last executing test programs: 5.011759048s ago: executing program 2 (id=3423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB='$\x00', @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250c000000100003800400038008000400", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="77edde91f454121e6a17070000ea1ef8f46172bade830dfa9a6b91b58728ee26865560e50df6a8b633e50ff071e81d542e09fe36d00e36ab8329c0"], 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) r4 = socket(0x2, 0x1, 0x0) mmap$auto(0x1, 0x20009, 0x4a91, 0xeb1, 0x401, 0x8000) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = socket(0x2c, 0x80003, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000) setsockopt$auto(r4, 0x5, 0xfffc, 0x0, 0x98d7) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r5) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto_VHOST_SET_FEATURES2(0xffffffffffffffff, 0x4008af00, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r7, 0x5522, 0xf15) ioctl$auto(r7, 0x5523, r7) r8 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) landlock_restrict_self$auto(r8, 0xb) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_BSS_COLOR={0x30, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x9}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24000084) 4.87944989s ago: executing program 2 (id=3425): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0q', @ANYRES16=0x0, @ANYBLOB="000426bc7000fbdbdf257900000005006000080000000400ec0005003d007f0000000800350000000000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x40884) socket(0x11, 0x80003, 0x304) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x0, 0x0) ioctl$auto_BLKGETZONESZ(r1, 0x80041284, &(0x7f0000000040)=0x4b9) ioctl$auto(r0, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x2, 0x3a) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, &(0x7f00000000c0)="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", 0x7f) mmap$auto(0x0, 0x2020207, 0x1, 0xeb1, r2, 0xfffffffffffffff9) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendmsg$auto_SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x48004}, 0x80) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.685662227s ago: executing program 2 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = wait4$auto(0x0, &(0x7f0000000080), 0x6, &(0x7f00000000c0)={{0x8, 0x8000000000000000}, {0x18c, 0x1ff}, 0xa1, 0x7, 0x9, 0x0, 0x8, 0x7, 0x2, 0x1fc000000000000, 0xf, 0x4b0d, 0x4, 0x101, 0x7}) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video61\x00', 0x381083, 0x0) r4 = set_tid_address$auto(&(0x7f00000001c0)=0x3) r5 = set_tid_address$auto(&(0x7f0000000200)=0x8) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000240)={0x1ac0, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [@nested={0x20, 0xca, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xbc}, @typed={0x8, 0xb5, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r4}]}]}, @NL80211_ATTR_BEACON_HEAD={0x553, 0xe, "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"}, @NL80211_ATTR_STA_FLAGS={0x1534, 0x11, 0x0, 0x1, [@nested={0x4d, 0x12c, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @u32=0x1f9}, @generic="4e7d3d6de509c37d1c4228e1c3cf68bd978699e7555315f320cc3cf290", @generic="90900c4a4f6d51801efc166135a8206f2fb6ea15f8b8c3be", @nested={0x4, 0x8}, @typed={0x5, 0xe, 0x0, 0x0, @str='\x00'}]}, @generic="1a7d4d0dccc697b03e630ae96092ad00ccd317c4b109dd576eb4bd09cc0925bd13869c970db840fcb8d61019ef7b9456253844bc72bbf18e89733a232a2b0be4e72f4be995540978ae76cadebc70226d23770138c3dff1ec4601ec6d416e4be792749baa57d346c1c7dbebe05927227413a784b56dec6c6a2772ff4e167c5b692016", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x12ba, 0x15d, 0x0, 0x1, [@generic="b9c8774fc00f06d40b517c2fa003af6d3e966a21f71701429b9e4cb50a8f951e68c85ac9b7f110f4953cbdee31f9c5871cdd98f66cdf80b02d68303a3f0df75fd8537164f7fc7eaf324246668654e49a8e965f13b7f929d5cad4e658431d2970e5f2f9aba8cb94c61435e168ddef221c8aec5f79f1f8f0d1b9f8074169f3c92166b197d7804bb3b504a3a043e5acf8de1c7312c81b7ba6a09b63932ad7d987db35cebecdb92d431e94b0ea394e3a1ac1892e258de2feccc728d289e7f3acdfe562ebeea403f2f1d5585e502cf75deca7581a6e4e152f86682cbe145601e101c8dd2f895a1c9a5ea6b35cb53974b3e03590faf265", @typed={0x8, 0xe2, 0x0, 0x0, @pid=r5}, @generic="cbd2cad8d117150cf7e85efa1692a76a43483d526c661c17a57a22dfa7c1b5c2c2692c625d7037015126029fa40e1cf8b154ba73aa6aec717090abc9a4a387be238702d8af6716e0568d8a8759fe1b5f522dba3093", @typed={0x6a, 0x35, 0x0, 0x0, @binary="decafcbc29c40dbda7d8044a257575bb03df40756d12c52cc44a5bd95af983d56bb51ee9589f47ca16394cc1b31563e3f4152cd68657c8a26604863c64bc50a6df4b0afe7ecd09189b1bcd0e2ab65f10b4167fa8a85f4bda93ef6a392556b6c846f498ee70d6"}, @generic="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", @generic="2a676266282ca96581c4375811d536f03586e15929bda802991ab1bd18087c65d494192bbdf5c9fab943f360fc0d8174c12b5b13da0913f8376d458b6df60bfc662a6e00e0a8fa54e7db8f51368cc7f76f11903113c40cef7bc63aa0ab8e30e8e0bcddf2be65fba6a07a4b29aa", @generic="9d7b81aa2aec5fbe", @generic="783a9c036d663d7363eb5c607c7e0eb6abb2e87f57707871ca973b67cb96eae42ffed53d9d274e598c100f74d07cc86f93f4924a7ccc3eae626be0a77d45681e668d9e5531b737dbe88e9ffd5dd49634bce617b185f6c19d6c6781d38a1ea03d6617d40abb62fae14a3847ecdd825351aed6c3ed3c8c290c432236d80bd6d0b7e9150674"]}, @generic="f9a421543706004db27a28a921c4ecd314ca3a77731e4c8f74f2729ad3adf84a56d64c1fa8fe65d155f46fe6669a8c181629650dbfb77b87262d4c8dd327c1aa1bc1f9237ce037d8c7362a5cc1d9392ec5ebde3b553af934cdab17ab8d7a", @generic="f2a7e4ca36abb463866365e5d9ffa0c5e1f9e011483557b92d24f48026071d263efc0d3f47855c1099974dcd156526d37292ebc9607873890c868ab2bd17a430b44cb390c64c2f643329deb8cde5d63beca3159997a7317598315b286d92f9782c1a1bb751d5d527ab4249417fc1771a3f8e7683b738f7a493fbaf3afd7f98f1e8522d9966b06f0505436bdb520dce76", @nested={0x44, 0x3b, 0x0, 0x1, [@nested={0x4, 0xfc}, @nested={0x4, 0xff}, @typed={0x35, 0xdd, 0x0, 0x0, @binary="aa269734435bc0cc5cea0a15bf865ff6c3d920b9d23410bbe00b28bcd99ddf85a5739ad1a1ab3b74d3febcb9704c2773c2"}]}, @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x91}]}, @nested={0x5f, 0x16b, 0x0, 0x1, [@generic="f87e1097f46abf9b3cd3714442d82eee5050940011311e766953cab57c670cffc2bbcdf50e2128596e7b1a96043a807c981be4d0dcb01f3012ee3072da604c14e5bbab8c4bd1e28c1d61c34198047d36addcd2987e583648baa02f"]}]}]}, 0x1ac0}, 0x1, 0x0, 0x0, 0x4811}, 0x4000090) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) close_range$auto(r9, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) fgetxattr$auto(r9, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) pread64$auto(r8, 0x0, 0xe, 0x100000000007) renameat2$auto(r6, 0x0, r6, 0x0, 0x4) 4.420208136s ago: executing program 1 (id=3430): setresuid$auto(0x8, 0x8, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) 4.368175465s ago: executing program 1 (id=3431): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) mmap$auto(0xfffffffffffffffd, 0x5, 0xa542, 0xeb1, 0x401, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyt9/power/runtime_status\x00', 0x32a02, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) msync$auto(0x0, 0xe0, 0x6) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x8) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x40011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/pci/00/04.0\x00', 0x220082, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)=""/4096, 0x1000) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r6, 0x0, 0x7, 0x4cbd5d) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r7, 0x0, 0x7, 0x4cbd5d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28002) close_range$auto(0x2, 0x8, 0x0) 3.815243844s ago: executing program 0 (id=3434): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000040)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b0000040088fb", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = semctl$auto_GETPID(0x1, 0xf41, 0xb, 0x5) capset$auto(&(0x7f0000000100)={0x10, r1}, &(0x7f0000000140)={0x1, 0x7, 0x5a}) 3.582404104s ago: executing program 1 (id=3435): r0 = socket(0x2, 0x5, 0x0) fcntl$auto_F_WRLCK(r0, 0x100, 0x1) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2b, 0x1, 0x1) arch_prctl$auto(0x4, 0x3) r3 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r3, &(0x7f0000000180)="c4484027d828120f57cd8cc438c2c390b1d5a62b57628e7351b768d6d679b450b53bd7c6fe7d4570dd878bc4bae003b2890fb024fa61c185091a73ec191acb51f29b119d2cdae76e7b3e9c07b57ddc6273a7c4d76ef780291aa3a0b2a20f7fc3b9566c962c5b059cf5ea9f7275582241979237a8509b68e26da85316283195e116c782d2545fa237e55f372445dc0a06cdde2007ede89233ad41191e32474ed0aa42ba6e834946b1964147f6cab2fed68ed88f987a7f3ded11cc41fa9952474419", 0x10, &(0x7f0000000280)="90701379519bd363c698f989c2034762c2a07a532a2bf33b71531967fdf9a333db0496aa2a38676043c682742d5a1d68a220122eb630e671f37b995641f7a6b807b8b171a981c705847893c8c35346a46f5d317069d7be12832c8442dbeb9d0a463456728de74f6f935a785ca54aa61159f0b55da2959e43e087b9915193c11f346b5ce3b8508f27ef77f7d5666ae3d222d0b424ede927a80918933a239166bf8620bbc790f57cd182d29c980410aebb10c799ebc52d42c7fbff719bed5ce7581a2e458203b4cfab704425e73a3935c55ef0533615f7d3be4809606e2caf8ec0417985edfe42aac465105b7acef71eb80419c5567b4febc6bfee", 0x3, &(0x7f0000000380)="d2aab14935718906c0ef5293ccbf4959deb21c90a066298d6b678dcd750e10f7e48785fb8cae4083c3edfcc3a1a6ff602a1bceaac6d7711b531803c155da9ee297ba26f83a45f399ac55076fa885f32cc8d4db38d9016d9c1950a61b3f650ffff0fd418960a18ba3bfda56e00329bdf01dfc1dfb626667fa392b629f537c5fe8", &(0x7f0000000400)=0xff}, {[0x400, 0x2, 0x100, 0x7ff]}, 0x5, 0x0, &(0x7f0000000440)="ce965c9a701746305497814fe209e1983a80cba79c9e4f3df2ebf5603221f6775a44334911d3f650e0489d1e0d56b577d1cd136d2f98889e9796b701e19847522f73e38804b1b89917"}) unshare$auto(0x40000080) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r4, 0xfffe, 0x7ff) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x10402, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a741, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) close_range$auto(r1, r2, 0x0) socket(0x2, 0x3, 0x6) r6 = socket(0x2, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video11\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r7, 0x80085617, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 3.574942894s ago: executing program 2 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x7d}, @L2TP_ATTR_PW_TYPE={0x0, 0x1, 0x7ff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_CONN_ID={0x0, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.545379937s ago: executing program 0 (id=3437): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="01002dbd7000fd"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='-\x00', 0x30) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x16d7, 0x1000, 0xecb, 0x8, 0x3}, 0x9) io_uring_register$auto(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) 3.456079899s ago: executing program 2 (id=3438): pidfd_open$auto(0x1, 0x401) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x143382, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x2) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) pidfd_open$auto(0x1, 0x401) (async) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x143382, 0x0) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) (async) unshare$auto(0x2) (async) ioctl$auto(r0, 0x5646, r0) (async) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) (async) 3.42187896s ago: executing program 0 (id=3439): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c0, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video61\x00', 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, r1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0x4, 0x1d) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x10001) ioctl$auto_PPPIOCUNBRIDGECHAN(r0, 0x7434, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x2) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0xa}, 0x0, 0xf4240, 0x1) 3.124607019s ago: executing program 1 (id=3440): syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x21, 0x5, 0x3, 0x80000010, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x80000002, 0x6, 0x9, 0x800000000801e, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x0, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x8, 0x401000, 0xffff) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x8ffb, 0x100000000040eb2, 0xffffffffffffffff, 0x1) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x6) socket(0x15, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x29, 0x2, 0xfffffdb2) socket(0xa, 0x801, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) close_range$auto(0x0, r3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) setfsuid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x89) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mremap$auto(0x772, 0x6, 0x7, 0x8000, 0x100000000) 1.401993286s ago: executing program 0 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) getsockopt$auto_SO_GET_FILTER(r1, 0x0, 0x1a, &(0x7f00000003c0)='/dev/sg0\x00\x0e\xe7\x8eI\xb3m\x83\xb3\v\\\x9f\xb4\x8f\x7f@7\x03\x00\x00\x00\x86w\x02\xa0\x16MZ\x14W`\xc3HjX\xa4\xe7\xd0\xc5D\xe4\xc5 \x9b3r\x11,\xdd9\r\xab~\xf8\xec\x8az;\xfa\xb3\xc8\x04\x16\xedT\x95\x82-\x05\tZR\b\x14\xe6\xe7\xfc\xfds\x8a\xfayT\x9dp\x1a \xba$\x02bz\xc3\x8c\x7fT2\xfe\x93\xf6[\xc3\xb76\xbc\x88\xee}\xbb`,\x11\xe2gP\xda\xbeG\xb1J\xd5\x14\xb1j\xa8\\\x16Y^U\x0e\xfb\xfa\xe8XJ\x94\xa4\xfb\"\x9b\xb4_\v\n\x97\x8c\x88,l\x91\xec\x1ca\xd0~\x00Zi\x98J\x0eG\xac|a\xd6\xc0\x9f~`\x98\x83\x92\x19\x9a*y\xba{hv\xe5\x98LT\xac\xbf\xff\x86!\xb0\xd1D\xe6G\xd1\x9b\x11\x99\x83\xf3\xd6\xc4Oz\n\xc1\x81\xcco\xf6\x9e9\xc6\x8fG\xef\v\xc1Z\xe7\xa7\'\x8d\xcf\xee+\xacc\xacR\x04N\xb8 J\x7fbQ\x88\xeb\x8b>\xd05\xad\x18n\xd6\xf5T\x81H\xdfY4\xd1\x12\x84\xdfVt\xce\xe9\xe2>\x83g\x0fe\xeb\xe5\xd5\xc3\xa1\x97\xd4\x88\xbdD\xf8\x9bP\xc8\xc1$\x00\x14\x1ak\xc3\xafU\xc4P\x14\xbf\xf1\xfd\xda\x90\x1e\xefY\xe9\xed\x7f', &(0x7f00000000c0)=0x4cb) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), r0) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.327774235s ago: executing program 0 (id=3444): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x0, 0x3, 0x1}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x0, 0x2, r2}]}, 0x46}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x5, 0x5, 0x8, 0xffffffffffffffff, [0x1], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0x1002, 0x7, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) (async) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x414f, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x100000000000000c, 0x8, 0xfffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, 0x0, 0x501402, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_register$auto(0x2, 0x23, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone3$auto(&(0x7f0000000100)={0x1c00001100, 0x7, 0x8, 0x7f, 0x0, 0x401, 0xf2, 0x278, 0x3, 0x9, 0xb884}, 0x93) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.191558309s ago: executing program 3 (id=3445): futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x623d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c40)=""/25, 0x19) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) r1 = socket(0x21, 0x5, 0xfffff129) close$auto(r1) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) (async) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) ioctl$auto_TIOCGETD2(r2, 0x5424, &(0x7f00000000c0)="d4a922f9527adb91296b350d81ecdfb47013e5694596e86bb9c0bb7da0917bfc96089f6854e37ed1ae3d3f23db4bdb7a5e3f3f5e531ccb63187d1fae2221451bdc45f8b13bf9d33a0a7267fd9d3470b1732f5aae1fd2a1dc3955df05616ec65ffe0b64262dc223a5eba888c6e4b842c62d52fe0055e8e15543bfcbd82bb40ef1df886aee16a90f60376cb1a07f54d0d2b08bb4a7d2452f4a30101b37b1e93d55674a8495eb024e19a7c93f2f363089112eb02496b24f44d185880e1accfb4f00b7a0480d8a2b1144e839d5253c11cf946093ab36a38d7d65d5f121c800f2e0a108e8fc5508acc501b92f") (async) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0xffffffff, 0x401, 0x1, @_sigchld={0x0, 0x0, 0x2, 0x2d, 0xc91}}}, 0x5, &(0x7f0000000240)={{0xc4d, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x4, 0x8000, 0x7, 0x4, 0x1, 0x100000000f, 0x6, 0xf, 0x7f, 0x6, 0x5e97, 0xd, 0x5}) (async) migrate_pages$auto(0x0, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x3) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/smp_affinity_list\x00', 0x40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000300)=""/4096, 0x1000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pnp0/00:02/resources\x00', 0x63102, 0x0) sendfile$auto(r2, r4, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x80003, 0x304) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) (async) ioctl$auto(r5, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) (async) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) 1.047918847s ago: executing program 3 (id=3446): mmap$auto(0x37, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000003c0)={0x6, 0xffff, 0x7, 0x817, 0x3}) (async) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000003c0)={0x6, 0xffff, 0x7, 0x817, 0x3, 0x0}) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) (async) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000400)=@task_fd_query={r1, r2, 0x7, 0x5, 0x1, 0x0, r0, 0x81, 0xeaaf}, 0x80000000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x2000c000) (async) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x2000c000) io_uring_setup$auto(0x2800, 0x0) open(0x0, 0xc0842, 0x95) (async) open(0x0, 0xc0842, 0x95) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x99) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x99) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x4101, 0x0) (async) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x4101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1, 0x3000, 0x6, 0x7, 0x4007, 0xffffffffffffffff, [0xffffffff], {0xa, 0x6, 0x8c4c, 0x29f, 0x3, 0xfffffffa, 0x4, 0x806}, {0xe63c, 0x1, 0x52, 0xa5, 0x2, 0x1a7b870a, 0x76c2, 0x8000d, 0x100000000}}) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x6b) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x13, 0xeb1, 0xfffffffffffffffa, 