 0/0 [ 134.644471][ T6852] tpg Y'CbCr encoding: 0/0 [ 134.793158][ T6852] tpg quantization: 0/0 [ 134.797373][ T6852] tpg RGB range: 0/2 [ 134.840461][ T6852] vivid-007: ================== END STATUS ================== [ 135.275080][ T6884] random: crng reseeded on system resumption [ 135.429546][ T6889] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 135.525818][ T6889] netlink: 'syz.1.236': attribute type 13 has an invalid length. [ 136.599348][ T6900] FAULT_INJECTION: forcing a failure. [ 136.599348][ T6900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.750228][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) [ 136.750269][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.750287][ T6900] Call Trace: [ 136.750297][ T6900] [ 136.750309][ T6900] dump_stack_lvl+0x100/0x190 [ 136.750360][ T6900] should_fail_ex.cold+0x5/0xa [ 136.750390][ T6900] ? prepare_alloc_pages+0x16d/0x5f0 [ 136.750429][ T6900] should_fail_alloc_page+0xeb/0x140 [ 136.750465][ T6900] prepare_alloc_pages+0x1f0/0x5f0 [ 136.750515][ T6900] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 136.750565][ T6900] ? __pfx_validate_mm+0x10/0x10 [ 136.750605][ T6900] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 136.750654][ T6900] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 136.750696][ T6900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.750725][ T6900] ? percpu_counter_add_batch+0xb9/0x230 [ 136.750762][ T6900] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.750825][ T6900] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 136.750866][ T6900] ? vma_wants_writenotify+0x10b/0x390 [ 136.750912][ T6900] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 136.750962][ T6900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.750996][ T6900] ? policy_nodemask+0xed/0x4f0 [ 136.751031][ T6900] alloc_pages_mpol+0x1fb/0x550 [ 136.751065][ T6900] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.751108][ T6900] folio_alloc_mpol_noprof+0x36/0x340 [ 136.751147][ T6900] vma_alloc_folio_noprof+0xed/0x1d0 [ 136.751184][ T6900] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 136.751233][ T6900] do_anonymous_page+0xb3a/0x1fb0 [ 136.751287][ T6900] __handle_mm_fault+0x1d48/0x2b60 [ 136.751339][ T6900] ? __pfx___handle_mm_fault+0x10/0x10 [ 136.751382][ T6900] ? pte_offset_map_lock+0x174/0x320 [ 136.751413][ T6900] ? find_held_lock+0x2b/0x80 [ 136.751454][ T6900] ? follow_page_pte+0x5b3/0x1400 [ 136.751502][ T6900] handle_mm_fault+0x36d/0xa20 [ 136.751550][ T6900] __get_user_pages+0xf9c/0x34d0 [ 136.751600][ T6900] ? __pfx___get_user_pages+0x10/0x10 [ 136.751646][ T6900] populate_vma_page_range+0x267/0x3f0 [ 136.751687][ T6900] ? __pfx_populate_vma_page_range+0x10/0x10 [ 136.751723][ T6900] ? __pfx_find_vma_intersection+0x10/0x10 [ 136.751757][ T6900] ? do_mmap+0x93f/0x12f0 [ 136.751794][ T6900] __mm_populate+0x107/0x3a0 [ 136.751832][ T6900] ? __pfx___mm_populate+0x10/0x10 [ 136.751871][ T6900] ? up_write+0x290/0x4f0 [ 136.751916][ T6900] vm_mmap_pgoff+0x37f/0x470 [ 136.751955][ T6900] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 136.751992][ T6900] ? do_futex+0x192/0x350 [ 136.752031][ T6900] ? __pfx_do_futex+0x10/0x10 [ 136.752076][ T6900] ksys_mmap_pgoff+0xe1/0x650 [ 136.752109][ T6900] ? __x64_sys_futex+0x34f/0x4d0 [ 136.752145][ T6900] ? __x64_sys_futex+0x358/0x4d0 [ 136.752184][ T6900] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 136.752214][ T6900] ? fput+0x79/0x100 [ 136.752248][ T6900] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.752285][ T6900] ? ksys_write+0x1ac/0x250 [ 136.752312][ T6900] ? __pfx_ksys_write+0x10/0x10 [ 136.752345][ T6900] __x64_sys_mmap+0x125/0x190 [ 136.752392][ T6900] do_syscall_64+0x106/0xf80 [ 136.752422][ T6900] ? clear_bhb_loop+0x40/0x90 [ 136.752459][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.752495][ T6900] RIP: 0033:0x7fc58419c819 [ 136.752519][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.752547][ T6900] RSP: 002b:00007fc585025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 136.752575][ T6900] RAX: ffffffffffffffda RBX: 00007fc584415fa0 RCX: 00007fc58419c819 [ 136.752594][ T6900] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000 [ 136.752611][ T6900] RBP: 00007fc584232c91 R08: ffffffffffffffff R09: 0000000000008000 [ 136.752630][ T6900] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 136.752647][ T6900] R13: 00007fc584416038 R14: 00007fc584415fa0 R15: 00007ffffe0678a8 [ 136.752687][ T6900] [ 137.326004][ T6908] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 137.336136][ T6908] netlink: 322 bytes leftover after parsing attributes in process `syz.0.238'. [ 137.679688][ T6910] vivid-007: ================= START STATUS ================= [ 137.687525][ T6910] vivid-007: Generate PTS: true [ 137.693998][ T6910] vivid-007: Generate SCR: true [ 137.704238][ T6910] tpg source WxH: 320x240 (Y'CbCr) [ 137.714307][ T6912] netlink: 334 bytes leftover after parsing attributes in process `syz.0.240'. [ 137.742228][ T6910] tpg field: 1 [ 137.745668][ T6910] tpg crop: (0,0)/320x240 [ 137.791774][ T6910] tpg compose: (0,0)/320x240 [ 137.811261][ T6910] tpg colorspace: 8 [ 137.815142][ T6910] tpg transfer function: 0/0 [ 137.844056][ T6910] tpg Y'CbCr encoding: 0/0 [ 137.912946][ T6910] tpg quantization: 0/0 [ 137.917130][ T6910] tpg RGB range: 0/2 [ 137.951073][ T6910] vivid-007: ================== END STATUS ================== [ 138.021675][ T6912] Invalid ELF header magic: != ELF [ 138.502607][ T6920] netlink: 334 bytes leftover after parsing attributes in process `syz.1.241'. [ 138.639607][ T6922] FAULT_INJECTION: forcing a failure. [ 138.639607][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 138.660575][ T6922] CPU: 0 UID: 0 PID: 6922 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT(full) [ 138.660615][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.660631][ T6922] Call Trace: [ 138.660640][ T6922] [ 138.660650][ T6922] dump_stack_lvl+0x100/0x190 [ 138.660697][ T6922] should_fail_ex.cold+0x5/0xa [ 138.660731][ T6922] should_failslab+0xc2/0x120 [ 138.660762][ T6922] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.660806][ T6922] ? __pmd_alloc+0xbf/0x950 [ 138.660846][ T6922] __pmd_alloc+0xbf/0x950 [ 138.660883][ T6922] __handle_mm_fault+0xa9e/0x2b60 [ 138.660927][ T6922] ? mt_find+0x45e/0x8e0 [ 138.660961][ T6922] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.660998][ T6922] ? __pfx_mt_find+0x10/0x10 [ 138.661051][ T6922] ? find_vma+0xbf/0x140 [ 138.661079][ T6922] ? __pfx_find_vma+0x10/0x10 [ 138.661112][ T6922] handle_mm_fault+0x36d/0xa20 [ 138.661160][ T6922] do_user_addr_fault+0x74c/0x12f0 [ 138.661206][ T6922] exc_page_fault+0x6f/0xd0 [ 138.661236][ T6922] asm_exc_page_fault+0x26/0x30 [ 138.661265][ T6922] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 138.661304][ T6922] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 138.661330][ T6922] RSP: 0018:ffffc900057cf948 EFLAGS: 00050206 [ 138.661353][ T6922] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000001546 [ 138.661370][ T6922] RDX: 0000000000000001 RSI: ffff8880262e8000 RDI: 0000000000000000 [ 138.661386][ T6922] RBP: ffffc900057cfd08 R08: 0000000000000000 R09: ffffed1004c5d2a8 [ 138.661404][ T6922] R10: ffff8880262e9545 R11: 0000000000000000 R12: 0000000000001546 [ 138.661419][ T6922] R13: 00007ffffffff000 R14: ffff8880262e8000 R15: 0000000000001546 [ 138.661455][ T6922] _copy_to_iter+0x391/0x1720 [ 138.661494][ T6922] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.661537][ T6922] ? lockdep_hardirqs_on+0x78/0x100 [ 138.661567][ T6922] ? __pfx__copy_to_iter+0x10/0x10 [ 138.661602][ T6922] ? zoneinfo_show+0x6d9/0xba0 [ 138.661656][ T6922] seq_read_iter+0xdab/0x1270 [ 138.661717][ T6922] proc_reg_read_iter+0x220/0x310 [ 138.661764][ T6922] do_iter_readv_writev+0x60d/0x920 [ 138.661811][ T6922] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 138.661865][ T6922] ? rw_verify_area+0xce/0x6d0 [ 138.661910][ T6922] vfs_readv+0x4d3/0x8d0 [ 138.661951][ T6922] ? rcu_is_watching+0x12/0xc0 [ 138.661995][ T6922] ? trace_contention_end+0x140/0x180 [ 138.662041][ T6922] ? __pfx_vfs_readv+0x10/0x10 [ 138.662082][ T6922] ? fdget_pos+0x2aa/0x380 [ 138.662115][ T6922] ? find_held_lock+0x2b/0x80 [ 138.662171][ T6922] ? __fget_files+0x21f/0x3d0 [ 138.662209][ T6922] ? do_readv+0x13e/0x340 [ 138.662250][ T6922] do_readv+0x13e/0x340 [ 138.662294][ T6922] ? __pfx_do_readv+0x10/0x10 [ 138.662348][ T6922] do_syscall_64+0x106/0xf80 [ 138.662375][ T6922] ? clear_bhb_loop+0x40/0x90 [ 138.662408][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.662434][ T6922] RIP: 0033:0x7f709ff9c819 [ 138.662456][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.662480][ T6922] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 138.662503][ T6922] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 138.662521][ T6922] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 138.662537][ T6922] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 138.662552][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.662567][ T6922] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 138.662604][ T6922] [ 138.727830][ T6923] Invalid ELF header magic: != ELF [ 139.359977][ T6930] synth uevent: /devices/virtual/tty/ttyy0: unknown uevent action string [ 139.396362][ T6930] tty ttyy0: uevent: failed to send synthetic uevent: -22 [ 140.552056][ T6954] vivid-007: ================= START STATUS ================= [ 140.562479][ T6954] vivid-007: Generate PTS: true [ 140.567616][ T6954] vivid-007: Generate SCR: true [ 140.573216][ T6954] tpg source WxH: 320x240 (Y'CbCr) [ 140.578366][ T6954] tpg field: 1 [ 140.582238][ T6954] tpg crop: (0,0)/320x240 [ 140.586775][ T6954] tpg compose: (0,0)/320x240 [ 140.591798][ T6954] tpg colorspace: 8 [ 140.595629][ T6954] tpg transfer function: 0/0 [ 140.602350][ T6954] tpg Y'CbCr encoding: 0/0 [ 140.606805][ T6954] tpg quantization: 0/0 [ 140.618114][ T6954] tpg RGB range: 0/2 [ 140.638571][ T6954] vivid-007: ================== END STATUS ================== [ 140.775871][ T6959] netlink: 334 bytes leftover after parsing attributes in process `syz.3.250'. [ 140.913221][ T6959] Invalid ELF header magic: != ELF [ 140.920557][ T6962] FAULT_INJECTION: forcing a failure. [ 140.920557][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.945362][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 140.945396][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.945411][ T6962] Call Trace: [ 140.945419][ T6962] [ 140.945430][ T6962] dump_stack_lvl+0x100/0x190 [ 140.945475][ T6962] should_fail_ex.cold+0x5/0xa [ 140.945509][ T6962] _copy_from_user+0x2e/0xd0 [ 140.945545][ T6962] input_event_from_user+0xb9/0x290 [ 140.945579][ T6962] ? __pfx_input_event_from_user+0x10/0x10 [ 140.945611][ T6962] ? __pfx___might_resched+0x10/0x10 [ 140.945651][ T6962] ? input_inject_event+0x1c9/0x3b0 [ 140.945687][ T6962] evdev_write+0x27a/0x430 [ 140.945720][ T6962] ? __pfx_evdev_write+0x10/0x10 [ 140.945751][ T6962] ? bpf_lsm_file_permission+0x9/0x10 [ 140.945777][ T6962] ? security_file_permission+0x76/0x210 [ 140.945815][ T6962] ? rw_verify_area+0xce/0x6d0 [ 140.945858][ T6962] vfs_write+0x2aa/0x1070 [ 140.945887][ T6962] ? __pfx_evdev_write+0x10/0x10 [ 140.945920][ T6962] ? __pfx_vfs_write+0x10/0x10 [ 140.945942][ T6962] ? find_held_lock+0x2b/0x80 [ 140.945974][ T6962] ? __fget_files+0x215/0x3d0 [ 140.946008][ T6962] ? __fget_files+0x215/0x3d0 [ 140.946040][ T6962] ? __fget_files+0x21f/0x3d0 [ 140.946077][ T6962] ksys_write+0x1f8/0x250 [ 140.946104][ T6962] ? __pfx_ksys_write+0x10/0x10 [ 140.946141][ T6962] do_syscall_64+0x106/0xf80 [ 140.946169][ T6962] ? clear_bhb_loop+0x40/0x90 [ 140.946203][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.946230][ T6962] RIP: 0033:0x7f709ff9c819 [ 140.946250][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.946275][ T6962] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.946300][ T6962] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 140.946318][ T6962] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 140.946334][ T6962] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 140.946350][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.946365][ T6962] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 140.946402][ T6962] [ 141.801654][ T6976] FAULT_INJECTION: forcing a failure. [ 141.801654][ T6976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.838975][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 141.839012][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.839028][ T6976] Call Trace: [ 141.839036][ T6976] [ 141.839046][ T6976] dump_stack_lvl+0x100/0x190 [ 141.839093][ T6976] should_fail_ex.cold+0x5/0xa [ 141.839125][ T6976] _copy_from_user+0x2e/0xd0 [ 141.839160][ T6976] restore_sigcontext+0xcd/0x6a0 [ 141.839195][ T6976] ? __pfx_restore_sigcontext+0x10/0x10 [ 141.839253][ T6976] ? __pfx_restore_altstack+0x10/0x10 [ 141.839292][ T6976] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.839333][ T6976] ? lockdep_hardirqs_on+0x78/0x100 [ 141.839365][ T6976] __do_sys_rt_sigreturn+0x229/0x2c0 [ 141.839401][ T6976] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 141.839448][ T6976] do_syscall_64+0x106/0xf80 [ 141.839476][ T6976] ? clear_bhb_loop+0x40/0x90 [ 141.839510][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.839536][ T6976] RIP: 0033:0x7fc58413db99 [ 141.839557][ T6976] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 141.839580][ T6976] RSP: 002b:00007fc585003b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 141.839603][ T6976] RAX: ffffffffffffffda RBX: 00007fc584416098 RCX: 00007fc58413db99 [ 141.839619][ T6976] RDX: 00007fc585003b40 RSI: 00007fc585003c70 RDI: 0000000000000011 [ 141.839636][ T6976] RBP: 00007fc584416090 R08: 0000000000000000 R09: 0000000000000000 [ 141.839651][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.839666][ T6976] R13: 00007fc584416128 R14: 00007ffffe0677c0 R15: 00007ffffe0678a8 [ 141.839703][ T6976] [ 143.429957][ T6993] netlink: 334 bytes leftover after parsing attributes in process `syz.3.261'. [ 144.691903][ T7019] openvswitch: netlink: Message has 4 unknown bytes. [ 145.651136][ T7037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.662365][ T7037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.677893][ T7043] netlink: 334 bytes leftover after parsing attributes in process `syz.2.273'. [ 145.699000][ T7037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.708064][ T7037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.343227][ T7050] sd 0:0:1:0: PR command failed: 1026 [ 146.364604][ T7050] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 146.378970][ T7050] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 146.613299][ T7055] vivid-007: ================= START STATUS ================= [ 146.629014][ T7055] vivid-007: Generate PTS: true [ 146.707384][ T7055] vivid-007: Generate SCR: true [ 146.755229][ T7055] tpg source WxH: 320x240 (Y'CbCr) [ 146.801234][ T7055] tpg field: 1 [ 146.804671][ T7055] tpg crop: (0,0)/320x240 [ 146.896396][ T7055] tpg compose: (0,0)/320x240 [ 146.950204][ T7055] tpg colorspace: 8 [ 146.954084][ T7055] tpg transfer function: 0/0 [ 146.986079][ T7055] tpg