last executing test programs: 10.086466175s ago: executing program 0 (id=438): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/eql/queues/tx-0/tx_timeout\x00', 0x1279c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) preadv$auto(r0, &(0x7f00000000c0)={0x0, 0x4008000}, 0x1d4, 0x2000000000f, 0x200000001) mmap$auto(0x0, 0x20009, 0xdf, 0xebe, r0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x8000007b) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\n\x00(\xa2\b\x00\x00\x00\x00\x00\x00\x00E\t\x00\x00\x00\xd4\xf2\xdf\x80\x9c\x87N\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7y\xe1\xff\xff\xc4\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9)\x0f`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xa2\xef\x0e\\\x8a\x15\xcb\xa9\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alo\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\a\xac\xa0\xc7\xf7\'\x8d\xab\xaeC5\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/505, &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r3, 0xc008aec1, &(0x7f0000000040)={0x3, 0x0, [{0xa30f, 0x68, 0x4, 0x80, 0xe8, 0x8, 0x7}, {0x1, 0x7, 0xfffffff8, 0x7, 0x6526, 0x8, 0x6}, {0x3a0, 0x2, 0x2362, 0x4b, 0xb8, 0x7ff, 0x1}, {0x400, 0x3, 0x6, 0x5, 0x1000, 0x3, 0x32e}, {0x9, 0x5, 0x3, 0x0, 0x610, 0xd3, 0xa}, {0x8cd, 0x3, 0xffffffb3, 0xfffff309, 0x7, 0x3, 0x4}]}) 9.056841571s ago: executing program 0 (id=443): mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba87e8000"}, 0x1c) madvise$auto(0xffffffffffff78f4, 0x3, 0x401) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.15/usb39/power/wakeup_active_count\x00', 0x10000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfffffffe, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xd, 0x0, 0xb0cd, 0x0, 0x1fc, 0xffffffbd}, 0x895}, 0x0, 0x200000) r2 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='z'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4080) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/246, 0xf6) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) write$auto(r4, &(0x7f0000000100)='/sys/kernel/debug\xd4\x00\x00\x00/vkms/Writeback-1/edid_override\x00&\x9c\xabdj\xaa\x87\xe6[J!y\x80r', 0x80) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r7 = socket(0x2, 0x3, 0x100) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r7) write$auto(r3, 0x0, 0x6) 7.916358645s ago: executing program 3 (id=445): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000009c0), 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_TIOCGEXCL(r0, 0x80045440, &(0x7f0000000000)=0x1) select$auto(0xe, &(0x7f00000000c0)={[0xc04c, 0x1, 0x6, 0x3, 0x400, 0x3, 0x9, 0x1, 0x1, 0x407, 0x1, 0x7, 0x3, 0x0, 0x2, 0x1]}, 0x0, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x400000e, 0x100000000007) 7.91264531s ago: executing program 0 (id=452): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7}, 0x7) ioctl$auto_KVM_GET_MSRS(r1, 0xc018aec0, &(0x7f0000000040)={0x79}) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddb"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212bbd7000e3dbdf2507000000", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, 0x0, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r7, 0x0, 0xfffffdef) 6.692131063s ago: executing program 0 (id=446): close_range$auto(0x2, 0x8, 0x0) r0 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400000400008, 0xdb, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20005, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x8000000) unshare$auto(0xfffffffffffffffe) semget$auto(0x0, 0x33, 0x5) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) unshare$auto(0x80003fe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = socket(0x2, 0x1, 0x6) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x1a, 0x8000) setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x4041, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r6, 0x64800000000, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000780)=@bpf_attr_5={@target_fd=r5, r1, 0x4, 0xcd, r2, @relative_id, 0x253b6b8b}, 0xa3) 921.838524ms ago: executing program 1 (id=463): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x4}}, 0x6a) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup$auto(r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x6000000000, 0x100000004) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xc) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x2020009, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, 0x0, 0x20000850) 580.791189ms ago: executing program 3 (id=464): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/current_tracer\x00', 0x8000, 0x0) getsockopt$auto_SO_TXREHASH(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0x9) madvise$auto(0x0, 0x200007, 0x19) msgctl$auto(0x0, 0x1, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0) 519.854997ms ago: executing program 1 (id=465): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x15, 0x5, 0x0) fcntl$auto_F_GETLK(r1, 0x5, 0xd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$auto_FICLONE(r0, 0x40049409, r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) pwrite64$auto(r3, 0x0, 0x9, 0xfffd) readv$auto(0x3, &(0x7f0000000000)={&(0x7f0000000100), 0x12000}, 0x4) 3.713248ms ago: executing program 2 (id=466): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) shmat$auto(0x0, 0x0, 0xfffffffa) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x40044620, 0x0) 0s ago: executing program 0 (id=467): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28c40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x154) open(0x0, 0x22240, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) io_uring_setup$auto(0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) write$auto(r0, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 74.085822][ T5615] cgroup: Unknown subsys name 'net' [ 74.230758][ T5615] cgroup: Unknown subsys name 'cpuset' [ 74.239836][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.702871][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.752378][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.763274][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.772784][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.781685][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.789883][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.820945][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.831040][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.838955][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.848576][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.857767][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.901576][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.910322][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.918162][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.938355][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.946475][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.983580][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.992561][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.004443][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.013858][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.021872][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.393110][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.400785][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.408200][ T5626] bridge_slave_0: entered allmulticast mode [ 79.415950][ T5626] bridge_slave_0: entered promiscuous mode [ 79.449627][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.456744][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.464125][ T5626] bridge_slave_1: entered allmulticast mode [ 79.471309][ T5626] bridge_slave_1: entered promiscuous mode [ 79.559781][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.567428][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.574605][ T5635] bridge_slave_0: entered allmulticast mode [ 79.581956][ T5635] bridge_slave_0: entered promiscuous mode [ 79.592731][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.608487][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.615642][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.623257][ T5630] bridge_slave_0: entered allmulticast mode [ 79.630612][ T5630] bridge_slave_0: entered promiscuous mode [ 79.639607][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.646769][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.654019][ T5635] bridge_slave_1: entered allmulticast mode [ 79.661165][ T5635] bridge_slave_1: entered promiscuous mode [ 79.670202][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.690525][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.698634][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.705868][ T5630] bridge_slave_1: entered allmulticast mode [ 79.713729][ T5630] bridge_slave_1: entered promiscuous mode [ 79.779410][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.786614][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.793892][ T5638] bridge_slave_0: entered allmulticast mode [ 79.800946][ T5638] bridge_slave_0: entered promiscuous mode [ 79.817684][ T5628] Bluetooth: hci0: command tx timeout [ 79.823983][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.835825][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.847296][ T5626] team0: Port device team_slave_0 added [ 