0x7ffc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 940.860702ms ago: executing program 1 (id=3447): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) lseek$auto(0xffffffffffffffff, 0x7, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000080)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x4, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) (async) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/014/001\x00', 0x82800, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(r3, &(0x7f0000000180)=@nl=@unspec, 0x0) ioctl$auto(r4, 0x2, r0) 478.138468ms ago: executing program 2 (id=3448): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r2 = getpid() r3 = gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x1, 0x1, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x80007, 0x7, 0x6, r4}, 0xf) rt_tgsigqueueinfo$auto(r2, r3, 0x1f, 0x0) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffe, 0x1, 0x3, 0xe}, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=0x8, 0x3, 0x4, 0x6, 0x3, 0x6, 0x6, 0x4, 0x2, @inferred=r2, @inferred=r2}) socket(0x18, 0x3, 0x2) socketpair$auto(0xfffffffd, 0x93, 0x7, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(0x3, 0x5420, 0x38) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) ioctl$auto_SNDCTL_TMR_CONTINUE(r5, 0x5406, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') io_uring_setup$auto(0x6, 0x0) 420.06712ms ago: executing program 0 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x1, 0x11, &(0x7f0000000180)='\'\x8f\x93S\xb2\xa1\x01J\x0e\x81P\a\x97RM\xd0\x10\xe5\xea\x84\'\xee@\x9b1\xc2Ud\xfdh+\xe8\xe2d\x9b\xcc\xd9\x80\x11\x85fO\x8eU\x06\x92\xea6\x03uO<\xbb\xd5\x83\x1b\x85\xe5\x11\xe7\x94\xa7\xf1\xb1\x86\xf0h\xc6A\x98\x8f\xbe@\xb3s\xbdy\fOi$\xc1+\xf8\xb4\x84U\x134O&\xf1\xa1\x93\xf8', &(0x7f0000000040)=0x82) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x5) (async) io_uring_register$auto(0x2, 0x11, &(0x7f00000002c0), 0x802) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async) lsetxattr$auto(0x0, &(0x7f0000000000)='-\x00', 0x0, 0x7fffffff, 0x3) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/auth_enable\x00', 0x100, 0x0) socket(0xa, 0x5, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) (async) shutdown$auto(0x200000003, 0x2) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="81000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyb3\x00', 0x80502, 0x0) 197.622065ms ago: executing program 3 (id=3450): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) 171.567671ms ago: executing program 3 (id=3451): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000037bb331446af64e60cb0c88152fbbb73de724547e7e17b36421bfacbab57c7d166ef56a82213827973f674af4dd3beffce1e68be8b9a982d132537a4fc45163795dbd3320dfeebc4817296ae52fb4f494f148393843e87f7f4b2928d1053cba90000000000000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) connect$auto(r5, 0x0, 0x54) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000100), r2) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) r6 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r7, &(0x7f0000000080)=""/18, 0x12) (async) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) (async, rerun: 32) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000002000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002380)=ANY=[@ANYBLOB="880d0000", @ANYRES16=r3, @ANYBLOB="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"], 0xd88}, 0x1, 0x0, 0x0, 0xc080}, 0x20000000) (async, rerun: 32) r8 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r8, 0x4010ae42, &(0x7f0000000040)={0x8f}) (async) r9 = pidfd_open$auto(0x1, 0x0) setns(r9, 0x60020000) 126.32207ms ago: executing program 3 (id=3452): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/enabled\x00', 0xf80, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001280)=""/4118, 0x1016) 125.473665ms ago: executing program 3 (id=3453): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0xfffffffffffffffe, 0x4, 0x6, 0x8000000008011, 0x3, 0x6b000000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) write$auto(r0, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.13/usb35/35-0:1.0/usb35-port1/over_current_count\x00', 0x286180, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) pread64$auto(r3, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0x2) write$auto(r1, &(0x7f0000000040)='\x00', 0x2) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) unshare$auto(0x40000080) acct$auto(0x0) 0s ago: executing program 1 (id=3454): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0, @ANYBLOB="a3db43ee147eeb"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) setresuid$auto(0x2, 0x7, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT], 0x1ac}, 0x1, 0x0, 0x0, 0x24004810}, 0x40d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x400000a4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptycb\x00', 0x10142, 0x0) socket(0x11, 0x6, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0x1000000000a2f9, 0x1, 0x9, 0x8, 0x4, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop4\x00', 0x16be83, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) getsockopt$auto_SO_PRIORITY(r2, 0x8, 0xc, &(0x7f00000002c0)='\'(#[#\x00', &(0x7f0000000300)=0x5) mbind$auto(0xfffffffffffffffa, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0) r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0xa91, 0x6, &(0x7f00000000c0)={{0x0, 0x9}, {0x7, 0xfffffffffffffff9}, 0x9, 0x2, 0xffff, 0x0, 0x6, 0x10, 0x6, 0x4, 0x5, 0xd13, 0x8840, 0x3de564aa, 0xc5f7, 0x45}) syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/net\x00') kernel console output (not intermixed with test programs): .wg1.retrans_time_ms instead [ 480.414309][T18165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.514280][T18165] team0: Port device team_slave_0 added [ 480.524224][T18216] random: crng reseeded on system resumption [ 480.546224][T18165] team0: Port device team_slave_1 added [ 480.594286][T18165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.612256][T18165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.640084][T18220] Unrecognized hibernate image header format! [ 480.655407][T18220] PM: hibernation: Image mismatch: architecture specific data [ 480.664970][T18165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.690231][T18165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.707286][T18165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.766433][T18165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.076419][T18165] hsr_slave_0: entered promiscuous mode [ 481.089989][T18165] hsr_slave_1: entered promiscuous mode [ 481.104851][T18165] debugfs: 'hsr0' already exists in 'hsr' [ 481.117255][T18165] Cannot create hsr debugfs directory [ 481.269146][T17260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.288448][T17260] bond_slave_0: left promiscuous mode [ 481.305457][T17260] bond0 (unregistering): Released all slaves [ 481.478625][T17260] ovs_: left promiscuous mode [ 481.584904][T17260] HfR: left promiscuous mode [ 481.791818][ T8591] Bluetooth: hci2: command 0x0c1a tx timeout [ 481.797953][ T8591] Bluetooth: hci5: command 0x0c1a tx timeout [ 481.804554][ T8339] Bluetooth: hci1: command 0x041b tx timeout [ 481.810961][ T8815] Bluetooth: hci3: command 0x040f tx timeout [ 482.559441][T17260] hsr_slave_0: left promiscuous mode [ 482.587122][T17260] hsr_slave_1: left promiscuous mode [ 482.610571][T17260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.639846][T17260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.679117][T17260] veth1_macvtap: left promiscuous mode [ 482.711589][T17260] veth0_macvtap: left promiscuous mode [ 483.352616][T17260] team0 (unregistering): Port device team_slave_1 removed [ 483.379335][T17260] team0 (unregistering): Port device team_slave_0 removed [ 483.709979][T18165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.750784][T18165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.776625][T18165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.820582][T18165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.850366][T18165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.880093][ T8339] Bluetooth: hci1: command 0x041b tx timeout [ 483.886276][ T8815] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.915177][T18165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.938249][T18165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.976448][T18165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.171201][T18165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.217330][T18165] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.221916][T18289] futex_wake_op: syz.1.2502 tries to shift op by -2048; fix this program [ 484.246676][T18289] futex_wake_op: syz.1.2502 tries to shift op by -2048; fix this program [ 484.259337][T17258] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.266525][T17258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.290178][T17258] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.297347][T17258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.157341][T18165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.279829][T18165] veth0_vlan: entered promiscuous mode [ 485.306560][T18165] veth1_vlan: entered promiscuous mode [ 485.535430][T18165] veth0_macvtap: entered promiscuous mode [ 485.579534][T18165] veth1_macvtap: entered promiscuous mode [ 485.667187][T18165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.695377][T18165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.933613][T17253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.953673][ T8339] Bluetooth: hci1: command 0x041b tx timeout [ 485.959725][ T8815] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.114540][T17253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.357007][T17253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.400642][ T8815] Bluetooth: hci5: unexpected event for opcode 0x7c89 [ 486.531674][T17253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.787085][T17257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.955281][T17257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.131641][T17260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.220730][T17260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.516795][T18363] random: crng reseeded on system resumption [ 488.034748][ T8815] Bluetooth: hci1: command 0x041b tx timeout [ 489.122784][ T8339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.139211][ T8339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.164777][ T8339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.172804][ T8339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.184039][ T8339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.277772][ T29] audit: type=1326 audit(1843105934.324:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18400 comm="syz.0.2525" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80a459ce59 code=0x0 [ 489.842512][T17260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.869081][T18429] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 489.893414][T18429] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 489.992507][T17260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.115632][ T8815] Bluetooth: hci1: command 0x041b tx timeout [ 490.143755][T17260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.238530][T17260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.284768][T18438] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2530'. [ 490.411450][T18404] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.419208][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.428037][T18404] bridge_slave_0: entered allmulticast mode [ 490.429419][T18404] bridge_slave_0: entered promiscuous mode [ 490.432840][T17260] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.435216][T18404] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.435305][T18404] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.435415][T18404] bridge_slave_1: entered allmulticast mode [ 490.437125][T18404] bridge_slave_1: entered promiscuous mode [ 490.469935][T18404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.528251][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 490.530049][T18404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.584913][T17260] dummy0: left allmulticast mode [ 490.596890][T17260] dummy0: left promiscuous mode [ 490.611356][T17260] bridge0: port 3(dummy0) entered disabled state [ 490.647988][T17260] bridge_slave_1: left allmulticast mode [ 490.661134][T17260] bridge_slave_1: left promiscuous mode [ 490.673486][T17260] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.691445][T17260] bridge_slave_0: left allmulticast mode [ 490.702012][T17260] bridge_slave_0: left promiscuous mode [ 490.710682][T17260] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.236724][ T8815] Bluetooth: hci4: command tx timeout [ 491.284943][T17260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.324937][T17260] bond_slave_1: left promiscuous mode [ 491.333405][T17260] bond0 (unregistering): Released all slaves [ 491.371623][T18404] team0: Port device team_slave_0 added [ 491.387436][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 491.405047][T18404] team0: Port device team_slave_1 added [ 491.410987][T17260] ovs_: left promiscuous mode [ 491.466071][T18404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.475416][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.513162][T18404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.542823][T18404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.566311][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.610409][T18404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.812360][T18404] hsr_slave_0: entered promiscuous mode [ 491.828372][T18404] hsr_slave_1: entered promiscuous mode [ 491.840499][T18404] debugfs: 'hsr0' already exists in 'hsr' [ 491.852773][T18404] Cannot create hsr debugfs directory [ 492.102058][T18495] netlink: 'syz.2.2537': attribute type 64 has an invalid length. [ 492.179026][T18495] netlink: 74 bytes leftover after parsing attributes in process `syz.2.2537'. [ 492.197176][ T8815] Bluetooth: hci1: command 0x041b tx timeout [ 492.414347][T18503] random: crng reseeded on system resumption [ 492.541252][T17260] hsr_slave_0: left promiscuous mode [ 492.568101][T17260] hsr_slave_1: left promiscuous mode [ 492.588469][T17260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.596076][T17260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.606340][T17260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.613966][T17260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.646442][T17260] veth1_vlan: left promiscuous mode [ 492.655208][T17260] veth0_vlan: left promiscuous mode [ 492.901582][T17260] team0 (unregistering): Port device team_slave_1 removed [ 492.933348][T17260] team0 (unregistering): Port device team_slave_0 removed [ 493.063749][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 493.328284][ T8815] Bluetooth: hci4: command tx timeout [ 493.460215][T18404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.484965][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.501625][T18404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.569716][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.674286][T18404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.793245][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.897250][T18404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.921862][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.006264][T18570] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 494.133591][T18579] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 494.153833][T18579] vhci_hcd vhci_hcd.2: invalid port number 0 [ 494.433684][T18404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.462170][T18404] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.494835][T17257] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.501938][T17257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.539243][T17257] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.546327][T17257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.398530][ T8339] Bluetooth: hci4: command tx timeout [ 495.454738][T18404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.467066][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 495.684073][T18404] veth0_vlan: entered promiscuous mode [ 495.766937][T18404] veth1_vlan: entered promiscuous mode [ 495.944843][T18404] veth0_macvtap: entered promiscuous mode [ 495.972897][T18404] veth1_macvtap: entered promiscuous mode [ 496.012401][T18404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.044777][T18404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.064241][T17257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.084904][T17257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.103604][T17257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.115690][T17257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.384956][ T8703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.409845][ T8703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.438066][T17260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.451776][T17260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.626330][T18660] random: crng reseeded on system resumption [ 497.479699][ T8339] Bluetooth: hci4: command tx timeout [ 499.125150][T18761] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 499.733889][T18790] netlink: Unknown NAT attribute (type=262, max=9) [ 500.805982][T18813] Invalid ELF header magic: != ELF [ 500.846211][T18816] vivid-008: ================= START STATUS ================= [ 500.858559][T18816] vivid-008: ================== END STATUS ================== [ 501.324511][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.330819][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.393771][T18845] random: crng reseeded on system resumption [ 502.022574][T18865] FAULT_INJECTION: forcing a failure. [ 502.022574][T18865] name failslab, interval 1, probability 0, space 0, times 0 [ 502.048025][T18865] CPU: 1 UID: 0 PID: 18865 Comm: syz.2.