last executing test programs: 11.368808348s ago: executing program 2 (id=768): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) read$auto_zero_fops_mem(r0, &(0x7f00000002c0)=""/159, 0x9f) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x800007, 0x4, @raw=0x3, @integer64={0x7, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x101, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x20aaf, 0x8c4b, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x393302, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) ioctl$auto(r5, 0x3b8e, r4) writev$auto(0x3, 0x0, 0x3) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={"7e34b9a2d1d974f8374bca86c0f062e23823e511b3a1a4672caf47f2a69246bf", 0x33, 0x9, 0x4, 0x4, 0x7, 0xffffffffffffffff}) fcntl$auto(r3, 0x3, r6) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/mountinfo\x00', 0x802, 0x0) unshare$auto(0x40000080) 10.67651529s ago: executing program 2 (id=774): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r2, &(0x7f0000000100)='\xcb%)\x00', 0x7) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rmdir$auto(0x0) madvise$auto(0x0, 0x2003f2, 0x15) msgsnd$auto(0x0, &(0x7f0000000080)={0x6, 0x2}, 0xf, 0xc45) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r4) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000280)={{0x9, 0x0, 0x0, 0x8, 0x0, 0xbdd, 0x3}, &(0x7f00000001c0)=0x18, &(0x7f0000000240)=0xa, 0x3ff, 0x4, 0x100000001, 0x2, 0x9, 0x0, 0x1, 0x1, @raw=0xe2, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendfile$auto(r3, r4, 0x0, 0x7fffeffc) write$auto_proc_mem_operations_base(r3, &(0x7f0000000680)="723e46a4f0a6da9e54be2de02586a2d941ee4d9b483663760e7c2b8f1d2322ab69ae76e21f0dc03726d57243ea87ffdb173e3cecb179a8431e1db3f1e29408f199e6a3da7153f3b85e0732897887d9560825b95ece5aa300cdc2f9c1dbc90d5b7ac5706a72b2965e935f34d34f2b9a44f271991070b34e3c5f6fb6292c9591c280fa8417d318f53e7c73e485e816b820d91dedad9d8ece3c4f0482ca1c8bf2875e83e8fd5e2ea2e7ccdbaf8ae304ccf83fb4a421b4b2d7787fca1069d1ae92507e85fcc351ac9bb7b3c900f0ab4d3a801f63128132c9ded8c50fb3883b989a3d7cbfd122eba3c2273420f9b30cbbd6e1344ec407", 0xf4) 8.194118238s ago: executing program 0 (id=780): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000003, 0x0, 0x7, 0x0, 0x7, 0x201d55}, 0x2}, 0x800, 0x80000000) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = socket(0x2, 0x3, 0xa) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) pread64$auto(r0, 0x0, 0x7, 0xffff) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r4 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r4, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x6000, 0x0, 0x1}, 0x20008800) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfbed}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x790a}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0xc7}, @ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x10) accept4$auto(r6, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000180)=0x80000000, 0x1b) 7.875783027s ago: executing program 0 (id=781): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) read$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) sendto$auto(0x3, 0x0, 0x2, 0xf035, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) socket(0x22, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) 7.128735502s ago: executing program 1 (id=782): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) read$auto(r0, &(0x7f0000000000)=']-#:-.:\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) r2 = memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x400000000000, 0x100003, 0x4000008, 0x800000000c812, r2, 0x0) ftruncate$auto(0x3, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x5c0d0) close_range$auto(r3, 0x8, 0x0) fcntl$auto(0x0, 0x402, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) 6.521220482s ago: executing program 2 (id=783): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1e, 0x101}, 0x6}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)=@bpf_attr_1={r0, 0x4, @value=0x7fffffff, 0xdf09}, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000091b64cd46ac112a0cd12e33b02db586f1b3a914e23ca05006c0278197ec83a35449cebc3a463e840b42a2bebdfb6a2ea406a05adca8219b0a25f33545d74cf6bc2203dbd6ad8be75f5d023a9aa0d4431627c68b737ff9a516ab8273eb696faa6ff5bbbc54d5034b30cf15eac95f9988ac8bcc002646afeb684c21cd8c592c2770377300ff8d6c7d30c871d6ecf718585c5a68f28666c0412287e", @ANYBLOB="e582017c725d42ccbe1854da158b0fe165382f0a76f4680c2c5af1b0071e0a5a41ddde05ec45fecfeff575a1c42c6405fe56c79f2083b7b191e68edeaa7703fdcf228b91cf380b0f5879050ac4", @ANYBLOB="01002dbd7000ffdbdf256d00000004002a00", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\r\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="340024006101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b520400b9800400988004002e80040005800000000004000501b00300800500e400ca0000000500600003000000990380001dbd02333826aaeee345411d713736fbc5e1ee59b910ef905daaa0836f30fbe3180da877c69c685a9280e3f18db436a963367d119d505b768d96ad1b25a7d0cbc3f7a3381288ffc552e353b6726fc15056f1560a67a4d81b0e67c4bf5ba5874c905165f23d0eef526de223c18db472a8e1e3df21686b5a000223d03e864c669c11b3a476b8636aad88640f4b7dde01fbb8ec2a58e7125844e0560cab5e30865bff8d66c391eaefadd60370b715a243a695092b33fcfd83bc99712efe217bb2c8bb4f9e8f40be3e23b3f8c933fe3447d6e6368d568f4af2acb9b78ebd5aa3474df5f6d2417ff0fb0bf574f7467c15d5211da6e79fb61ccd86e2ed4dd0e9bccbd0191aa9a76d7a166ff61cfc1f513f9cef130e126fc600712f5c3695e05c1f30a8a4725b64f1ecca6a26d9905b60260ed8510dc84dabc8dbe3f42164515faea27d130fad1f7c7452aec31ce16739ec01fb04e7d75151ee04d2a5de4cb25db99f1c87f1848aaea9f1d6facb2b7639d6b1b8bae73a8df856a5ec2cbbc674914539eb4775c8a2a7aa06dad0084469864ddcffa49ce3cfe3991ad243a9ba5732a860f203974c8b59d4e7724a195244e7bbd62bad310ac1aa15fe6db7e593da65eced956a393668df3e46384e72c9cf075d905ba5c6a20580fe67223ea7a20399eb8d4e8658530a76baac02e9f9cc16074077290c425af82a6226cac591fb6362da962ad68553ba74d966e9d927c0534394d2a561c21e2704b6d4b756b98e546c7eefe4e8a53f5b13dd9697b0d3ea18e49c3069a34b7563dcf041c8d9cdc91f048c2875278bcba8995021455ef98d12ae5bb0e913be5d44b39cc15a01502d4773efbd1fb8061a1077fbdde717e7fbbeea93b464fe764a3e9a9e394f809a4e9aa635bacac6625f012a60b1386d10ac5429c7ef9d21c58765f2022193717d2369105618a0f747d4f658e35e6db597602cc6f3f9b6e45aa2b42f32f0f6da0ed8aeea6e08677c132348cf99686b4fdaa7208ed794ce794a5b9ed33a3e495b1fb04f1b6df9a20f4a3d5b68ebabef874ef31fe19ae7463ab1b13a1ccefe8d59f5a52a478d9c76b77305ece3190ffcce35491005a5812c3402b84fb7f796005a0826e1cff55c8ef5ff525ee642da87af1fed8c88b354d51a75fccfa605894f4f3e9144bc2be92560768df554d7fb363dd0134634d9ae461b0e2b82c566d70432abc977cf792bca04bd65cabeca0bb777fd707f8610dfd12dcb76e111e82a391dadc757de1b3c59d759da3c2b6408602811f6afc1b50d0cd78fb00aca0000008c0200800600b300100000001e0094005cb5034c024abde6661081a869e4515d2108eac2058412849b2700000d001300869527164f3966c8c30000004e027f00a089369cf76d9d3ef21920f482bdef9941a525c8428debde873c0b0f044149a6ac398de61db849a7c234af01e186c6e2620faffdf33bec666a6b988dfe30e47224d72d3e5f5102549804d35d4d65192f522286781602da2e6e7f7289530873491b5498853355f668bb6fb7577aa2c1c839347620cb0484cb6fc89f5c2b50b02bf2fe0c0ba21f8c8d22e56981938261710552dcfd76f4c7776c2689bea780da0d08c5abf30e85dfa54dbdb62c6c2de22df130fa3cea2a3497a238495beb4aa19ee7e41066b3b559c10a13989f9ba0b135dd9a594c13310a23a2df1021c244ccea48c035519acb0ef7f3a87eef9771898511a02b473e65ee25aeb8ca7c50adf3a6d46a78015665e4a1cba6df046a6d868c750a9a8db59864e513e9710352f07386fa6e6c18c1f87146813b6c3dfffa1b577f5a24fcee84355dcb0a03496a4dd6a18a829e8792c2b536c1093ed2cc488b042373f29a3701604c91f36dbe083dec67227104205f5d3c8bdfa99c4188e06268ee469b2621aa0c696ea752d0677771f6124a3a1ba2f7388784bf8097f22caab851d4ce026730148ce081cbac5c1a32815e91db90514b0f3d733ccc8f48f7cf189e4c81d6dd34e5553242118e28a36bb3413764d4ea304643c225fdb032ef7d4d685eb38a927eb91627d4d262ab5217afa55c216a2be45ed59984f0f84bfb6279b29f9e508df4a368d22fd3e3f8f8999b7bc062e0554b3c7ed6b983cfc0f607c408e06d44465911b385cf8024b54f1dd972d160acdfd220337e39ceceb9563c75d1b754d22942a0db2ad3998e46eabc21dc91dfbf24b1d3ecfde70000f4030080e7031f007ff11f0c3b11279b77e84a7851a5384b043893db0d231f7290b71348db1bea456c0066b63c7cd6988389a49e6fcfc8ea4ecd0e97f31788344dfa7c6601fa317cc5e54c16e989360ca495ed7a10f97d7db655a9f6bc5d0f036f83118565162b480c3c9600852963e9c64965fdaca4791824b6e868ab73ee4586f146fa9e96f54936816a8c6b4b835c62f8ea42352ba8c9fdbbf64fdd4a62f1711dadb64e8e272ef5c5c570ad28c42c618437d4f10ff35cacfdb3a6f4a0d10e4053cdce258c6b6b80686a35da791ab3a7ee6bbe122cc9738e37524b68cbaf9130134f509cee53eb44ac89b8ada06a0ece02db2b7adc3cec074d26bd14c0481151edd46195c71ac259c1ec0b931e58373b378b606565d1349491d10f1927c2e7880ee8952a00026777edeec3cbc0d8ab0511fbf342843b724f33abc57979db899f5eb296e981ff2860330e45e81fa10ee937983f72c34525f6f0d1a35fb4c34078e1352a5c5f21481ae95d63c660356cef5d38df6eb05efb7db91b1f77e56fe1454dff32c1f412c8389ad604c8ceca674c60f9ccd76fc06e5032f4223db9442dec15cc31409b52dbc41666a87c728817fa2dd037524e5cbc0d34157df1db2c425e2719566a8da64281e35e3e18e75a1d5087211c65d612ef88b130dc1a8324cfac51a27bf7ff125a1249de52551c7c3df7e3da37ec56e3258cdf021b999862e3824c672ff53d1c4e10895a9825c170eda4f87a3cdcd3c0d403caec5a8c69e3b001db23391c35ac2ea54924d52708b69daace046658f8df5f673e4f04f0fa941ff698c7688dd7cc8400c3c1d04079ca03587edb439cb5c0ff6c2cbd98552857f0b44a52251b45d86ddbb39ed646d734b560851d464e94aa2680adc56a86e5d3c52402a614fb58f5cbfbe370589c4e7ef26beaec6f018ade60964731c91b50031861c9c7fac708ec86549c48ddab74c6e8c3da90dd2abd1908316d0d23058b75f79b0bb2364e7d9769f9a3349ba755c4f28cc324c5fae3a6caf9694b09b1062de00f9782c0b25b204971f23d9c279de087c89693d7a79fc910150899bb9cb80dee5ba49a28c61384d8eb5150b0445ec4c367b920593fe89ac84bc3304f39f7d0b04171c69fc8473e413d6d00c6d3a61c8a9e6c993665e5a83a66f7958da0d79ae7b0fa1fa055abe3230bf1f7fda55b086222d1c34245c9c3d3d12781d690888b1cf02cdf700ab7781ac1593850b7ad6092283faada8bed796cffadc2b7fe08bfbcc3481a474750fc22136e71902b5f91d9d61ff6e89836ca44fea7a9e9d277d71d511e81d5f000b23e94a48c1ae8bd5eec4ff90839be0c60519afb44bdd6b529889b990eeab75a8719ac55ea47033165bfdae839b1a0a75841bebc252a43f12e4821c8c9682d710888e9c539e5ed4549f60a9b000600ab000400000006"], 0xd28}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r4, 0x5646, r4) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, r5, 0x7f) gettid() socket(0x10, 0x2, 0x0) brk$auto(0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x301341, 0x0) timer_gettime$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) 6.370405774s ago: executing program 1 (id=784): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x48030) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/rp_filter\x00', 0x141241, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x4000000, 0x61, 0x1800000000000010, 0xffffffffffffffff, 0x40000007ffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 5.957216025s ago: executing program 3 (id=785): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(&(0x7f0000000000)={r1}, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x80003, 0xff, 0x10001, 0x400000000003, 0x2, 0x8001, 0xffeffffffffffffe, 0x80000000, 0xffffffffffffffff, 0x66, 0x44]}, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r4) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="01002b000004000580000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x18c1, 0xfb, 0x1000000eb1, 0x401, 0x8000) mbind$auto(0x4, 0x2091d3, 0x4, 0x0, 0xa, 0x0) 5.315202932s ago: executing program 2 (id=786): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_SET(r1, 0x0, 0x24040080) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mkdir$auto(0x0, 0xffff) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) read$auto(r2, 0x0, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000380)={0x5, [0x53, 0xf, 0x659], [{0x7, 0xffffff01, 0x1, 0x1}, {0xab6, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x6}, {0x4, 0x10, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0x5, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}], 0x4, 0x9, 0x10, 0x9b1, 0x0, 0x1, 0x9, "3d60f1799d5517614cb5db232a171fe794feb32c6fa42fb100e50cfc95618db7f4466f2e7d6b4e383e01de0564711212835f5ea4b55685c9784003f654a77a10"}) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r4, 0x8, 0x400000000000006, 0x4) setresuid$auto(0x2, 0x7, 0x8080) inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x280, 0x0) 5.019317875s ago: executing program 1 (id=787): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x109480, 0x0) socket(0x10, 0x2, 0x2) socket(0xa, 0x801, 0x84) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) socket(0x2, 0x5, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 4.924835628s ago: executing program 3 (id=788): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x7, 0x3, 0x200, 0xba44, 0x3, 0xb, "e00026e8fdffdbcd2c02bac293faa80c2f5336d7352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0x15, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0xc, 0xbc, 0x3, 0x0, 0x6, 0x2) mmap$auto(0x2, 0x9, 0x3, 0x40000000000eb1, 0xfffffffffffffffa, 0x8000) acct$auto(0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x16906, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000080)={0xcc, 0x0, [{0xb23, 0x3}, {0x5980, 0xd7f3, 0x3}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff7fff, 0x17) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x108000, 0x800032, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28040010}, 0xc0) set_mempolicy$auto(0x2006, 0x0, 0x4) r3 = socket(0x17, 0x2, 0x2) setsockopt$auto(r3, 0x29, 0x0, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) setsockopt$auto_SO_WIFI_STATUS(r0, 0x3, 0x29, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x7) read$auto(r1, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) 4.753923126s ago: executing program 1 (id=789): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) 4.730261376s ago: executing program 2 (id=790): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r4, &(0x7f00000000c0)="cd55e6559904f6699d615b0ad7297a1d6479873f1f2c3fd41c4b6c497c37747fb4130b7c72ddd96ef23afbb5bfea71023da7d55508b54b7f44d07f9a5584e98424639a884d8a801664a6863f7f4349a5b4e6d583cffe1683379deeffa3b5e3359792c07c83c135b9f3", 0x69) 4.602666233s ago: executing program 0 (id=791): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon29\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x20004005) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xc86, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x7]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0x58) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) socket$nl_generic(0x10, 0x3, 0x10) 3.997042684s ago: executing program 1 (id=792): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r2, &(0x7f0000000100)='\xcb%)\x00', 0x7) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rmdir$auto(0x0) madvise$auto(0x0, 0x2003f2, 0x15) msgsnd$auto(0x0, &(0x7f0000000080)={0x6, 0x2}, 0xf, 0xc45) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r4) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000280)={{0x9, 0x0, 0x0, 0x8, 0x0, 0xbdd, 0x3}, &(0x7f00000001c0)=0x18, &(0x7f0000000240)=0xa, 0x3ff, 0x4, 0x100000001, 0x2, 0x9, 0x0, 0x1, 0x1, @raw=0xe2, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendfile$auto(r3, r4, 0x0, 0x7fffeffc) write$auto_proc_mem_operations_base(r3, &(0x7f0000000680)="723e46a4f0a6da9e54be2de02586a2d941ee4d9b483663760e7c2b8f1d2322ab69ae76e21f0dc03726d57243ea87ffdb173e3cecb179a8431e1db3f1e29408f199e6a3da7153f3b85e0732897887d9560825b95ece5aa300cdc2f9c1dbc90d5b7ac5706a72b2965e935f34d34f2b9a44f271991070b34e3c5f6fb6292c9591c280fa8417d318f53e7c73e485e816b820d91dedad9d8ece3c4f0482ca1c8bf2875e83e8fd5e2ea2e7ccdbaf8ae304ccf83fb4a421b4b2d7787fca1069d1ae92507e85fcc351ac9bb7b3c900f0ab4d3a801f63128132c9ded8c50fb3883b989a3d7cbfd122eba3c2273420f9b30cbbd6e1344ec407", 0xf4) 3.61362651s ago: executing program 3 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyx9\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dm_mod/parameters/reserved_rq_based_ios\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r1) r4 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r4, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x20006, 0x4000000000f0, 0xeb1, 0x401, 0x8003) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x9, 0x2000000000020009, 0x4000000020df, 0xeb1, 0x401, 0x100000008000) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) write$auto(0x3, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x28480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe8282, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x101901, 0x0) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x78) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r6, r5, 0x0, 0x1003f) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) 2.932261985s ago: executing program 0 (id=794): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfbe}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x10000007, 0x4008) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0) capset$auto(0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x3, 0xb4, @raw}}) r2 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x10) write$auto(r2, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/ip_vti0/arp_announce\x00', 0xa0202, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r4, 0x80004508, r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(r2, &(0x7f0000000000)={0x0, 0x100010001}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) 2.725487048s ago: executing program 3 (id=795): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) sendto$auto(r5, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)="998399c06d692d") r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$auto(r7, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) 2.32779397s ago: executing program 2 (id=796): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r2, &(0x7f00000002c0)=""/190, 0xfffffe39) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 1.543708081s ago: executing program 3 (id=797): mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xd, &(0x7f0000000200)={[0x6, 0x400000b, 0x3, 0x3, 0x2, 0x0, 0x7, 0x9, 0x8000000000000001, 0xffffffffffffef73, 0x8001, 0xfffffffffffffffe, 0xc, 0xc, 0x7, 0x7]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x10000000000df, 0x13, 0x401, 0x8000) futex$auto(&(0x7f0000000000)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0x20006, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x153) writev$auto(0xffffffffffffffff, 0x0, 0x2) move_pages$auto(0x1, 0x5, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r1 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x9) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x6, 0x10001]) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) execve$auto(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x424404, 0x0) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, r2, 0x5) inotify_init1$auto(0x3000000000000) socket(0x11, 0x3, 0x2) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x20000003, 0x5, 0x100000001, 0xd, 0xfffffffffffffffc, 0x100000000, 0x2c2, 0x800002017d, 0x6, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x1c, 0x2]}, 0x0, 0x0) unshare$auto(0x40000080) 1.006076309s ago: executing program 0 (id=798): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000840)={@raw=0x401, "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"}) sendmmsg$auto(r0, 0x0, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) accept4$auto(r0, &(0x7f0000000200)=@sco, &(0x7f0000000240)=0xf, 