Y'CbCr encoding: 0/0 [ 147.080379][ T7055] tpg quantization: 0/0 [ 147.084597][ T7055] tpg RGB range: 0/2 [ 147.088498][ T7055] vivid-007: ================== END STATUS ================== [ 147.720245][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.726931][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.734815][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.741971][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.186580][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 149.312361][ T7100] netlink: 334 bytes leftover after parsing attributes in process `syz.3.284'. [ 150.535744][ T7117] input: f¬ as /devices/virtual/input/input7 [ 150.807083][ T7121] netlink: 206 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.277063][ T7141] netlink: 334 bytes leftover after parsing attributes in process `syz.1.295'. [ 151.525364][ T7143] Invalid ELF header magic: != ELF [ 151.717451][ T7150] FAULT_INJECTION: forcing a failure. [ 151.717451][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 151.754734][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 151.754770][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.754787][ T7150] Call Trace: [ 151.754797][ T7150] [ 151.754807][ T7150] dump_stack_lvl+0x100/0x190 [ 151.754854][ T7150] should_fail_ex.cold+0x5/0xa [ 151.754886][ T7150] should_failslab+0xc2/0x120 [ 151.754917][ T7150] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 151.754954][ T7150] ? security_file_alloc+0x34/0x2c0 [ 151.754973][ T7150] ? trace_kmem_cache_alloc+0xf3/0x120 [ 151.754993][ T7150] security_file_alloc+0x34/0x2c0 [ 151.755012][ T7150] init_file+0x95/0x480 [ 151.755031][ T7150] alloc_empty_file+0x73/0x1c0 [ 151.755051][ T7150] alloc_file_pseudo+0x13a/0x230 [ 151.755070][ T7150] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 151.755089][ T7150] ? alloc_fd+0x476/0x790 [ 151.755108][ T7150] sock_alloc_file+0x50/0x210 [ 151.755125][ T7150] __sys_socket+0x1c0/0x260 [ 151.755144][ T7150] ? __pfx___sys_socket+0x10/0x10 [ 151.755168][ T7150] __x64_sys_socket+0x72/0xb0 [ 151.755187][ T7150] ? lockdep_hardirqs_on+0x78/0x100 [ 151.755203][ T7150] do_syscall_64+0x106/0xf80 [ 151.755218][ T7150] ? clear_bhb_loop+0x40/0x90 [ 151.755236][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.755252][ T7150] RIP: 0033:0x7fc58419c819 [ 151.755265][ T7150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.755279][ T7150] RSP: 002b:00007fc585004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 151.755294][ T7150] RAX: ffffffffffffffda RBX: 00007fc584416090 RCX: 00007fc58419c819 [ 151.755303][ T7150] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 151.755312][ T7150] RBP: 00007fc584232c91 R08: 0000000000000000 R09: 0000000000000000 [ 151.755321][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.755329][ T7150] R13: 00007fc584416128 R14: 00007fc584416090 R15: 00007ffffe0678a8 [ 151.755349][ T7150] [ 152.939192][ T7170] vivid-007: ================= START STATUS ================= [ 152.957168][ T7170] vivid-007: Generate PTS: true [ 152.962518][ T7170] vivid-007: Generate SCR: true [ 152.967588][ T7170] tpg source WxH: 320x240 (Y'CbCr) [ 152.973258][ T7170] tpg field: 1 [ 152.976661][ T7170] tpg crop: (0,0)/320x240 [ 152.981514][ T7170] tpg compose: (0,0)/320x240 [ 152.986146][ T7170] tpg colorspace: 8 [ 152.990401][ T7170] tpg transfer function: 0/0 [ 152.995629][ T7170] tpg Y'CbCr encoding: 0/0 [ 153.001842][ T7170] tpg quantization: 0/0 [ 153.006116][ T7170] tpg RGB range: 0/2 [ 153.012203][ T7170] vivid-007: ================== END STATUS ================== [ 154.054298][ T7185] netlink: 334 bytes leftover after parsing attributes in process `syz.2.306'. [ 154.211199][ T7185] Invalid ELF header magic: != ELF [ 155.055395][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 155.099430][ T7207] vivid-007: ================= START STATUS ================= [ 155.108535][ T7207] vivid-007: Generate PTS: true [ 155.114175][ T7207] vivid-007: Generate SCR: true [ 155.121797][ T7207] tpg source WxH: 320x240 (Y'CbCr) [ 155.126977][ T7207] tpg field: 1 [ 155.133548][ T7207] tpg crop: (0,0)/320x240 [ 155.137928][ T7207] tpg compose: (0,0)/320x240 [ 155.142764][ T7207] tpg colorspace: 8 [ 155.146777][ T7207] tpg transfer function: 0/0 [ 155.158011][ T7207] tpg Y'CbCr encoding: 0/0 [ 155.163678][ T7207] tpg quantization: 0/0 [ 155.169349][ T7207] tpg RGB range: 0/2 [ 155.173286][ T7207] vivid-007: ================== END STATUS ================== [ 155.230089][ T7211] netlink: 'syz.3.312': attribute type 2 has an invalid length. [ 155.276739][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 155.788563][ T7234] sd 0:0:1:0: PR command failed: 1026 [ 155.794343][ T7234] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 155.801692][ T7234] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 155.894311][ T7239] vivid-007: ================= START STATUS ================= [ 155.906886][ T7239] vivid-007: Generate PTS: true [ 155.912407][ T7239] vivid-007: Generate SCR: true [ 155.917461][ T7239] tpg source WxH: 320x240 (Y'CbCr) [ 155.924170][ T7239] tpg field: 1 [ 155.928229][ T7239] tpg crop: (0,0)/320x240 [ 155.933432][ T7239] tpg compose: (0,0)/320x240 [ 155.938136][ T7239] tpg colorspace: 8 [ 155.942499][ T7239] tpg transfer function: 0/0 [ 155.948148][ T7239] tpg Y'CbCr encoding: 0/0 [ 155.962278][ T7239] tpg quantization: 0/0 [ 155.966840][ T7239] tpg RGB range: 0/2 [ 155.971636][ T7239] vivid-007: ================== END STATUS ================== [ 156.424855][ T7257] FAULT_INJECTION: forcing a failure. [ 156.424855][ T7257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.440858][ T7257] CPU: 0 UID: 0 PID: 7257 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 156.440892][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.440907][ T7257] Call Trace: [ 156.440915][ T7257] [ 156.440924][ T7257] dump_stack_lvl+0x100/0x190 [ 156.440967][ T7257] should_fail_ex.cold+0x5/0xa [ 156.440997][ T7257] _copy_from_iter+0x43a/0x1690 [ 156.441037][ T7257] ? __pfx__copy_from_iter+0x10/0x10 [ 156.441069][ T7257] ? __pfx___alloc_skb+0x10/0x10 [ 156.441122][ T7257] netlink_sendmsg+0x808/0xda0 [ 156.441156][ T7257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.441188][ T7257] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 156.441221][ T7257] ____sys_sendmsg+0x9e1/0xb70 [ 156.441252][ T7257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.441284][ T7257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.441322][ T7257] ? __pfx__kstrtoull+0x10/0x10 [ 156.441371][ T7257] ___sys_sendmsg+0x190/0x1e0 [ 156.441409][ T7257] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.441484][ T7257] ? proc_fail_nth_write+0x9f/0x220 [ 156.441520][ T7257] ? find_held_lock+0x2b/0x80 [ 156.441551][ T7257] __sys_sendmmsg+0x205/0x430 [ 156.441581][ T7257] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.441619][ T7257] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.441673][ T7257] ? ksys_write+0x1ac/0x250 [ 156.441700][ T7257] ? __pfx_ksys_write+0x10/0x10 [ 156.441732][ T7257] __x64_sys_sendmmsg+0x9c/0x100 [ 156.441759][ T7257] ? lockdep_hardirqs_on+0x78/0x100 [ 156.441788][ T7257] do_syscall_64+0x106/0xf80 [ 156.441815][ T7257] ? clear_bhb_loop+0x40/0x90 [ 156.441853][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.441881][ T7257] RIP: 0033:0x7f7ffa79c819 [ 156.441904][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.441928][ T7257] RSP: 002b:00007f7ffb589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.441954][ T7257] RAX: ffffffffffffffda RBX: 00007f7ffaa15fa0 RCX: 00007f7ffa79c819 [ 156.441972][ T7257] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 156.441988][ T7257] RBP: 00007f7ffb589090 R08: 0000000000000000 R09: 0000000000000000 [ 156.442005][ T7257] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 156.442021][ T7257] R13: 00007f7ffaa16038 R14: 00007f7ffaa15fa0 R15: 00007ffc111caca8 [ 156.442057][ T7257] [ 156.850649][ T7253] zswap: compressor not available [ 157.410633][ T7274] vivid-007: ================= START STATUS ================= [ 157.419293][ T7274] vivid-007: Generate PTS: true [ 157.424353][ T7274] vivid-007: Generate SCR: true [ 157.434609][ T7274] tpg source WxH: 320x240 (Y'CbCr) [ 157.449819][ T7274] tpg field: 1 [ 157.460590][ T7274] tpg crop: (0,0)/320x240 [ 157.466492][ T7276] binder: 7275:7276 ioctl c00c620f 2000000001c0 returned -22 [ 157.474500][ T7274] tpg compose: (0,0)/320x240 [ 157.479851][ T7274] tpg colorspace: 8 [ 157.488082][ T30] audit: type=1806 audit(1775530464.174:7): xattr="." res=0 [ 157.538994][ T7274] tpg transfer function: 0/0 [ 157.547821][ T7274] tpg Y'CbCr encoding: 0/0 [ 157.560024][ T7274] tpg quantization: 0/0 [ 157.567818][ T7274] tpg RGB range: 0/2 [ 157.575356][ T7274] vivid-007: ================== END STATUS ================== [ 158.266703][ T7303] netlink: 334 bytes leftover after parsing attributes in process `syz.2.339'. [ 158.500414][ T7303] Invalid ELF header magic: != ELF [ 158.618026][ T7312] vivid-007: ================= START STATUS ================= [ 158.636356][ T7312] vivid-007: Generate PTS: true [ 158.654395][ T7312] vivid-007: Generate SCR: true [ 158.731519][ T7312] tpg source WxH: 320x240 (Y'CbCr) [ 158.736692][ T7312] tpg field: 1 [ 158.740232][ T7312] tpg crop: (0,0)/320x240 [ 158.744579][ T7312] tpg compose: (0,0)/320x240 [ 158.750120][ T7312] tpg colorspace: 8 [ 158.754014][ T7312] tpg transfer function: 0/0 [ 158.773905][ T7328] syz.2.345 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.800952][ T7312] tpg Y'CbCr encoding: 0/0 [ 158.805420][ T7312] tpg quantization: 0/0 [ 158.882427][ T7312] tpg RGB range: 0/2 [ 158.886376][ T7312] vivid-007: ================== END STATUS ================== [ 159.994394][ T7346] FAULT_INJECTION: forcing a failure. [ 159.994394][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 160.161675][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 160.161723][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.161741][ T7346] Call Trace: [ 160.161751][ T7346] [ 160.161763][ T7346] dump_stack_lvl+0x100/0x190 [ 160.161813][ T7346] should_fail_ex.cold+0x5/0xa [ 160.161849][ T7346] should_failslab+0xc2/0x120 [ 160.161881][ T7346] __kmalloc_cache_noprof+0x7a/0x6f0 [ 160.161921][ T7346] ? syslog_print_all+0xed/0x3f0 [ 160.161966][ T7346] syslog_print_all+0xed/0x3f0 [ 160.162003][ T7346] ? futex_wait+0x125/0x380 [ 160.162050][ T7346] ? __pfx_syslog_print_all+0x10/0x10 [ 160.162107][ T7346] ? bpf_lsm_capable+0x9/0x10 [ 160.162138][ T7346] ? security_capable+0x80/0x260 [ 160.162171][ T7346] do_syslog+0x350/0x6d0 [ 160.162214][ T7346] ? __pfx_do_syslog+0x10/0x10 [ 160.162280][ T7346] __x64_sys_syslog+0x74/0xb0 [ 160.162321][ T7346] ? lockdep_hardirqs_on+0x78/0x100 [ 160.162352][ T7346] do_syscall_64+0x106/0xf80 [ 160.162380][ T7346] ? clear_bhb_loop+0x40/0x90 [ 160.162416][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.162446][ T7346] RIP: 0033:0x7f733019c819 [ 160.162469][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.162496][ T7346] RSP: 002b:00007f732e3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 160.162523][ T7346] RAX: ffffffffffffffda RBX: 00007f7330416090 RCX: 00007f733019c819 [ 160.162542][ T7346] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004 [ 160.162559][ T7346] RBP: 00007f7330232c91 R08: 0000000000000000 R09: 0000000000000000 [ 160.162576][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.162592][ T7346] R13: 00007f7330416128 R14: 00007f7330416090 R15: 00007ffe037e8a98 [ 160.162630][ T7346] [ 161.929558][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 162.060042][ T7369] netlink: 334 bytes leftover after parsing attributes in process `syz.2.354'. [ 162.461128][ T7369] Invalid ELF header magic: != ELF [ 163.374990][ T7396] vivid-007: ================= START STATUS ================= [ 163.397766][ T7396] vivid-007: Generate PTS: true [ 163.424519][ T7396] vivid-007: Generate SCR: true [ 163.447405][ T7396] tpg source WxH: 320x240 (Y'CbCr) [ 163.456427][ T7400] sd 0:0:1:0: PR command failed: 1026 [ 163.467353][ T7400] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 163.478456][ T7396] tpg field: 1 [ 163.486767][ T7400] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 163.513541][ T7396] tpg crop: (0,0)/320x240 [ 163.517945][ T7396] tpg compose: (0,0)/320x240 [ 163.569196][ T7396] tpg colorspace: 8 [ 163.573095][ T7396] tpg transfer function: 0/0 [ 163.589044][ T7396] tpg Y'CbCr encoding: 0/0 [ 163.593529][ T7396] tpg quantization: 0/0 [ 163.597710][ T7396] tpg RGB range: 0/2 [ 163.648886][ T7396] vivid-007: ================== END STATUS ================== [ 163.715394][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 164.224675][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 164.274505][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.298913][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.353551][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.369546][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.394320][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 164.892443][ T7433] vivid-007: ================= START STATUS ================= [ 164.919060][ T7433] vivid-007: Generate PTS: true [ 164.935304][ T7433] vivid-007: Generate SCR: true [ 164.966307][ T7433] tpg source WxH: 320x240 (Y'CbCr) [ 164.989765][ T7433] tpg field: 1 [ 164.993174][ T7433] tpg crop: (0,0)/320x240 [ 165.025054][ T7433] tpg compose: (0,0)/320x240 [ 165.065120][ T7433] tpg colorspace: 8 [ 165.074505][ T7433] tpg transfer function: 0/0 [ 165.155560][ T7433] tpg Y'CbCr encoding: 0/0 [ 165.186513][ T7433] tpg quantization: 0/0 [ 165.268850][ T7433] tpg RGB range: 0/2 [ 165.298866][ T7433] vivid-007: ================== END STATUS ================== [ 165.388489][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 165.538968][ T7443] netlink: Failed to add  helper -22 [ 165.590590][ T7449] ima: policy update failed [ 165.609081][ T30] audit: type=1802 audit(1775530472.284:8): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.379" res=0 errno=0 [ 166.311407][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 166.589149][ T7467] FAULT_INJECTION: forcing a failure. [ 166.589149][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 166.610384][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.2.385 Not tainted syzkaller #0 PREEMPT(full) [ 166.610418][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.610432][ T7467] Call Trace: [ 166.610441][ T7467] [ 166.610450][ T7467] dump_stack_lvl+0x100/0x190 [ 166.610494][ T7467] should_fail_ex.cold+0x5/0xa [ 166.610526][ T7467] should_failslab+0xc2/0x120 [ 166.610555][ T7467] __kmalloc_cache_noprof+0x7a/0x6f0 [ 166.610592][ T7467] ? hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 166.610631][ T7467] hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 166.610656][ T7467] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 166.610690][ T7467] mmap_action_complete+0x231/0x400 [ 166.610725][ T7467] __mmap_region+0xd16/0x29e0 [ 166.610773][ T7467] ? __pfx___mmap_region+0x10/0x10 [ 166.610823][ T7467] ? kasan_quarantine_put+0x104/0x240 [ 166.610878][ T7467] ? find_held_lock+0x2b/0x80 [ 166.610923][ T7467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.610977][ T7467] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 166.611010][ T7467] ? process_measurement+0x1f4/0x2350 [ 166.611089][ T7467] ? rcu_is_watching+0x12/0xc0 [ 166.611130][ T7467] ? cap_capable+0x107/0x460 [ 166.611162][ T7467] mmap_region+0x30a/0x3e0 [ 166.611210][ T7467] do_mmap+0xc63/0x12f0 [ 166.611246][ T7467] ? __pfx_do_mmap+0x10/0x10 [ 166.611275][ T7467] ? __pfx_down_write_killable+0x10/0x10 [ 166.611316][ T7467] vm_mmap_pgoff+0x29e/0x470 [ 166.611356][ T7467] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 166.611389][ T7467] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 166.611423][ T7467] ? hugetlbfs_get_inode+0x36e/0x750 [ 166.611450][ T7467] ? __fget_files+0x215/0x3d0 [ 166.611489][ T7467] ksys_mmap_pgoff+0x273/0x650 [ 166.611525][ T7467] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 166.611558][ T7467] ? fput+0x79/0x100 [ 166.611590][ T7467] ? ksys_write+0x1ac/0x250 [ 166.611616][ T7467] ? __pfx_ksys_write+0x10/0x10 [ 166.611648][ T7467] __x64_sys_mmap+0x125/0x190 [ 166.611694][ T7467] do_syscall_64+0x106/0xf80 [ 166.611722][ T7467] ? clear_bhb_loop+0x40/0x90 [ 166.611756][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.611800][ T7467] RIP: 0033:0x7f733019c819 [ 166.611826][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.611851][ T7467] RSP: 002b:00007f732e3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.611875][ T7467] RAX: ffffffffffffffda RBX: 00007f7330416180 RCX: 00007f733019c819 [ 166.611890][ T7467] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 166.611906][ T7467] RBP: 00007f732e3b4090 R08: 0000000000000401 R09: 0000300000000000 [ 166.611920][ T7467] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 166.611935][ T7467] R13: 00007f7330416218 R14: 00007f7330416180 R15: 00007ffe037e8a98 [ 166.611978][ T7467] [ 166.620036][ T7469] vivid-007: ================= START STATUS ================= [ 167.031007][ T7469] vivid-007: Generate PTS: true [ 167.035996][ T7469] vivid-007: Generate SCR: true [ 167.041163][ T7469] tpg source WxH: 320x240 (Y'CbCr) [ 167.047217][ T7469] tpg field: 1 [ 167.050826][ T7469] tpg crop: (0,0)/320x240 [ 167.055179][ T7469] tpg compose: (0,0)/320x240 [ 167.062083][ T7469] tpg colorspace: 8 [ 167.065887][ T7469] tpg transfer function: 0/0 [ 167.079159][ T7469] tpg Y'CbCr encoding: 0/0 [ 167.085577][ T7469] tpg quantization: 0/0 [ 167.103662][ T7469] tpg RGB range: 0/2 [ 167.107584][ T7469] vivid-007: ================== END STATUS ================== [ 167.315030][ T7475] vivid-007: ================= START STATUS ================= [ 167.330800][ T7475] vivid-007: Generate PTS: true [ 167.336374][ T7475] vivid-007: Generate SCR: true [ 167.336413][ T7475] tpg source WxH: 320x240 (Y'CbCr) [ 167.352008][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 167.374022][ T7475] tpg field: 1 [ 167.377490][ T7475] tpg crop: (0,0)/320x240 [ 167.440209][ T7475] tpg compose: (0,0)/320x240 [ 167.444979][ T7475] tpg colorspace: 8 [ 167.449173][ T7475] tpg transfer function: 0/0 [ 167.454727][ T7475] tpg Y'CbCr encoding: 0/0 [ 167.485348][ T7475] tpg quantization: 0/0 [ 167.492734][ T7475] tpg RGB range: 0/2 [ 167.505420][ T7475] vivid-007: ================== END STATUS ================== [ 168.053261][ T7501] vivid-007: ================= START STATUS ================= [ 168.080013][ T7501] vivid-007: Generate PTS: true [ 168.091684][ T7501] vivid-007: Generate SCR: true [ 168.120980][ T7501] tpg source WxH: 320x240 (Y'CbCr) [ 168.126153][ T7501] tpg field: 1 [ 168.148900][ T7501] tpg crop: (0,0)/320x240 [ 168.153288][ T7501] tpg compose: (0,0)/320x240 [ 168.157895][ T7501] tpg colorspace: 8 [ 168.183095][ T7501] tpg transfer function: 0/0 [ 168.187739][ T7501] tpg Y'CbCr encoding: 0/0 [ 168.213291][ T7501] tpg quantization: 0/0 [ 168.217500][ T7501] tpg RGB range: 0/2 [ 168.278883][ T7501] vivid-007: ================== END STATUS ================== [ 168.721821][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 168.753445][ T7531] netlink: 334 bytes leftover after parsing attributes in process `syz.2.401'. [ 168.948513][ T7531] Invalid ELF header magic: != ELF [ 169.154264][ T7540] vivid-007: ================= START STATUS ================= [ 169.194585][ T7540] vivid-007: Generate PTS: true [ 169.222282][ T7540] vivid-007: Generate SCR: true [ 169.254357][ T7540] tpg source WxH: 320x240 (Y'CbCr) [ 169.290044][ T7540] tpg field: 1 [ 169.343334][ T7540] tpg crop: (0,0)/320x240 [ 169.365373][ T7540] tpg compose: (0,0)/320x240 [ 169.390474][ T7540] tpg colorspace: 8 [ 169.418826][ T7540] tpg transfer function: 0/0 [ 169.442654][ T7540] tpg Y'CbCr encoding: 0/0 [ 169.472144][ T7540] tpg quantization: 0/0 [ 169.491214][ T7540] tpg RGB range: 0/2 [ 169.510065][ T7540] vivid-007: ================== END STATUS ================== [ 169.861557][ T7569] vivid-007: ================= START STATUS ================= [ 169.902642][ T7569] vivid-007: Generate PTS: true [ 169.907581][ T7569] vivid-007: Generate SCR: true [ 169.942548][ T7569] tpg source WxH: 320x240 (Y'CbCr) [ 169.947765][ T7569] tpg field: 1 [ 169.989335][ T7569] tpg crop: (0,0)/320x240 [ 169.993729][ T7569] tpg compose: (0,0)/320x240 [ 170.016554][ T7569] tpg colorspace: 8 [ 170.036043][ T7569] tpg transfer function: 0/0 [ 170.075761][ T7569] tpg Y'CbCr encoding: 0/0 [ 170.097218][ T7569] tpg quantization: 0/0 [ 170.135763][ T7569] tpg RGB range: 0/2 [ 170.171299][ T7569] vivid-007: ================== END STATUS ================== [ 170.782500][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 171.252238][ T7604] FAULT_INJECTION: forcing a failure. [ 171.252238][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.317600][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 171.317638][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.317653][ T7604] Call Trace: [ 171.317662][ T7604] [ 171.317671][ T7604] dump_stack_lvl+0x100/0x190 [ 171.317718][ T7604] should_fail_ex.cold+0x5/0xa [ 171.317751][ T7604] _copy_to_user+0x32/0xd0 [ 171.317793][ T7604] rng_dev_read+0x223/0x910 [ 171.317824][ T7604] ? __pfx_virtio_read+0x10/0x10 [ 171.317857][ T7604] ? __pfx_rng_dev_read+0x10/0x10 [ 171.317892][ T7604] ? bpf_lsm_file_permission+0x9/0x10 [ 171.317919][ T7604] ? security_file_permission+0x76/0x210 [ 171.317957][ T7604] ? rw_verify_area+0xce/0x6d0 [ 171.317996][ T7604] ? __pfx_rng_dev_read+0x10/0x10 [ 171.318026][ T7604] vfs_read+0x1e4/0xb30 [ 171.318057][ T7604] ? __pfx_vfs_read+0x10/0x10 [ 171.318081][ T7604] ? find_held_lock+0x2b/0x80 [ 171.318108][ T7604] ? __fget_files+0x215/0x3d0 [ 171.318135][ T7604] ? __fget_files+0x215/0x3d0 [ 171.318168][ T7604] ? __fget_files+0x21f/0x3d0 [ 171.318206][ T7604] ksys_read+0x12a/0x250 [ 171.318232][ T7604] ? __pfx_ksys_read+0x10/0x10 [ 171.318269][ T7604] do_syscall_64+0x106/0xf80 [ 171.318297][ T7604] ? clear_bhb_loop+0x40/0x90 [ 171.318331][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.318358][ T7604] RIP: 0033:0x7f709ff9c819 [ 171.318386][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.318411][ T7604] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.318437][ T7604] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 171.318455][ T7604] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000003 [ 171.318471][ T7604] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 171.318487][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.318503][ T7604] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 171.318539][ T7604] [ 171.841754][ T7614] netlink: 334 bytes leftover after parsing attributes in process `syz.0.415'. [ 