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.048061][T18865] Tainted: [L]=SOFTLOCKUP [ 502.048067][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.048078][T18865] Call Trace: [ 502.048083][T18865] [ 502.048089][T18865] dump_stack_lvl+0x100/0x190 [ 502.048117][T18865] should_fail_ex.cold+0x5/0xa [ 502.048132][T18865] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 502.048154][T18865] should_failslab+0xc2/0x120 [ 502.048169][T18865] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 502.048189][T18865] ? audit_log_start+0x29d/0x930 [ 502.048217][T18865] audit_log_start+0x29d/0x930 [ 502.048261][T18865] ? __pfx_audit_log_start+0x10/0x10 [ 502.048303][T18865] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.048343][T18865] ? integrity_audit_msg+0x41/0x60 [ 502.048461][T18865] integrity_audit_message+0x10c/0x4f0 [ 502.048502][T18865] ? __pfx_integrity_audit_message+0x10/0x10 [ 502.048538][T18865] ? __pfx_ima_add_template_entry+0x10/0x10 [ 502.048577][T18865] integrity_audit_msg+0x41/0x60 [ 502.048608][T18865] ima_add_violation+0x1b9/0x3c0 [ 502.048673][T18865] ? __pfx_ima_add_violation+0x10/0x10 [ 502.048701][T18865] ? ima_d_path+0x137/0x260 [ 502.048738][T18865] ? __pfx_ima_d_path+0x10/0x10 [ 502.048768][T18865] ? lockdep_init_map_type+0x5c/0x250 [ 502.048804][T18865] ? ima_inode_get+0x39d/0x580 [ 502.048845][T18865] process_measurement+0x148f/0x2350 [ 502.048892][T18865] ? __pfx_process_measurement+0x10/0x10 [ 502.048940][T18865] ? rcu_is_watching+0x12/0xc0 [ 502.048981][T18865] ? lock_release+0x24d/0x310 [ 502.049024][T18865] ? __pfx_aa_file_perm+0x10/0x10 [ 502.049118][T18865] ? __pfx_futex_hash+0x10/0x10 [ 502.049151][T18865] ? rcu_is_watching+0x12/0xc0 [ 502.049192][T18865] ima_file_mmap+0x1c4/0x1f0 [ 502.049232][T18865] ? __pfx_ima_file_mmap+0x10/0x10 [ 502.049277][T18865] security_mmap_file+0x278/0x9b0 [ 502.049338][T18865] vm_mmap_pgoff+0xec/0x470 [ 502.049370][T18865] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 502.049397][T18865] ? lock_release+0x24d/0x310 [ 502.049432][T18865] ? __fget_files+0x21f/0x3d0 [ 502.049455][T18865] ksys_mmap_pgoff+0x3cb/0x610 [ 502.049470][T18865] ? __x64_sys_futex+0x358/0x4d0 [ 502.049491][T18865] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 502.049505][T18865] ? xfd_validate_state+0x129/0x190 [ 502.049529][T18865] __x64_sys_mmap+0x125/0x190 [ 502.049543][T18865] do_syscall_64+0x115/0x840 [ 502.049561][T18865] ? clear_bhb_loop+0x40/0x90 [ 502.049577][T18865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.049592][T18865] RIP: 0033:0x7fd8d959ce59 [ 502.049604][T18865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.049619][T18865] RSP: 002b:00007fd8d77cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 502.049634][T18865] RAX: ffffffffffffffda RBX: 00007fd8d9816090 RCX: 00007fd8d959ce59 [ 502.049645][T18865] RDX: 0000000000000fd5 RSI: 0000000000000001 RDI: 0000000000000000 [ 502.049655][T18865] RBP: 00007fd8d9632d6f R08: 0000000000000007 R09: 0000000040000000 [ 502.049665][T18865] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 502.049674][T18865] R13: 00007fd8d9816128 R14: 00007fd8d9816090 R15: 00007ffcb5f5d138 [ 502.049689][T18865] [ 502.050862][T18865] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 502.503863][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 502.517438][T18865] audit: out of memory in audit_log_start [ 503.275375][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2594'. [ 506.090956][T18972] kAFS: Invalid Command on /proc/fs/afs/cells file [ 507.081502][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2621'. [ 507.091433][T19008] batadv0: entered promiscuous mode [ 507.363760][T18991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 507.370067][T18991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 507.376351][T18991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 507.383582][T18991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 507.391531][T18991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.398466][T18991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.545931][T19026] bond0: option arp_interval: invalid value () [ 507.567684][T19026] bond0: option arp_interval: allowed values 0 - 2147483647 [ 508.129130][T19039] Invalid ELF header magic: != ELF [ 508.686492][ T8339] Bluetooth: hci5: command 0x0c1a tx timeout [ 508.881825][T19053] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 509.209229][T19074] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17923] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[19074] [ 509.405181][ T8815] Bluetooth: hci1: command 0x041b tx timeout [ 509.411235][T18226] Bluetooth: hci2: command 0x0c1a tx timeout [ 509.417407][ T8339] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.674602][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 511.469913][T19190] MTRR 0 not used [ 511.486207][ T8339] Bluetooth: hci4: command 0x0c1a tx timeout [ 511.531832][T19188] smpboot: CPU 1 is now offline [ 511.854290][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 512.013876][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2653'. [ 512.208799][T19210] random: crng reseeded on system resumption [ 513.056893][ T8339] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 513.567323][ T8339] Bluetooth: hci4: command 0x0c1a tx timeout [ 514.026829][T19266] FAULT_INJECTION: forcing a failure. [ 514.026829][T19266] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.173295][T19266] CPU: 0 UID: 0 PID: 19266 Comm: syz.3.2666 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.173323][T19266] Tainted: [L]=SOFTLOCKUP [ 514.173331][T19266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.173342][T19266] Call Trace: [ 514.173347][T19266] [ 514.173353][T19266] dump_stack_lvl+0x100/0x190 [ 514.173381][T19266] should_fail_ex.cold+0x5/0xa [ 514.173398][T19266] get_futex_key+0x1d2/0x14f0 [ 514.173418][T19266] ? __pfx_get_futex_key+0x10/0x10 [ 514.173438][T19266] ? trace_ignore_this_task+0xc3/0x100 [ 514.173453][T19266] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 514.173474][T19266] futex_wait_setup+0x91/0x540 [ 514.173491][T19266] __futex_wait+0x19f/0x300 [ 514.173506][T19266] ? __pfx___futex_wait+0x10/0x10 [ 514.173520][T19266] ? __pfx_try_to_wake_up+0x10/0x10 [ 514.173542][T19266] ? __pfx_futex_wake_mark+0x10/0x10 [ 514.173558][T19266] ? futex_wake+0x4ea/0x5e0 [ 514.173571][T19266] ? rcu_is_watching+0x12/0xc0 [ 514.173594][T19266] futex_wait+0xe6/0x370 [ 514.173608][T19266] ? __pfx_futex_wait+0x10/0x10 [ 514.173624][T19266] ? vm_mmap_pgoff+0x103/0x470 [ 514.173641][T19266] do_futex+0x265/0x440 [ 514.173661][T19266] ? __pfx_do_futex+0x10/0x10 [ 514.173680][T19266] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.173701][T19266] __x64_sys_futex+0x34f/0x4d0 [ 514.173722][T19266] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 514.173736][T19266] ? __pfx___x64_sys_futex+0x10/0x10 [ 514.173758][T19266] ? rcu_is_watching+0x12/0xc0 [ 514.173788][T19266] do_syscall_64+0x115/0x840 [ 514.173806][T19266] ? clear_bhb_loop+0x40/0x90 [ 514.173823][T19266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.173839][T19266] RIP: 0033:0x7f1a0659ce59 [ 514.173853][T19266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.173868][T19266] RSP: 002b:00007f1a073a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 514.173883][T19266] RAX: ffffffffffffffda RBX: 00007f1a06816098 RCX: 00007f1a0659ce59 [ 514.173893][T19266] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a06816098 [ 514.173903][T19266] RBP: 00007f1a06816090 R08: 0000000000000000 R09: 0000000000000000 [ 514.173913][T19266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.173923][T19266] R13: 00007f1a06816128 R14: 00007ffdf5f5d210 R15: 00007ffdf5f5d2f8 [ 514.173937][T19266] [ 515.563720][T19313] netlink: 7006 bytes leftover after parsing attributes in process `syz.2.2680'. [ 515.653299][T19321] FAULT_INJECTION: forcing a failure. [ 515.653299][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 515.697930][T19321] CPU: 0 UID: 0 PID: 19321 Comm: syz.0.2682 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.697955][T19321] Tainted: [L]=SOFTLOCKUP [ 515.697961][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.697969][T19321] Call Trace: [ 515.697974][T19321] [ 515.697980][T19321] dump_stack_lvl+0x100/0x190 [ 515.698005][T19321] should_fail_ex.cold+0x5/0xa [ 515.698019][T19321] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 515.698041][T19321] should_failslab+0xc2/0x120 [ 515.698054][T19321] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 515.698073][T19321] ? shmem_alloc_inode+0x25/0x50 [ 515.698087][T19321] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 515.698102][T19321] shmem_alloc_inode+0x25/0x50 [ 515.698115][T19321] alloc_inode+0x68/0x250 [ 515.698132][T19321] new_inode+0x22/0x1c0 [ 515.698147][T19321] ? trace_kmem_cache_alloc+0xdd/0x100 [ 515.698162][T19321] shmem_get_inode+0x1e3/0x1010 [ 515.698177][T19321] ? __pfx_shmem_get_inode+0x10/0x10 [ 515.698194][T19321] __shmem_file_setup+0x382/0x460 [ 515.698210][T19321] ? __pfx___shmem_file_setup+0x10/0x10 [ 515.698227][T19321] ? vm_area_alloc+0x1f/0x160 [ 515.698246][T19321] shmem_zero_setup+0x96/0x1b0 [ 515.698266][T19321] __mmap_region+0x2509/0x2dd0 [ 515.698285][T19321] ? __pfx___mmap_region+0x10/0x10 [ 515.698303][T19321] ? rcu_is_watching+0x12/0xc0 [ 515.698324][T19321] ? lock_acquire+0x301/0x370 [ 515.698340][T19321] ? __pfx___might_resched+0x10/0x10 [ 515.698358][T19321] ? do_raw_spin_lock+0x128/0x260 [ 515.698379][T19321] ? do_raw_spin_unlock+0x145/0x1e0 [ 515.698397][T19321] ? __css_rstat_updated+0x1ce/0x5a0 [ 515.698428][T19321] ? do_raw_spin_lock+0x128/0x260 [ 515.698447][T19321] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.698466][T19321] ? debug_object_assert_init+0x1c4/0x300 [ 515.698569][T19321] ? rcu_is_watching+0x12/0xc0 [ 515.698592][T19321] ? trace_hrtimer_start+0x77/0x220 [ 515.698613][T19321] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 515.698638][T19321] ? rcu_is_watching+0x12/0xc0 [ 515.698657][T19321] ? trace_irq_enable.constprop.0+0x122/0x160 [ 515.698694][T19321] mmap_region+0x35d/0x620 [ 515.698712][T19321] ? rcu_is_watching+0x12/0xc0 [ 515.698732][T19321] ? __pfx_mmap_region+0x10/0x10 [ 515.698751][T19321] ? cap_mmap_addr+0x4b/0x120 [ 515.698811][T19321] ? bpf_lsm_mmap_addr+0x9/0x30 [ 515.698830][T19321] ? security_mmap_addr+0x71/0x1e0 [ 515.698847][T19321] ? __get_unmapped_area+0x255/0x3e0 [ 515.698862][T19321] do_mmap+0xc63/0x12f0 [ 515.698876][T19321] ? __pfx_do_mmap+0x10/0x10 [ 515.698889][T19321] ? __pfx_down_write_killable+0x10/0x10 [ 515.698908][T19321] ? __pfx_futex_wait+0x10/0x10 [ 515.698923][T19321] vm_mmap_pgoff+0x29e/0x470 [ 515.698938][T19321] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 515.698953][T19321] ? __pfx_do_futex+0x10/0x10 [ 515.698973][T19321] ? rcu_is_watching+0x12/0xc0 [ 515.698993][T19321] ksys_mmap_pgoff+0xe4/0x610 [ 515.699006][T19321] ? __x64_sys_futex+0x358/0x4d0 [ 515.699026][T19321] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 515.699039][T19321] ? xfd_validate_state+0x129/0x190 [ 515.699061][T19321] __x64_sys_mmap+0x125/0x190 [ 515.699075][T19321] do_syscall_64+0x115/0x840 [ 515.699091][T19321] ? clear_bhb_loop+0x40/0x90 [ 515.699107][T19321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.699121][T19321] RIP: 0033:0x7f80a459ce59 [ 515.699133][T19321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.699147][T19321] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 515.699161][T19321] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 515.699171][T19321] RDX: 00000000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 515.699179][T19321] RBP: 00007f80a4632d6f R08: 00040000000000a5 R09: 0000000000008000 [ 515.699189][T19321] R10: 0000000000020eb1 R11: 0000000000000246 R12: 0000000000000000 [ 515.699198][T19321] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 515.699211][T19321] [ 516.536856][T19349] sd 0:0:1:0: PR command failed: 1026 [ 516.549048][T19349] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 516.565914][T19349] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 520.657091][T19529] random: crng reseeded on system resumption [ 522.460321][T19594] netlink: 318 bytes leftover after parsing attributes in process `syz.2.2733'. [ 522.544999][T19596] netlink: 'syz.1.2734': attribute type 11 has an invalid length. [ 522.664442][T19601] netlink: zone id is out of range [ 522.695551][T19601] netlink: zone id is out of range [ 522.726622][T19601] netlink: zone id is out of range [ 522.774322][T19601] netlink: zone id is out of range [ 522.839550][T19601] netlink: zone id is out of range [ 522.902507][T19601] netlink: zone id is out of range [ 522.961574][T19601] netlink: zone id is out of range [ 523.014620][T19601] netlink: zone id is out of range [ 523.122325][T19601] netlink: zone id is out of range [ 523.182176][ T29] audit: type=1800 audit(1843105968.207:32): pid=19634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2742" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 523.211174][T19601] netlink: zone id is out of range [ 526.233897][T19697] can: request_module (can-proto-0) failed. [ 527.184609][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 528.197397][T19728] FAULT_INJECTION: forcing a failure. [ 528.197397][T19728] name fail_futex, interval 1, probability 0, space 0, times 0 [ 528.210357][T19728] CPU: 0 UID: 0 PID: 19728 Comm: syz.1.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.210382][T19728] Tainted: [L]=SOFTLOCKUP [ 528.210387][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.210397][T19728] Call Trace: [ 528.210402][T19728] [ 528.210408][T19728] dump_stack_lvl+0x100/0x190 [ 528.210435][T19728] should_fail_ex.cold+0x5/0xa [ 528.210451][T19728] should_fail_futex+0x4c/0x60 [ 528.210470][T19728] futex_lock_pi_atomic+0xe7/0xaf0 [ 528.210486][T19728] futex_lock_pi+0x278/0x7f0 [ 528.210501][T19728] ? __pfx_futex_lock_pi+0x10/0x10 [ 528.210516][T19728] ? __pfx___futex_wait+0x10/0x10 [ 528.210529][T19728] ? __pfx_try_to_wake_up+0x10/0x10 [ 528.210557][T19728] ? __pfx_futex_wake_mark+0x10/0x10 [ 528.210573][T19728] ? preempt_count_add+0x76/0x150 [ 528.210590][T19728] ? ksys_write+0x190/0x250 [ 528.210603][T19728] ? rcu_is_watching+0x12/0xc0 [ 528.210625][T19728] do_futex+0x31d/0x440 [ 528.210645][T19728] ? __pfx_do_futex+0x10/0x10 [ 528.210665][T19728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 528.210810][T19728] __x64_sys_futex+0x34f/0x4d0 [ 528.210835][T19728] ? __pfx___x64_sys_futex+0x10/0x10 [ 528.210858][T19728] ? rcu_is_watching+0x12/0xc0 [ 528.210880][T19728] do_syscall_64+0x115/0x840 [ 528.210898][T19728] ? clear_bhb_loop+0x40/0x90 [ 528.210915][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.210930][T19728] RIP: 0033:0x7f15eab9ce59 [ 528.210944][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.210958][T19728] RSP: 002b:00007f15e8dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 528.210974][T19728] RAX: ffffffffffffffda RBX: 00007f15eae16090 RCX: 00007f15eab9ce59 [ 528.210985][T19728] RDX: 0000000000000008 RSI: 0000000000000008 RDI: 0000000000000000 [ 528.211001][T19728] RBP: 00007f15eac32d6f R08: 0000000000000000 R09: 000000008001fff5 [ 528.211011][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.211021][T19728] R13: 00007f15eae16128 R14: 00007f15eae16090 R15: 00007ffd4ba7b088 [ 528.211036][T19728] [ 529.546986][T19729] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17923] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[19729] [ 529.674574][T19730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 530.108314][T19762] netlink: 'syz.1.2770': attribute type 5 has an invalid length. [ 530.134147][T19762] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 530.159805][T19762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2770'. [ 530.186083][T19764] netlink: 'syz.1.2770': attribute type 5 has an invalid length. [ 530.232457][T19764] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 530.259919][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2770'. [ 531.355433][ T8339] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 531.362968][ T8339] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 532.452325][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 532.561734][T19822] FAULT_INJECTION: forcing a failure. [ 532.561734][T19822] name failslab, interval 1, probability 0, space 0, times 0 [ 532.678278][T19822] CPU: 0 UID: 0 PID: 19822 Comm: syz.1.