last executing test programs:
6.658793834s ago: executing program 2 (id=1389):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1b0026bd2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r2, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
6.243005098s ago: executing program 3 (id=1391):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0xffffffff)
r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, 0x0, 0xc0002, 0x0)
pread64$auto(r1, 0x0, 0x1, 0xb29e)
ptrace$auto(0x10, 0x0, 0x4, 0x7ff)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x8, 0x6)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840)
syz_clone(0x22042400, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x60020000)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x0)
6.092061656s ago: executing program 3 (id=1392):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11)
r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0))
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r4 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0xc3}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x0)
write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0))
5.620959176s ago: executing program 1 (id=1393):
socket(0xa, 0x3, 0x3a)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x10, 0x2, 0x9)
socket(0x2, 0x1, 0x106)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x8001, 0x7, 0x6, 0x6]}, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda1\x00', 0x48100, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket(0xa, 0x5, 0x84)
socket(0x2, 0x2, 0x0)
socketpair$auto(0xffffffff, 0x2, 0x63, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)
5.620788815s ago: executing program 2 (id=1394):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0)
readv$auto(r3, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81)
close_range$auto(r1, 0x8, 0x8)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3000, 0x2, 0x7, 0x400a, r2, [], {0x6, 0x10006, 0x8c48, 0x429b, 0x4, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x6, 0xffffdfffffffff81, 0x4]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(0x0, r4)
syz_clone3(0x0, 0x0)
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06/file0\x00', 0xfffc)
mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xd9\xd6@\xa4y\x8a\xbb_\x1d\x92\xdc\xf1\xee\xce\xceg\xac\x04\xa3t-]*\x9b\xc6$\xb0\xf0\xe1\xb3\xc0l\xc6f\x19\xe1\\\xf7\x9d\xea\xcb\xe1\xd4\xb7\x82\xadn\xf1\xbc\xcf\xf5\xf3\x0f\xa9\x9b\x11\x9eEf\xae\xa1[\x8f\xf5\xd12O\xd1\x92&\x80\xcb\xdbT\x80\xd6a\x065]\x98\xb1\xc3\xe1\xd5\xdb\xce$\x00\x00\x00\x00\x94\xf4Oh\xbd\xd3\xa1\xd5\xf0\xad\\\xa4l\x13c\xce\xb04N)\x9841\x86\x00\x11uwN\x97\xec/\xd3\xd9\x021YQ\xf9\\\xbb\x83\xf5\xd6v\x9e|\x83~\xb8<\xc6s\xb4\xac\xdei&!|\xe61\xd3\xf2Q\xe8U8\x82e\xd5n\xa8\xf6z\x91\t\x93[\x9c/=\x8c\x81\xd2\xc9U\x8dUx[\xc5gk\x15v\xab\x85e\xf4\x9bS\xbb5\xc7>\x04\xa9\x1b\xd5\xcc\xe7`\"i\xe0\x7f\xeb?\xcb[\x10\xd8\xb6\xb6\xc7\xef\x9a\a\xe1\x1a \v\x1f\x02\x0ea7\x02\r\xd2\x88\xb4\x9c\xb2', 0x40ed0000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
5.62017389s ago: executing program 0 (id=1401):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1b0026bd2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r2, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
4.806206026s ago: executing program 3 (id=1395):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1b0026bd2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r2, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
4.758808819s ago: executing program 0 (id=1396):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = setfsuid$auto(0xee00)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setresuid$auto(r1, 0x0, 0x0)
pidfd_open$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
epoll_create$auto(0x20009)
epoll_create$auto(0x3e)
socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8)
unshare$auto(0x40000080)
sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x7)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
4.418853577s ago: executing program 1 (id=1397):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0})
write$auto(r2, 0x0, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0)
mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000)
r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0)
ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0)
sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0)
3.742066924s ago: executing program 0 (id=1398):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
write$auto(0x1, 0x0, 0x80000000)
munmap$auto(0x8000, 0xffffffff)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0)
memfd_secret$auto(0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
3.737831751s ago: executing program 3 (id=1399):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = setfsuid$auto(0xee00)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setresuid$auto(r1, 0x0, 0x0)
pidfd_open$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
epoll_create$auto(0x20009)
epoll_create$auto(0x3e)
socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8)
unshare$auto(0x40000080)
sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x7)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
3.664621887s ago: executing program 2 (id=1400):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, 0x0)
ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000080)=0x2)
bind$auto(0x3, 0x0, 0x6a)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
setresuid$auto(0x8, 0x8, 0x0)
ioctl$auto(r1, 0x5608, 0x0)
getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0xffffffff, 0x14, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
settimeofday$auto(&(0x7f0000000180)={0xfffffffd, 0x100000000001}, 0x0)
r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80)
r3 = setfsuid$auto(0xee00)
r4 = setfsuid$auto(0xee01)
setresuid$auto(r3, r4, r3)
write$auto(r2, 0x0, 0x881)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
writev$auto(r5, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5)
fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x400c1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto(0x3, 0x400454ca, 0xffffffffffffffff)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c02, 0x0)
write$auto(0x3, 0x0, 0xfdf3)
3.400192261s ago: executing program 2 (id=1402):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = setfsuid$auto(0xee00)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setresuid$auto(r1, 0x0, 0x0)
pidfd_open$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
epoll_create$auto(0x20009)
epoll_create$auto(0x3e)
socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8)
unshare$auto(0x40000080)
sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x7)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
2.788143209s ago: executing program 0 (id=1403):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048814)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0x25, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x80000, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0)
readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x4)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2, 0x0)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x1, 0x106)
2.663352427s ago: executing program 1 (id=1404):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x5, 0x801, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0xffffff39)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket(0x23, 0x2, 0x0)
sendto$auto(r1, 0x0, 0x8000000008000, 0x0, 0x0, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
io_uring_setup$auto(0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x103001, 0x0)
open(0x0, 0x22040, 0x75)
socket(0xa, 0x3, 0x87)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x4, 0x4, 0x5, 0x7)
1.726119875s ago: executing program 1 (id=1405):
pread64$auto(0xffffffffffffffff, 0x0, 0xf42f, 0x7f)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
epoll_create$auto(0x3e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
unshare$auto(0x40000080)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0)
writev$auto(r3, 0x0, 0x9)
r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/projid_map\x00', 0x141800, 0x0)
read$auto(r4, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0)
landlock_restrict_self$auto(r2, 0x8)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810)
mmap$auto(0x100000, 0x400009, 0x100000000000df, 0x9b72, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00')
r6 = io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
sendto$auto(r6, &(0x7f0000000100)="7e00196ecbd69efe9ad3e7d0ba98228bee7e822be7f813d41a7f3322327a9150127978a76d33de1b72ce18cf99455bc1c7a9934653e90fcf0540c8efd846498aa50b27c40c39ddaf39d4d78c00b13a0f576b1de860d4298f6936a3b1d711e3bb27c960e9663510710fbfda775b49fbe22f050af3c86a6cc4d6641ae819fcf74cfc221d248c0b193bf76f2453e414c91d03e6e88b612b4dacbb31d523979c47a6a8d889b5b2522aa28e48bad938b268b259f50574e6c69374873a41b4929f038174df4fe69ad0c86add931fed353ecba4", 0x9, 0x9, &(0x7f0000000000)=@can, 0x9)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000400)=""/89, 0x59)
sendfile$auto(0x3, 0x3, 0x0, 0x2000007)
1.579970289s ago: executing program 3 (id=1406):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x7f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x7, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2c, 0xa, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb3, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
socket(0x11, 0x80000, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r3, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
unshare$auto(0x85)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto(r0, 0x1, 0xffffffffffffffff)
fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0)
pread64$auto(r4, 0x0, 0x8, 0xffff)
1.542829105s ago: executing program 0 (id=1407):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x18, 0xa, 0x1)
fchdir$auto(0xffffffffffffffff)
mmap$auto(0x0, 0x3, 0x3, 0x15, 0xfffffffffffffffa, 0x8)
unshare$auto(0x8000000)
semget$auto(0x0, 0x2e4a, 0x8000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)
unshare$auto(0x8000400)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x1000000, 0x400008, 0xdf, 0x11, 0x2, 0x8004)
eventfd$auto(0x6)
io_uring_setup$auto(0xc, 0x0)
read$auto(0x3, 0x0, 0x80)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x40000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/008/001\x00', 0x204080, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x446481, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = getpid()
ptrace$auto(0x8b, r1, 0x3, 0x6)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
unshare$auto(0x40000080)
write$auto(0x1, 0x0, 0x80000000)
mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
1.421937901s ago: executing program 2 (id=1408):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = setfsuid$auto(0xee00)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setresuid$auto(r1, 0x0, 0x0)
pidfd_open$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
epoll_create$auto(0x20009)
epoll_create$auto(0x3e)
socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8)
unshare$auto(0x40000080)
sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x7)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
1.240728207s ago: executing program 3 (id=1409):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000004}, 0x3, 0x3, 0x3, 0x1)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"})
rseq$auto(0x0, 0x80000002, 0x8, 0xfd)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0xca, 0x0, 0x2d9)
mbind$auto(0x180000000000, 0x2091d2, 0x8, 0x0, 0x391, 0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1ff, 0x7)
mmap$auto(0x0, 0x1, 0x6, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x6, 0xff, 0xeb1, 0xfffffffffffffffa, 0x2000000007fff)
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x7fff, 0x7d, 0x10, 0xfffffff7ffffffff)
mmap$auto(0xffffffffffffffff, 0x202000a, 0x7, 0x17, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112)
rt_sigsuspend$auto(0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x101})
ioctl$auto(0x3, 0x80004509, 0x10000000000402)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x50a81, 0x0)
io_uring_setup$auto(0x0, 0x0)
771.44611ms ago: executing program 1 (id=1410):
waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055})
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x5, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
writev$auto(r0, &(0x7f0000000300)={0x0, 0x200}, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
sendfile$auto(r2, r1, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
bpf$auto(0x12, 0x0, 0x26)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x40000004020009, 0xdc, 0xfffffffffffffff8, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7)
703.910873ms ago: executing program 0 (id=1411):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000580), r0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
mmap$auto(0x1002, 0xc, 0x4, 0x200000eb0, 0x401, 0x4)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x640043, 0x0)
select$auto(0x1000000d, 0x0, 0x0, 0x0, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
getpid()
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/set_event\x00', 0x60002, 0x0)
writev$auto(r2, &(0x7f0000000440)={&(0x7f0000000400)="1c06d8daf2d2355d3efc15343a8d2012f3d927d88432eda86a3f499e13913a593ab01f6b3c62f171d3", 0xf2d}, 0x9)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40810)
mmap$auto(0xfffffffffffffffe, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
ioctl$auto_TIOCNOTTY(r3, 0x5422, &(0x7f0000000480)="9a14661f8a1af9a8115e4120fcb3bdf57f6e2fb2fb39a85d6163461b96536f090a5279fe28582282f8773a8b80db8eedea6d3c93ca47e4362d31e04329c6b8689c3ce7b8ae11d81fb0943c5ac3c4f3926ab610d54e05e1c2058fc1cc87a2ef79c955056a8bbb3065b73fc59bd603d43b3d3ba7bb90169d9fe0b045162f7bfaf04de328a5aa836df9f85ce417abf6c9b49ec269b20f657bb386279923c1aaf982b9d4aa4b120ead65")
socket(0x23, 0x80805, 0x0)
linkat$auto(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
mknod$auto(&(0x7f0000000540)=':,/file0\x00', 0x903, 0x6862)
utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0)
454.687359ms ago: executing program 2 (id=1412):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1b0026bd2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r2, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
0s ago: executing program 1 (id=1413):
mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
read$auto(r0, 0x0, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x0, 0x3, 0xf4}, 0x6d)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r2, 0x0, 0x3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000)
shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0x1, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e", 0x0})
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
shutdown$auto(0x200000003, 0x2)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/251, 0xfb)
close_range$auto(0x2, 0xffffffffffffffff, 0x6)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000540)="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", 0x1)
kernel console output (not intermixed with test programs):
tributes in process `syz.0.377'.
[ 235.297055][ T7884] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 235.507273][ T7890] netlink: 122 bytes leftover after parsing attributes in process `syz.2.381'.
[ 236.660937][ T7913] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 236.743336][ T7913] netlink: 122 bytes leftover after parsing attributes in process `syz.1.388'.
[ 237.090587][ T7923] netlink: 93 bytes leftover after parsing attributes in process `syz.1.390'.
[ 239.017235][ T7943] vivid-007: ================= START STATUS =================
[ 239.055300][ T7943] vivid-007: Generate PTS: true
[ 239.073955][ T7943] vivid-007: Generate SCR: true
[ 239.114413][ T7943] tpg source WxH: 320x240 (Y'CbCr)
[ 239.146850][ T7943] tpg field: 1
[ 239.184068][ T7943] tpg crop: (0,0)/320x240
[ 239.224329][ T7943] tpg compose: (0,0)/320x240
[ 239.244669][ T7943] tpg colorspace: 8
[ 239.259624][ T7954] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 239.268940][ T7943] tpg transfer function: 0/0
[ 239.287059][ T7943] tpg Y'CbCr encoding: 0/0
[ 239.305921][ T7943] tpg quantization: 0/0
[ 239.316497][ T7954] netlink: 122 bytes leftover after parsing attributes in process `syz.3.396'.
[ 239.365818][ T7943] tpg RGB range: 0/2
[ 239.381399][ T7943] vivid-007: ================== END STATUS ==================
[ 239.583158][ T7961] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 239.634854][ T7961] netlink: 122 bytes leftover after parsing attributes in process `syz.3.398'.
[ 240.431741][ T7970] netlink: 342 bytes leftover after parsing attributes in process `syz.3.400'.
[ 242.071528][ T7999] netlink: 93 bytes leftover after parsing attributes in process `syz.1.405'.
[ 242.114038][ T7996] netlink: 93 bytes leftover after parsing attributes in process `syz.1.405'.
[ 244.285427][ T8022] netlink: 342 bytes leftover after parsing attributes in process `syz.3.412'.
[ 244.845380][ T8042] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 245.067175][ T8047] netlink: 122 bytes leftover after parsing attributes in process `syz.3.415'.
[ 245.677194][ T8062] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 245.693078][ T8054] netlink: 93 bytes leftover after parsing attributes in process `syz.0.418'.
[ 246.684627][ T8075] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 246.921295][ T8071] vivid-007: ================= START STATUS =================
[ 246.960332][ T8071] vivid-007: Generate PTS: true
[ 246.979538][ T8071] vivid-007: Generate SCR: true
[ 247.012547][ T8071] tpg source WxH: 320x240 (Y'CbCr)
[ 247.034186][ T8071] tpg field: 1
[ 247.047563][ T8071] tpg crop: (0,0)/320x240
[ 247.070112][ T8071] tpg compose: (0,0)/320x240
[ 247.095322][ T8071] tpg colorspace: 8
[ 247.110184][ T8071] tpg transfer function: 0/0
[ 247.143335][ T8071] tpg Y'CbCr encoding: 0/0
[ 247.165012][ T8071] tpg quantization: 0/0
[ 247.180245][ T8071] tpg RGB range: 0/2
[ 247.196166][ T8071] vivid-007: ================== END STATUS ==================
[ 248.475921][ T8107] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 248.683660][ T8109] netlink: 122 bytes leftover after parsing attributes in process `syz.3.429'.
[ 248.920797][ T8113] netlink: 93 bytes leftover after parsing attributes in process `syz.0.431'.