172.055388][ T7614] Invalid ELF header magic: != ELF [ 172.682689][ T7639] vivid-007: ================= START STATUS ================= [ 172.692309][ T7639] vivid-007: Generate PTS: true [ 172.697271][ T7639] vivid-007: Generate SCR: true [ 172.703199][ T7639] tpg source WxH: 320x240 (Y'CbCr) [ 172.708343][ T7639] tpg field: 1 [ 172.712233][ T7639] tpg crop: (0,0)/320x240 [ 172.717769][ T7639] tpg compose: (0,0)/320x240 [ 172.722126][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 172.722932][ T7639] tpg colorspace: 8 [ 172.735536][ T7639] tpg transfer function: 0/0 [ 172.769513][ T7639] tpg Y'CbCr encoding: 0/0 [ 172.789217][ T7639] tpg quantization: 0/0 [ 172.793439][ T7639] tpg RGB range: 0/2 [ 172.808919][ T7639] vivid-007: ================== END STATUS ================== [ 173.202599][ T30] audit: type=1800 audit(1775530479.894:9): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.423" name="discovery_nqn" dev="configfs" ino=15931 res=0 errno=0 [ 174.344818][ T30] audit: type=1804 audit(1775530481.024:10): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.428" name=2F6E6577726F6F742F39362F22050820 dev="tmpfs" ino=511 res=1 errno=0 [ 174.429399][ T30] audit: type=1800 audit(1775530481.024:11): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name=22050820 dev="tmpfs" ino=511 res=0 errno=0 [ 174.562124][ T7686] zswap: compressor not available [ 174.717277][ T7700] vivid-007: ================= START STATUS ================= [ 174.740702][ T7700] vivid-007: Generate PTS: true [ 174.745648][ T7700] vivid-007: Generate SCR: true [ 174.758949][ T7700] tpg source WxH: 320x240 (Y'CbCr) [ 174.768852][ T7700] tpg field: 1 [ 174.778900][ T7700] tpg crop: (0,0)/320x240 [ 174.783294][ T7700] tpg compose: (0,0)/320x240 [ 174.787907][ T7700] tpg colorspace: 8 [ 174.801828][ T7704] netlink: 334 bytes leftover after parsing attributes in process `syz.0.432'. [ 174.811149][ T7700] tpg transfer function: 0/0 [ 174.811170][ T7700] tpg Y'CbCr encoding: 0/0 [ 174.811184][ T7700] tpg quantization: 0/0 [ 174.811198][ T7700] tpg RGB range: 0/2 [ 174.811212][ T7700] vivid-007: ================== END STATUS ================== [ 175.109944][ T7704] Invalid ELF header magic: != ELF [ 176.311092][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 176.388202][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 177.115431][ T7759] vivid-007: ================= START STATUS ================= [ 177.127505][ T7759] vivid-007: Generate PTS: true [ 177.144569][ T7759] vivid-007: Generate SCR: true [ 177.150191][ T7759] tpg source WxH: 320x240 (Y'CbCr) [ 177.157264][ T7759] tpg field: 1 [ 177.161986][ T7759] tpg crop: (0,0)/320x240 [ 177.166364][ T7759] tpg compose: (0,0)/320x240 [ 177.172195][ T7759] tpg colorspace: 8 [ 177.176028][ T7759] tpg transfer function: 0/0 [ 177.185910][ T7759] tpg Y'CbCr encoding: 0/0 [ 177.201811][ T7759] tpg quantization: 0/0 [ 177.206350][ T7759] tpg RGB range: 0/2 [ 177.223579][ T7759] vivid-007: ================== END STATUS ================== [ 177.236238][ T7766] netlink: 334 bytes leftover after parsing attributes in process `syz.0.444'. [ 177.276910][ T7758] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 177.367742][ T7771] netlink: 334 bytes leftover after parsing attributes in process `syz.3.445'. [ 177.580616][ T7776] Invalid ELF header magic: != ELF [ 177.656643][ T7774] Invalid ELF header magic: != ELF [ 179.149231][ T7799] netlink: 'syz.2.452': attribute type 2 has an invalid length. [ 179.156951][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 179.220515][ T7804] vivid-007: ================= START STATUS ================= [ 179.228407][ T7804] vivid-007: Generate PTS: true [ 179.233855][ T7804] vivid-007: Generate SCR: true [ 179.239192][ T7804] tpg source WxH: 320x240 (Y'CbCr) [ 179.244426][ T7804] tpg field: 1 [ 179.247870][ T7804] tpg crop: (0,0)/320x240 [ 179.252857][ T7804] tpg compose: (0,0)/320x240 [ 179.257549][ T7804] tpg colorspace: 8 [ 179.261850][ T7804] tpg transfer function: 0/0 [ 179.267648][ T7804] tpg Y'CbCr encoding: 0/0 [ 179.549777][ T7804] tpg quantization: 0/0 [ 179.553983][ T7804] tpg RGB range: 0/2 [ 179.589813][ T7804] vivid-007: ================== END STATUS ================== [ 179.838933][ T7812] sp0: Synchronizing with TNC [ 179.960310][ T7815] netlink: 334 bytes leftover after parsing attributes in process `syz.0.456'. [ 180.231446][ T7818] Invalid ELF header magic: != ELF [ 180.949397][ T7840] FAULT_INJECTION: forcing a failure. [ 180.949397][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.033420][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.0.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.033460][ T7840] Tainted: [L]=SOFTLOCKUP [ 181.033465][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.033474][ T7840] Call Trace: [ 181.033479][ T7840] [ 181.033490][ T7840] dump_stack_lvl+0x100/0x190 [ 181.033517][ T7840] should_fail_ex.cold+0x5/0xa [ 181.033535][ T7840] _copy_to_user+0x32/0xd0 [ 181.033555][ T7840] cpuid_read+0x1d9/0x360 [ 181.033577][ T7840] ? __pfx_cpuid_read+0x10/0x10 [ 181.033595][ T7840] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 181.033613][ T7840] ? __pfx___might_resched+0x10/0x10 [ 181.033641][ T7840] ? apparmor_file_permission+0x13f/0x1c0 [ 181.033661][ T7840] ? bpf_lsm_file_permission+0x9/0x10 [ 181.033675][ T7840] ? security_file_permission+0x76/0x210 [ 181.033695][ T7840] ? rw_verify_area+0xce/0x6d0 [ 181.033717][ T7840] ? __pfx_cpuid_read+0x10/0x10 [ 181.033734][ T7840] vfs_readv+0x5d8/0x8d0 [ 181.033761][ T7840] ? __pfx_vfs_readv+0x10/0x10 [ 181.033784][ T7840] ? find_held_lock+0x2b/0x80 [ 181.033810][ T7840] ? __fget_files+0x21f/0x3d0 [ 181.033829][ T7840] ? do_readv+0x13e/0x340 [ 181.033850][ T7840] do_readv+0x13e/0x340 [ 181.033872][ T7840] ? __pfx_do_readv+0x10/0x10 [ 181.033899][ T7840] do_syscall_64+0x106/0xf80 [ 181.033914][ T7840] ? clear_bhb_loop+0x40/0x90 [ 181.033932][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.033946][ T7840] RIP: 0033:0x7f709ff9c819 [ 181.033958][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.033972][ T7840] RSP: 002b:00007f70a0de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 181.033986][ T7840] RAX: ffffffffffffffda RBX: 00007f70a0215fa0 RCX: 00007f709ff9c819 [ 181.033995][ T7840] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000003 [ 181.034004][ T7840] RBP: 00007f70a0de4090 R08: 0000000000000000 R09: 0000000000000000 [ 181.034012][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.034020][ T7840] R13: 00007f70a0216038 R14: 00007f70a0215fa0 R15: 00007ffc7cff7538 [ 181.034038][ T7840] [ 181.643583][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 181.654046][ T7854] ubi0: attaching mtd0 [ 181.720080][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.740968][ T7854] ubi0: scanning is finished [ 181.745627][ T7854] ubi0: empty MTD device detected [ 181.774016][ T7838] bridge_slave_1 (unregistering): left allmulticast mode [ 181.782966][ T7838] bridge_slave_1 (unregistering): left promiscuous mode [ 181.829208][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.274632][ T7854] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 182.346066][ T7854] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 182.387764][ T7854] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 182.416750][ T7854] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 182.452100][ T7854] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 182.474585][ T7854] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 182.498876][ T7854] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2824334973 [ 