last executing test programs: 14.427705525s ago: executing program 0 (id=451): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x551f, r0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f3, r1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r3 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0}) rt_sigqueueinfo$auto(r3, 0xa000000, &(0x7f00000016c0)={@siginfo_0_0={0x80000000, 0xa88, 0x3, @_timer={0xffffffffffffffff, 0x75c20528, @sival_ptr=&(0x7f0000001600)="5a02212114d680482b46f609a3c2d093075d0acddbc5a95b6531ca4bf36f52da30088696340f404bc40a505418a2535988cc011c61a86dd775a12c4ef96c70c6296683dc82c99216e4aae469c58aa8ace30f1bc2f08c73e7290a45f4f67978e25a212ddb846e1e0cc251202823a603291448be14f74d5af1ace695219e923848568f268def5c6bf015bc9b92c98d84b70e752d066db75ccc2cc4656dc81710f6462f1d708a16efe8bdf5f0", 0x567}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r5, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x24040804) r7 = prctl$auto_PR_SET_MM_END_CODE(0x9, 0x2, 0x0, 0x8, 0x0) lstat$auto(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0xfffffffffffff6e4, 0x9, 0xe62, 0x23, 0xee01, 0xee01, 0x0, 0x5, 0x0, 0x3, 0xf, 0xa, 0x8000, 0x3, 0x2, 0x5, 0x9}) shmctl$auto(0x5, 0x5, &(0x7f0000001b00)={{0x17a, 0x0, r8, 0xfffffff7, 0x3, 0x67c2, 0x5}, 0x7fffffff, 0xffffffffffff0000, 0x7, 0x6, @raw=0x800, @raw, 0xbf, 0x0, &(0x7f0000001980)="bc4214cace01b6d4c497885bfafe946321e9054711e4664ac2cd8f05b0235901f9fce21b2037739f62b8d2d958c69c972450591a0493add7edaefa87b17a937392d2dedf5228f0201760", &(0x7f0000001a00)="5ba69c05307f3d66b89e42f62701f4c50eaa9c76032d6ef7296d067b5152e6b20fac2d0129069bf74d8d1e0c1fd8feaf01dbb150c28f91d3daafd2a966a67b9d118e89c0de8dca3479178cc647604be37f574b494d4d0ba39b2bb45238a947358490a52c2cc4326382e0a042896328b365752b8fb021d14898fe8a3060952f5ce74b49d196158f6608d25b7623826dde81a99e0c9c257fa1d3718d53151a74db5388639519129be889ae8aa3a80039409a2076bccf629bf8492832dab1bcfa40971bba400271313a5818"}) syz_clone3(&(0x7f0000001e40)={0x0, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00), {0x3d}, &(0x7f0000001c40)=""/150, 0x96, &(0x7f0000001d00)=""/204, &(0x7f0000001e00)=[r4, r4, r4, r4, r3, r4], 0x6, {r7}}, 0x58) r9 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001ec0), 0x141280, 0x0) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001f40), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, r10, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r11 = getsockopt$auto(r9, 0x4, 0x0, &(0x7f0000002040)='\x00', &(0x7f0000002080)=0x6) readv$auto(r11, &(0x7f00000021c0)={&(0x7f00000020c0)="b65342e6f1a024c37eed8872550a0d0f925fbec519adcb108658aea18df59578c279d60a38eb7ca0c1331b002fdc270c8afd9e484fc984f7a3b7ddbddeb80183772e7ebbba5789752609f9e9bcfae43dc9f3695836c2b272237cfa7f2b5f6cf077aade8c028c0e1fdd5cd908857c1358c40fd1ee0d8d7bde5abd8e1f54bc6cfef8479735e8e83cf3c89329265186fdfb42c4ef3faa694ce184099104819247c0465d37715a3211c79f8ad6fe4de5ba4ef0c12797b63195f120286c45917b7ba8a22754bf25c5c77bbcdc88b042f94a772053f40b4adfc11c4672f2eda789fb6b448f65a65d4ec4dc1c8dd85cdf69d4af3e499d12bc97", 0xc}, 0x1) r12 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000002240), r7) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r11, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x64, r12, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x3}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x98ab}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x9}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xc68}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xffff}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xd2}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004410}, 0x4000000) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000023c0), r5) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, r13, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xa, 0xbb, "875e8bb98261"}, @NL80211_ATTR_MBSSID_CONFIG={0x2c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xff}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xe}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20040080) r14 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002500), 0x103100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r14, 0x4004550e, 0x0) 6.208968446s ago: executing program 1 (id=463): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='h8\xb6\xaak\xcc\"\xecn\a\x00Snfsd\x00`\xe9\\\xa4\xf9\xf1\x14\xd7\x9bRc\x94&\bY!\xa9\xf6\x9a\x93\xce\xbe\xf13\x02=)\x97y\xc2\xc6\xa0\xec\x12\x8e\x9e\xb5\xe9QE\x15z^8\x957\xb8J\x06\xd9\x9a\x1a\x86\xe0B\xec\x98\x9f\f\xbc\xfb\xe4\xa3\xa9\xbf', 0xf, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r2, 0x29, 0x3d, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r4, 0x560a, r4) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mremap$auto(0x40, 0xffffffffffffffff, 0x4d0, 0x3, 0x4) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000002c0)=""/182, 0xb6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 5.587542582s ago: executing program 0 (id=464): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockname$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) adjtimex$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4105, 0x1009) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0xe8020400, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xc) getpriority$auto_PRIO_PGRP(0x1, 0x0) mincore$auto(0x1000, 0x4000000, 0x0) 5.480350398s ago: executing program 2 (id=465): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x24040000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0xa0342, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000)="9ba80470") unshare$auto(0x6) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x1, 0x200, 0x5, 0x40}, 0x0, &(0x7f0000000140)=0x9, 0x9, 0xa, 0x3ff, 0x5, 0x7, 0x5, 0x9, 0x3}) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000100)="15") readv$auto(0x3, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0xa7) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 5.328956415s ago: executing program 3 (id=466): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x70) mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4) renameat2$auto(r1, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) mprotect$auto(0x200000000000, 0x806124, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc0000103, 0x400, 0xfffffffffffffffc}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 4.582231655s ago: executing program 0 (id=467): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose11/broadcast\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r0, &(0x7f0000000240)={0x0, 0x6}, 0x2) unshare$auto(0x53b2) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r2, 0x0, 0x24000000000083) r3 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x30, 0x0, 0x40) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r4, r4, 0x0, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x180000009b72, 0x2, 0x8000) 4.149023444s ago: executing program 2 (id=468): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) seccomp$auto(0x2, 0x0, 0x0) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001826caca440575039960", @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 3.720870993s ago: executing program 1 (id=469): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c41, 0x0) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) ioctl$auto(r1, 0x40046103, 0x81) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)={0x14, r3, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x40d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xf, 0x0) 3.071341085s ago: executing program 3 (id=470): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = io_uring_setup$auto(0x8, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(r0, 0x1002) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x22, 0xfffffffb}, 0x800009}, 0x5, 0x20000000) r3 = accept$auto(r1, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4010}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) ioctl$auto(0xffffffffffffffff, 0x5607, 0xffffffffffffffff) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.575918762s ago: executing program 0 (id=471): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8e02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zram0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000200)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\xc4\xfao7\xb7P\xd0\xa8\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf1 c\xdbgI\x93\x8d(\xf4\xe8\xeft\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xe7\xd0\x17\xe2', 0x10000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x420040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0x100000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x1}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8953, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) 2.514248872s ago: executing program 1 (id=472): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8e02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2, 0x4, 0x800000000000eb1, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000200)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\xc4\xfao7\xb7P\xd0\xa8\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf1 c\xdbgI\x93\x8d(\xf4\xe8\xeft\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xe7\xd0\x17\xe2', 0x10000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x660442, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba441b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKPBSZGET(r2, 0x127b, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0xe545, &(0x7f0000000040)={0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3ff, &(0x7f00000000c0)={{0xe7ec}, {0x0, 0x85}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0xd2f, 0x6, 0x18, 0xffffffffffffffff, 0xfffffffffffffffc) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 2.145318946s ago: executing program 2 (id=473): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x9, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce) 702.581391ms ago: executing program 1 (id=474): mmap$auto(0x7fffffffffffffff, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x3bbb) socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0xf, 0xa, 0x0, 0x0, @str='ovs_packet\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) set_mempolicy$auto(0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020008, 0x10, 0xeb1, r2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) 702.234432ms ago: executing program 3 (id=475): r0 = socket(0x1e, 0x4, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x10001) timer_create$auto(0x4, &(0x7f0000000140)={@sival_ptr=0x0, @raw=0x6, 0xe}, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x20000) r1 = socket(0x2, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/hsr_slave_0/hop_limit\x00', 0x6c0200, 0x0) ptrace$auto_PTRACE_INTERRUPT(0x4207, 0x0, 0x0, 0xffffffffffffffff) r2 = landlock_create_ruleset$auto(0x0, 0x9, 0x0) r3 = syz_genetlink_get_family_id$auto_net_shaper(0x0, r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dvmrp0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r5, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32=r7], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r8, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NET_SHAPER_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9d0f}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x80000001}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8937}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xfb}]}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x40}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xd}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4fa54be1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xb1}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5090) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 526.601871ms ago: executing program 0 (id=476): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) 152.529µs ago: executing program 1 (id=477): socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x401, 0x408, 0xf4b, 0x20000400004, 0x200000000040000d, 0x0}) r5 = wait4$auto(r4, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x8, 0x80ac, 0x2, 0xa, 0xfffffffffffffffe, 0x400}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c", @ANYRES32=r5, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c73cbaacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c4580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(0xffffffffffffffff, 0x560a, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 3 (id=478): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, 0x0, 0xf, 0xc45) msgctl$auto_MSG_STAT(0x0, 0xb, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x9fffffffd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 