[ 249.644005][ T8122] netlink: 93 bytes leftover after parsing attributes in process `syz.2.433'.
[ 252.474800][ T8154] bond0: invalid ARP target specified
[ 252.587010][ T8154] FAULT_INJECTION: forcing a failure.
[ 252.587010][ T8154] name failslab, interval 1, probability 0, space 0, times 0
[ 252.696629][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.1.437 Tainted: G U syzkaller #0 PREEMPT(full)
[ 252.696695][ T8154] Tainted: [U]=USER
[ 252.696702][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 252.696716][ T8154] Call Trace:
[ 252.696724][ T8154]
[ 252.696751][ T8154] dump_stack_lvl+0x100/0x190
[ 252.696794][ T8154] should_fail_ex.cold+0x5/0xa
[ 252.696822][ T8154] should_failslab+0xc2/0x120
[ 252.696848][ T8154] kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 252.696886][ T8154] ? proc_alloc_inode+0x25/0x200
[ 252.696921][ T8154] ? d_alloc_parallel+0x864/0x14e0
[ 252.696960][ T8154] ? __pfx_proc_alloc_inode+0x10/0x10
[ 252.696998][ T8154] proc_alloc_inode+0x25/0x200
[ 252.697039][ T8154] alloc_inode+0x68/0x250
[ 252.697071][ T8154] new_inode+0x22/0x1c0
[ 252.697107][ T8154] proc_get_inode+0x1d/0x780
[ 252.697147][ T8154] proc_lookup_de+0x236/0x360
[ 252.697173][ T8154] proc_lookup+0xcf/0x110
[ 252.697197][ T8154] __lookup_slow+0x251/0x460
[ 252.697230][ T8154] ? __pfx___lookup_slow+0x10/0x10
[ 252.697277][ T8154] ? __d_lookup+0x266/0x4a0
[ 252.697319][ T8154] lookup_slow+0x50/0x70
[ 252.697351][ T8154] link_path_walk+0x1377/0x1cc0
[ 252.697412][ T8154] path_openat+0x1be/0x31a0
[ 252.697435][ T8154] ? kasan_save_stack+0x3f/0x50
[ 252.697471][ T8154] ? kasan_save_stack+0x30/0x50
[ 252.697507][ T8154] ? kasan_save_track+0x14/0x30
[ 252.697544][ T8154] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 252.697588][ T8154] ? __pfx_path_openat+0x10/0x10
[ 252.697623][ T8154] do_file_open+0x20e/0x430
[ 252.697649][ T8154] ? __pfx_do_file_open+0x10/0x10
[ 252.697694][ T8154] ? alloc_fd+0x476/0x790
[ 252.697719][ T8154] ? do_getname+0x191/0x390
[ 252.697752][ T8154] do_sys_openat2+0x10d/0x1e0
[ 252.697784][ T8154] ? __pfx_do_sys_openat2+0x10/0x10
[ 252.697818][ T8154] ? vhost_vsock_dev_ioctl+0x2b4/0xb60
[ 252.697865][ T8154] __x64_sys_openat+0x12d/0x210
[ 252.697897][ T8154] ? __pfx___x64_sys_openat+0x10/0x10
[ 252.697951][ T8154] do_syscall_64+0x106/0xf80
[ 252.697982][ T8154] ? clear_bhb_loop+0x40/0x90
[ 252.698015][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 252.698038][ T8154] RIP: 0033:0x7fdc4559c799
[ 252.698057][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 252.698078][ T8154] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 252.698099][ T8154] RAX: ffffffffffffffda RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 252.698113][ T8154] RDX: 00000000000aa102 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 252.698127][ T8154] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 252.698140][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 252.698153][ T8154] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 252.698181][ T8154]
[ 253.213498][ T8166] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 253.382301][ T8170] netlink: 122 bytes leftover after parsing attributes in process `syz.2.441'.
[ 253.720234][ T8176] netlink: 93 bytes leftover after parsing attributes in process `syz.1.443'.
[ 254.062315][ T8183] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5)
[ 254.298083][ T8188] netlink: 122 bytes leftover after parsing attributes in process `syz.1.444'.
[ 255.286473][ T8198] block2mtd: illegal erase size
[ 255.329470][ T8198] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[ 255.731115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.746558][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 256.440639][ T8222] netlink: 93 bytes leftover after parsing attributes in process `syz.3.453'.
[ 256.740222][ T8229] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5)
[ 261.209722][ T8285] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 261.229494][ T8285] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 261.255319][ T8285] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 261.304732][ T8285] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 261.714305][ T8300] netlink: 93 bytes leftover after parsing attributes in process `syz.3.466'.
[ 261.749638][ T8297] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 261.834419][ T8297] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 261.961626][ T8297] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 262.099144][ T8297] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 263.820592][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 263.900008][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 263.970693][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 264.131176][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 264.511021][ T8347] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5)
[ 264.773453][ T8354] netlink: 122 bytes leftover after parsing attributes in process `syz.1.477'.
[ 264.797844][ T8353] netlink: 93 bytes leftover after parsing attributes in process `syz.0.478'.
[ 266.270336][ T8371] netlink: 86 bytes leftover after parsing attributes in process `syz.0.480'.
[ 266.458165][ T8379] netlink: 122 bytes leftover after parsing attributes in process `syz.2.481'.
[ 268.343470][ T8416] netlink: 93 bytes leftover after parsing attributes in process `syz.1.489'.
[ 270.761720][ T8462] netlink: 93 bytes leftover after parsing attributes in process `syz.3.496'.
[ 272.252431][ T8474] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 272.366559][ T8474] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 272.483374][ T8474] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 272.628386][ T8479] block2mtd: illegal erase size
[ 272.703844][ T8479] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[ 272.833816][ T8474] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 272.987306][ T8484] FAULT_INJECTION: forcing a failure.
[ 272.987306][ T8484] name failslab, interval 1, probability 0, space 0, times 0
[ 273.332956][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.0.500 Tainted: G U syzkaller #0 PREEMPT(full)
[ 273.332995][ T8484] Tainted: [U]=USER
[ 273.333003][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 273.333017][ T8484] Call Trace:
[ 273.333025][ T8484]
[ 273.333034][ T8484] dump_stack_lvl+0x100/0x190
[ 273.333076][ T8484] should_fail_ex.cold+0x5/0xa
[ 273.333104][ T8484] should_failslab+0xc2/0x120
[ 273.333130][ T8484] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 273.333168][ T8484] ? alloc_empty_file_noaccount+0x23/0xd0
[ 273.333207][ T8484] alloc_empty_file_noaccount+0x23/0xd0
[ 273.333241][ T8484] alloc_file_pseudo_noaccount+0x13a/0x230
[ 273.333287][ T8484] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[ 273.333325][ T8484] ? iput+0x3a/0x40
[ 273.333357][ T8484] bdev_file_open_by_dev+0x13a/0x210
[ 273.333395][ T8484] blkdev_bszset+0x170/0x240
[ 273.333429][ T8484] ? __pfx_blkdev_bszset+0x10/0x10
[ 273.333465][ T8484] ? find_held_lock+0x2b/0x80
[ 273.333487][ T8484] ? __fget_files+0x215/0x3d0
[ 273.333508][ T8484] ? hook_file_ioctl_common+0x146/0x410
[ 273.333540][ T8484] blkdev_ioctl+0x513/0x6f0
[ 273.333575][ T8484] ? __pfx_blkdev_ioctl+0x10/0x10
[ 273.333614][ T8484] ? __pfx_blkdev_ioctl+0x10/0x10
[ 273.333653][ T8484] __x64_sys_ioctl+0x18e/0x210
[ 273.333691][ T8484] do_syscall_64+0x106/0xf80
[ 273.333726][ T8484] ? clear_bhb_loop+0x40/0x90
[ 273.333756][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 273.333782][ T8484] RIP: 0033:0x7fdf4219c799
[ 273.333803][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 273.333826][ T8484] RSP: 002b:00007fdf43056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 273.333849][ T8484] RAX: ffffffffffffffda RBX: 00007fdf42415fa0 RCX: 00007fdf4219c799
[ 273.333865][ T8484] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000004
[ 273.333880][ T8484] RBP: 00007fdf42232c99 R08: 0000000000000000 R09: 0000000000000000
[ 273.333894][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 273.333909][ T8484] R13: 00007fdf42416038 R14: 00007fdf42415fa0 R15: 00007ffe2dfd9628
[ 273.333939][ T8484]
[ 274.336445][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 274.389829][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 274.464536][ T8500] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 274.536275][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 274.706825][ T8504] netlink: 122 bytes leftover after parsing attributes in process `syz.3.504'.
[ 274.858390][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 274.881204][ T8506] netlink: 93 bytes leftover after parsing attributes in process `syz.0.506'.
[ 274.972262][ T8509] FAULT_INJECTION: forcing a failure.
[ 274.972262][ T8509] name failslab, interval 1, probability 0, space 0, times 0
[ 274.972305][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.1.508 Tainted: G U syzkaller #0 PREEMPT(full)
[ 274.972334][ T8509] Tainted: [U]=USER
[ 274.972340][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 274.972352][ T8509] Call Trace:
[ 274.972358][ T8509]
[ 274.972365][ T8509] dump_stack_lvl+0x100/0x190
[ 274.972401][ T8509] should_fail_ex.cold+0x5/0xa
[ 274.972425][ T8509] should_failslab+0xc2/0x120
[ 274.972447][ T8509] __kmalloc_node_track_caller_noprof+0xe3/0x850
[ 274.972482][ T8509] ? kvasprintf_const+0x66/0x1a0
[ 274.972514][ T8509] kvasprintf+0xbc/0x150
[ 274.972539][ T8509] ? __pfx_kvasprintf+0x10/0x10
[ 274.972566][ T8509] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 274.972601][ T8509] ? lockdep_init_map_type+0x5c/0x250
[ 274.972635][ T8509] kvasprintf_const+0x66/0x1a0
[ 274.972661][ T8509] kobject_set_name_vargs+0x5a/0x140
[ 274.972684][ T8509] device_create_groups_vargs+0x1b1/0x270
[ 274.972715][ T8509] device_create+0xed/0x130
[ 274.972742][ T8509] ? __pfx_device_create+0x10/0x10
[ 274.972769][ T8509] ? is_console_locked+0x9/0x20
[ 274.972794][ T8509] ? con_is_visible+0x65/0x150
[ 274.972818][ T8509] ? csi_J+0x57e/0xad0
[ 274.972850][ T8509] vcs_make_sysfs+0x32/0x80
[ 274.972875][ T8509] vc_allocate+0x539/0x880
[ 274.972905][ T8509] ? __pfx_vc_allocate+0x10/0x10
[ 274.972942][ T8509] con_install+0xa1/0x620
[ 274.972973][ T8509] ? __pfx_con_install+0x10/0x10
[ 274.973007][ T8509] ? __pfx_con_install+0x10/0x10
[ 274.973044][ T8509] tty_init_dev.part.0+0x9e/0x470
[ 274.973081][ T8509] tty_open+0xa63/0xfa0
[ 274.973118][ T8509] ? __pfx_tty_open+0x10/0x10
[ 274.973149][ T8509] ? chrdev_open+0x589/0x6a0
[ 274.973170][ T8509] ? chrdev_open+0x589/0x6a0
[ 274.973195][ T8509] ? __pfx_tty_open+0x10/0x10
[ 274.973228][ T8509] chrdev_open+0x234/0x6a0
[ 274.973250][ T8509] ? __pfx_chrdev_open+0x10/0x10
[ 274.973272][ T8509] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 274.973300][ T8509] do_dentry_open+0x6d8/0x1660
[ 274.973320][ T8509] ? __pfx_chrdev_open+0x10/0x10
[ 274.973348][ T8509] vfs_open+0x82/0x3f0
[ 274.973377][ T8509] path_openat+0x208c/0x31a0
[ 274.973407][ T8509] ? __pfx_path_openat+0x10/0x10
[ 274.973438][ T8509] do_file_open+0x20e/0x430
[ 274.973461][ T8509] ? __pfx_do_file_open+0x10/0x10
[ 274.973501][ T8509] ? alloc_fd+0x476/0x790
[ 274.973524][ T8509] ? do_getname+0x191/0x390
[ 274.973552][ T8509] do_sys_openat2+0x10d/0x1e0
[ 274.973580][ T8509] ? __pfx_do_sys_openat2+0x10/0x10
[ 274.973617][ T8509] __x64_sys_openat+0x12d/0x210
[ 274.973646][ T8509] ? __pfx___x64_sys_openat+0x10/0x10
[ 274.973685][ T8509] do_syscall_64+0x106/0xf80
[ 274.973714][ T8509] ? clear_bhb_loop+0x40/0x90
[ 274.973740][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 274.973762][ T8509] RIP: 0033:0x7fdc4559c799
[ 274.973778][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 274.973803][ T8509] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 274.973822][ T8509] RAX: ffffffffffffffda RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 274.973855][ T8509] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 274.973870][ T8509] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 274.973885][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 274.973899][ T8509] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 274.973931][ T8509]
[ 275.858570][ T8525] netlink: 93 bytes leftover after parsing attributes in process `syz.0.510'.
[ 277.420148][ T8513] program syz.2.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 277.972532][ T8551] FAULT_INJECTION: forcing a failure.
[ 277.972532][ T8551] name failslab, interval 1, probability 0, space 0, times 0
[ 278.087772][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.0.515 Tainted: G U syzkaller #0 PREEMPT(full)
[ 278.087805][ T8551] Tainted: [U]=USER
[ 278.087812][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 278.087824][ T8551] Call Trace:
[ 278.087831][ T8551]
[ 278.087838][ T8551] dump_stack_lvl+0x100/0x190
[ 278.087876][ T8551] should_fail_ex.cold+0x5/0xa
[ 278.087900][ T8551] should_failslab+0xc2/0x120
[ 278.087922][ T8551] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 278.087955][ T8551] ? vm_area_dup+0x27/0x8e0
[ 278.087987][ T8551] vm_area_dup+0x27/0x8e0
[ 278.088017][ T8551] copy_vma+0x643/0xac0
[ 278.088052][ T8551] ? __pfx_copy_vma+0x10/0x10
[ 278.088091][ T8551] ? __lock_acquire+0x4a5/0x2630
[ 278.088132][ T8551] ? finish_task_switch.isra.0+0x200/0xb80
[ 278.088157][ T8551] copy_vma_and_data+0x1cf/0x7c0
[ 278.088191][ T8551] ? __pfx_copy_vma_and_data+0x10/0x10
[ 278.088233][ T8551] ? __vma_start_write+0x17f/0x280
[ 278.088260][ T8551] ? __pfx___vma_start_write+0x10/0x10
[ 278.088294][ T8551] move_vma+0x51b/0x1890
[ 278.088329][ T8551] ? __pfx_move_vma+0x10/0x10
[ 278.088361][ T8551] ? mm_get_unmapped_area_vmflags+0xd7/0x130
[ 278.088386][ T8551] ? cap_mmap_addr+0x4b/0x120
[ 278.088419][ T8551] ? bpf_lsm_mmap_addr+0x9/0x30
[ 278.088437][ T8551] ? security_mmap_addr+0x71/0x1e0
[ 278.088463][ T8551] ? __get_unmapped_area+0x255/0x3e0
[ 278.088489][ T8551] ? vrm_set_new_addr+0x204/0x290
[ 278.088521][ T8551] mremap_to+0x1b7/0x450
[ 278.088553][ T8551] do_mremap+0xb76/0x2130
[ 278.088594][ T8551] ? __pfx_do_mremap+0x10/0x10
[ 278.088638][ T8551] __do_sys_mremap+0x126/0x170
[ 278.088669][ T8551] ? __pfx___do_sys_mremap+0x10/0x10
[ 278.088700][ T8551] ? __fget_files+0x21f/0x3d0
[ 278.088725][ T8551] ? __x64_sys_futex+0x34f/0x4d0
[ 278.088775][ T8551] do_syscall_64+0x106/0xf80
[ 278.088807][ T8551] ? clear_bhb_loop+0x40/0x90
[ 278.088833][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 278.088854][ T8551] RIP: 0033:0x7fdf4219c799
[ 278.088871][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 278.088891][ T8551] RSP: 002b:00007fdf43056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 278.088911][ T8551] RAX: ffffffffffffffda RBX: 00007fdf42415fa0 RCX: 00007fdf4219c799
[ 278.088924][ T8551] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000
[ 278.088937][ T8551] RBP: 00007fdf42232c99 R08: 0000000100000000 R09: 0000000000000000
[ 278.088950][ T8551] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 278.088962][ T8551] R13: 00007fdf42416038 R14: 00007fdf42415fa0 R15: 00007ffe2dfd9628
[ 278.088989][ T8551]
[ 278.639385][ T8559] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.4.0), cmd(5)
[ 278.859519][ T8564] netlink: 122 bytes leftover after parsing attributes in process `syz.3.517'.