182.527614][ T7854] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 182.559348][ T7870] ubi0: background thread "ubi_bgt0d" started, PID 7870 [ 182.572024][ T7856] ubi0: detaching mtd0 [ 182.609171][ T7856] ubi0: mtd0 is detached [ 182.807512][ T7878] openvswitch: netlink: Message has 478 unknown bytes. [ 183.427616][ T7880] ima: policy update failed [ 183.449277][ T30] audit: type=1802 audit(1775530490.144:12): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.475" res=0 errno=0 [ 184.020415][ T7897] vivid-007: ================= START STATUS ================= [ 184.034025][ T7897] vivid-007: Generate PTS: true [ 184.044145][ T7897] vivid-007: Generate SCR: true [ 184.054260][ T7897] tpg source WxH: 320x240 (Y'CbCr) [ 184.059619][ T7897] tpg field: 1 [ 184.063011][ T7897] tpg crop: (0,0)/320x240 [ 184.078207][ T7897] tpg compose: (0,0)/320x240 [ 184.089046][ T7897] tpg colorspace: 8 [ 184.092903][ T7897] tpg transfer function: 0/0 [ 184.097507][ T7897] tpg Y'CbCr encoding: 0/0 [ 184.120639][ T7897] tpg quantization: 0/0 [ 184.124903][ T7897] tpg RGB range: 0/2 [ 184.128988][ T7897] vivid-007: ================== END STATUS ================== [ 184.870540][ T7910] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 184.921721][ T7910] netlink: 9 bytes leftover after parsing attributes in process `syz.3.484'. [ 185.203106][ T7914] netlink: 334 bytes leftover after parsing attributes in process `syz.0.486'. [ 185.332914][ T7921] FAULT_INJECTION: forcing a failure. [ 185.332914][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 185.361997][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.362044][ T7921] Tainted: [L]=SOFTLOCKUP [ 185.362055][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.362072][ T7921] Call Trace: [ 185.362081][ T7921] [ 185.362094][ T7921] dump_stack_lvl+0x100/0x190 [ 185.362147][ T7921] should_fail_ex.cold+0x5/0xa [ 185.362184][ T7921] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.362227][ T7921] should_failslab+0xc2/0x120 [ 185.362261][ T7921] __kmalloc_noprof+0xe0/0x850 [ 185.362310][ T7921] tomoyo_realpath_from_path+0xb6/0x690 [ 185.362361][ T7921] tomoyo_check_open_permission+0x2af/0x3c0 [ 185.362401][ T7921] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 185.362476][ T7921] ? do_raw_spin_lock+0x128/0x260 [ 185.362523][ T7921] ? path_get+0x61/0x80 [ 185.362562][ T7921] tomoyo_file_open+0x6b/0x90 [ 185.362593][ T7921] security_file_open+0xb5/0x1e0 [ 185.362634][ T7921] do_dentry_open+0x5aa/0x1660 [ 185.362668][ T7921] ? security_inode_permission+0xbf/0x250 [ 185.362711][ T7921] vfs_open+0x82/0x3f0 [ 185.362752][ T7921] path_openat+0x208c/0x31a0 [ 185.362798][ T7921] ? __pfx_path_openat+0x10/0x10 [ 185.362844][ T7921] do_file_open+0x20e/0x430 [ 185.362880][ T7921] ? __pfx_do_file_open+0x10/0x10 [ 185.362940][ T7921] ? alloc_fd+0x476/0x790 [ 185.362976][ T7921] ? do_getname+0x191/0x390 [ 185.363026][ T7921] do_sys_openat2+0x10d/0x1e0 [ 185.363067][ T7921] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.363123][ T7921] __x64_sys_openat+0x12d/0x210 [ 185.363166][ T7921] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.363222][ T7921] do_syscall_64+0x106/0xf80 [ 185.363253][ T7921] ? clear_bhb_loop+0x40/0x90 [ 185.363290][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.363321][ T7921] RIP: 0033:0x7f733019c819 [ 185.363346][ T7921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.363373][ T7921] RSP: 002b:00007f732e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.363401][ T7921] RAX: ffffffffffffffda RBX: 00007f7330415fa0 RCX: 00007f733019c819 [ 185.363421][ T7921] RDX: 0000000000000000 RSI: 0000200000002b40 RDI: ffffffffffffff9c [ 185.363440][ T7921] RBP: 00007f7330232c91 R08: 0000000000000000 R09: 0000000000000000 [ 185.363458][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.363476][ T7921] R13: 00007f7330416038 R14: 00007f7330415fa0 R15: 00007ffe037e8a98 [ 185.363515][ T7921] [ 185.363529][ T7921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.540259][ T7924] Invalid ELF header magic: != ELF [ 186.260844][ T7935] netlink: 186 bytes leftover after parsing attributes in process `syz.1.491'. [ 186.874678][ T7944] netlink: 206 bytes leftover after parsing attributes in process `syz.0.492'. [ 187.055490][ T7948] FAULT_INJECTION: forcing a failure. [ 187.055490][ T7948] name failslab, interval 1, probability 0, space 0, times 0 [ 187.076675][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.1.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.076721][ T7948] Tainted: [L]=SOFTLOCKUP [ 187.076731][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.076748][ T7948] Call Trace: [ 187.076757][ T7948] [ 187.076768][ T7948] dump_stack_lvl+0x100/0x190 [ 187.076819][ T7948] should_fail_ex.cold+0x5/0xa [ 187.076861][ T7948] ? lsm_blob_alloc+0x68/0x90 [ 187.076905][ T7948] should_failslab+0xc2/0x120 [ 187.076937][ T7948] __kmalloc_noprof+0xe0/0x850 [ 187.076981][ T7948] ? trace_kmem_cache_alloc+0xf3/0x120 [ 187.077020][ T7948] lsm_blob_alloc+0x68/0x90 [ 187.077064][ T7948] security_sk_alloc+0x2d/0x290 [ 187.077097][ T7948] sk_prot_alloc+0x1d1/0x2a0 [ 187.077135][ T7948] sk_alloc+0x36/0xe80 [ 187.077180][ T7948] tipc_sk_create+0xf9/0x2420 [ 187.077231][ T7948] ? find_held_lock+0x2b/0x80 [ 187.077258][ T7948] ? __sock_create+0x2f3/0x860 [ 187.077293][ T7948] ? __sock_create+0x2f3/0x860 [ 187.077335][ T7948] __sock_create+0x339/0x860 [ 187.077378][ T7948] __sys_socket+0x14d/0x260 [ 187.077417][ T7948] ? __pfx___sys_socket+0x10/0x10 [ 187.077464][ T7948] __x64_sys_socket+0x72/0xb0 [ 187.077497][ T7948] ? lockdep_hardirqs_on+0x78/0x100 [ 187.077528][ T7948] do_syscall_64+0x106/0xf80 [ 187.077557][ T7948] ? clear_bhb_loop+0x40/0x90 [ 187.077592][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.077622][ T7948] RIP: 0033:0x7f7ffa79c819 [ 187.077645][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.077672][ T7948] RSP: 002b:00007f7ff89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 187.077700][ T7948] RAX: ffffffffffffffda RBX: 00007f7ffaa16090 RCX: 00007f7ffa79c819 [ 187.077719][ T7948] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 187.077735][ T7948] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 187.077752][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.077769][ T7948] R13: 00007f7ffaa16128 R14: 00007f7ffaa16090 R15: 00007ffc111caca8 [ 187.077807][ T7948] [ 188.071006][ T7964] netlink: 334 bytes leftover after parsing attributes in process `syz.1.499'. [ 188.239746][ T7970] Invalid ELF header magic: != ELF [ 188.938218][ T7967] Invalid ELF header magic: != ELF [ 189.321187][ T30] audit: type=1800 audit(1775530496.014:13): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.502" name="discovery_nqn" dev="configfs" ino=19384 res=0 errno=0 [ 189.787450][ T7985] netlink: 334 bytes leftover after parsing attributes in process `syz.0.505'. [ 189.963308][ T7989] Invalid ELF header magic: != ELF [ 190.271259][ T7995] netlink: 334 bytes leftover after parsing attributes in process `syz.1.507'. [ 190.419080][ T7995] Invalid ELF header magic: != ELF [ 190.823798][ T8010] netlink: 334 bytes leftover after parsing attributes in process `syz.0.511'. [ 191.068053][ T8010] Invalid ELF header magic: != ELF [ 192.014756][ T8023] netlink: 334 bytes leftover after parsing attributes in process `syz.0.513'. [ 192.107745][ T8025] netlink: 334 bytes leftover after parsing attributes in process `syz.1.514'. [ 192.483665][ T8028] Invalid ELF header magic: != ELF [ 192.647463][ T8034] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[8034] [ 193.123512][ T8041] netlink: 206 bytes leftover after parsing attributes in process `syz.1.519'. [ 193.184812][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 193.280589][ T8047] ================================================================== [ 193.280611][ T8047] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 193.280664][ T8047] Write of size 8 at addr ffffc90004789480 by task syz.1.519/8047 [ 193.280688][ T8047] [ 193.280703][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.1.