79.853546][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.861228][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.868496][ T5638] bridge_slave_1: entered allmulticast mode [ 79.875455][ T5638] bridge_slave_1: entered promiscuous mode [ 79.885224][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.896731][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.905873][ T5628] Bluetooth: hci1: command tx timeout [ 79.908646][ T5626] team0: Port device team_slave_1 added [ 79.967590][ T5628] Bluetooth: hci2: command tx timeout [ 79.994528][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.001820][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.028014][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.041951][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.053280][ T5630] team0: Port device team_slave_0 added [ 80.058944][ T5628] Bluetooth: hci3: command tx timeout [ 80.062150][ T5635] team0: Port device team_slave_0 added [ 80.071015][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.078248][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.104414][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.117746][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.132927][ T5630] team0: Port device team_slave_1 added [ 80.140295][ T5635] team0: Port device team_slave_1 added [ 80.221607][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.228860][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.254830][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.269260][ T5638] team0: Port device team_slave_0 added [ 80.276482][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.283525][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.310281][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.323234][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.330264][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.356612][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.376470][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.383490][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.409624][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.422345][ T5638] team0: Port device team_slave_1 added [ 80.440801][ T5626] hsr_slave_0: entered promiscuous mode [ 80.447712][ T5626] hsr_slave_1: entered promiscuous mode [ 80.521452][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.528649][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.554885][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.580675][ T5630] hsr_slave_0: entered promiscuous mode [ 80.586984][ T5630] hsr_slave_1: entered promiscuous mode [ 80.593305][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.599208][ T5630] Cannot create hsr debugfs directory [ 80.615567][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.622613][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.648678][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.674954][ T5635] hsr_slave_0: entered promiscuous mode [ 80.681265][ T5635] hsr_slave_1: entered promiscuous mode [ 80.687499][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 80.693271][ T5635] Cannot create hsr debugfs directory [ 80.842545][ T5638] hsr_slave_0: entered promiscuous mode [ 80.849163][ T5638] hsr_slave_1: entered promiscuous mode [ 80.855244][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 80.861060][ T5638] Cannot create hsr debugfs directory [ 81.166175][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.180221][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.188611][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.199639][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.218273][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.228749][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.260423][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.271622][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.341912][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.352691][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.363529][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.373308][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.381326][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.390875][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.398822][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.407947][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.480575][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.491537][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.499771][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.510233][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.519031][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.529343][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.548340][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.559499][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.638401][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.649043][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.656678][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.666342][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.680472][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.689916][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.708280][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.718628][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.772983][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.859071][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.887807][ T5628] Bluetooth: hci0: command tx timeout [ 81.889813][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.907399][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.914652][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.936811][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.943979][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.967971][ T5628] Bluetooth: hci1: command tx timeout [ 81.974677][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.996666][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.021878][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.028988][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.047676][ T5628] Bluetooth: hci2: command tx timeout [ 82.063071][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.091367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.098569][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.110955][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.118071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.127331][ T5628] Bluetooth: hci3: command tx timeout [ 82.141176][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.148296][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.159721][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.251829][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.287072][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.294215][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.339530][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.346787][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.143689][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.266595][ T5626] veth0_vlan: entered promiscuous mode [ 83.291820][ T5626] veth1_vlan: entered promiscuous mode [ 83.359422][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.389716][ T5626] veth0_macvtap: entered promiscuous mode [ 83.406377][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.432731][ T5626] veth1_macvtap: entered promiscuous mode [ 83.498231][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.516408][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.526619][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.554686][ T5635] veth0_vlan: entered promiscuous mode [ 83.569890][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.588269][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.598217][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.625778][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.644662][ T5635] veth1_vlan: entered promiscuous mode [ 83.662035][ T5630] veth0_vlan: entered promiscuous mode [ 83.742294][ T5630] veth1_vlan: entered promiscuous mode [ 83.781404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.829117][ T5635] veth0_macvtap: entered promiscuous mode [ 83.854922][ T5638] veth0_vlan: entered promiscuous mode [ 83.865725][ T5635] veth1_macvtap: entered promiscuous mode [ 83.884718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.895581][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.902317][ T5638] veth1_vlan: entered promiscuous mode [ 83.914973][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.940045][ T5630] veth0_macvtap: entered promiscuous mode [ 83.955772][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.966776][ T5630] veth1_macvtap: entered promiscuous mode [ 83.977845][ T5628] Bluetooth: hci0: command tx timeout [ 84.024160][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.033430][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.047900][ T5628] Bluetooth: hci1: command tx timeout [ 84.062002][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.063611][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.071471][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127499][ T5628] Bluetooth: hci2: command tx timeout [ 84.146552][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.164223][ T5638] veth0_macvtap: entered promiscuous mode [ 84.207916][ T5628] Bluetooth: hci3: command tx timeout [ 84.221283][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.261637][ T5638] veth1_macvtap: entered promiscuous mode [ 84.332508][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.346168][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378436][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.387735][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.404192][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.418320][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.460474][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.534552][ T5778] ubi0: attaching mtd0 [ 84.539691][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.562047][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.573542][ T5778] ubi0: scanning is finished [ 84.575296][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.586405][ T5778] ubi0: empty MTD device detected [ 84.612924][ T187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682180][ T187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.697827][ T187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.746670][ T187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.853930][ T5778] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 84.874375][ T5778] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 84.906396][ T5778] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 84.932427][ T5778] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 84.952481][ T5778] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 85.027106][ T5778] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 85.105300][ T5778] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4246816709 [ 85.128577][ T5778] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 85.187257][ T5781] ubi0: background thread "ubi_bgt0d" started, PID 5781 [ 85.309221][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.349465][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.614962][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.641110][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.756438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.781617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.880699][ T5788] vivid-007: ================= START STATUS ================= [ 85.896635][ T5788] vivid-007: Generate PTS: true [ 85.905282][ T5788] vivid-007: Generate SCR: true [ 85.916812][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.918822][ T5788] tpg source WxH: 320x240 (Y'CbCr) [ 85.958924][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.961385][ T5788] tpg field: 1 [ 85.999631][ T5788] tpg crop: (0,0)/320x240 [ 86.020865][ T5788] tpg compose: (0,0)/320x240 [ 86.034047][ T5788] tpg colorspace: 8 [ 86.050121][ T5628] Bluetooth: hci0: command tx timeout [ 86.065109][ T5788] tpg transfer function: 0/0 [ 86.088105][ T5788] tpg Y'CbCr encoding: 0/0 [ 86.113658][ T5788] tpg quantization: 0/0 [ 86.126615][ T5788] tpg RGB range: 0/2 [ 86.131172][ T5628] Bluetooth: hci1: command tx timeout [ 86.148746][ T5788] vivid-007: ================== END STATUS ================== [ 86.207893][ T5628] Bluetooth: hci2: command tx timeout [ 86.287515][ T5628] Bluetooth: hci3: command tx timeout [ 88.467679][ T5842] ubi: mtd0 is already attached to ubi0 [ 88.495147][ T5842] ubi0: detaching mtd0 [ 88.533603][ T5842] ubi0: mtd0 is detached [ 89.503156][ T5852] process 'syz.1.9' launched ':,' with NULL argv: empty string added [ 89.595138][ T5852] mmap: syz.1.9 (5852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.643674][ T5852] ERROR: Out of memory at tomoyo_memory_ok. [ 91.556477][ T5881] Zero length message leads to an empty skb [ 91.832895][ T188] cfg80211: failed to load regulatory.db [ 92.447191][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.447865][ T5866] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.023126][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.139602][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.164836][ T5866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.180541][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.223862][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.306678][ T5894] syz.2.17 (5894) used greatest stack depth: 16600 bytes left [ 93.340453][ T5866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.358859][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.414789][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.444260][ T5866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.461585][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.536239][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.303269][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.527715][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.167635][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.417240][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.473146][ T5928] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 95.487428][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.530349][ T5928] netlink: 1 bytes leftover after parsing attributes in process `syz.1.24'. [ 96.356459][ T5937] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 96.607218][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.248232][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.487208][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.570046][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.338252][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.437279][ T5980] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 99.568991][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.647268][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.874863][ T6021] Ignoring unsupported numa_zonelist_order value: [ 101.899949][ T6021] random: crng reseeded on system resumption [ 102.729288][ T5628] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 103.048682][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 103.086323][ T6039] veth1_macvtap: left promiscuous mode [ 103.121152][ T6039] macsec0: entered promiscuous mode [ 103.135402][ T6039] macsec0: entered allmulticast mode [ 104.454423][ T6055] netlink: 342 bytes leftover after parsing attributes in process `syz.1.48'. [ 104.561851][ T6055] FAULT_INJECTION: forcing a failure. [ 104.561851][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 104.625063][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 104.625086][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 104.625102][ T6055] Call Trace: [ 104.625108][ T6055] [ 104.625114][ T6055] dump_stack_lvl+0x100/0x190 [ 104.625139][ T6055] should_fail_ex.cold+0x5/0xa [ 104.625160][ T6055] should_failslab+0xc2/0x120 [ 104.625196][ T6055] __kmalloc_noprof+0xfc/0x820 [ 104.625228][ T6055] ? tnode_new+0x2f7/0x350 [ 104.625270][ T6055] tnode_new+0x2f7/0x350 [ 104.625307][ T6055] resize+0xa60/0x22f0 [ 104.625346][ T6055] ? lockdep_hardirqs_on+0x78/0x100 [ 104.625403][ T6055] replace+0x343/0x4e0 [ 104.625444][ T6055] resize+0x1463/0x22f0 [ 104.625506][ T6055] fib_insert_alias+0x9b3/0xe30 [ 104.625555][ T6055] fib_trie_unmerge+0x289/0xbd0 [ 104.625603][ T6055] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 104.625642][ T6055] ? __pfx___mutex_lock+0x10/0x10 [ 104.625681][ T6055] fib_unmerge+0xee/0x510 [ 104.625723][ T6055] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 104.625769][ T6055] fib4_rule_configure+0x383/0x10c0 [ 104.625808][ T6055] fib_newrule+0x356/0x1ed0 [ 104.625854][ T6055] ? rcu_is_watching+0x12/0xc0 [ 104.625891][ T6055] ? __pfx_fib_newrule+0x10/0x10 [ 104.625932][ T6055] ? kfree_skbmem+0x180/0x210 [ 104.625971][ T6055] ? kmem_cache_free+0x127/0x6b0 [ 104.626013][ T6055] ? skb_release_data+0x6ca/0x8e0 [ 104.626073][ T6055] ? find_held_lock+0x2b/0x80 [ 104.626104][ T6055] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 104.626138][ T6055] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 104.626175][ T6055] ? __pfx_fib_nl_newrule+0x10/0x10 [ 104.626217][ T6055] rtnetlink_rcv_msg+0x95e/0xe90 [ 104.626255][ T6055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.626300][ T6055] ? ref_tracker_free+0x37e/0x6c0 [ 104.626343][ T6055] netlink_rcv_skb+0x159/0x420 [ 104.626386][ T6055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.626421][ T6055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.626472][ T6055] ? netlink_deliver_tap+0x1ae/0xcc0 [ 104.626531][ T6055] netlink_unicast+0x585/0x850 [ 104.626583][ T6055] ? __pfx_netlink_unicast+0x10/0x10 [ 104.626641][ T6055] netlink_sendmsg+0x8b0/0xda0 [ 104.626689][ T6055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.626737][ T6055] ? apparmor_socket_sendmsg+0x15b/0x270 [ 104.626788][ T6055] ____sys_sendmsg+0xa4d/0xbe0 [ 104.626824][ T6055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.626865][ T6055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.626907][ T6055] ? rcu_is_watching+0x12/0xc0 [ 104.626924][ T6055] ? ___sys_sendmsg+0x19d/0x1e0 [ 104.626943][ T6055] ? kfree+0x1e5/0x6c0 [ 104.626967][ T6055] ___sys_sendmsg+0x190/0x1e0 [ 104.626993][ T6055] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.627016][ T6055] ? futex_hash+0x311/0x400 [ 104.627078][ T6055] ? __pfx___might_resched+0x10/0x10 [ 104.627124][ T6055] __sys_sendmmsg+0x20c/0x440 [ 104.627158][ T6055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.627188][ T6055] ? __fget_files+0x215/0x3d0 [ 104.627230][ T6055] ? __pfx_do_futex+0x10/0x10 [ 104.627254][ T6055] ? xfd_validate_state+0x129/0x190 [ 104.627274][ T6055] __x64_sys_sendmmsg+0x9c/0x100 [ 104.627292][ T6055] ? lockdep_hardirqs_on+0x78/0x100 [ 104.627314][ T6055] do_syscall_64+0x115/0x840 [ 104.627327][ T6055] ? clear_bhb_loop+0x40/0x90 [ 104.627345][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.627362][ T6055] RIP: 0033:0x7f12dcb9de59 [ 104.627384][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.627402][ T6055] RSP: 002b:00007f12dd9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.627424][ T6055] RAX: ffffffffffffffda RBX: 00007f12dce26090 RCX: 00007f12dcb9de59 [ 104.627442][ T6055] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 104.627458][ T6055] RBP: 00007f12dcc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 104.627472][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.627488][ T6055] R13: 00007f12dce26128 R14: 00007f12dce26090 R15: 00007fff8a9f2418 [ 104.627525][ T6055] [ 106.724482][ T5628] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 106.735498][ T5628] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 107.176400][ T6080] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.393726][ T6086] vivid-007: ================= START STATUS ================= [ 107.411154][ T6086] vivid-007: Enable Output Cropping: true [ 107.445645][ T6086] vivid-007: Enable Output Composing: true [ 107.508044][ T6086] vivid-007: Enable Output Scaler: true [ 107.622635][ T6086] vivid-007: Tx RGB Quantization Range: Automatic [ 107.738190][ T6086] vivid-007: Transmit Mode: HDMI [ 107.795002][ T6086] vivid-007: Hotplug Present: 0x00000000 [ 107.839639][ T6086] vivid-007: RxSense Present: 0x00000000 [ 107.882615][ T6086] vivid-007: EDID Present: 0x00000000 [ 107.979948][ T6086] vivid-007: ================== END STATUS ================== [ 108.373772][ T6088] syz.0.53(6088): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 109.058884][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.460954][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.803139][ T6112] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.58'. [ 109.919000][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.092647][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.276158][ T6121] Ignoring unsupported numa_zonelist_order value: [ 110.295116][ T6121] random: crng reseeded on system resumption [ 114.040955][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 115.930405][ T6209] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.107806][ T6211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.416608][ T6218] netlink: 342 bytes leftover after parsing attributes in process `syz.1.78'. [ 116.531047][ T6196] Process accounting resumed [ 118.073808][ T6237] FAULT_INJECTION: forcing a failure. [ 118.073808][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 118.089432][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) [ 118.089470][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 118.089487][ T6237] Call Trace: [ 118.089496][ T6237] [ 118.089506][ T6237] dump_stack_lvl+0x100/0x190 [ 118.089568][ T6237] should_fail_ex.cold+0x5/0xa [ 118.089601][ T6237] should_failslab+0xc2/0x120 [ 118.089639][ T6237] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 118.089675][ T6237] ? __d_alloc+0x35/0xa50 [ 118.089709][ T6237] __d_alloc+0x35/0xa50 [ 118.089740][ T6237] d_alloc+0x4a/0x1e0 [ 118.089770][ T6237] lookup_one_qstr_excl+0x171/0x250 [ 118.089809][ T6237] start_dirop+0x59/0xb0 [ 118.089851][ T6237] simple_start_creating+0xf9/0x110 [ 118.089897][ T6237] ? __pfx_simple_start_creating+0x10/0x10 [ 118.089950][ T6237] nfsd_mkdir+0xf6/0x460 [ 118.089993][ T6237] nfsd_fill_super+0x3f9/0x560 [ 118.090043][ T6237] ? __pfx_nfsd_fill_super+0x10/0x10 [ 118.090080][ T6237] get_tree_keyed+0x10e/0x1d0 [ 118.090124][ T6237] vfs_get_tree+0x92/0x320 [ 118.090161][ T6237] path_mount+0x7d0/0x23d0 [ 118.090198][ T6237] ? __pfx_path_mount+0x10/0x10 [ 118.090232][ T6237] ? putname+0xb1/0x110 [ 118.090257][ T6237] ? kmem_cache_free+0x127/0x6b0 [ 118.090312][ T6237] ? __x64_sys_mount+0x293/0x310 [ 118.090338][ T6237] __x64_sys_mount+0x293/0x310 [ 118.090366][ T6237] ? __pfx___x64_sys_mount+0x10/0x10 [ 118.090405][ T6237] do_syscall_64+0x115/0x840 [ 118.090428][ T6237] ? clear_bhb_loop+0x40/0x90 [ 118.090461][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.090488][ T6237] RIP: 0033:0x7f8c6d59de59 [ 118.090517][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.090543][ T6237] RSP: 002b:00007f8c6e4c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.090569][ T6237] RAX: ffffffffffffffda RBX: 00007f8c6d825fa0 RCX: 00007f8c6d59de59 [ 118.090585][ T6237] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 118.090600][ T6237] RBP: 00007f8c6d633e6f R08: 0000000000000000 R09: 0000000000000000 [ 118.090615][ T6237] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 118.090629][ T6237] R13: 00007f8c6d826038 R14: 00007f8c6d825fa0 R15: 00007ffc257dfc78 [ 118.090666][ T6237] [ 120.120143][ T30] audit: type=1800 audit(4294967301.250:2): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.88" name="members" dev="configfs" ino=10154 res=0 errno=0 [ 120.405968][ T6280] netlink: 'syz.2.90': attribute type 4 has an invalid length. [ 121.111351][ T6290] vhci_hcd vhci_hcd.1: invalid port number 16 [ 121.129697][ T6290] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 121.201227][ T6290] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.891836][ T6304] netlink: 25 bytes leftover after parsing attributes in process `syz.0.96'. [ 123.744240][ T6329] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.795463][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 123.824196][ T6329] netlink: 354 bytes leftover after parsing attributes in process `syz.0.101'. [ 124.919100][ T6347] FAULT_INJECTION: forcing a failure. [ 124.919100][ T6347] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.998360][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 124.998399][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 124.998416][ T6347] Call Trace: [ 124.998424][ T6347] [ 124.998434][ T6347] dump_stack_lvl+0x100/0x190 [ 124.998473][ T6347] should_fail_ex.cold+0x5/0xa [ 124.998508][ T6347] get_futex_key+0x1d2/0x14f0 [ 124.998558][ T6347] ? __pfx_get_futex_key+0x10/0x10 [ 124.998603][ T6347] ? trace_ignore_this_task+0xc3/0x100 [ 124.998638][ T6347] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 124.998684][ T6347] futex_wait_setup+0x91/0x540 [ 124.998730][ T6347] __futex_wait+0x19f/0x300 [ 124.998767][ T6347] ? __pfx___futex_wait+0x10/0x10 [ 124.998799][ T6347] ? __pfx_try_to_wake_up+0x10/0x10 [ 124.998827][ T6347] ? futex_hash+0x311/0x400 [ 124.998873][ T6347] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.998914][ T6347] ? find_held_lock+0x2b/0x80 [ 124.998946][ T6347] ? futex_wake+0x4ea/0x5e0 [ 124.998988][ T6347] futex_wait+0xe6/0x370 [ 124.999023][ T6347] ? __pfx_futex_wait+0x10/0x10 [ 124.999068][ T6347] ? madvise_unlock+0xa9/0x220 [ 124.999111][ T6347] do_futex+0x265/0x440 [ 124.999141][ T6347] ? __pfx_do_futex+0x10/0x10 [ 124.999180][ T6347] __x64_sys_futex+0x34f/0x4d0 [ 124.999221][ T6347] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.999265][ T6347] do_syscall_64+0x115/0x840 [ 124.999291][ T6347] ? clear_bhb_loop+0x40/0x90 [ 124.999325][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.999355][ T6347] RIP: 0033:0x7f12dcb9de59 [ 124.999378][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.999403][ T6347] RSP: 002b:00007f12dda0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.999429][ T6347] RAX: ffffffffffffffda RBX: 00007f12dce25fa8 RCX: 00007f12dcb9de59 [ 124.999446][ T6347] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f12dce25fa8 [ 124.999460][ T6347] RBP: 00007f12dce25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 124.999475][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.999489][ T6347] R13: 00007f12dce26038 R14: 00007fff8a9f2330 R15: 00007fff8a9f2418 [ 124.999524][ T6347] [ 125.325601][ T6357] nbd: must specify at least one socket [ 126.922287][ T6374] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by "Wx@+Y{}mtpK:+gQ5@$雕&w~ILqb>-/&?v/aITDMc;#\x07zcةsͥHlJIzmڌ=Ep`˘c~\x0ctwr1)lF`Э\x0b|lԲRnZ1HJA ?yN.