0x5) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) syz_clone3(&(0x7f0000000240)={0x402008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x4a0080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2d00, 0x0) 364.420932ms ago: executing program 3 (id=799): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000000000008000, 0x2}, 0x4}, 0x800008, 0x8) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002}, 0x6f4) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/002/001\x00', 0x88841, 0x0) statmount$auto(&(0x7f0000000200)={0x0, @inferred=r0, 0x4, 0x7, 0x4}, &(0x7f0000000280)={0x2, 0x8001, 0x97, 0x3d, 0x8001, 0x5, 0x84, 0x8000, 0x7, 0x0, 0x5, 0x2, 0x80000000000008, 0x10000000000000b, 0x7fffffffffffffff, 0x7, 0x7, 0x4, 0x101, 0x1, 0x7fffffff, 0x6, 0x8c, 0x8, 0x6, 0x4, 0x5, 0x80, 0xfa, 0x7ff, 0x9, [0x9, 0xfffffffffffeffff, 0x10, 0x7, 0x3, 0x1a, 0x8000000000000001, 0x6, 0xc217, 0x3, 0x4a5, 0x1000, 0x9, 0x5, 0x800, 0x4, 0x3, 0x1, 0xe, 0x8b, 0x3, 0x7ff, 0x5, 0x2, 0x101, 0x10, 0x2, 0x1, 0x8, 0xffffffff80000001, 0x7, 0x3ff, 0x9, 0x8000000000, 0x200, 0x7, 0x0, 0x0, 0x3ff, 0x9, 0x1, 0x7], "a41c34b6d259817049fe59c8f240d63dbe87b76b6b2d66dbd2bec9b0165f235d82bc338eae47735635416e4495f8692128bde7336e0309574b1d6a9b9ed07d653a5d3d287044a8308dd18eb8e5abada2eb1ec50b7d8a15daaeb7fa48d0924f71357dd15c5536259f2332abca070824e086bd1007f788b0a64dd167a5957359a29bab1c581fe92cde5f440a4a839459855d0add971a4cabefe692eaa26333ebf7e43681db9fb382025aacbd92a93138c23a859e43a3626042bd"}, 0x9, 0x7) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b", 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x5, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fedbdf2503000000040003801800028014001a00fc02000000000000000000000000000112000100898771f1c19f17790485908280350000200003"], 0x64}, 0x1, 0x0, 0x0, 0x4004040}, 0x4001) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 173.031424ms ago: executing program 0 (id=800): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x48030) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/rp_filter\x00', 0x141241, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x4000000, 0x61, 0x1800000000000010, 0xffffffffffffffff, 0x40000007ffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 0s ago: executing program 1 (id=801): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, 0x0, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) kernel console output (not intermixed with test programs): [ 125.869970][ T6416] 2097051 pages RAM [ 125.894632][ T6416] 0 pages HighMem/MovableOnly [ 125.952147][ T6416] 430784 pages reserved [ 125.969528][ T6416] 0 pages cma reserved [ 126.014496][ T6416] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 126.421377][ T6430] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 128.592829][ T5649] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 128.601100][ T5649] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 130.324192][ T808] Process accounting resumed [ 131.160095][ T6480] Process accounting resumed [ 131.597215][ T6492] netlink: zone id is out of range [ 131.920839][ T5642] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 132.341982][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 132.783219][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.792936][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.091155][ T30] audit: type=1800 audit(1780705906.724:7): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="lu_gp_id" dev="configfs" ino=11934 res=0 errno=0 [ 136.253200][ T6552] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.133: iget: checksum invalid [ 136.330671][ T6552] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 136.479819][ T6552] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.133: iget: checksum invalid [ 136.546149][ T6552] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 136.573609][ T6552] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.133: iget: checksum invalid [ 136.697208][ T6552] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 136.713642][ T6552] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.133: iget: checksum invalid [ 136.794468][ T6552] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 136.807964][ T6552] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 136.876159][ T6552] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 137.261252][ T6570] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 137.967964][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 139.685383][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 140.651469][ T6622] [U] 0="/ [ 140.658410][ T6622] [U] [ 140.662988][ T6622] [U] EeQ@ [ 140.710313][ T6622] [U]  [ 142.914221][ T6652] vivid-007: ================= START STATUS ================= [ 142.946703][ T6652] vivid-007: Generate PTS: true [ 142.993450][ T6652] vivid-007: Generate SCR: true [ 143.058469][ T6655] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.152: iget: checksum invalid [ 143.070434][ T6652] tpg source WxH: 320x240 (Y'CbCr) [ 143.086686][ T6655] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 143.116044][ T6652] tpg field: 1 [ 143.140235][ T6655] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.152: iget: checksum invalid [ 143.179297][ T6655] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 143.179382][ T6652] tpg crop: (0,0)/320x240 [ 143.234850][ T6655] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.152: iget: checksum invalid [ 143.267868][ T6655] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 143.285913][ T6655] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.152: iget: checksum invalid [ 143.330704][ T6655] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 143.332934][ T6652] tpg compose: (0,0)/320x240 [ 143.376407][ T6652] tpg colorspace: 8 [ 143.385166][ T6655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 143.397762][ T6652] tpg transfer function: 0/0 [ 143.407215][ T6655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 143.451843][ T6652] tpg Y'CbCr encoding: 0/0 [ 143.472364][ T6652] tpg quantization: 0/0 [ 143.503890][ T6652] tpg RGB range: 0/2 [ 143.513885][ T6652] vivid-007: ================== END STATUS ================== [ 144.061824][ T6669] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 11!phy1!netdev:wlan1!rc_rateid [ 144.258595][ T6672] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 144.328449][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.2.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.328475][ T6672] Tainted: [L]=SOFTLOCKUP [ 144.328481][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.328489][ T6672] Call Trace: [ 144.328495][ T6672] [ 144.328501][ T6672] dump_stack_lvl+0x100/0x190 [ 144.328531][ T6672] sysfs_warn_dup.cold+0x1c/0x28 [ 144.328552][ T6672] sysfs_do_create_link_sd+0x113/0x140 [ 144.328571][ T6672] sysfs_create_link+0x61/0xc0 [ 144.328586][ T6672] device_add+0x675/0x1950 [ 144.328605][ T6672] ? __pfx_device_add+0x10/0x10 [ 144.328620][ T6672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.328642][ T6672] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 144.328669][ T6672] wiphy_register+0x1edd/0x2d90 [ 144.328686][ T6672] ? __rtnl_unlock+0xb9/0xf0 [ 144.328709][ T6672] ? __pfx_wiphy_register+0x10/0x10 [ 144.328727][ T6672] ? __asan_memset+0x23/0x50 [ 144.328748][ T6672] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 144.328779][ T6672] ieee80211_register_hw+0x3055/0x4570 [ 144.328810][ T6672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 144.328831][ T6672] ? __pfx___debug_object_init+0x10/0x10 [ 144.328854][ T6672] ? find_held_lock+0x2b/0x80 [ 144.328873][ T6672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.328893][ T6672] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 144.328915][ T6672] ? __hrtimer_setup+0x208/0x330 [ 144.328932][ T6672] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 144.328963][ T6672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 144.328984][ T6672] ? __asan_memcpy+0x3c/0x60 [ 144.329008][ T6672] hwsim_new_radio_nl+0xc5f/0x1370 [ 144.329026][ T6672] ? rcu_is_watching+0x12/0xc0 [ 144.329043][ T6672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.329067][ T6672] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 144.329089][ T6672] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 144.329115][ T6672] genl_family_rcv_msg_doit+0x214/0x300 [ 144.329138][ T6672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 144.329159][ T6672] ? genl_get_cmd+0x3e7/0x760 [ 144.329182][ T6672] ? bpf_lsm_capable+0x9/0x10 [ 144.329197][ T6672] ? security_capable+0x80/0x260 [ 144.329213][ T6672] ? ns_capable+0xd2/0xf0 [ 144.329230][ T6672] genl_rcv_msg+0x560/0x800 [ 144.329253][ T6672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.329274][ T6672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.329299][ T6672] netlink_rcv_skb+0x159/0x420 [ 144.329317][ T6672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.329339][ T6672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.329374][ T6672] ? netlink_deliver_tap+0x1ae/0xcc0 [ 144.329396][ T6672] genl_rcv+0x28/0x40 [ 144.329414][ T6672] netlink_unicast+0x585/0x850 [ 144.329437][ T6672] ? __pfx_netlink_unicast+0x10/0x10 [ 144.329463][ T6672] netlink_sendmsg+0x8b0/0xda0 [ 144.329485][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.329503][ T6672] ? __import_iovec+0x1d2/0x640 [ 144.329526][ T6672] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 144.329544][ T6672] ____sys_sendmsg+0x9e1/0xb70 [ 144.329562][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.329582][ T6672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.329603][ T6672] ? rcu_is_watching+0x12/0xc0 [ 144.329619][ T6672] ? ___sys_sendmsg+0x19d/0x1e0 [ 144.329636][ T6672] ? kfree+0x1dd/0x6c0 [ 144.329659][ T6672] ___sys_sendmsg+0x190/0x1e0 [ 144.329680][ T6672] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.329717][ T6672] ? __pfx___might_resched+0x10/0x10 [ 144.329736][ T6672] __sys_sendmmsg+0x205/0x430 [ 144.329754][ T6672] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.329784][ T6672] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.329806][ T6672] ? kcov_ioctl+0x16a/0x720 [ 144.329828][ T6672] __x64_sys_sendmmsg+0x9c/0x100 [ 144.329843][ T6672] ? lockdep_hardirqs_on+0x78/0x100 [ 144.329866][ T6672] do_syscall_64+0x115/0x840 [ 144.329885][ T6672] ? clear_bhb_loop+0x40/0x90 [ 144.329904][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.329918][ T6672] RIP: 0033:0x7f628c99ce59 [ 144.329931][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.329945][ T6672] RSP: 002b:00007f628d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.329960][ T6672] RAX: ffffffffffffffda RBX: 00007f628cc16090 RCX: 00007f628c99ce59 [ 144.329970][ T6672] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 144.329979][ T6672] RBP: 00007f628ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 144.329988][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.329996][ T6672] R13: 00007f628cc16128 R14: 00007f628cc16090 R15: 00007ffda5cab018 [ 144.330016][ T6672] syzkaller syzkaller login: [ 147.564313][ T6703] vivid-007: ================= START STATUS ================= [ 147.618332][ T6703] vivid-007: Generate PTS: true [ 147.656323][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 147.688683][ T6702] ipvlan1: entered promiscuous mode [ 147.698484][ T6702] ipvlan1: entered allmulticast mode [ 147.705915][ T6703] vivid-007: Generate SCR: true [ 147.726764][ T6702] veth0_vlan: entered allmulticast mode [ 147.739096][ T6703] tpg source WxH: 320x240 (Y'CbCr) [ 147.786627][ T6703] tpg field: 1 [ 147.817808][ T6703] tpg crop: (0,0)/320x240 [ 147.875336][ T6703] tpg compose: (0,0)/320x240 [ 147.897406][ T6703] tpg colorspace: 8 [ 147.913715][ T6703] tpg transfer function: 0/0 [ 147.922621][ T6703] tpg Y'CbCr encoding: 0/0 [ 147.930980][ T6703] tpg quantization: 0/0 [ 147.944788][ T6703] tpg RGB range: 0/2 [ 147.952395][ T6703] vivid-007: ================== END STATUS ================== [ 148.633771][ T6716] vivid-007: ================= START STATUS ================= [ 148.693641][ T6716] vivid-007: Generate PTS: true [ 148.710292][ T6716] vivid-007: Generate SCR: true [ 148.760239][ T6716] tpg source WxH: 320x240 (Y'CbCr) [ 148.791404][ T6716] tpg field: 1 [ 148.817786][ T6716] tpg crop: (0,0)/320x240 [ 148.841821][ T6716] tpg compose: (0,0)/320x240 [ 148.889900][ T30] audit: type=1804 audit(1780705920.524:8): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.161" name="/newroot/39/file0" dev="tmpfs" ino=226 res=1 errno=0 [ 148.911934][ T6716] tpg colorspace: 8 [ 148.916527][ T6726] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.933671][ T6716] tpg transfer function: 0/0 [ 148.967395][ T6716] tpg Y'CbCr encoding: 0/0 [ 148.975722][ T30] audit: type=1804 audit(1780705920.524:9): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.161" name="/newroot/39/file0" dev="tmpfs" ino=226 res=1 errno=0 [ 149.012056][ T6716] tpg quantization: 0/0 [ 149.089568][ T6716] tpg RGB range: 0/2 [ 149.116121][ T6716] vivid-007: ================== END STATUS ================== [ 150.897596][ T6752] vivid-007: ================= START STATUS ================= [ 150.926748][ T6752] vivid-007: Generate PTS: true [ 150.961529][ T6752] vivid-007: Generate SCR: true [ 150.990856][ T6752] tpg source WxH: 320x240 (Y'CbCr) [ 151.011952][ T6752] tpg field: 1 [ 151.023976][ T6752] tpg crop: (0,0)/320x240 [ 151.029893][ T6752] tpg compose: (0,0)/320x240 [ 151.035447][ T6752] tpg colorspace: 8 [ 151.039326][ T6752] tpg transfer function: 0/0 [ 151.055725][ T6752] tpg Y'CbCr encoding: 0/0 [ 151.082447][ T6752] tpg quantization: 0/0 [ 151.118622][ T6752] tpg RGB range: 0/2 [ 151.141640][ T6752] vivid-007: ================== END STATUS ================== [ 151.531457][ T6763] vivid-007: ================= START STATUS ================= [ 151.551362][ T6763] vivid-007: Generate PTS: true [ 151.559274][ T6763] vivid-007: Generate SCR: true [ 151.576296][ T6763] tpg source WxH: 320x240 (Y'CbCr) [ 151.584273][ T6763] tpg field: 1 [ 151.592776][ T6763] tpg crop: (0,0)/320x240 [ 151.610919][ T6763] tpg compose: (0,0)/320x240 [ 151.624787][ T6763] tpg colorspace: 8 [ 151.636770][ T6763] tpg transfer function: 0/0 [ 151.649978][ T6763] tpg Y'CbCr encoding: 0/0 [ 151.655894][ T6763] tpg quantization: 0/0 [ 151.660162][ T6763] tpg RGB range: 0/2 [ 151.669821][ T6763] vivid-007: ================== END STATUS ================== [ 151.710686][ T6769] vivid-007: ================= START STATUS ================= [ 151.725019][ T6769] vivid-007: Generate PTS: true [ 151.753560][ T6769] vivid-007: Generate SCR: true [ 151.776247][ T6769] tpg source WxH: 320x240 (Y'CbCr) [ 151.793150][ T6769] tpg field: 1 [ 151.821404][ T6769] tpg crop: (0,0)/320x240 [ 151.862186][ T6769] tpg compose: (0,0)/320x240 [ 151.893280][ T6769] tpg colorspace: 8 [ 151.924643][ T6769] tpg transfer function: 0/0 [ 151.973689][ T6769] tpg Y'CbCr encoding: 0/0 [ 152.008141][ T6769] tpg quantization: 0/0 [ 152.047458][ T6769] tpg RGB range: 0/2 [ 152.087018][ T6769] vivid-007: ================== END STATUS ================== [ 152.899113][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 153.196316][ T6815] vivid-007: ================= START STATUS ================= [ 153.230419][ T6815] vivid-007: Generate PTS: true [ 153.273126][ T6815] vivid-007: Generate SCR: true [ 153.324145][ T6815] tpg source WxH: 320x240 (Y'CbCr) [ 153.363607][ T6815] tpg field: 1 [ 153.390663][ T6815] tpg crop: (0,0)/320x240 [ 153.408618][ T6815] tpg compose: (0,0)/320x240 [ 153.429867][ T6815] tpg colorspace: 8 [ 153.452400][ T6815] tpg transfer function: 0/0 [ 153.481326][ T6815] tpg Y'CbCr encoding: 0/0 [ 153.504814][ T6815] tpg quantization: 0/0 [ 153.527095][ T6815] tpg RGB range: 0/2 [ 153.553625][ T6815] vivid-007: ================== END STATUS ================== [ 154.483581][ T6827] vivid-007: ================= START STATUS ================= [ 154.508457][ T6827] vivid-007: Generate PTS: true [ 154.520285][ T6827] vivid-007: Generate SCR: true [ 154.525713][ T6827] tpg source WxH: 320x240 (Y'CbCr) [ 154.531520][ T6827] tpg field: 1 [ 154.535234][ T6827] tpg crop: (0,0)/320x240 [ 154.539621][ T6827] tpg compose: (0,0)/320x240 [ 154.544365][ T6827] tpg colorspace: 8 [ 154.560732][ T6827] tpg transfer function: 0/0 [ 154.575121][ T6827] tpg Y'CbCr encoding: 0/0 [ 154.585066][ T6827] tpg quantization: 0/0 [ 154.589310][ T6827] tpg RGB range: 0/2 [ 154.593321][ T6827] vivid-007: ================== END STATUS ================== [ 154.601603][ T6824] vivid-007: ================= START STATUS ================= [ 154.613035][ T6824] vivid-007: Generate PTS: true [ 154.631473][ T6824] vivid-007: Generate SCR: true [ 154.647268][ T6824] tpg source WxH: 320x240 (Y'CbCr) [ 154.674830][ T6824] tpg field: 1 [ 154.689637][ T6824] tpg crop: (0,0)/320x240 [ 154.705892][ T6824] tpg compose: (0,0)/320x240 [ 154.718413][ T6824] tpg colorspace: 8 [ 154.728531][ T6824] tpg transfer function: 0/0 [ 154.745466][ T6824] tpg Y'CbCr encoding: 0/0 [ 154.755305][ T6824] tpg quantization: 0/0 [ 154.759529][ T6824] tpg RGB range: 0/2 [ 154.763533][ T6824] vivid-007: ================== END STATUS ================== [ 154.973594][ T6837] vivid-007: ================= START STATUS ================= [ 155.019998][ T6837] vivid-007: Generate PTS: true [ 155.029450][ T6837] vivid-007: Generate SCR: true [ 155.043624][ T6837] tpg source WxH: 320x240 (Y'CbCr) [ 155.055380][ T6837] tpg field: 1 [ 155.062244][ T6837] tpg crop: (0,0)/320x240 [ 155.074728][ T6837] tpg compose: (0,0)/320x240 [ 155.108949][ T6837] tpg colorspace: 8 [ 155.143701][ T6837] tpg transfer function: 0/0 [ 155.169438][ T6837] tpg Y'CbCr encoding: 0/0 [ 155.204370][ T6837] tpg quantization: 0/0 [ 155.240987][ T6837] tpg RGB range: 0/2 [ 155.275077][ T6837] vivid-007: ================== END STATUS ================== [ 155.824719][ T6867] vivid-007: ================= START STATUS ================= [ 155.854452][ T6867] vivid-007: Generate PTS: true [ 155.868860][ T6867] vivid-007: Generate SCR: true [ 155.889743][ T6867] tpg source WxH: 320x240 (Y'CbCr) [ 155.909301][ T6867] tpg field: 1 [ 155.916487][ T6867] tpg crop: (0,0)/320x240 [ 155.977207][ T6867] tpg compose: (0,0)/320x240 [ 156.004798][ T6867] tpg colorspace: 8 [ 156.047055][ T6867] tpg transfer function: 0/0 [ 156.112640][ T6867] tpg Y'CbCr encoding: 0/0 [ 156.122977][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 156.136072][ T6867] tpg quantization: 0/0 [ 156.160222][ T6867] tpg RGB range: 0/2 [ 156.189925][ T6867] vivid-007: ================== END STATUS ================== [ 157.578488][ T6903] vivid-007: ================= START STATUS ================= [ 157.599529][ T6903] vivid-007: Generate PTS: true [ 157.608221][ T6903] vivid-007: Generate SCR: true [ 157.615327][ T6903] tpg source WxH: 320x240 (Y'CbCr) [ 157.624721][ T6903] tpg field: 1 [ 157.637497][ T6903] tpg crop: (0,0)/320x240 [ 157.658461][ T6903] tpg compose: (0,0)/320x240 [ 157.668562][ T6903] tpg colorspace: 8 [ 157.677804][ T6903] tpg transfer function: 0/0 [ 157.687782][ T6903] tpg Y'CbCr encoding: 0/0 [ 157.692275][ T6903] tpg quantization: 0/0 [ 157.696913][ T6903] tpg RGB range: 0/2 [ 157.700995][ T6903] vivid-007: ================== END STATUS ================== [ 157.709169][ T6900] vivid-007: ================= START STATUS ================= [ 157.717420][ T6900] vivid-007: Generate PTS: true [ 157.734170][ T6900] vivid-007: Generate SCR: true [ 157.759023][ T6900] tpg source WxH: 320x240 (Y'CbCr) [ 157.797819][ T6900] tpg field: 1 [ 157.815311][ T6900] tpg crop: (0,0)/320x240 [ 157.843794][ T6900] tpg compose: (0,0)/320x240 [ 157.867106][ T6900] tpg colorspace: 8 [ 157.870962][ T6900] tpg transfer function: 0/0 [ 157.877455][ T6900] tpg Y'CbCr encoding: 0/0 [ 157.886719][ T6900] tpg quantization: 0/0 [ 157.894835][ T6900] tpg RGB range: 0/2 [ 157.903674][ T6900] vivid-007: ================== END STATUS ================== [ 157.932944][ T6904] vivid-007: ================= START STATUS ================= [ 157.962534][ T6904] vivid-007: Generate PTS: true [ 157.990231][ T6904] vivid-007: Generate SCR: true [ 158.002432][ T6904] tpg source WxH: 320x240 (Y'CbCr) [ 158.009755][ T6904] tpg field: 1 [ 158.013230][ T6904] tpg crop: (0,0)/320x240 [ 158.019893][ T6904] tpg compose: (0,0)/320x240 [ 158.024724][ T6904] tpg colorspace: 8 [ 158.030368][ T6904] tpg transfer function: 0/0 [ 158.049512][ T6904] tpg Y'CbCr encoding: 0/0 [ 158.068779][ T6904] tpg quantization: 0/0 [ 158.091450][ T6904] tpg RGB range: 0/2 [ 158.107684][ T6904] vivid-007: ================== END STATUS ================== [ 159.052581][ T6933] vivid-007: ================= START STATUS ================= [ 159.068470][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 159.085230][ T6933] vivid-007: Generate PTS: true [ 159.103590][ T6933] vivid-007: Generate SCR: true [ 159.128844][ T6933] tpg source WxH: 320x240 (Y'CbCr) [ 159.154194][ T6933] tpg field: 1 [ 159.170474][ T6933] tpg crop: (0,0)/320x240 [ 159.180118][ T6933] tpg compose: (0,0)/320x240 [ 159.196015][ T6933] tpg colorspace: 8 [ 159.208247][ T6933] tpg transfer function: 0/0 [ 159.221611][ T6933] tpg Y'CbCr encoding: 0/0 [ 159.232989][ T6933] tpg quantization: 0/0 [ 159.248192][ T6933] tpg RGB range: 0/2 [ 159.263986][ T6933] vivid-007: ================== END STATUS ================== [ 161.162942][ T6975] vivid-007: ================= START STATUS ================= [ 161.193356][ T6975] vivid-007: Generate PTS: true [ 161.199177][ T6975] vivid-007: Generate SCR: true [ 161.204232][ T6975] tpg source WxH: 320x240 (Y'CbCr) [ 161.214596][ T6975] tpg field: 1 [ 161.234872][ T6975] tpg crop: (0,0)/320x240 [ 161.245141][ T6975] tpg compose: (0,0)/320x240 [ 161.254798][ T6975] tpg colorspace: 8 [ 161.263324][ T6975] tpg transfer function: 0/0 [ 161.269900][ T6975] tpg Y'CbCr encoding: 0/0 [ 161.277979][ T6975] tpg quantization: 0/0 [ 161.286218][ T6975] tpg RGB range: 0/2 [ 161.294459][ T6975] vivid-007: ================== END STATUS ================== [ 161.317958][ T6965] vivid-007: ================= START STATUS ================= [ 161.332940][ T6965] vivid-007: Generate PTS: true [ 161.347943][ T6965] vivid-007: Generate SCR: true [ 161.362671][ T6965] tpg source WxH: 320x240 (Y'CbCr) [ 161.376202][ T6965] tpg field: 1 [ 161.383806][ T6965] tpg crop: (0,0)/320x240 [ 161.394429][ T6965] tpg compose: (0,0)/320x240 [ 161.407886][ T6965] tpg colorspace: 8 [ 161.417677][ T6965] tpg transfer function: 0/0 [ 161.433841][ T6965] tpg Y'CbCr encoding: 0/0 [ 161.451647][ T6965] tpg quantization: 0/0 [ 161.472008][ T6965] tpg RGB range: 0/2 [ 161.493981][ T6965] vivid-007: ================== END STATUS ================== [ 161.710355][ T6969] vivid-007: ================= START STATUS ================= [ 161.722240][ T6969] vivid-007: Generate PTS: true [ 161.735072][ T6969] vivid-007: Generate SCR: true [ 161.749856][ T6969] tpg source WxH: 320x240 (Y'CbCr) [ 161.772705][ T6969] tpg field: 1 [ 161.793024][ T6969] tpg crop: (0,0)/320x240 [ 161.804845][ T6969] tpg compose: (0,0)/320x240 [ 161.815121][ T6969] tpg colorspace: 8 [ 161.822067][ T6969] tpg transfer function: 0/0 [ 161.835941][ T6969] tpg Y'CbCr encoding: 0/0 [ 161.848320][ T6969] tpg quantization: 0/0 [ 161.857234][ T6969] tpg RGB range: 0/2 [ 161.869385][ T6969] vivid-007: ================== END STATUS ================== [ 161.959751][ T6983] vivid-007: ================= START STATUS ================= [ 161.978801][ T6983] vivid-007: Generate PTS: true [ 161.996375][ T6983] vivid-007: Generate SCR: true [ 162.020602][ T6983] tpg source WxH: 320x240 (Y'CbCr) [ 162.031750][ T6983] tpg field: 1 [ 162.039326][ T6983] tpg crop: (0,0)/320x240 [ 162.047202][ T6984] Process accounting paused [ 162.052221][ T6983] tpg compose: (0,0)/320x240 [ 162.064310][ T6983] tpg colorspace: 8 [ 162.070176][ T6983] tpg transfer function: 0/0 [ 162.094838][ T6983] tpg Y'CbCr encoding: 0/0 [ 162.117284][ T6983] tpg quantization: 0/0 [ 162.133354][ T6983] tpg RGB range: 0/2 [ 162.160210][ T6983] vivid-007: ================== END STATUS ================== [ 162.719464][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 164.267493][ T7041] vivid-007: ================= START STATUS ================= [ 164.307637][ T7041] vivid-007: Generate PTS: true [ 164.330058][ T7041] vivid-007: Generate SCR: true [ 164.351706][ T7041] tpg source WxH: 320x240 (Y'CbCr) [ 164.368881][ T7041] tpg field: 1 [ 164.380589][ T7041] tpg crop: (0,0)/320x240 [ 164.398148][ T7041] tpg compose: (0,0)/320x240 [ 164.410135][ T7041] tpg colorspace: 8 [ 164.425318][ T7041] tpg transfer function: 0/0 [ 164.441270][ T7041] tpg Y'CbCr encoding: 0/0 [ 164.471719][ T7041] tpg quantization: 0/0 [ 164.483773][ T7041] tpg RGB range: 0/2 [ 164.495743][ T7041] vivid-007: ================== END STATUS ================== [ 164.511665][ T7042] vivid-007: ================= START STATUS ================= [ 164.526808][ T7042] vivid-007: Generate PTS: true [ 164.534666][ T7042] vivid-007: Generate SCR: true [ 164.544563][ T7042] tpg source WxH: 320x240 (Y'CbCr) [ 164.569780][ T7042] tpg field: 1 [ 164.585636][ T7042] tpg crop: (0,0)/320x240 [ 164.614546][ T7042] tpg compose: (0,0)/320x240 [ 164.650112][ T7042] tpg colorspace: 8 [ 164.680864][ T7042] tpg transfer function: 0/0 [ 164.705642][ T7042] tpg Y'CbCr encoding: 0/0 [ 164.739022][ T7042] tpg quantization: 0/0 [ 164.807654][ T7042] tpg RGB range: 0/2 [ 164.822588][ T7042] vivid-007: ================== END STATUS ================== [ 164.840916][ T7048] vivid-007: ================= START STATUS ================= [ 164.855890][ T7048] vivid-007: Generate PTS: true [ 164.861953][ T7048] vivid-007: Generate SCR: true [ 164.880389][ T7048] tpg source WxH: 320x240 (Y'CbCr) [ 164.914598][ T7048] tpg field: 1 [ 164.968173][ T7048] tpg crop: (0,0)/320x240 [ 164.975361][ T7048] tpg compose: (0,0)/320x240 [ 165.007729][ T7048] tpg colorspace: 8 [ 165.045714][ T7048] tpg transfer function: 0/0 [ 165.064187][ T7048] tpg Y'CbCr encoding: 0/0 [ 165.075059][ T7048] tpg quantization: 0/0 [ 165.082256][ T7048] tpg RGB range: 0/2 [ 165.091112][ T7048] vivid-007: ================== END STATUS ================== [ 165.897338][ T7072] vivid-007: ================= START STATUS ================= [ 165.920505][ T7072] vivid-007: Generate PTS: true [ 165.934568][ T7072] vivid-007: Generate SCR: true [ 165.947474][ T7072] tpg source WxH: 320x240 (Y'CbCr) [ 165.967704][ T7072] tpg field: 1 [ 165.983941][ T7072] tpg crop: (0,0)/320x240 [ 165.995643][ T7072] tpg compose: (0,0)/320x240 [ 166.007392][ T7072] tpg colorspace: 8 [ 166.017336][ T7072] tpg transfer function: 0/0 [ 166.035449][ T7072] tpg Y'CbCr encoding: 0/0 [ 166.048327][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 166.072409][ T7072] tpg quantization: 0/0 [ 166.077722][ T7072] tpg RGB range: 0/2 [ 166.081664][ T7072] vivid-007: ================== END STATUS ================== [ 166.688405][ T7095] vivid-007: ================= START STATUS ================= [ 166.713042][ T7095] vivid-007: Generate PTS: true [ 166.732154][ T7095] vivid-007: Generate SCR: true [ 166.744565][ T7095] tpg source WxH: 320x240 (Y'CbCr) [ 166.757947][ T7095] tpg field: 1 [ 166.761940][ T7095] tpg crop: (0,0)/320x240 [ 166.767305][ T7095] tpg compose: (0,0)/320x240 [ 166.773336][ T7095] tpg colorspace: 8 [ 166.786142][ T7095] tpg transfer function: 0/0 [ 166.794291][ T7095] tpg Y'CbCr encoding: 0/0 [ 166.817034][ T7095] tpg quantization: 0/0 [ 166.835027][ T7095] tpg RGB range: 0/2 [ 166.843634][ T7095] vivid-007: ================== END STATUS ================== [ 166.919981][ T7104] vivid-007: ================= START STATUS ================= [ 166.937639][ T7104] vivid-007: Generate PTS: true [ 166.948296][ T7104] vivid-007: Generate SCR: true [ 166.960808][ T7104] tpg source WxH: 320x240 (Y'CbCr) [ 166.978396][ T7104] tpg field: 1 [ 166.993096][ T7104] tpg crop: (0,0)/320x240 [ 167.004770][ T7104] tpg compose: (0,0)/320x240 [ 167.027860][ T7104] tpg colorspace: 8 [ 167.039264][ T7104] tpg transfer function: 0/0 [ 167.059404][ T7104] tpg Y'CbCr encoding: 0/0 [ 167.104860][ T7104] tpg quantization: 0/0 [ 167.149871][ T7104] tpg RGB range: 0/2 [ 167.181194][ T7104] vivid-007: ================== END STATUS ================== [ 167.593211][ T7112] vivid-007: ================= START STATUS ================= [ 167.622777][ T7112] vivid-007: Generate PTS: true [ 167.636885][ T7112] vivid-007: Generate SCR: true [ 167.656042][ T7112] tpg source WxH: 320x240 (Y'CbCr) [ 167.685283][ T7112] tpg field: 1 [ 167.693871][ T7112] tpg crop: (0,0)/320x240 [ 167.701087][ T7112] tpg compose: (0,0)/320x240 [ 167.706501][ T7112] tpg colorspace: 8 [ 167.710358][ T7112] tpg transfer function: 0/0 [ 167.732599][ T7112] tpg Y'CbCr encoding: 0/0 [ 167.742734][ T7112] tpg quantization: 0/0 [ 167.751636][ T7112] tpg RGB range: 0/2 [ 167.765226][ T7112] vivid-007: ================== END STATUS ================== [ 168.125342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 168.720715][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 168.878008][ T7146] vivid-007: ================= START STATUS ================= [ 168.903637][ T7146] vivid-007: Generate PTS: true [ 168.923508][ T7146] vivid-007: Generate SCR: true [ 168.945514][ T7146] tpg source WxH: 320x240 (Y'CbCr) [ 168.973018][ T7146] tpg field: 1 [ 168.977069][ T7146] tpg crop: (0,0)/320x240 [ 168.983112][ T7146] tpg compose: (0,0)/320x240 [ 168.990773][ T7146] tpg colorspace: 8 [ 169.010357][ T7146] tpg transfer function: 0/0 [ 169.032149][ T7146] tpg Y'CbCr encoding: 0/0 [ 169.111384][ T7146] tpg quantization: 0/0 [ 169.140292][ T7146] tpg RGB range: 0/2 [ 169.161972][ T7146] vivid-007: ================== END STATUS ================== [ 169.528863][ T7163] vivid-007: ================= START STATUS ================= [ 169.579359][ T7163] vivid-007: Generate PTS: true [ 169.603610][ T7163] vivid-007: Generate SCR: true [ 169.649414][ T7163] tpg source WxH: 320x240 (Y'CbCr) [ 169.687593][ T7163] tpg field: 1 [ 169.729383][ T7163] tpg crop: (0,0)/320x240 [ 169.768806][ T7163] tpg compose: (0,0)/320x240 [ 169.892415][ T7163] tpg colorspace: 8 [ 169.922160][ T7163] tpg transfer function: 0/0 [ 169.957431][ T7163] tpg Y'CbCr encoding: 0/0 [ 169.993553][ T7163] tpg quantization: 0/0 [ 170.023900][ T7163] tpg RGB range: 0/2 [ 170.042879][ T7163] vivid-007: ================== END STATUS ================== [ 170.073440][ T7165] vivid-007: ================= START STATUS ================= [ 170.125508][ T7165] vivid-007: Generate PTS: true [ 170.154657][ T7165] vivid-007: Generate SCR: true [ 170.181792][ T7165] tpg source WxH: 320x240 (Y'CbCr) [ 170.218310][ T7165] tpg field: 1 [ 170.259610][ T7165] tpg crop: (0,0)/320x240 [ 170.300506][ T7165] tpg compose: (0,0)/320x240 [ 170.335743][ T7165] tpg colorspace: 8 [ 170.372267][ T7165] tpg transfer function: 0/0 [ 170.409456][ T7165] tpg Y'CbCr encoding: 0/0 [ 170.420143][ T7165] tpg quantization: 0/0 [ 170.444209][ T7165] tpg RGB range: 0/2 [ 170.462765][ T7165] vivid-007: ================== END STATUS ================== [ 170.508620][ T7169] vivid-007: ================= START STATUS ================= [ 170.528266][ T7169] vivid-007: Generate PTS: true [ 170.547077][ T7169] vivid-007: Generate SCR: true [ 170.560603][ T7169] tpg source WxH: 320x240 (Y'CbCr) [ 170.575992][ T7169] tpg field: 1 [ 170.588002][ T7169] tpg crop: (0,0)/320x240 [ 170.600287][ T7169] tpg compose: (0,0)/320x240 [ 170.613406][ T7169] tpg colorspace: 8 [ 170.643659][ T7169] tpg transfer function: 0/0 [ 170.654580][ T7169] tpg Y'CbCr encoding: 0/0 [ 170.677249][ T7169] tpg quantization: 0/0 [ 170.711667][ T7169] tpg RGB range: 0/2 [ 170.737159][ T7169] vivid-007: ================== END STATUS ================== [ 171.567530][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 171.782112][ T7204] vivid-007: ================= START STATUS ================= [ 171.799140][ T7204] vivid-007: Generate PTS: true [ 171.812295][ T7204] vivid-007: Generate SCR: true [ 171.819589][ T7204] tpg source WxH: 320x240 (Y'CbCr) [ 171.836362][ T7204] tpg field: 1 [ 171.841397][ T7204] tpg crop: (0,0)/320x240 [ 171.851553][ T7204] tpg compose: (0,0)/320x240 [ 171.861229][ T7204] tpg colorspace: 8 [ 171.871381][ T7204] tpg transfer function: 0/0 [ 171.876395][ T7204] tpg Y'CbCr encoding: 0/0 [ 171.888775][ T7204] tpg quantization: 0/0 [ 171.923085][ T7204] tpg RGB range: 0/2 [ 171.940683][ T7204] vivid-007: ================== END STATUS ================== [ 172.431105][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 172.865570][ T7226] vivid-007: ================= START STATUS ================= [ 172.883521][ T7226] vivid-007: Generate PTS: true [ 172.890844][ T7226] vivid-007: Generate SCR: true [ 172.905172][ T7226] tpg source WxH: 320x240 (Y'CbCr) [ 172.910446][ T7226] tpg field: 1 [ 172.920563][ T7226] tpg crop: (0,0)/320x240 [ 172.931154][ T7226] tpg compose: (0,0)/320x240 [ 172.944078][ T7226] tpg colorspace: 8 [ 172.950104][ T7226] tpg transfer function: 0/0 [ 172.957957][ T7226] tpg Y'CbCr encoding: 0/0 [ 172.963052][ T7226] tpg quantization: 0/0 [ 172.968926][ T7226] tpg RGB range: 0/2 [ 172.972882][ T7226] vivid-007: ================== END STATUS ================== [ 172.981607][ T7230] vivid-007: ================= START STATUS ================= [ 172.990597][ T7230] vivid-007: Generate PTS: true [ 173.005994][ T7230] vivid-007: Generate SCR: true [ 173.026738][ T7230] tpg source WxH: 320x240 (Y'CbCr) [ 173.037443][ T7230] tpg field: 1 [ 173.049349][ T7230] tpg crop: (0,0)/320x240 [ 173.063769][ T7230] tpg compose: (0,0)/320x240 [ 173.076929][ T7230] tpg colorspace: 8 [ 173.088360][ T7230] tpg transfer function: 0/0 [ 173.105935][ T7230] tpg Y'CbCr encoding: 0/0 [ 173.117124][ T7230] tpg quantization: 0/0 [ 173.130027][ T7230] tpg RGB range: 0/2 [ 173.152888][ T7230] vivid-007: ================== END STATUS ================== [ 173.198301][ T7239] vivid-007: ================= START STATUS ================= [ 173.227595][ T7239] vivid-007: Generate PTS: true [ 173.236650][ T7239] vivid-007: Generate SCR: true [ 173.244253][ T7239] tpg source WxH: 320x240 (Y'CbCr) [ 173.249951][ T7239] tpg field: 1 [ 173.253368][ T7239] tpg crop: (0,0)/320x240 [ 173.260814][ T7239] tpg compose: (0,0)/320x240 [ 173.266759][ T7239] tpg colorspace: 8 [ 173.270610][ T7239] tpg transfer function: 0/0 [ 173.276689][ T7239] tpg Y'CbCr encoding: 0/0 [ 173.281559][ T7239] tpg quantization: 0/0 [ 173.286296][ T7239] tpg RGB range: 0/2 [ 173.290290][ T7239] vivid-007: ================== END STATUS ================== [ 173.640258][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 174.111938][ T7261] vivid-007: ================= START STATUS ================= [ 174.132722][ T7261] vivid-007: Generate PTS: true [ 174.138787][ T7261] vivid-007: Generate SCR: true [ 174.144190][ T7261] tpg source WxH: 320x240 (Y'CbCr) [ 174.161109][ T7261] tpg field: 1 [ 174.165400][ T7261] tpg crop: (0,0)/320x240 [ 174.175444][ T7261] tpg compose: (0,0)/320x240 [ 174.185578][ T7261] tpg colorspace: 8 [ 174.190967][ T7261] tpg transfer function: 0/0 [ 174.200281][ T7261] tpg Y'CbCr encoding: 0/0 [ 174.215092][ T7261] tpg quantization: 0/0 [ 174.225598][ T7261] tpg RGB range: 0/2 [ 174.236310][ T7261] vivid-007: ================== END STATUS ================== [ 174.490328][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 175.229398][ T7294] vivid-007: ================= START STATUS ================= [ 175.255044][ T7294] vivid-007: Generate PTS: true [ 175.269135][ T7294] vivid-007: Generate SCR: true [ 175.293847][ T7294] tpg source WxH: 320x240 (Y'CbCr) [ 175.326746][ T7294] tpg field: 1 [ 175.350567][ T7294] tpg crop: (0,0)/320x240 [ 175.363074][ T7294] tpg compose: (0,0)/320x240 [ 175.378956][ T7294] tpg colorspace: 8 [ 175.400423][ T7294] tpg transfer function: 0/0 [ 175.419039][ T7294] tpg Y'CbCr encoding: 0/0 [ 175.435073][ T7294] tpg quantization: 0/0 [ 175.449699][ T7294] tpg RGB range: 0/2 [ 175.465924][ T7294] vivid-007: ================== END STATUS ================== [ 175.640733][ T7296] vivid-007: ================= START STATUS ================= [ 175.671587][ T7296] vivid-007: Generate PTS: true [ 175.688137][ T7296] vivid-007: Generate SCR: true [ 175.705597][ T7296] tpg source WxH: 320x240 (Y'CbCr) [ 175.719541][ T7296] tpg field: 1 [ 175.728010][ T7296] tpg crop: (0,0)/320x240 [ 175.753998][ T7296] tpg compose: (0,0)/320x240 [ 175.761568][ T7296] tpg colorspace: 8 [ 175.776761][ T7296] tpg transfer function: 0/0 [ 175.781468][ T7296] tpg Y'CbCr encoding: 0/0 [ 175.798585][ T7296] tpg quantization: 0/0 [ 175.812367][ T7296] tpg RGB range: 0/2 [ 175.821455][ T7296] vivid-007: ================== END STATUS ================== [ 175.839193][ T7302] vivid-007: ================= START STATUS ================= [ 175.848709][ T7302] vivid-007: Generate PTS: true [ 175.853647][ T7302] vivid-007: Generate SCR: true [ 175.859131][ T7302] tpg source WxH: 320x240 (Y'CbCr) [ 175.864289][ T7302] tpg field: 1 [ 175.868772][ T7302] tpg crop: (0,0)/320x240 [ 175.873146][ T7302] tpg compose: (0,0)/320x240 [ 175.880822][ T7302] tpg colorspace: 8 [ 175.884687][ T7302] tpg transfer function: 0/0 [ 175.890394][ T7302] tpg Y'CbCr encoding: 0/0 [ 175.894852][ T7302] tpg quantization: 0/0 [ 175.900419][ T7302] tpg RGB range: 0/2 [ 175.904360][ T7302] vivid-007: ================== END STATUS ================== [ 176.175604][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 176.465371][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 176.918318][ T7336] vivid-007: ================= START STATUS ================= [ 176.930256][ T7336] vivid-007: Generate PTS: true [ 176.936796][ T7336] vivid-007: Generate SCR: true [ 176.941884][ T7336] tpg source WxH: 320x240 (Y'CbCr) [ 176.947531][ T7336] tpg field: 1 [ 176.950947][ T7336] tpg crop: (0,0)/320x240 [ 176.955953][ T7336] tpg compose: (0,0)/320x240 [ 176.980482][ T7336] tpg colorspace: 8 [ 176.998522][ T7336] tpg transfer function: 0/0 [ 177.010173][ T7336] tpg Y'CbCr encoding: 0/0 [ 177.042487][ T7336] tpg quantization: 0/0 [ 177.048389][ T7336] tpg RGB range: 0/2 [ 177.052402][ T7336] vivid-007: ================== END STATUS ================== [ 177.475789][ T7354] vivid-007: ================= START STATUS ================= [ 177.504622][ T7354] vivid-007: Generate PTS: true [ 177.523102][ T7354] vivid-007: Generate SCR: true [ 177.535022][ T7354] tpg source WxH: 320x240 (Y'CbCr) [ 177.550842][ T7354] tpg field: 1 [ 177.555907][ T7354] tpg crop: (0,0)/320x240 [ 177.575671][ T7354] tpg compose: (0,0)/320x240 [ 177.580592][ T7354] tpg colorspace: 8 [ 177.584563][ T7354] tpg transfer