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.678307][T19822] Tainted: [L]=SOFTLOCKUP [ 532.678313][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.678323][T19822] Call Trace: [ 532.678329][T19822] [ 532.678335][T19822] dump_stack_lvl+0x100/0x190 [ 532.678363][T19822] should_fail_ex.cold+0x5/0xa [ 532.678379][T19822] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 532.678401][T19822] should_failslab+0xc2/0x120 [ 532.678414][T19822] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 532.678435][T19822] ? __d_alloc+0x35/0xa50 [ 532.678466][T19822] __d_alloc+0x35/0xa50 [ 532.678482][T19822] d_alloc+0x4a/0x1e0 [ 532.678498][T19822] lookup_one_qstr_excl+0x171/0x250 [ 532.678518][T19822] start_dirop+0x59/0xb0 [ 532.678539][T19822] simple_start_creating+0xf9/0x110 [ 532.678562][T19822] ? __pfx_simple_start_creating+0x10/0x10 [ 532.678584][T19822] ? mntput+0x70/0xa0 [ 532.678604][T19822] ? simple_pin_fs+0xa3/0x190 [ 532.678624][T19822] debugfs_start_creating.part.0+0x82/0x170 [ 532.678720][T19822] __debugfs_create_file+0xb3/0x4f0 [ 532.678768][T19822] debugfs_create_file_full+0x41/0x60 [ 532.678791][T19822] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 532.678855][T19822] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 532.678877][T19822] ? ida_alloc_range+0x70d/0x830 [ 532.678902][T19822] ? lockdep_init_map_type+0x5c/0x250 [ 532.678923][T19822] preinit_net.part.0+0x252/0x920 [ 532.678940][T19822] copy_net_ns+0x339/0x7c0 [ 532.678962][T19822] create_new_namespaces+0x3ea/0xac0 [ 532.678986][T19822] unshare_nsproxy_namespaces+0xf2/0x220 [ 532.679007][T19822] ksys_unshare+0x438/0xab0 [ 532.679023][T19822] ? __pfx_ksys_unshare+0x10/0x10 [ 532.679040][T19822] __x64_sys_unshare+0x31/0x40 [ 532.679054][T19822] do_syscall_64+0x115/0x840 [ 532.679071][T19822] ? clear_bhb_loop+0x40/0x90 [ 532.679087][T19822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.679102][T19822] RIP: 0033:0x7f15eab9ce59 [ 532.679115][T19822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.679130][T19822] RSP: 002b:00007f15e8db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.679146][T19822] RAX: ffffffffffffffda RBX: 00007f15eae16180 RCX: 00007f15eab9ce59 [ 532.679156][T19822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.679165][T19822] RBP: 00007f15eac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 532.679174][T19822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.679183][T19822] R13: 00007f15eae16218 R14: 00007f15eae16180 R15: 00007ffd4ba7b088 [ 532.679197][T19822] [ 533.166271][T19814] Process accounting resumed [ 533.255945][T19827] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2785'. [ 533.277986][T19828] Setting dangerous option i915.mitigations - tainting kernel [ 535.796987][T19888] RGB/YUV Input: ================= START STATUS ================= [ 535.856906][T19888] RGB/YUV Input: Test Pattern: 75% Colorbar [ 535.895244][T19888] RGB/YUV Input: Show Information: All [ 535.934778][T19888] RGB/YUV Input: Vertical Flip: false [ 535.958742][T19888] RGB/YUV Input: Horizontal Flip: false [ 535.980985][T19888] RGB/YUV Input: Brightness: 128 [ 535.998573][T19888] RGB/YUV Input: Contrast: 128 [ 536.014671][T19888] RGB/YUV Input: Hue: 0 [ 536.038507][T19888] RGB/YUV Input: Saturation: 128 [ 536.055398][T19888] RGB/YUV Input: Pixel Rate: 160000000 [ 536.070537][T19888] RGB/YUV Input: Horizontal Blanking: 800 [ 536.088674][T19888] RGB/YUV Input: Vertical Blanking: 3223 [ 536.107698][T19888] RGB/YUV Input: ================== END STATUS ================== [ 537.603018][T18226] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 537.788439][T19937] syz.1.2806 (19937): drop_caches: 0 [ 538.432838][T19958] bridge0: port 3(team0) entered blocking state [ 538.478611][T19958] bridge0: port 3(team0) entered disabled state [ 538.508986][T19958] team0: entered allmulticast mode [ 538.533485][T19958] team_slave_0: entered allmulticast mode [ 538.558576][T19958] team_slave_1: entered allmulticast mode [ 538.585231][T19958] team0: entered promiscuous mode [ 538.608842][T19958] team_slave_0: entered promiscuous mode [ 538.635080][T19958] team_slave_1: entered promiscuous mode [ 538.661144][T19958] bridge0: port 3(team0) entered blocking state [ 538.667450][T19958] bridge0: port 3(team0) entered forwarding state [ 539.425590][T19991] netlink: 'syz.3.2815': attribute type 19 has an invalid length. [ 539.459464][T19991] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2815'. [ 539.660503][ T8339] Bluetooth: hci4: command 0x0c1a tx timeout [ 540.669763][T20026] can: request_module (can-proto-0) failed. [ 541.321189][T20039] FAULT_INJECTION: forcing a failure. [ 541.321189][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 541.379535][T20039] CPU: 0 UID: 0 PID: 20039 Comm: syz.3.2825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 541.379569][T20039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 541.379575][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.379586][T20039] Call Trace: [ 541.379591][T20039] [ 541.379597][T20039] dump_stack_lvl+0x100/0x190 [ 541.379626][T20039] should_fail_ex.cold+0x5/0xa [ 541.379642][T20039] ? fs_reclaim_acquire+0x70/0x100 [ 541.379658][T20039] should_failslab+0xc2/0x120 [ 541.379672][T20039] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 541.379692][T20039] ? security_inode_alloc+0x3b/0x2c0 [ 541.379708][T20039] ? lockdep_init_map_type+0x5c/0x250 [ 541.379729][T20039] security_inode_alloc+0x3b/0x2c0 [ 541.379745][T20039] inode_init_always_gfp+0xc77/0xfb0 [ 541.379760][T20039] alloc_inode+0x8e/0x250 [ 541.379778][T20039] sock_alloc+0x44/0x280 [ 541.379792][T20039] ? security_socket_create+0x7f/0x250 [ 541.379815][T20039] __sock_create+0xc2/0x860 [ 541.379835][T20039] __sys_socket+0x14d/0x260 [ 541.379854][T20039] ? __pfx___sys_socket+0x10/0x10 [ 541.379875][T20039] __x64_sys_socket+0x72/0xb0 [ 541.379894][T20039] do_syscall_64+0x115/0x840 [ 541.379911][T20039] ? clear_bhb_loop+0x40/0x90 [ 541.379927][T20039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.379942][T20039] RIP: 0033:0x7f1a0659ce59 [ 541.379955][T20039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.379971][T20039] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 541.379987][T20039] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 541.379997][T20039] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 541.380006][T20039] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 541.380015][T20039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.380024][T20039] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 541.380038][T20039] [ 541.380077][T20039] net_ratelimit: 59 callbacks suppressed [ 541.380086][T20039] socket: no more sockets [ 541.800669][T18226] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.582730][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 543.013037][T20073] ovs_: entered promiscuous mode [ 543.370574][T20089] Setting dangerous option i915.mitigations - tainting kernel [ 544.165453][T20105] FAULT_INJECTION: forcing a failure. [ 544.165453][T20105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.213702][T20105] CPU: 0 UID: 0 PID: 20105 Comm: syz.0.2840 Tainted: G U L syzkaller #0 PREEMPT(full) [ 544.213731][T20105] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 544.213737][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.213747][T20105] Call Trace: [ 544.213752][T20105] [ 544.213758][T20105] dump_stack_lvl+0x100/0x190 [ 544.213785][T20105] should_fail_ex.cold+0x5/0xa [ 544.213802][T20105] should_fail_alloc_page+0xeb/0x140 [ 544.213817][T20105] prepare_alloc_pages+0x1f0/0x5f0 [ 544.213834][T20105] __alloc_frozen_pages_noprof+0x19a/0x2b60 [ 544.213854][T20105] ? rcu_is_watching+0x12/0xc0 [ 544.213877][T20105] ? trace_sched_exit_tp+0x120/0x160 [ 544.213891][T20105] ? __schedule+0x126e/0x6730 [ 544.213906][T20105] ? rcu_is_watching+0x12/0xc0 [ 544.213928][T20105] ? __css_rstat_updated+0x1ce/0x5a0 [ 544.213947][T20105] ? __css_rstat_updated+0x1ce/0x5a0 [ 544.213964][T20105] ? __pfx___css_rstat_updated+0x10/0x10 [ 544.213982][T20105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.214003][T20105] ? do_raw_spin_lock+0x128/0x260 [ 544.214023][T20105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 544.214044][T20105] ? __dquot_alloc_space+0x937/0xe00 [ 544.214060][T20105] ? do_raw_spin_unlock+0x145/0x1e0 [ 544.214080][T20105] ? _raw_spin_unlock+0x28/0x50 [ 544.214095][T20105] ? __dquot_alloc_space+0x519/0xe00 [ 544.214110][T20105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.214136][T20105] ? policy_nodemask+0xed/0x4f0 [ 544.214150][T20105] alloc_pages_mpol+0x1fb/0x540 [ 544.214164][T20105] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 544.214178][T20105] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 544.214200][T20105] ? rcu_is_watching+0x12/0xc0 [ 544.214220][T20105] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 544.214240][T20105] ? lock_release+0x24d/0x310 [ 544.214258][T20105] folio_alloc_mpol_noprof+0x36/0x260 [ 544.214275][T20105] shmem_alloc_folio+0x135/0x160 [ 544.214292][T20105] shmem_alloc_and_add_folio+0x371/0xd40 [ 544.214314][T20105] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 544.214334][T20105] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 544.214356][T20105] shmem_get_folio_gfp+0x6ab/0x1900 [ 544.214378][T20105] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 544.214397][T20105] ? rcu_is_watching+0x12/0xc0 [ 544.214418][T20105] ? trace_irq_enable.constprop.0+0x122/0x160 [ 544.214438][T20105] shmem_fault+0x1f9/0xa20 [ 544.214457][T20105] ? current_time+0x29f/0x3b0 [ 544.214473][T20105] ? __pfx_shmem_fault+0x10/0x10 [ 544.214492][T20105] ? __up_read+0x322/0x960 [ 544.214512][T20105] ? __pfx___up_read+0x10/0x10 [ 544.214530][T20105] ? inode_to_bdi+0x9e/0x160 [ 544.214543][T20105] ? rcu_is_watching+0x12/0xc0 [ 544.214565][T20105] ? __pfx_filemap_map_pages+0x10/0x10 [ 544.214583][T20105] __do_fault+0x10b/0x440 [ 544.214604][T20105] do_fault+0x2db/0x1750 [ 544.214626][T20105] __handle_mm_fault+0x187d/0x2a00 [ 544.214645][T20105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 544.214665][T20105] ? __pfx___handle_mm_fault+0x10/0x10 [ 544.214684][T20105] ? pte_offset_map_lock+0x174/0x320 [ 544.214709][T20105] ? follow_page_pte+0x4d0/0x13f0 [ 544.214727][T20105] handle_mm_fault+0x37b/0xa30 [ 544.214745][T20105] __get_user_pages+0x1178/0x32a0 [ 544.214761][T20105] ? down_read_killable+0x35e/0x520 [ 544.214781][T20105] ? __pfx_try_to_wake_up+0x10/0x10 [ 544.214801][T20105] ? __pfx___get_user_pages+0x10/0x10 [ 544.214816][T20105] ? __pfx_futex_wake_mark+0x10/0x10 [ 544.214831][T20105] faultin_page_range+0x1f1/0x9e0 [ 544.214848][T20105] madvise_do_behavior+0x354/0x510 [ 544.214866][T20105] ? __pfx_madvise_do_behavior+0x10/0x10 [ 544.214882][T20105] ? __pfx_futex_wait+0x10/0x10 [ 544.214899][T20105] do_madvise+0x195/0x240 [ 544.214914][T20105] ? __pfx_do_madvise+0x10/0x10 [ 544.214929][T20105] ? do_futex+0x190/0x440 [ 544.214956][T20105] __x64_sys_madvise+0xa9/0x110 [ 544.214972][T20105] do_syscall_64+0x115/0x840 [ 544.214990][T20105] ? clear_bhb_loop+0x40/0x90 [ 544.215006][T20105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.215020][T20105] RIP: 0033:0x7f80a459ce59 [ 544.215032][T20105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.215046][T20105] RSP: 002b:00007f80a5479028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 544.215061][T20105] RAX: ffffffffffffffda RBX: 00007f80a4816180 RCX: 00007f80a459ce59 [ 544.215071][T20105] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 544.215081][T20105] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 544.215090][T20105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.215099][T20105] R13: 00007f80a4816218 R14: 00007f80a4816180 R15: 00007ffd6418cf78 [ 544.215116][T20105] [ 546.270241][T20168] futex_wake_op: syz.1.2851 tries to shift op by -2048; fix this program [ 546.289910][T20168] 0x000000000001-0x000000020000 : "" [ 546.368780][T20168] ftl_cs: FTL header corrupt! [ 547.233325][T20212] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2859'. [ 547.317682][T20149] kexec: Could not allocate control_code_buffer [ 548.594209][T20289] FAULT_INJECTION: forcing a failure. [ 548.594209][T20289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.670946][T20289] CPU: 0 UID: 0 PID: 20289 Comm: syz.1.2871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 548.670975][T20289] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 548.670982][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.670992][T20289] Call Trace: [ 548.670997][T20289] [ 548.671003][T20289] dump_stack_lvl+0x100/0x190 [ 548.671030][T20289] should_fail_ex.cold+0x5/0xa [ 548.671048][T20289] should_fail_alloc_page+0xeb/0x140 [ 548.671063][T20289] prepare_alloc_pages+0x1f0/0x5f0 [ 548.671080][T20289] __alloc_frozen_pages_noprof+0x19a/0x2b60 [ 548.671103][T20289] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 548.671124][T20289] ? rcu_is_watching+0x12/0xc0 [ 548.671146][T20289] ? page_table_check_set+0x477/0x920 [ 548.671167][T20289] ? rcu_is_watching+0x12/0xc0 [ 548.671188][T20289] ? page_table_check_set+0x477/0x920 [ 548.671209][T20289] ? lock_release+0x24d/0x310 [ 548.671227][T20289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.671248][T20289] ? page_table_check_set+0x486/0x920 [ 548.671270][T20289] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 548.671292][T20289] ? xas_move_index+0xae/0x110 [ 548.671311][T20289] ? pte_offset_map_lock+0x174/0x320 [ 548.671333][T20289] ? filemap_map_pages+0x14ad/0x20a0 [ 548.671362][T20289] ? filemap_map_pages+0x950/0x20a0 [ 548.671381][T20289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.671400][T20289] ? policy_nodemask+0xed/0x4f0 [ 548.671415][T20289] alloc_pages_mpol+0x1fb/0x540 [ 548.671430][T20289] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.671447][T20289] folio_alloc_mpol_noprof+0x36/0x260 [ 548.671464][T20289] vma_alloc_folio_noprof+0xed/0x1d0 [ 548.671481][T20289] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 548.671499][T20289] ? rcu_is_watching+0x12/0xc0 [ 548.671521][T20289] do_anonymous_page+0xb46/0x2050 [ 548.671540][T20289] ? rcu_read_unlock+0x2d/0xb0 [ 548.671560][T20289] __handle_mm_fault+0x1d2c/0x2a00 [ 548.671580][T20289] ? __pfx___handle_mm_fault+0x10/0x10 [ 548.671598][T20289] ? __pfx_vma_start_read+0x10/0x10 [ 548.671615][T20289] ? rcu_is_watching+0x12/0xc0 [ 548.671639][T20289] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 548.671664][T20289] handle_mm_fault+0x37b/0xa30 [ 548.671682][T20289] do_user_addr_fault+0x5a3/0x12f0 [ 548.671701][T20289] exc_page_fault+0x6f/0xd0 [ 548.671718][T20289] asm_exc_page_fault+0x26/0x30 [ 548.671733][T20289] RIP: 0033:0x7f15eaa5e60b [ 548.671746][T20289] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 548.671761][T20289] RSP: 002b:00007f15e8dd3fa0 EFLAGS: 00010206 [ 548.671775][T20289] RAX: 0000000000000000 RBX: 00007f15eae16090 RCX: 0000000000000000 [ 548.671785][T20289] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 548.671796][T20289] RBP: 00007f15eac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 548.671806][T20289] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 548.671816][T20289] R13: 00007f15eae16128 R14: 00007f15eae16090 R15: 00007ffd4ba7b088 [ 548.671830][T20289] [ 548.671866][T20289] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 548.982733][T20291] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 549.092113][T20291] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 549.131799][T20291] pci 0000:00:01.3: PCI INT A: no GSI [ 550.469522][T20333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.630999][T20345] zswap: compressor not available [ 551.797912][T20368] Process accounting resumed [ 552.009462][ T8339] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 552.017072][ T8339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 552.026368][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.026395][ T8339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.026402][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.026413][ T8339] Workqueue: hci5 hci_rx_work [ 552.026435][ T8339] Call Trace: [ 552.026441][ T8339] [ 552.026447][ T8339] dump_stack_lvl+0x100/0x190 [ 552.026471][ T8339] sysfs_warn_dup.cold+0x1c/0x28 [ 552.026492][ T8339] sysfs_create_dir_ns+0x24b/0x2b0 [ 552.026514][ T8339] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 552.026536][ T8339] ? kobject_add_internal+0x25f/0x930 [ 552.026558][ T8339] ? lock_release+0x24d/0x310 [ 552.026577][ T8339] ? do_raw_spin_unlock+0x145/0x1e0 [ 552.026598][ T8339] kobject_add_internal+0x2c8/0x930 [ 552.026620][ T8339] kobject_add+0x16a/0x1e0 [ 552.026641][ T8339] ? __pfx_kobject_add+0x10/0x10 [ 552.026664][ T8339] ? kobject_put+0xb9/0x640 [ 552.026683][ T8339] ? _raw_spin_unlock+0x28/0x50 [ 552.026699][ T8339] device_add+0x294/0x1970 [ 552.026796][ T8339] ? __pfx_dev_set_name+0x10/0x10 [ 552.026812][ T8339] ? __pfx_device_add+0x10/0x10 [ 552.026835][ T8339] ? mgmt_send_event_skb+0x2fb/0x460 [ 552.026855][ T8339] hci_conn_add_sysfs+0x1a3/0x260 [ 552.026876][ T8339] le_conn_complete_evt+0x11eb/0x1f60 [ 552.026896][ T8339] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 552.026912][ T8339] ? __pfx_bt_warn+0x10/0x10 [ 552.026934][ T8339] hci_le_conn_complete_evt+0x23c/0x3a0 [ 552.026952][ T8339] ? skb_pull_data+0x15f/0x1e0 [ 552.026971][ T8339] hci_le_meta_evt+0x34a/0x5f0 [ 552.026990][ T8339] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 552.027009][ T8339] hci_event_packet+0x51c/0xcd0 [ 552.027025][ T8339] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 552.027044][ T8339] ? __pfx_hci_event_packet+0x10/0x10 [ 552.027060][ T8339] ? rcu_is_watching+0x10/0xc0 [ 552.027083][ T8339] ? trace_irq_enable.constprop.0+0x122/0x160 [ 552.027113][ T8339] hci_rx_work+0x451/0xfc0 [ 552.027132][ T8339] process_one_work+0xa23/0x1940 [ 552.027153][ T8339] ? __pfx_process_one_work+0x10/0x10 [ 552.027172][ T8339] ? __pfx_hci_rx_work+0x10/0x10 [ 552.027189][ T8339] worker_thread+0x5ef/0xe50 [ 552.027207][ T8339] ? kthread+0x13a/0x450 [ 552.027221][ T8339] ? __pfx_worker_thread+0x10/0x10 [ 552.027237][ T8339] kthread+0x370/0x450 [ 552.027251][ T8339] ? __pfx_kthread+0x10/0x10 [ 552.027271][ T8339] ret_from_fork+0x72b/0xd50 [ 552.027286][ T8339] ? __pfx_ret_from_fork+0x10/0x10 [ 552.027300][ T8339] ? __switch_to+0x800/0x10f0 [ 552.027319][ T8339] ? __switch_to_asm+0x39/0x70 [ 552.027336][ T8339] ? __pfx_kthread+0x10/0x10 [ 552.027352][ T8339] ret_from_fork_asm+0x1a/0x30 [ 552.027372][ T8339] [ 552.415690][T20403] FAULT_INJECTION: forcing a failure. [ 552.415690][T20403] name failslab, interval 1, probability 0, space 0, times 0 [ 552.428794][T20403] CPU: 0 UID: 0 PID: 20403 Comm: syz.3.2895 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.428823][T20403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.428829][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.428839][T20403] Call Trace: [ 552.428845][T20403] [ 552.428850][T20403] dump_stack_lvl+0x100/0x190 [ 552.428877][T20403] should_fail_ex.cold+0x5/0xa [ 552.428893][T20403] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 552.428915][T20403] should_failslab+0xc2/0x120 [ 552.428928][T20403] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 