74.990806][ T5616] cgroup: Unknown subsys name 'net' [ 75.118024][ T5616] cgroup: Unknown subsys name 'cpuset' [ 75.127700][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.623504][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.421177][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.440560][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.448848][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.453882][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.456481][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.466150][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.474070][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.486283][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.488181][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.493876][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.507904][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.510021][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.516416][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.522938][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.539930][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.540617][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.547406][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.555153][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.562310][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.575072][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.044675][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.052600][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.059996][ T5630] bridge_slave_0: entered allmulticast mode [ 80.067211][ T5630] bridge_slave_0: entered promiscuous mode [ 80.106415][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.113909][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.121039][ T5630] bridge_slave_1: entered allmulticast mode [ 80.128247][ T5630] bridge_slave_1: entered promiscuous mode [ 80.143440][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.150563][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.157821][ T5629] bridge_slave_0: entered allmulticast mode [ 80.164829][ T5629] bridge_slave_0: entered promiscuous mode [ 80.195752][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.202940][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.210150][ T5629] bridge_slave_1: entered allmulticast mode [ 80.217135][ T5629] bridge_slave_1: entered promiscuous mode [ 80.261831][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.269243][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.276609][ T5628] bridge_slave_0: entered allmulticast mode [ 80.283815][ T5628] bridge_slave_0: entered promiscuous mode [ 80.293832][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.322637][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.330175][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.337565][ T5628] bridge_slave_1: entered allmulticast mode [ 80.344652][ T5628] bridge_slave_1: entered promiscuous mode [ 80.353761][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.373781][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.400624][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.407825][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.415386][ T5627] bridge_slave_0: entered allmulticast mode [ 80.422602][ T5627] bridge_slave_0: entered promiscuous mode [ 80.432563][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.460212][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.467498][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.475038][ T5627] bridge_slave_1: entered allmulticast mode [ 80.482013][ T5627] bridge_slave_1: entered promiscuous mode [ 80.500970][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.512109][ T5630] team0: Port device team_slave_0 added [ 80.541087][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.552332][ T5630] team0: Port device team_slave_1 added [ 80.578210][ T5629] team0: Port device team_slave_0 added [ 80.603043][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.614495][ T5629] team0: Port device team_slave_1 added [ 80.630393][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.638537][ T50] Bluetooth: hci3: command tx timeout [ 80.644080][ T50] Bluetooth: hci2: command tx timeout [ 80.644218][ T50] Bluetooth: hci0: command tx timeout [ 80.649850][ T5643] Bluetooth: hci1: command tx timeout [ 80.661517][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.687573][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.701283][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.722159][ T5628] team0: Port device team_slave_0 added [ 80.728445][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.735516][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.761619][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.796470][ T5628] team0: Port device team_slave_1 added [ 80.819307][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.826580][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.852720][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.888143][ T5627] team0: Port device team_slave_0 added [ 80.895288][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.902224][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.928156][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.961666][ T5627] team0: Port device team_slave_1 added [ 80.975940][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.982921][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.009105][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.025514][ T5630] hsr_slave_0: entered promiscuous mode [ 81.032007][ T5630] hsr_slave_1: entered promiscuous mode [ 81.060572][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.067797][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.093766][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.123449][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.130756][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.156976][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.196027][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.203074][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.229048][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.265847][ T5629] hsr_slave_0: entered promiscuous mode [ 81.272033][ T5629] hsr_slave_1: entered promiscuous mode [ 81.278364][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 81.284499][ T5629] Cannot create hsr debugfs directory [ 81.329696][ T5628] hsr_slave_0: entered promiscuous mode [ 81.336187][ T5628] hsr_slave_1: entered promiscuous mode [ 81.342618][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 81.348416][ T5628] Cannot create hsr debugfs directory [ 81.431687][ T5627] hsr_slave_0: entered promiscuous mode [ 81.438092][ T5627] hsr_slave_1: entered promiscuous mode [ 81.444351][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 81.450076][ T5627] Cannot create hsr debugfs directory [ 81.807174][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.823430][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.831802][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.841760][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.856009][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.866443][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.874763][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.884927][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.949915][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.962578][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.976250][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.988136][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.996553][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.008098][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.016355][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.025762][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.124808][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.136159][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.144344][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.154002][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.167927][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.177362][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.196564][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.206386][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.327528][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.337829][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.346455][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.357310][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.366207][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.375812][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.393868][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.403861][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.416045][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.473156][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.506771][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.538306][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.546231][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.570228][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.592404][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.599555][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.622486][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.629636][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.657367][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.664496][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.679825][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.714809][ T5643] Bluetooth: hci0: command tx timeout [ 82.714887][ T50] Bluetooth: hci2: command tx timeout [ 82.720259][ T5643] Bluetooth: hci3: command tx timeout [ 82.727061][ T5643] Bluetooth: hci1: command tx timeout [ 82.757711][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.790924][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.798068][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.831632][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.838787][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.861196][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.927239][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.958926][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.966147][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.009563][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.016854][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.847679][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.889764][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.019266][ T5629] veth0_vlan: entered promiscuous mode [ 84.048848][ T5629] veth1_vlan: entered promiscuous mode [ 84.107306][ T5630] veth0_vlan: entered promiscuous mode [ 84.131627][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.162460][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.171264][ T5630] veth1_vlan: entered promiscuous mode [ 84.232651][ T5628] veth0_vlan: entered promiscuous mode [ 84.264132][ T5629] veth0_macvtap: entered promiscuous mode [ 84.284092][ T5628] veth1_vlan: entered promiscuous mode [ 84.294144][ T5630] veth0_macvtap: entered promiscuous mode [ 84.307110][ T5630] veth1_macvtap: entered promiscuous mode [ 84.317980][ T5629] veth1_macvtap: entered promiscuous mode [ 84.346775][ T5627] veth0_vlan: entered promiscuous mode [ 84.368322][ T5627] veth1_vlan: entered promiscuous mode [ 84.383182][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.392525][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.419753][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.441488][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.450866][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.462486][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.475006][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.484362][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.517076][ T202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.526406][ T202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.545542][ T202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.556502][ T202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.577749][ T5628] veth0_macvtap: entered promiscuous mode [ 84.608877][ T5627] veth0_macvtap: entered promiscuous mode [ 84.630834][ T5628] veth1_macvtap: entered promiscuous mode [ 84.675901][ T5627] veth1_macvtap: entered promiscuous mode [ 84.757858][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.767479][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.777673][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.781157][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.796360][ T5643] Bluetooth: hci1: command tx timeout [ 84.796586][ T5644] Bluetooth: hci0: command tx timeout [ 84.801783][ T4946] Bluetooth: hci2: command tx timeout [ 84.808132][ T50] Bluetooth: hci3: command tx timeout [ 84.837828][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.855830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.858059][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.863877][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.898203][ T202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907315][ T202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.930272][ T202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.939169][ T202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.953111][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.962121][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.975546][ T202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.984630][ T202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.014226][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.023128][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.031034][ T202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042664][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.082038][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.224683][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.235731][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.351076][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.379205][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.392780][ T5787] random: crng reseeded on system resumption [ 85.459004][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.461262][ T5787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.477095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.485724][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.502883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.874060][ T5792] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.018385][ T5799] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.242340][ T9] cfg80211: failed to load regulatory.db [ 86.507858][ T5807] Zero length message leads to an empty skb [ 86.873689][ T50] Bluetooth: hci3: command tx timeout [ 86.874684][ T4946] Bluetooth: hci0: command tx timeout [ 86.885571][ T50] Bluetooth: hci2: command tx timeout [ 86.885605][ T50] Bluetooth: hci1: command tx timeout [ 87.189641][ T29] audit: type=1800 audit(1784027898.503:2): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7" name="version" dev="configfs" ino=8277 res=0 errno=0 [ 87.270203][ T5810] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.727059][ T5833] ======================================================= [ 87.727059][ T5833] WARNING: The mand mount option has been deprecated and [ 87.727059][ T5833] and is ignored by this kernel. Remove the mand [ 87.727059][ T5833] option from the mount to silence this warning. [ 87.727059][ T5833] ======================================================= [ 88.009302][ T5836] zswap: compressor not available [ 88.283936][ T5842] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.666298][ T5850] netlink: zone id is out of range [ 88.701061][ T5850] netlink: zone id is out of range [ 88.742464][ T5850] netlink: zone id is out of range [ 88.781373][ T5850] netlink: zone id is out of range [ 88.806996][ T5850] netlink: zone id is out of range [ 88.831683][ T5850] netlink: zone id is out of range [ 88.886436][ T5850] netlink: zone id is out of range [ 88.972754][ T5850] netlink: zone id is out of range [ 89.060104][ T5850] netlink: set zone limit has 8 unknown bytes [ 92.138872][ T4946] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 94.455798][ T5929] ptp ptp0: new virtual clock ptp1 [ 94.484931][ T5929] ptp ptp0: new virtual clock ptp2 [ 94.538135][ T5929] ptp ptp0: new virtual clock ptp3 [ 94.591141][ T5920] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.621233][ T5929] ptp ptp0: new virtual clock ptp4 [ 94.679557][ T5934] netlink: zone id is out of range [ 94.685777][ T5924] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 94.693239][ T5929] ptp ptp0: new virtual clock ptp5 [ 94.701903][ T5934] netlink: zone id is out of range [ 94.724700][ T5934] netlink: zone id is out of range [ 94.730940][ T5934] netlink: zone id is out of range [ 94.739108][ T5934] netlink: zone id is out of range [ 94.748526][ T5924] FAULT_INJECTION: forcing a failure. [ 94.748526][ T5924] name failslab, interval 1, probability 0, space 0, times 1 [ 94.775674][ T5934] netlink: zone id is out of range [ 94.784534][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.3.26 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.784566][ T5924] Tainted: [L]=SOFTLOCKUP [ 94.784571][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.784588][ T5924] Call Trace: [ 94.784594][ T5924] [ 94.784600][ T5924] dump_stack_lvl+0x100/0x190 [ 94.784625][ T5924] should_fail_ex.cold+0x5/0xa [ 94.784656][ T5924] should_failslab+0xc2/0x120 [ 94.784692][ T5924] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.784711][ T5924] ? mas_preallocate+0x1105/0x14a0 [ 94.784733][ T5924] mas_preallocate+0x1105/0x14a0 [ 94.784754][ T5924] ? __pfx_mas_preallocate+0x10/0x10 [ 94.784777][ T5924] ? anon_vma_name+0x5a/0x250 [ 94.784805][ T5924] __split_vma+0x33d/0xda0 [ 94.784830][ T5924] ? __pfx___split_vma+0x10/0x10 [ 94.784850][ T5924] ? vma_link+0x5ee/0x8d0 [ 94.784882][ T5924] vms_gather_munmap_vmas+0x1d2/0x1720 [ 94.784909][ T5924] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 94.784932][ T5924] ? alloc_new_pud+0x217/0x320 [ 94.784945][ T5924] ? get_old_pud+0xd8/0x360 [ 94.784958][ T5924] ? move_page_tables+0x11c/0x4610 [ 94.784973][ T5924] ? __pfx_copy_vma+0x10/0x10 [ 94.784994][ T5924] do_vmi_align_munmap+0x287/0x5f0 [ 94.785020][ T5924] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 94.785069][ T5924] do_vmi_munmap+0x1f8/0x3e0 [ 94.785094][ T5924] move_vma+0xe5b/0x1920 [ 94.785132][ T5924] ? __pfx_move_vma+0x10/0x10 [ 94.785149][ T5924] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 94.785176][ T5924] ? vrm_set_new_addr+0x204/0x290 [ 94.785193][ T5924] mremap_to+0x234/0x4c0 [ 94.785206][ T5924] ? mas_walk+0x6ef/0x9b0 [ 94.785220][ T5924] ? __pfx_mremap_to+0x10/0x10 [ 94.785234][ T5924] ? check_prep_vma+0x912/0xe60 [ 94.785252][ T5924] __do_sys_mremap+0x88c/0x1850 [ 94.785286][ T5924] ? __pfx___do_sys_mremap+0x10/0x10 [ 94.785311][ T5924] ? ksys_write+0x190/0x250 [ 94.785343][ T5924] ? __pfx_do_futex+0x10/0x10 [ 94.785364][ T5924] ? __x64_sys_futex+0x34f/0x4d0 [ 94.785389][ T5924] do_syscall_64+0x115/0x840 [ 94.785403][ T5924] ? clear_bhb_loop+0x40/0x90 [ 94.785422][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.785438][ T5924] RIP: 0033:0x7f6b04b9de59 [ 94.785459][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.785476][ T5924] RSP: 002b:00007f6b05a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 94.785491][ T5924] RAX: ffffffffffffffda RBX: 00007f6b04e25fa0 RCX: 00007f6b04b9de59 [ 94.785502][ T5924] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 94.785511][ T5924] RBP: 00007f6b04c33e6f R08: 0000000100000000 R09: 0000000000000000 [ 94.785520][ T5924] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 94.785529][ T5924] R13: 00007f6b04e26038 R14: 00007f6b04e25fa0 R15: 00007ffc1396f7a8 [ 94.785549][ T5924] [ 95.087219][ T5934] netlink: zone id is out of range [ 95.093825][ T5934] netlink: zone id is out of range [ 95.106532][ T5934] netlink: set zone limit has 8 unknown bytes [ 95.167628][ T5929] ptp ptp0: new virtual clock ptp6 [ 95.247368][ T5929] ptp ptp0: new virtual clock ptp7 [ 95.317099][ T5929] ptp ptp0: new virtual clock ptp8 [ 95.348614][ T5929] failed to create ptp aux_worker -4 [ 96.891531][ T29] audit: type=1804 audit(1784027908.253:3): pid=5968 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.33" name="/newroot/8/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 96.979009][ T29] audit: type=1804 audit(1784027908.253:4): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.33" name="/newroot/8/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 98.382791][ T29] audit: type=1800 audit(1784027909.743:5): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.38" name="dbroot" dev="configfs" ino=8723 res=0 errno=0 [ 98.390315][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 98.667836][ T4946] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 99.507076][ T6004] FAULT_INJECTION: forcing a failure. [ 99.507076][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 99.545398][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.0.39 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.545444][ T6004] Tainted: [L]=SOFTLOCKUP [ 99.545454][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.545474][ T6004] Call Trace: [ 99.545483][ T6004] [ 99.545494][ T6004] dump_stack_lvl+0x100/0x190 [ 99.545533][ T6004] should_fail_ex.cold+0x5/0xa [ 99.545574][ T6004] should_failslab+0xc2/0x120 [ 99.545612][ T6004] __kmalloc_flags_noprof+0x115/0x890 [ 99.545661][ T6004] ? alloc_slab_obj_exts+0xb2/0x250 [ 99.545713][ T6004] alloc_slab_obj_exts+0xb2/0x250 [ 99.545764][ T6004] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 99.545818][ T6004] ? kasan_save_track+0x14/0x30 [ 99.545854][ T6004] kmem_cache_alloc_noprof+0x587/0x6a0 [ 99.545888][ T6004] ? vm_area_dup+0x27/0x8e0 [ 99.545937][ T6004] vm_area_dup+0x27/0x8e0 [ 99.545980][ T6004] __split_vma+0x18c/0xda0 [ 99.546030][ T6004] ? __pfx___split_vma+0x10/0x10 [ 99.546069][ T6004] ? vma_link+0x5ee/0x8d0 [ 99.546131][ T6004] vms_gather_munmap_vmas+0x1d2/0x1720 [ 99.546186][ T6004] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 99.546233][ T6004] ? alloc_new_pud+0x217/0x320 [ 99.546257][ T6004] ? get_old_pud+0xd8/0x360 [ 99.546285][ T6004] ? move_page_tables+0x11c/0x4610 [ 99.546315][ T6004] ? __pfx_copy_vma+0x10/0x10 [ 99.546356][ T6004] do_vmi_align_munmap+0x287/0x5f0 [ 99.546407][ T6004] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 99.546506][ T6004] do_vmi_munmap+0x1f8/0x3e0 [ 99.546540][ T6004] move_vma+0xe5b/0x1920 [ 99.546584][ T6004] ? __pfx_move_vma+0x10/0x10 [ 99.546617][ T6004] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 99.546671][ T6004] ? vrm_set_new_addr+0x204/0x290 [ 99.546703][ T6004] mremap_to+0x234/0x4c0 [ 99.546729][ T6004] ? mas_walk+0x6ef/0x9b0 [ 99.546755][ T6004] ? __pfx_mremap_to+0x10/0x10 [ 99.546781][ T6004] ? check_prep_vma+0x912/0xe60 [ 99.546815][ T6004] __do_sys_mremap+0x88c/0x1850 [ 99.546863][ T6004] ? __pfx___do_sys_mremap+0x10/0x10 [ 99.546889][ T6004] ? ksys_write+0x190/0x250 [ 99.546941][ T6004] ? __pfx_do_futex+0x10/0x10 [ 99.546980][ T6004] ? __x64_sys_futex+0x34f/0x4d0 [ 99.547031][ T6004] do_syscall_64+0x115/0x840 [ 99.547056][ T6004] ? clear_bhb_loop+0x40/0x90 [ 99.547090][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.547120][ T6004] RIP: 0033:0x7f8a8dd9de59 [ 99.547143][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.547170][ T6004] RSP: 002b:00007f8a8eb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 99.547197][ T6004] RAX: ffffffffffffffda RBX: 00007f8a8e025fa0 RCX: 00007f8a8dd9de59 [ 99.547217][ T6004] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 99.547235][ T6004] RBP: 00007f8a8de33e6f R08: 0000000100000000 R09: 0000000000000000 [ 99.547252][ T6004] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 99.547269][ T6004] R13: 00007f8a8e026038 R14: 00007f8a8e025fa0 R15: 00007ffc2477ccc8 [ 99.547309][ T6004] [ 104.152629][ T29] audit: type=1800 audit(1784027915.513:6): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.52" name="dbroot" dev="configfs" ino=8864 res=0 errno=0 [ 104.782822][ T6066] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 104.801492][ T6066] netlink: 33 bytes leftover after parsing attributes in process `syz.0.53'. [ 106.783175][ T6094] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.881127][ T6094] ptp ptp0: new virtual clock ptp9 [ 106.901806][ T6094] ptp ptp0: new virtual clock ptp10 [ 106.934630][ T6094] ptp ptp0: new virtual clock ptp11 [ 106.991006][ T6094] ptp ptp0: new virtual clock ptp12 [ 107.045181][ T6094] ptp ptp0: new virtual clock ptp13 [ 107.083584][ T6094] ptp ptp0: new virtual clock ptp14 [ 107.123200][ T6094] ptp ptp0: new virtual clock ptp15 [ 107.155879][ T6094] ptp ptp0: new virtual clock ptp16 [ 107.186243][ T6094] ptp ptp0: new virtual clock ptp17 [ 107.222810][ T6094] ptp ptp0: new virtual clock ptp18 [ 107.261300][ T6094] ptp ptp0: new virtual clock ptp19 [ 107.293433][ T6094] ptp ptp0: new virtual clock ptp20 [ 107.321309][ T6094] ptp ptp0: new virtual clock ptp21 [ 107.360207][ T6094] ptp ptp0: new virtual clock ptp22 [ 107.395874][ T6094] ptp ptp0: new virtual clock ptp23 [ 107.411955][ T6094] ptp