function: 0/0 [ 177.594676][ T7354] tpg Y'CbCr encoding: 0/0 [ 177.608406][ T7354] tpg quantization: 0/0 [ 177.624412][ T7354] tpg RGB range: 0/2 [ 177.647222][ T7354] vivid-007: ================== END STATUS ================== [ 177.796266][ T7357] vivid-007: ================= START STATUS ================= [ 177.855985][ T7357] vivid-007: Generate PTS: true [ 177.869226][ T7357] vivid-007: Generate SCR: true [ 177.881528][ T7357] tpg source WxH: 320x240 (Y'CbCr) [ 177.896580][ T7357] tpg field: 1 [ 177.907480][ T7357] tpg crop: (0,0)/320x240 [ 177.931159][ T7357] tpg compose: (0,0)/320x240 [ 177.954825][ T7357] tpg colorspace: 8 [ 177.981496][ T7357] tpg transfer function: 0/0 [ 178.021865][ T7357] tpg Y'CbCr encoding: 0/0 [ 178.050136][ T7357] tpg quantization: 0/0 [ 178.076919][ T7357] tpg RGB range: 0/2 [ 178.092206][ T7357] vivid-007: ================== END STATUS ================== [ 178.126514][ T7362] vivid-007: ================= START STATUS ================= [ 178.152843][ T7362] vivid-007: Generate PTS: true [ 178.164275][ T7362] vivid-007: Generate SCR: true [ 178.169599][ T7362] tpg source WxH: 320x240 (Y'CbCr) [ 178.175992][ T7362] tpg field: 1 [ 178.179498][ T7362] tpg crop: (0,0)/320x240 [ 178.183886][ T7362] tpg compose: (0,0)/320x240 [ 178.199909][ T7362] tpg colorspace: 8 [ 178.205179][ T7362] tpg transfer function: 0/0 [ 178.226387][ T7362] tpg Y'CbCr encoding: 0/0 [ 178.239902][ T7362] tpg quantization: 0/0 [ 178.254337][ T7362] tpg RGB range: 0/2 [ 178.261699][ T7362] vivid-007: ================== END STATUS ================== [ 178.682099][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 178.779193][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 178.936245][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 179.575072][ T7403] vivid-007: ================= START STATUS ================= [ 179.587163][ T7403] vivid-007: Generate PTS: true [ 179.601464][ T7403] vivid-007: Generate SCR: true [ 179.609681][ T7403] tpg source WxH: 320x240 (Y'CbCr) [ 179.619231][ T7403] tpg field: 1 [ 179.629306][ T7403] tpg crop: (0,0)/320x240 [ 179.646638][ T7403] tpg compose: (0,0)/320x240 [ 179.668510][ T7403] tpg colorspace: 8 [ 179.684690][ T7403] tpg transfer function: 0/0 [ 179.707841][ T7403] tpg Y'CbCr encoding: 0/0 [ 179.720651][ T7403] tpg quantization: 0/0 [ 179.735372][ T7403] tpg RGB range: 0/2 [ 179.750259][ T7403] vivid-007: ================== END STATUS ================== [ 179.797450][ T7411] vivid-007: ================= START STATUS ================= [ 179.811902][ T7411] vivid-007: Generate PTS: true [ 179.821968][ T7411] vivid-007: Generate SCR: true [ 179.842280][ T7411] tpg source WxH: 320x240 (Y'CbCr) [ 179.860914][ T7411] tpg field: 1 [ 179.873743][ T7411] tpg crop: (0,0)/320x240 [ 179.889496][ T7411] tpg compose: (0,0)/320x240 [ 179.911248][ T7411] tpg colorspace: 8 [ 179.940322][ T7411] tpg transfer function: 0/0 [ 179.960037][ T7411] tpg Y'CbCr encoding: 0/0 [ 179.982359][ T7411] tpg quantization: 0/0 [ 180.011490][ T7411] tpg RGB range: 0/2 [ 180.028214][ T7411] vivid-007: ================== END STATUS ================== [ 180.387345][ T7427] vivid-007: ================= START STATUS ================= [ 180.405561][ T7427] vivid-007: Generate PTS: true [ 180.423077][ T7427] vivid-007: Generate SCR: true [ 180.441856][ T7427] tpg source WxH: 320x240 (Y'CbCr) [ 180.465058][ T7427] tpg field: 1 [ 180.473161][ T7427] tpg crop: (0,0)/320x240 [ 180.484595][ T7427] tpg compose: (0,0)/320x240 [ 180.498420][ T7427] tpg colorspace: 8 [ 180.511234][ T7427] tpg transfer function: 0/0 [ 180.524452][ T7427] tpg Y'CbCr encoding: 0/0 [ 180.554871][ T7427] tpg quantization: 0/0 [ 180.568018][ T7427] tpg RGB range: 0/2 [ 180.577465][ T7427] vivid-007: ================== END STATUS ================== [ 180.888305][ T7439] vivid-007: ================= START STATUS ================= [ 180.925324][ T7439] vivid-007: Generate PTS: true [ 180.951384][ T7439] vivid-007: Generate SCR: true [ 180.981503][ T7439] tpg source WxH: 320x240 (Y'CbCr) [ 181.001617][ T7439] tpg field: 1 [ 181.012327][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 181.014437][ T7439] tpg crop: (0,0)/320x240 [ 181.049410][ T7439] tpg compose: (0,0)/320x240 [ 181.073999][ T7439] tpg colorspace: 8 [ 181.093023][ T7439] tpg transfer function: 0/0 [ 181.116556][ T7439] tpg Y'CbCr encoding: 0/0 [ 181.143167][ T7439] tpg quantization: 0/0 [ 181.159984][ T7439] tpg RGB range: 0/2 [ 181.168403][ T7439] vivid-007: ================== END STATUS ================== [ 181.496048][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 182.136645][ T7477] vivid-007: ================= START STATUS ================= [ 182.169485][ T7477] vivid-007: Generate PTS: true [ 182.178032][ T7477] vivid-007: Generate SCR: true [ 182.182950][ T7477] tpg source WxH: 320x240 (Y'CbCr) [ 182.191684][ T7477] tpg field: 1 [ 182.198698][ T7477] tpg crop: (0,0)/320x240 [ 182.203364][ T7477] tpg compose: (0,0)/320x240 [ 182.208578][ T7477] tpg colorspace: 8 [ 182.212823][ T7477] tpg transfer function: 0/0 [ 182.224969][ T7477] tpg Y'CbCr encoding: 0/0 [ 182.231026][ T7477] tpg quantization: 0/0 [ 182.244985][ T7477] tpg RGB range: 0/2 [ 182.251126][ T7477] vivid-007: ================== END STATUS ================== [ 182.273846][ T7480] vivid-007: ================= START STATUS ================= [ 182.305715][ T7480] vivid-007: Generate PTS: true [ 182.322282][ T7480] vivid-007: Generate SCR: true [ 182.327636][ T7480] tpg source WxH: 320x240 (Y'CbCr) [ 182.345843][ T7480] tpg field: 1 [ 182.370034][ T7480] tpg crop: (0,0)/320x240 [ 182.380096][ T7480] tpg compose: (0,0)/320x240 [ 182.392552][ T7480] tpg colorspace: 8 [ 182.401280][ T7480] tpg transfer function: 0/0 [ 182.415614][ T7480] tpg Y'CbCr encoding: 0/0 [ 182.436506][ T7480] tpg quantization: 0/0 [ 182.459343][ T7480] tpg RGB range: 0/2 [ 182.479599][ T7480] vivid-007: ================== END STATUS ================== [ 183.081506][ T7501] vivid-007: ================= START STATUS ================= [ 183.113002][ T7501] vivid-007: Generate PTS: true [ 183.130542][ T7501] vivid-007: Generate SCR: true [ 183.168476][ T7501] tpg source WxH: 320x240 (Y'CbCr) [ 183.207240][ T7501] tpg field: 1 [ 183.215359][ T7501] tpg crop: (0,0)/320x240 [ 183.230085][ T7501] tpg compose: (0,0)/320x240 [ 183.243928][ T7501] tpg colorspace: 8 [ 183.253449][ T7501] tpg transfer function: 0/0 [ 183.272599][ T7501] tpg Y'CbCr encoding: 0/0 [ 183.294500][ T7501] tpg quantization: 0/0 [ 183.326731][ T7501] tpg RGB range: 0/2 [ 183.360273][ T7501] vivid-007: ================== END STATUS ================== [ 183.586101][ T7507] vivid-007: ================= START STATUS ================= [ 183.613290][ T7507] vivid-007: Generate PTS: true [ 183.658645][ T7507] vivid-007: Generate SCR: true [ 183.698978][ T7507] tpg source WxH: 320x240 (Y'CbCr) [ 183.717646][ T7507] tpg field: 1 [ 183.726323][ T7507] tpg crop: (0,0)/320x240 [ 183.745785][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 183.767495][ T7507] tpg compose: (0,0)/320x240 [ 183.795954][ T7507] tpg colorspace: 8 [ 183.811287][ T7507] tpg transfer function: 0/0 [ 183.838511][ T7507] tpg Y'CbCr encoding: 0/0 [ 183.854182][ T7507] tpg quantization: 0/0 [ 183.861295][ T7507] tpg RGB range: 0/2 [ 183.867084][ T7507] vivid-007: ================== END STATUS ================== [ 184.119784][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 184.321039][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 184.963956][ T7542] vivid-007: ================= START STATUS ================= [ 184.975768][ T7542] vivid-007: Generate PTS: true [ 184.981204][ T7542] vivid-007: Generate SCR: true [ 184.989929][ T7542] tpg source WxH: 320x240 (Y'CbCr) [ 184.995401][ T7542] tpg field: 1 [ 184.998948][ T7542] tpg crop: (0,0)/320x240 [ 185.003318][ T7542] tpg compose: (0,0)/320x240 [ 185.009469][ T7542] tpg colorspace: 8 [ 185.016556][ T7542] tpg transfer function: 0/0 [ 185.021380][ T7542] tpg Y'CbCr encoding: 0/0 [ 185.026931][ T7542] tpg quantization: 0/0 [ 185.031135][ T7542] tpg RGB range: 0/2 [ 185.042992][ T7542] vivid-007: ================== END STATUS ================== [ 185.051270][ T7543] ubi0: attaching mtd0 [ 185.117449][ T7543] ubi0: scanning is finished [ 185.135019][ T7543] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 185.204205][ T7549] vivid-007: ================= START STATUS ================= [ 185.231198][ T7549] vivid-007: Generate PTS: true [ 185.271316][ T7549] vivid-007: Generate SCR: true [ 185.307732][ T7549] tpg source WxH: 320x240 (Y'CbCr) [ 185.330222][ T7549] tpg field: 1 [ 185.346071][ T7549] tpg crop: (0,0)/320x240 [ 185.359288][ T7549] tpg compose: (0,0)/320x240 [ 185.367012][ T7549] tpg colorspace: 8 [ 185.371311][ T7549] tpg transfer function: 0/0 [ 185.393265][ T7549] tpg Y'CbCr encoding: 0/0 [ 185.412875][ T7549] tpg quantization: 0/0 [ 185.445365][ T7549] tpg RGB range: 0/2 [ 185.452057][ T7549] vivid-007: ================== END STATUS ================== [ 185.465823][ T7543] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 186.076701][ T7573] vivid-007: ================= START STATUS ================= [ 186.096249][ T7573] vivid-007: Generate PTS: true [ 186.111049][ T7573] vivid-007: Generate SCR: true [ 186.123286][ T7573] tpg source WxH: 320x240 (Y'CbCr) [ 186.128716][ T7573] tpg field: 1 [ 186.132138][ T7573] tpg crop: (0,0)/320x240 [ 186.136651][ T7573] tpg compose: (0,0)/320x240 [ 186.142953][ T7573] tpg colorspace: 8 [ 186.147125][ T7573] tpg transfer function: 0/0 [ 186.152279][ T7573] tpg Y'CbCr encoding: 0/0 [ 186.157824][ T7573] tpg quantization: 0/0 [ 186.162968][ T7573] tpg RGB range: 0/2 [ 186.173589][ T7573] vivid-007: ================== END STATUS ================== [ 186.189903][ T7570] vivid-007: ================= START STATUS ================= [ 186.206085][ T7570] vivid-007: Generate PTS: true [ 186.222092][ T7570] vivid-007: Generate SCR: true [ 186.239238][ T7570] tpg source WxH: 320x240 (Y'CbCr) [ 186.259488][ T7570] tpg field: 1 [ 186.273792][ T7570] tpg crop: (0,0)/320x240 [ 186.300051][ T7570] tpg compose: (0,0)/320x240 [ 186.311906][ T7570] tpg colorspace: 8 [ 186.331045][ T7570] tpg transfer function: 0/0 [ 186.347567][ T7570] tpg Y'CbCr encoding: 0/0 [ 186.366049][ T7570] tpg quantization: 0/0 [ 186.377330][ T7570] tpg RGB range: 0/2 [ 186.388048][ T7570] vivid-007: ================== END STATUS ================== [ 187.045640][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 187.089977][ T7603] vivid-007: ================= START STATUS ================= [ 187.106866][ T7603] vivid-007: Generate PTS: true [ 187.118699][ T7603] vivid-007: Generate SCR: true [ 187.128730][ T7603] tpg source WxH: 320x240 (Y'CbCr) [ 187.138234][ T7603] tpg field: 1 [ 187.145864][ T7603] tpg crop: (0,0)/320x240 [ 187.155908][ T7603] tpg compose: (0,0)/320x240 [ 187.166130][ T7603] tpg colorspace: 8 [ 187.172952][ T7603] tpg transfer function: 0/0 [ 187.182260][ T7603] tpg Y'CbCr encoding: 0/0 [ 187.194635][ T7603] tpg quantization: 0/0 [ 187.224534][ T7603] tpg RGB range: 0/2 [ 187.244471][ T7603] vivid-007: ================== END STATUS ================== [ 187.748161][ T7617] vivid-007: ================= START STATUS ================= [ 187.781633][ T7617] vivid-007: Generate PTS: true [ 187.802835][ T7617] vivid-007: Generate SCR: true [ 187.833213][ T7617] tpg source WxH: 320x240 (Y'CbCr) [ 187.852909][ T7617] tpg field: 1 [ 187.862145][ T7617] tpg crop: (0,0)/320x240 [ 187.872726][ T7617] tpg compose: (0,0)/320x240 [ 187.885366][ T7617] tpg colorspace: 8 [ 187.893700][ T7617] tpg transfer function: 0/0 [ 187.910061][ T7617] tpg Y'CbCr encoding: 0/0 [ 187.929340][ T7617] tpg quantization: 0/0 [ 187.958441][ T7617] tpg RGB range: 0/2 [ 187.991184][ T7617] vivid-007: ================== END STATUS ================== [ 188.300989][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 188.424363][ T7635] vivid-007: ================= START STATUS ================= [ 188.470338][ T7635] vivid-007: Generate PTS: true [ 188.489858][ T7635] vivid-007: Generate SCR: true [ 188.514972][ T7635] tpg source WxH: 320x240 (Y'CbCr) [ 188.533676][ T7635] tpg field: 1 [ 188.544873][ T7635] tpg crop: (0,0)/320x240 [ 188.549631][ T7635] tpg compose: (0,0)/320x240 [ 188.554395][ T7635] tpg colorspace: 8 [ 188.559908][ T7635] tpg transfer function: 0/0 [ 188.600854][ T7635] tpg Y'CbCr encoding: 0/0 [ 188.624135][ T7635] tpg quantization: 0/0 [ 188.646990][ T7635] tpg RGB range: 0/2 [ 188.664714][ T7635] vivid-007: ================== END STATUS ================== [ 188.744417][ T7648] vivid-007: ================= START STATUS ================= [ 188.778489][ T7648] vivid-007: Generate PTS: true [ 188.803847][ T7648] vivid-007: Generate SCR: true [ 188.825002][ T7648] tpg source WxH: 320x240 (Y'CbCr) [ 188.841085][ T7648] tpg field: 1 [ 188.849562][ T7648] tpg crop: (0,0)/320x240 [ 188.861941][ T7648] tpg compose: (0,0)/320x240 [ 188.868540][ T7648] tpg colorspace: 8 [ 188.873480][ T7648] tpg transfer function: 0/0 [ 188.896061][ T7648] tpg Y'CbCr encoding: 0/0 [ 188.914511][ T7648] tpg quantization: 0/0 [ 188.935412][ T7648] tpg RGB range: 0/2 [ 188.970127][ T7648] vivid-007: ================== END STATUS ================== [ 189.901332][ T7679] vivid-007: ================= START STATUS ================= [ 189.933478][ T7679] vivid-007: Generate PTS: true [ 189.965150][ T7679] vivid-007: Generate SCR: true [ 189.972377][ T7679] tpg source WxH: 320x240 (Y'CbCr) [ 189.993190][ T7679] tpg field: 1 [ 190.007175][ T7679] tpg crop: (0,0)/320x240 [ 190.024487][ T7679] tpg compose: (0,0)/320x240 [ 190.048746][ T7679] tpg colorspace: 8 [ 190.058228][ T7679] tpg transfer function: 0/0 [ 190.073929][ T7679] tpg Y'CbCr encoding: 0/0 [ 190.086724][ T7679] tpg quantization: 0/0 [ 190.099417][ T7679] tpg RGB range: 0/2 [ 190.109333][ T7679] vivid-007: ================== END STATUS ================== [ 190.120659][ T7697] FAULT_INJECTION: forcing a failure. [ 190.120659][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 190.205186][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.3.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.205230][ T7697] Tainted: [L]=SOFTLOCKUP [ 190.205239][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.205255][ T7697] Call Trace: [ 190.205264][ T7697] [ 190.205274][ T7697] dump_stack_lvl+0x100/0x190 [ 190.205326][ T7697] should_fail_ex.cold+0x5/0xa [ 190.205361][ T7697] should_failslab+0xc2/0x120 [ 190.205394][ T7697] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 190.205437][ T7697] ? mqueue_alloc_inode+0x25/0x50 [ 190.205476][ T7697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.205520][ T7697] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 190.205561][ T7697] mqueue_alloc_inode+0x25/0x50 [ 190.205600][ T7697] alloc_inode+0x68/0x250 [ 190.205639][ T7697] new_inode+0x22/0x1c0 [ 190.205682][ T7697] mqueue_get_inode+0x2e/0xe00 [ 190.205720][ T7697] ? sget_fc+0x801/0xc70 [ 190.205749][ T7697] ? __pfx_mqueue_fill_super+0x10/0x10 [ 190.205790][ T7697] mqueue_fill_super+0x14d/0x260 [ 190.205830][ T7697] get_tree_nodev+0xdd/0x190 [ 190.205861][ T7697] mqueue_get_tree+0xf1/0x130 [ 190.205915][ T7697] vfs_get_tree+0x92/0x320 [ 190.205944][ T7697] fc_mount_longterm+0x1a/0x270 [ 190.205973][ T7697] mq_init_ns+0x482/0x820 [ 190.206005][ T7697] copy_ipcs+0x3dd/0x7e0 [ 190.206037][ T7697] create_new_namespaces+0x20a/0xac0 [ 190.206072][ T7697] ? security_capable+0x80/0x260 [ 190.206103][ T7697] unshare_nsproxy_namespaces+0xf2/0x220 [ 190.206138][ T7697] ksys_unshare+0x438/0xab0 [ 190.206174][ T7697] ? __pfx_ksys_unshare+0x10/0x10 [ 190.206212][ T7697] ? xfd_validate_state+0x129/0x190 [ 190.206252][ T7697] __x64_sys_unshare+0x31/0x40 [ 190.206289][ T7697] do_syscall_64+0x115/0x840 [ 190.206325][ T7697] ? clear_bhb_loop+0x40/0x90 [ 190.206357][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.206386][ T7697] RIP: 0033:0x7f51a539ce59 [ 190.206409][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.206435][ T7697] RSP: 002b:00007f51a62b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 190.206460][ T7697] RAX: ffffffffffffffda RBX: 00007f51a5616270 RCX: 00007f51a539ce59 [ 190.206477][ T7697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 190.206493][ T7697] RBP: 00007f51a5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.206509][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.206525][ T7697] R13: 00007f51a5616308 R14: 00007f51a5616270 R15: 00007ffc222fb398 [ 190.206560][ T7697] [ 190.477272][ T7693] vivid-007: ================= START STATUS ================= [ 190.494950][ T7693] vivid-007: Generate PTS: true [ 190.541676][ T7693] vivid-007: Generate SCR: true [ 190.604327][ T7693] tpg source WxH: 320x240 (Y'CbCr) [ 190.648720][ T7693] tpg field: 1 [ 190.692347][ T7693] tpg crop: (0,0)/320x240 [ 190.771293][ T7693] tpg compose: (0,0)/320x240 [ 190.809357][ T7693] tpg colorspace: 8 [ 190.828531][ T7693] tpg transfer function: 0/0 [ 190.858243][ T7693] tpg Y'CbCr encoding: 0/0 [ 190.875239][ T7693] tpg quantization: 0/0 [ 190.886644][ T7693] tpg RGB range: 0/2 [ 190.897738][ T7693] vivid-007: ================== END STATUS ================== [ 191.179375][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 191.526441][ T7714] vivid-007: ================= START STATUS ================= [ 191.577194][ T7714] vivid-007: Generate PTS: true [ 191.582159][ T7714] vivid-007: Generate SCR: true [ 191.614132][ T7714] tpg source WxH: 320x240 (Y'CbCr) [ 191.663117][ T7714] tpg field: 1 [ 191.688125][ T7714] tpg crop: (0,0)/320x240 [ 191.704420][ T7714] tpg compose: (0,0)/320x240 [ 191.738386][ T7714] tpg colorspace: 8 [ 191.762604][ T7714] tpg transfer function: 0/0 [ 191.842302][ T7714] tpg Y'CbCr encoding: 0/0 [ 191.861766][ T7714] tpg quantization: 0/0 [ 191.889835][ T7714] tpg RGB range: 0/2 [ 191.903396][ T7714] vivid-007: ================== END STATUS ================== [ 192.222394][ T7715] Process accounting resumed [ 192.361057][ T7723] vivid-007: ================= START STATUS ================= [ 192.392506][ T7723] vivid-007: Generate PTS: true [ 192.410158][ T7723] vivid-007: Generate SCR: true [ 192.425140][ T7723] tpg source WxH: 320x240 (Y'CbCr) [ 192.436997][ T7723] tpg field: 1 [ 192.452326][ T7723] tpg crop: (0,0)/320x240 [ 192.465032][ T7723] tpg compose: (0,0)/320x240 [ 192.502598][ T7723] tpg colorspace: 8 [ 192.513645][ T7723] tpg transfer function: 0/0 [ 192.565151][ T7723] tpg Y'CbCr encoding: 0/0 [ 192.569712][ T7723] tpg quantization: 0/0 [ 192.578540][ T7723] tpg RGB range: 0/2 [ 192.585368][ T7723] vivid-007: ================== END STATUS ================== [ 192.687915][ T7745] FAULT_INJECTION: forcing a failure. [ 192.687915][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 192.737938][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.2.