[ 279.737154][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 279.975949][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'.
[ 280.092322][ T8581] zswap: compressor not available
[ 280.922947][ T8597] Invalid ELF header magic: != ELF
[ 282.182021][ T8615] ptp ptp0: new virtual clock ptp2
[ 282.233614][ T8615] ptp ptp0: new virtual clock ptp3
[ 282.280507][ T8615] ptp ptp0: guarantee physical clock free running
[ 282.514314][ T8622] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.4.0), cmd(5)
[ 285.810966][ T8667] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 285.967652][ T8667] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 286.152423][ T8667] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 286.279744][ T8667] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 287.824847][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 287.984033][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 288.223174][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 288.229842][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 291.651714][ T8723] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 292.054298][ T8725] netlink: 122 bytes leftover after parsing attributes in process `syz.0.546'.
[ 294.678425][ T8767] can: request_module (can-proto-0) failed.
[ 294.855807][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'.
[ 297.164000][ T8790] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 297.389905][ T8796] netlink: 122 bytes leftover after parsing attributes in process `syz.0.558'.
[ 298.751677][ T8784] program syz.3.557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 304.139302][ T8869] program syz.1.569 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 304.685801][ T8884] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 304.954185][ T8888] netlink: 122 bytes leftover after parsing attributes in process `syz.3.582'.
[ 307.065496][ T8919] netlink: 93 bytes leftover after parsing attributes in process `syz.0.581'.
[ 307.862312][ T8931] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 308.115285][ T8933] netlink: 122 bytes leftover after parsing attributes in process `syz.3.584'.
[ 308.419685][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'.
[ 308.911464][ T8947] netlink: 93 bytes leftover after parsing attributes in process `syz.0.588'.
[ 312.968339][ T8988] program syz.0.592 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 313.377913][ T9006] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00
[ 313.479742][ T9006] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 313.704110][ T9006] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 313.712294][ T9006] page_type: f5(slab)
[ 313.755182][ T9011] netlink: 93 bytes leftover after parsing attributes in process `syz.1.601'.
[ 313.821598][ T9006] raw: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122
[ 313.893078][ T9006] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 313.998249][ T9006] head: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122
[ 314.089669][ T9006] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 314.186807][ T9006] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff
[ 314.266578][ T9006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 314.375099][ T9006] page dumped because: unmovable page
[ 314.443148][ T9006] page_owner tracks the page as allocated
[ 314.481026][ T9006] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5205, tgid 5205 (udevd), ts 36781991285, free_ts 36772026521
[ 314.786916][ T9006] post_alloc_hook+0x153/0x170
[ 314.791738][ T9006] get_page_from_freelist+0x111d/0x3140
[ 314.904684][ T9006] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 314.910739][ T9006] new_slab+0xa6/0x6b0
[ 314.984782][ T9006] refill_objects+0x26b/0x400
[ 314.989611][ T9006] __pcs_replace_empty_main+0x1ab/0x660
[ 315.118000][ T9006] __kmalloc_noprof+0x688/0x850
[ 315.172489][ T9006] tomoyo_realpath_from_path+0xb6/0x690
[ 315.212000][ T9006] tomoyo_check_open_permission+0x2af/0x3c0
[ 315.272451][ T9006] tomoyo_file_open+0x6b/0x90
[ 315.310854][ T9006] security_file_open+0xb5/0x1e0
[ 315.363135][ T9006] do_dentry_open+0x5aa/0x1660
[ 315.420733][ T9006] vfs_open+0x82/0x3f0
[ 315.470346][ T9006] path_openat+0x208c/0x31a0
[ 315.779427][ T9006] do_file_open+0x20e/0x430
[ 315.820879][ T9006] do_sys_openat2+0x10d/0x1e0
[ 315.986942][ T9006] page last free pid 5209 tgid 5209 stack trace:
[ 316.038483][ T9006] __free_frozen_pages+0x7e1/0x10d0
[ 316.098825][ T9006] qlist_free_all+0x47/0xe0
[ 316.176822][ T9006] kasan_quarantine_reduce+0x1a0/0x1f0
[ 316.233092][ T9006] __kasan_slab_alloc+0x69/0x90
[ 316.279818][ T9006] kmem_cache_alloc_noprof+0x241/0x6e0
[ 316.494073][ T9006] do_getname+0x35/0x390
[ 316.527579][ T9006] do_sys_openat2+0xc5/0x1e0
[ 316.776352][ T9006] __x64_sys_openat+0x12d/0x210
[ 316.852325][ T9006] do_syscall_64+0x106/0xf80
[ 317.120370][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 317.189446][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.232623][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 318.268559][ T9051] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 318.603039][ T9053] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 318.609104][ T9053] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 318.699003][ T9056] netlink: 122 bytes leftover after parsing attributes in process `syz.2.607'.
[ 318.757647][ T9053] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 318.861382][ T9053] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 320.617783][ T9088] block2mtd: illegal erase size
[ 320.622944][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 320.628976][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 320.715694][ T9088] netlink: 'syz.2.615': attribute type 1 has an invalid length.
[ 320.782530][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 320.862434][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 321.482805][ T9082] syz.0.614 (9082) used greatest stack depth: 19672 bytes left
[ 322.408497][ T9101] netlink: 93 bytes leftover after parsing attributes in process `syz.2.617'.
[ 322.911006][ T9112] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 322.921932][ T9113] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 323.094716][ T9120] netlink: 122 bytes leftover after parsing attributes in process `syz.1.619'.
[ 323.104642][ T9119] netlink: 122 bytes leftover after parsing attributes in process `syz.3.620'.
[ 325.575577][ T9156] FAULT_INJECTION: forcing a failure.
[ 325.575577][ T9156] name failslab, interval 1, probability 0, space 0, times 0
[ 325.670244][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.1.627 Tainted: G U syzkaller #0 PREEMPT(full)
[ 325.670277][ T9156] Tainted: [U]=USER
[ 325.670284][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 325.670307][ T9156] Call Trace:
[ 325.670313][ T9156]
[ 325.670321][ T9156] dump_stack_lvl+0x100/0x190
[ 325.670357][ T9156] should_fail_ex.cold+0x5/0xa
[ 325.670381][ T9156] should_failslab+0xc2/0x120
[ 325.670404][ T9156] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 325.670451][ T9156] ? __proc_create+0x2cb/0x8c0
[ 325.670489][ T9156] __proc_create+0x2cb/0x8c0
[ 325.670524][ T9156] ? __pfx___proc_create+0x10/0x10
[ 325.670568][ T9156] proc_create_reg+0x75/0x170
[ 325.670590][ T9156] proc_create_net_data+0x8e/0x1c0
[ 325.670612][ T9156] ? __pfx_proc_create_net_data+0x10/0x10
[ 325.670631][ T9156] ? net_generic+0xea/0x2a0
[ 325.670666][ T9156] ? __pfx_phonet_init_net+0x10/0x10
[ 325.670697][ T9156] phonet_init_net+0x66/0x120
[ 325.670728][ T9156] ops_init+0x1e2/0x5f0
[ 325.670763][ T9156] setup_net+0x118/0x3a0
[ 325.670796][ T9156] ? __pfx_setup_net+0x10/0x10
[ 325.670826][ T9156] ? lockdep_init_map_type+0x5c/0x250
[ 325.670856][ T9156] ? mutex_init_lockep+0x110/0x150
[ 325.670888][ T9156] copy_net_ns+0x46f/0x7c0
[ 325.670915][ T9156] create_new_namespaces+0x3ea/0xac0
[ 325.670943][ T9156] unshare_nsproxy_namespaces+0xc3/0x1f0
[ 325.670968][ T9156] ksys_unshare+0x473/0xad0
[ 325.670997][ T9156] ? __pfx_ksys_unshare+0x10/0x10
[ 325.671033][ T9156] __x64_sys_unshare+0x31/0x40
[ 325.671060][ T9156] do_syscall_64+0x106/0xf80
[ 325.671089][ T9156] ? clear_bhb_loop+0x40/0x90
[ 325.671115][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 325.671136][ T9156] RIP: 0033:0x7fdc4559c799
[ 325.671153][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 325.671173][ T9156] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 325.671193][ T9156] RAX: ffffffffffffffda RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 325.671207][ T9156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 325.671219][ T9156] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 325.671231][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 325.671246][ T9156] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 325.671272][ T9156]
[ 326.442777][ T9168] netlink: 93 bytes leftover after parsing attributes in process `syz.2.630'.
[ 327.460602][ T9181] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 327.547057][ T9183] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 327.705219][ T9186] netlink: 122 bytes leftover after parsing attributes in process `syz.2.632'.
[ 327.783350][ T9187] netlink: 122 bytes leftover after parsing attributes in process `syz.1.633'.
[ 328.249860][ T9192] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 328.504670][ T9196] netlink: 122 bytes leftover after parsing attributes in process `syz.3.634'.
[ 328.563944][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'.
[ 330.157620][ T9227] netlink: 93 bytes leftover after parsing attributes in process `syz.2.641'.
[ 331.131240][ T9240] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 331.377586][ T9244] netlink: 122 bytes leftover after parsing attributes in process `syz.2.644'.
[ 331.398533][ T9245] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 331.643794][ T9253] netlink: 122 bytes leftover after parsing attributes in process `syz.3.646'.
[ 332.243489][ T9262] FAULT_INJECTION: forcing a failure.
[ 332.243489][ T9262] name failslab, interval 1, probability 0, space 0, times 0
[ 332.338838][ T9262] CPU: 0 UID: 0 PID: 9262 Comm: syz.1.649 Tainted: G U syzkaller #0 PREEMPT(full)
[ 332.338873][ T9262] Tainted: [U]=USER
[ 332.338880][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 332.338893][ T9262] Call Trace:
[ 332.338900][ T9262]
[ 332.338908][ T9262] dump_stack_lvl+0x100/0x190
[ 332.338946][ T9262] should_fail_ex.cold+0x5/0xa
[ 332.338972][ T9262] should_failslab+0xc2/0x120
[ 332.338996][ T9262] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 332.339029][ T9262] ? seq_open+0x55/0x170
[ 332.339064][ T9262] seq_open+0x55/0x170
[ 332.339094][ T9262] blk_mq_debugfs_open+0x106/0x1b0
[ 332.339149][ T9262] ? __pfx_blk_mq_debugfs_open+0x10/0x10
[ 332.339178][ T9262] full_proxy_open_regular+0x1b6/0x370
[ 332.339215][ T9262] do_dentry_open+0x6d8/0x1660
[ 332.339235][ T9262] ? __pfx_full_proxy_open_regular+0x10/0x10
[ 332.339274][ T9262] vfs_open+0x82/0x3f0
[ 332.339303][ T9262] path_openat+0x208c/0x31a0
[ 332.339333][ T9262] ? __pfx_path_openat+0x10/0x10
[ 332.339363][ T9262] do_file_open+0x20e/0x430
[ 332.339386][ T9262] ? __pfx_do_file_open+0x10/0x10
[ 332.339425][ T9262] ? alloc_fd+0x476/0x790
[ 332.339447][ T9262] ? do_getname+0x191/0x390
[ 332.339476][ T9262] do_sys_openat2+0x10d/0x1e0
[ 332.339503][ T9262] ? __pfx_do_sys_openat2+0x10/0x10
[ 332.339533][ T9262] ? __fget_files+0x21f/0x3d0
[ 332.339557][ T9262] __x64_sys_openat+0x12d/0x210
[ 332.339586][ T9262] ? __pfx___x64_sys_openat+0x10/0x10
[ 332.339624][ T9262] do_syscall_64+0x106/0xf80
[ 332.339653][ T9262] ? clear_bhb_loop+0x40/0x90
[ 332.339679][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 332.339700][ T9262] RIP: 0033:0x7fdc4559c799
[ 332.339717][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 332.339737][ T9262] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 332.339756][ T9262] RAX: ffffffffffffffda RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 332.339770][ T9262] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c
[ 332.339783][ T9262] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 332.339796][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 332.339808][ T9262] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 332.339834][ T9262]
[ 333.072173][ T9265] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 333.099127][ T9265] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 333.143043][ T9265] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 333.149080][ T9265] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 334.036744][ T9262] netlink: 122 bytes leftover after parsing attributes in process `syz.1.649'.
[ 334.946372][ T9297] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 335.246802][ T9300] netlink: 122 bytes leftover after parsing attributes in process `syz.1.656'.
[ 335.262666][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 335.268786][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 335.277335][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout
[ 335.283360][ T51] Bluetooth: hci0: command 0x0c1a tx timeout
[ 335.889603][ T9296] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 336.278687][ T9302] smpboot: CPU 1 is now offline
[ 336.372901][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'.
[ 336.476219][ T9315] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 340.113945][ T9337] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 340.114901][ T9337] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 340.115093][ T9337] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 340.115293][ T9337] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 340.704604][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 342.145603][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 342.153848][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 342.159880][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 342.262637][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'.
[ 343.152063][ T9397] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 343.403975][ T9402] netlink: 122 bytes leftover after parsing attributes in process `syz.1.672'.
[ 343.417883][ T9387] FAULT_INJECTION: forcing a failure.