ptp0: guarantee physical clock free running [ 108.230349][ T6132] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.354829][ T6123] zswap: compressor 000 not available [ 108.846893][ T6137] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 108.879595][ T6137] netlink: 33 bytes leftover after parsing attributes in process `syz.2.65'. [ 109.267675][ T6139] futex_wake_op: syz.2.67 tries to shift op by -2048; fix this program [ 109.305833][ T6139] 0x000000000001-0x000000020000 : "" [ 109.353029][ T6139] ftl_cs: FTL header corrupt! [ 111.110461][ T6161] FAULT_INJECTION: forcing a failure. [ 111.110461][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 111.110987][ T6161] CPU: 0 UID: 0 PID: 6161 Comm: syz.0.74 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.111032][ T6161] Tainted: [L]=SOFTLOCKUP [ 111.111041][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.111058][ T6161] Call Trace: [ 111.111067][ T6161] [ 111.111077][ T6161] dump_stack_lvl+0x100/0x190 [ 111.111111][ T6161] should_fail_ex.cold+0x5/0xa [ 111.111142][ T6161] should_failslab+0xc2/0x120 [ 111.111175][ T6161] __kmalloc_noprof+0xfc/0x820 [ 111.111204][ T6161] ? __register_sysctl_table+0xbc8/0x1650 [ 111.111250][ T6161] ? __register_sysctl_table+0xbc8/0x1650 [ 111.111296][ T6161] ? __register_sysctl_table+0xbe4/0x1650 [ 111.111357][ T6161] __register_sysctl_table+0xbe4/0x1650 [ 111.111424][ T6161] ? __pfx___register_sysctl_table+0x10/0x10 [ 111.111474][ T6161] ? is_module_address+0x69/0xf0 [ 111.111524][ T6161] ? register_net_sysctl_sz+0x222/0x430 [ 111.111564][ T6161] __devinet_sysctl_register+0x1b9/0x360 [ 111.111614][ T6161] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 111.111664][ T6161] ? __asan_memcpy+0x3c/0x60 [ 111.111689][ T6161] devinet_init_net+0x334/0x8d0 [ 111.111735][ T6161] ? __pfx_devinet_init_net+0x10/0x10 [ 111.111780][ T6161] ops_init+0x1e2/0x5f0 [ 111.111817][ T6161] setup_net+0x118/0x3a0 [ 111.111852][ T6161] ? __pfx_setup_net+0x10/0x10 [ 111.111886][ T6161] ? mutex_init_lockdep+0xf1/0x120 [ 111.111935][ T6161] copy_net_ns+0x46f/0x7c0 [ 111.111974][ T6161] create_new_namespaces+0x3ea/0xac0 [ 111.112027][ T6161] unshare_nsproxy_namespaces+0xf2/0x220 [ 111.112057][ T6161] ksys_unshare+0x438/0xab0 [ 111.112091][ T6161] ? __pfx_ksys_unshare+0x10/0x10 [ 111.112137][ T6161] __x64_sys_unshare+0x31/0x40 [ 111.112168][ T6161] do_syscall_64+0x115/0x840 [ 111.112193][ T6161] ? clear_bhb_loop+0x40/0x90 [ 111.112226][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.112254][ T6161] RIP: 0033:0x7f8a8dd9de59 [ 111.112277][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.112302][ T6161] RSP: 002b:00007f8a8eb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.112328][ T6161] RAX: ffffffffffffffda RBX: 00007f8a8e025fa0 RCX: 00007f8a8dd9de59 [ 111.112347][ T6161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 111.112363][ T6161] RBP: 00007f8a8de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 111.112379][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.112396][ T6161] R13: 00007f8a8e026038 R14: 00007f8a8e025fa0 R15: 00007ffc2477ccc8 [ 111.112440][ T6161] [ 111.114102][ T6161] sysctl could not get directory: [ 111.343644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.347496][ T6161] /net/ipv4/conf/default -12 [ 112.216445][ T6175] busy [ 113.361640][ T6183] process 'syz.1.76' launched './file0' with NULL argv: empty string added [ 117.030836][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 117.560647][ T6256] FAULT_INJECTION: forcing a failure. [ 117.560647][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 117.613907][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.3.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.613952][ T6256] Tainted: [L]=SOFTLOCKUP [ 117.613962][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.613978][ T6256] Call Trace: [ 117.613987][ T6256] [ 117.613997][ T6256] dump_stack_lvl+0x100/0x190 [ 117.614047][ T6256] should_fail_ex.cold+0x5/0xa [ 117.614081][ T6256] should_failslab+0xc2/0x120 [ 117.614120][ T6256] kmem_cache_alloc_noprof+0x91/0x6a0 [ 117.614153][ T6256] ? __pfx_map_id_range_down+0x10/0x10 [ 117.614191][ T6256] ? security_inode_alloc+0x3b/0x2c0 [ 117.614228][ T6256] security_inode_alloc+0x3b/0x2c0 [ 117.614258][ T6256] inode_init_always_gfp+0xc77/0xfb0 [ 117.614307][ T6256] alloc_inode+0x8e/0x250 [ 117.614341][ T6256] sock_alloc+0x44/0x280 [ 117.614375][ T6256] ? security_socket_create+0x7f/0x250 [ 117.614422][ T6256] sock_create_lite+0x82/0x120 [ 117.614462][ T6256] __netlink_kernel_create+0xbd/0x750 [ 117.614503][ T6256] ? __kvmalloc_node_noprof+0x36d/0x970 [ 117.614537][ T6256] ? __pfx___netlink_kernel_create+0x10/0x10 [ 117.614592][ T6256] fib_net_init+0x2ab/0x440 [ 117.614633][ T6256] ? is_module_address+0x69/0xf0 [ 117.614678][ T6256] ? __pfx_fib_net_init+0x10/0x10 [ 117.614719][ T6256] ? timer_init_key+0x150/0x310 [ 117.614758][ T6256] ? __pfx_nl_fib_input+0x10/0x10 [ 117.614805][ T6256] ? devinet_init_net+0x56c/0x8d0 [ 117.614855][ T6256] ? __pfx_fib_net_init+0x10/0x10 [ 117.614902][ T6256] ops_init+0x1e2/0x5f0 [ 117.614939][ T6256] setup_net+0x118/0x3a0 [ 117.614973][ T6256] ? __pfx_setup_net+0x10/0x10 [ 117.615007][ T6256] ? mutex_init_lockdep+0xf1/0x120 [ 117.615055][ T6256] copy_net_ns+0x46f/0x7c0 [ 117.615096][ T6256] create_new_namespaces+0x3ea/0xac0 [ 117.615152][ T6256] unshare_nsproxy_namespaces+0xf2/0x220 [ 117.615183][ T6256] ksys_unshare+0x438/0xab0 [ 117.615218][ T6256] ? __pfx_ksys_unshare+0x10/0x10 [ 117.615266][ T6256] __x64_sys_unshare+0x31/0x40 [ 117.615299][ T6256] do_syscall_64+0x115/0x840 [ 117.615324][ T6256] ? clear_bhb_loop+0x40/0x90 [ 117.615359][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.615389][ T6256] RIP: 0033:0x7f6b04b9de59 [ 117.615418][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.615445][ T6256] RSP: 002b:00007f6b05a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 117.615473][ T6256] RAX: ffffffffffffffda RBX: 00007f6b04e25fa0 RCX: 00007f6b04b9de59 [ 117.615493][ T6256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 117.615510][ T6256] RBP: 00007f6b04c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 117.615527][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.615544][ T6256] R13: 00007f6b04e26038 R14: 00007f6b04e25fa0 R15: 00007ffc1396f7a8 [ 117.615582][ T6256] [ 119.502635][ T6278] random: crng reseeded on system resumption [ 120.652120][ T6300] can0: slcan on pty155. [ 120.710052][ T6306] mmap: syz.0.97 (6306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.788046][ T6305] can0 (unregistered): slcan off pty155. [ 120.842409][ T4946] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 122.631646][ T6319] nbd: socks must be embedded in a SOCK_ITEM attr [ 122.708767][ T6319] ptp ptp0: guarantee physical clock free running [ 123.007984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.312371][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 130.820800][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 132.961470][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969191][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.931190][ T6464] can0: slcan on pty155. [ 134.051685][ T6466] can0 (unregistered): slcan off pty155. [ 134.690978][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 136.842548][ T5643] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 137.159591][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 140.199799][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 142.588354][ T6591] zswap: compressor 000 not available [ 142.622752][ T6596] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.328959][ T5643] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 147.473821][ T6670] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.520021][ T5643] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 147.557146][ T6661] zswap: compressor 000 not available [ 148.425562][ T5643] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 148.643044][ T6683] FAULT_INJECTION: forcing a failure. [ 148.643044][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 148.690268][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.1.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.690321][ T6683] Tainted: [L]=SOFTLOCKUP [ 148.690331][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.690381][ T6683] Call Trace: [ 148.690390][ T6683] [ 148.690402][ T6683] dump_stack_lvl+0x100/0x190 [ 148.690440][ T6683] should_fail_ex.cold+0x5/0xa [ 148.690474][ T6683] should_failslab+0xc2/0x120 [ 148.690512][ T6683] __kmalloc_noprof+0xfc/0x820 [ 148.690546][ T6683] ? constrain_params_by_rules+0x175/0xd20 [ 148.690597][ T6683] constrain_params_by_rules+0x175/0xd20 [ 148.690637][ T6683] ? kfree+0x22b/0x6c0 [ 148.690685][ T6683] ? constrain_params_by_rules+0xa88/0xd20 [ 148.690733][ T6683] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 148.690783][ T6683] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 148.690823][ T6683] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 148.690865][ T6683] ? __x64_sys_ioctl+0x18e/0x210 [ 148.690900][ T6683] ? do_syscall_64+0x115/0x840 [ 148.690940][ T6683] ? snd_interval_refine+0x2d0/0x580 [ 148.690978][ T6683] snd_pcm_hw_refine+0x82a/0xb40 [ 148.691025][ T6683] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 148.691063][ T6683] ? snd_pcm_hw_refine+0x35c/0xb40 [ 148.691109][ T6683] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 148.691156][ T6683] ? __kasan_kmalloc+0xaa/0xb0 [ 148.691191][ T6683] snd_pcm_hw_param_first+0x2b0/0x680 [ 148.691235][ T6683] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 148.691284][ T6683] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 148.691337][ T6683] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 148.691381][ T6683] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 148.691436][ T6683] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 148.691498][ T6683] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 148.691541][ T6683] ? __pfx___mutex_lock+0x10/0x10 [ 148.691567][ T6683] ? find_held_lock+0x2b/0x80 [ 148.691599][ T6683] ? tomoyo_path_number_perm+0x28f/0x580 [ 148.691658][ T6683] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 148.691708][ T6683] snd_pcm_oss_get_formats+0x7d/0x350 [ 148.691757][ T6683] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 148.691812][ T6683] snd_pcm_oss_ioctl+0x1870/0x3790 [ 148.691853][ T6683] ? find_held_lock+0x2b/0x80 [ 148.691884][ T6683] ? __fget_files+0x215/0x3d0 [ 148.691924][ T6683] ? hook_file_ioctl_common+0x140/0x440 [ 148.691958][ T6683] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.692005][ T6683] ? __fget_files+0x21f/0x3d0 [ 148.692052][ T6683] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.692097][ T6683] __x64_sys_ioctl+0x18e/0x210 [ 148.692138][ T6683] do_syscall_64+0x115/0x840 [ 148.692163][ T6683] ? clear_bhb_loop+0x40/0x90 [ 148.692198][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.692229][ T6683] RIP: 0033:0x7fd8aef9de59 [ 148.692254][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.692280][ T6683] RSP: 002b:00007fd8afe7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.692307][ T6683] RAX: ffffffffffffffda RBX: 00007fd8af226090 RCX: 00007fd8aef9de59 [ 148.692332][ T6683] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 148.692350][ T6683] RBP: 00007fd8af033e6f R08: 0000000000000000 R09: 0000000000000000 [ 148.692367][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.692384][ T6683] R13: 00007fd8af226128 R14: 00007fd8af226090 R15: 00007ffff9f63428 [ 148.692423][ T6683] [ 149.507248][ T6681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.046412][ T6699] random: crng reseeded on system resumption [ 150.813573][ T6713] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "|W!V3HphO*{|k!\x0ds̎fw:qfDg]Yڥ&.T;kmRчI!*C81`Sf8Ԧܭ*evw\x09a!O\x1b!dYqkC,ڒ8 ޫ}\x0d^BeH{wݰY}֎o\x22蹪%'o3BH+-4B XpufۖL8k&(id$#*ۘ+oQG-#n\x09/(gJ'g3fz\x07/\x0b!vȴ_\x0cwM=(\x07e&9x(Sj\x0c7Ej FHXJy0\x5c6c:I?o;usݴ]p ͸7f0{Vo v=0o#ySd*0eN/q)چaF:IW\x09 9\x07yw˘S)>l P)0e,~ҬRp}57DQ6!8(*u>p_\x5cGBnĆ4oRY]0dgx1{3\x5cwvbo( $%Vx%*MTBC?/S`apȞUca=n\x0bh~-ٖ1R|>&<\x09A>~F\x09>ژU'BNyg A@hrH({':5$Oվ61DKdx{91/=>\x1b\x5c'jYb ;YŨ\x07$mU[.