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.737983][ T7745] Tainted: [L]=SOFTLOCKUP [ 192.737992][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.738009][ T7745] Call Trace: [ 192.738018][ T7745] [ 192.738027][ T7745] dump_stack_lvl+0x100/0x190 [ 192.738077][ T7745] should_fail_ex.cold+0x5/0xa [ 192.738111][ T7745] should_failslab+0xc2/0x120 [ 192.738143][ T7745] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 192.738183][ T7745] ? dup_fd+0x4d/0xd10 [ 192.738217][ T7745] ? trace_kmalloc+0xe3/0x110 [ 192.738250][ T7745] dup_fd+0x4d/0xd10 [ 192.738286][ T7745] ? apparmor_task_alloc+0x2c1/0x3b0 [ 192.738318][ T7745] copy_process+0x2965/0x7ed0 [ 192.738352][ T7745] ? __futex_wait+0x256/0x300 [ 192.738403][ T7745] ? __pfx_copy_process+0x10/0x10 [ 192.738440][ T7745] ? find_held_lock+0x2b/0x80 [ 192.738488][ T7745] kernel_clone+0x176/0x9e0 [ 192.738521][ T7745] ? __pfx_futex_wait+0x10/0x10 [ 192.738557][ T7745] ? __pfx_kernel_clone+0x10/0x10 [ 192.738610][ T7745] __do_sys_clone+0xd9/0x120 [ 192.738648][ T7745] ? __pfx___do_sys_clone+0x10/0x10 [ 192.738716][ T7745] ? rcu_is_watching+0x12/0xc0 [ 192.738752][ T7745] do_syscall_64+0x115/0x840 [ 192.738788][ T7745] ? clear_bhb_loop+0x40/0x90 [ 192.738822][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.738848][ T7745] RIP: 0033:0x7f628c99ce59 [ 192.738870][ T7745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.738896][ T7745] RSP: 002b:00007f628d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 192.738922][ T7745] RAX: ffffffffffffffda RBX: 00007f628cc16090 RCX: 00007f628c99ce59 [ 192.738942][ T7745] RDX: 0000200000000380 RSI: fffffffffffffc4d RDI: 0000000000000002 [ 192.738959][ T7745] RBP: 00007f628ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 192.738976][ T7745] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 192.738993][ T7745] R13: 00007f628cc16128 R14: 00007f628cc16090 R15: 00007ffda5cab018 [ 192.739030][ T7745] [ 193.386013][ T7749] vivid-007: ================= START STATUS ================= [ 193.428239][ T7749] vivid-007: Generate PTS: true [ 193.439792][ T7749] vivid-007: Generate SCR: true [ 193.454841][ T7749] tpg source WxH: 320x240 (Y'CbCr) [ 193.476220][ T7749] tpg field: 1 [ 193.483937][ T7749] tpg crop: (0,0)/320x240 [ 193.494736][ T7749] tpg compose: (0,0)/320x240 [ 193.527062][ T7749] tpg colorspace: 8 [ 193.553130][ T7749] tpg transfer function: 0/0 [ 193.579799][ T7749] tpg Y'CbCr encoding: 0/0 [ 193.600206][ T7749] tpg quantization: 0/0 [ 193.611018][ T7749] tpg RGB range: 0/2 [ 193.620558][ T7749] vivid-007: ================== END STATUS ================== [ 193.728225][ T7753] vivid-007: ================= START STATUS ================= [ 193.743039][ T7753] vivid-007: Generate PTS: true [ 193.753213][ T7753] vivid-007: Generate SCR: true [ 193.760336][ T7753] tpg source WxH: 320x240 (Y'CbCr) [ 193.772312][ T7753] tpg field: 1 [ 193.781799][ T7753] tpg crop: (0,0)/320x240 [ 193.786312][ T7753] tpg compose: (0,0)/320x240 [ 193.790979][ T7753] tpg colorspace: 8 [ 193.794893][ T7753] tpg transfer function: 0/0 [ 193.801228][ T7753] tpg Y'CbCr encoding: 0/0 [ 193.805838][ T7753] tpg quantization: 0/0 [ 193.810028][ T7753] tpg RGB range: 0/2 [ 193.813972][ T7753] vivid-007: ================== END STATUS ================== [ 194.088631][ T7765] ICMPv6: process `syz.1.388' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 194.222867][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231555][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.502525][ T7765] loop13: detected capacity change from 0 to 8 [ 194.751428][ T7784] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.393: iget: checksum invalid [ 194.772484][ T7778] vivid-007: ================= START STATUS ================= [ 194.792526][ T7784] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 194.805110][ T7778] vivid-007: Generate PTS: true [ 194.818736][ T7778] vivid-007: Generate SCR: true [ 194.824120][ T7778] tpg source WxH: 320x240 (Y'CbCr) [ 194.832337][ T7778] tpg field: 1 [ 194.836130][ T7784] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.393: iget: checksum invalid [ 194.852548][ T7778] tpg crop: (0,0)/320x240 [ 194.857556][ T7778] tpg compose: (0,0)/320x240 [ 194.862196][ T7778] tpg colorspace: 8 [ 194.876705][ T7784] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 194.886930][ T7778] tpg transfer function: 0/0 [ 194.891674][ T7778] tpg Y'CbCr encoding: 0/0 [ 194.896741][ T7784] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.393: iget: checksum invalid [ 194.907626][ T7778] tpg quantization: 0/0 [ 194.912089][ T7778] tpg RGB range: 0/2 [ 194.916641][ T7778] vivid-007: ================== END STATUS ================== [ 194.924622][ T7784] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 194.959696][ T7784] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.393: iget: checksum invalid [ 195.001387][ T7784] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 195.011007][ T7784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 195.025189][ T7784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 195.169035][ T7792] vivid-007: ================= START STATUS ================= [ 195.183080][ T7792] vivid-007: Generate PTS: true [ 195.192750][ T7792] vivid-007: Generate SCR: true [ 195.198431][ T7792] tpg source WxH: 320x240 (Y'CbCr) [ 195.203718][ T7792] tpg field: 1 [ 195.207694][ T7792] tpg crop: (0,0)/320x240 [ 195.212271][ T7792] tpg compose: (0,0)/320x240 [ 195.217841][ T7792] tpg colorspace: 8 [ 195.222405][ T7792] tpg transfer function: 0/0 [ 195.238144][ T7792] tpg Y'CbCr encoding: 0/0 [ 195.244331][ T7792] tpg quantization: 0/0 [ 195.253334][ T7792] tpg RGB range: 0/2 [ 195.261972][ T7792] vivid-007: ================== END STATUS ================== [ 195.274693][ T7791] vivid-007: ================= START STATUS ================= [ 195.287791][ T7791] vivid-007: Generate PTS: true [ 195.292726][ T7791] vivid-007: Generate SCR: true [ 195.297682][ T7791] tpg source WxH: 320x240 (Y'CbCr) [ 195.303087][ T7791] tpg field: 1 [ 195.306553][ T7791] tpg crop: (0,0)/320x240 [ 195.311084][ T7791] tpg compose: (0,0)/320x240 [ 195.315751][ T7791] tpg colorspace: 8 [ 195.319774][ T7791] tpg transfer function: 0/0 [ 195.324400][ T7791] tpg Y'CbCr encoding: 0/0 [ 195.329225][ T7791] tpg quantization: 0/0 [ 195.333425][ T7791] tpg RGB range: 0/2 [ 195.341515][ T7791] vivid-007: ================== END STATUS ================== [ 195.628200][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 195.640871][ T7802] netlink: 25 bytes leftover after parsing attributes in process `syz.3.398'. [ 196.053174][ T7807] vivid-007: ================= START STATUS ================= [ 196.063190][ T7807] vivid-007: Generate PTS: true [ 196.073978][ T7807] vivid-007: Generate SCR: true [ 196.082997][ T7807] tpg source WxH: 320x240 (Y'CbCr) [ 196.088531][ T7807] tpg field: 1 [ 196.092020][ T7807] tpg crop: (0,0)/320x240 [ 196.096897][ T7807] tpg compose: (0,0)/320x240 [ 196.101628][ T7807] tpg colorspace: 8 [ 196.106131][ T7807] tpg transfer function: 0/0 [ 196.110897][ T7807] tpg Y'CbCr encoding: 0/0 [ 196.116841][ T7807] tpg quantization: 0/0 [ 196.121139][ T7807] tpg RGB range: 0/2 [ 196.125716][ T7807] vivid-007: ================== END STATUS ================== [ 197.062627][ T7838] FAULT_INJECTION: forcing a failure. [ 197.062627][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 197.088389][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.0.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.088436][ T7838] Tainted: [L]=SOFTLOCKUP [ 197.088447][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.088462][ T7838] Call Trace: [ 197.088471][ T7838] [ 197.088481][ T7838] dump_stack_lvl+0x100/0x190 [ 197.088534][ T7838] should_fail_ex.cold+0x5/0xa [ 197.088567][ T7838] ? lsm_blob_alloc+0x68/0x90 [ 197.088605][ T7838] should_failslab+0xc2/0x120 [ 197.088638][ T7838] __kmalloc_noprof+0xe0/0x850 [ 197.088680][ T7838] ? trace_kmem_cache_alloc+0xd5/0x100 [ 197.088719][ T7838] lsm_blob_alloc+0x68/0x90 [ 197.088758][ T7838] security_prepare_creds+0x2d/0x290 [ 197.088798][ T7838] prepare_creds+0x5d6/0x950 [ 197.088830][ T7838] copy_creds+0xa7/0xa50 [ 197.088864][ T7838] copy_process+0x1347/0x7ed0 [ 197.088907][ T7838] ? __futex_wait+0x256/0x300 [ 197.088946][ T7838] ? __pfx___futex_wait+0x10/0x10 [ 197.088991][ T7838] ? __pfx_copy_process+0x10/0x10 [ 197.089029][ T7838] ? futex_hash+0x141/0x370 [ 197.089077][ T7838] kernel_clone+0x176/0x9e0 [ 197.089110][ T7838] ? __pfx_futex_wait+0x10/0x10 [ 197.089140][ T7838] ? kernel_wait4+0x1d6/0x280 [ 197.089183][ T7838] ? __pfx_kernel_clone+0x10/0x10 [ 197.089237][ T7838] __do_sys_clone+0xd9/0x120 [ 197.089273][ T7838] ? __pfx___do_sys_clone+0x10/0x10 [ 197.089331][ T7838] ? rcu_is_watching+0x12/0xc0 [ 197.089366][ T7838] do_syscall_64+0x115/0x840 [ 197.089404][ T7838] ? clear_bhb_loop+0x40/0x90 [ 197.089440][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.089468][ T7838] RIP: 0033:0x7fdcf0d9ce59 [ 197.089490][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.089515][ T7838] RSP: 002b:00007fdcf1bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 197.089541][ T7838] RAX: ffffffffffffffda RBX: 00007fdcf1016090 RCX: 00007fdcf0d9ce59 [ 197.089558][ T7838] RDX: 0000200000000380 RSI: fffffffffffffc4d RDI: 0000000000000002 [ 197.089574][ T7838] RBP: 00007fdcf0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 197.089589][ T7838] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 197.089606][ T7838] R13: 00007fdcf1016128 R14: 00007fdcf1016090 R15: 00007ffd9955e9f8 [ 197.089640][ T7838] [ 197.455996][ T7836] vivid-007: ================= START STATUS ================= [ 197.463684][ T7836] vivid-007: Generate PTS: true [ 197.472949][ T7836] vivid-007: Generate SCR: true [ 197.478101][ T7836] tpg source WxH: 320x240 (Y'CbCr) [ 197.483238][ T7836] tpg field: 1 [ 197.486715][ T7836] tpg crop: (0,0)/320x240 [ 197.491067][ T7836] tpg compose: (0,0)/320x240 [ 197.495819][ T7836] tpg colorspace: 8 [ 197.499649][ T7836] tpg transfer function: 0/0 [ 197.504683][ T7836] tpg Y'CbCr encoding: 0/0 [ 197.509195][ T7836] tpg quantization: 0/0 [ 197.513368][ T7836] tpg RGB range: 0/2 [ 197.519007][ T7836] vivid-007: ================== END STATUS ================== [ 197.953004][ T7842] vivid-007: ================= START STATUS ================= [ 197.969454][ T7842] vivid-007: Generate PTS: true [ 197.974515][ T7842] vivid-007: Generate SCR: true [ 197.984073][ T7842] tpg source WxH: 320x240 (Y'CbCr) [ 198.001102][ T7842] tpg field: 1 [ 198.001118][ T7842] tpg crop: (0,0)/320x240 [ 198.001138][ T7842] tpg compose: (0,0)/320x240 [ 198.001157][ T7842] tpg colorspace: 8 [ 198.001168][ T7842] tpg transfer function: 0/0 [ 198.001182][ T7842] tpg Y'CbCr encoding: 0/0 [ 198.001195][ T7842] tpg quantization: 0/0 [ 198.001209][ T7842] tpg RGB range: 0/2 [ 198.001223][ T7842] vivid-007: ================== END STATUS ================== [ 198.035209][ T7850] vivid-007: ================= START STATUS ================= [ 198.035233][ T7850] vivid-007: Generate PTS: true [ 198.035279][ T7850] vivid-007: Generate SCR: true [ 198.035326][ T7850] tpg source WxH: 320x240 (Y'CbCr) [ 198.035343][ T7850] tpg field: 1 [ 198.035354][ T7850] tpg crop: (0,0)/320x240 [ 198.035372][ T7850] tpg compose: (0,0)/320x240 [ 198.035390][ T7850] tpg colorspace: 8 [ 198.035401][ T7850] tpg transfer function: 0/0 [ 198.035414][ T7850] tpg Y'CbCr encoding: 0/0 [ 198.035427][ T7850] tpg quantization: 0/0 [ 198.035440][ T7850] tpg RGB range: 0/2 [ 198.035465][ T7850] vivid-007: ================== END STATUS ================== [ 198.117696][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 198.200672][ T7858] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.411: iget: checksum invalid [ 198.200990][ T7858] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 198.201716][ T7858] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.411: iget: checksum invalid [ 198.201849][ T7858] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 198.201975][ T7858] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.411: iget: checksum invalid [ 198.202091][ T7858] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 198.203061][ T7858] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.411: iget: checksum invalid [ 198.203215][ T7858] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 198.203251][ T7858] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 198.203266][ T7858] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 199.271530][ T7874] vivid-007: ================= START STATUS ================= [ 199.307995][ T7874] vivid-007: Generate PTS: true [ 199.320376][ T7874] vivid-007: Generate SCR: true [ 199.360364][ T7874] tpg source WxH: 320x240 (Y'CbCr) [ 199.380191][ T7874] tpg field: 1 [ 199.399375][ T7874] tpg crop: (0,0)/320x240 [ 199.415035][ T7874] tpg compose: (0,0)/320x240 [ 199.432007][ T7874] tpg colorspace: 8 [ 199.445068][ T7874] tpg transfer function: 0/0 [ 199.472560][ T7874] tpg Y'CbCr encoding: 0/0 [ 199.521452][ T7874] tpg quantization: 0/0 [ 199.536918][ T7874] tpg RGB range: 0/2 [ 199.561507][ T7874] vivid-007: ================== END STATUS ================== [ 200.492637][ T7900] vivid-007: ================= START STATUS ================= [ 200.505173][ T7900] vivid-007: Generate PTS: true [ 200.525177][ T7900] vivid-007: Generate SCR: true [ 200.545103][ T7900] tpg source WxH: 320x240 (Y'CbCr) [ 200.579822][ T7900] tpg field: 1 [ 200.590643][ T7900] tpg crop: (0,0)/320x240 [ 200.596879][ T7900] tpg compose: (0,0)/320x240 [ 200.601600][ T7900] tpg colorspace: 8 [ 200.608464][ T7900] tpg transfer function: 0/0 [ 200.614779][ T7900] tpg Y'CbCr encoding: 0/0 [ 200.621158][ T7900] tpg quantization: 0/0 [ 200.629727][ T7900] tpg RGB range: 0/2 [ 200.639599][ T7900] vivid-007: ================== END STATUS ================== [ 201.170964][ T7910] vivid-007: ================= START STATUS ================= [ 201.194672][ T7910] vivid-007: Generate PTS: true [ 201.204815][ T7910] vivid-007: Generate SCR: true [ 201.214994][ T7910] tpg source WxH: 320x240 (Y'CbCr) [ 201.220216][ T7910] tpg field: 1 [ 201.223751][ T7910] tpg crop: (0,0)/320x240 [ 201.228280][ T7910] tpg compose: (0,0)/320x240 [ 201.232911][ T7910] tpg colorspace: 8 [ 201.237965][ T7910] tpg transfer function: 0/0 [ 201.248199][ T7910] tpg Y'CbCr encoding: 0/0 [ 201.252674][ T7910] tpg quantization: 0/0 [ 201.258194][ T7910] tpg RGB range: 0/2 [ 201.262171][ T7910] vivid-007: ================== END STATUS ================== [ 201.272929][ T7905] vivid-007: ================= START STATUS ================= [ 201.282304][ T7905] vivid-007: Generate PTS: true [ 201.287525][ T7905] vivid-007: Generate SCR: true [ 201.292446][ T7905] tpg source WxH: 320x240 (Y'CbCr) [ 201.312952][ T7905] tpg field: 1 [ 201.336619][ T7905] tpg crop: (0,0)/320x240 [ 201.351997][ T7905] tpg compose: (0,0)/320x240 [ 201.371282][ T7905] tpg colorspace: 8 [ 201.385943][ T7905] tpg transfer function: 0/0 [ 201.402335][ T7905] tpg Y'CbCr encoding: 0/0 [ 201.428803][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 201.432354][ T7905] tpg quantization: 0/0 [ 201.437013][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 201.445225][ T5635] Bluetooth: hci3: command 0x2016 tx timeout [ 201.447892][ T4948] Bluetooth: hci1: command 0x0406 tx timeout [ 201.512453][ T7905] tpg RGB range: 0/2 [ 201.512474][ T7905] vivid-007: ================== END STATUS ================== [ 201.616397][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 202.125019][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 202.408338][ T7939] vivid-007: ================= START STATUS ================= [ 202.435173][ T7939] vivid-007: Generate PTS: true [ 202.443378][ T7939] vivid-007: Generate SCR: true [ 202.455057][ T7939] tpg source WxH: 320x240 (Y'CbCr) [ 202.474062][ T7939] tpg field: 1 [ 202.477643][ T7939] tpg crop: (0,0)/320x240 [ 202.493439][ T7939] tpg compose: (0,0)/320x240 [ 202.512709][ T7939] tpg colorspace: 8 [ 202.528573][ T7939] tpg transfer function: 0/0 [ 202.548416][ T7939] tpg Y'CbCr encoding: 0/0 [ 202.564183][ T7939] tpg quantization: 0/0 [ 202.580897][ T7939] tpg RGB range: 0/2 [ 202.595422][ T7939] vivid-007: ================== END STATUS ================== [ 202.724476][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 202.746925][ T7949] veth1_macvtap: left promiscuous mode [ 203.331408][ T7963] vivid-007: ================= START STATUS ================= [ 203.359616][ T7963] vivid-007: Generate PTS: true [ 203.378509][ T7963] vivid-007: Generate SCR: true [ 203.403426][ T7963] tpg source WxH: 320x240 (Y'CbCr) [ 203.430956][ T7963] tpg field: 1 [ 203.440895][ T7963] tpg crop: (0,0)/320x240 [ 203.463328][ T7963] tpg compose: (0,0)/320x240 [ 203.471293][ T7963] tpg colorspace: 8 [ 203.476000][ T7963] tpg transfer function: 0/0 [ 203.480616][ T7963] tpg Y'CbCr encoding: 0/0 [ 203.485708][ T7963] tpg quantization: 0/0 [ 203.489992][ T7963] tpg RGB range: 0/2 [ 203.493991][ T7963] vivid-007: ================== END STATUS ================== [ 203.501840][ T7962] vivid-007: ================= START STATUS ================= [ 203.516662][ T7962] vivid-007: Generate PTS: true [ 203.535667][ T7962] vivid-007: Generate SCR: true [ 203.540652][ T7962] tpg source WxH: 320x240 (Y'CbCr) [ 203.556376][ T7962] tpg field: 1 [ 203.559921][ T7962] tpg crop: (0,0)/320x240 [ 203.568156][ T7962] tpg compose: (0,0)/320x240 [ 203.583271][ T7962] tpg colorspace: 8 [ 203.593419][ T7962] tpg transfer function: 0/0 [ 203.602152][ T7962] tpg Y'CbCr encoding: 0/0 [ 203.610519][ T7962] tpg quantization: 0/0 [ 203.620665][ T7962] tpg RGB range: 0/2 [ 203.626589][ T7962] vivid-007: ================== END STATUS ================== [ 203.639552][ T7970] vivid-007: ================= START STATUS ================= [ 203.649115][ T7970] vivid-007: Generate PTS: true [ 203.654428][ T7970] vivid-007: Generate SCR: true [ 203.660095][ T7970] tpg source WxH: 320x240 (Y'CbCr) [ 203.665574][ T7970] tpg field: 1 [ 203.669040][ T7970] tpg crop: (0,0)/320x240 [ 203.673591][ T7970] tpg compose: (0,0)/320x240 [ 203.678834][ T7970] tpg colorspace: 8 [ 203.683400][ T7970] tpg transfer function: 0/0 [ 203.694648][ T7970] tpg Y'CbCr encoding: 0/0 [ 203.704253][ T7970] tpg quantization: 0/0 [ 203.713880][ T7970] tpg RGB range: 0/2 [ 203.722361][ T7970] vivid-007: ================== END STATUS ================== [ 205.802135][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 206.069771][ T8009] vivid-007: ================= START STATUS ================= [ 206.099585][ T8009] vivid-007: Generate PTS: true [ 206.111734][ T8009] vivid-007: Generate SCR: true [ 206.127030][ T8009] tpg source WxH: 320x240 (Y'CbCr) [ 206.145138][ T8009] tpg field: 1 [ 206.163727][ T8009] tpg crop: (0,0)/320x240 [ 206.169602][ T8009] tpg compose: (0,0)/320x240 [ 206.175044][ T8009] tpg colorspace: 8 [ 206.187000][ T8009] tpg transfer function: 0/0 [ 206.206774][ T8009] tpg Y'CbCr encoding: 0/0 [ 206.229044][ T8009] tpg quantization: 0/0 [ 206.239166][ T8009] tpg RGB range: 0/2 [ 206.250800][ T8009] vivid-007: ================== END STATUS ================== [ 206.735847][ T8019] vivid-007: ================= START STATUS ================= [ 206.744708][ T8019] vivid-007: Generate PTS: true [ 206.749795][ T8019] vivid-007: Generate SCR: true [ 206.755232][ T8019] tpg source WxH: 320x240 (Y'CbCr) [ 206.760392][ T8019] tpg field: 1 [ 206.763776][ T8019] tpg crop: (0,0)/320x240 [ 206.768301][ T8019] tpg compose: (0,0)/320x240 [ 206.772941][ T8019] tpg colorspace: 8 [ 206.783439][ T8019] tpg transfer function: 0/0 [ 206.793158][ T8019] tpg Y'CbCr encoding: 0/0 [ 206.809133][ T8019] tpg quantization: 0/0 [ 206.814685][ T8019] tpg RGB range: 0/2 [ 206.824205][ T8019] vivid-007: ================== END STATUS ================== [ 207.395411][ T8040] vivid-007: ================= START STATUS ================= [ 207.445737][ T8040] vivid-007: Generate PTS: true [ 207.470610][ T8040] vivid-007: Generate SCR: true [ 207.503584][ T8040] tpg source WxH: 320x240 (Y'CbCr) [ 207.520440][ T8040] tpg field: 1 [ 207.528866][ T8040] tpg crop: (0,0)/320x240 [ 207.533275][ T8040] tpg compose: (0,0)/320x240 [ 207.538398][ T8040] tpg colorspace: 8 [ 207.543015][ T8040] tpg transfer function: 0/0 [ 207.548885][ T8040] tpg Y'CbCr encoding: 0/0 [ 207.553352][ T8040] tpg quantization: 0/0 [ 207.559627][ T8040] tpg RGB range: 0/2 [ 207.573762][ T8040] vivid-007: ================== END STATUS ================== [ 207.617878][ T8041] vivid-007: ================= START STATUS ================= [ 207.645719][ T8041] vivid-007: Generate PTS: true [ 207.661210][ T8041] vivid-007: Generate SCR: true [ 207.680622][ T8041] tpg source WxH: 320x240 (Y'CbCr) [ 207.694583][ T8041] tpg field: 1 [ 207.704675][ T8041] tpg crop: (0,0)/320x240 [ 207.743740][ T8041] tpg compose: (0,0)/320x240 [ 207.763837][ T8041] tpg colorspace: 8 [ 207.775366][ T8041] tpg transfer function: 0/0 [ 207.792241][ T8041] tpg Y'CbCr encoding: 0/0 [ 207.814461][ T8041] tpg quantization: 0/0 [ 207.831398][ T8041] tpg RGB range: 0/2 [ 207.852296][ T8041] vivid-007: ================== END STATUS ================== [ 208.210357][ T5644] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 208.851942][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 210.339369][ T8092] vivid-007: ================= START STATUS ================= [ 210.357459][ T8092] vivid-007: Generate PTS: true [ 210.377940][ T8092] vivid-007: Generate SCR: true [ 210.414706][ T8092] tpg source WxH: 320x240 (Y'CbCr) [ 210.439471][ T8092] tpg field: 1 [ 210.466847][ T8092] tpg crop: (0,0)/320x240 [ 210.480290][ T8092] tpg compose: (0,0)/320x240 [ 210.504979][ T8092] tpg colorspace: 8 [ 210.529179][ T8092] tpg transfer function: 0/0 [ 210.555590][ T8092] tpg Y'CbCr encoding: 0/0 [ 210.570193][ T8092] tpg quantization: 0/0 [ 210.581044][ T8092] tpg RGB range: 0/2 [ 210.586898][ T8092] vivid-007: ================== END STATUS ================== [ 211.008578][ T8095] vivid-007: ================= START STATUS ================= [ 211.039246][ T8095] vivid-007: Generate PTS: true [ 211.070461][ T8095] vivid-007: Generate SCR: true [ 211.085032][ T8095] tpg source WxH: 320x240 (Y'CbCr) [ 211.104786][ T8095] tpg field: 1 [ 211.136496][ T8095] tpg crop: (0,0)/320x240 [ 211.142359][ T8095] tpg compose: (0,0)/320x240 [ 211.175005][ T8095] tpg colorspace: 8 [ 211.192914][ T8095] tpg transfer function: 0/0 [ 211.220196][ T8095] tpg Y'CbCr encoding: 0/0 [ 211.240655][ T8095] tpg quantization: 0/0 [ 211.255780][ T8095] tpg RGB range: 0/2 [ 211.274382][ T8095] vivid-007: ================== END STATUS ================== [ 211.303518][ T8102] vivid-007: ================= START STATUS ================= [ 211.333394][ T8102] vivid-007: Generate PTS: true [ 211.345614][ T8102] vivid-007: Generate SCR: true [ 211.357670][ T8102] tpg source WxH: 320x240 (Y'CbCr) [ 211.366234][ T8102] tpg field: 1 [ 211.373457][ T8102] tpg crop: (0,0)/320x240 [ 211.382504][ T8102] tpg compose: (0,0)/320x240 [ 211.391082][ T8102] tpg colorspace: 8 [ 211.397937][ T8102] tpg transfer function: 0/0 [ 211.407631][ T8102] tpg Y'CbCr encoding: 0/0 [ 211.431428][ T8102] tpg quantization: 0/0 [ 211.441592][ T8102] tpg RGB range: 0/2 [ 211.448662][ T8102] vivid-007: ================== END STATUS ================== [ 211.817923][ T8118] vivid-007: ================= START STATUS ================= [ 211.849520][ T8118] vivid-007: Generate PTS: true [ 211.863839][ T8118] vivid-007: Generate SCR: true [ 211.891921][ T8118] tpg source WxH: 320x240 (Y'CbCr) [ 211.902367][ T5644] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 211.931064][ T8118] tpg field: 1 [ 211.963476][ T8118] tpg crop: (0,0)/320x240 [ 212.013602][ T8118] tpg compose: (0,0)/320x240 [ 212.033001][ T8118] tpg colorspace: 8 [ 212.056341][ T8118] tpg transfer function: 0/0 [ 212.081924][ T8118] tpg Y'CbCr encoding: 0/0 [ 212.094242][ T8118] tpg quantization: 0/0 [ 212.123855][ T8118] tpg RGB range: 0/2 [ 212.178701][ T8118] vivid-007: ================== END STATUS ================== [ 213.716570][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 213.856735][ T8142] vivid-007: ================= START STATUS ================= [ 213.868116][ T8142] vivid-007: Generate PTS: true [ 213.880964][ T8142] vivid-007: Generate SCR: true [ 213.897358][ T8142] tpg source WxH: 320x240 (Y'CbCr) [ 213.909486][ T8142] tpg field: 1 [ 213.924430][ T8142] tpg crop: (0,0)/320x240 [ 213.932155][ T8142] tpg compose: (0,0)/320x240 [ 213.941352][ T8142] tpg colorspace: 8 [ 213.946879][ T8142] tpg transfer function: 0/0 [ 213.961647][ T8142] tpg Y'CbCr encoding: 0/0 [ 213.972932][ T8142] tpg quantization: 0/0 [ 213.998027][ T8142] tpg RGB range: 0/2 [ 214.020266][ T8142] vivid-007: ================== END STATUS ================== [ 215.035154][ T8170] vivid-007: ================= START STATUS ================= [ 215.068189][ T8170] vivid-007: Generate PTS: true [ 215.087962][ T8170] vivid-007: Generate SCR: true [ 215.103401][ T8170] tpg source WxH: 320x240 (Y'CbCr) [ 215.123397][ T8170] tpg field: 1 [ 215.135975][ T8170] tpg crop: (0,0)/320x240 [ 215.152133][ T8170] tpg compose: (0,0)/320x240 [ 215.169138][ T8170] tpg colorspace: 8 [ 215.186002][ T8170] tpg transfer function: 0/0 [ 215.201145][ T8170] tpg Y'CbCr encoding: 0/0 [ 215.219806][ T8170] tpg quantization: 0/0 [ 215.235925][ T8170] tpg RGB range: 0/2 [ 215.253808][ T8170] vivid-007: ================== END STATUS ================== [ 215.490210][ T8175] vivid-007: ================= START STATUS ================= [ 215.604034][ T8175] vivid-007: Generate PTS: true [ 215.700270][ T8175] vivid-007: Generate SCR: true [ 215.776174][ T8175] tpg source WxH: 320x240 (Y'CbCr) [ 215.821844][ T8175] tpg field: 1 [ 215.857137][ T8175] tpg crop: (0,0)/320x240 [ 215.881674][ T8175] tpg compose: (0,0)/320x240 [ 215.929044][ T8175] tpg colorspace: 8 [ 215.955084][ T8175] tpg transfer function: 0/0 [ 216.002099][ T8175] tpg Y'CbCr encoding: 0/0 [ 216.026628][ T8175] tpg quantization: 0/0 [ 216.064498][ T8175] tpg RGB range: 0/2 [ 216.108991][ T8175] vivid-007: ================== END STATUS ================== [ 216.736069][ T8212] vivid-007: ================= START STATUS ================= [ 216.736091][ T8212] vivid-007: Generate PTS: true [ 216.736127][ T8212] vivid-007: Generate SCR: true [ 216.736159][ T8212] tpg source WxH: 320x240 (Y'CbCr) [ 216.736179][ T8212] tpg field: 1 [ 216.736189][ T8212] tpg crop: (0,0)/320x240 [ 216.736208][ T8212] tpg compose: (0,0)/320x240 [ 216.736226][ T8212] tpg colorspace: 8 [ 216.736237][ T8212] tpg transfer function: 0/0 [ 216.736251][ T8212] tpg Y'CbCr encoding: 0/0 [ 216.736265][ T8212] tpg quantization: 0/0 [ 216.736278][ T8212] tpg RGB range: 0/2 [ 216.736292][ T8212] vivid-007: ================== END STATUS ================== [ 218.289754][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 218.339020][ T8246] vivid-007: ================= START STATUS ================= [ 218.449388][ T8246] vivid-007: Generate PTS: true [ 218.537529][ T8246] vivid-007: Generate SCR: true [ 218.601984][ T8246] tpg source WxH: 320x240 (Y'CbCr) [ 218.635072][ T8246] tpg field: 1 [ 218.640591][ T8246] tpg crop: (0,0)/320x240 [ 218.648562][ T8246] tpg compose: (0,0)/320x240 [ 218.654445][ T8246] tpg colorspace: 8 [ 218.659015][ T8246] tpg transfer function: 0/0 [ 218.663639][ T8246] tpg Y'CbCr encoding: 0/0 [ 218.668240][ T8246] tpg quantization: 0/0 [ 218.672417][ T8246] tpg RGB range: 0/2 [ 218.679090][ T8246] vivid-007: ================== END STATUS ================== [ 221.322015][ T8289] vivid-007: ================= START STATUS ================= [ 221.322040][ T8289] vivid-007: Generate PTS: true [ 221.322072][ T8289] vivid-007: Generate SCR: true [ 221.322103][ T8289] tpg source WxH: 320x240 (Y'CbCr) [ 221.322120][ T8289] tpg field: 1 [ 221.322130][ T8289] tpg crop: (0,0)/320x240 [ 221.322149][ T8289] tpg compose: (0,0)/320x240 [ 221.322167][ T8289] tpg colorspace: 8 [ 221.322177][ T8289] tpg transfer function: 0/0 [ 221.322191][ T8289] tpg Y'CbCr encoding: 0/0 [ 221.322204][ T8289] tpg quantization: 0/0 [ 221.322218][ T8289] tpg RGB range: 0/2 [ 221.322231][ T8289] vivid-007: ================== END STATUS ================== [ 222.501400][ T8317] vivid-007: ================= START STATUS ================= [ 222.532764][ T8317] vivid-007: Generate PTS: true [ 222.551376][ T8317] vivid-007: Generate SCR: true [ 222.575739][ T8317] tpg source WxH: 320x240 (Y'CbCr) [ 222.633646][ T8317] tpg field: 1 [ 222.650906][ T8317] tpg crop: (0,0)/320x240 [ 222.670884][ T8317] tpg compose: (0,0)/320x240 [ 222.701484][ T8317] tpg colorspace: 8 [ 222.732837][ T8317] tpg transfer function: 0/0 [ 222.779936][ T8317] tpg Y'CbCr encoding: 0/0 [ 222.811259][ T8317] tpg quantization: 0/0 [ 222.838196][ T8317] tpg RGB range: 0/2 [ 222.854666][ T8317] vivid-007: ================== END STATUS ================== [ 222.906719][ T8312] Process accounting paused [ 225.085522][ T8372] FAULT_INJECTION: forcing a failure. [ 225.085522][ T8372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.154314][ T8372] CPU: 1 UID: 0 PID: 8372 Comm: syz.1.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.154358][ T8372] Tainted: [L]=SOFTLOCKUP [ 225.154368][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.154383][ T8372] Call Trace: [ 225.154391][ T8372] [ 225.154404][ T8372] dump_stack_lvl+0x100/0x190 [ 225.154465][ T8372] should_fail_ex.cold+0x5/0xa [ 225.154496][ T8372] ? prepare_alloc_pages+0x16d/0x5f0 [ 225.154534][ T8372] should_fail_alloc_page+0xeb/0x140 [ 225.154570][ T8372] prepare_alloc_pages+0x1f0/0x5f0 [ 225.154604][ T8372] ? __kernel_text_address+0xd/0x30 [ 225.154637][ T8372] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 225.154690][ T8372] ? __lock_acquire+0x4a5/0x2630 [ 225.154732][ T8372] ? stack_trace_save+0x8e/0xc0 [ 225.154767][ T8372] ? __pfx_stack_trace_save+0x10/0x10 [ 225.154804][ T8372] ? stack_depot_save_flags+0x27/0x9d0 [ 225.154845][ T8372] ? _raw_spin_lock_irqsave+0x52/0x60 [ 225.154882][ T8372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.154945][ T8372] ? __pfx___css_rstat_updated+0x10/0x10 [ 225.154986][ T8372] ? try_charge_memcg+0x365/0xdf0 [ 225.155024][ T8372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.155062][ T8372] ? policy_nodemask+0xed/0x4f0 [ 225.155095][ T8372] alloc_pages_mpol+0x1fb/0x540 [ 225.155124][ T8372] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 225.155151][ T8372] ? __memcg_slab_post_alloc_hook+0x734/0xff0 [ 225.155194][ T8372] alloc_pages_noprof+0x1a/0x160 [ 225.155233][ T8372] pgd_alloc+0x4d/0x630 [ 225.155272][ T8372] ? mutex_init_lockdep+0xf1/0x120 [ 225.155303][ T8372] mm_init+0x6da/0x10d0 [ 225.155340][ T8372] copy_process+0x6c5a/0x7ed0 [ 225.155375][ T8372] ? __futex_wait+0x256/0x300 [ 225.155443][ T8372] ? __pfx_copy_process+0x10/0x10 [ 225.155486][ T8372] ? futex_hash+0x141/0x370 [ 225.155538][ T8372] kernel_clone+0x176/0x9e0 [ 225.155581][ T8372] ? __pfx_futex_wait+0x10/0x10 [ 225.155618][ T8372] ? kernel_wait4+0x1d6/0x280 [ 225.155671][ T8372] ? __pfx_kernel_clone+0x10/0x10 [ 225.155738][ T8372] __do_sys_clone+0xd9/0x120 [ 225.155780][ T8372] ? __pfx___do_sys_clone+0x10/0x10 [ 225.155839][ T8372] ? rcu_is_watching+0x12/0xc0 [ 225.155881][ T8372] do_syscall_64+0x115/0x840 [ 225.155925][ T8372] ? clear_bhb_loop+0x40/0x90 [ 225.155965][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.155996][ T8372] RIP: 0033:0x7faf12d9ce59 [ 225.156022][ T8372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.156049][ T8372] RSP: 002b:00007faf13c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 225.156072][ T8372] RAX: ffffffffffffffda RBX: 00007faf13015fa0 RCX: 00007faf12d9ce59 [ 225.156088][ T8372] RDX: 0000200000000380 RSI: fffffffffffffc4d RDI: 0000000000000002 [ 225.156101][ T8372] RBP: 00007faf12e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 225.156116][ T8372] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 225.156131][ T8372] R13: 00007faf13016038 R14: 00007faf13015fa0 R15: 00007ffc7f1b2ab8 [ 225.156164][ T8372] [ 225.961270][ T8378] vivid-007: ================= START STATUS ================= [ 225.979448][ T8378] vivid-007: Generate PTS: true [ 225.994536][ T8378] vivid-007: Generate SCR: true [ 226.003517][ T8378] tpg source WxH: 320x240 (Y'CbCr) [ 226.010852][ T8378] tpg field: 1 [ 226.014273][ T8378] tpg crop: (0,0)/320x240 [ 226.019589][ T8378] tpg compose: (0,0)/320x240 [ 226.024351][ T8378] tpg colorspace: 8 [ 226.028773][ T8378] tpg transfer function: 0/0 [ 226.038522][ T8378] tpg Y'CbCr encoding: 0/0 [ 226.043047][ T8378] tpg quantization: 0/0 [ 226.047713][ T8378] tpg RGB range: 0/2 [ 226.051643][ T8378] vivid-007: ================== END STATUS ================== [ 226.192587][ T8385] vivid-007: ================= START STATUS ================= [ 226.213854][ T8385] vivid-007: Generate PTS: true [ 226.257367][ T8385] vivid-007: Generate SCR: true [ 226.273965][ T8385] tpg source WxH: 320x240 (Y'CbCr) [ 226.315159][ T8385] tpg field: 1 [ 226.323587][ T8385] tpg crop: (0,0)/320x240 [ 226.340096][ T8385] tpg compose: (0,0)/320x240 [ 226.360279][ T8385] tpg colorspace: 8 [ 226.387444][ T8385] tpg transfer function: 0/0 [ 226.401413][ T8385] tpg Y'CbCr encoding: 0/0 [ 226.411890][ T8385] tpg quantization: 0/0 [ 226.428896][ T8385] tpg RGB range: 0/2 [ 226.446064][ T8385] vivid-007: ================== END STATUS ================== [ 227.055656][ T8401] vivid-007: ================= START STATUS ================= [ 227.066888][ T8401] vivid-007: Generate PTS: true [ 227.071839][ T8401] vivid-007: Generate SCR: true [ 227.077741][ T8401] tpg source WxH: 320x240 (Y'CbCr) [ 227.083115][ T8401] tpg field: 1 [ 227.088263][ T8401] tpg crop: (0,0)/320x240 [ 227.093458][ T8401] tpg compose: (0,0)/320x240 [ 227.098829][ T8401] tpg colorspace: 8 [ 227.102742][ T8401] tpg transfer function: 0/0 [ 227.108129][ T8401] tpg Y'CbCr encoding: 0/0 [ 227.112712][ T8401] tpg quantization: 0/0 [ 227.117029][ T8401] tpg RGB range: 0/2 [ 227.121092][ T8401] vivid-007: ================== END STATUS ================== [ 228.272455][ T8423] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 230.713398][ T8443] vivid-007: ================= START STATUS ================= [ 230.745906][ T8443] vivid-007: Generate PTS: true [ 230.761813][ T8443] vivid-007: Generate SCR: true [ 230.770074][ T30] audit: type=1804 audit(1780706002.394:10): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.525" name="/newroot/131/file0" dev="tmpfs" ino=697 res=1 errno=0 [ 230.801874][ T8443] tpg source WxH: 320x240 (Y'CbCr) [ 230.807555][ T8443] tpg field: 1 [ 230.812534][ T8443] tpg crop: (0,0)/320x240 [ 230.822797][ T8443] tpg compose: (0,0)/320x240 [ 230.827876][ T30] audit: type=1804 audit(1780706002.404:11): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.525" name="/newroot/131/file0" dev="tmpfs" ino=697 res=1 errno=0 [ 230.848562][ T8443] tpg colorspace: 8 [ 230.852378][ T8443] tpg transfer function: 0/0 [ 230.861207][ T8443] tpg Y'CbCr encoding: 0/0 [ 230.870770][ T8443] tpg quantization: 0/0 [ 230.882744][ T8443] tpg RGB range: 0/2 [ 230.890958][ T8443] vivid-007: ================== END STATUS ================== [ 231.424793][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 231.870866][ T8473] vivid-007: ================= START STATUS ================= [ 231.931103][ T8473] vivid-007: Generate PTS: true [ 231.985024][ T8473] vivid-007: Generate SCR: true [ 231.994324][ T8473] tpg source WxH: 320x240 (Y'CbCr) [ 232.011393][ T8473] tpg field: 1 [ 232.024169][ T8473] tpg crop: (0,0)/320x240 [ 232.061157][ T8473] tpg compose: (0,0)/320x240 [ 232.071297][ T8473] tpg colorspace: 8 [ 232.079956][ T8473] tpg transfer function: 0/0 [ 232.099515][ T8473] tpg Y'CbCr encoding: 0/0 [ 232.124170][ T8473] tpg quantization: 0/0 [ 232.135931][ T8473] tpg RGB range: 0/2 [ 232.146993][ T8473] vivid-007: ================== END STATUS ================== [ 232.632432][ T8496] zswap: compressor not available [ 234.121282][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 234.490359][ T30] audit: type=1804 audit(1780706006.124:12): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.530" name="/newroot/133/file0" dev="tmpfs" ino=709 res=1 errno=0 [ 234.561949][ T30] audit: type=1804 audit(1780706006.154:13): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.530" name="/newroot/133/file0" dev="tmpfs" ino=709 res=1 errno=0 [ 234.669301][ T8538] futex_wake_op: syz.0.528 tries to shift op by -2048; fix this program [ 234.727976][ T8553] 0x000000000001-0x000000020000 : "" [ 234.806224][ T8553] ftl_cs: FTL header corrupt! [ 235.419848][ T8569] FAULT_INJECTION: forcing a failure. [ 235.419848][ T8569] name failslab, interval 1, probability 0, space 0, times 0 [ 235.455832][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.0.