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.280744][ T8047] Tainted: [L]=SOFTLOCKUP [ 193.280754][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.280771][ T8047] Call Trace: [ 193.280780][ T8047] [ 193.280790][ T8047] dump_stack_lvl+0x100/0x190 [ 193.280841][ T8047] print_report+0x156/0x4c9 [ 193.280880][ T8047] ? _raw_spin_lock_irqsave+0x52/0x60 [ 193.280927][ T8047] ? sys_imageblit+0x19fb/0x1d60 [ 193.280970][ T8047] kasan_report+0xdf/0x1e0 [ 193.281002][ T8047] ? sys_imageblit+0x19fb/0x1d60 [ 193.281048][ T8047] sys_imageblit+0x19fb/0x1d60 [ 193.281095][ T8047] ? __pfx_sys_imageblit+0x10/0x10 [ 193.281139][ T8047] ? prb_read_valid+0x78/0xa0 [ 193.281176][ T8047] ? __pfx_prb_read_valid+0x10/0x10 [ 193.281216][ T8047] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 193.281251][ T8047] soft_cursor+0x524/0xa10 [ 193.281290][ T8047] ? fb_get_color_depth+0x120/0x250 [ 193.281323][ T8047] bit_cursor+0xe58/0x16f0 [ 193.281362][ T8047] ? __pfx_bit_cursor+0x10/0x10 [ 193.281397][ T8047] ? __lock_acquire+0x4a5/0x2630 [ 193.281438][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.281467][ T8047] ? get_color+0x1da/0x450 [ 193.281494][ T8047] ? __pfx_bit_cursor+0x10/0x10 [ 193.281526][ T8047] fbcon_cursor+0x43c/0x5e0 [ 193.281558][ T8047] ? add_softcursor+0x180/0x290 [ 193.281598][ T8047] set_cursor+0x1db/0x250 [ 193.281635][ T8047] con_write+0x89/0xb0 [ 193.281661][ T8047] n_tty_write+0x44f/0x12d0 [ 193.281701][ T8047] ? __pfx_n_tty_write+0x10/0x10 [ 193.281733][ T8047] ? trace_kmalloc+0x101/0x130 [ 193.281765][ T8047] ? __pfx_woken_wake_function+0x10/0x10 [ 193.281808][ T8047] ? rcu_is_watching+0x12/0xc0 [ 193.281859][ T8047] ? file_tty_write.isra.0+0x694/0x890 [ 193.281903][ T8047] ? kfree+0x2ec/0x6b0 [ 193.281939][ T8047] ? __pfx_n_tty_write+0x10/0x10 [ 193.281973][ T8047] file_tty_write.isra.0+0x4d2/0x890 [ 193.282021][ T8047] redirected_tty_write+0xd4/0x120 [ 193.282064][ T8047] vfs_write+0x6ac/0x1070 [ 193.282092][ T8047] ? __pfx_redirected_tty_write+0x10/0x10 [ 193.282139][ T8047] ? __pfx_vfs_write+0x10/0x10 [ 193.282164][ T8047] ? find_held_lock+0x2b/0x80 [ 193.282202][ T8047] ksys_write+0x12a/0x250 [ 193.282228][ T8047] ? __pfx_ksys_write+0x10/0x10 [ 193.282260][ T8047] do_syscall_64+0x106/0xf80 [ 193.282289][ T8047] ? clear_bhb_loop+0x40/0x90 [ 193.282321][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.282350][ T8047] RIP: 0033:0x7f7ffa79c819 [ 193.282372][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.282399][ T8047] RSP: 002b:00007f7ff89d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.282427][ T8047] RAX: ffffffffffffffda RBX: 00007f7ffaa16180 RCX: 00007f7ffa79c819 [ 193.282447][ T8047] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 193.282465][ T8047] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 193.282483][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.282499][ T8047] R13: 00007f7ffaa16218 R14: 00007f7ffaa16180 R15: 00007ffc111caca8 [ 193.282527][ T8047] [ 193.282537][ T8047] [ 193.282544][ T8047] The buggy address belongs to a vmalloc virtual mapping [ 193.282564][ T8047] Memory state around the buggy address: [ 193.282578][ T8047] ffffc90004789380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.282607][ T8047] ffffc90004789400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.282628][ T8047] >ffffc90004789480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.282643][ T8047] ^ [ 193.282658][ T8047] ffffc90004789500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.282677][ T8047] ffffc90004789580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.282693][ T8047] ================================================================== [ 193.282709][ T8047] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.282730][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.1.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.282772][ T8047] Tainted: [L]=SOFTLOCKUP [ 193.282782][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.282799][ T8047] Call Trace: [ 193.282807][ T8047] [ 193.282825][ T8047] dump_stack_lvl+0x100/0x190 [ 193.282865][ T8047] vpanic+0x552/0x970 [ 193.282891][ T8047] ? __pfx_vpanic+0x10/0x10 [ 193.282926][ T8047] ? __pfx_vprintk_emit+0x10/0x10 [ 193.282959][ T8047] ? sys_imageblit+0x19fb/0x1d60 [ 193.283002][ T8047] panic+0xd1/0xe0 [ 193.283027][ T8047] ? __pfx_panic+0x10/0x10 [ 193.283057][ T8047] ? sys_imageblit+0x19fb/0x1d60 [ 193.283101][ T8047] check_panic_on_warn.cold+0x19/0x34 [ 193.283132][ T8047] end_report.part.0+0x3a/0x90 [ 193.283171][ T8047] kasan_report.cold+0xe/0x18 [ 193.283210][ T8047] ? sys_imageblit+0x19fb/0x1d60 [ 193.283257][ T8047] sys_imageblit+0x19fb/0x1d60 [ 193.283305][ T8047] ? __pfx_sys_imageblit+0x10/0x10 [ 193.283350][ T8047] ? prb_read_valid+0x78/0xa0 [ 193.283388][ T8047] ? __pfx_prb_read_valid+0x10/0x10 [ 193.283430][ T8047] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 193.283465][ T8047] soft_cursor+0x524/0xa10 [ 193.283505][ T8047] ? fb_get_color_depth+0x120/0x250 [ 193.283541][ T8047] bit_cursor+0xe58/0x16f0 [ 193.283580][ T8047] ? __pfx_bit_cursor+0x10/0x10 [ 193.283613][ T8047] ? __lock_acquire+0x4a5/0x2630 [ 193.283652][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.283681][ T8047] ? get_color+0x1da/0x450 [ 193.283709][ T8047] ? __pfx_bit_cursor+0x10/0x10 [ 193.283743][ T8047] fbcon_cursor+0x43c/0x5e0 [ 193.283775][ T8047] ? add_softcursor+0x180/0x290 [ 193.283822][ T8047] set_cursor+0x1db/0x250 [ 193.283861][ T8047] con_write+0x89/0xb0 [ 193.283888][ T8047] n_tty_write+0x44f/0x12d0 [ 193.283928][ T8047] ? __pfx_n_tty_write+0x10/0x10 [ 193.283961][ T8047] ? trace_kmalloc+0x101/0x130 [ 193.283991][ T8047] ? __pfx_woken_wake_function+0x10/0x10 [ 193.284030][ T8047] ? rcu_is_watching+0x12/0xc0 [ 193.284072][ T8047] ? file_tty_write.isra.0+0x694/0x890 [ 193.284115][ T8047] ? kfree+0x2ec/0x6b0 [ 193.284152][ T8047] ? __pfx_n_tty_write+0x10/0x10 [ 193.284186][ T8047] file_tty_write.isra.0+0x4d2/0x890 [ 193.284234][ T8047] redirected_tty_write+0xd4/0x120 [ 193.284279][ T8047] vfs_write+0x6ac/0x1070 [ 193.284307][ T8047] ? __pfx_redirected_tty_write+0x10/0x10 [ 193.284354][ T8047] ? __pfx_vfs_write+0x10/0x10 [ 193.284380][ T8047] ? find_held_lock+0x2b/0x80 [ 193.284419][ T8047] ksys_write+0x12a/0x250 [ 193.284446][ T8047] ? __pfx_ksys_write+0x10/0x10 [ 193.284479][ T8047] do_syscall_64+0x106/0xf80 [ 193.284508][ T8047] ? clear_bhb_loop+0x40/0x90 [ 193.284540][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.284569][ T8047] RIP: 0033:0x7f7ffa79c819 [ 193.284591][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.284619][ T8047] RSP: 002b:00007f7ff89d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.284647][ T8047] RAX: ffffffffffffffda RBX: 00007f7ffaa16180 RCX: 00007f7ffa79c819 [ 193.284666][ T8047] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 193.284685][ T8047] RBP: 00007f7ffa832c91 R08: 0000000000000000 R09: 0000000000000000 [ 193.284703][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.284720][ T8047] R13: 00007f7ffaa16218 R14: 00007f7ffaa16180 R15: 00007ffc111caca8 [ 193.284749][ T8047] [ 193.285121][ T8047] Kernel Offset: disabled