[ 343.417883][ T9387] name failslab, interval 1, probability 0, space 0, times 0
[ 343.732667][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.0.670 Tainted: G U syzkaller #0 PREEMPT(full)
[ 343.732701][ T9387] Tainted: [U]=USER
[ 343.732708][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 343.732722][ T9387] Call Trace:
[ 343.732729][ T9387]
[ 343.732737][ T9387] dump_stack_lvl+0x100/0x190
[ 343.732775][ T9387] should_fail_ex.cold+0x5/0xa
[ 343.732801][ T9387] should_failslab+0xc2/0x120
[ 343.732824][ T9387] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 343.732858][ T9387] ? __proc_create+0x2cb/0x8c0
[ 343.732900][ T9387] __proc_create+0x2cb/0x8c0
[ 343.732937][ T9387] ? __pfx___proc_create+0x10/0x10
[ 343.732983][ T9387] _proc_mkdir+0xb9/0x210
[ 343.733005][ T9387] ? __pfx__proc_mkdir+0x10/0x10
[ 343.733024][ T9387] ? net_generic+0xea/0x2a0
[ 343.733056][ T9387] ? __pfx_vlan_init_net+0x10/0x10
[ 343.733089][ T9387] vlan_proc_init+0x93/0x160
[ 343.733117][ T9387] ops_init+0x1e2/0x5f0
[ 343.733154][ T9387] setup_net+0x118/0x3a0
[ 343.733197][ T9387] ? __pfx_setup_net+0x10/0x10
[ 343.733230][ T9387] ? lockdep_init_map_type+0x5c/0x250
[ 343.733262][ T9387] ? mutex_init_lockep+0x110/0x150
[ 343.733296][ T9387] copy_net_ns+0x46f/0x7c0
[ 343.733320][ T9387] create_new_namespaces+0x3ea/0xac0
[ 343.733349][ T9387] unshare_nsproxy_namespaces+0xc3/0x1f0
[ 343.733375][ T9387] ksys_unshare+0x473/0xad0
[ 343.733405][ T9387] ? __pfx_ksys_unshare+0x10/0x10
[ 343.733443][ T9387] __x64_sys_unshare+0x31/0x40
[ 343.733471][ T9387] do_syscall_64+0x106/0xf80
[ 343.733502][ T9387] ? clear_bhb_loop+0x40/0x90
[ 343.733530][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 343.733553][ T9387] RIP: 0033:0x7fdf4219c799
[ 343.733570][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 343.733591][ T9387] RSP: 002b:00007fdf43056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 343.733612][ T9387] RAX: ffffffffffffffda RBX: 00007fdf42415fa0 RCX: 00007fdf4219c799
[ 343.733626][ T9387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 343.733639][ T9387] RBP: 00007fdf42232c99 R08: 0000000000000000 R09: 0000000000000000
[ 343.733652][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 343.733665][ T9387] R13: 00007fdf42416038 R14: 00007fdf42415fa0 R15: 00007ffe2dfd9628
[ 343.733693][ T9387]
[ 343.733702][ T9387] 8021q: can't create entry in proc filesystem!
[ 345.728656][ T9430] netlink: zone id is out of range
[ 345.728682][ T9430] netlink: zone id is out of range
[ 345.728884][ T9430] netlink: zone id is out of range
[ 345.729136][ T9430] netlink: zone id is out of range
[ 345.730184][ T9430] netlink: zone id is out of range
[ 345.730383][ T9430] netlink: zone id is out of range
[ 345.731490][ T9430] netlink: zone id is out of range
[ 345.731506][ T9430] netlink: zone id is out of range
[ 345.760820][ T9430] netlink: set zone limit has 8 unknown bytes
[ 345.942125][ T9415] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 345.942323][ T9415] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 345.943612][ T9415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 345.943764][ T9415] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 345.998884][ T9430] netlink: zone id is out of range
[ 346.382881][ T9441] FAULT_INJECTION: forcing a failure.
[ 346.382881][ T9441] name failslab, interval 1, probability 0, space 0, times 0
[ 346.443791][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.0.680 Tainted: G U syzkaller #0 PREEMPT(full)
[ 346.443828][ T9441] Tainted: [U]=USER
[ 346.443835][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 346.443848][ T9441] Call Trace:
[ 346.443855][ T9441]
[ 346.443880][ T9441] dump_stack_lvl+0x100/0x190
[ 346.443922][ T9441] should_fail_ex.cold+0x5/0xa
[ 346.443959][ T9441] should_failslab+0xc2/0x120
[ 346.443986][ T9441] kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 346.444025][ T9441] ? __d_alloc+0x34/0xa80
[ 346.444059][ T9441] __d_alloc+0x34/0xa80
[ 346.444089][ T9441] d_alloc_parallel+0x111/0x14e0
[ 346.444134][ T9441] ? find_held_lock+0x2b/0x80
[ 346.444156][ T9441] ? __d_lookup+0x25c/0x4a0
[ 346.444192][ T9441] ? __pfx_d_alloc_parallel+0x10/0x10
[ 346.444232][ T9441] ? __d_lookup+0x266/0x4a0
[ 346.444274][ T9441] lookup_open.isra.0+0x57c/0x11b0
[ 346.444318][ T9441] ? __pfx_lookup_open.isra.0+0x10/0x10
[ 346.444372][ T9441] ? mnt_get_write_access+0x1e9/0x2f0
[ 346.444411][ T9441] path_openat+0xa98/0x31a0
[ 346.444446][ T9441] ? __pfx_path_openat+0x10/0x10
[ 346.444482][ T9441] do_file_open+0x20e/0x430
[ 346.444510][ T9441] ? __pfx_do_file_open+0x10/0x10
[ 346.444557][ T9441] ? alloc_fd+0x476/0x790
[ 346.444583][ T9441] ? do_getname+0x191/0x390
[ 346.444617][ T9441] do_sys_openat2+0x10d/0x1e0
[ 346.444654][ T9441] ? __pfx_do_sys_openat2+0x10/0x10
[ 346.444698][ T9441] __x64_sys_openat+0x12d/0x210
[ 346.444732][ T9441] ? __pfx___x64_sys_openat+0x10/0x10
[ 346.444777][ T9441] do_syscall_64+0x106/0xf80
[ 346.444812][ T9441] ? clear_bhb_loop+0x40/0x90
[ 346.444842][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 346.444868][ T9441] RIP: 0033:0x7fdf4219c799
[ 346.444887][ T9441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 346.444911][ T9441] RSP: 002b:00007fdf43056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 346.444938][ T9441] RAX: ffffffffffffffda RBX: 00007fdf42415fa0 RCX: 00007fdf4219c799
[ 346.444955][ T9441] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 346.444970][ T9441] RBP: 00007fdf42232c99 R08: 0000000000000000 R09: 0000000000000000
[ 346.444985][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 346.444999][ T9441] R13: 00007fdf42416038 R14: 00007fdf42415fa0 R15: 00007ffe2dfd9628
[ 346.445031][ T9441]
[ 347.150497][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 347.983665][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 347.990414][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 347.996515][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout
[ 348.397010][ T9463] netlink: 330 bytes leftover after parsing attributes in process `syz.2.683'.
[ 349.041457][ T9478] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 349.356651][ T9485] netlink: 122 bytes leftover after parsing attributes in process `syz.1.686'.
[ 350.233596][ T9494] netlink: 93 bytes leftover after parsing attributes in process `syz.1.690'.
[ 350.342705][ T9501] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 350.598829][ T9503] netlink: 122 bytes leftover after parsing attributes in process `syz.0.691'.
[ 351.536770][ T9522] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[ 351.636476][ T9522] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 351.908416][ T9516] smpboot: CPU 1 is now offline
[ 351.935806][ T9516] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[ 352.079621][ T9510] kexec: Could not allocate control_code_buffer
[ 352.146851][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[ 352.248281][ T9516] net_ratelimit: 13 callbacks suppressed
[ 352.248298][ T9516] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 353.913758][ T9547] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 354.204342][ T9552] netlink: 122 bytes leftover after parsing attributes in process `syz.2.699'.
[ 354.295417][ T9554] netlink: 93 bytes leftover after parsing attributes in process `syz.0.701'.
[ 354.547676][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'.
[ 354.962168][ T29] audit: type=1800 audit(4294967364.360:2): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 357.959122][ T9612] netlink: 93 bytes leftover after parsing attributes in process `syz.1.711'.
[ 359.473905][ T5893] usb usb40-port2: attempt power cycle
[ 359.940870][ T9648] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 360.052611][ T9648] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 360.083198][ T5893] usb usb40-port2: unable to enumerate USB device
[ 360.171542][ T9648] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 360.252974][ T9648] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 360.594886][ T9662] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 361.882970][ T9679] netlink: 342 bytes leftover after parsing attributes in process `syz.0.725'.
[ 361.982917][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 362.062488][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 362.225249][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 362.303952][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 362.470693][ T9685] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 362.547050][ T9685] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 362.618048][ T9685] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 362.680311][ T9685] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 363.017497][ T9702] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 363.253317][ T9706] netlink: 122 bytes leftover after parsing attributes in process `syz.1.730'.
[ 364.304578][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 364.623088][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 364.705371][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 364.711429][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 370.294631][ T9780] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 375.057153][ T9834] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 375.086249][ T9834] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 375.121056][ T9834] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 375.168170][ T9834] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 376.745565][ T9835] program syz.1.754 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 377.102542][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 377.108622][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 377.186022][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 377.192099][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 377.717020][ T9871] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 378.640497][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 378.656757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 378.778146][ T9886] block2mtd: error: cannot open device /sys/modu
[ 378.797589][ T9882] netlink: 330 bytes leftover after parsing attributes in process `syz.2.763'.
[ 379.075433][ T9886] Console: switching to colour frame buffer device 128x48
[ 379.718733][ T29] audit: type=1800 audit(4294967389.120:3): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.765" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 379.948183][ T9894] netlink: 342 bytes leftover after parsing attributes in process `syz.2.764'.
[ 381.922159][ T9911] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 381.959331][ T9922] netlink: 93 bytes leftover after parsing attributes in process `syz.0.769'.
[ 382.032623][ T9911] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 382.175123][ T9911] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 382.297199][ T9911] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 382.452628][ T9932] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 383.077396][ T9940] netlink: 330 bytes leftover after parsing attributes in process `syz.0.773'.
[ 383.570356][ T9949] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 383.663315][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 383.684467][ T9951] smpboot: CPU 1 is now offline
[ 383.893573][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'.
[ 383.945706][ T9955] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 384.062384][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 384.222481][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 384.302395][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 385.965668][ T9981] netlink: 93 bytes leftover after parsing attributes in process `syz.1.782'.
[ 386.318588][ T9977] netlink: 93 bytes leftover after parsing attributes in process `syz.1.782'.
[ 386.367379][ T9989] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 387.810476][T10008] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 387.840428][T10008] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 387.899244][T10008] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 387.943566][T10008] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 388.495754][T10021] netlink: 342 bytes leftover after parsing attributes in process `syz.2.789'.
[ 388.918441][T10031] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 389.028045][T10033] smpboot: CPU 1 is now offline
[ 389.316116][T10037] netlink: 93 bytes leftover after parsing attributes in process `syz.3.793'.
[ 389.822630][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 389.902562][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 389.908985][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 389.985720][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 390.762217][T10074] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 390.800661][T10066] netlink: 342 bytes leftover after parsing attributes in process `syz.1.799'.
[ 390.899402][T10075] smpboot: CPU 1 is now offline
[ 391.087931][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'.
[ 391.130270][T10074] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 392.451262][T10094] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 392.662567][T10094] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 392.668761][T10094] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 392.851202][T10094] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 394.462418][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 394.702424][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 394.708531][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 394.863033][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 396.116562][T10147] futex_wake_op: syz.0.811 tries to shift op by -2048; fix this program
[ 396.268312][T10147] futex_wake_op: syz.0.811 tries to shift op by -2048; fix this program
[ 396.723986][T10129] program syz.3.808 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 397.096404][T10162] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 397.308193][T10166] netlink: 122 bytes leftover after parsing attributes in process `syz.0.815'.
[ 398.570730][T10188] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 398.890702][T10188] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 399.230230][T10188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 399.408199][T10188] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 400.026573][T10215] netlink: 93 bytes leftover after parsing attributes in process `syz.0.822'.
[ 400.181442][T10207] netlink: 93 bytes leftover after parsing attributes in process `syz.0.822'.
[ 400.622450][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 400.944373][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 401.262515][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 401.422670][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 402.880929][T10255] netlink: 342 bytes leftover after parsing attributes in process `syz.3.829'.
[ 403.710674][T10277] FAULT_INJECTION: forcing a failure.
[ 403.710674][T10277] name failslab, interval 1, probability 0, space 0, times 0
[ 403.812574][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.3.833 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 403.812609][T10277] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 403.812617][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 403.812634][T10277] Call Trace:
[ 403.812663][T10277]
[ 403.812671][T10277] dump_stack_lvl+0x100/0x190
[ 403.812716][T10277] should_fail_ex.cold+0x5/0xa
[ 403.812747][T10277] should_failslab+0xc2/0x120
[ 403.812775][T10277] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 403.812807][T10277] ? security_inode_alloc+0x3b/0x2c0
[ 403.812856][T10277] ? lockdep_init_map_type+0x5c/0x250
[ 403.812894][T10277] security_inode_alloc+0x3b/0x2c0
[ 403.812916][T10277] inode_init_always_gfp+0xced/0x1040
[ 403.812941][T10277] alloc_inode+0x8e/0x250
[ 403.812970][T10277] new_inode+0x22/0x1c0
[ 403.812999][T10277] shmem_get_inode+0x212/0x1040
[ 403.813030][T10277] ? __pfx_shmem_get_inode+0x10/0x10
[ 403.813057][T10277] ? rcu_is_watching+0x12/0xc0
[ 403.813094][T10277] ? percpu_counter_add_batch+0xb9/0x230
[ 403.813153][T10277] __shmem_file_setup+0x3ac/0x490
[ 403.813184][T10277] ? __pfx___shmem_file_setup+0x10/0x10
[ 403.813217][T10277] ? vm_area_alloc+0x1f/0x160
[ 403.813248][T10277] shmem_zero_setup+0x96/0x1b0
[ 403.813285][T10277] __mmap_region+0x2198/0x29e0
[ 403.813318][T10277] ? update_cfs_rq_load_avg+0x51/0x550
[ 403.813342][T10277] ? __pfx___mmap_region+0x10/0x10
[ 403.813379][T10277] ? set_next_entity+0x11e/0x9c0
[ 403.813413][T10277] ? __lock_acquire+0x4a5/0x2630
[ 403.813449][T10277] ? lock_acquire+0x1cf/0x380
[ 403.813475][T10277] ? find_held_lock+0x2b/0x80
[ 403.813506][T10277] ? trace_sched_exit_tp+0x13a/0x180
[ 403.813567][T10277] ? rcu_is_watching+0x12/0xc0
[ 403.813599][T10277] ? cap_capable+0x107/0x460
[ 403.813672][T10277] mmap_region+0x180/0x3e0
[ 403.813709][T10277] do_mmap+0xc63/0x12f0
[ 403.813737][T10277] ? __pfx_do_mmap+0x10/0x10
[ 403.813760][T10277] ? __pfx_down_write_killable+0x10/0x10
[ 403.813801][T10277] vm_mmap_pgoff+0x29e/0x470
[ 403.813829][T10277] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 403.813856][T10277] ? do_futex+0x192/0x350
[ 403.813905][T10277] ? __pfx_do_futex+0x10/0x10
[ 403.813957][T10277] ksys_mmap_pgoff+0xe1/0x650
[ 403.813986][T10277] ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 403.814013][T10277] ? xfd_validate_state+0x129/0x190
[ 403.814055][T10277] __x64_sys_mmap+0x125/0x190
[ 403.814095][T10277] do_syscall_64+0x106/0xf80
[ 403.814154][T10277] ? clear_bhb_loop+0x40/0x90
[ 403.814192][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 403.814218][T10277] RIP: 0033:0x7ff8cf59c799
[ 403.814239][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 403.814263][T10277] RSP: 002b:00007ff8cd3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 403.814310][T10277] RAX: ffffffffffffffda RBX: 00007ff8cf816270 RCX: 00007ff8cf59c799
[ 403.814326][T10277] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[ 403.814340][T10277] RBP: 00007ff8cf632c99 R08: fffffffffffffffa R09: 0000000000008000
[ 403.814356][T10277] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[ 403.814370][T10277] R13: 00007ff8cf816308 R14: 00007ff8cf816270 R15: 00007fff79cd9438
[ 403.814401][T10277]
[ 404.872355][T10285] futex_wake_op: syz.2.835 tries to shift op by -2048; fix this program
[ 404.982829][T10285] futex_wake_op: syz.2.835 tries to shift op by -2048; fix this program
[ 405.012553][T10288] 0x000000000001-0x000000020000 : ""
[ 405.240565][T10288] ftl_cs: FTL header corrupt!