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.455878][ T8569] Tainted: [L]=SOFTLOCKUP [ 235.455888][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.455905][ T8569] Call Trace: [ 235.455914][ T8569] [ 235.455925][ T8569] dump_stack_lvl+0x100/0x190 [ 235.455979][ T8569] should_fail_ex.cold+0x5/0xa [ 235.456016][ T8569] should_failslab+0xc2/0x120 [ 235.456049][ T8569] __kvmalloc_node_noprof+0xfa/0xa00 [ 235.456086][ T8569] ? alloc_netdev_mqs+0xcef/0x1560 [ 235.456118][ T8569] ? lockdep_init_map_type+0x5c/0x250 [ 235.456170][ T8569] alloc_netdev_mqs+0xcef/0x1560 [ 235.456208][ T8569] ppp_ioctl+0x954/0x27c0 [ 235.456241][ T8569] ? find_held_lock+0x2b/0x80 [ 235.456275][ T8569] ? __pfx_ppp_ioctl+0x10/0x10 [ 235.456311][ T8569] ? __fget_files+0x21f/0x3d0 [ 235.456349][ T8569] ? __pfx_ppp_ioctl+0x10/0x10 [ 235.456382][ T8569] __x64_sys_ioctl+0x18e/0x210 [ 235.456411][ T8569] do_syscall_64+0x115/0x840 [ 235.456447][ T8569] ? clear_bhb_loop+0x40/0x90 [ 235.456481][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.456509][ T8569] RIP: 0033:0x7fdcf0d9ce59 [ 235.456532][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.456557][ T8569] RSP: 002b:00007fdcf1bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.456584][ T8569] RAX: ffffffffffffffda RBX: 00007fdcf1015fa0 RCX: 00007fdcf0d9ce59 [ 235.456602][ T8569] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 235.456625][ T8569] RBP: 00007fdcf0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 235.456640][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.456656][ T8569] R13: 00007fdcf1016038 R14: 00007fdcf1015fa0 R15: 00007ffd9955e9f8 [ 235.456694][ T8569] [ 235.460936][ T8565] vivid-007: ================= START STATUS ================= [ 235.596429][ T30] audit: type=1800 audit(1780706007.204:14): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.535" name="lu_gp_id" dev="configfs" ino=20406 res=0 errno=0 [ 235.708212][ T8565] vivid-007: Generate PTS: true [ 235.782130][ T8565] vivid-007: Generate SCR: true [ 235.818893][ T8565] tpg source WxH: 320x240 (Y'CbCr) [ 235.842167][ T8565] tpg field: 1 [ 235.863937][ T8565] tpg crop: (0,0)/320x240 [ 235.880197][ T8565] tpg compose: (0,0)/320x240 [ 235.903395][ T8565] tpg colorspace: 8 [ 235.914487][ T8565] tpg transfer function: 0/0 [ 235.919550][ T8565] tpg Y'CbCr encoding: 0/0 [ 235.924494][ T8565] tpg quantization: 0/0 [ 235.932272][ T8565] tpg RGB range: 0/2 [ 235.941821][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 235.950807][ T8565] vivid-007: ================== END STATUS ================== [ 236.151214][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 236.870377][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'. [ 236.903291][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 236.920303][ T8599] ipvlan1: entered promiscuous mode [ 236.928785][ T8599] ipvlan1: entered allmulticast mode [ 236.943592][ T8599] veth0_vlan: entered allmulticast mode [ 236.950949][ T8596] vivid-007: ================= START STATUS ================= [ 236.985069][ T8596] vivid-007: Generate PTS: true [ 236.990043][ T8596] vivid-007: Generate SCR: true [ 237.007512][ T8596] tpg source WxH: 320x240 (Y'CbCr) [ 237.029316][ T8596] tpg field: 1 [ 237.045102][ T8596] tpg crop: (0,0)/320x240 [ 237.051499][ T8596] tpg compose: (0,0)/320x240 [ 237.057645][ T8596] tpg colorspace: 8 [ 237.072477][ T8596] tpg transfer function: 0/0 [ 237.094484][ T8596] tpg Y'CbCr encoding: 0/0 [ 237.113970][ T8596] tpg quantization: 0/0 [ 237.135812][ T8596] tpg RGB range: 0/2 [ 237.156138][ T8596] vivid-007: ================== END STATUS ================== [ 237.787485][ T8614] zswap: compressor not available [ 237.988609][ T8626] netlink: 186 bytes leftover after parsing attributes in process `syz.0.545'. [ 238.522966][ T8633] vivid-007: ================= START STATUS ================= [ 238.551312][ T8633] vivid-007: Generate PTS: true [ 238.572614][ T8633] vivid-007: Generate SCR: true [ 238.593556][ T8633] tpg source WxH: 320x240 (Y'CbCr) [ 238.649747][ T8633] tpg field: 1 [ 238.678121][ T8633] tpg crop: (0,0)/320x240 [ 238.698672][ T8633] tpg compose: (0,0)/320x240 [ 238.711590][ T8633] tpg colorspace: 8 [ 238.754017][ T8633] tpg transfer function: 0/0 [ 238.810897][ T8633] tpg Y'CbCr encoding: 0/0 [ 238.881657][ T8633] tpg quantization: 0/0 [ 238.912137][ T8633] tpg RGB range: 0/2 [ 238.934015][ T8633] vivid-007: ================== END STATUS ================== [ 239.274825][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 239.609628][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 240.254778][ T8661] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 240.294975][ T8661] File: /dev/nullb0 PID: 8661 Comm: syz.3.551 [ 240.788637][ T8678] vivid-007: ================= START STATUS ================= [ 240.819843][ T8678] vivid-007: Generate PTS: true [ 240.844962][ T8678] vivid-007: Generate SCR: true [ 240.864955][ T8678] tpg source WxH: 320x240 (Y'CbCr) [ 240.892237][ T8678] tpg field: 1 [ 240.907134][ T8678] tpg crop: (0,0)/320x240 [ 240.930974][ T8678] tpg compose: (0,0)/320x240 [ 240.951141][ T8678] tpg colorspace: 8 [ 240.980366][ T8678] tpg transfer function: 0/0 [ 241.016998][ T8678] tpg Y'CbCr encoding: 0/0 [ 241.039930][ T8678] tpg quantization: 0/0 [ 241.076678][ T8678] tpg RGB range: 0/2 [ 241.090475][ T8678] vivid-007: ================== END STATUS ================== [ 242.003730][ T8704] vivid-007: ================= START STATUS ================= [ 242.033141][ T8704] vivid-007: Generate PTS: true [ 242.049654][ T8704] vivid-007: Generate SCR: true [ 242.087455][ T8704] tpg source WxH: 320x240 (Y'CbCr) [ 242.128848][ T8704] tpg field: 1 [ 242.160283][ T8704] tpg crop: (0,0)/320x240 [ 242.222295][ T8704] tpg compose: (0,0)/320x240 [ 242.242136][ T8704] tpg colorspace: 8 [ 242.264660][ T8704] tpg transfer function: 0/0 [ 242.312864][ T8704] tpg Y'CbCr encoding: 0/0 [ 242.371032][ T8704] tpg quantization: 0/0 [ 242.413349][ T8704] tpg RGB range: 0/2 [ 242.445186][ T8704] vivid-007: ================== END STATUS ================== [ 242.669933][ T8710] vivid-007: ================= START STATUS ================= [ 242.719437][ T8710] vivid-007: Generate PTS: true [ 242.742733][ T8710] vivid-007: Generate SCR: true [ 242.763484][ T8710] tpg source WxH: 320x240 (Y'CbCr) [ 242.780036][ T8710] tpg field: 1 [ 242.789504][ T8710] tpg crop: (0,0)/320x240 [ 242.800546][ T8710] tpg compose: (0,0)/320x240 [ 242.818887][ T8710] tpg colorspace: 8 [ 242.837139][ T8710] tpg transfer function: 0/0 [ 242.851431][ T8710] tpg Y'CbCr encoding: 0/0 [ 242.872885][ T8710] tpg quantization: 0/0 [ 242.895327][ T8710] tpg RGB range: 0/2 [ 242.917256][ T8710] vivid-007: ================== END STATUS ================== [ 243.616802][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 244.916636][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 245.728302][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 246.312186][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 247.665618][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 248.875349][ T8808] vivid-007: ================= START STATUS ================= [ 248.925227][ T8808] vivid-007: Generate PTS: true [ 248.951144][ T8808] vivid-007: Generate SCR: true [ 248.986723][ T8808] tpg source WxH: 320x240 (Y'CbCr) [ 249.005054][ T8808] tpg field: 1 [ 249.008641][ T8808] tpg crop: (0,0)/320x240 [ 249.016487][ T8808] tpg compose: (0,0)/320x240 [ 249.035184][ T8808] tpg colorspace: 8 [ 249.068465][ T8808] tpg transfer function: 0/0 [ 249.092132][ T8808] tpg Y'CbCr encoding: 0/0 [ 249.137803][ T8808] tpg quantization: 0/0 [ 249.137818][ T8808] tpg RGB range: 0/2 [ 249.137827][ T8808] vivid-007: ================== END STATUS ================== [ 250.820021][ T8838] vivid-007: ================= START STATUS ================= [ 250.840945][ T8838] vivid-007: Generate PTS: true [ 250.857406][ T8838] vivid-007: Generate SCR: true [ 250.875066][ T8838] tpg source WxH: 320x240 (Y'CbCr) [ 250.890628][ T8838] tpg field: 1 [ 250.900858][ T8838] tpg crop: (0,0)/320x240 [ 250.918995][ T8838] tpg compose: (0,0)/320x240 [ 250.949409][ T8838] tpg colorspace: 8 [ 250.983588][ T8838] tpg transfer function: 0/0 [ 251.012958][ T8838] tpg Y'CbCr encoding: 0/0 [ 251.036453][ T8838] tpg quantization: 0/0 [ 251.058289][ T8838] tpg RGB range: 0/2 [ 251.079356][ T8838] vivid-007: ================== END STATUS ================== [ 251.321847][ T8848] vivid-007: ================= START STATUS ================= [ 251.347203][ T8848] vivid-007: Generate PTS: true [ 251.384414][ T8848] vivid-007: Generate SCR: true [ 251.396794][ T8848] tpg source WxH: 320x240 (Y'CbCr) [ 251.435269][ T8848] tpg field: 1 [ 251.447346][ T8848] tpg crop: (0,0)/320x240 [ 251.462246][ T8848] tpg compose: (0,0)/320x240 [ 251.467478][ T8848] tpg colorspace: 8 [ 251.471760][ T8848] tpg transfer function: 0/0 [ 251.476431][ T8848] tpg Y'CbCr encoding: 0/0 [ 251.481524][ T8848] tpg quantization: 0/0 [ 251.485758][ T8848] tpg RGB range: 0/2 [ 251.491066][ T8848] vivid-007: ================== END STATUS ================== [ 252.714606][ T8880] random: crng reseeded on system resumption [ 252.954699][ T8864] Process accounting resumed [ 255.667938][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.674372][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.843114][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 256.884532][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 256.976258][ T8956] random: crng reseeded on system resumption [ 258.469545][ T8969] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 259.773282][ T8986] futex_wake_op: syz.2.609 tries to shift op by -2048; fix this program [ 259.927127][ T8985] 0x000000000001-0x000000020000 : "" [ 259.958048][ T8985] ftl_cs: FTL header corrupt! [ 264.828760][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 265.872749][ T9077] hub 1-0:1.0: USB hub found [ 265.920766][ T9077] hub 1-0:1.0: 1 port detected [ 266.008235][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 269.174031][ T9142] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 269.331816][ T9147] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 269.386432][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.3.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.386471][ T9147] Tainted: [L]=SOFTLOCKUP [ 269.386477][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.386498][ T9147] Call Trace: [ 269.386504][ T9147] [ 269.386511][ T9147] dump_stack_lvl+0x100/0x190 [ 269.386553][ T9147] sysfs_warn_dup.cold+0x1c/0x28 [ 269.386591][ T9147] sysfs_do_create_link_sd+0x113/0x140 [ 269.386609][ T9147] sysfs_create_link+0x61/0xc0 [ 269.386625][ T9147] device_add+0x675/0x1950 [ 269.386645][ T9147] ? __pfx_device_add+0x10/0x10 [ 269.386659][ T9147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.386682][ T9147] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 269.386710][ T9147] wiphy_register+0x1edd/0x2d90 [ 269.386727][ T9147] ? __rtnl_unlock+0xb9/0xf0 [ 269.386750][ T9147] ? __pfx_wiphy_register+0x10/0x10 [ 269.386768][ T9147] ? __asan_memset+0x23/0x50 [ 269.386790][ T9147] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 269.386820][ T9147] ieee80211_register_hw+0x3055/0x4570 [ 269.386852][ T9147] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 269.386873][ T9147] ? __pfx___debug_object_init+0x10/0x10 [ 269.386896][ T9147] ? find_held_lock+0x2b/0x80 [ 269.386915][ T9147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.386935][ T9147] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 269.386958][ T9147] ? __hrtimer_setup+0x208/0x330 [ 269.386978][ T9147] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 269.387009][ T9147] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 269.387030][ T9147] ? __asan_memcpy+0x3c/0x60 [ 269.387053][ T9147] hwsim_new_radio_nl+0xc5f/0x1370 [ 269.387071][ T9147] ? rcu_is_watching+0x12/0xc0 [ 269.387089][ T9147] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 269.387113][ T9147] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 269.387135][ T9147] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 269.387162][ T9147] genl_family_rcv_msg_doit+0x214/0x300 [ 269.387185][ T9147] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.387206][ T9147] ? genl_get_cmd+0x3e7/0x760 [ 269.387230][ T9147] ? bpf_lsm_capable+0x9/0x10 [ 269.387245][ T9147] ? security_capable+0x80/0x260 [ 269.387260][ T9147] ? ns_capable+0xd2/0xf0 [ 269.387279][ T9147] genl_rcv_msg+0x560/0x800 [ 269.387302][ T9147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.387324][ T9147] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 269.387349][ T9147] netlink_rcv_skb+0x159/0x420 [ 269.387367][ T9147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.387389][ T9147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.387416][ T9147] ? netlink_deliver_tap+0x1ae/0xcc0 [ 269.387437][ T9147] genl_rcv+0x28/0x40 [ 269.387455][ T9147] netlink_unicast+0x585/0x850 [ 269.387484][ T9147] ? __pfx_netlink_unicast+0x10/0x10 [ 269.387509][ T9147] netlink_sendmsg+0x8b0/0xda0 [ 269.387541][ T9147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.387570][ T9147] ? __import_iovec+0x1d2/0x640 [ 269.387612][ T9147] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 269.387637][ T9147] ____sys_sendmsg+0x9e1/0xb70 [ 269.387655][ T9147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.387675][ T9147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.387696][ T9147] ? rcu_is_watching+0x12/0xc0 [ 269.387712][ T9147] ? ___sys_sendmsg+0x19d/0x1e0 [ 269.387730][ T9147] ? kfree+0x1dd/0x6c0 [ 269.387753][ T9147] ___sys_sendmsg+0x190/0x1e0 [ 269.387773][ T9147] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.387811][ T9147] ? __pfx___might_resched+0x10/0x10 [ 269.387830][ T9147] __sys_sendmmsg+0x205/0x430 [ 269.387848][ T9147] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.387879][ T9147] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 269.387901][ T9147] ? kcov_ioctl+0x16a/0x720 [ 269.387923][ T9147] __x64_sys_sendmmsg+0x9c/0x100 [ 269.387938][ T9147] ? lockdep_hardirqs_on+0x78/0x100 [ 269.387959][ T9147] do_syscall_64+0x115/0x840 [ 269.387981][ T9147] ? clear_bhb_loop+0x40/0x90 [ 269.387999][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.388015][ T9147] RIP: 0033:0x7f51a539ce59 [ 269.388028][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.388042][ T9147] RSP: 002b:00007f51a62f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.388058][ T9147] RAX: ffffffffffffffda RBX: 00007f51a5616090 RCX: 00007f51a539ce59 [ 269.388068][ T9147] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 269.388077][ T9147] RBP: 00007f51a5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.388086][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.388095][ T9147] R13: 00007f51a5616128 R14: 00007f51a5616090 R15: 00007ffc222fb398 [ 269.388116][ T9147] syzkaller syzkaller login: [ 270.409387][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 270.865919][ T9164] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 271.154519][ T9169] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 271.187310][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.187359][ T9169] Tainted: [L]=SOFTLOCKUP [ 271.187369][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.187387][ T9169] Call Trace: [ 271.187397][ T9169] [ 271.187407][ T9169] dump_stack_lvl+0x100/0x190 [ 271.187458][ T9169] sysfs_warn_dup.cold+0x1c/0x28 [ 271.187499][ T9169] sysfs_do_create_link_sd+0x113/0x140 [ 271.187536][ T9169] sysfs_create_link+0x61/0xc0 [ 271.187568][ T9169] device_add+0x675/0x1950 [ 271.187604][ T9169] ? __pfx_device_add+0x10/0x10 [ 271.187633][ T9169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.187675][ T9169] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 271.187728][ T9169] wiphy_register+0x1edd/0x2d90 [ 271.187758][ T9169] ? __rtnl_unlock+0xb9/0xf0 [ 271.187797][ T9169] ? __pfx_wiphy_register+0x10/0x10 [ 271.187830][ T9169] ? __asan_memset+0x23/0x50 [ 271.187878][ T9169] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 271.187937][ T9169] ieee80211_register_hw+0x3055/0x4570 [ 271.188000][ T9169] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 271.188041][ T9169] ? __pfx___debug_object_init+0x10/0x10 [ 271.188083][ T9169] ? find_held_lock+0x2b/0x80 [ 271.188118][ T9169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.188160][ T9169] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 271.188201][ T9169] ? __hrtimer_setup+0x208/0x330 [ 271.188234][ T9169] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 271.188295][ T9169] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 271.188335][ T9169] ? __asan_memcpy+0x3c/0x60 [ 271.188381][ T9169] hwsim_new_radio_nl+0xc5f/0x1370 [ 271.188415][ T9169] ? rcu_is_watching+0x12/0xc0 [ 271.188449][ T9169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.188492][ T9169] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 271.188532][ T9169] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 271.188582][ T9169] genl_family_rcv_msg_doit+0x214/0x300 [ 271.188626][ T9169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.188666][ T9169] ? genl_get_cmd+0x3e7/0x760 [ 271.188712][ T9169] ? bpf_lsm_capable+0x9/0x10 [ 271.188741][ T9169] ? security_capable+0x80/0x260 [ 271.188771][ T9169] ? ns_capable+0xd2/0xf0 [ 271.188804][ T9169] genl_rcv_msg+0x560/0x800 [ 271.188848][ T9169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.188898][ T9169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.188947][ T9169] netlink_rcv_skb+0x159/0x420 [ 271.188982][ T9169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.189024][ T9169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.189076][ T9169] ? netlink_deliver_tap+0x1ae/0xcc0 [ 271.189116][ T9169] genl_rcv+0x28/0x40 [ 271.189151][ T9169] netlink_unicast+0x585/0x850 [ 271.189193][ T9169] ? __pfx_netlink_unicast+0x10/0x10 [ 271.189241][ T9169] netlink_sendmsg+0x8b0/0xda0 [ 271.189283][ T9169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.189315][ T9169] ? __import_iovec+0x1d2/0x640 [ 271.189358][ T9169] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 271.189393][ T9169] ____sys_sendmsg+0x9e1/0xb70 [ 271.189425][ T9169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.189461][ T9169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.189502][ T9169] ? rcu_is_watching+0x12/0xc0 [ 271.189532][ T9169] ? ___sys_sendmsg+0x19d/0x1e0 [ 271.189565][ T9169] ? kfree+0x1dd/0x6c0 [ 271.189608][ T9169] ___sys_sendmsg+0x190/0x1e0 [ 271.189649][ T9169] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.189716][ T9169] ? __pfx___might_resched+0x10/0x10 [ 271.189753][ T9169] __sys_sendmmsg+0x205/0x430 [ 271.189786][ T9169] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.189843][ T9169] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 271.189895][ T9169] ? kcov_ioctl+0x16a/0x720 [ 271.189937][ T9169] __x64_sys_sendmmsg+0x9c/0x100 [ 271.189965][ T9169] ? lockdep_hardirqs_on+0x78/0x100 [ 271.190003][ T9169] do_syscall_64+0x115/0x840 [ 271.190038][ T9169] ? clear_bhb_loop+0x40/0x90 [ 271.190070][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.190099][ T9169] RIP: 0033:0x7fdcf0d9ce59 [ 271.190120][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.190146][ T9169] RSP: 002b:00007fdcf1bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.190173][ T9169] RAX: ffffffffffffffda RBX: 00007fdcf1016090 RCX: 00007fdcf0d9ce59 [ 271.190192][ T9169] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 271.190208][ T9169] RBP: 00007fdcf0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 271.190225][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.190239][ T9169] R13: 00007fdcf1016128 R14: 00007fdcf1016090 R15: 00007ffd9955e9f8 [ 271.190275][ T9169] syzkaller syzkaller login: [ 272.933304][ T9196] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 275.929587][ T9236] vivid-007: ================= START STATUS ================= [ 275.987620][ T9236] vivid-007: Generate PTS: true [ 276.011643][ T9236] vivid-007: Generate SCR: true [ 276.064414][ T9236] tpg source WxH: 320x240 (Y'CbCr) [ 276.093322][ T9236] tpg field: 1 [ 276.105077][ T9236] tpg crop: (0,0)/320x240 [ 276.115847][ T9236] tpg compose: (0,0)/320x240 [ 276.126125][ T9236] tpg colorspace: 8 [ 276.149859][ T9236] tpg transfer function: 0/0 [ 276.169558][ T9236] tpg Y'CbCr encoding: 0/0 [ 276.213795][ T9236] tpg quantization: 0/0 [ 276.243995][ T9236] tpg RGB range: 0/2 [ 276.274575][ T9236] vivid-007: ================== END STATUS ================== [ 276.300860][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 279.322430][ T9289] netlink: 338 bytes leftover after parsing attributes in process `syz.3.658'. [ 283.991042][ T9317] Process accounting paused [ 286.461270][ T9399] netlink: 330 bytes leftover after parsing attributes in process `syz.1.673'. [ 287.063495][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 287.544283][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 288.936811][ T9431] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.689: iget: checksum invalid [ 289.101462][ T9431] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 289.177376][ T9431] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.689: iget: checksum invalid [ 289.288726][ T9431] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 289.383271][ T9431] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.689: iget: checksum invalid [ 289.455291][ T9431] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 289.546730][ T9431] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.689: iget: checksum invalid [ 289.639374][ T9431] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 289.688177][ T9431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 289.708221][ T9431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 290.211918][ T9431] Process accounting resumed [ 292.212052][ T9463] Process accounting resumed [ 292.611780][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 296.141162][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'. [ 296.197206][ T9531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.257585][ T9531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.298355][ T9531] bond0 (unregistering): Released all slaves [ 296.796182][ T9539] smpboot: CPU 1 is now offline [ 296.891522][ T9539] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 300.159196][ T9582] vivid-007: ================= START STATUS ================= [ 300.183415][ T9582] vivid-007: Generate PTS: true [ 300.193377][ T9582] vivid-007: Generate SCR: true [ 300.227744][ T9582] tpg source WxH: 320x240 (Y'CbCr) [ 300.245836][ T9582] tpg field: 1 [ 300.260542][ T9582] tpg crop: (0,0)/320x240 [ 300.278675][ T9582] tpg compose: (0,0)/320x240 [ 300.288775][ T9582] tpg colorspace: 8 [ 300.305591][ T9582] tpg transfer function: 0/0 [ 300.325566][ T9582] tpg Y'CbCr encoding: 0/0 [ 300.343545][ T9582] tpg quantization: 0/0 [ 300.365201][ T9582] tpg RGB range: 0/2 [ 300.382758][ T9582] vivid-007: ================== END STATUS ================== [ 300.642988][ T9600] binder: 9599:9600 ioctl c0046209 ffffffffffffffff returned -22 [ 301.600085][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 302.186025][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 304.282320][ T9647] ima: policy update failed [ 304.314003][ T30] audit: type=1802 audit(1780706075.944:15): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.714" res=0 errno=0 [ 305.860968][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 310.446974][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 311.877063][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 313.175805][ T9844] FAULT_INJECTION: forcing a failure. [ 313.175805][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 313.243788][ T9844] CPU: 0 UID: 0 PID: 9844 Comm: syz.0.