汑)EϫƧY1M‘H)$n0K{\x5c%B [ 151.311364][ T5643] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 152.095091][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.407143][ T6746] FAULT_INJECTION: forcing a failure. [ 152.407143][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 152.459816][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.2.177 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.459862][ T6746] Tainted: [L]=SOFTLOCKUP [ 152.459873][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.459889][ T6746] Call Trace: [ 152.459898][ T6746] [ 152.459909][ T6746] dump_stack_lvl+0x100/0x190 [ 152.459955][ T6746] should_fail_ex.cold+0x5/0xa [ 152.459989][ T6746] should_failslab+0xc2/0x120 [ 152.460027][ T6746] __kmalloc_noprof+0xfc/0x820 [ 152.460058][ T6746] ? constrain_params_by_rules+0x175/0xd20 [ 152.460105][ T6746] constrain_params_by_rules+0x175/0xd20 [ 152.460128][ T6746] ? kfree+0x22b/0x6c0 [ 152.460153][ T6746] ? constrain_params_by_rules+0xa88/0xd20 [ 152.460177][ T6746] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 152.460202][ T6746] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 152.460221][ T6746] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 152.460242][ T6746] ? __x64_sys_ioctl+0x18e/0x210 [ 152.460259][ T6746] ? do_syscall_64+0x115/0x840 [ 152.460280][ T6746] ? snd_interval_refine+0x2d0/0x580 [ 152.460299][ T6746] snd_pcm_hw_refine+0x82a/0xb40 [ 152.460323][ T6746] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 152.460342][ T6746] ? snd_pcm_hw_refine+0x35c/0xb40 [ 152.460365][ T6746] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 152.460389][ T6746] ? __kasan_kmalloc+0xaa/0xb0 [ 152.460408][ T6746] snd_pcm_hw_param_first+0x2b0/0x680 [ 152.460436][ T6746] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 152.460461][ T6746] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 152.460483][ T6746] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 152.460505][ T6746] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 152.460535][ T6746] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 152.460592][ T6746] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 152.460618][ T6746] ? __pfx___mutex_lock+0x10/0x10 [ 152.460631][ T6746] ? find_held_lock+0x2b/0x80 [ 152.460649][ T6746] ? tomoyo_path_number_perm+0x28f/0x580 [ 152.460679][ T6746] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 152.460705][ T6746] snd_pcm_oss_get_formats+0x7d/0x350 [ 152.460727][ T6746] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 152.460754][ T6746] snd_pcm_oss_ioctl+0x1870/0x3790 [ 152.460775][ T6746] ? find_held_lock+0x2b/0x80 [ 152.460791][ T6746] ? __fget_files+0x215/0x3d0 [ 152.460811][ T6746] ? hook_file_ioctl_common+0x140/0x440 [ 152.460828][ T6746] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 152.460851][ T6746] ? __fget_files+0x21f/0x3d0 [ 152.460874][ T6746] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 152.460897][ T6746] __x64_sys_ioctl+0x18e/0x210 [ 152.460927][ T6746] do_syscall_64+0x115/0x840 [ 152.460941][ T6746] ? clear_bhb_loop+0x40/0x90 [ 152.460960][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.460976][ T6746] RIP: 0033:0x7fec60d9de59 [ 152.460989][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.461003][ T6746] RSP: 002b:00007fec61c09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.461018][ T6746] RAX: ffffffffffffffda RBX: 00007fec61026090 RCX: 00007fec60d9de59 [ 152.461027][ T6746] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 152.461036][ T6746] RBP: 00007fec60e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 152.461045][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.461054][ T6746] R13: 00007fec61026128 R14: 00007fec61026090 R15: 00007ffe540f38b8 [ 152.461074][ T6746] [ 155.304889][ T6773] random: crng reseeded on system resumption [ 156.924200][ T6793] random: crng reseeded on system resumption [ 157.780048][ T6815] FAULT_INJECTION: forcing a failure. [ 157.780048][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 157.827276][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.0.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.827309][ T6815] Tainted: [L]=SOFTLOCKUP [ 157.827315][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.827324][ T6815] Call Trace: [ 157.827330][ T6815] [ 157.827336][ T6815] dump_stack_lvl+0x100/0x190 [ 157.827358][ T6815] should_fail_ex.cold+0x5/0xa [ 157.827376][ T6815] should_failslab+0xc2/0x120 [ 157.827395][ T6815] __kmalloc_noprof+0xfc/0x820 [ 157.827413][ T6815] ? constrain_params_by_rules+0x175/0xd20 [ 157.827441][ T6815] constrain_params_by_rules+0x175/0xd20 [ 157.827461][ T6815] ? kfree+0x22b/0x6c0 [ 157.827485][ T6815] ? constrain_params_by_rules+0xa88/0xd20 [ 157.827507][ T6815] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 157.827532][ T6815] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 157.827552][ T6815] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 157.827572][ T6815] ? __x64_sys_ioctl+0x18e/0x210 [ 157.827589][ T6815] ? do_syscall_64+0x115/0x840 [ 157.827616][ T6815] ? snd_interval_refine+0x2d0/0x580 [ 157.827636][ T6815] snd_pcm_hw_refine+0x82a/0xb40 [ 157.827660][ T6815] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 157.827680][ T6815] ? snd_pcm_hw_refine+0x35c/0xb40 [ 157.827704][ T6815] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 157.827728][ T6815] ? __kasan_kmalloc+0xaa/0xb0 [ 157.827747][ T6815] snd_pcm_hw_param_first+0x2b0/0x680 [ 157.827773][ T6815] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 157.827797][ T6815] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 157.827820][ T6815] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 157.827841][ T6815] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 157.827868][ T6815] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 157.827898][ T6815] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 157.827920][ T6815] ? __pfx___mutex_lock+0x10/0x10 [ 157.827933][ T6815] ? find_held_lock+0x2b/0x80 [ 157.827949][ T6815] ? tomoyo_path_number_perm+0x28f/0x580 [ 157.827979][ T6815] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 157.828004][ T6815] snd_pcm_oss_get_formats+0x7d/0x350 [ 157.828025][ T6815] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 157.828052][ T6815] snd_pcm_oss_ioctl+0x1870/0x3790 [ 157.828074][ T6815] ? find_held_lock+0x2b/0x80 [ 157.828090][ T6815] ? __fget_files+0x215/0x3d0 [ 157.828118][ T6815] ? hook_file_ioctl_common+0x140/0x440 [ 157.828136][ T6815] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 157.828160][ T6815] ? __fget_files+0x21f/0x3d0 [ 157.828185][ T6815] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 157.828208][ T6815] __x64_sys_ioctl+0x18e/0x210 [ 157.828228][ T6815] do_syscall_64+0x115/0x840 [ 157.828241][ T6815] ? clear_bhb_loop+0x40/0x90 [ 157.828259][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.828274][ T6815] RIP: 0033:0x7f8a8dd9de59 [ 157.828287][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.828301][ T6815] RSP: 002b:00007f8a8bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.828316][ T6815] RAX: ffffffffffffffda RBX: 00007f8a8e026090 RCX: 00007f8a8dd9de59 [ 157.828326][ T6815] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 157.828335][ T6815] RBP: 00007f8a8de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 157.828343][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.828352][ T6815] R13: 00007f8a8e026128 R14: 00007f8a8e026090 R15: 00007ffc2477ccc8 [ 157.828373][ T6815] [ 158.303741][ T6813] syz.2.191 (6813) used greatest stack depth: 19768 bytes left [ 160.862191][ T6861] random: crng reseeded on system resumption [ 164.175758][ T5643] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 165.714044][ T6915] vhci_hcd vhci_hcd.1: invalid port number 16 [ 165.742824][ T6915] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 167.730503][ T6939] FAULT_INJECTION: forcing a failure. [ 167.730503][ T6939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.822602][ T6938] netlink: zone id is out of range [ 167.832252][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.1.211 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.832298][ T6939] Tainted: [L]=SOFTLOCKUP [ 167.832309][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.832327][ T6939] Call Trace: [ 167.832336][ T6939] [ 167.832347][ T6939] dump_stack_lvl+0x100/0x190 [ 167.832385][ T6939] should_fail_ex.cold+0x5/0xa [ 167.832418][ T6939] strncpy_from_user+0x3b/0x2d0 [ 167.832461][ T6939] do_getname+0x78/0x390 [ 167.832496][ T6939] do_sys_openat2+0xc7/0x1e0 [ 167.832530][ T6939] ? __pfx_do_sys_openat2+0x10/0x10 [ 167.832566][ T6939] ? fput+0x79/0x100 [ 167.832604][ T6939] __x64_sys_openat+0x12d/0x210 [ 167.832639][ T6939] ? __pfx___x64_sys_openat+0x10/0x10 [ 167.832687][ T6939] do_syscall_64+0x115/0x840 [ 167.832713][ T6939] ? clear_bhb_loop+0x40/0x90 [ 167.832748][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.832778][ T6939] RIP: 0033:0x7fd8aef9de59 [ 167.832802][ T6939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.832828][ T6939] RSP: 002b:00007fd8afe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.832856][ T6939] RAX: ffffffffffffffda RBX: 00007fd8af225fa0 RCX: 00007fd8aef9de59 [ 167.832875][ T6939] RDX: 00000000001e0240 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 167.832894][ T6939] RBP: 00007fd8af033e6f R08: 0000000000000000 R09: 0000000000000000 [ 167.832911][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.832927][ T6939] R13: 00007fd8af226038 R14: 00007fd8af225fa0 R15: 00007ffff9f63428 [ 167.832964][ T6939] [ 168.185421][ T6938] netlink: zone id is out of range [ 168.207135][ T6938] netlink: zone id is out of range [ 168.217328][ T6938] netlink: zone id is out of range [ 168.242077][ T6938] netlink: zone id is out of range [ 168.256374][ T6938] netlink: zone id is out of range [ 168.264105][ T6938] netlink: zone id is out of range [ 168.269567][ T6938] netlink: zone id is out of range [ 168.274743][ T6938] netlink: zone id is out of range [ 168.283919][ T6938] netlink: zone id is out of range [ 182.700589][ T7129] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.760063][ T7122] zswap: compressor 000 not available [ 187.521191][ T7153] syz.1.247 (7153) used greatest stack depth: 19504 bytes left [ 190.675298][ T7214] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 194.219428][ T7246] Process accounting resumed [ 194.435616][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444082][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 198.532786][ T7301] FAULT_INJECTION: forcing a failure. [ 198.532786][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 198.557520][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.2.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.557562][ T7301] Tainted: [L]=SOFTLOCKUP [ 198.557572][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.557598][ T7301] Call Trace: [ 198.557607][ T7301] [ 198.557616][ T7301] dump_stack_lvl+0x100/0x190 [ 198.557652][ T7301] should_fail_ex.cold+0x5/0xa [ 198.557682][ T7301] should_failslab+0xc2/0x120 [ 198.557718][ T7301] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 198.557754][ T7301] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 198.557785][ T7301] ? rcu_is_watching+0x12/0xc0 [ 198.557815][ T7301] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 198.557856][ T7301] krealloc_node_align_noprof+0x1f9/0x3e0 [ 198.557892][ T7301] snd_pcm_hw_rule_add+0x3b3/0x510 [ 198.557929][ T7301] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 198.557967][ T7301] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 198.558002][ T7301] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 198.558040][ T7301] ? mutex_init_lockdep+0xf1/0x120 [ 198.558083][ T7301] ? snd_pcm_attach_substream+0x287/0xd20 [ 198.558121][ T7301] snd_pcm_open_substream+0x942/0x1850 [ 198.558157][ T7301] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 198.558189][ T7301] ? snd_pcm_oss_open+0x5e5/0x1390 [ 198.558236][ T7301] snd_pcm_oss_open+0x735/0x1390 [ 198.558291][ T7301] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 198.558333][ T7301] ? __lock_acquire+0x49f/0x1a40 [ 198.558374][ T7301] ? __pfx_default_wake_function+0x10/0x10 [ 198.558419][ T7301] ? do_raw_spin_lock+0x128/0x260 [ 198.558449][ T7301] ? soundcore_open+0x231/0x5a0 [ 198.558488][ T7301] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 198.558531][ T7301] soundcore_open+0x2e3/0x5a0 [ 198.558569][ T7301] ? __pfx_soundcore_open+0x10/0x10 [ 198.558610][ T7301] chrdev_open+0x234/0x6a0 [ 198.558635][ T7301] ? __pfx_apparmor_file_open+0x10/0x10 [ 198.558664][ T7301] ? __pfx_chrdev_open+0x10/0x10 [ 198.558713][ T7301] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 198.558751][ T7301] do_dentry_open+0x6ab/0x14d0 [ 198.558794][ T7301] ? __pfx_chrdev_open+0x10/0x10 [ 198.558847][ T7301] vfs_open+0x82/0x3f0 [ 198.558884][ T7301] path_openat+0x2873/0x4280 [ 198.558949][ T7301] ? __pfx_path_openat+0x10/0x10 [ 198.559005][ T7301] do_file_open+0x20e/0x430 [ 198.559052][ T7301] ? __pfx_do_file_open+0x10/0x10 [ 198.559122][ T7301] ? alloc_fd+0x471/0x7a0 [ 198.559168][ T7301] ? do_getname+0x191/0x390 [ 198.559203][ T7301] do_sys_openat2+0x10f/0x1e0 [ 198.559238][ T7301] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.559275][ T7301] ? __fget_files+0x21f/0x3d0 [ 198.559324][ T7301] __x64_sys_openat+0x12d/0x210 [ 198.559359][ T7301] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.559397][ T7301] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 198.559443][ T7301] ? syscall_user_dispatch+0x76/0x130 [ 198.559476][ T7301] do_syscall_64+0x115/0x840 [ 198.559501][ T7301] ? clear_bhb_loop+0x40/0x90 [ 198.559537][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.559566][ T7301] RIP: 0033:0x7fec60d9de59 [ 198.559596][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.559623][ T7301] RSP: 002b:00007fec61c09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.559658][ T7301] RAX: ffffffffffffffda RBX: 00007fec61026090 RCX: 00007fec60d9de59 [ 198.559677][ T7301] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 198.559696][ T7301] RBP: 00007fec60e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 198.559713][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.559730][ T7301] R13: 00007fec61026128 R14: 00007fec61026090 R15: 00007ffe540f38b8 [ 198.559769][ T7301] [ 199.363978][ T7301] [U] ^R [ 201.159547][ T7299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.174006][ T7299] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.212599][ T7299] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.303534][ T7299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.325917][ T7299] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.377370][ T7299] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.394412][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.423641][ T7299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.434269][ T7299] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.453409][ T7299] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.493375][ T7299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.516765][ T7299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.545637][ T7299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.381058][ T7346] futex_wake_op: syz.0.285 tries to shift op by -2048; fix this program [ 202.405523][ T7346] futex_wake_op: syz.0.285 tries to shift op by -2048; fix this program [ 202.428208][ T7346] 0x000000000001-0x000000020000 : "" [ 202.448104][ T7346] ftl_cs: FTL header corrupt! [ 203.314754][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 203.475084][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.484827][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 203.554899][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 204.988251][ T7367] vivid-007: ================= START STATUS ================= [ 205.008081][ T7367] vivid-007: Generate PTS: true [ 205.024026][ T7367] vivid-007: Generate SCR: true [ 205.034680][ T7367] tpg source WxH: 320x240 (Y'CbCr) [ 205.046872][ T7367] tpg field: 1 [ 205.055584][ T7367] tpg crop: (0,0)/320x240 [ 205.066758][ T7367] tpg compose: (0,0)/320x240 [ 205.071497][ T7367] tpg colorspace: 8 [ 205.075391][ T7367] tpg transfer function: 0/0 [ 205.084819][ T7367] tpg Y'CbCr encoding: 0/0 [ 205.090112][ T7367] tpg quantization: 0/0 [ 205.094364][ T7367] tpg RGB range: 0/2 [ 205.098697][ T7367] vivid-007: ================== END STATUS ================== [ 205.395886][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 205.556287][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 205.556599][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.636024][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 206.070052][ T7377] random: crng reseeded on system resumption [ 206.774832][ T7396] FAULT_INJECTION: forcing a failure. [ 206.774832][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 206.843966][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.844013][ T7396] Tainted: [L]=SOFTLOCKUP [ 206.844023][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.844039][ T7396] Call Trace: [ 206.844049][ T7396] [ 206.844059][ T7396] dump_stack_lvl+0x100/0x190 [ 206.844094][ T7396] should_fail_ex.cold+0x5/0xa [ 206.844126][ T7396] should_failslab+0xc2/0x120 [ 206.844162][ T7396] __kmalloc_noprof+0xfc/0x820 [ 206.844193][ T7396] ? tomoyo_profile+0x47/0x60 [ 206.844233][ T7396] ? tomoyo_supervisor+0x65d/0x1340 [ 206.844282][ T7396] tomoyo_supervisor+0x65d/0x1340 [ 206.844331][ T7396] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 206.844401][ T7396] ? tomoyo_check_path_acl+0x141/0x210 [ 206.844435][ T7396] ? tomoyo_check_acl+0x1f7/0x410 [ 206.844494][ T7396] tomoyo_path_permission+0x270/0x3b0 [ 206.844529][ T7396] tomoyo_check_open_permission+0x34d/0x3c0 [ 206.844563][ T7396] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 206.844608][ T7396] ? hook_file_open+0x24f/0x8f0 [ 206.844667][ T7396] ? path_get+0x61/0x80 [ 206.844699][ T7396] tomoyo_file_open+0x6b/0x90 [ 206.844743][ T7396] security_file_open+0xb5/0x1e0 [ 206.844779][ T7396] do_dentry_open+0x588/0x14d0 [ 206.844833][ T7396] vfs_open+0x82/0x3f0 [ 206.844870][ T7396] path_openat+0x2873/0x4280 [ 206.844929][ T7396] ? __pfx_path_openat+0x10/0x10 [ 206.844983][ T7396] do_file_open+0x20e/0x430 [ 206.845030][ T7396] ? __pfx_do_file_open+0x10/0x10 [ 206.845101][ T7396] ? alloc_fd+0x471/0x7a0 [ 206.845147][ T7396] ? do_getname+0x191/0x390 [ 206.845182][ T7396] do_sys_openat2+0x10f/0x1e0 [ 206.845217][ T7396] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.845254][ T7396] ? __fget_files+0x21f/0x3d0 [ 206.845303][ T7396] __x64_sys_openat+0x12d/0x210 [ 206.845338][ T7396] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.845387][ T7396] do_syscall_64+0x115/0x840 [ 206.845413][ T7396] ? clear_bhb_loop+0x40/0x90 [ 206.845452][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.845482][ T7396] RIP: 0033:0x7f8a8dd9de59 [ 206.845506][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.845533][ T7396] RSP: 002b:00007f8a8bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.845560][ T7396] RAX: ffffffffffffffda RBX: 00007f8a8e026090 RCX: 00007f8a8dd9de59 [ 206.845579][ T7396] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 206.845597][ T7396] RBP: 00007f8a8de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 206.845614][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.845631][ T7396] R13: 00007f8a8e026128 R14: 00007f8a8e026090 R15: 00007ffc2477ccc8 [ 206.845668][ T7396] [ 207.477038][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 207.636974][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 207.717096][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 208.023098][ T7416] futex_wake_op: syz.3.298 tries to shift op by -2048; fix this program [ 208.056471][ T7416] futex_wake_op: syz.3.298 tries to shift op by -2048; fix this program [ 208.104899][ T7416] 0x000000000001-0x000000020000 : "" [ 208.169746][ T7416] ftl_cs: FTL header corrupt! [ 209.558105][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.566287][ T7404] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 210.696186][ T7404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.702497][ T7404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.709535][ T7404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.651646][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 212.319716][ T7427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.327213][ T7427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.346434][ T7427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.356475][ T7427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.163418][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.361940][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 214.361944][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 214.371032][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 215.325265][ T7468] random: crng reseeded on system resumption [ 215.563695][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 215.571427][ T50] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 216.912860][ T7491] futex_wake_op: syz.2.312 tries to shift op by -2048; fix this program [ 216.944985][ T7491] futex_wake_op: syz.2.312 tries to shift op by -2048; fix this program [ 216.973141][ T7491] 0x000000000001-0x000000020000 : "" [ 217.069810][ T7491] ftl_cs: FTL header corrupt! [ 219.947992][ T7520] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 221.875866][ T7526] Process accounting resumed [ 222.063178][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 222.072100][ T50] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 223.391780][ T7560] ubi0: attaching mtd0 [ 223.409673][ T7560] ubi0: scanning is finished [ 223.414281][ T7560] ubi0: empty MTD device detected [ 223.866526][ T7560] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 223.883329][ T7560] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 223.890766][ T7560] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 223.910477][ T7560] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 224.151285][ T7560] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 224.357320][ T7560] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 224.385978][ T7560] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4115510982 [ 224.405851][ T7560] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 224.429568][ T7569] ubi0: background thread "ubi_bgt0d" started, PID 7569 [ 224.456906][ T7563] ubi0: detaching mtd0 [ 224.571440][ T7563] ubi0: mtd0 is detached [ 225.676548][ T7567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.696692][ T7567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.712442][ T7574] Process accounting paused [ 225.731344][ T7567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.785216][ T7567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.886100][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.623219][ T7603] Process accounting resumed [ 227.727148][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 227.807121][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 227.813199][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 228.280697][ T7589] kexec: Could not allocate control_code_buffer [ 229.025097][ T5644] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 229.032680][ T5644] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 230.916660][ T7636] kexec: Could not allocate control_code_buffer [ 231.065280][ T7650] ubi0: attaching mtd0 [ 231.085552][ T7650] ubi0: scanning is finished [ 231.277133][ T7650] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 231.296505][ T7650] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 231.318023][ T7650] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 231.327712][ T7650] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 231.349880][ T7650] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 231.387375][ T7650] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 231.436338][ T7650] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4115510982 [ 231.489721][ T7650] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 231.530580][ T7657] ubi0: detaching mtd0 [ 231.536415][ T7659] ubi0: background thread "ubi_bgt0d" started, PID 7659 [ 231.612648][ T7657] ubi0: mtd0 is detached [ 234.010684][ T5644] Bluetooth: hci3: unexpected event 0x05 length: 8 > 4 [ 236.172399][ T7690] Process accounting resumed [ 237.981562][ T7695] kexec: Could not allocate control_code_buffer [ 240.231662][ T7748] NFSD: Failed to start, no listeners configured. [ 240.909809][ T7750] NFSD: Failed to start, no listeners configured. [ 241.710888][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.363'. [ 241.739493][ T5644] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 241.743081][ T7762] veth1_macvtap: left promiscuous mode [ 241.790956][ T7762] macsec0: entered promiscuous mode [ 241.832972][ T7762] macsec0: entered allmulticast mode [ 242.115826][ T7773] ubi0: attaching mtd0 [ 242.199934][ T7773] ubi0: scanning is finished [ 242.299847][ T7781] nbd: must specify at least one socket [ 242.582043][ T7773] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 242.599538][ T7773] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 242.610207][ T7773] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 242.626478][ T7773] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 242.635420][ T7773] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 242.660546][ T7773] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 242.677927][ T7773] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4115510982 [ 242.708478][ T7755] Process accounting resumed [ 242.724442][ T7773] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 242.775368][ T7780] ubi0: detaching mtd0 [ 242.780176][ T7786] ubi0: background thread "ubi_bgt0d" started, PID 7786 [ 242.894332][ T7780] ubi0: mtd0 is detached [ 245.393872][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 246.583622][ T7823] random: crng reseeded on system resumption [ 246.654963][ T7827] NFSD: Failed to start, no listeners configured. [ 247.099321][ T7828] NFSD: Failed to start, no listeners