[ 405.811122][T10304] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 406.107339][T10314] netlink: 122 bytes leftover after parsing attributes in process `syz.0.839'.
[ 407.466927][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'.
[ 408.651173][T10356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[ 409.254822][T10358] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 409.371779][T10358] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 409.493372][T10358] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 409.560855][T10358] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 410.725358][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'.
[ 410.864151][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 411.263121][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 411.469988][T10414] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 411.502715][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 411.508739][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 411.546271][T10413] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 411.758566][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'.
[ 411.848102][T10421] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 411.915562][T10419] smpboot: CPU 1 is now offline
[ 414.723473][T10465] netlink: 342 bytes leftover after parsing attributes in process `syz.1.869'.
[ 415.342904][T10480] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 415.770097][T10480] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 415.770238][T10480] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 415.770343][T10480] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 417.422452][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 417.428517][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 417.822877][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 417.829109][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 419.424988][T10530] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 419.677295][T10535] netlink: 122 bytes leftover after parsing attributes in process `syz.2.883'.
[ 420.768398][T10547] zswap: compressor not available
[ 420.846772][T10554] Setting dangerous option i915.mitigations - tainting kernel
[ 420.873380][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'.
[ 420.995994][T10560] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 421.054094][T10555] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 421.147540][T10558] smpboot: CPU 1 is now offline
[ 421.613780][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'.
[ 422.646363][T10579] netlink: 342 bytes leftover after parsing attributes in process `syz.0.891'.
[ 423.622274][T10598] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 423.657093][T10608] FAULT_INJECTION: forcing a failure.
[ 423.657093][T10608] name failslab, interval 1, probability 0, space 0, times 0
[ 423.742814][T10598] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 423.762213][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.2.895 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 423.762249][T10608] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 423.762258][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 423.762289][T10608] Call Trace:
[ 423.762297][T10608]
[ 423.762305][T10608] dump_stack_lvl+0x100/0x190
[ 423.762355][T10608] should_fail_ex.cold+0x5/0xa
[ 423.762382][T10608] should_failslab+0xc2/0x120
[ 423.762408][T10608] __kmalloc_cache_noprof+0x7a/0x6f0
[ 423.762441][T10608] ? proc_self_get_link+0x189/0x1f0
[ 423.762510][T10608] proc_self_get_link+0x189/0x1f0
[ 423.762545][T10608] pick_link+0xac2/0x13c0
[ 423.762580][T10608] ? __pfx_proc_self_get_link+0x10/0x10
[ 423.762619][T10608] step_into_slowpath+0x9ba/0xf90
[ 423.762661][T10608] ? __pfx_step_into_slowpath+0x10/0x10
[ 423.762702][T10608] ? lookup_fast+0x2da/0x600
[ 423.762734][T10608] ? inode_permission+0x374/0x620
[ 423.762769][T10608] link_path_walk+0xf28/0x1cc0
[ 423.762815][T10608] path_openat+0x1be/0x31a0
[ 423.762838][T10608] ? kasan_save_stack+0x3f/0x50
[ 423.762875][T10608] ? kasan_save_stack+0x30/0x50
[ 423.762910][T10608] ? kasan_save_track+0x14/0x30
[ 423.762947][T10608] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 423.762991][T10608] ? __pfx_path_openat+0x10/0x10
[ 423.763026][T10608] do_file_open+0x20e/0x430
[ 423.763053][T10608] ? __pfx_do_file_open+0x10/0x10
[ 423.763097][T10608] ? alloc_fd+0x476/0x790
[ 423.763123][T10608] ? do_getname+0x191/0x390
[ 423.763155][T10608] do_sys_openat2+0x10d/0x1e0
[ 423.763187][T10608] ? __pfx_do_sys_openat2+0x10/0x10
[ 423.763229][T10608] __x64_sys_openat+0x12d/0x210
[ 423.763262][T10608] ? __pfx___x64_sys_openat+0x10/0x10
[ 423.763306][T10608] do_syscall_64+0x106/0xf80
[ 423.763354][T10608] ? clear_bhb_loop+0x40/0x90
[ 423.763394][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 423.763417][T10608] RIP: 0033:0x7f091cd5cfce
[ 423.763435][T10608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 423.763457][T10608] RSP: 002b:00007f091ab90ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 423.763477][T10608] RAX: ffffffffffffffda RBX: 00007f091ab916c0 RCX: 00007f091cd5cfce
[ 423.763491][T10608] RDX: 0000000000000002 RSI: 00007f091ab90f90 RDI: ffffffffffffff9c
[ 423.763505][T10608] RBP: 00007f091ce32c99 R08: 0000000000000000 R09: 0000000000000000
[ 423.763518][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 423.763532][T10608] R13: 00007f091d016308 R14: 00007f091d016270 R15: 00007fffe46a2ad8
[ 423.763560][T10608]
[ 424.094373][T10598] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 424.100479][T10598] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 424.755398][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'.
[ 424.782401][T10621] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 425.006391][T10615] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 425.062739][T10619] smpboot: CPU 1 is now offline
[ 425.585121][T10626] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 425.616336][T10626] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 425.657404][T10626] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 425.761948][T10626] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 425.943188][T10630] netlink: 122 bytes leftover after parsing attributes in process `syz.3.899'.
[ 427.589561][T10663] zswap: compressor not available
[ 427.665157][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 427.671215][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[ 427.677334][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 427.826315][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 427.852749][T10675] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 428.081008][T10666] Setting dangerous option i915.mitigations - tainting kernel
[ 428.419748][T10675] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 428.595525][T10675] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 428.692876][T10675] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 429.149408][T10694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.915'.
[ 429.902732][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 430.093974][T10703] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 430.277289][T10704] smpboot: CPU 1 is now offline
[ 430.328574][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'.
[ 430.377922][T10703] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 430.466518][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 430.623701][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 430.703083][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 431.510028][T10729] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 432.005278][T10733] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 432.403165][T10733] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 432.413241][T10736] netlink: 122 bytes leftover after parsing attributes in process `syz.1.912'.
[ 432.595471][ T1093] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:7: bg 1: bad block bitmap checksum
[ 432.615751][T10733] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 432.685476][ T1093] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 920 with max blocks 16 with error 74
[ 432.706904][T10733] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 432.751101][ T1093] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 432.751101][ T1093]
[ 433.644810][T10757] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 433.747664][T10757] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 433.885298][T10757] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 434.171405][T10757] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 434.773615][T10771] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 434.812546][T10771] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 434.869553][T10771] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 434.910137][T10771] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 435.263216][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'.
[ 435.303584][T10767] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 435.549272][T10779] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[ 435.596458][T10770] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 435.805314][T10776] smpboot: CPU 1 is now offline
[ 435.822843][T10792] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 436.007807][T10789] netlink: 122 bytes leftover after parsing attributes in process `syz.1.925'.
[ 436.783672][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 436.863015][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 436.947132][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 436.953778][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 437.077556][T10816] netlink: 93 bytes leftover after parsing attributes in process `syz.2.929'.
[ 439.395944][T10843] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 439.480156][T10843] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 439.584120][T10843] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 439.621990][T10851] netlink: 330 bytes leftover after parsing attributes in process `syz.3.935'.
[ 439.655294][T10843] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 440.075038][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 440.081380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 440.490016][T10868] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 440.578015][T10868] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 440.657462][T10868] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 440.750431][T10868] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 442.112561][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.944'.
[ 442.542446][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 442.622543][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 442.702988][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 442.782823][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 442.810960][T10915] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 443.090596][T10920] netlink: 122 bytes leftover after parsing attributes in process `syz.1.953'.
[ 443.943281][T10934] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 443.969707][T10934] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 444.011598][T10934] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 444.143343][T10934] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 444.365365][T10947] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 444.591626][T10950] netlink: 122 bytes leftover after parsing attributes in process `syz.1.950'.
[ 445.982468][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 445.988542][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 446.063885][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 446.233571][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 448.352032][T10991] zswap: compressor not available
[ 448.445856][T10998] Setting dangerous option i915.mitigations - tainting kernel
[ 452.092193][T11061] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 453.320324][T11088] netlink: 93 bytes leftover after parsing attributes in process `syz.1.974'.
[ 453.848885][T11101] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 454.101084][T11104] netlink: 122 bytes leftover after parsing attributes in process `syz.2.977'.
[ 459.635634][ T29] audit: type=1804 audit(4294967469.040:4): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.993" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3757 res=1 errno=0
[ 461.451526][T11222] zswap: compressor not available
[ 461.573172][T11215] Setting dangerous option i915.mitigations - tainting kernel
[ 461.705386][T11230] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 461.875774][T11230] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 462.152094][T11230] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 462.357864][T11230] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 462.585545][T11243] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 462.738282][T11244] smpboot: CPU 1 is now offline
[ 462.802536][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'.
[ 462.852415][T11242] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 463.742449][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 463.748539][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 464.039388][T11251] FAULT_INJECTION: forcing a failure.
[ 464.039388][T11251] name failslab, interval 1, probability 0, space 0, times 0
[ 464.141573][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.0.1005 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 464.141610][T11251] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 464.141618][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 464.141630][T11251] Call Trace:
[ 464.141637][T11251]
[ 464.141645][T11251] dump_stack_lvl+0x100/0x190
[ 464.141683][T11251] should_fail_ex.cold+0x5/0xa
[ 464.141709][T11251] should_failslab+0xc2/0x120
[ 464.141732][T11251] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 464.141766][T11251] ? ep_ptable_queue_proc+0x5b/0x280
[ 464.141824][T11251] ? obj_cgroup_charge_account+0x2c4/0x640
[ 464.141852][T11251] ep_ptable_queue_proc+0x5b/0x280
[ 464.141888][T11251] ? __pfx_ep_ptable_queue_proc+0x10/0x10
[ 464.141929][T11251] snd_seq_oss_readq_poll+0x56/0xb0
[ 464.142014][T11251] snd_seq_oss_poll+0x122/0x1d0
[ 464.142039][T11251] ? __pfx_odev_poll+0x10/0x10
[ 464.142059][T11251] odev_poll+0x4a/0x90
[ 464.142079][T11251] ep_item_poll+0x141/0x1f0
[ 464.142102][T11251] do_epoll_ctl+0x1f33/0x36a0
[ 464.142134][T11251] ? __pfx_do_epoll_ctl+0x10/0x10
[ 464.142155][T11251] ? find_held_lock+0x2b/0x80
[ 464.142175][T11251] ? __might_fault+0xc5/0x140
[ 464.142204][T11251] ? __might_fault+0xc5/0x140
[ 464.142232][T11251] ? __pfx_ep_ptable_queue_proc+0x10/0x10
[ 464.142278][T11251] ? __x64_sys_epoll_ctl+0x15c/0x1e0
[ 464.142299][T11251] __x64_sys_epoll_ctl+0x15c/0x1e0
[ 464.142323][T11251] ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[ 464.142353][T11251] do_syscall_64+0x106/0xf80
[ 464.142385][T11251] ? clear_bhb_loop+0x40/0x90
[ 464.142411][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 464.142433][T11251] RIP: 0033:0x7fdf4219c799
[ 464.142449][T11251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 464.142469][T11251] RSP: 002b:00007fdf43056028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 464.142490][T11251] RAX: ffffffffffffffda RBX: 00007fdf42415fa0 RCX: 00007fdf4219c799
[ 464.142503][T11251] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006
[ 464.142516][T11251] RBP: 00007fdf42232c99 R08: 0000000000000000 R09: 0000000000000000
[ 464.142528][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 464.142540][T11251] R13: 00007fdf42416038 R14: 00007fdf42415fa0 R15: 00007ffe2dfd9628
[ 464.142567][T11251]
[ 464.672372][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 464.678418][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 465.008279][T11278] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 465.008428][T11278] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 465.008568][T11278] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 465.008677][T11278] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 465.852403][T11291] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 465.964254][T11291] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 466.100985][T11291] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 466.161527][T11297] tipc: Started in network mode
[ 466.193708][T11291] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 466.209467][T11297] tipc: Node identity ee00, cluster identity 4711
[ 466.228505][T11297] tipc: Node number set to 60928
[ 467.256063][T11322] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 467.337383][T11322] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 467.417649][T11322] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 467.502831][T11322] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 468.635005][T11347] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 468.753291][T11347] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 468.840073][T11347] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 468.940712][T11347] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 468.949357][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'.
[ 468.988401][T11358] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 469.167394][T11354] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 469.294749][T11357] smpboot: CPU 1 is now offline
[ 470.384692][T11387] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1031'.
[ 470.702504][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 470.784226][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 470.862607][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 470.942768][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 471.400744][T11406] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 472.131749][T11420] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 472.179400][T11396] zswap: compressor not available
[ 472.362813][T11407] Setting dangerous option i915.mitigations - tainting kernel
[ 472.412596][T11420] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 472.418697][T11420] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 472.874493][T11420] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 474.142383][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 474.463794][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 474.469864][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 474.889192][T11462] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 474.943303][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 475.000827][T11462] smpboot: CPU 1 is now offline
[ 475.257506][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'.
[ 475.352044][T11470] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 477.038835][T11498] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 477.176923][T11498] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 477.213182][T11502] tipc: Started in network mode
[ 477.346392][T11502] tipc: Node identity ee00, cluster identity 4711
[ 477.383707][T11502] tipc: Node number set to 60928
[ 477.430295][T11498] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 477.487241][T11498] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 478.069313][T11519] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 478.188243][T11519] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 478.374080][T11519] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 478.517635][T11519] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 478.536439][T11532] netlink: 122 bytes leftover after parsing attributes in process `syz.1.1057'.
[ 480.069955][T11564] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1065'.
[ 480.142496][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 480.229087][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 480.382398][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 480.543596][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 480.746503][T11578] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 480.849706][T11578] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 480.849816][T11578] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 480.849918][T11578] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 481.117783][T11589] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1078'.
[ 481.124217][T11590] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 481.294480][T11595] netlink: 122 bytes leftover after parsing attributes in process `syz.2.1070'.
[ 482.685883][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1076'.
[ 482.786107][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 482.862534][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 482.868572][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 482.875226][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout
[ 483.326929][T11640] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1079'.
[ 483.645724][T11644] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 483.645918][T11644] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 483.646277][T11644] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 483.707337][T11644] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 484.423248][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'.
[ 484.423270][T11653] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 484.979714][T11667] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1083'.
[ 485.458299][T11675] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 485.618862][T11677] netlink: 122 bytes leftover after parsing attributes in process `syz.1.1085'.
[ 485.662394][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 485.668415][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 485.674757][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 485.680758][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 485.952105][T11691] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1094'.
[ 486.059685][T11695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'.
[ 489.215038][T11750] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 489.778869][T11754] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 489.878476][T11754] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 490.017961][T11754] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 490.093632][T11754] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 490.151202][T11763] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 490.406381][T11767] netlink: 122 bytes leftover after parsing attributes in process `syz.2.1098'.