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.243822][ T9844] Tainted: [L]=SOFTLOCKUP [ 313.243828][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.243841][ T9844] Call Trace: [ 313.243846][ T9844] [ 313.243852][ T9844] dump_stack_lvl+0x100/0x190 [ 313.243883][ T9844] should_fail_ex.cold+0x5/0xa [ 313.243902][ T9844] ? memcg_list_lru_alloc+0x4ec/0x740 [ 313.243917][ T9844] should_failslab+0xc2/0x120 [ 313.243934][ T9844] __kmalloc_noprof+0xe0/0x850 [ 313.243960][ T9844] ? __lock_acquire+0x4a5/0x2630 [ 313.243984][ T9844] memcg_list_lru_alloc+0x4ec/0x740 [ 313.244004][ T9844] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 313.244028][ T9844] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 313.244059][ T9844] ? kasan_save_track+0x14/0x30 [ 313.244075][ T9844] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 313.244098][ T9844] ? __d_alloc+0x34/0xa40 [ 313.244120][ T9844] ? __pfx_rpc_fill_super+0x10/0x10 [ 313.244139][ T9844] __d_alloc+0x34/0xa40 [ 313.244159][ T9844] ? __pfx_rpc_fill_super+0x10/0x10 [ 313.244177][ T9844] d_make_root+0x3e/0x90 [ 313.244196][ T9844] rpc_fill_super+0x26f/0x4f0 [ 313.244215][ T9844] ? __pfx_rpc_fill_super+0x10/0x10 [ 313.244233][ T9844] get_tree_keyed+0x10e/0x1d0 [ 313.244250][ T9844] vfs_get_tree+0x92/0x320 [ 313.244264][ T9844] vfs_cmd_create+0xd7/0x2a0 [ 313.244287][ T9844] __do_sys_fsconfig+0x55a/0xcb0 [ 313.244310][ T9844] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 313.244333][ T9844] ? xfd_validate_state+0x129/0x190 [ 313.244351][ T9844] ? rcu_is_watching+0x12/0xc0 [ 313.244370][ T9844] do_syscall_64+0x115/0x840 [ 313.244389][ T9844] ? clear_bhb_loop+0x40/0x90 [ 313.244407][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.244422][ T9844] RIP: 0033:0x7fdcf0d9ce59 [ 313.244435][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.244449][ T9844] RSP: 002b:00007fdcf1bf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 313.244468][ T9844] RAX: ffffffffffffffda RBX: 00007fdcf1015fa0 RCX: 00007fdcf0d9ce59 [ 313.244478][ T9844] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 313.244487][ T9844] RBP: 00007fdcf0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 313.244496][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.244505][ T9844] R13: 00007fdcf1016038 R14: 00007fdcf1015fa0 R15: 00007ffd9955e9f8 [ 313.244525][ T9844] [ 314.881297][ T9871] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.277706][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 315.817784][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.827213][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.435265][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 317.824861][ T9855] Process accounting resumed [ 320.314526][ T9949] netlink: 342 bytes leftover after parsing attributes in process `syz.2.756'. [ 321.075846][ T9925] Process accounting paused [ 321.999009][ T9958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.348731][ T9956] Process accounting paused [ 323.173035][ T9970] vivid-007: ================= START STATUS ================= [ 323.215658][ T9970] vivid-007: Generate PTS: true [ 323.238066][ T9970] vivid-007: Generate SCR: true [ 323.274747][ T9970] tpg source WxH: 320x240 (Y'CbCr) [ 323.297077][ T9970] tpg field: 1 [ 323.313809][ T9970] tpg crop: (0,0)/320x240 [ 323.351330][ T9970] tpg compose: (0,0)/320x240 [ 323.420048][ T9970] tpg colorspace: 8 [ 323.464168][ T9970] tpg transfer function: 0/0 [ 323.501220][ T9970] tpg Y'CbCr encoding: 0/0 [ 323.548034][ T9970] tpg quantization: 0/0 [ 323.587785][ T9970] tpg RGB range: 0/2 [ 323.620684][ T9970] vivid-007: ================== END STATUS ================== [ 323.740324][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 324.325803][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 324.364025][T10006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 326.178798][T10030] binder: 10029:10030 ioctl c0046209 ffffffffffffffff returned -22 [ 327.659460][T10039] Console: switching to colour VGA+ 80x25 [ 328.501700][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 329.311376][T10061] vivid-007: ================= START STATUS ================= [ 329.345614][T10061] vivid-007: Generate PTS: true [ 329.365915][T10061] vivid-007: Generate SCR: true [ 329.380909][T10061] tpg source WxH: 320x240 (Y'CbCr) [ 329.410851][T10061] tpg field: 1 [ 329.424417][T10061] tpg crop: (0,0)/320x240 [ 329.442652][T10061] tpg compose: (0,0)/320x240 [ 329.459329][T10061] tpg colorspace: 8 [ 329.478803][T10061] tpg transfer function: 0/0 [ 329.527911][T10061] tpg Y'CbCr encoding: 0/0 [ 329.564197][T10061] tpg quantization: 0/0 [ 329.596106][T10061] tpg RGB range: 0/2 [ 329.635973][T10061] vivid-007: ================== END STATUS ================== [ 329.821207][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 330.569294][T10089] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 332.001250][T10119] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 332.151730][T10119] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 332.449536][T10122] smpboot: CPU 1 is now offline [ 332.524869][T10122] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 332.589962][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 332.661733][T10132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.781432][T10132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.888533][T10132] bond0 (unregistering): Released all slaves [ 486.281169][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.3.799:10170] [ 486.281236][ C0] Modules linked in: [ 486.281266][ C0] irq event stamp: 464404179 [ 486.281273][ C0] hardirqs last enabled at (464404178): [] __local_bh_enable_ip+0x9e/0x120 [ 486.281298][ C0] hardirqs last disabled at (464404179): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 486.281320][ C0] softirqs last enabled at (506): [] tipc_sk_rcv+0x2e1/0x1c90 [ 486.281338][ C0] softirqs last disabled at (508): [] tipc_sk_rcv+0x318/0x1c90 [ 486.281395][ C0] CPU: 0 UID: 0 PID: 10170 Comm: syz.3.799 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.281414][ C0] Tainted: [L]=SOFTLOCKUP [ 486.281427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.281440][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 486.281486][ C0] Code: 01 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 d1 20 82 09 8b 82 ec 16 00 00 85 c0 74 f1 8b 82 c8 16 00 00 <83> f8 02 75 e6 48 8b 8a d0 16 00 00 8b 92 cc 16 00 00 48 8b 01 48 [ 486.281500][ C0] RSP: 0018:ffffc90003946ca8 EFLAGS: 00000246 [ 486.281515][ C0] RAX: 0000000000000002 RBX: 000000004ab476e3 RCX: ffffffff8b2a3154 [ 486.281524][ C0] RDX: ffff88807b255d00 RSI: ffffffff8b2a3162 RDI: ffff88807b255d00 [ 486.281533][ C0] RBP: ffffc90003946e90 R08: 0000000000000005 R09: 0000000000000000 [ 486.281541][ C0] R10: 000000004ab476e3 R11: 0000000000000000 R12: ffff88804ce4e000 [ 486.281548][ C0] R13: ffff88802dbca440 R14: 000000004ab476e3 R15: dffffc0000000000 [ 486.281557][ C0] FS: 00007f51a62f46c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 486.281571][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.281579][ C0] CR2: 0000000000005000 CR3: 000000007579a000 CR4: 00000000003526f0 [ 486.281587][ C0] Call Trace: [ 486.281596][ C0] [ 486.281601][ C0] tipc_sk_rcv+0x1e2/0x1c90 [ 486.281652][ C0] ? mark_held_locks+0x40/0x70 [ 486.281676][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 486.281694][ C0] ? kfree_skbmem+0x15d/0x210 [ 486.281718][ C0] ? find_held_lock+0x2b/0x80 [ 486.281733][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 486.281750][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 486.281773][ C0] tipc_node_xmit+0x23e/0xfb0 [ 486.281812][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 486.281838][ C0] ? kfree_skbmem+0x15d/0x210 [ 486.281868][ C0] ? tipc_node_distr_xmit+0x177/0x3c0 [ 486.281885][ C0] tipc_node_distr_xmit+0x177/0x3c0 [ 486.281911][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 486.281935][ C0] ? mark_held_locks+0x40/0x70 [ 486.281957][ C0] tipc_sk_rcv+0xaab/0x1c90 [ 486.281977][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 486.282002][ C0] ? find_held_lock+0x2b/0x80 [ 486.282017][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 486.282033][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 486.282056][ C0] tipc_node_xmit+0x23e/0xfb0 [ 486.282076][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 486.282098][ C0] ? __lock_acquire+0x4a5/0x2630 [ 486.282120][ C0] ? tipc_sk_push_backlog+0x318/0xa00 [ 486.282138][ C0] tipc_sk_push_backlog+0x318/0xa00 [ 486.282160][ C0] tipc_sk_filter_rcv+0x960/0x3230 [ 486.282182][ C0] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 486.282196][ C0] ? tipc_sk_lookup+0x474/0xa00 [ 486.282222][ C0] tipc_sk_rcv+0xea5/0x1c90 [ 486.282242][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 486.282261][ C0] ? kfree_skbmem+0x15d/0x210 [ 486.282282][ C0] ? find_held_lock+0x2b/0x80 [ 486.282297][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 486.282313][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 486.282336][ C0] tipc_node_xmit+0x23e/0xfb0 [ 486.282355][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 486.282371][ C0] ? trace_tipc_sk_rej_msg+0x81/0x290 [ 486.282395][ C0] ? tipc_node_distr_xmit+0x177/0x3c0 [ 486.282412][ C0] ? find_held_lock+0x2b/0x80 [ 486.282426][ C0] tipc_node_distr_xmit+0x177/0x3c0 [ 486.282443][ C0] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 486.282462][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 486.282484][ C0] ? trace_sched_exit_tp+0x11c/0x160 [ 486.282503][ C0] ? __schedule+0x12a7/0x67a0 [ 486.282521][ C0] tipc_sk_backlog_rcv+0x16f/0x1e0 [ 486.282538][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 486.282562][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 486.282578][ C0] __release_sock+0x3a2/0x440 [ 486.282623][ C0] release_sock+0x1e5/0x280 [ 486.282639][ C0] sk_setsockopt+0x46b/0x5c40 [ 486.282674][ C0] ? __pfx_sk_setsockopt+0x10/0x10 [ 486.282694][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 486.282713][ C0] ? find_held_lock+0x2b/0x80 [ 486.282730][ C0] ? aa_sock_opt_perm+0xfe/0x1b0 [ 486.282754][ C0] do_sock_setsockopt+0x193/0x1d0 [ 486.282772][ C0] __sys_setsockopt+0x119/0x190 [ 486.282789][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 486.282801][ C0] ? do_syscall_64+0x90/0x840 [ 486.282818][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 486.282836][ C0] do_syscall_64+0x115/0x840 [ 486.282872][ C0] ? clear_bhb_loop+0x40/0x90 [ 486.282896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.282910][ C0] RIP: 0033:0x7f51a539ce59 [ 486.282925][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.282937][ C0] RSP: 002b:00007f51a62f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 486.282949][ C0] RAX: ffffffffffffffda RBX: 00007f51a5616090 RCX: 00007f51a539ce59 [ 486.282958][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 486.282966][ C0] RBP: 00007f51a5432d6f R08: 0000000000000009 R09: 0000000000000000 [ 486.282973][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.282981][ C0] R13: 00007f51a5616128 R14: 00007f51a5616090 R15: 00007ffc222fb398 [ 486.282998][ C0] [ 486.844807][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 486.851477][ C0] CPU: 0 UID: 0 PID: 10170 Comm: syz.3.799 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.862394][ C0] Tainted: [L]=SOFTLOCKUP [ 486.866699][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.877079][ C0] Call Trace: [ 486.880350][ C0] [ 486.883180][ C0] dump_stack_lvl+0x100/0x190 [ 486.887870][ C0] vpanic+0x552/0x970 [ 486.891844][ C0] ? __pfx_vpanic+0x10/0x10 [ 486.896329][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 486.901679][ C0] panic+0xd1/0xe0 [ 486.905393][ C0] ? __pfx_panic+0x10/0x10 [ 486.909800][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 486.915518][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 486.920797][ C0] ? watchdog_timer_fn+0x702/0x7a0 [ 486.925900][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 486.931083][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 486.936530][ C0] __hrtimer_run_queues+0x142/0xa00 [ 486.941721][ C0] hrtimer_interrupt+0x3e5/0x940 [ 486.946676][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 486.952643][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 486.958262][ C0] [ 486.961175][ C0] [ 486.964173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.970249][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 486.976387][ C0] Code: 01 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 d1 20 82 09 8b 82 ec 16 00 00 85 c0 74 f1 8b 82 c8 16 00 00 <83> f8 02 75 e6 48 8b 8a d0 16 00 00 8b 92 cc 16 00 00 48 8b 01 48 [ 486.995976][ C0] RSP: 0018:ffffc90003946ca8 EFLAGS: 00000246 [ 487.002113][ C0] RAX: 0000000000000002 RBX: 000000004ab476e3 RCX: ffffffff8b2a3154 [ 487.010063][ C0] RDX: ffff88807b255d00 RSI: ffffffff8b2a3162 RDI: ffff88807b255d00 [ 487.018012][ C0] RBP: ffffc90003946e90 R08: 0000000000000005 R09: 0000000000000000 [ 487.025968][ C0] R10: 000000004ab476e3 R11: 0000000000000000 R12: ffff88804ce4e000 [ 487.033919][ C0] R13: ffff88802dbca440 R14: 000000004ab476e3 R15: dffffc0000000000 [ 487.041899][ C0] ? tipc_sk_rcv+0x1d4/0x1c90 [ 487.046575][ C0] ? tipc_sk_rcv+0x1e2/0x1c90 [ 487.051241][ C0] tipc_sk_rcv+0x1e2/0x1c90 [ 487.055737][ C0] ? mark_held_locks+0x40/0x70 [ 487.060498][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 487.065425][ C0] ? kfree_skbmem+0x15d/0x210 [ 487.070092][ C0] ? find_held_lock+0x2b/0x80 [ 487.074751][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 487.079584][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 487.084944][ C0] tipc_node_xmit+0x23e/0xfb0 [ 487.089609][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 487.094816][ C0] ? kfree_skbmem+0x15d/0x210 [ 487.099478][ C0] ? tipc_node_distr_xmit+0x177/0x3c0 [ 487.104832][ C0] tipc_node_distr_xmit+0x177/0x3c0 [ 487.110022][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 487.115728][ C0] ? mark_held_locks+0x40/0x70 [ 487.120480][ C0] tipc_sk_rcv+0xaab/0x1c90 [ 487.124969][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 487.129896][ C0] ? find_held_lock+0x2b/0x80 [ 487.134557][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 487.139391][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 487.144749][ C0] tipc_node_xmit+0x23e/0xfb0 [ 487.149413][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 487.154595][ C0] ? __lock_acquire+0x4a5/0x2630 [ 487.159521][ C0] ? tipc_sk_push_backlog+0x318/0xa00 [ 487.164872][ C0] tipc_sk_push_backlog+0x318/0xa00 [ 487.170068][ C0] tipc_sk_filter_rcv+0x960/0x3230 [ 487.175165][ C0] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 487.180689][ C0] ? tipc_sk_lookup+0x474/0xa00 [ 487.185533][ C0] tipc_sk_rcv+0xea5/0x1c90 [ 487.190036][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 487.194956][ C0] ? kfree_skbmem+0x15d/0x210 [ 487.199624][ C0] ? find_held_lock+0x2b/0x80 [ 487.204305][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 487.209137][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 487.214497][ C0] tipc_node_xmit+0x23e/0xfb0 [ 487.219172][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 487.224363][ C0] ? trace_tipc_sk_rej_msg+0x81/0x290 [ 487.229723][ C0] ? tipc_node_distr_xmit+0x177/0x3c0 [ 487.235076][ C0] ? find_held_lock+0x2b/0x80 [ 487.239731][ C0] tipc_node_distr_xmit+0x177/0x3c0 [ 487.244912][ C0] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 487.250793][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 487.256498][ C0] ? trace_sched_exit_tp+0x11c/0x160 [ 487.261767][ C0] ? __schedule+0x12a7/0x67a0 [ 487.266442][ C0] tipc_sk_backlog_rcv+0x16f/0x1e0 [ 487.271552][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 487.277190][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 487.282822][ C0] __release_sock+0x3a2/0x440 [ 487.287502][ C0] release_sock+0x1e5/0x280 [ 487.292001][ C0] sk_setsockopt+0x46b/0x5c40 [ 487.296669][ C0] ? __pfx_sk_setsockopt+0x10/0x10 [ 487.301788][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.306624][ C0] ? find_held_lock+0x2b/0x80 [ 487.311289][ C0] ? aa_sock_opt_perm+0xfe/0x1b0 [ 487.316216][ C0] do_sock_setsockopt+0x193/0x1d0 [ 487.321225][ C0] __sys_setsockopt+0x119/0x190 [ 487.326058][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 487.331162][ C0] ? do_syscall_64+0x90/0x840 [ 487.335825][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 487.341007][ C0] do_syscall_64+0x115/0x840 [ 487.345597][ C0] ? clear_bhb_loop+0x40/0x90 [ 487.350258][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.356129][ C0] RIP: 0033:0x7f51a539ce59 [ 487.360528][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.380113][ C0] RSP: 002b:00007f51a62f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.388510][ C0] RAX: ffffffffffffffda RBX: 00007f51a5616090 RCX: 00007f51a539ce59 [ 487.396463][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 487.404414][ C0] RBP: 00007f51a5432d6f R08: 0000000000000009 R09: 0000000000000000 [ 487.412362][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.420309][ C0] R13: 00007f51a5616128 R14: 00007f51a5616090 R15: 00007ffc222fb398 [ 487.428270][ C0] [ 487.431340][ C0] Kernel Offset: disabled [ 487.435655][ C0] Rebooting in 86400 seconds..