configured. [ 247.581878][ T7835] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 248.031001][ T7840] random: crng reseeded on system resumption [ 248.433677][ T7845] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 248.501175][ T7845] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.514745][ T7840] hub 1-0:1.0: USB hub found [ 248.567373][ T7845] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.583199][ T7840] hub 1-0:1.0: 1 port detected [ 248.675336][ T7845] page_type: f5(slab) [ 248.703221][ T7845] raw: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 248.774297][ T7845] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 248.882990][ T7845] head: 00fff00000000040 ffff88813fe1f140 dead000000000100 dead000000000122 [ 248.972426][ T7845] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 249.092982][ T7845] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 249.186392][ T7845] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 249.220202][ T7845] page dumped because: unmovable page [ 249.233384][ T7845] page_owner tracks the page as allocated [ 249.257209][ T7845] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5924, tgid 5922 (syz.3.26), ts 94712234760, free_ts 94664181729 [ 249.347569][ T7845] post_alloc_hook+0xfd/0x120 [ 249.395623][ T7845] get_page_from_freelist+0xf48/0x3530 [ 249.432079][ T7845] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 249.456883][ T7845] new_slab+0xa2/0x650 [ 249.481132][ T7845] refill_objects+0xe3/0x410 [ 249.512863][ T7845] __pcs_replace_empty_main+0x376/0x680 [ 249.553452][ T7845] __kmalloc_noprof+0x66d/0x820 [ 249.573429][ T7845] tomoyo_realpath_from_path+0xb6/0x690 [ 249.579758][ T7845] tomoyo_path_number_perm+0x23c/0x580 [ 249.585392][ T7845] security_file_ioctl+0xd3/0x230 [ 249.595549][ T7845] __x64_sys_ioctl+0xb7/0x210 [ 249.614474][ T7845] do_syscall_64+0x115/0x840 [ 249.619705][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.645426][ T7845] page last free pid 5934 tgid 5933 stack trace: [ 249.666734][ T7845] __free_frozen_pages+0x79f/0x1090 [ 249.677947][ T7845] qlist_free_all+0x47/0xf0 [ 249.693859][ T7845] kasan_quarantine_reduce+0x1a0/0x1f0 [ 249.709840][ T7845] __kasan_slab_alloc+0x69/0x90 [ 249.724900][ T7845] kmem_cache_alloc_lru_noprof+0x267/0x6a0 [ 249.747299][ T7845] sock_alloc_inode+0x26/0x2c0 [ 249.761000][ T7845] alloc_inode+0x68/0x250 [ 249.777946][ T7845] sock_alloc+0x44/0x280 [ 249.790293][ T7845] __sock_create+0xc2/0x860 [ 249.806720][ T7845] __sys_socket+0x14d/0x260 [ 249.812757][ T7845] __x64_sys_socket+0x72/0xb0 [ 249.824472][ T7845] do_syscall_64+0x115/0x840 [ 249.836516][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.101327][ T7912] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by "b9a3w3!Tv\x0bkJN$'\x5cLX\x5cS;ʀPb-|\x0c=yg$m AǵYϰp%\x07(|aj\x1bcn{sX䧠,^\x07N^GgCDɈ`cXk0Eĵϕ@\x5c_T`m$ ƍ\x0a\x07 k>ceeq\x22:{:4rV9w5]\x1bdW%EPJb6wG|G@*|;+m-o]:8C@ &\x0a+t\x0d#Dh*SpaÕyI!M ibjOK C59R[6hf\x1b#wMJW{Q*HdM\x1b\x0d[_`Ez7jS;74:'x̭+V\x0aW<\x0bʚ>\x0bt\x0c4\x1bo3!o;VceK'Uh%,}㞹Z!WRj[(pkVȁq!:xڈC:5]ڣ;3\x5cd\x0d\x0bGQ_+7If}_*a5֐gApct=MaXS\x0aHjޙ6%\x22=5|g2[*\x5ctk8Rጭ(\x0c0Ŗ&s# [ 255.907770][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008570][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.176419][ T7887] Process accounting paused [ 257.717595][ T7948] netlink: 342 bytes leftover after parsing attributes in process `syz.0.394'. [ 257.806964][ T7949] FAULT_INJECTION: forcing a failure. [ 257.806964][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 257.956801][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.0.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.956848][ T7949] Tainted: [L]=SOFTLOCKUP [ 257.956857][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.956873][ T7949] Call Trace: [ 257.956882][ T7949] [ 257.956892][ T7949] dump_stack_lvl+0x100/0x190 [ 257.956930][ T7949] should_fail_ex.cold+0x5/0xa [ 257.956963][ T7949] should_failslab+0xc2/0x120 [ 257.957002][ T7949] __kmalloc_cache_noprof+0x91/0x6c0 [ 257.957046][ T7949] ? __pfx___debug_object_init+0x10/0x10 [ 257.957085][ T7949] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 257.957133][ T7949] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 257.957177][ T7949] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 257.957221][ T7949] vidtv_mux_init+0x7a9/0xbf0 [ 257.957262][ T7949] vidtv_start_feed+0x34e/0x500 [ 257.957308][ T7949] ? __pfx_vidtv_start_feed+0x10/0x10 [ 257.957356][ T7949] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 257.957422][ T7949] dmx_section_feed_start_filtering+0x3a8/0x660 [ 257.957483][ T7949] dvb_dmxdev_filter_start+0x767/0xdd0 [ 257.957539][ T7949] dvb_demux_do_ioctl+0xe64/0x1200 [ 257.957603][ T7949] dvb_usercopy+0x167/0x340 [ 257.957641][ T7949] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 257.957685][ T7949] ? __pfx_dvb_usercopy+0x10/0x10 [ 257.957738][ T7949] ? __fget_files+0x21f/0x3d0 [ 257.957789][ T7949] dvb_demux_ioctl+0x29/0x40 [ 257.957825][ T7949] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 257.957863][ T7949] __x64_sys_ioctl+0x18e/0x210 [ 257.957903][ T7949] do_syscall_64+0x115/0x840 [ 257.957928][ T7949] ? clear_bhb_loop+0x40/0x90 [ 257.957964][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.957994][ T7949] RIP: 0033:0x7f8a8dd9de59 [ 257.958018][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.958044][ T7949] RSP: 002b:00007f8a8bfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.958071][ T7949] RAX: ffffffffffffffda RBX: 00007f8a8e026180 RCX: 00007f8a8dd9de59 [ 257.958090][ T7949] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 257.958107][ T7949] RBP: 00007f8a8de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.958124][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.958138][ T7949] R13: 00007f8a8e026218 R14: 00007f8a8e026180 R15: 00007ffc2477ccc8 [ 257.958176][ T7949] [ 259.547627][ T7960] FAULT_INJECTION: forcing a failure. [ 259.547627][ T7960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.597120][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.3.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.597146][ T7960] Tainted: [L]=SOFTLOCKUP [ 259.597152][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.597161][ T7960] Call Trace: [ 259.597166][ T7960] [ 259.597172][ T7960] dump_stack_lvl+0x100/0x190 [ 259.597194][ T7960] should_fail_ex.cold+0x5/0xa [ 259.597209][ T7960] ? fs_reclaim_acquire+0x70/0x100 [ 259.597230][ T7960] should_fail_alloc_page+0xeb/0x140 [ 259.597250][ T7960] prepare_alloc_pages+0x1f0/0x5f0 [ 259.597272][ T7960] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 259.597291][ T7960] ? stack_depot_save_flags+0x479/0x9d0 [ 259.597315][ T7960] ? kasan_save_stack+0x3f/0x50 [ 259.597331][ T7960] ? kasan_save_stack+0x30/0x50 [ 259.597346][ T7960] ? kasan_save_track+0x14/0x30 [ 259.597361][ T7960] ? __kasan_kmalloc+0xaa/0xb0 [ 259.597376][ T7960] ? __kvmalloc_node_noprof+0x34f/0x970 [ 259.597392][ T7960] ? relay_open_buf.part.0+0x199/0xb70 [ 259.597410][ T7960] ? relay_open+0x7b9/0xa00 [ 259.597424][ T7960] ? blk_trace_setup_prepare+0x35c/0x6c0 [ 259.597439][ T7960] ? blk_trace_setup+0x217/0x440 [ 259.597454][ T7960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.597469][ T7960] ? do_syscall_64+0x115/0x840 [ 259.597503][ T7960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.597524][ T7960] ? policy_nodemask+0xed/0x4f0 [ 259.597545][ T7960] alloc_pages_mpol+0x1fb/0x540 [ 259.597565][ T7960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 259.597590][ T7960] alloc_pages_noprof+0x1a/0x160 [ 259.597612][ T7960] relay_open_buf.part.0+0x261/0xb70 [ 259.597635][ T7960] relay_open+0x7b9/0xa00 [ 259.597654][ T7960] blk_trace_setup_prepare+0x35c/0x6c0 [ 259.597673][ T7960] blk_trace_setup+0x217/0x440 [ 259.597692][ T7960] ? __pfx_blk_trace_setup+0x10/0x10 [ 259.597707][ T7960] ? lockdep_hardirqs_on+0x16/0x100 [ 259.597734][ T7960] ? __pfx_vsnprintf+0x10/0x10 [ 259.597767][ T7960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.597787][ T7960] ? do_vfs_ioctl+0x226/0x13e0 [ 259.597816][ T7960] blk_trace_ioctl+0x245/0x320 [ 259.597835][ T7960] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 259.597856][ T7960] ? find_held_lock+0x2b/0x80 [ 259.597873][ T7960] ? __fget_files+0x215/0x3d0 [ 259.597893][ T7960] ? hook_file_ioctl_common+0x140/0x440 [ 259.597912][ T7960] blkdev_ioctl+0x17c/0x6f0 [ 259.597933][ T7960] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.597957][ T7960] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.597978][ T7960] __x64_sys_ioctl+0x18e/0x210 [ 259.597999][ T7960] do_syscall_64+0x115/0x840 [ 259.598011][ T7960] ? clear_bhb_loop+0x40/0x90 [ 259.598029][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.598045][ T7960] RIP: 0033:0x7f6b04b9de59 [ 259.598058][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.598071][ T7960] RSP: 002b:00007f6b05a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.598086][ T7960] RAX: ffffffffffffffda RBX: 00007f6b04e26090 RCX: 00007f6b04b9de59 [ 259.598095][ T7960] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 259.598104][ T7960] RBP: 00007f6b04c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 259.598113][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.598122][ T7960] R13: 00007f6b04e26128 R14: 00007f6b04e26090 R15: 00007ffc1396f7a8 [ 259.598142][ T7960] [ 260.548292][ T7963] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 260.568493][ T7963] netlink: 9 bytes leftover after parsing attributes in process `syz.0.397'. [ 261.058556][ T5644] Bluetooth: hci1: Unable to find connection for big 0xe0 [ 261.186976][ T7974] random: crng reseeded on system resumption [ 263.087981][ T7936] Process accounting paused [ 264.091544][ T8016] FAULT_INJECTION: forcing a failure. [ 264.091544][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 264.144371][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.3.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.144417][ T8016] Tainted: [L]=SOFTLOCKUP [ 264.144426][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.144441][ T8016] Call Trace: [ 264.144450][ T8016] [ 264.144461][ T8016] dump_stack_lvl+0x100/0x190 [ 264.144495][ T8016] should_fail_ex.cold+0x5/0xa [ 264.144513][ T8016] should_failslab+0xc2/0x120 [ 264.144534][ T8016] __kmalloc_cache_noprof+0x91/0x6c0 [ 264.144559][ T8016] ? ima_add_digest_entry+0x53/0x5b0 [ 264.144585][ T8016] ima_add_digest_entry+0x53/0x5b0 [ 264.144610][ T8016] ima_add_template_entry+0x45e/0x8b0 [ 264.144638][ T8016] ? __pfx_ima_add_template_entry+0x10/0x10 [ 264.144664][ T8016] ? ima_calc_field_array_hash+0x378/0x440 [ 264.144685][ T8016] ima_store_template+0xda/0x150 [ 264.144704][ T8016] ima_store_measurement+0x21c/0x5b0 [ 264.144722][ T8016] ? __pfx_ima_store_measurement+0x10/0x10 [ 264.144747][ T8016] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 264.144773][ T8016] process_measurement+0x19cc/0x2350 [ 264.144796][ T8016] ? __pfx_process_measurement+0x10/0x10 [ 264.144836][ T8016] ? __pfx_aa_file_perm+0x10/0x10 [ 264.144864][ T8016] ima_file_mmap+0x1c4/0x1f0 [ 264.144880][ T8016] ? __pfx_ima_file_mmap+0x10/0x10 [ 264.144904][ T8016] security_mmap_file+0x278/0x9b0 [ 264.144924][ T8016] __do_sys_remap_file_pages+0x2da/0xa10 [ 264.144949][ T8016] ? find_held_lock+0x2b/0x80 [ 264.144968][ T8016] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 264.144987][ T8016] ? __x64_sys_futex+0x34f/0x4d0 [ 264.145002][ T8016] ? __x64_sys_futex+0x358/0x4d0 [ 264.145020][ T8016] ? xfd_validate_state+0x129/0x190 [ 264.145058][ T8016] do_syscall_64+0x115/0x840 [ 264.145082][ T8016] ? clear_bhb_loop+0x40/0x90 [ 264.145116][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.145142][ T8016] RIP: 0033:0x7f6b04b9de59 [ 264.145164][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.145191][ T8016] RSP: 002b:00007f6b05a56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 264.145217][ T8016] RAX: ffffffffffffffda RBX: 00007f6b04e26090 RCX: 00007f6b04b9de59 [ 264.145236][ T8016] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 264.145252][ T8016] RBP: 00007f6b04c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 264.145267][ T8016] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 264.145282][ T8016] R13: 00007f6b04e26128 R14: 00007f6b04e26090 R15: 00007ffc1396f7a8 [ 264.145319][ T8016] [ 264.592908][ T8016] ima: OUT OF MEMORY ERROR creating queue entry [ 264.643018][ T29] audit: type=1804 audit(1784030121.938:7): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.409" name="dev/zero" dev="tmpfs" ino=1305 res=0 errno=0 [ 264.754131][ T8020] netlink: 342 bytes leftover after parsing attributes in process `syz.1.410'. [ 267.513317][ T8039] Process accounting paused [ 268.048780][ T8064] netlink: 222 bytes leftover after parsing attributes in process `syz.0.418'. [ 268.184850][ T8045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.207030][ T8045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.229610][ T8045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.261347][ T8045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.388438][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.204812][ T8073] netlink: 350 bytes leftover after parsing attributes in process `syz.3.421'. [ 270.239101][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 270.308464][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 270.314601][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.974879][ T8091] Process accounting paused [ 275.606671][ T8139] Process accounting resumed [ 276.935520][ T8164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.558817][ T8176] ubi0: attaching mtd0 [ 277.568492][ T8176] ubi0: scanning is finished [ 277.608095][ T8164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.815750][ T8176] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 277.837542][ T8176] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 277.871773][ T8176] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 277.889156][ T8176] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 277.911076][ T8176] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 277.927284][ T8164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.970716][ T8176] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 278.002090][ T8176] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4115510982 [ 278.024898][ T8176] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 278.072349][ T8177] ubi0: detaching mtd0 [ 278.076519][ T8179] ubi0: background thread "ubi_bgt0d" started, PID 8179 [ 278.158406][ T8177] ubi0: mtd0 is detached [ 278.344576][ T8164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.496968][ T31] oom_reaper: reaped process 8084 (syz.2.422), now anon-rss:0kB, file-rss:21932kB, shmem-rss:0kB [ 281.616471][ T8194] kexec: Could not allocate control_code_buffer [ 282.683114][ T5644] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 283.454545][ T8236] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.452'. [ 284.503244][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 291.542257][ T5644] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 291.983336][ T8334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 294.783277][ T8340] Process accounting resumed [ 296.359418][ T8375] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.475'. [ 297.031401][ T8384] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 297.471024][ T8386] FAULT_INJECTION: forcing a failure. [ 297.471024][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 297.558884][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.1.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.558928][ T8386] Tainted: [L]=SOFTLOCKUP [ 297.558938][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.558965][ T8386] Call Trace: [ 297.558972][ T8386] [ 297.558978][ T8386] dump_stack_lvl+0x100/0x190 [ 297.559000][ T8386] should_fail_ex.cold+0x5/0xa [ 297.559017][ T8386] should_failslab+0xc2/0x120 [ 297.559037][ T8386] __kmalloc_noprof+0xfc/0x820 [ 297.559055][ T8386] ? tracepoint_add_func+0x3a8/0x1150 [ 297.559082][ T8386] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 297.559100][ T8386] tracepoint_add_func+0x3a8/0x1150 [ 297.559118][ T8386] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 297.559140][ T8386] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 297.559158][ T8386] tracepoint_probe_register+0xc4/0x110 [ 297.559179][ T8386] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 297.559199][ T8386] ? __pfx_blk_add_trace_zone_unplug+0x10/0x10 [ 297.559218][ T8386] ? relay_open+0x793/0xa00 [ 297.559237][ T8386] blk_register_tracepoints+0x237/0x440 [ 297.559260][ T8386] blk_trace_setup_finalize+0x320/0x3a0 [ 297.559277][ T8386] blk_trace_setup+0x254/0x440 [ 297.559300][ T8386] ? __pfx_blk_trace_setup+0x10/0x10 [ 297.559315][ T8386] ? lockdep_hardirqs_on+0x16/0x100 [ 297.559342][ T8386] ? __pfx_vsnprintf+0x10/0x10 [ 297.559375][ T8386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.559395][ T8386] ? do_vfs_ioctl+0x226/0x13e0 [ 297.559417][ T8386] blk_trace_ioctl+0x245/0x320 [ 297.559434][ T8386] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 297.559454][ T8386] ? find_held_lock+0x2b/0x80 [ 297.559471][ T8386] ? __fget_files+0x215/0x3d0 [ 297.559491][ T8386] ? hook_file_ioctl_common+0x140/0x440 [ 297.559510][ T8386] blkdev_ioctl+0x17c/0x6f0 [ 297.559531][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 297.559555][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 297.559576][ T8386] __x64_sys_ioctl+0x18e/0x210 [ 297.559596][ T8386] do_syscall_64+0x115/0x840 [ 297.559609][ T8386] ? clear_bhb_loop+0x40/0x90 [ 297.559627][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.559642][ T8386] RIP: 0033:0x7fd8aef9de59 [ 297.559655][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.559669][ T8386] RSP: 002b:00007fd8afe7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.559683][ T8386] RAX: ffffffffffffffda RBX: 00007fd8af226090 RCX: 00007fd8aef9de59 [ 297.559694][ T8386] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 297.559704][ T8386] RBP: 00007fd8af033e6f R08: 0000000000000000 R09: 0000000000000000 [ 297.559713][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.559721][ T8386] R13: 00007fd8af226128 R14: 00007fd8af226090 R15: 00007ffff9f63428 [ 297.559742][ T8386] [ 297.559880][ T8386] ------------[ cut here ]------------ [ 297.846745][ T8386] ret [ 297.846756][ T8386] WARNING: kernel/trace/blktrace.c:1359 at blk_register_tracepoints+0x3e4/0x440, CPU#0: syz.1.477/8386 [ 297.860427][ T8386] Modules linked in: [ 297.865751][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.1.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.876560][ T8386] Tainted: [L]=SOFTLOCKUP [ 297.880934][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.891005][ T8386] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 297.897404][ T8386] Code: 0f 0b 90 e9 01 fe ff ff e8 a9 8e f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 9b 8e f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 8d 8e f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 7f 8e f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 297.917193][ T8386] RSP: 0018:ffffc9000344faf8 EFLAGS: 00010283 [ 297.923599][ T8386] RAX: 000000000006cf29 RBX: 00000000fffffff4 RCX: ffffc9000ef02000 [ 297.931619][ T8386] RDX: 0000000000080000 RSI: ffffffff82119a33 RDI: ffff88802ef65d00 [ 297.939753][ T8386] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 297.947771][ T8386] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 297.955763][ T8386] R13: ffff8880272e2540 R14: ffffc9000344fd98 R15: 0000000000000001 [ 297.963777][ T8386] FS: 00007fd8afe7b6c0(0000) GS:ffff888123df1000(0000) knlGS:0000000000000000 [ 297.972742][ T8386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.979328][ T8386] CR2: 0000001b349bfff8 CR3: 000000007454e000 CR4: 00000000003526f0 [ 297.987351][ T8386] Call Trace: [ 297.990675][ T8386] [ 297.993638][ T8386] blk_trace_setup_finalize+0x320/0x3a0 [ 297.999193][ T8386] blk_trace_setup+0x254/0x440 [ 298.004314][ T8386] ? __pfx_blk_trace_setup+0x10/0x10 [ 298.009634][ T8386] ? lockdep_hardirqs_on+0x16/0x100 [ 298.014972][ T8386] ? __pfx_vsnprintf+0x10/0x10 [ 298.019756][ T8386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.025720][ T8386] ? do_vfs_ioctl+0x226/0x13e0 [ 298.030515][ T8386] blk_trace_ioctl+0x245/0x320 [ 298.035320][ T8386] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 298.040615][ T8386] ? find_held_lock+0x2b/0x80 [ 298.045318][ T8386] ? __fget_files+0x215/0x3d0 [ 298.049998][ T8386] ? hook_file_ioctl_common+0x140/0x440 [ 298.055579][ T8386] blkdev_ioctl+0x17c/0x6f0 [ 298.060095][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.065160][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.070189][ T8386] __x64_sys_ioctl+0x18e/0x210 [ 298.074992][ T8386] do_syscall_64+0x115/0x840 [ 298.079582][ T8386] ? clear_bhb_loop+0x40/0x90 [ 298.084419][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.090314][ T8386] RIP: 0033:0x7fd8aef9de59 [ 298.094748][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.114558][ T8386] RSP: 002b:00007fd8afe7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.123133][ T8386] RAX: ffffffffffffffda RBX: 00007fd8af226090 RCX: 00007fd8aef9de59 [ 298.131103][ T8386] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 298.139113][ T8386] RBP: 00007fd8af033e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.147114][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.155116][ T8386] R13: 00007fd8af226128 R14: 00007fd8af226090 R15: 00007ffff9f63428 [ 298.163204][ T8386] [ 298.166263][ T8386] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.173565][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.1.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.184320][ T8386] Tainted: [L]=SOFTLOCKUP [ 298.188631][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.198675][ T8386] Call Trace: [ 298.201950][ T8386] [ 298.204873][ T8386] dump_stack_lvl+0x100/0x190 [ 298.209561][ T8386] vpanic+0x552/0x970 [ 298.213561][ T8386] ? __pfx_vpanic+0x10/0x10 [ 298.218063][ T8386] panic+0xd1/0xe0 [ 298.221777][ T8386] ? __pfx_panic+0x10/0x10 [ 298.226194][ T8386] check_panic_on_warn.cold+0x19/0x34 [ 298.231568][ T8386] ? blk_register_tracepoints+0x3e4/0x440 [ 298.237291][ T8386] __warn.cold+0x191/0x318 [ 298.241704][ T8386] __report_bug+0x30f/0x440 [ 298.246209][ T8386] ? blk_register_tracepoints+0x3e4/0x440 [ 298.251935][ T8386] ? __pfx___report_bug+0x10/0x10 [ 298.257001][ T8386] ? tracepoint_probe_register+0xd2/0x110 [ 298.262722][ T8386] ? __kasan_kmalloc+0x8a/0xb0 [ 298.267525][ T8386] ? __mutex_unlock_slowpath+0x35d/0x930 [ 298.273166][ T8386] ? blk_register_tracepoints+0x3e4/0x440 [ 298.278889][ T8386] report_bug+0xb2/0x220 [ 298.283136][ T8386] ? blk_register_tracepoints+0x3e4/0x440 [ 298.288857][ T8386] handle_bug+0x16a/0x2a0 [ 298.293188][ T8386] exc_invalid_op+0x17/0x50 [ 298.297686][ T8386] asm_exc_invalid_op+0x1a/0x20 [ 298.302533][ T8386] RIP: 0010:blk_register_tracepoints+0x3e4/0x440 [ 298.308863][ T8386] Code: 0f 0b 90 e9 01 fe ff ff e8 a9 8e f7 ff 90 0f 0b 90 e9 20 fe ff ff e8 9b 8e f7 ff 90 0f 0b 90 e9 3f fe ff ff e8 8d 8e f7 ff 90 <0f> 0b 90 e9 5e fe ff ff e8 7f 8e f7 ff 90 0f 0b 90 e9 7d fe ff ff [ 298.328466][ T8386] RSP: 0018:ffffc9000344faf8 EFLAGS: 00010283 [ 298.334527][ T8386] RAX: 000000000006cf29 RBX: 00000000fffffff4 RCX: ffffc9000ef02000 [ 298.342491][ T8386] RDX: 0000000000080000 RSI: ffffffff82119a33 RDI: ffff88802ef65d00 [ 298.350459][ T8386] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 298.358422][ T8386] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 298.366560][ T8386] R13: ffff8880272e2540 R14: ffffc9000344fd98 R15: 0000000000000001 [ 298.374532][ T8386] ? blk_register_tracepoints+0x3e3/0x440 [ 298.380264][ T8386] ? blk_register_tracepoints+0x3e3/0x440 [ 298.385985][ T8386] blk_trace_setup_finalize+0x320/0x3a0 [ 298.391528][ T8386] blk_trace_setup+0x254/0x440 [ 298.396287][ T8386] ? __pfx_blk_trace_setup+0x10/0x10 [ 298.401563][ T8386] ? lockdep_hardirqs_on+0x16/0x100 [ 298.406764][ T8386] ? __pfx_vsnprintf+0x10/0x10 [ 298.411541][ T8386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.417438][ T8386] ? do_vfs_ioctl+0x226/0x13e0 [ 298.422209][ T8386] blk_trace_ioctl+0x245/0x320 [ 298.426995][ T8386] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 298.432276][ T8386] ? find_held_lock+0x2b/0x80 [ 298.436949][ T8386] ? __fget_files+0x215/0x3d0 [ 298.441621][ T8386] ? hook_file_ioctl_common+0x140/0x440 [ 298.447161][ T8386] blkdev_ioctl+0x17c/0x6f0 [ 298.451666][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.456689][ T8386] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.461712][ T8386] __x64_sys_ioctl+0x18e/0x210 [ 298.466475][ T8386] do_syscall_64+0x115/0x840 [ 298.471067][ T8386] ? clear_bhb_loop+0x40/0x90 [ 298.475750][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.481640][ T8386] RIP: 0033:0x7fd8aef9de59 [ 298.486052][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.505657][ T8386] RSP: 002b:00007fd8afe7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.514065][ T8386] RAX: ffffffffffffffda RBX: 00007fd8af226090 RCX: 00007fd8aef9de59 [ 298.522031][ T8386] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 298.529997][ T8386] RBP: 00007fd8af033e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.537966][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.545934][ T8386] R13: 00007fd8af226128 R14: 00007fd8af226090 R15: 00007ffff9f63428 [ 298.553912][ T8386] [ 298.557261][ T8386] Kernel Offset: disabled [ 298.561589][ T8386] Rebooting in 86400 seconds..