552.428948][T20403] ? __proc_create+0x2cb/0x8c0 [ 552.428972][T20403] ? lock_release+0x24d/0x310 [ 552.428991][T20403] __proc_create+0x2cb/0x8c0 [ 552.429008][T20403] ? __pfx___proc_create+0x10/0x10 [ 552.429029][T20403] proc_mkdir+0x81/0x170 [ 552.429046][T20403] ? __pfx_proc_mkdir+0x10/0x10 [ 552.429101][T20403] ? cache_register_net+0x137/0x5e0 [ 552.429124][T20403] ? lock_release+0x24d/0x310 [ 552.429143][T20403] cache_register_net+0x18f/0x5e0 [ 552.429166][T20403] ip_map_cache_create+0x8b/0x130 [ 552.429188][T20403] ? __pfx_sunrpc_init_net+0x10/0x10 [ 552.429206][T20403] sunrpc_init_net+0x55/0x190 [ 552.429224][T20403] ops_init+0x1e2/0x5f0 [ 552.429240][T20403] setup_net+0x118/0x3a0 [ 552.429254][T20403] ? __pfx_setup_net+0x10/0x10 [ 552.429269][T20403] ? mutex_init_lockdep+0xf1/0x120 [ 552.429289][T20403] copy_net_ns+0x46f/0x7c0 [ 552.429307][T20403] create_new_namespaces+0x3ea/0xac0 [ 552.429329][T20403] unshare_nsproxy_namespaces+0xf2/0x220 [ 552.429350][T20403] ksys_unshare+0x438/0xab0 [ 552.429364][T20403] ? __pfx_ksys_unshare+0x10/0x10 [ 552.429381][T20403] __x64_sys_unshare+0x31/0x40 [ 552.429394][T20403] do_syscall_64+0x115/0x840 [ 552.429412][T20403] ? clear_bhb_loop+0x40/0x90 [ 552.429428][T20403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.429443][T20403] RIP: 0033:0x7f1a0659ce59 [ 552.429458][T20403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.429473][T20403] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.429488][T20403] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 552.429498][T20403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.429508][T20403] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 552.429517][T20403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.429526][T20403] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 552.429541][T20403] [ 552.694337][ T8339] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 552.710027][ T8339] Bluetooth: hci5: failed to register connection device [ 553.273535][T20434] input: f as /devices/virtual/input/input66 [ 553.483904][T20447] random: crng reseeded on system resumption [ 553.556372][T20452] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2905'. [ 553.623213][T20454] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.2906: iget: checksum invalid [ 553.670656][T20454] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 553.763974][T20454] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.2906: iget: checksum invalid [ 553.815354][T20454] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 553.851277][T20463] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2909'. [ 553.864299][T20454] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.2906: iget: checksum invalid [ 553.911100][T20454] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 553.911209][T20454] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.2906: iget: checksum invalid [ 553.911364][T20454] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 553.911386][T20454] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 553.911412][T20454] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 554.631075][T20504] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2917'. [ 554.868083][T18226] Bluetooth: hci5: command 0x0c1a tx timeout [ 555.181200][T20512] ubi0: attaching mtd0 [ 555.200950][T20512] ubi0: scanning is finished [ 555.226619][T20512] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 555.449797][T20512] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 556.580184][T20558] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 556.610251][T20558] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 556.649225][T20558] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 556.692728][T20558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.726916][T20558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.759493][T20558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 557.368652][T20601] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2936'. [ 557.829716][T18226] Bluetooth: hci5: command 0x0c1a tx timeout [ 558.268989][T20629] netlink: Unknown conntrack attr (0) [ 558.711244][T18226] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.791088][T18226] Bluetooth: hci4: command 0x0c1a tx timeout [ 558.797104][ T8339] Bluetooth: hci1: command 0x041b tx timeout [ 559.910523][T18226] Bluetooth: hci5: command 0x0c1a tx timeout [ 561.955409][T20754] netlink: 202 bytes leftover after parsing attributes in process `syz.1.2961'. [ 561.992569][T18226] Bluetooth: hci5: command 0x0c1a tx timeout [ 562.615598][T20772] FAULT_INJECTION: forcing a failure. [ 562.615598][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 562.644059][T20772] CPU: 0 UID: 0 PID: 20772 Comm: syz.3.2966 Tainted: G U L syzkaller #0 PREEMPT(full) [ 562.644087][T20772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 562.644093][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.644103][T20772] Call Trace: [ 562.644108][T20772] [ 562.644115][T20772] dump_stack_lvl+0x100/0x190 [ 562.644142][T20772] should_fail_ex.cold+0x5/0xa [ 562.644158][T20772] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 562.644180][T20772] should_failslab+0xc2/0x120 [ 562.644194][T20772] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 562.644215][T20772] ? __alloc_skb+0x140/0x710 [ 562.644236][T20772] ? __alloc_skb+0x5b7/0x710 [ 562.644258][T20772] __alloc_skb+0x140/0x710 [ 562.644278][T20772] ? __alloc_skb+0x5b7/0x710 [ 562.644299][T20772] ? __pfx___alloc_skb+0x10/0x10 [ 562.644320][T20772] ? trace_irq_enable.constprop.0+0x122/0x160 [ 562.644340][T20772] qrtr_alloc_ctrl_packet+0x21/0xf0 [ 562.644361][T20772] qrtr_port_remove+0xdb/0x3e0 [ 562.644380][T20772] ? __pfx_qrtr_port_remove+0x10/0x10 [ 562.644400][T20772] ? do_raw_write_lock+0x11e/0x260 [ 562.644421][T20772] ? qrtr_release+0x196/0x380 [ 562.644439][T20772] ? rcu_is_watching+0x12/0xc0 [ 562.644460][T20772] ? qrtr_release+0x196/0x380 [ 562.644479][T20772] ? trace_irq_enable.constprop.0+0x122/0x160 [ 562.644498][T20772] qrtr_release+0x2c1/0x380 [ 562.644517][T20772] __sock_release+0xb3/0x260 [ 562.644532][T20772] ? __pfx_sock_close+0x10/0x10 [ 562.644546][T20772] sock_close+0x1c/0x30 [ 562.644559][T20772] __fput+0x3ff/0xb50 [ 562.644578][T20772] task_work_run+0x150/0x240 [ 562.644595][T20772] ? __pfx_task_work_run+0x10/0x10 [ 562.644612][T20772] ? rcu_is_watching+0x12/0xc0 [ 562.644634][T20772] exit_to_user_mode_loop+0x1d8/0x6f0 [ 562.644654][T20772] ? rcu_is_watching+0x12/0xc0 [ 562.644676][T20772] do_syscall_64+0x652/0x840 [ 562.644693][T20772] ? clear_bhb_loop+0x40/0x90 [ 562.644709][T20772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.644724][T20772] RIP: 0033:0x7f1a0659ce59 [ 562.644739][T20772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.644755][T20772] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 562.644771][T20772] RAX: 0000000000000000 RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 562.644781][T20772] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 562.644790][T20772] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 562.644800][T20772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.644809][T20772] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 562.644823][T20772] [ 562.922283][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.928601][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.378742][T20794] futex_wake_op: syz.1.2970 tries to shift op by -2048; fix this program [ 563.411678][T20794] futex_wake_op: syz.1.2970 tries to shift op by -2048; fix this program [ 563.487210][T20790] 0x000000000001-0x000000020000 : "" [ 563.510536][T20790] ftl_cs: FTL header corrupt! [ 563.603169][ T29] audit: type=1804 audit(1843106008.617:33): pid=20806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2974" name="file0" dev="tmpfs" ino=912 res=1 errno=0 [ 564.215397][T18226] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 564.223268][T18226] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 564.656115][T20836] syz.1.2981(20836): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 565.106871][T20856] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2986: iget: checksum invalid [ 565.190332][T20856] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 565.281522][T20856] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2986: iget: checksum invalid [ 565.391688][T20856] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 565.441731][T20856] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2986: iget: checksum invalid [ 565.478583][T20856] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 565.505410][T20856] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2986: iget: checksum invalid [ 565.574057][T20856] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 565.635577][T20856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 565.713994][T20856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 565.747830][T20875] FAULT_INJECTION: forcing a failure. [ 565.747830][T20875] name failslab, interval 1, probability 0, space 0, times 0 [ 565.776866][T20875] CPU: 0 UID: 0 PID: 20875 Comm: syz.1.2990 Tainted: G U L syzkaller #0 PREEMPT(full) [ 565.776894][T20875] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 565.776901][T20875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.776911][T20875] Call Trace: [ 565.776916][T20875] [ 565.776923][T20875] dump_stack_lvl+0x100/0x190 [ 565.776951][T20875] should_fail_ex.cold+0x5/0xa [ 565.776966][T20875] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 565.776989][T20875] should_failslab+0xc2/0x120 [ 565.777003][T20875] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 565.777024][T20875] ? __d_alloc+0x35/0xa50 [ 565.777041][T20875] __d_alloc+0x35/0xa50 [ 565.777056][T20875] d_alloc_pseudo+0x1c/0xc0 [ 565.777082][T20875] alloc_file_pseudo+0x118/0x290 [ 565.777102][T20875] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 565.777121][T20875] ? __raw_spin_lock_init+0x3a/0x110 [ 565.777145][T20875] create_pipe_files+0x360/0x970 [ 565.777161][T20875] do_pipe2+0xbd/0x1e0 [ 565.777175][T20875] ? __pfx_do_pipe2+0x10/0x10 [ 565.777189][T20875] ? xfd_validate_state+0x129/0x190 [ 565.777213][T20875] __x64_sys_pipe2+0x54/0x80 [ 565.777227][T20875] do_syscall_64+0x115/0x840 [ 565.777245][T20875] ? clear_bhb_loop+0x40/0x90 [ 565.777261][T20875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.777276][T20875] RIP: 0033:0x7f15eab9ce59 [ 565.777289][T20875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.777304][T20875] RSP: 002b:00007f15e8df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 565.777321][T20875] RAX: ffffffffffffffda RBX: 00007f15eae15fa0 RCX: 00007f15eab9ce59 [ 565.777331][T20875] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 565.777340][T20875] RBP: 00007f15eac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 565.777350][T20875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.777359][T20875] R13: 00007f15eae16038 R14: 00007f15eae15fa0 R15: 00007ffd4ba7b088 [ 565.777373][T20875] [ 567.285761][T20923] kexec: Could not allocate control_code_buffer [ 567.392165][T20935] futex_wake_op: syz.2.3006 tries to shift op by -2048; fix this program [ 567.427563][T20937] [U] [ 567.430272][T20937] [U] [ 567.432942][T20937] [U] [ 567.435612][T20937] [U] [ 567.468588][T20935] futex_wake_op: syz.2.3006 tries to shift op by -2048; fix this program [ 567.510571][T20937] [U] [ 567.513283][T20937] [U] [ 567.515956][T20937] [U] [ 567.518633][T20937] [U] [ 567.570144][T20937] [U] [ 567.757509][T20959] misc userio: The device must be registered before sending interrupts [ 567.983697][T20973] FAULT_INJECTION: forcing a failure. [ 567.983697][T20973] name failslab, interval 1, probability 0, space 0, times 0 [ 568.025433][T20973] CPU: 0 UID: 0 PID: 20973 Comm: syz.0.3017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.025462][T20973] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.025468][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.025478][T20973] Call Trace: [ 568.025484][T20973] [ 568.025490][T20973] dump_stack_lvl+0x100/0x190 [ 568.025518][T20973] should_fail_ex.cold+0x5/0xa [ 568.025534][T20973] ? __kmalloc_noprof+0xba/0x840 [ 568.025552][T20973] ? lsm_blob_alloc+0x68/0x90 [ 568.025572][T20973] should_failslab+0xc2/0x120 [ 568.025586][T20973] __kmalloc_noprof+0xe0/0x840 [ 568.025604][T20973] ? trace_kmem_cache_alloc+0xdd/0x100 [ 568.025620][T20973] lsm_blob_alloc+0x68/0x90 [ 568.025639][T20973] security_prepare_creds+0x2d/0x290 [ 568.025659][T20973] prepare_creds+0x5d6/0x950 [ 568.025677][T20973] __do_sys_setns+0x26c/0x1f30 [ 568.025698][T20973] ? __pfx___do_sys_setns+0x10/0x10 [ 568.025719][T20973] ? rcu_is_watching+0x12/0xc0 [ 568.025742][T20973] do_syscall_64+0x115/0x840 [ 568.025760][T20973] ? clear_bhb_loop+0x40/0x90 [ 568.025776][T20973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.025792][T20973] RIP: 0033:0x7f80a459ce59 [ 568.025804][T20973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.025819][T20973] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 568.025834][T20973] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 568.025844][T20973] RDX: 0000000000000000 RSI: 0000000014000080 RDI: 0000000000000006 [ 568.025853][T20973] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 568.025863][T20973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.025871][T20973] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 568.025885][T20973] [ 568.859863][T20986] udc dummy_udc.0: soft-connect without a gadget driver [ 568.972574][T20989] FAULT_INJECTION: forcing a failure. [ 568.972574][T20989] name failslab, interval 1, probability 0, space 0, times 0 [ 568.986097][T20989] CPU: 0 UID: 0 PID: 20989 Comm: syz.3.3022 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.986124][T20989] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.986130][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.986139][T20989] Call Trace: [ 568.986144][T20989] [ 568.986151][T20989] dump_stack_lvl+0x100/0x190 [ 568.986177][T20989] should_fail_ex.cold+0x5/0xa [ 568.986192][T20989] ? __kmalloc_noprof+0xba/0x840 [ 568.986210][T20989] ? sk_prot_alloc+0x10b/0x2a0 [ 568.986228][T20989] should_failslab+0xc2/0x120 [ 568.986242][T20989] __kmalloc_noprof+0xe0/0x840 [ 568.986259][T20989] ? security_inode_alloc+0xcf/0x2c0 [ 568.986276][T20989] sk_prot_alloc+0x10b/0x2a0 [ 568.986293][T20989] sk_alloc+0x36/0xe80 [ 568.986314][T20989] __netlink_create+0x5e/0x2c0 [ 568.986330][T20989] __netlink_kernel_create+0xed/0x750 [ 568.986349][T20989] ? __pfx___netlink_kernel_create+0x10/0x10 [ 568.986370][T20989] ? rcu_is_watching+0x12/0xc0 [ 568.986392][T20989] ? audit_net_init+0x190/0x440 [ 568.986412][T20989] ? lock_release+0x24d/0x310 [ 568.986431][T20989] audit_net_init+0x1ae/0x440 [ 568.986451][T20989] ? __pfx_audit_net_init+0x10/0x10 [ 568.986471][T20989] ? rcu_is_watching+0x12/0xc0 [ 568.986492][T20989] ? __pfx_audit_receive+0x10/0x10 [ 568.986506][T20989] ? __pfx_audit_multicast_bind+0x10/0x10 [ 568.986521][T20989] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 568.986536][T20989] ? __kmalloc_noprof+0x321/0x840 [ 568.986555][T20989] ? __pfx_audit_net_init+0x10/0x10 [ 568.986575][T20989] ops_init+0x1e2/0x5f0 [ 568.986590][T20989] setup_net+0x118/0x3a0 [ 568.986605][T20989] ? __pfx_setup_net+0x10/0x10 [ 568.986619][T20989] ? mutex_init_lockdep+0xf1/0x120 [ 568.986640][T20989] copy_net_ns+0x46f/0x7c0 [ 568.986656][T20989] create_new_namespaces+0x3ea/0xac0 [ 568.986679][T20989] unshare_nsproxy_namespaces+0xf2/0x220 [ 568.986700][T20989] ksys_unshare+0x438/0xab0 [ 568.986714][T20989] ? __pfx_ksys_unshare+0x10/0x10 [ 568.986731][T20989] __x64_sys_unshare+0x31/0x40 [ 568.986745][T20989] do_syscall_64+0x115/0x840 [ 568.986763][T20989] ? clear_bhb_loop+0x40/0x90 [ 568.986779][T20989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.986794][T20989] RIP: 0033:0x7f1a0659ce59 [ 568.986807][T20989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.986822][T20989] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 568.986837][T20989] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 568.986847][T20989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 568.986864][T20989] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 568.986873][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.986883][T20989] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 568.986897][T20989] [ 568.986989][T20989] audit: cannot initialize netlink socket in namespace [ 569.507612][T20998] WARNING! power/level is deprecated; use power/control instead [ 570.129975][T21011] futex_wake_op: syz.0.3029 tries to shift op by -2048; fix this program [ 570.198330][T21011] futex_wake_op: syz.0.3029 tries to shift op by -2048; fix this program [ 572.254369][T21076] Process accounting resumed [ 572.631210][T21082] FAULT_INJECTION: forcing a failure. [ 572.631210][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 572.691865][T21082] CPU: 0 UID: 0 PID: 21082 Comm: syz.1.3048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.691893][T21082] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.691900][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.691909][T21082] Call Trace: [ 572.691914][T21082] [ 572.691920][T21082] dump_stack_lvl+0x100/0x190 [ 572.691952][T21082] should_fail_ex.cold+0x5/0xa [ 572.691969][T21082] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 572.691991][T21082] should_failslab+0xc2/0x120 [ 572.692005][T21082] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 572.692025][T21082] ? alloc_inode+0x68/0x250 [ 572.692043][T21082] ? simple_start_creating+0xb0/0x110 [ 572.692065][T21082] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 572.692087][T21082] alloc_inode+0x68/0x250 [ 572.692104][T21082] new_inode+0x22/0x1c0 [ 572.692122][T21082] __debugfs_create_file+0x105/0x4f0 [ 572.692146][T21082] debugfs_create_file_full+0x41/0x60 [ 