\x1bpBkBKYO?M [ 127.487637][ T5628] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 128.277885][ T6386] random: crng reseeded on system resumption [ 129.347239][ T6400] ======================================================= [ 129.347239][ T6400] WARNING: The mand mount option has been deprecated and [ 129.347239][ T6400] and is ignored by this kernel. Remove the mand [ 129.347239][ T6400] option from the mount to silence this warning. [ 129.347239][ T6400] ======================================================= [ 129.696715][ T6400] zswap: compressor not available [ 129.959384][ T6420] random: crng reseeded on system resumption [ 131.133925][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 131.166152][ T6433] netlink: 354 bytes leftover after parsing attributes in process `syz.0.122'. [ 132.338765][ T6455] random: crng reseeded on system resumption [ 132.776547][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783785][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.805401][ T6455] hub 1-0:1.0: USB hub found [ 132.829139][ T6460] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 132.880512][ T6455] hub 1-0:1.0: 1 port detected [ 132.944285][ T6460] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.979387][ T6460] raw: 00fff00000000000 dead000000000040 ffff88802a15e000 0000000000000000 [ 133.027660][ T6460] raw: ffff888078000f00 0000000000000001 00000001ffffffff 0000000000000000 [ 133.059323][ T6460] page dumped because: unmovable page [ 133.072180][ T6460] page_owner tracks the page as allocated [ 133.143507][ T6460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5289, tgid 5289 (dhcpcd), ts 53719473769, free_ts 46589204333 [ 133.177085][ T6460] post_alloc_hook+0xfd/0x120 [ 133.197100][ T6460] get_page_from_freelist+0xf48/0x3530 [ 133.207155][ T6460] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 133.224765][ T6460] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 133.242707][ T6460] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 133.253284][ T6460] page_pool_alloc_netmems+0xc4/0x1a0 [ 133.258877][ T6460] page_pool_alloc_frag_netmem+0x21d/0xa10 [ 133.264858][ T6460] try_fill_recv+0x909/0x2950 [ 133.269692][ T6460] virtnet_open+0x2d5/0x9a0 [ 133.274346][ T6460] __dev_open+0x3ad/0x8f0 [ 133.279077][ T6460] __dev_change_flags+0x596/0x850 [ 133.284234][ T6460] netif_change_flags+0x8d/0x160 [ 133.289411][ T6460] dev_change_flags+0xba/0x260 [ 133.294320][ T6460] devinet_ioctl+0x110b/0x1f10 [ 133.299268][ T6460] inet_ioctl+0x3aa/0x3f0 [ 133.303763][ T6460] sock_do_ioctl+0x118/0x280 [ 133.320559][ T6460] page last free pid 15 tgid 15 stack trace: [ 133.339107][ T6460] __free_frozen_pages+0x79f/0x1090 [ 133.357127][ T6460] tlb_remove_table_rcu+0x2cf/0x380 [ 133.376060][ T6460] rcu_core+0x5a2/0x10d0 [ 133.392124][ T6460] handle_softirqs+0x1ea/0x9b0 [ 133.411102][ T6460] run_ksoftirqd+0x38/0x60 [ 133.426534][ T6460] smpboot_thread_fn+0x3d3/0xaa0 [ 133.442562][ T6460] kthread+0x370/0x450 [ 133.451239][ T6460] ret_from_fork+0x72b/0xd50 [ 133.460541][ T6460] ret_from_fork_asm+0x1a/0x30 [ 134.462490][ T6490] Invalid ELF header magic: != ELF [ 135.208706][ T6492] netlink: 350 bytes leftover after parsing attributes in process `syz.3.134'. [ 136.028562][ T6523] FAULT_INJECTION: forcing a failure. [ 136.028562][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 136.059168][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.0.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.059215][ T6523] Tainted: [L]=SOFTLOCKUP [ 136.059225][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 136.059241][ T6523] Call Trace: [ 136.059250][ T6523] [ 136.059261][ T6523] dump_stack_lvl+0x100/0x190 [ 136.059298][ T6523] should_fail_ex.cold+0x5/0xa [ 136.059332][ T6523] should_failslab+0xc2/0x120 [ 136.059357][ T6523] __kmalloc_cache_noprof+0x91/0x6c0 [ 136.059381][ T6523] ? ima_add_digest_entry+0x53/0x5b0 [ 136.059408][ T6523] ima_add_digest_entry+0x53/0x5b0 [ 136.059432][ T6523] ima_add_template_entry+0x45e/0x8b0 [ 136.059459][ T6523] ? __pfx_ima_add_template_entry+0x10/0x10 [ 136.059485][ T6523] ? ima_calc_field_array_hash+0x378/0x440 [ 136.059507][ T6523] ima_store_template+0xda/0x150 [ 136.059525][ T6523] ima_store_measurement+0x21c/0x5b0 [ 136.059544][ T6523] ? __pfx_ima_store_measurement+0x10/0x10 [ 136.059569][ T6523] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 136.059595][ T6523] process_measurement+0x19cc/0x2350 [ 136.059617][ T6523] ? __pfx_process_measurement+0x10/0x10 [ 136.059657][ T6523] ? __pfx_aa_file_perm+0x10/0x10 [ 136.059682][ T6523] ima_file_mmap+0x1c4/0x1f0 [ 136.059698][ T6523] ? __pfx_ima_file_mmap+0x10/0x10 [ 136.059718][ T6523] security_mmap_file+0x278/0x9b0 [ 136.059737][ T6523] __do_sys_remap_file_pages+0x2da/0xa10 [ 136.059759][ T6523] ? clockevents_program_event+0x1ef/0x820 [ 136.059779][ T6523] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 136.059806][ T6523] ? __pfx_clockevents_program_event+0x10/0x10 [ 136.059823][ T6523] ? find_held_lock+0x2b/0x80 [ 136.059840][ T6523] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 136.059859][ T6523] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 136.059878][ T6523] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.059900][ T6523] do_syscall_64+0x115/0x840 [ 136.059913][ T6523] ? clear_bhb_loop+0x40/0x90 [ 136.059931][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.059947][ T6523] RIP: 0033:0x7f736679de59 [ 136.059960][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.059973][ T6523] RSP: 002b:00007f736759f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 136.059988][ T6523] RAX: ffffffffffffffda RBX: 00007f7366a26090 RCX: 00007f736679de59 [ 136.059998][ T6523] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 136.060007][ T6523] RBP: 00007f7366833e6f R08: 0000000000000004 R09: 0000000000000000 [ 136.060016][ T6523] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 136.060025][ T6523] R13: 00007f7366a26128 R14: 00007f7366a26090 R15: 00007ffdf8941de8 [ 136.060045][ T6523] [ 136.062124][ T6523] ima: OUT OF MEMORY ERROR creating queue entry [ 136.398439][ T30] audit: type=1804 audit(4294967317.510:3): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.140" name="dev/zero" dev="tmpfs" ino=1120 res=0 errno=0 [ 137.462700][ T6526] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.244747][ T6546] NFSD: Failed to start, no listeners configured. [ 138.783110][ T6549] NFSD: Failed to start, no listeners configured. [ 138.894274][ T6530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.911670][ T6530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.921960][ T6530] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.942019][ T6530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.964237][ T5628] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 138.965713][ T4943] Bluetooth: hci3: hardware error 0x00 [ 139.008777][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.040955][ T5628] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 139.909824][ T6571] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 140.015542][ T6571] File: /dev/nullb0 PID: 6571 Comm: syz.3.149 [ 140.929027][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.936435][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.018689][ T4943] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.100822][ T6618] FAULT_INJECTION: forcing a failure. [ 143.100822][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 143.174360][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.157 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.174404][ T6618] Tainted: [L]=SOFTLOCKUP [ 143.174411][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 143.174420][ T6618] Call Trace: [ 143.174426][ T6618] [ 143.174432][ T6618] dump_stack_lvl+0x100/0x190 [ 143.174453][ T6618] should_fail_ex.cold+0x5/0xa [ 143.174470][ T6618] should_failslab+0xc2/0x120 [ 143.174490][ T6618] __kmalloc_noprof+0xfc/0x820 [ 143.174506][ T6618] ? tomoyo_profile+0x47/0x60 [ 143.174526][ T6618] ? tomoyo_supervisor+0x65d/0x1340 [ 143.174551][ T6618] tomoyo_supervisor+0x65d/0x1340 [ 143.174575][ T6618] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 143.174611][ T6618] ? tomoyo_check_path_acl+0x141/0x210 [ 143.174628][ T6618] ? tomoyo_check_acl+0x1f7/0x410 [ 143.174654][ T6618] tomoyo_path_permission+0x270/0x3b0 [ 143.174672][ T6618] tomoyo_check_open_permission+0x34d/0x3c0 [ 143.174690][ T6618] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 143.174713][ T6618] ? hook_file_open+0x24f/0x8f0 [ 143.174746][ T6618] ? path_get+0x61/0x80 [ 143.174764][ T6618] tomoyo_file_open+0x6b/0x90 [ 143.174787][ T6618] security_file_open+0xb5/0x1e0 [ 143.174820][ T6618] do_dentry_open+0x588/0x14d0 [ 143.174852][ T6618] vfs_open+0x82/0x3f0 [ 143.174878][ T6618] path_openat+0x2873/0x4280 [ 143.174918][ T6618] ? __pfx_path_openat+0x10/0x10 [ 143.174969][ T6618] do_file_open+0x20e/0x430 [ 143.175009][ T6618] ? __pfx_do_file_open+0x10/0x10 [ 143.175045][ T6618] ? alloc_fd+0x471/0x7a0 [ 143.175068][ T6618] ? do_getname+0x191/0x390 [ 143.175086][ T6618] do_sys_openat2+0x10f/0x1e0 [ 143.175103][ T6618] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.175122][ T6618] ? __fget_files+0x21f/0x3d0 [ 143.175147][ T6618] __x64_sys_openat+0x12d/0x210 [ 143.175165][ T6618] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.175190][ T6618] do_syscall_64+0x115/0x840 [ 143.175203][ T6618] ? clear_bhb_loop+0x40/0x90 [ 143.175221][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.175236][ T6618] RIP: 0033:0x7f736679de59 [ 143.175250][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.175264][ T6618] RSP: 002b:00007f736759f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.175278][ T6618] RAX: ffffffffffffffda RBX: 00007f7366a26090 RCX: 00007f736679de59 [ 143.175287][ T6618] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 143.175296][ T6618] RBP: 00007f7366833e6f R08: 0000000000000000 R09: 0000000000000000 [ 143.175305][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.175313][ T6618] R13: 00007f7366a26128 R14: 00007f7366a26090 R15: 00007ffdf8941de8 [ 143.175332][ T6618] [ 144.038981][ T6628] FAULT_INJECTION: forcing a failure. [ 144.038981][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 144.081850][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.0.