[ 490.579097][T11769] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 490.698683][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'.
[ 490.731891][T11774] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 490.893903][T11770] smpboot: CPU 1 is now offline
[ 491.826235][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 491.907626][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 492.065033][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 492.142532][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 492.598911][T11805] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 492.667888][T11805] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 492.741774][T11805] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 492.811187][T11805] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 493.316658][T11818] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1110'.
[ 493.786891][T11829] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 493.985047][T11834] netlink: 122 bytes leftover after parsing attributes in process `syz.3.1113'.
[ 494.352245][T11844] FAULT_INJECTION: forcing a failure.
[ 494.352245][T11844] name failslab, interval 1, probability 0, space 0, times 0
[ 494.431133][T11844] CPU: 0 UID: 0 PID: 11844 Comm: syz.2.1117 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 494.431190][T11844] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 494.431200][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 494.431214][T11844] Call Trace:
[ 494.431221][T11844]
[ 494.431229][T11844] dump_stack_lvl+0x100/0x190
[ 494.431268][T11844] should_fail_ex.cold+0x5/0xa
[ 494.431293][T11844] should_failslab+0xc2/0x120
[ 494.431317][T11844] __kmalloc_cache_noprof+0x7a/0x6f0
[ 494.431354][T11844] ? wakeup_source_device_create+0x46/0x2e0
[ 494.431465][T11844] wakeup_source_device_create+0x46/0x2e0
[ 494.431495][T11844] wakeup_source_sysfs_add+0x1c/0x90
[ 494.431521][T11844] wakeup_source_register+0x154/0x3e0
[ 494.431576][T11844] ep_create_wakeup_source+0x1df/0x2e0
[ 494.431616][T11844] ? __pfx_ep_create_wakeup_source+0x10/0x10
[ 494.431658][T11844] ? do_epoll_ctl+0x1012/0x36a0
[ 494.431693][T11844] ? do_epoll_ctl+0x1012/0x36a0
[ 494.431720][T11844] do_epoll_ctl+0x1eee/0x36a0
[ 494.431752][T11844] ? __pfx_do_epoll_ctl+0x10/0x10
[ 494.431772][T11844] ? find_held_lock+0x2b/0x80
[ 494.431791][T11844] ? __might_fault+0xc5/0x140
[ 494.431821][T11844] ? __might_fault+0xc5/0x140
[ 494.431860][T11844] ? __x64_sys_epoll_ctl+0x15c/0x1e0
[ 494.431881][T11844] __x64_sys_epoll_ctl+0x15c/0x1e0
[ 494.431905][T11844] ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[ 494.431936][T11844] do_syscall_64+0x106/0xf80
[ 494.431966][T11844] ? clear_bhb_loop+0x40/0x90
[ 494.431991][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 494.432013][T11844] RIP: 0033:0x7f091cd9c799
[ 494.432031][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 494.432052][T11844] RSP: 002b:00007f091aff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 494.432073][T11844] RAX: ffffffffffffffda RBX: 00007f091d015fa0 RCX: 00007f091cd9c799
[ 494.432087][T11844] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[ 494.432099][T11844] RBP: 00007f091ce32c99 R08: 0000000000000000 R09: 0000000000000000
[ 494.432112][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 494.432125][T11844] R13: 00007f091d016038 R14: 00007f091d015fa0 R15: 00007fffe46a2ad8
[ 494.432151][T11844]
[ 494.950500][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 494.956626][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 494.962814][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 494.972613][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 495.372962][T11853] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 495.460323][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'.
[ 495.504968][T11851] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 495.709979][T11856] smpboot: CPU 1 is now offline
[ 495.908002][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1117'.
[ 496.029090][T11863] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 496.036496][T11863] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 496.045589][T11863] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 496.068567][T11863] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 496.340399][T11873] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 496.435614][T11873] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 496.499538][T11873] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 496.587361][T11873] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 496.721419][T11886] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1125'.
[ 497.153209][T11898] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 497.716156][T11911] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 497.800856][T11913] smpboot: CPU 1 is now offline
[ 497.916385][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'.
[ 497.987978][T11911] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 498.383514][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 498.462327][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 498.542531][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 498.622456][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 499.058513][T11924] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 499.515769][T11924] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 499.635333][T11924] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 499.697594][T11924] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 500.742592][T11946] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 501.080364][T11946] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 501.520738][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 501.533140][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 501.639248][T11946] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 501.665076][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 501.696986][T11946] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 501.783100][T11957] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 502.073490][T11962] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 502.117223][T11962] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 502.143435][T11962] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 502.174501][T11962] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 502.203633][T11967] futex_wake_op: syz.3.1140 tries to shift op by -2048; fix this program
[ 502.240054][T11967] futex_wake_op: syz.3.1140 tries to shift op by -2048; fix this program
[ 503.362311][T11999] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1145'.
[ 504.143404][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 504.149803][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 504.222543][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 504.228711][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 504.385024][T12012] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 504.476790][T12012] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 504.559969][T12012] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 504.634837][T12012] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 505.594591][T12029] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 505.907781][T12029] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 506.419648][T12029] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 506.506590][T12029] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 507.405803][T12060] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1156'.
[ 507.662333][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 507.903391][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 508.465468][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 508.543606][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 509.447970][T12102] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 509.590837][T12105] smpboot: CPU 1 is now offline
[ 509.757492][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'.
[ 509.866649][T12105] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 511.119390][T12121] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 511.334704][T12121] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 511.397849][T12121] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 511.506204][T12121] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 512.051040][T12139] openvswitch: netlink: IP tunnel dst address not specified
[ 512.368043][T12146] Invalid ELF header magic: != ELF
[ 512.739843][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'.
[ 513.183754][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 513.342996][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 513.378377][T12168] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1179'.
[ 513.422866][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 513.582447][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 514.809917][T12201] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 514.908551][T12201] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 514.998208][T12201] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 515.065903][T12201] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 516.671419][T12231] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1191'.
[ 516.787070][T12235] syz.0.1192(12235): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 516.862456][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 516.921099][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[ 516.944764][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 517.018501][T12237] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1193'.
[ 517.030544][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 517.062673][ T5835] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9
[ 517.106899][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 517.582149][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'.
[ 518.318624][T12264] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 518.456854][T12264] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 518.546130][T12264] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 518.628829][T12264] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 519.106762][T12274] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 519.308369][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'.
[ 519.344494][T12285] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 519.521980][T12292] vivid-007: ================= START STATUS =================
[ 519.565145][T12292] vivid-007: Generate PTS: true
[ 519.606214][T12292] vivid-007: Generate SCR: true
[ 519.630813][T12292] tpg source WxH: 320x240 (Y'CbCr)
[ 519.644842][T12292] tpg field: 1
[ 519.664670][T12292] tpg crop: (0,0)/320x240
[ 519.689002][T12292] tpg compose: (0,0)/320x240
[ 519.720582][T12292] tpg colorspace: 8
[ 519.737639][T12292] tpg transfer function: 0/0
[ 519.790626][T12292] tpg Y'CbCr encoding: 0/0
[ 519.819137][T12292] tpg quantization: 0/0
[ 519.859621][T12292] tpg RGB range: 0/2
[ 519.887888][T12292] vivid-007: ================== END STATUS ==================
[ 520.093548][T12283] smpboot: CPU 1 is now offline
[ 520.132067][T12297] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1205'.
[ 520.383281][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 520.417150][T12304] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 520.462313][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 520.547458][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 520.702590][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 521.018751][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1209'.
[ 522.404729][T12336] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 522.411701][T12336] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 522.444907][T12336] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 522.472075][T12336] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 523.207696][T12367] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O!
[ 523.379832][T12367] File: /dev/nullb0 PID: 12367 Comm: syz.0.1218
[ 524.462380][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[ 524.468925][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 524.475166][ T51] Bluetooth: hci0: command 0x0c1a tx timeout
[ 524.542384][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 525.572064][T12405] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 525.599006][T12405] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 525.617712][T12405] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 525.640738][T12405] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 526.047341][T12412] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 526.103058][T12412] smpboot: CPU 1 is now offline
[ 526.247599][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'.
[ 526.278950][T12412] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 526.879381][T12431] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 527.585317][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 527.662940][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 527.669019][ T51] Bluetooth: hci2: command 0x0c1a tx timeout
[ 527.675093][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 528.275924][T12458] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 528.405827][T12458] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 528.411849][T12458] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 528.677010][T12458] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 529.576462][T12474] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1241'.
[ 529.636050][T12474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 529.644124][T12474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 530.302323][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 530.463383][ T51] Bluetooth: hci1: command 0x0c1a tx timeout
[ 530.469420][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 530.563680][T12493] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 530.702452][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 531.311923][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'.
[ 532.444731][T12530] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 532.799862][T12530] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 533.027172][T12530] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 533.094899][T12530] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 534.014404][T12554] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 534.347420][T12557] smpboot: CPU 1 is now offline
[ 534.398017][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'.
[ 534.463805][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 534.528855][T12554] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 534.789171][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 534.798547][T12565] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 534.870578][T12565] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 534.929465][T12565] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 535.009656][T12565] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 535.290509][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1261'.
[ 535.775978][T12587] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 535.853932][T12587] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 535.921095][T12587] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 535.982190][T12587] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 537.347395][T12605] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 537.502288][T12615] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 537.822416][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 537.905999][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 537.982331][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 537.988422][ T51] Bluetooth: hci2: command 0x0c1a tx timeout
[ 538.569474][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1274'.
[ 538.723044][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[ 538.784641][T12645] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 539.128973][T12651] FAULT_INJECTION: forcing a failure.
[ 539.128973][T12651] name failslab, interval 1, probability 0, space 0, times 0
[ 539.191480][T12651] CPU: 0 UID: 0 PID: 12651 Comm: syz.3.1277 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 539.191517][T12651] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 539.191525][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 539.191538][T12651] Call Trace:
[ 539.191552][T12651]
[ 539.191560][T12651] dump_stack_lvl+0x100/0x190
[ 539.191598][T12651] should_fail_ex.cold+0x5/0xa
[ 539.191623][T12651] should_failslab+0xc2/0x120
[ 539.191645][T12651] __kmalloc_cache_noprof+0x7a/0x6f0
[ 539.191673][T12651] ? kstrdup_quotable_cmdline+0x52/0x210
[ 539.191807][T12651] ? get_cmdline+0x86/0x360
[ 539.191835][T12651] kstrdup_quotable_cmdline+0x52/0x210
[ 539.191868][T12651] __report_access+0x77/0x230
[ 539.191911][T12651] ? _raw_spin_unlock_irq+0x23/0x50
[ 539.191961][T12651] task_work_run+0x150/0x240
[ 539.191993][T12651] ? __pfx_task_work_run+0x10/0x10
[ 539.192024][T12651] ? xfd_validate_state+0x129/0x190
[ 539.192060][T12651] exit_to_user_mode_loop+0x100/0x4a0
[ 539.192091][T12651] do_syscall_64+0x668/0xf80
[ 539.192121][T12651] ? clear_bhb_loop+0x40/0x90
[ 539.192148][T12651] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 539.192170][T12651] RIP: 0033:0x7ff8cf59c799
[ 539.192187][T12651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 539.192207][T12651] RSP: 002b:00007ff8d0384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 539.192230][T12651] RAX: ffffffffffffffff RBX: 00007ff8cf815fa0 RCX: 00007ff8cf59c799
[ 539.192244][T12651] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001
[ 539.192257][T12651] RBP: 00007ff8cf632c99 R08: 0000000000000004 R09: 0000000000000000
[ 539.192281][T12651] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000
[ 539.192295][T12651] R13: 00007ff8cf816038 R14: 00007ff8cf815fa0 R15: 00007fff79cd9438
[ 539.192340][T12651]
[ 539.555647][T12654] FAULT_INJECTION: forcing a failure.
[ 539.555647][T12654] name failslab, interval 1, probability 0, space 0, times 0
[ 539.569971][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.0.1278 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 539.570006][T12654] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 539.570013][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 539.570026][T12654] Call Trace:
[ 539.570032][T12654]
[ 539.570039][T12654] dump_stack_lvl+0x100/0x190
[ 539.570075][T12654] should_fail_ex.cold+0x5/0xa
[ 539.570099][T12654] should_failslab+0xc2/0x120
[ 539.570121][T12654] __kmalloc_cache_noprof+0x7a/0x6f0
[ 539.570149][T12654] ? __v4l2_subdev_state_alloc+0x53/0x410
[ 539.570222][T12654] __v4l2_subdev_state_alloc+0x53/0x410
[ 539.570250][T12654] subdev_open+0xa6/0x510
[ 539.570275][T12654] v4l2_open+0x1d2/0x490
[ 539.570342][T12654] ? __pfx_v4l2_open+0x10/0x10
[ 539.570375][T12654] chrdev_open+0x234/0x6a0
[ 539.570396][T12654] ? __pfx_apparmor_file_open+0x10/0x10
[ 539.570435][T12654] ? __pfx_chrdev_open+0x10/0x10
[ 539.570458][T12654] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 539.570487][T12654] do_dentry_open+0x6d8/0x1660
[ 539.570512][T12654] ? __pfx_chrdev_open+0x10/0x10
[ 539.570540][T12654] vfs_open+0x82/0x3f0
[ 539.570570][T12654] path_openat+0x208c/0x31a0
[ 539.570596][T12654] ? futex_unqueue+0x13d/0x2c0
[ 539.570622][T12654] ? stack_depot_save_flags+0x27/0x9d0
[ 539.570664][T12654] ? __pfx_path_openat+0x10/0x10
[ 539.570688][T12654] ? kasan_save_stack+0x3f/0x50
[ 539.570720][T12654] ? kasan_save_stack+0x30/0x50
[ 539.570752][T12654] ? kasan_save_track+0x14/0x30
[ 539.570784][T12654] ? __kasan_slab_alloc+0x89/0x90
[ 539.570803][T12654] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 539.570834][T12654] ? do_getname+0x35/0x390
[ 539.570863][T12654] do_file_open+0x20e/0x430
[ 539.570887][T12654] ? __pfx_do_file_open+0x10/0x10
[ 539.570928][T12654] ? find_held_lock+0x2b/0x80
[ 539.570948][T12654] ? __might_fault+0xc5/0x140
[ 539.570977][T12654] ? __might_fault+0xc5/0x140
[ 539.571010][T12654] file_open_name+0x198/0x3b0
[ 539.571038][T12654] ? __pfx_file_open_name+0x10/0x10
[ 539.571071][T12654] ? do_getname+0x191/0x390
[ 539.571100][T12654] acct_on+0xa4/0x9e0
[ 539.571132][T12654] ? __pfx_acct_on+0x10/0x10
[ 539.571163][T12654] ? bpf_lsm_capable+0x9/0x10
[ 539.571190][T12654] ? security_capable+0x80/0x260
[ 539.571226][T12654] __x64_sys_acct+0x81/0x1e0
[ 539.571257][T12654] ? lockdep_hardirqs_on+0x78/0x100
[ 539.571288][T12654] do_syscall_64+0x106/0xf80
[ 539.571318][T12654] ? clear_bhb_loop+0x40/0x90
[ 539.571344][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 539.571365][T12654] RIP: 0033:0x7fdf4219c799
[ 539.571383][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 539.571404][T12654] RSP: 002b:00007fdf43035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 539.571424][T12654] RAX: ffffffffffffffda RBX: 00007fdf42416090 RCX: 00007fdf4219c799
[ 539.571437][T12654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 539.571450][T12654] RBP: 00007fdf42232c99 R08: 0000000000000000 R09: 0000000000000000
[ 539.571463][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 539.571476][T12654] R13: 00007fdf42416128 R14: 00007fdf42416090 R15: 00007ffe2dfd9628
[ 539.571502][T12654]
[ 540.119241][T12651] ptrace attach of "./syz-executor exec"[5825] was attempted by "(null)"[12651]
[ 540.209930][T12640] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 540.265465][T12643] smpboot: CPU 1 is now offline
[ 540.676281][T12665] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1280'.