572.692168][T21082] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 572.692189][T21082] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 572.692218][T21082] ? lockdep_init_map_type+0x5c/0x250 [ 572.692239][T21082] preinit_net.part.0+0x43b/0x920 [ 572.692256][T21082] copy_net_ns+0x339/0x7c0 [ 572.692272][T21082] create_new_namespaces+0x3ea/0xac0 [ 572.692295][T21082] unshare_nsproxy_namespaces+0xf2/0x220 [ 572.692317][T21082] ksys_unshare+0x438/0xab0 [ 572.692331][T21082] ? __pfx_ksys_unshare+0x10/0x10 [ 572.692348][T21082] __x64_sys_unshare+0x31/0x40 [ 572.692362][T21082] do_syscall_64+0x115/0x840 [ 572.692380][T21082] ? clear_bhb_loop+0x40/0x90 [ 572.692396][T21082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.692412][T21082] RIP: 0033:0x7f15eab9ce59 [ 572.692425][T21082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.692439][T21082] RSP: 002b:00007f15e8df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.692455][T21082] RAX: ffffffffffffffda RBX: 00007f15eae15fa0 RCX: 00007f15eab9ce59 [ 572.692465][T21082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 572.692474][T21082] RBP: 00007f15eac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 572.692483][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.692492][T21082] R13: 00007f15eae16038 R14: 00007f15eae15fa0 R15: 00007ffd4ba7b088 [ 572.692506][T21082] [ 572.692521][T21082] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88804f5ca9b8' [ 573.342229][T21075] kexec: Could not allocate control_code_buffer [ 573.477008][T21097] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3051'. [ 574.439918][T21108] cgroup: fork rejected by pids controller in /syz3 [ 574.556122][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 574.979117][T21257] FAULT_INJECTION: forcing a failure. [ 574.979117][T21257] name failslab, interval 1, probability 0, space 0, times 0 [ 575.036696][T21257] CPU: 0 UID: 0 PID: 21257 Comm: syz.0.3058 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.036725][T21257] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.036731][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.036741][T21257] Call Trace: [ 575.036746][T21257] [ 575.036751][T21257] dump_stack_lvl+0x100/0x190 [ 575.036778][T21257] should_fail_ex.cold+0x5/0xa [ 575.036793][T21257] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 575.036815][T21257] should_failslab+0xc2/0x120 [ 575.036829][T21257] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 575.036848][T21257] ? copy_process+0x2f80/0x7ff0 [ 575.036870][T21257] ? rcu_is_watching+0x12/0xc0 [ 575.036893][T21257] copy_process+0x2f80/0x7ff0 [ 575.036914][T21257] ? rcu_is_watching+0x12/0xc0 [ 575.036939][T21257] ? __pfx_copy_process+0x10/0x10 [ 575.036960][T21257] ? lock_release+0x24d/0x310 [ 575.036979][T21257] ? _copy_from_user+0x59/0xd0 [ 575.037089][T21257] kernel_clone+0x176/0x9d0 [ 575.037111][T21257] ? rcu_is_watching+0x12/0xc0 [ 575.037133][T21257] ? lock_release+0x24d/0x310 [ 575.037151][T21257] ? __pfx_kernel_clone+0x10/0x10 [ 575.037178][T21257] __do_sys_clone3+0x214/0x290 [ 575.037191][T21257] ? __pfx___do_sys_clone3+0x10/0x10 [ 575.037215][T21257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.037240][T21257] ? rcu_is_watching+0x12/0xc0 [ 575.037262][T21257] do_syscall_64+0x115/0x840 [ 575.037280][T21257] ? clear_bhb_loop+0x40/0x90 [ 575.037298][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.037314][T21257] RIP: 0033:0x7f80a459ce59 [ 575.037327][T21257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.037341][T21257] RSP: 002b:00007f80a54baef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 575.037356][T21257] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f80a459ce59 [ 575.037366][T21257] RDX: 00007f80a54baf10 RSI: 0000000000000058 RDI: 00007f80a54baf10 [ 575.037376][T21257] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000058 [ 575.037385][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.037394][T21257] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 575.037409][T21257] [ 575.730168][T21285] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3065'. [ 575.861247][T21290] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 577.026517][T21359] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1196.0.4294967291), cmd(3) [ 577.084685][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 577.118288][T21363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3084'. [ 577.270633][T21363] macsec0: entered promiscuous mode [ 577.278379][T21363] macsec0: entered allmulticast mode [ 577.291993][T21363] veth1_macvtap: entered allmulticast mode [ 577.380601][T21367] kAFS: unparsable volume name [ 578.128606][T21385] FAULT_INJECTION: forcing a failure. [ 578.128606][T21385] name failslab, interval 1, probability 0, space 0, times 0 [ 578.150759][T21385] CPU: 0 UID: 0 PID: 21385 Comm: syz.1.3090 Tainted: G U L syzkaller #0 PREEMPT(full) [ 578.150787][T21385] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 578.150793][T21385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.150803][T21385] Call Trace: [ 578.150808][T21385] [ 578.150814][T21385] dump_stack_lvl+0x100/0x190 [ 578.150840][T21385] should_fail_ex.cold+0x5/0xa [ 578.150856][T21385] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 578.150878][T21385] should_failslab+0xc2/0x120 [ 578.150891][T21385] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 578.150911][T21385] ? vm_area_alloc+0x1f/0x160 [ 578.150929][T21385] vm_area_alloc+0x1f/0x160 [ 578.150946][T21385] __mmap_region+0x104d/0x2dd0 [ 578.150966][T21385] ? __pfx___mmap_region+0x10/0x10 [ 578.150984][T21385] ? rcu_is_watching+0x12/0xc0 [ 578.151008][T21385] ? do_raw_spin_lock+0x128/0x260 [ 578.151030][T21385] ? do_raw_spin_unlock+0x145/0x1e0 [ 578.151050][T21385] ? __css_rstat_updated+0x1ce/0x5a0 [ 578.151069][T21385] ? do_raw_spin_lock+0x128/0x260 [ 578.151089][T21385] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.151110][T21385] ? debug_object_assert_init+0x1c4/0x300 [ 578.151126][T21385] ? rcu_is_watching+0x12/0xc0 [ 578.151151][T21385] ? trace_hrtimer_start+0x77/0x220 [ 578.151173][T21385] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 578.151208][T21385] ? rcu_is_watching+0x12/0xc0 [ 578.151230][T21385] ? trace_irq_enable.constprop.0+0x122/0x160 [ 578.151260][T21385] ? futex_unqueue+0x133/0x2c0 [ 578.151279][T21385] ? lock_release+0x24d/0x310 [ 578.151299][T21385] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 578.151317][T21385] mmap_region+0x35d/0x620 [ 578.151336][T21385] ? rcu_is_watching+0x12/0xc0 [ 578.151357][T21385] ? __pfx_mmap_region+0x10/0x10 [ 578.151376][T21385] ? cap_mmap_addr+0x4b/0x120 [ 578.151397][T21385] ? bpf_lsm_mmap_addr+0x9/0x30 [ 578.151416][T21385] ? security_mmap_addr+0x71/0x1e0 [ 578.151434][T21385] ? __get_unmapped_area+0x255/0x3e0 [ 578.151449][T21385] do_mmap+0xc63/0x12f0 [ 578.151464][T21385] ? __pfx_do_mmap+0x10/0x10 [ 578.151478][T21385] ? __pfx_down_write_killable+0x10/0x10 [ 578.151497][T21385] ? __pfx_futex_wait+0x10/0x10 [ 578.151513][T21385] vm_mmap_pgoff+0x29e/0x470 [ 578.151530][T21385] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 578.151550][T21385] ? __pfx_do_futex+0x10/0x10 [ 578.151571][T21385] ? rcu_is_watching+0x12/0xc0 [ 578.151594][T21385] ksys_mmap_pgoff+0xe4/0x610 [ 578.151609][T21385] ? __x64_sys_futex+0x358/0x4d0 [ 578.151629][T21385] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 578.151644][T21385] ? xfd_validate_state+0x129/0x190 [ 578.151671][T21385] __x64_sys_mmap+0x125/0x190 [ 578.151685][T21385] do_syscall_64+0x115/0x840 [ 578.151703][T21385] ? clear_bhb_loop+0x40/0x90 [ 578.151719][T21385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.151734][T21385] RIP: 0033:0x7f15eab9ce59 [ 578.151746][T21385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.151761][T21385] RSP: 002b:00007f15e8df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 578.151776][T21385] RAX: ffffffffffffffda RBX: 00007f15eae15fa0 RCX: 00007f15eab9ce59 [ 578.151787][T21385] RDX: 00000000000000df RSI: 0000000000400006 RDI: 0000000000000000 [ 578.151797][T21385] RBP: 00007f15eac32d6f R08: 0000000000000002 R09: 0000000000008000 [ 578.151807][T21385] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 578.151816][T21385] R13: 00007f15eae16038 R14: 00007f15eae15fa0 R15: 00007ffd4ba7b088 [ 578.151830][T21385] [ 578.948296][T21423] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.3097: bg 3: bad block bitmap checksum [ 578.986605][T21423] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.3097: Error -74 reading block bitmap for 3 [ 579.058033][T21423] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.3097: Error -117 reading block bitmap for 3 [ 579.407201][T21436] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3101'. [ 579.563584][T21447] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3103'. [ 580.403329][T21446] Process accounting resumed [ 580.867177][T21477] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.3109: bg 4: bad block bitmap checksum [ 580.967385][T21477] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 3732 with max blocks 1 with error 74 [ 581.045681][T21477] EXT4-fs (sda1): This should not happen!! Data will be lost [ 581.045681][T21477] [ 581.867298][T21483] FAULT_INJECTION: forcing a failure. [ 581.867298][T21483] name failslab, interval 1, probability 0, space 0, times 0 [ 581.927837][T21483] CPU: 0 UID: 0 PID: 21483 Comm: syz.3.3111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.927866][T21483] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.927872][T21483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.927882][T21483] Call Trace: [ 581.927887][T21483] [ 581.927894][T21483] dump_stack_lvl+0x100/0x190 [ 581.927941][T21483] should_fail_ex.cold+0x5/0xa [ 581.927957][T21483] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 581.927981][T21483] should_failslab+0xc2/0x120 [ 581.927995][T21483] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 581.928014][T21483] ? seq_open+0x55/0x170 [ 581.928033][T21483] ? __pfx_edid_show+0x10/0x10 [ 581.928123][T21483] ? __pfx_edid_open+0x10/0x10 [ 581.928144][T21483] seq_open+0x55/0x170 [ 581.928162][T21483] ? __pfx_edid_show+0x10/0x10 [ 581.928183][T21483] single_open+0xfc/0x1d0 [ 581.928201][T21483] full_proxy_open_regular+0x1b6/0x370 [ 581.928223][T21483] do_dentry_open+0x6ab/0x14d0 [ 581.928237][T21483] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 581.928259][T21483] vfs_open+0x82/0x3f0 [ 581.928276][T21483] path_openat+0x2873/0x4280 [ 581.928292][T21483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.928309][T21483] ? __pfx_path_openat+0x10/0x10 [ 581.928325][T21483] do_file_open+0x20e/0x430 [ 581.928339][T21483] ? __pfx_do_file_open+0x10/0x10 [ 581.928360][T21483] ? alloc_fd+0x471/0x7a0 [ 581.928373][T21483] ? do_getname+0x191/0x390 [ 581.928390][T21483] do_sys_openat2+0x10f/0x1e0 [ 581.928408][T21483] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.928427][T21483] ? __fget_files+0x21f/0x3d0 [ 581.928441][T21483] __x64_sys_openat+0x12d/0x210 [ 581.928459][T21483] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.928479][T21483] ? rcu_is_watching+0x12/0xc0 [ 581.928502][T21483] do_syscall_64+0x115/0x840 [ 581.928520][T21483] ? clear_bhb_loop+0x40/0x90 [ 581.928537][T21483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.928552][T21483] RIP: 0033:0x7f1a0659ce59 [ 581.928565][T21483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.928580][T21483] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.928596][T21483] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 581.928606][T21483] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 581.928617][T21483] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 581.928627][T21483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.928637][T21483] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 581.928651][T21483] [ 582.946533][T21509] MTRR 0 not used [ 584.113644][T21547] nvme_fabrics: missing parameter 'transport=%s' [ 584.218726][T21547] nvme_fabrics: missing parameter 'nqn=%s' [ 584.661200][T21560] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.3122: bg 5: bad block bitmap checksum [ 584.717266][T21560] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 584.806489][T21560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 584.806489][T21560] [ 588.491219][T21666] synth uevent: /devices/virtual/tty/ptybf: unknown uevent action string [ 588.529746][T21666] tty ptybf: uevent: failed to send synthetic uevent: -22 [ 588.567711][T21666] FAULT_INJECTION: forcing a failure. [ 588.567711][T21666] name failslab, interval 1, probability 0, space 0, times 0 [ 588.633621][T21666] CPU: 0 UID: 0 PID: 21666 Comm: syz.0.3146 Tainted: G U L syzkaller #0 PREEMPT(full) [ 588.633649][T21666] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 588.633656][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.633666][T21666] Call Trace: [ 588.633671][T21666] [ 588.633677][T21666] dump_stack_lvl+0x100/0x190 [ 588.633706][T21666] should_fail_ex.cold+0x5/0xa [ 588.633722][T21666] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 588.633744][T21666] should_failslab+0xc2/0x120 [ 588.633758][T21666] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 588.633778][T21666] ? security_file_alloc+0x34/0x2c0 [ 588.633796][T21666] ? trace_kmem_cache_alloc+0xdd/0x100 [ 588.633812][T21666] security_file_alloc+0x34/0x2c0 [ 588.633830][T21666] init_file+0x95/0x480 [ 588.633846][T21666] alloc_empty_file+0x79/0x1c0 [ 588.633864][T21666] path_openat+0xe7/0x4280 [ 588.633878][T21666] ? kasan_save_stack+0x3f/0x50 [ 588.633898][T21666] ? kasan_save_stack+0x30/0x50 [ 588.633917][T21666] ? kasan_save_track+0x14/0x30 [ 588.633936][T21666] ? __kasan_slab_alloc+0x89/0x90 [ 588.633957][T21666] ? kmem_cache_alloc_noprof+0x241/0x6d0 [ 588.633976][T21666] ? do_getname+0x35/0x390 [ 588.633993][T21666] ? do_sys_openat2+0xc7/0x1e0 [ 588.634010][T21666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.634027][T21666] ? __pfx_path_openat+0x10/0x10 [ 588.634043][T21666] do_file_open+0x20e/0x430 [ 588.634058][T21666] ? __pfx_do_file_open+0x10/0x10 [ 588.634077][T21666] ? alloc_fd+0x471/0x7a0 [ 588.634091][T21666] ? do_getname+0x191/0x390 [ 588.634109][T21666] do_sys_openat2+0x10f/0x1e0 [ 588.634126][T21666] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.634147][T21666] __x64_sys_openat+0x12d/0x210 [ 588.634166][T21666] ? __pfx___x64_sys_openat+0x10/0x10 [ 588.634186][T21666] ? rcu_is_watching+0x12/0xc0 [ 588.634209][T21666] do_syscall_64+0x115/0x840 [ 588.634227][T21666] ? clear_bhb_loop+0x40/0x90 [ 588.634243][T21666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.634258][T21666] RIP: 0033:0x7f80a459ce59 [ 588.634271][T21666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.634286][T21666] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.634301][T21666] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 588.634311][T21666] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 588.634321][T21666] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 588.634331][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.634340][T21666] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 588.634354][T21666] [ 589.538976][T21681] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 589.609275][T21680] FAULT_INJECTION: forcing a failure. [ 589.609275][T21680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.655270][T21680] CPU: 0 UID: 0 PID: 21680 Comm: syz.0.3151 Tainted: G U L syzkaller #0 PREEMPT(full) [ 589.655299][T21680] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 589.655306][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.655316][T21680] Call Trace: [ 589.655322][T21680] [ 589.655328][T21680] dump_stack_lvl+0x100/0x190 [ 589.655356][T21680] should_fail_ex.cold+0x5/0xa [ 589.655374][T21680] should_fail_alloc_page+0xeb/0x140 [ 589.655395][T21680] prepare_alloc_pages+0x1f0/0x5f0 [ 589.655412][T21680] ? __alloc_frozen_pages_noprof+0x2b1/0x2b60 [ 589.655435][T21680] __alloc_frozen_pages_noprof+0x19a/0x2b60 [ 589.655457][T21680] ? cpa_flush+0x38d/0x960 [ 589.655474][T21680] ? __pfx_cpa_flush+0x10/0x10 [ 589.655489][T21680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.655509][T21680] ? pgprot2cachemode+0x9a/0x130 [ 589.655529][T21680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.655553][T21680] ? do_raw_read_unlock+0x3f/0x70 [ 589.655574][T21680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.655591][T21680] ? policy_nodemask+0xed/0x4f0 [ 589.655605][T21680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.655621][T21680] ? policy_nodemask+0xed/0x4f0 [ 589.655635][T21680] alloc_pages_mpol+0x1fb/0x540 [ 589.655650][T21680] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.655665][T21680] ? alloc_pages_noprof+0xf9/0x160 [ 589.655682][T21680] alloc_pages_noprof+0x1a/0x160 [ 589.655698][T21680] kimage_alloc_pages+0x72/0x380 [ 589.655715][T21680] kimage_alloc_page+0x232/0x910 [ 589.655734][T21680] kimage_load_segment+0x507/0xde0 [ 589.655750][T21680] ? __pfx_kimage_crash_copy_vmcoreinfo+0x10/0x10 [ 589.655771][T21680] do_kexec_load+0x58d/0x810 [ 589.655789][T21680] ? __pfx_do_kexec_load+0x10/0x10 [ 589.655807][T21680] ? _copy_from_user+0x59/0xd0 [ 589.655827][T21680] __x64_sys_kexec_load+0x1bf/0x230 [ 589.655845][T21680] do_syscall_64+0x115/0x840 [ 589.655863][T21680] ? clear_bhb_loop+0x40/0x90 [ 589.655880][T21680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.655895][T21680] RIP: 0033:0x7f80a459ce59 [ 589.655908][T21680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.655923][T21680] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 589.655938][T21680] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 589.655948][T21680] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 589.655957][T21680] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 589.655966][T21680] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 589.655975][T21680] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 