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.081895][ T6628] Tainted: [L]=SOFTLOCKUP [ 144.081904][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 144.081921][ T6628] Call Trace: [ 144.081929][ T6628] [ 144.081939][ T6628] dump_stack_lvl+0x100/0x190 [ 144.081976][ T6628] should_fail_ex.cold+0x5/0xa [ 144.082008][ T6628] should_failslab+0xc2/0x120 [ 144.082046][ T6628] __kmalloc_cache_noprof+0x91/0x6c0 [ 144.082091][ T6628] ? trace_pid_list_alloc+0x9d/0x480 [ 144.082132][ T6628] trace_pid_list_alloc+0x9d/0x480 [ 144.082171][ T6628] trace_pid_write+0x110/0x460 [ 144.082210][ T6628] ? __pfx_trace_pid_write+0x10/0x10 [ 144.082279][ T6628] event_pid_write.isra.0+0x1e4/0x7d0 [ 144.082324][ T6628] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 144.082373][ T6628] vfs_write+0x2aa/0x1050 [ 144.082414][ T6628] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 144.082458][ T6628] ? __pfx_vfs_write+0x10/0x10 [ 144.082498][ T6628] ? __fget_files+0x215/0x3d0 [ 144.082546][ T6628] ? __fget_files+0x21f/0x3d0 [ 144.082593][ T6628] ksys_write+0x12a/0x250 [ 144.082626][ T6628] ? __pfx_ksys_write+0x10/0x10 [ 144.082672][ T6628] do_syscall_64+0x115/0x840 [ 144.082697][ T6628] ? clear_bhb_loop+0x40/0x90 [ 144.082730][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.082756][ T6628] RIP: 0033:0x7f736679de59 [ 144.082778][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.082805][ T6628] RSP: 002b:00007f73675c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.082831][ T6628] RAX: ffffffffffffffda RBX: 00007f7366a25fa0 RCX: 00007f736679de59 [ 144.082850][ T6628] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 144.082866][ T6628] RBP: 00007f7366833e6f R08: 0000000000000000 R09: 0000000000000000 [ 144.082882][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.082898][ T6628] R13: 00007f7366a26038 R14: 00007f7366a25fa0 R15: 00007ffdf8941de8 [ 144.082937][ T6628] [ 149.184236][ T6715] ubi0: attaching mtd0 [ 149.199580][ T6715] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 149.208921][ T6715] eraseblock attaching information dump: [ 149.227617][ T6715] ec 1 [ 149.232349][ T6715] pnum 0 [ 149.235684][ T6715] lnum 0 [ 149.239325][ T6715] scrub 0 [ 149.243726][ T6715] sqnum 1 [ 149.252689][ T6715] Volume identifier header dump: [ 149.258560][ T6715] magic 55424921 [ 149.263807][ T6715] version 1 [ 149.267730][ T6715] vol_type 1 [ 149.273652][ T6715] copy_flag 0 [ 149.281271][ T6715] compat 5 [ 149.284770][ T6715] vol_id 2147479551 [ 149.302991][ T6715] lnum 0 [ 149.319437][ T6715] data_size 0 [ 149.327429][ T6715] used_ebs 0 [ 149.337633][ T6715] data_pad 0 [ 149.350341][ T6715] sqnum 1 [ 149.354063][ T6715] hdr_crc 65b3bd2d [ 149.358407][ T6715] Volume identifier header hexdump: [ 149.436890][ T5628] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 149.593519][ T6715] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 150.368420][ T4943] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 151.176643][ T6742] zswap: compressor not available [ 154.527550][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.540757][ T6755] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.186813][ T6755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.221592][ T6755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.398263][ T6789] futex_wake_op: syz.2.182 tries to shift op by -2048; fix this program [ 155.420727][ T6789] futex_wake_op: syz.2.182 tries to shift op by -2048; fix this program [ 155.443120][ T6789] 0x000000000001-0x000000020000 : "" [ 155.535821][ T6789] ftl_cs: FTL header corrupt! [ 156.080015][ T4943] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 156.609444][ T4943] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.289014][ T4943] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.756216][ T6859] Process accounting resumed [ 162.051867][ T6870] FAULT_INJECTION: forcing a failure. [ 162.051867][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 162.097187][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.097237][ T6870] Tainted: [L]=SOFTLOCKUP [ 162.097247][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 162.097264][ T6870] Call Trace: [ 162.097273][ T6870] [ 162.097284][ T6870] dump_stack_lvl+0x100/0x190 [ 162.097321][ T6870] should_fail_ex.cold+0x5/0xa [ 162.097353][ T6870] ? __pfx_cec_config_thread_func+0x10/0x10 [ 162.097386][ T6870] should_failslab+0xc2/0x120 [ 162.097423][ T6870] __kmalloc_cache_noprof+0x91/0x6c0 [ 162.097470][ T6870] ? __kthread_create_on_node+0xce/0x3f0 [ 162.097511][ T6870] ? __pfx_cec_config_thread_func+0x10/0x10 [ 162.097542][ T6870] __kthread_create_on_node+0xce/0x3f0 [ 162.097575][ T6870] ? __pfx___kthread_create_on_node+0x10/0x10 [ 162.097615][ T6870] ? mtouch_init+0x250/0x5d0 [ 162.097659][ T6870] ? cec_adap_enable+0x561/0xbb0 [ 162.097689][ T6870] ? cec_adap_enable+0x561/0xbb0 [ 162.097724][ T6870] ? __pfx_cec_config_thread_func+0x10/0x10 [ 162.097757][ T6870] kthread_create_on_node+0xc7/0x100 [ 162.097789][ T6870] ? __pfx_kthread_create_on_node+0x10/0x10 [ 162.097820][ T6870] ? find_held_lock+0x2b/0x80 [ 162.097853][ T6870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.097901][ T6870] ? mark_held_locks+0x40/0x70 [ 162.097948][ T6870] ? lockdep_init_map_type+0x5c/0x250 [ 162.097995][ T6870] ? lockdep_init_map_type+0x5c/0x250 [ 162.098046][ T6870] cec_claim_log_addrs+0x13e/0x2e0 [ 162.098079][ T6870] __cec_s_log_addrs+0xf35/0x1560 [ 162.098123][ T6870] cec_ioctl+0x20b5/0x29b0 [ 162.098161][ T6870] ? __pfx_cec_ioctl+0x10/0x10 [ 162.098192][ T6870] ? tomoyo_path_number_perm+0x188/0x580 [ 162.098228][ T6870] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.098263][ T6870] ? __pfx_futex_wait+0x10/0x10 [ 162.098307][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.098348][ T6870] ? do_vfs_ioctl+0x226/0x13e0 [ 162.098386][ T6870] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.098435][ T6870] ? find_held_lock+0x2b/0x80 [ 162.098466][ T6870] ? __fget_files+0x215/0x3d0 [ 162.098506][ T6870] ? hook_file_ioctl_common+0x140/0x440 [ 162.098556][ T6870] ? __pfx_cec_ioctl+0x10/0x10 [ 162.098591][ T6870] __x64_sys_ioctl+0x18e/0x210 [ 162.098632][ T6870] do_syscall_64+0x115/0x840 [ 162.098657][ T6870] ? clear_bhb_loop+0x40/0x90 [ 162.098693][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.098722][ T6870] RIP: 0033:0x7f12dcb9de59 [ 162.098746][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.098772][ T6870] RSP: 002b:00007f12dd9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.098801][ T6870] RAX: ffffffffffffffda RBX: 00007f12dce26090 RCX: 00007f12dcb9de59 [ 162.098820][ T6870] RDX: 00002000000000c0 RSI: 00000000c05c6104 RDI: 000000000000000a [ 162.098839][ T6870] RBP: 00007f12dcc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.098857][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.098874][ T6870] R13: 00007f12dce26128 R14: 00007f12dce26090 R15: 00007fff8a9f2418 [ 162.098913][ T6870] [ 163.046388][ T6878] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "-Y\x0d?x@S7RP9v7,%M___X p;Q>=9}u>\x22ѵ~R#\x09͹zPkuOk(X\x09lOeI0,Bz(UE~8[z[ieC(Nye!'beѢT\x0c_B*\x0b5#NW\x0aSP̑uwyN*\x07K5gihAcA#o!~PۣPh7axt]jeO(ȹ՗zCgBO\x5cՊtLN-櫙g->1N(C<, uh*V۠'0Y8uA%ݡ/kr-+^^ZV 8#-7!ߦ?$\x5cvnHW%aS?G>м/FZ0e\x07ަ=z% l_M&\x0c_r%Y@r{a\x0cnJn=:﫾Kq>\x22+aQb9iDVI5\x228ȟ[G'ufJB/:إUbHχ7\x09vj1r1Fc4uwC$\x1bRbϮXj˕lqZRG&stЛ{*ȘTIJ\x1b:C)$w$̮zmekuQ0ʙgbQ\x0c,sEiCL9uk%V~{\x0b曲;x)x\x07Fy?(2Hf\x0c,\x07nvWB$.Y?(( `9 \x09p [ 166.365543][ T6926] random: crng reseeded on system resumption [ 166.871632][ T6927] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 166.889205][ T6927] File: /dev/nullb0 PID: 6927 Comm: syz.1.207 [ 169.826594][ T30] audit: type=1800 audit(4294967305.630:4): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.212" name="members" dev="configfs" ino=14033 res=0 errno=0 [ 170.227795][ T6972] FAULT_INJECTION: forcing a failure. [ 170.227795][ T6972] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.349834][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.2.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.349860][ T6972] Tainted: [L]=SOFTLOCKUP [ 170.349865][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 170.349874][ T6972] Call Trace: [ 170.349880][ T6972] [ 170.349886][ T6972] dump_stack_lvl+0x100/0x190 [ 170.349908][ T6972] should_fail_ex.cold+0x5/0xa [ 170.349928][ T6972] _copy_to_user+0x32/0xd0 [ 170.349950][ T6972] cec_ioctl+0x2e0/0x29b0 [ 170.349971][ T6972] ? __pfx_cec_ioctl+0x10/0x10 [ 170.349987][ T6972] ? tomoyo_path_number_perm+0x188/0x580 [ 170.350005][ T6972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.350029][ T6972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.350050][ T6972] ? do_vfs_ioctl+0x226/0x13e0 [ 170.350069][ T6972] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.350096][ T6972] ? find_held_lock+0x2b/0x80 [ 170.350112][ T6972] ? __fget_files+0x215/0x3d0 [ 170.350132][ T6972] ? hook_file_ioctl_common+0x140/0x440 [ 170.350156][ T6972] ? __pfx_cec_ioctl+0x10/0x10 [ 170.350174][ T6972] __x64_sys_ioctl+0x18e/0x210 [ 170.350194][ T6972] do_syscall_64+0x115/0x840 [ 170.350207][ T6972] ? clear_bhb_loop+0x40/0x90 [ 170.350227][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.350242][ T6972] RIP: 0033:0x7f8c6d59de59 [ 170.350255][ T6972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.350269][ T6972] RSP: 002b:00007f8c6e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.350283][ T6972] RAX: ffffffffffffffda RBX: 00007f8c6d826090 RCX: 00007f8c6d59de59 [ 170.350293][ T6972] RDX: 00002000000000c0 RSI: 00000000c05c6104 RDI: 000000000000000a [ 170.350302][ T6972] RBP: 00007f8c6d633e6f R08: 