[ 541.401032][T12674] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 541.785491][T12682] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 541.878910][T12682] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 541.968546][T12682] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 541.968834][T12682] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 542.396715][T12689] mkiss: ax0: crc mode is auto.
[ 543.002177][T12701] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 543.116872][T12701] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 543.246125][T12701] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 543.381573][T12701] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 543.908537][T12715] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 543.935567][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'.
[ 544.007767][T12719] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 544.046032][T12716] smpboot: CPU 1 is now offline
[ 544.237490][T12732] misc userio: Invalid payload size
[ 544.620475][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'.
[ 545.023866][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[ 545.182922][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 545.262382][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 545.425872][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 545.445609][T12750] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 545.676176][T12750] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 546.049768][T12750] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 546.093298][T12750] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 546.788484][T12765] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1300'.
[ 546.902985][T12766] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 546.903170][T12766] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 546.903339][T12766] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 546.906254][T12766] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 547.217697][T12773] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1302'.
[ 547.225267][T12773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 547.225441][T12773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 547.776117][T12781] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1303'.
[ 548.047187][T12790] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 548.942544][ T51] Bluetooth: hci2: command 0x0c1a tx timeout
[ 548.948590][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 548.955142][ T51] Bluetooth: hci0: command 0x0c1a tx timeout
[ 548.961149][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[ 549.639756][T12819] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 549.882557][T12819] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 550.245966][T12830] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1313'.
[ 550.266383][T12819] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 550.372572][T12819] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 550.437140][T12832] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1314'.
[ 550.481536][T12832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 550.488881][T12832] bridge0: port 1(bridge_slave_0) entered disabled state
[ 551.662646][T12806] Bluetooth: hci0: command 0x0c1a tx timeout
[ 551.902366][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 552.170056][T12866] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 552.304080][T12806] Bluetooth: hci2: command 0x0c1a tx timeout
[ 552.382462][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 552.489691][T12871] netlink: 122 bytes leftover after parsing attributes in process `syz.3.1321'.
[ 553.225835][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1323'.
[ 554.572038][T12916] FAULT_INJECTION: forcing a failure.
[ 554.572038][T12916] name failslab, interval 1, probability 0, space 0, times 0
[ 554.757459][T12923] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1327'.
[ 554.834564][T12916] CPU: 0 UID: 0 PID: 12916 Comm: syz.2.1325 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 554.834606][T12916] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 554.834615][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 554.834630][T12916] Call Trace:
[ 554.834638][T12916]
[ 554.834647][T12916] dump_stack_lvl+0x100/0x190
[ 554.834689][T12916] should_fail_ex.cold+0x5/0xa
[ 554.834718][T12916] should_failslab+0xc2/0x120
[ 554.834744][T12916] __kmalloc_cache_noprof+0x7a/0x6f0
[ 554.834778][T12916] ? __v4l2_subdev_state_alloc+0x53/0x410
[ 554.834815][T12916] __v4l2_subdev_state_alloc+0x53/0x410
[ 554.834848][T12916] subdev_open+0xa6/0x510
[ 554.834879][T12916] v4l2_open+0x1d2/0x490
[ 554.834918][T12916] ? __pfx_v4l2_open+0x10/0x10
[ 554.834958][T12916] chrdev_open+0x234/0x6a0
[ 554.834983][T12916] ? __pfx_apparmor_file_open+0x10/0x10
[ 554.835009][T12916] ? __pfx_chrdev_open+0x10/0x10
[ 554.835036][T12916] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 554.835086][T12916] do_dentry_open+0x6d8/0x1660
[ 554.835110][T12916] ? __pfx_chrdev_open+0x10/0x10
[ 554.835141][T12916] vfs_open+0x82/0x3f0
[ 554.835184][T12916] path_openat+0x208c/0x31a0
[ 554.835211][T12916] ? futex_unqueue+0x13d/0x2c0
[ 554.835244][T12916] ? stack_depot_save_flags+0x27/0x9d0
[ 554.835272][T12916] ? __pfx_path_openat+0x10/0x10
[ 554.835296][T12916] ? kasan_save_stack+0x3f/0x50
[ 554.835329][T12916] ? kasan_save_stack+0x30/0x50
[ 554.835361][T12916] ? kasan_save_track+0x14/0x30
[ 554.835392][T12916] ? __kasan_slab_alloc+0x89/0x90
[ 554.835411][T12916] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 554.835442][T12916] ? do_getname+0x35/0x390
[ 554.835471][T12916] do_file_open+0x20e/0x430
[ 554.835495][T12916] ? __pfx_do_file_open+0x10/0x10
[ 554.835537][T12916] ? find_held_lock+0x2b/0x80
[ 554.835556][T12916] ? __might_fault+0xc5/0x140
[ 554.835586][T12916] ? __might_fault+0xc5/0x140
[ 554.835618][T12916] file_open_name+0x198/0x3b0
[ 554.835647][T12916] ? __pfx_file_open_name+0x10/0x10
[ 554.835680][T12916] ? do_getname+0x191/0x390
[ 554.835709][T12916] acct_on+0xa4/0x9e0
[ 554.835741][T12916] ? __pfx_acct_on+0x10/0x10
[ 554.835773][T12916] ? bpf_lsm_capable+0x9/0x10
[ 554.835794][T12916] ? security_capable+0x80/0x260
[ 554.835830][T12916] __x64_sys_acct+0x81/0x1e0
[ 554.835861][T12916] ? lockdep_hardirqs_on+0x78/0x100
[ 554.835892][T12916] do_syscall_64+0x106/0xf80
[ 554.835922][T12916] ? clear_bhb_loop+0x40/0x90
[ 554.835948][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 554.835970][T12916] RIP: 0033:0x7f091cd9c799
[ 554.835987][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 554.836008][T12916] RSP: 002b:00007f091afb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 554.836028][T12916] RAX: ffffffffffffffda RBX: 00007f091d016180 RCX: 00007f091cd9c799
[ 554.836043][T12916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 554.836056][T12916] RBP: 00007f091ce32c99 R08: 0000000000000000 R09: 0000000000000000
[ 554.836069][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 554.836082][T12916] R13: 00007f091d016218 R14: 00007f091d016180 R15: 00007fffe46a2ad8
[ 554.836109][T12916]
[ 558.186498][T12963] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 558.383595][T12963] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 558.626268][T12963] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 558.664495][T12970] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1334'.
[ 558.753607][T12963] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 558.793703][T12969] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1334'.
[ 559.597085][T12978] FAULT_INJECTION: forcing a failure.
[ 559.597085][T12978] name failslab, interval 1, probability 0, space 0, times 0
[ 559.637984][T12978] CPU: 0 UID: 0 PID: 12978 Comm: syz.1.1336 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 559.638022][T12978] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 559.638031][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 559.638044][T12978] Call Trace:
[ 559.638052][T12978]
[ 559.638060][T12978] dump_stack_lvl+0x100/0x190
[ 559.638101][T12978] should_fail_ex.cold+0x5/0xa
[ 559.638128][T12978] should_failslab+0xc2/0x120
[ 559.638153][T12978] __kmalloc_cache_noprof+0x7a/0x6f0
[ 559.638184][T12978] ? kstrdup_quotable_cmdline+0x52/0x210
[ 559.638217][T12978] ? get_cmdline+0x86/0x360
[ 559.638262][T12978] kstrdup_quotable_cmdline+0x52/0x210
[ 559.638295][T12978] __report_access+0x77/0x230
[ 559.638323][T12978] ? _raw_spin_unlock_irq+0x23/0x50
[ 559.638356][T12978] task_work_run+0x150/0x240
[ 559.638388][T12978] ? __pfx_task_work_run+0x10/0x10
[ 559.638419][T12978] ? xfd_validate_state+0x129/0x190
[ 559.638456][T12978] exit_to_user_mode_loop+0x100/0x4a0
[ 559.638488][T12978] do_syscall_64+0x668/0xf80
[ 559.638518][T12978] ? clear_bhb_loop+0x40/0x90
[ 559.638543][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 559.638565][T12978] RIP: 0033:0x7fdc4559c799
[ 559.638582][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 559.638603][T12978] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 559.638623][T12978] RAX: ffffffffffffffff RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 559.638637][T12978] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001
[ 559.638650][T12978] RBP: 00007fdc45632c99 R08: 0000000000000004 R09: 0000000000000000
[ 559.638663][T12978] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000
[ 559.638676][T12978] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 559.638702][T12978]
[ 559.638712][T12978] ptrace attach of "./syz-executor exec"[5836] was attempted by "(null)"[12978]
[ 560.224780][T12806] Bluetooth: hci0: command 0x0c1a tx timeout
[ 560.462705][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 560.703523][T12806] Bluetooth: hci2: command 0x0c1a tx timeout
[ 560.753004][T12993] mkiss: ax0: crc mode is auto.
[ 560.782326][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 561.222589][T12998] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 561.654680][T13004] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 561.748043][T13004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 561.842560][T13004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 561.901043][T13004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 562.459223][T13023] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 562.950515][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 562.960007][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 563.662279][T12806] Bluetooth: hci0: command 0x0c1a tx timeout
[ 563.822533][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 563.903829][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 563.909891][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout
[ 564.904619][T13050] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 564.960193][T13050] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 565.035402][T13050] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 565.066908][T13055] mkiss: ax0: crc mode is auto.
[ 565.106352][T13050] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 565.358848][T13060] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 565.458424][T13063] smpboot: CPU 1 is now offline
[ 565.626796][T13065] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 565.632905][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'.
[ 565.709049][T13065] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 565.761299][T13060] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 565.811601][T13065] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 565.902196][T13065] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 566.544791][T13080] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 567.093614][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[ 567.664811][T12806] Bluetooth: hci0: command 0x0c1a tx timeout
[ 567.694462][T13107] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1360'.
[ 567.745926][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 567.824818][T12806] Bluetooth: hci2: command 0x0c1a tx timeout
[ 567.902609][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 568.146854][T13114] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 568.413496][T13114] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 568.574512][T13114] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 568.695102][T13114] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 570.165450][T13142] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 570.222347][T12806] Bluetooth: hci0: command 0x0c1a tx timeout
[ 570.462454][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 570.624070][T12806] Bluetooth: hci2: command 0x0c1a tx timeout
[ 570.702293][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 571.183933][T13156] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1367'.
[ 571.357005][T13155] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 571.382149][T13155] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 571.411112][T13155] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 571.449434][T13155] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 572.163455][T13171] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 572.205153][T13174] FAULT_INJECTION: forcing a failure.
[ 572.205153][T13174] name failslab, interval 1, probability 0, space 0, times 0
[ 572.249831][T13175] FAULT_INJECTION: forcing a failure.
[ 572.249831][T13175] name failslab, interval 1, probability 0, space 0, times 0
[ 572.310893][T13175] CPU: 0 UID: 0 PID: 13175 Comm: syz.2.1370 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 572.310929][T13175] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 572.310937][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 572.310951][T13175] Call Trace:
[ 572.310957][T13175]
[ 572.310965][T13175] dump_stack_lvl+0x100/0x190
[ 572.311002][T13175] should_fail_ex.cold+0x5/0xa
[ 572.311026][T13175] ? tracepoint_add_func+0x2c5/0xf30
[ 572.311046][T13175] should_failslab+0xc2/0x120
[ 572.311069][T13175] __kmalloc_noprof+0xe0/0x850
[ 572.311126][T13175] ? __pfx_probe_sched_wakeup+0x10/0x10
[ 572.311150][T13175] tracepoint_add_func+0x2c5/0xf30
[ 572.311172][T13175] ? __pfx_probe_sched_wakeup+0x10/0x10
[ 572.311194][T13175] ? __pfx___mutex_lock+0x10/0x10
[ 572.311228][T13175] ? rcu_is_watching+0x12/0xc0
[ 572.311266][T13175] ? __pfx_probe_sched_wakeup+0x10/0x10
[ 572.311288][T13175] tracepoint_probe_register+0xc4/0x110
[ 572.311313][T13175] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 572.311337][T13175] ? __pfx_probe_sched_wakeup+0x10/0x10
[ 572.311360][T13175] ? __lock_acquire+0x4a5/0x2630
[ 572.311395][T13175] tracing_start_sched_switch+0xaf/0x170
[ 572.311433][T13175] __ftrace_event_enable_disable+0x557/0x6f0
[ 572.311461][T13175] __ftrace_set_clr_event_nolock+0x390/0xc30
[ 572.311496][T13175] ftrace_set_clr_event+0x16e/0x330
[ 572.311527][T13175] ? __pfx_ftrace_set_clr_event+0x10/0x10
[ 572.311556][T13175] ? trace_get_user+0x3ae/0xa70
[ 572.311587][T13175] ftrace_event_write+0x259/0x2c0
[ 572.311617][T13175] ? __pfx_ftrace_event_write+0x10/0x10
[ 572.311658][T13175] vfs_write+0x2aa/0x1070
[ 572.311679][T13175] ? __pfx_ftrace_event_write+0x10/0x10
[ 572.311741][T13175] ? __pfx_vfs_write+0x10/0x10
[ 572.311763][T13175] ? __fget_files+0x215/0x3d0
[ 572.311792][T13175] ? __fget_files+0x21f/0x3d0
[ 572.311823][T13175] ksys_write+0x12a/0x250
[ 572.311845][T13175] ? __pfx_ksys_write+0x10/0x10
[ 572.311876][T13175] do_syscall_64+0x106/0xf80
[ 572.311910][T13175] ? clear_bhb_loop+0x40/0x90
[ 572.311940][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 572.311965][T13175] RIP: 0033:0x7f091cd9c799
[ 572.311984][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 572.312008][T13175] RSP: 002b:00007f091afb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 572.312030][T13175] RAX: ffffffffffffffda RBX: 00007f091d016180 RCX: 00007f091cd9c799
[ 572.312046][T13175] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000006
[ 572.312061][T13175] RBP: 00007f091ce32c99 R08: 0000000000000000 R09: 0000000000000000
[ 572.312075][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 572.312090][T13175] R13: 00007f091d016218 R14: 00007f091d016180 R15: 00007fffe46a2ad8
[ 572.312121][T13175]
[ 572.312146][T13175] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup
[ 572.656617][T13174] CPU: 0 UID: 0 PID: 13174 Comm: syz.1.1369 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 572.656658][T13174] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 572.656667][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 572.656689][T13174] Call Trace:
[ 572.656697][T13174]
[ 572.656705][T13174] dump_stack_lvl+0x100/0x190
[ 572.656746][T13174] should_fail_ex.cold+0x5/0xa
[ 572.656774][T13174] should_failslab+0xc2/0x120
[ 572.656800][T13174] __kmalloc_cache_noprof+0x7a/0x6f0
[ 572.656832][T13174] ? __v4l2_subdev_state_alloc+0x53/0x410
[ 572.656870][T13174] __v4l2_subdev_state_alloc+0x53/0x410
[ 572.656902][T13174] subdev_open+0xa6/0x510
[ 572.656931][T13174] v4l2_open+0x1d2/0x490
[ 572.656971][T13174] ? __pfx_v4l2_open+0x10/0x10
[ 572.657009][T13174] chrdev_open+0x234/0x6a0
[ 572.657033][T13174] ? __pfx_apparmor_file_open+0x10/0x10
[ 572.657057][T13174] ? __pfx_chrdev_open+0x10/0x10
[ 572.657083][T13174] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 572.657116][T13174] do_dentry_open+0x6d8/0x1660
[ 572.657140][T13174] ? __pfx_chrdev_open+0x10/0x10
[ 572.657171][T13174] vfs_open+0x82/0x3f0
[ 572.657205][T13174] path_openat+0x208c/0x31a0
[ 572.657235][T13174] ? futex_unqueue+0x13d/0x2c0
[ 572.657265][T13174] ? stack_depot_save_flags+0x27/0x9d0
[ 572.657297][T13174] ? __pfx_path_openat+0x10/0x10
[ 572.657324][T13174] ? kasan_save_stack+0x3f/0x50
[ 572.657360][T13174] ? kasan_save_stack+0x30/0x50
[ 572.657397][T13174] ? kasan_save_track+0x14/0x30
[ 572.657433][T13174] ? __kasan_slab_alloc+0x89/0x90
[ 572.657454][T13174] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 572.657490][T13174] ? do_getname+0x35/0x390
[ 572.657523][T13174] do_file_open+0x20e/0x430
[ 572.657550][T13174] ? __pfx_do_file_open+0x10/0x10
[ 572.657598][T13174] ? find_held_lock+0x2b/0x80
[ 572.657620][T13174] ? __might_fault+0xc5/0x140
[ 572.657654][T13174] ? __might_fault+0xc5/0x140
[ 572.657698][T13174] file_open_name+0x198/0x3b0
[ 572.657730][T13174] ? __pfx_file_open_name+0x10/0x10
[ 572.657768][T13174] ? do_getname+0x191/0x390
[ 572.657801][T13174] acct_on+0xa4/0x9e0
[ 572.657838][T13174] ? __pfx_acct_on+0x10/0x10
[ 572.657874][T13174] ? bpf_lsm_capable+0x9/0x10
[ 572.657900][T13174] ? security_capable+0x80/0x260
[ 572.657941][T13174] __x64_sys_acct+0x81/0x1e0
[ 572.657977][T13174] ? lockdep_hardirqs_on+0x78/0x100
[ 572.658012][T13174] do_syscall_64+0x106/0xf80
[ 572.658045][T13174] ? clear_bhb_loop+0x40/0x90
[ 572.658076][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 572.658101][T13174] RIP: 0033:0x7fdc4559c799
[ 572.658120][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 572.658144][T13174] RSP: 002b:00007fdc464c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 572.658167][T13174] RAX: ffffffffffffffda RBX: 00007fdc45816180 RCX: 00007fdc4559c799
[ 572.658183][T13174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 572.658197][T13174] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 572.658212][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 572.658227][T13174] R13: 00007fdc45816218 R14: 00007fdc45816180 R15: 00007ffe13ade2f8
[ 572.658257][T13174]
[ 573.339449][T13183] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 573.354546][T13183] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 573.367361][T13183] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 573.389218][T13183] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 573.809245][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'.