589.655990][T21680] [ 590.393772][T21687] netlink: 'syz.3.3149': attribute type 3 has an invalid length. [ 590.422925][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 590.556943][T21689] netlink: 'syz.3.3152': attribute type 32 has an invalid length. [ 590.579855][T21689] netlink: 'syz.3.3152': attribute type 32 has an invalid length. [ 591.175281][ T29] audit: type=1800 audit(1843106036.163:34): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3154" name="members" dev="configfs" ino=105543 res=0 errno=0 [ 591.427166][T21679] ima: policy update failed [ 591.445172][ T29] audit: type=1802 audit(1843106036.433:35): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3151" res=0 errno=0 [ 591.488481][T10930] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 3736 with max blocks 1 with error 117 [ 591.560662][T10930] EXT4-fs (sda1): This should not happen!! Data will be lost [ 591.560662][T10930] [ 591.588405][T21717] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 591.643725][T21717] EXT4-fs (sda1): This should not happen!! Data will be lost [ 591.643725][T21717] [ 592.112457][ T29] audit: type=1800 audit(1843106037.103:36): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3158" name="members" dev="configfs" ino=105620 res=0 errno=0 [ 592.604783][T21730] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 592.671173][ T5706] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 592.681933][T21730] EXT4-fs (sda1): This should not happen!! Data will be lost [ 592.681933][T21730] [ 593.895745][T21778] openvswitch: netlink: Message has 8 unknown bytes. [ 593.920793][T21779] openvswitch: netlink: Message has 8 unknown bytes. [ 593.961485][T21782] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 594.002516][T21782] EXT4-fs (sda1): This should not happen!! Data will be lost [ 594.002516][T21782] [ 594.696980][ T8714] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 3738 with max blocks 1 with error 117 [ 594.755586][ T8714] EXT4-fs (sda1): This should not happen!! Data will be lost [ 594.755586][ T8714] [ 594.901588][T21793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 594.908984][T21793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 594.930723][T21793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 594.947695][T21793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 596.000062][T21847] can0: slcan on ptm0. [ 596.253364][ T8339] Bluetooth: hci5: command 0x0c1a tx timeout [ 596.270762][T21845] can0 (unregistered): slcan off ptm0. [ 596.671517][T21878] can0: slcan on ttyS2. [ 596.840049][T21878] can0 (unregistered): slcan off ttyS2. [ 596.969305][ T8339] Bluetooth: hci4: command 0x0c1a tx timeout [ 596.975681][T18226] Bluetooth: hci1: command 0x041b tx timeout [ 596.982442][ T8815] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.437794][T21915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.464502][ T29] audit: type=1400 audit(4294967298.419:37): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=21910 comm="syz.3.3198" [ 597.513593][T21915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.590642][ T29] audit: type=1800 audit(4294967298.449:38): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3199" name="dbroot" dev="configfs" ino=106579 res=0 errno=0 [ 598.106875][ T8815] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 598.114551][ T8815] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 598.604380][T21933] Process accounting resumed [ 599.215244][ T8341] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 3745 with max blocks 2 with error 117 [ 599.281682][ T8341] EXT4-fs (sda1): This should not happen!! Data will be lost [ 599.281682][ T8341] [ 599.514861][T21951] kexec: Could not allocate control_code_buffer [ 600.293733][T22008] FAULT_INJECTION: forcing a failure. [ 600.293733][T22008] name failslab, interval 1, probability 0, space 0, times 0 [ 600.389236][T22008] CPU: 0 UID: 0 PID: 22008 Comm: syz.0.3218 Tainted: G U L syzkaller #0 PREEMPT(full) [ 600.389264][T22008] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 600.389270][T22008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.389280][T22008] Call Trace: [ 600.389285][T22008] [ 600.389290][T22008] dump_stack_lvl+0x100/0x190 [ 600.389317][T22008] should_fail_ex.cold+0x5/0xa [ 600.389332][T22008] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 600.389352][T22008] should_failslab+0xc2/0x120 [ 600.389366][T22008] __kmalloc_cache_noprof+0x7a/0x6e0 [ 600.389387][T22008] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 600.389412][T22008] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 600.389436][T22008] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 600.389458][T22008] vidtv_mux_init+0x72d/0xbf0 [ 600.389479][T22008] vidtv_start_feed+0x34e/0x500 [ 600.389494][T22008] ? __pfx_vidtv_start_feed+0x10/0x10 [ 600.389509][T22008] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 600.389527][T22008] ? dmx_section_feed_allocate_filter+0x388/0x480 [ 600.389546][T22008] ? rcu_is_watching+0x12/0xc0 [ 600.389570][T22008] dmx_section_feed_start_filtering+0x3a8/0x660 [ 600.389590][T22008] dvb_dmxdev_filter_start+0x767/0xdd0 [ 600.389615][T22008] dvb_demux_do_ioctl+0xe64/0x1200 [ 600.389633][T22008] dvb_usercopy+0x167/0x340 [ 600.389655][T22008] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 600.389672][T22008] ? __pfx_dvb_usercopy+0x10/0x10 [ 600.389696][T22008] ? __fget_files+0x21f/0x3d0 [ 600.389711][T22008] dvb_demux_ioctl+0x29/0x40 [ 600.389732][T22008] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 600.389753][T22008] __x64_sys_ioctl+0x18e/0x210 [ 600.389773][T22008] do_syscall_64+0x115/0x840 [ 600.389791][T22008] ? clear_bhb_loop+0x40/0x90 [ 600.389808][T22008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.389822][T22008] RIP: 0033:0x7f80a459ce59 [ 600.389835][T22008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.389850][T22008] RSP: 002b:00007f80a549a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.389865][T22008] RAX: ffffffffffffffda RBX: 00007f80a4816090 RCX: 00007f80a459ce59 [ 600.389875][T22008] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 600.389884][T22008] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 600.389893][T22008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.389902][T22008] R13: 00007f80a4816128 R14: 00007f80a4816090 R15: 00007ffd6418cf78 [ 600.389917][T22008] [ 601.155751][T18226] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 601.164437][T18226] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 602.599415][T22064] Process accounting paused [ 603.068705][T22066] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 605.025370][T17260] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 3750 with max blocks 1 with error 117 [ 605.080747][T22114] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3239'. [ 605.103392][T17260] EXT4-fs (sda1): This should not happen!! Data will be lost [ 605.103392][T17260] [ 605.149960][T22114] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.206113][T22114] IPv6: Can't replace route, no match found [ 605.453491][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 605.532743][T22128] netlink: 'syz.0.3244': attribute type 64 has an invalid length. [ 605.569648][T22128] netlink: 74 bytes leftover after parsing attributes in process `syz.0.3244'. [ 606.018464][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3250'. [ 606.081447][T22168] binder: 22151:22168 ioctl c0306201 200000000400 returned -14 [ 606.127369][T22169] binder: 22151:22169 ioctl c0306201 200000000400 returned -14 [ 606.893344][T22188] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3254: iget: checksum invalid [ 606.960017][T22188] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 607.029620][T22188] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3254: iget: checksum invalid [ 607.077411][T22188] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 607.125170][T22188] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3254: iget: checksum invalid [ 607.156984][T22202] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.3255: Error -117 reading block bitmap for 4 [ 607.176241][T22188] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 607.187194][T22202] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.3255: Error -117 reading block bitmap for 5 [ 607.200036][T22188] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3254: iget: checksum invalid [ 607.214346][T22188] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 607.226541][T22202] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.3255: bg 1: bad block bitmap checksum [ 607.238733][T22188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 607.248614][T22202] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 607.257817][T22188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 607.300969][T22202] syz.0.3255 (22202): drop_caches: 0 [ 608.657052][ T29] audit: type=1806 audit(4294967309.602:39): xattr="" res=-22 [ 608.920445][T10928] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u11:35: bg 2: bad block bitmap checksum [ 608.987860][T10928] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 609.052532][T10928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.052532][T10928] [ 609.832987][T22295] futex_wake_op: syz.3.3271 tries to shift op by -2048; fix this program [ 609.911988][T22290] 0x000000000001-0x000000020000 : "" [ 609.962420][T22295] ubi1: attaching mtd0 [ 609.983944][T22290] ftl_cs: FTL header corrupt! [ 610.029929][T22295] ubi1: scanning is finished [ 610.097512][T22295] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 610.598234][T22295] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 610.746930][T22295] Process accounting paused [ 612.193195][T22363] openvswitch: netlink: Key type 291 is out of range max 32 [ 612.876043][T22388] ovs_: entered promiscuous mode [ 612.893148][T22397] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3295'. [ 613.016519][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 613.082866][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 613.778948][T22429] NFSD: Failed to start, no listeners configured. [ 614.685230][ T8815] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 614.827501][T22454] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 615.302076][T22441] kexec: Could not allocate control_code_buffer [ 615.449692][T22477] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3312'. [ 616.032002][T22477] netlink: 1166 bytes leftover after parsing attributes in process `syz.1.3312'. [ 616.346838][T22508] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[18404] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[22508] [ 616.440792][T22514] netlink: 'syz.0.3320': attribute type 16 has an invalid length. [ 616.454989][T22514] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3320'. [ 617.132852][T17257] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 18 with max blocks 36 with error 117 [ 617.173668][T17257] EXT4-fs (sda1): This should not happen!! Data will be lost [ 617.173668][T17257] [ 617.429408][T22532] zswap: compressor not available [ 618.022998][T22586] futex_wake_op: syz.2.3334 tries to shift op by -2048; fix this program [ 618.137249][T22591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3336'. [ 618.197373][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3336'. [ 618.238851][T22591] veth1_macvtap: left allmulticast mode [ 618.249137][T22591] veth1_macvtap: left promiscuous mode [ 619.063627][T22623] netlink: 'syz.0.3342': attribute type 11 has an invalid length. [ 619.747349][T22621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 619.793643][T22621] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 619.837868][T22621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 619.888520][T22621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 619.939200][T22621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 620.065342][T22670] futex_wake_op: syz.2.3349 tries to shift op by -2048; fix this program [ 620.169601][T22670] futex_wake_op: syz.2.3349 tries to shift op by -2048; fix this program [ 620.299233][T22681] zswap: compressor not available [ 620.981456][ T8815] Bluetooth: hci5: command 0x0c1a tx timeout [ 621.331348][T22732] block loop4: the capability attribute has been deprecated. [ 621.725956][T22742] futex_wake_op: syz.0.3366 tries to shift op by -2048; fix this program [ 621.864802][ T8815] Bluetooth: hci2: command 0x0c1a tx timeout [ 621.903795][T22742] 0x000000000001-0x000000020000 : "" [ 621.909065][T22742] ftl_cs: FTL header corrupt! [ 621.942042][T18226] Bluetooth: hci1: command 0x041b tx timeout [ 621.942078][ T8815] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.988463][T22753] ubi1: attaching mtd0 [ 621.989025][T22753] ubi1: scanning is finished [ 621.989070][T22753] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 622.158260][T22758] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3371'. [ 622.352367][T22753] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 622.365809][T22773] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3373'. [ 623.061457][ T8815] Bluetooth: hci5: command 0x0c1a tx timeout [ 623.373372][T22806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3381'. [ 623.909385][T22821] vivid-007: ================= START STATUS ================= [ 623.921870][T22821] vivid-007: Generate PTS: true [ 623.937095][T22821] vivid-007: Generate SCR: true [ 623.960052][T22821] tpg source WxH: 320x240 (Y'CbCr) [ 623.975573][T22821] tpg field: 1 [ 623.979060][T22821] tpg crop: (0,0)/320x240 [ 623.984526][T22821] tpg compose: (0,0)/320x240 [ 623.989277][T22821] tpg colorspace: 8 [ 623.993342][T22821] tpg transfer function: 0/0 [ 623.998003][T22821] tpg Y'CbCr encoding: 0/0 [ 624.002723][T22821] tpg quantization: 0/0 [ 624.007479][T22821] tpg RGB range: 0/2 [ 624.011649][T22821] vivid-007: ================== END STATUS ================== [ 624.033286][T22828] netlink: 266 bytes leftover after parsing attributes in process `syz.2.3387'. [ 624.057760][T22828] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.249581][T22837] binder: 22833:22837 ioctl 400c620e 0 returned -14 [ 624.264277][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.272556][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.526441][T22848] random: crng reseeded on system resumption [ 624.588336][ T8815] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 624.616595][T22853] FAULT_INJECTION: forcing a failure. [ 624.616595][T22853] name failslab, interval 1, probability 0, space 0, times 0 [ 624.646901][T22853] CPU: 0 UID: 0 PID: 22853 Comm: syz.3.3393 Tainted: G U L syzkaller #0 PREEMPT(full) [ 624.646929][T22853] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 624.646936][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.646946][T22853] Call Trace: [ 624.646951][T22853] [ 624.646968][T22853] dump_stack_lvl+0x100/0x190 [ 624.646996][T22853] should_fail_ex.cold+0x5/0xa [ 624.647013][T22853] ? fs_reclaim_acquire+0x70/0x100 [ 624.647028][T22853] should_failslab+0xc2/0x120 [ 624.647042][T22853] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 624.647062][T22853] ? security_inode_alloc+0x3b/0x2c0 [ 624.647077][T22853] ? lockdep_init_map_type+0x5c/0x250 [ 624.647098][T22853] security_inode_alloc+0x3b/0x2c0 [ 624.647113][T22853] inode_init_always_gfp+0xc77/0xfb0 [ 624.647129][T22853] alloc_inode+0x8e/0x250 [ 624.647146][T22853] sock_alloc+0x44/0x280 [ 624.647161][T22853] ? security_socket_create+0x7f/0x250 [ 624.647184][T22853] __sock_create+0xc2/0x860 [ 624.647202][T22853] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 624.647224][T22853] inet_ctl_sock_create+0x94/0x230 [ 624.647244][T22853] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 624.647264][T22853] ? ndisc_net_init+0x1b1/0x230 [ 624.647284][T22853] ? __pfx_ndisc_net_init+0x10/0x10 [ 624.647304][T22853] ? __pfx_igmp6_net_init+0x10/0x10 [ 624.647323][T22853] igmp6_net_init+0x35/0x430 [ 624.647342][T22853] ? __pfx_igmp6_net_init+0x10/0x10 [ 624.647361][T22853] ops_init+0x1e2/0x5f0 [ 624.647376][T22853] setup_net+0x118/0x3a0 [ 624.647390][T22853] ? __pfx_setup_net+0x10/0x10 [ 624.647405][T22853] ? mutex_init_lockdep+0xf1/0x120 [ 624.647425][T22853] copy_net_ns+0x46f/0x7c0 [ 624.647441][T22853] create_new_namespaces+0x3ea/0xac0 [ 624.647464][T22853] unshare_nsproxy_namespaces+0xf2/0x220 [ 624.647485][T22853] ksys_unshare+0x438/0xab0 [ 624.647500][T22853] ? __pfx_ksys_unshare+0x10/0x10 [ 624.647517][T22853] __x64_sys_unshare+0x31/0x40 [ 624.647530][T22853] do_syscall_64+0x115/0x840 [ 624.647548][T22853] ? clear_bhb_loop+0x40/0x90 [ 624.647564][T22853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.647579][T22853] RIP: 0033:0x7f1a0659ce59 [ 624.647592][T22853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.647607][T22853] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 624.647623][T22853] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 624.647634][T22853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 624.647643][T22853] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 624.647653][T22853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.647662][T22853] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 624.647677][T22853] [ 624.647742][T22853] socket: no more sockets [ 625.429872][T22853] Failed to initialize the IGMP6 control socket (err -23) [ 626.661531][T18226] Bluetooth: hci5: command 0x0c1a tx timeout [ 626.838667][T22915] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3406'. [ 627.429267][ T29] audit: type=1400 audit(8277292036.990:40): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=22930 comm="syz.3.3410" [ 628.741944][ T8815] Bluetooth: hci5: command 0x0c1a tx timeout [ 629.935842][T23013] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 630.025085][T23027] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3425'. [ 630.216898][T23039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3427'. [ 