[ 573.845051][T13195] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 574.178266][T13204] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 574.233039][T13190] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 574.297873][T13187] smpboot: CPU 1 is now offline
[ 574.956184][T13210] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1378'.
[ 575.031382][T13209] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1378'.
[ 575.422383][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 575.428634][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout
[ 575.435444][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 575.441510][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 576.106039][T13235] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 576.216917][T13235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 576.294537][T13235] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 576.362925][T13235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 576.924313][T13247] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 576.968125][T13247] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 577.003190][T13247] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 577.032964][T13247] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 577.137402][T13259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'.
[ 577.215594][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'.
[ 577.227886][T13262] FAULT_INJECTION: forcing a failure.
[ 577.227886][T13262] name failslab, interval 1, probability 0, space 0, times 0
[ 577.261112][T13258] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 577.278113][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.1.1388 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 577.278147][T13262] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 577.278156][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 577.278168][T13262] Call Trace:
[ 577.278175][T13262]
[ 577.278183][T13262] dump_stack_lvl+0x100/0x190
[ 577.278220][T13262] should_fail_ex.cold+0x5/0xa
[ 577.278245][T13262] should_failslab+0xc2/0x120
[ 577.278268][T13262] __kmalloc_cache_noprof+0x7a/0x6f0
[ 577.278295][T13262] ? wakeup_source_register+0x4c/0x3e0
[ 577.278337][T13262] wakeup_source_register+0x4c/0x3e0
[ 577.278373][T13262] ep_create_wakeup_source+0x1df/0x2e0
[ 577.278411][T13262] ? __pfx_ep_create_wakeup_source+0x10/0x10
[ 577.278450][T13262] ? do_epoll_ctl+0x1012/0x36a0
[ 577.278471][T13262] ? do_epoll_ctl+0x1012/0x36a0
[ 577.278498][T13262] do_epoll_ctl+0x1eee/0x36a0
[ 577.278531][T13262] ? __pfx_do_epoll_ctl+0x10/0x10
[ 577.278551][T13262] ? find_held_lock+0x2b/0x80
[ 577.278570][T13262] ? __might_fault+0xc5/0x140
[ 577.278602][T13262] ? __might_fault+0xc5/0x140
[ 577.278642][T13262] ? __x64_sys_epoll_ctl+0x15c/0x1e0
[ 577.278663][T13262] __x64_sys_epoll_ctl+0x15c/0x1e0
[ 577.278686][T13262] ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[ 577.278717][T13262] do_syscall_64+0x106/0xf80
[ 577.278747][T13262] ? clear_bhb_loop+0x40/0x90
[ 577.278773][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 577.278794][T13262] RIP: 0033:0x7fdc4559c799
[ 577.278818][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 577.278839][T13262] RSP: 002b:00007fdc46502028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 577.278859][T13262] RAX: ffffffffffffffda RBX: 00007fdc45815fa0 RCX: 00007fdc4559c799
[ 577.278874][T13262] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[ 577.278886][T13262] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 577.278899][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 577.278912][T13262] R13: 00007fdc45816038 R14: 00007fdc45815fa0 R15: 00007ffe13ade2f8
[ 577.278938][T13262]
[ 577.602300][T13254] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 577.628423][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'.
[ 578.425874][T13270] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 578.432553][T13270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 578.438904][T13270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 578.459664][T13270] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 579.183399][T13290] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 579.191234][T13290] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 579.222370][T13290] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 579.267459][T13290] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 579.837152][T13309] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 579.843749][T13309] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 579.955964][T13309] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 579.982553][T13309] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 580.553511][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'.
[ 580.581339][T13315] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 581.904466][T12806] Bluetooth: hci1: command 0x0c1a tx timeout
[ 581.910558][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 581.987182][T12806] Bluetooth: hci2: command 0x0c1a tx timeout
[ 582.062302][T12806] Bluetooth: hci3: command 0x0c1a tx timeout
[ 582.708508][T13353] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26
[ 584.210832][T13386] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 584.234269][T13386] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 584.255012][T13386] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 584.281344][T13386] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 584.469244][T13395] ------------[ cut here ]------------
[ 584.475463][T13395] IS_ERR(old)
[ 584.475526][T13395] WARNING: kernel/tracepoint.c:367 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.1.1413/13395
[ 584.490490][T13395] Modules linked in:
[ 584.494663][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.1.1413 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 584.505783][T13395] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 584.511079][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 584.523158][T13395] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10
[ 584.532070][T13395] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 20 dc 09 82 48 c7 c7 40 31 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00
[ 584.552512][T13395] RSP: 0018:ffffc90003d2f8a8 EFLAGS: 00010283
[ 584.558721][T13395] RAX: 0000000000007a4c RBX: 00000000fffffffe RCX: ffffc9000f429000
[ 584.566841][T13395] RDX: 0000000000080000 RSI: ffffffff8209ed16 RDI: ffff88802d51bd00
[ 584.575089][T13395] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 584.583234][T13395] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821007e0
[ 584.591270][T13395] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786da0
[ 584.599341][T13395] FS: 00007fdc464e16c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000
[ 584.608364][T13395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 584.615062][T13395] CR2: 00007ff63b01f000 CR3: 0000000048baa000 CR4: 00000000003526f0
[ 584.624871][T13395] Call Trace:
[ 584.629323][T13395]
[ 584.632361][T13395] tracing_stop_cmdline_record+0x66/0xa0
[ 584.638144][T13395] __ftrace_event_enable_disable+0x5c4/0x6f0
[ 584.644331][T13395] ftrace_event_set_open+0x224/0x380
[ 584.649749][T13395] do_dentry_open+0x6d8/0x1660
[ 584.654678][T13395] ? __pfx_ftrace_event_set_open+0x10/0x10
[ 584.660617][T13395] vfs_open+0x82/0x3f0
[ 584.664843][T13395] path_openat+0x208c/0x31a0
[ 584.669563][T13395] ? __pfx_path_openat+0x10/0x10
[ 584.674711][T13395] do_file_open+0x20e/0x430
[ 584.679325][T13395] ? __pfx_do_file_open+0x10/0x10
[ 584.684542][T13395] ? alloc_fd+0x476/0x790
[ 584.688997][T13395] ? do_getname+0x191/0x390
[ 584.693681][T13395] do_sys_openat2+0x10d/0x1e0
[ 584.698484][T13395] ? __pfx_do_sys_openat2+0x10/0x10
[ 584.704434][T13395] ? do_raw_spin_lock+0x128/0x260
[ 584.709754][T13395] __x64_sys_openat+0x12d/0x210
[ 584.714797][T13395] ? __pfx___x64_sys_openat+0x10/0x10
[ 584.721235][T13395] do_syscall_64+0x106/0xf80
[ 584.726658][T13395] ? clear_bhb_loop+0x40/0x90
[ 584.731392][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 584.737354][T13395] RIP: 0033:0x7fdc4559c799
[ 584.741802][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 584.761584][T13395] RSP: 002b:00007fdc464e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 584.770078][T13395] RAX: ffffffffffffffda RBX: 00007fdc45816090 RCX: 00007fdc4559c799
[ 584.778121][T13395] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 584.786191][T13395] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 584.794254][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 584.802323][T13395] R13: 00007fdc45816128 R14: 00007fdc45816090 R15: 00007ffe13ade2f8
[ 584.810359][T13395]
[ 584.813528][T13395] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 584.820852][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.1.1413 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 584.831800][T13395] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 584.836988][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 584.847040][T13395] Call Trace:
[ 584.850318][T13395]
[ 584.853264][T13395] dump_stack_lvl+0x100/0x190
[ 584.857957][T13395] vpanic+0x552/0x970
[ 584.861937][T13395] ? __pfx_vpanic+0x10/0x10
[ 584.866468][T13395] panic+0xd1/0xe0
[ 584.870188][T13395] ? __pfx_panic+0x10/0x10
[ 584.874620][T13395] check_panic_on_warn.cold+0x19/0x34
[ 584.880011][T13395] ? tracepoint_probe_unregister+0x837/0xd10
[ 584.885993][T13395] __warn.cold+0x191/0x348
[ 584.890413][T13395] __report_bug+0x296/0x3d0
[ 584.895003][T13395] ? tracepoint_probe_unregister+0x837/0xd10
[ 584.900997][T13395] ? __pfx___report_bug+0x10/0x10
[ 584.906039][T13395] ? rcu_is_watching+0x12/0xc0
[ 584.910813][T13395] ? trace_contention_end+0x140/0x180
[ 584.916195][T13395] ? __mutex_lock+0x26a/0x1b90
[ 584.920972][T13395] ? tracepoint_probe_unregister+0x31/0xd10
[ 584.926869][T13395] ? tracepoint_probe_unregister+0x837/0xd10
[ 584.932849][T13395] report_bug+0xb2/0x220
[ 584.937107][T13395] ? tracepoint_probe_unregister+0x837/0xd10
[ 584.943093][T13395] handle_bug+0x16a/0x2a0
[ 584.947423][T13395] exc_invalid_op+0x17/0x50
[ 584.951949][T13395] asm_exc_invalid_op+0x1a/0x20
[ 584.956808][T13395] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10
[ 584.963409][T13395] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 20 dc 09 82 48 c7 c7 40 31 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00
[ 584.983016][T13395] RSP: 0018:ffffc90003d2f8a8 EFLAGS: 00010283
[ 584.989087][T13395] RAX: 0000000000007a4c RBX: 00000000fffffffe RCX: ffffc9000f429000
[ 584.997067][T13395] RDX: 0000000000080000 RSI: ffffffff8209ed16 RDI: ffff88802d51bd00
[ 585.005054][T13395] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 585.013049][T13395] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821007e0
[ 585.021024][T13395] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786da0
[ 585.028998][T13395] ? __pfx_probe_sched_switch+0x10/0x10
[ 585.034560][T13395] ? tracepoint_probe_unregister+0x836/0xd10
[ 585.040553][T13395] ? tracepoint_probe_unregister+0x836/0xd10
[ 585.046537][T13395] tracing_stop_cmdline_record+0x66/0xa0
[ 585.052180][T13395] __ftrace_event_enable_disable+0x5c4/0x6f0
[ 585.058188][T13395] ftrace_event_set_open+0x224/0x380
[ 585.063480][T13395] do_dentry_open+0x6d8/0x1660
[ 585.068242][T13395] ? __pfx_ftrace_event_set_open+0x10/0x10
[ 585.074070][T13395] vfs_open+0x82/0x3f0
[ 585.078157][T13395] path_openat+0x208c/0x31a0
[ 585.082756][T13395] ? __pfx_path_openat+0x10/0x10
[ 585.087704][T13395] do_file_open+0x20e/0x430
[ 585.092246][T13395] ? __pfx_do_file_open+0x10/0x10
[ 585.097430][T13395] ? alloc_fd+0x476/0x790
[ 585.101775][T13395] ? do_getname+0x191/0x390
[ 585.106289][T13395] do_sys_openat2+0x10d/0x1e0
[ 585.110974][T13395] ? __pfx_do_sys_openat2+0x10/0x10
[ 585.116187][T13395] ? do_raw_spin_lock+0x128/0x260
[ 585.121229][T13395] __x64_sys_openat+0x12d/0x210
[ 585.126091][T13395] ? __pfx___x64_sys_openat+0x10/0x10
[ 585.131480][T13395] do_syscall_64+0x106/0xf80
[ 585.136078][T13395] ? clear_bhb_loop+0x40/0x90
[ 585.140760][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 585.146655][T13395] RIP: 0033:0x7fdc4559c799
[ 585.151069][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 585.170674][T13395] RSP: 002b:00007fdc464e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 585.179113][T13395] RAX: ffffffffffffffda RBX: 00007fdc45816090 RCX: 00007fdc4559c799
[ 585.187106][T13395] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 585.195080][T13395] RBP: 00007fdc45632c99 R08: 0000000000000000 R09: 0000000000000000
[ 585.203058][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 585.211025][T13395] R13: 00007fdc45816128 R14: 00007fdc45816090 R15: 00007ffe13ade2f8
[ 585.219012][T13395]
[ 585.222634][T13395] Kernel Offset: disabled
[ 585.226972][T13395] Rebooting in 86400 seconds..