631.323498][T23074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3436'. [ 631.358337][T23078] random: crng reseeded on system resumption [ 631.364752][T23077] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3437'. [ 631.997612][T23083] FAULT_INJECTION: forcing a failure. [ 631.997612][T23083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.063868][T23083] CPU: 0 UID: 0 PID: 23083 Comm: syz.0.3439 Tainted: G U L syzkaller #0 PREEMPT(full) [ 632.063897][T23083] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 632.063903][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.063938][T23083] Call Trace: [ 632.063945][T23083] [ 632.063951][T23083] dump_stack_lvl+0x100/0x190 [ 632.063979][T23083] should_fail_ex.cold+0x5/0xa [ 632.063996][T23083] should_fail_alloc_page+0xeb/0x140 [ 632.064012][T23083] prepare_alloc_pages+0x1f0/0x5f0 [ 632.064028][T23083] __alloc_frozen_pages_noprof+0x19a/0x2b60 [ 632.064050][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064072][T23083] ? trace_mm_page_alloc+0x164/0x1c0 [ 632.064087][T23083] ? __alloc_frozen_pages_noprof+0x2b1/0x2b60 [ 632.064107][T23083] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 632.064128][T23083] ? __pfx_stack_trace_save+0x10/0x10 [ 632.064144][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064164][T23083] ? stack_depot_save_flags+0x27/0x9d0 [ 632.064183][T23083] ? is_bpf_text_address+0x8a/0x1a0 [ 632.064199][T23083] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 632.064215][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064236][T23083] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 632.064256][T23083] ? kasan_save_stack+0x3f/0x50 [ 632.064281][T23083] ? kasan_save_stack+0x30/0x50 [ 632.064303][T23083] ? kasan_save_track+0x14/0x30 [ 632.064322][T23083] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 632.064343][T23083] ? __get_vm_area_node+0x1ca/0x330 [ 632.064357][T23083] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 632.064373][T23083] ? __kvmalloc_node_noprof+0x3f6/0xa60 [ 632.064400][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.064422][T23083] ? do_syscall_64+0x115/0x840 [ 632.064439][T23083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.064457][T23083] alloc_pages_bulk_noprof+0x649/0x1360 [ 632.064482][T23083] ? policy_nodemask+0xed/0x4f0 [ 632.064496][T23083] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 632.064521][T23083] __kasan_populate_vmalloc+0xf0/0x210 [ 632.064543][T23083] alloc_vmap_area+0x95d/0x2bb0 [ 632.064568][T23083] ? __pfx_alloc_vmap_area+0x10/0x10 [ 632.064593][T23083] __get_vm_area_node+0x1ca/0x330 [ 632.064609][T23083] __vmalloc_node_range_noprof+0x228/0x1630 [ 632.064625][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.064645][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064667][T23083] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.064683][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.064704][T23083] ? alloc_pages_mpol+0x25a/0x540 [ 632.064719][T23083] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.064736][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064757][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.064779][T23083] __kvmalloc_node_noprof+0x3f6/0xa60 [ 632.064800][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.064820][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.064840][T23083] ? _copy_from_user+0x59/0xd0 [ 632.064858][T23083] ? copy_mnt_id_req+0x1b1/0x350 [ 632.064876][T23083] __do_sys_listmount+0x289/0xee0 [ 632.064900][T23083] ? __pfx_do_futex+0x10/0x10 [ 632.064920][T23083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.064939][T23083] ? __fget_files+0x21f/0x3d0 [ 632.064952][T23083] ? __pfx___do_sys_listmount+0x10/0x10 [ 632.064978][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.065000][T23083] do_syscall_64+0x115/0x840 [ 632.065017][T23083] ? clear_bhb_loop+0x40/0x90 [ 632.065036][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.065053][T23083] RIP: 0033:0x7f80a459ce59 [ 632.065066][T23083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.065080][T23083] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 632.065096][T23083] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 632.065106][T23083] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 632.065116][T23083] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.065125][T23083] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 632.065134][T23083] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 632.065149][T23083] [ 632.479809][T23083] syz.0.3439: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 632.495034][T23083] CPU: 0 UID: 0 PID: 23083 Comm: syz.0.3439 Tainted: G U L syzkaller #0 PREEMPT(full) [ 632.495061][T23083] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 632.495068][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.495077][T23083] Call Trace: [ 632.495082][T23083] [ 632.495088][T23083] dump_stack_lvl+0x100/0x190 [ 632.495116][T23083] warn_alloc.cold+0x95/0x1c1 [ 632.495131][T23083] ? __pfx_warn_alloc+0x10/0x10 [ 632.495152][T23083] ? __get_vm_area_node+0x2cd/0x330 [ 632.495168][T23083] ? __get_vm_area_node+0x208/0x330 [ 632.495184][T23083] __vmalloc_node_range_noprof+0xccd/0x1630 [ 632.495200][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.495224][T23083] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.495239][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.495262][T23083] ? alloc_pages_mpol+0x25a/0x540 [ 632.495276][T23083] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.495294][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.495322][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.495345][T23083] __kvmalloc_node_noprof+0x3f6/0xa60 [ 632.495368][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.495389][T23083] ? __do_sys_listmount+0x289/0xee0 [ 632.495409][T23083] ? _copy_from_user+0x59/0xd0 [ 632.495428][T23083] ? copy_mnt_id_req+0x1b1/0x350 [ 632.495446][T23083] __do_sys_listmount+0x289/0xee0 [ 632.495467][T23083] ? __pfx_do_futex+0x10/0x10 [ 632.495487][T23083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.495506][T23083] ? __fget_files+0x21f/0x3d0 [ 632.495519][T23083] ? __pfx___do_sys_listmount+0x10/0x10 [ 632.495544][T23083] ? rcu_is_watching+0x12/0xc0 [ 632.495567][T23083] do_syscall_64+0x115/0x840 [ 632.495584][T23083] ? clear_bhb_loop+0x40/0x90 [ 632.495601][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.495617][T23083] RIP: 0033:0x7f80a459ce59 [ 632.495629][T23083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.495644][T23083] RSP: 002b:00007f80a54bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 632.495659][T23083] RAX: ffffffffffffffda RBX: 00007f80a4815fa0 RCX: 00007f80a459ce59 [ 632.495669][T23083] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 632.495679][T23083] RBP: 00007f80a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.495688][T23083] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 632.495697][T23083] R13: 00007f80a4816038 R14: 00007f80a4815fa0 R15: 00007ffd6418cf78 [ 632.495710][T23083] [ 632.495732][T23083] Mem-Info: [ 632.745850][T23083] active_anon:13523 inactive_anon:18634 isolated_anon:0 [ 632.745850][T23083] active_file:22394 inactive_file:46008 isolated_file:0 [ 632.745850][T23083] unevictable:768 dirty:285 writeback:0 [ 632.745850][T23083] slab_reclaimable:12677 slab_unreclaimable:100623 [ 632.745850][T23083] mapped:29431 shmem:4623 pagetables:1577 [ 632.745850][T23083] sec_pagetables:0 bounce:0 [ 632.745850][T23083] kernel_misc_reclaimable:0 [ 632.745850][T23083] free:1235522 free_pcp:34784 free_cma:0 [ 632.791811][T23083] Node 0 active_anon:54092kB inactive_anon:74536kB active_file:89572kB inactive_file:183900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117724kB dirty:1140kB writeback:0kB shmem:16956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:83968kB kernel_stack:14336kB pagetables:6164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.827616][T23083] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.860482][T23083] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.898156][T23083] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 632.904089][T23083] Node 0 DMA32 free:1046524kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54092kB inactive_anon:74432kB active_file:89572kB inactive_file:183900kB unevictable:1536kB writepending:1140kB zspages:544kB present:3129332kB managed:2537140kB mlocked:0kB bounce:0kB free_pcp:71232kB local_pcp:71232kB free_cma:0kB [ 632.938390][T23083] lowmem_reserve[]: 0 0 1 1 1 [ 632.943286][T23083] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 632.990052][T23083] lowmem_reserve[]: 0 0 0 0 0 [ 632.996829][T23083] Node 1 Normal free:3880200kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:68024kB local_pcp:68024kB free_cma:0kB [ 633.077071][T23083] lowmem_reserve[]: 0 0 0 0 0 [ 633.091469][T23083] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 633.117012][T23083] Node 0 DMA32: 7935*4kB (UME) 5356*8kB (UME) 3008*16kB (UME) 1312*32kB (UME) 538*64kB (UME) 894*128kB (UME) 672*256kB (UME) 414*512kB (UME) 198*1024kB (UME) 32*2048kB (UME) 18*4096kB (UM) = 1039580kB [ 633.144385][T23083] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 633.170562][T23083] Node 1 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (U) 946*4096kB (UM) = 3880200kB [ 633.204046][T23083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.213681][T23083] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.244277][T23083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.274692][T23083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.290786][T23083] 74315 total pagecache pages [ 633.300638][T23083] 60 pages in swap cache [ 633.310615][T23083] Free swap = 124536kB [ 633.319289][T23083] Total swap = 124996kB [ 633.327669][T23083] 2097051 pages RAM [ 633.335841][T23083] 0 pages HighMem/MovableOnly [ 633.349137][T23083] 430878 pages reserved [ 633.357801][T23083] 0 pages cma reserved [ 633.470543][T23116] block nbd2: not configured, cannot reconfigure [ 633.788936][T23100] Process accounting resumed [ 634.861142][T23165] FAULT_INJECTION: forcing a failure. [ 634.861142][T23165] name failslab, interval 1, probability 0, space 0, times 0 [ 634.888365][T23165] CPU: 0 UID: 0 PID: 23165 Comm: syz.3.3453 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.888395][T23165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.888401][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.888411][T23165] Call Trace: [ 634.888417][T23165] [ 634.888423][T23165] dump_stack_lvl+0x100/0x190 [ 634.888451][T23165] should_fail_ex.cold+0x5/0xa [ 634.888466][T23165] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 634.888486][T23165] should_failslab+0xc2/0x120 [ 634.888500][T23165] __kmalloc_cache_noprof+0x7a/0x6e0 [ 634.888518][T23165] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 634.888542][T23165] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 634.888565][T23165] vidtv_mux_init+0x8a6/0xbf0 [ 634.888586][T23165] vidtv_start_feed+0x34e/0x500 [ 634.888601][T23165] ? __pfx_vidtv_start_feed+0x10/0x10 [ 634.888617][T23165] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 634.888635][T23165] ? dmx_section_feed_allocate_filter+0x388/0x480 [ 634.888654][T23165] ? rcu_is_watching+0x12/0xc0 [ 634.888685][T23165] dmx_section_feed_start_filtering+0x3a8/0x660 [ 634.888706][T23165] dvb_dmxdev_filter_start+0x767/0xdd0 [ 634.888724][T23165] dvb_demux_do_ioctl+0xe64/0x1200 [ 634.888742][T23165] dvb_usercopy+0x167/0x340 [ 634.888763][T23165] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 634.888778][T23165] ? __pfx_dvb_usercopy+0x10/0x10 [ 634.888802][T23165] ? __fget_files+0x21f/0x3d0 [ 634.888816][T23165] dvb_demux_ioctl+0x29/0x40 [ 634.888837][T23165] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 634.888859][T23165] __x64_sys_ioctl+0x18e/0x210 [ 634.888879][T23165] do_syscall_64+0x115/0x840 [ 634.888896][T23165] ? clear_bhb_loop+0x40/0x90 [ 634.888913][T23165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.888928][T23165] RIP: 0033:0x7f1a0659ce59 [ 634.888940][T23165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.888955][T23165] RSP: 002b:00007f1a073c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.888971][T23165] RAX: ffffffffffffffda RBX: 00007f1a06815fa0 RCX: 00007f1a0659ce59 [ 634.888981][T23165] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 634.888990][T23165] RBP: 00007f1a06632d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.889000][T23165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.889010][T23165] R13: 00007f1a06816038 R14: 00007f1a06815fa0 R15: 00007ffdf5f5d2f8 [ 634.889024][T23165] [ 634.889123][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 635.144546][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 635.152940][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.163596][ T9] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.168767][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.178804][ T9] Workqueue: events vidtv_mux_tick [ 635.183927][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 635.190500][ T9] Code: 7b c8 d4 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 635.210097][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 635.216152][ T9] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 635.224118][ T9] RDX: 0000000000000000 RSI: ffffffff8833d865 RDI: ffff88801e2add00 [ 635.232085][ T9] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 635.240051][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 635.248017][ T9] R13: ffffc900000e7678 R14: 0000000000000178 R15: 0000000000000000 [ 635.255981][ T9] FS: 0000000000000000(0000) GS:ffff888124366000(0000) knlGS:0000000000000000 [ 635.264898][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.271473][ T9] CR2: 0000001b32612ff8 CR3: 000000007b0e0000 CR4: 00000000003526f0 [ 635.279434][ T9] Call Trace: [ 635.282698][ T9] [ 635.285613][ T9] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 635.291931][ T9] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 635.297463][ T9] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 635.303512][ T9] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 635.309215][ T9] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 635.315266][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.320018][ T9] ? trace_irq_enable.constprop.0+0x122/0x160 [ 635.326070][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.330826][ T9] ? unwind_next_frame+0x3be/0x2090 [ 635.336010][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.340763][ T9] ? unwind_next_frame+0x3be/0x2090 [ 635.345945][ T9] vidtv_mux_push_si+0x932/0xe80 [ 635.350871][ T9] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 635.356314][ T9] ? lock_release+0x24d/0x310 [ 635.360976][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.365726][ T9] ? trace_ignore_this_task+0xbc/0x100 [ 635.371165][ T9] ? lock_release+0x24d/0x310 [ 635.375825][ T9] ? vidtv_memset+0x50/0x90 [ 635.380310][ T9] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 635.385923][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.390676][ T9] ? ktime_get+0x9f/0x320 [ 635.395014][ T9] ? ktime_get+0x1a4/0x320 [ 635.399414][ T9] vidtv_mux_tick+0xe93/0x1460 [ 635.404170][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 635.409355][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.414968][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.419719][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.425331][ T9] ? lock_release+0x24d/0x310 [ 635.429995][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.435610][ T9] ? __pfx_debug_object_deactivate+0x10/0x10 [ 635.441572][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.446321][ T9] ? lock_acquire+0x301/0x370 [ 635.450978][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.455727][ T9] ? rcu_is_watching+0x12/0xc0 [ 635.460478][ T9] process_one_work+0xa23/0x1940 [ 635.465404][ T9] ? __pfx_process_one_work+0x10/0x10 [ 635.470760][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 635.475944][ T9] worker_thread+0x5ef/0xe50 [ 635.480522][ T9] ? kthread+0x13a/0x450 [ 635.484743][ T9] ? __pfx_worker_thread+0x10/0x10 [ 635.489851][ T9] kthread+0x370/0x450 [ 635.493902][ T9] ? __pfx_kthread+0x10/0x10 [ 635.498473][ T9] ret_from_fork+0x72b/0xd50 [ 635.503048][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 635.508141][ T9] ? __switch_to+0x800/0x10f0 [ 635.512799][ T9] ? __switch_to_asm+0x39/0x70 [ 635.517545][ T9] ? __pfx_kthread+0x10/0x10 [ 635.522115][ T9] ret_from_fork_asm+0x1a/0x30 [ 635.526870][ T9] [ 635.529867][ T9] Modules linked in: [ 635.534956][ T9] ---[ end trace 0000000000000000 ]--- [ 635.543975][T23146] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 635.551465][T23146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.568506][T23146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.587189][T23146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.658067][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 635.666760][ T9] Code: 7b c8 d4 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 635.689569][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 635.695815][ T9] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 635.706379][ T9] RDX: 0000000000000000 RSI: ffffffff8833d865 RDI: ffff88801e2add00 [ 635.714489][ T9] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 635.724878][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 635.733302][ T9] R13: ffffc900000e7678 R14: 0000000000000178 R15: 0000000000000000 [ 635.741303][ T9] FS: 0000000000000000(0000) GS:ffff888124366000(0000) knlGS:0000000000000000 [ 635.750467][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.757947][ T9] CR2: 00007fd8d97ea2f8 CR3: 000000007a4d4000 CR4: 00000000003526f0 [ 635.766157][ T9] Kernel panic - not syncing: Fatal exception [ 635.772261][ T9] Kernel Offset: disabled [ 635.776567][ T9] Rebooting in 86400 seconds..