0000000000000000 R09: 0000000000000000 [ 170.350310][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.350319][ T6972] R13: 00007f8c6d826128 R14: 00007f8c6d826090 R15: 00007ffc257dfc78 [ 170.350339][ T6972] [ 173.883015][ T7020] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5638] was attempted by "]O%r9J\x0b2D?4:D>x3Jw2.v~Qq\x0aqNz|+  qwݭ@ʽ\x0aDR@2 }G\x0b.50_HԅY#<+kn垀TXsA,/)Q$*\x5cݺyk&%3Km%GlxGɷe1ebd\x09f (\x07DCObCìְ%$']\x0a>3ة&Ÿp}JpvYe26+g),fA [ 192.545737][ T7282] dump_stack_lvl+0x100/0x190 [ 192.545763][ T7282] should_fail_ex.cold+0x5/0xa [ 192.545780][ T7282] should_failslab+0xc2/0x120 [ 192.545799][ T7282] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 192.545817][ T7282] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 192.545834][ T7282] ? rcu_is_watching+0x12/0xc0 [ 192.545849][ T7282] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 192.545872][ T7282] krealloc_node_align_noprof+0x1f9/0x3e0 [ 192.545892][ T7282] snd_pcm_hw_rule_add+0x3b3/0x510 [ 192.545911][ T7282] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 192.545932][ T7282] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 192.545950][ T7282] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 192.545971][ T7282] ? mutex_init_lockdep+0xf1/0x120 [ 192.545993][ T7282] ? snd_pcm_attach_substream+0x287/0xd20 [ 192.546013][ T7282] snd_pcm_open_substream+0x942/0x1850 [ 192.546031][ T7282] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 192.546047][ T7282] ? snd_pcm_oss_open+0x5e5/0x1390 [ 192.546071][ T7282] snd_pcm_oss_open+0x735/0x1390 [ 192.546098][ T7282] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 192.546119][ T7282] ? __lock_acquire+0x49f/0x1a40 [ 192.546140][ T7282] ? __pfx_default_wake_function+0x10/0x10 [ 192.546162][ T7282] ? do_raw_spin_lock+0x128/0x260 [ 192.546178][ T7282] ? soundcore_open+0x231/0x5a0 [ 192.546198][ T7282] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 192.546219][ T7282] soundcore_open+0x2e3/0x5a0 [ 192.546238][ T7282] ? __pfx_soundcore_open+0x10/0x10 [ 192.546264][ T7282] chrdev_open+0x234/0x6a0 [ 192.546278][ T7282] ? __pfx_apparmor_file_open+0x10/0x10 [ 192.546293][ T7282] ? __pfx_chrdev_open+0x10/0x10 [ 192.546316][ T7282] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 192.546335][ T7282] do_dentry_open+0x6ab/0x14d0 [ 192.546357][ T7282] ? __pfx_chrdev_open+0x10/0x10 [ 192.546384][ T7282] vfs_open+0x82/0x3f0 [ 192.546402][ T7282] path_openat+0x2873/0x4280 [ 192.546433][ T7282] ? __pfx_path_openat+0x10/0x10 [ 192.546460][ T7282] do_file_open+0x20e/0x430 [ 192.546483][ T7282] ? __pfx_do_file_open+0x10/0x10 [ 192.546522][ T7282] ? alloc_fd+0x471/0x7a0 [ 192.546545][ T7282] ? do_getname+0x191/0x390 [ 192.546563][ T7282] do_sys_openat2+0x10f/0x1e0 [ 192.546580][ T7282] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.546599][ T7282] ? __fget_files+0x21f/0x3d0 [ 192.546623][ T7282] __x64_sys_openat+0x12d/0x210 [ 192.546641][ T7282] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.546660][ T7282] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 192.546683][ T7282] ? syscall_user_dispatch+0x76/0x130 [ 192.546701][ T7282] do_syscall_64+0x115/0x840 [ 192.546714][ T7282] ? clear_bhb_loop+0x40/0x90 [ 192.546732][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.546751][ T7282] RIP: 0033:0x7f736679de59 [ 192.546765][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.546778][ T7282] RSP: 002b:00007f736759f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.546793][ T7282] RAX: ffffffffffffffda RBX: 00007f7366a26090 RCX: 00007f736679de59 [ 192.546803][ T7282] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 192.546813][ T7282] RBP: 00007f7366833e6f R08: 0000000000000000 R09: 0000000000000000 [ 192.546822][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.546830][ T7282] R13: 00007f7366a26128 R14: 00007f7366a26090 R15: 00007ffdf8941de8 [ 192.546850][ T7282] [ 193.019885][ T7263] Process accounting paused [ 193.153150][ T7282] FAULT_INJECTION: forcing a failure. [ 193.153150][ T7282] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 193.213233][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.213259][ T7282] Tainted: [L]=SOFTLOCKUP [ 193.213264][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 193.213273][ T7282] Call Trace: [ 193.213278][ T7282] [ 193.213284][ T7282] dump_stack_lvl+0x100/0x190 [ 193.213307][ T7282] should_fail_ex.cold+0x5/0xa [ 193.213321][ T7282] ? prepare_alloc_pages+0x16d/0x5f0 [ 193.213342][ T7282] should_fail_alloc_page+0xeb/0x140 [ 193.213369][ T7282] prepare_alloc_pages+0x1f0/0x5f0 [ 193.213389][ T7282] ? __pfx_stack_trace_save+0x10/0x10 [ 193.213410][ T7282] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 193.213427][ T7282] ? zswap_entry_free+0x38e/0x640 [ 193.213448][ T7282] ? kasan_save_stack+0x3f/0x50 [ 193.213463][ T7282] ? kasan_save_stack+0x30/0x50 [ 193.213478][ T7282] ? kasan_save_track+0x14/0x30 [ 193.213493][ T7282] ? kasan_save_free_info+0x3b/0x70 [ 193.213513][ T7282] ? __kasan_slab_free+0x5f/0x80 [ 193.213529][ T7282] ? kmem_cache_free+0x127/0x6b0 [ 193.213549][ T7282] ? zswap_entry_free+0x38e/0x640 [ 193.213568][ T7282] ? zswap_load+0x427/0x7c0 [ 193.213588][ T7282] ? swap_read_folio+0xab7/0x2ec0 [ 193.213608][ T7282] ? swap_cache_read_folio+0xae/0x140 [ 193.213622][ T7282] ? swap_cluster_readahead+0x387/0x5f0 [ 193.213636][ T7282] ? shmem_swapin_folio+0x217a/0x2a70 [ 193.213657][ T7282] ? shmem_get_folio_gfp+0x56e/0x1910 [ 193.213678][ T7282] ? shmem_fault+0x1f9/0xa20 [ 193.213690][ T7282] ? __do_fault+0x10b/0x440 [ 193.213704][ T7282] ? do_fault+0xa99/0x1750 [ 193.213721][ T7282] ? __handle_mm_fault+0x187d/0x2a00 [ 193.213742][ T7282] ? handle_mm_fault+0x37b/0xa30 [ 193.213761][ T7282] ? do_user_addr_fault+0x74c/0x12f0 [ 193.213779][ T7282] ? exc_page_fault+0x6f/0xd0 [ 193.213801][ T7282] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.213816][ T7282] ? do_syscall_64+0x530/0x840 [ 193.213846][ T7282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.213866][ T7282] ? policy_nodemask+0xed/0x4f0 [ 193.213887][ T7282] alloc_pages_mpol+0x1fb/0x540 [ 193.213909][ T7282] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 193.213928][ T7282] ? do_raw_spin_lock+0x128/0x260 [ 193.213942][ T7282] ? find_held_lock+0x2b/0x80 [ 193.213958][ T7282] ? swap_cache_alloc_folio+0x374/0xc50 [ 193.213975][ T7282] folio_alloc_mpol_noprof+0x36/0x260 [ 193.213998][ T7282] swap_cache_alloc_folio+0x3d7/0xc50 [ 193.214016][ T7282] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 193.214032][ T7282] ? swap_cache_get_folio+0x28d/0x360 [ 193.214046][ T7282] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 193.214066][ T7282] swap_cache_read_folio+0x47/0x140 [ 193.214084][ T7282] swap_cluster_readahead+0x387/0x5f0 [ 193.214103][ T7282] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 193.214131][ T7282] shmem_swapin_folio+0x217a/0x2a70 [ 193.214155][ T7282] ? find_held_lock+0x2b/0x80 [ 193.214171][ T7282] ? filemap_get_entry+0x22d/0x450 [ 193.214197][ T7282] ? filemap_get_entry+0x237/0x450 [ 193.214218][ T7282] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 193.214239][ T7282] ? __pfx_filemap_get_entry+0x10/0x10 [ 193.214263][ T7282] ? xas_load+0x44/0x5c0 [ 193.214282][ T7282] shmem_get_folio_gfp+0x56e/0x1910 [ 193.214315][ T7282] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 193.214338][ T7282] ? __pfx_filemap_map_pages+0x10/0x10 [ 193.214366][ T7282] ? filemap_map_pages+0x1137/0x1fe0 [ 193.214391][ T7282] shmem_fault+0x1f9/0xa20 [ 193.214405][ T7282] ? __lock_acquire+0x49f/0x1a40 [ 193.214426][ T7282] ? __pfx_shmem_fault+0x10/0x10 [ 193.214452][ T7282] ? __pfx_filemap_map_pages+0x10/0x10 [ 193.214476][ T7282] ? find_held_lock+0x2b/0x80 [ 193.214494][ T7282] __do_fault+0x10b/0x440 [ 193.214512][ T7282] do_fault+0xa99/0x1750 [ 193.214534][ T7282] __handle_mm_fault+0x187d/0x2a00 [ 193.214559][ T7282] ? mt_find+0x45e/0x8e0 [ 193.214575][ T7282] ? __pfx___handle_mm_fault+0x10/0x10 [ 193.214596][ T7282] ? __pfx_mt_find+0x10/0x10 [ 193.214622][ T7282] ? find_vma+0xbf/0x140 [ 193.214637][ T7282] ? __pfx_find_vma+0x10/0x10 [ 193.214656][ T7282] handle_mm_fault+0x37b/0xa30 [ 193.214681][ T7282] do_user_addr_fault+0x74c/0x12f0 [ 193.214705][ T7282] exc_page_fault+0x6f/0xd0 [ 193.214727][ T7282] asm_exc_page_fault+0x26/0x30 [ 193.214742][ T7282] RIP: 0010:__get_user_nocheck_1+0x6/0x30 [ 193.214764][ T7282] Code: e9 ff 95 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca e9 cd 95 04 00 66 66 2e 0f 1f 84 00 00 00 [ 193.214778][ T7282] RSP: 0018:ffffc900058dfeb0 EFLAGS: 00050202 [ 193.214792][ T7282] RAX: 0000000000000007 RBX: ffffc900058dff48 RCX: ffffc90006c79000 [ 193.214803][ T7282] RDX: 0000000000080000 RSI: ffffffff81759626 RDI: ffffc900058dff48 [ 193.214813][ T7282] RBP: ffff88804f893e00 R08: 0000000000000005 R09: 0000000000000000 [ 193.214822][ T7282] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804f893e00 [ 193.214832][ T7282] R13: 00000000000000ca R14: 0000000000000020 R15: 00000000000000ca [ 193.214847][ T7282] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 193.214872][ T7282] syscall_user_dispatch+0x76/0x130 [ 193.214888][ T7282] ? do_syscall_64+0x90/0x840 [ 193.214901][ T7282] ? lockdep_hardirqs_on+0x78/0x100 [ 193.214923][ T7282] do_syscall_64+0x530/0x840 [ 193.214935][ T7282] ? clear_bhb_loop+0x40/0x90 [ 193.214953][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.214968][ T7282] RIP: 0033:0x7f736679de59 [ 193.214981][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.214994][ T7282] RSP: 002b:00007f736759f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.215007][ T7282] RAX: ffffffffffffffda RBX: 00007f7366a26098 RCX: 00007f736679de59 [ 193.215016][ T7282] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7366a2609c [ 193.215025][ T7282] RBP: 00007f7366a26090 R08: 0000000000000001 R09: 0000000000000000 [ 193.215033][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.215042][ T7282] R13: 00007f7366a26128 R14: 00007ffdf8941d00 R15: 00007ffdf8941de8 [ 193.215061][ T7282] [ 193.841897][ T7282] [U] ^R [ 194.210605][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.217486][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536542][ T7291] NFSD: Failed to start, no listeners configured. [ 194.940760][ T7297] NFSD: Failed to start, no listeners configured. [ 197.107092][ T7311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.115521][ T7311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.121879][ T7311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.406016][ T7336] netlink: 342 bytes leftover after parsing attributes in process `syz.3.286'. [ 197.807574][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.177466][ T4943] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.183688][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.436697][ T7362] NFSD: Failed to start, no listeners configured. [ 199.814753][ T7368] NFSD: Failed to start, no listeners configured. [ 200.593936][ T7378] NFSD: Failed to start, no listeners configured. [ 200.980154][ T7381] NFSD: Failed to start, no listeners configured. [ 201.206812][ T7388] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 203.020380][ T7411] netlink: 342 bytes leftover after parsing attributes in process `syz.2.301'. [ 203.032409][ T7414] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 203.876867][ T7399] Process accounting resumed [ 205.268105][ T7422] kexec: Could not allocate control_code_buffer [ 206.603957][ T7449] Process accounting resumed [ 207.852816][ T7470] Process accounting resumed [ 209.180850][ T7499] random: crng reseeded on system resumption [ 210.635596][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 210.679654][ T7519] veth1_macvtap: left promiscuous mode [ 210.702070][ T7519] macsec0: entered promiscuous mode [ 210.722755][ T7519] macsec0: entered allmulticast mode [ 210.924871][ T7511] Process accounting paused [ 211.593023][ T7510] Process accounting resumed [ 211.858201][ T7541] FAULT_INJECTION: forcing a failure. [ 211.858201][ T7541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.919896][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.1.322 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.919923][ T7541] Tainted: [L]=SOFTLOCKUP [ 211.919928][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 211.919938][ T7541] Call Trace: [ 211.919943][ T7541] [ 211.919949][ T7541] dump_stack_lvl+0x100/0x190 [ 211.919971][ T7541] should_fail_ex.cold+0x5/0xa [ 211.919986][ T7541] ? fs_reclaim_acquire+0x70/0x100 [ 211.920007][ T7541] should_fail_alloc_page+0xeb/0x140 [ 211.920028][ T7541] prepare_alloc_pages+0x1f0/0x5f0 [ 211.920050][ T7541] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 211.920074][ T7541] ? kasan_save_stack+0x30/0x50 [ 211.920092][ T7541] ? __pfx___schedule+0x10/0x10 [ 211.920113][ T7541] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.920132][ T7541] ? irqentry_exit+0x24d/0xa00 [ 211.920153][ T7541] ? lockdep_hardirqs_on+0x78/0x100 [ 211.920174][ T7541] ? irqentry_exit+0x24d/0xa00 [ 211.920206][ T7541] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.920227][ T7541] ? policy_nodemask+0xed/0x4f0 [ 211.920247][ T7541] alloc_pages_mpol+0x1fb/0x540 [ 211.920267][ T7541] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 211.920291][ T7541] alloc_pages_noprof+0x1a/0x160 [ 211.920313][ T7541] relay_open_buf.part.0+0x261/0xb70 [ 211.920335][ T7541] relay_open+0x7b9/0xa00 [ 211.920355][ T7541] blk_trace_setup_prepare+0x35c/0x6c0 [ 211.920374][ T7541] blk_trace_setup+0x217/0x440 [ 211.920393][ T7541] ? __pfx_blk_trace_setup+0x10/0x10 [ 211.920409][ T7541] ? lockdep_hardirqs_on+0x16/0x100 [ 211.920438][ T7541] ? __pfx_vsnprintf+0x10/0x10 [ 211.920471][ T7541] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.920491][ T7541] ? do_vfs_ioctl+0x226/0x13e0 [ 211.920521][ T7541] blk_trace_ioctl+0x245/0x320 [ 211.920554][ T7541] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 211.920576][ T7541] ? find_held_lock+0x2b/0x80 [ 211.920592][ T7541] ? __fget_files+0x215/0x3d0 [ 211.920611][ T7541] ? hook_file_ioctl_common+0x140/0x440 [ 211.920631][ T7541] blkdev_ioctl+0x17c/0x6f0 [ 211.920652][ T7541] ? __pfx_blkdev_ioctl+0x10/0x10 [ 211.920675][ T7541] ? __pfx_blkdev_ioctl+0x10/0x10 [ 211.920697][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 211.920717][ T7541] do_syscall_64+0x115/0x840 [ 211.920730][ T7541] ? clear_bhb_loop+0x40/0x90 [ 211.920748][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.920763][ T7541] RIP: 0033:0x7f12dcb9de59 [ 211.920777][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.920790][ T7541] RSP: 002b:00007f12dd9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.920805][ T7541] RAX: ffffffffffffffda RBX: 00007f12dce26090 RCX: 00007f12dcb9de59 [ 211.920814][ T7541] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 211.920823][ T7541] RBP: 00007f12dcc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 211.920833][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.920841][ T7541] R13: 00007f12dce26128 R14: 00007f12dce26090 R15: 00007fff8a9f2418 [ 211.920861][ T7541] [ 213.811036][ T7538] kexec: Could not allocate control_code_buffer [ 216.362279][ T7593] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 217.082116][ T7579] Process accounting resumed [ 217.475514][ T7597] netlink: 342 bytes leftover after parsing attributes in process `syz.0.333'. [ 218.595656][ T7620] FAULT_INJECTION: forcing a failure. [ 218.595656][ T7620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.609336][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.2.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.609378][ T7620] Tainted: [L]=SOFTLOCKUP [ 218.609389][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 218.609405][ T7620] Call Trace: [ 218.609414][ T7620] [ 218.609424][ T7620] dump_stack_lvl+0x100/0x190 [ 218.609462][ T7620] should_fail_ex.cold+0x5/0xa [ 218.609488][ T7620] ? fs_reclaim_acquire+0x70/0x100 [ 218.609528][ T7620] should_fail_alloc_page+0xeb/0x140 [ 218.609568][ T7620] prepare_alloc_pages+0x1f0/0x5f0 [ 218.609610][ T7620] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 218.609644][ T7620] ? find_held_lock+0x2b/0x80 [ 218.609682][ T7620] ? clockevents_program_event+0x23e/0x820 [ 218.609714][ T7620] ? clockevents_program_event+0x23e/0x820 [ 218.609750][ T7620] ? ktime_get+0x9f/0x320 [ 218.609788][ T7620] ? ktime_get+0x1a4/0x320 [ 218.609831][ T7620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 218.609869][ T7620] ? __pfx_clockevents_program_event+0x10/0x10 [ 218.609901][ T7620] ? find_held_lock+0x2b/0x80 [ 218.609932][ T7620] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.609966][ T7620] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.610010][ T7620] ? irqentry_exit+0x24d/0xa00 [ 218.610054][ T7620] ? lockdep_hardirqs_on+0x78/0x100 [ 218.610105][ T7620] ? irqentry_exit+0x24d/0xa00 [ 218.610148][ T7620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.610190][ T7620] ? policy_nodemask+0xed/0x4f0 [ 218.610231][ T7620] alloc_pages_mpol+0x1fb/0x540 [ 218.610270][ T7620] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 218.610306][ T7620] ? __pfx___sanitizer_cov_trace_const_cmp2+0x10/0x10 [ 218.610351][ T7620] alloc_pages_noprof+0x1a/0x160 [ 218.610391][ T7620] relay_open_buf.part.0+0x261/0xb70 [ 218.610439][ T7620] relay_open+0x7b9/0xa00 [ 218.610478][ T7620] blk_trace_setup_prepare+0x35c/0x6c0 [ 218.610517][ T7620] blk_trace_setup+0x217/0x440 [ 218.610556][ T7620] ? __pfx_blk_trace_setup+0x10/0x10 [ 218.610586][ T7620] ? lockdep_hardirqs_on+0x16/0x100 [ 218.610636][ T7620] ? __pfx_vsnprintf+0x10/0x10 [ 218.610697][ T7620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.610736][ T7620] ? do_vfs_ioctl+0x226/0x13e0 [ 218.610775][ T7620] blk_trace_ioctl+0x245/0x320 [ 218.610810][ T7620] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 218.610849][ T7620] ? find_held_lock+0x2b/0x80 [ 218.610881][ T7620] ? __fget_files+0x215/0x3d0 [ 218.610920][ T7620] ? hook_file_ioctl_common+0x140/0x440 [ 218.610958][ T7620] blkdev_ioctl+0x17c/0x6f0 [ 218.611000][ T7620] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.611047][ T7620] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.611098][ T7620] __x64_sys_ioctl+0x18e/0x210 [ 218.611139][ T7620] do_syscall_64+0x115/0x840 [ 218.611165][ T7620] ? clear_bhb_loop+0x40/0x90 [ 218.611201][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.611231][ T7620] RIP: 0033:0x7f8c6d59de59 [ 218.611256][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.611282][ T7620] RSP: 002b:00007f8c6e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.611309][ T7620] RAX: ffffffffffffffda RBX: 00007f8c6d826090 RCX: 00007f8c6d59de59 [ 218.611328][ T7620] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 218.611346][ T7620] RBP: 00007f8c6d633e6f R08: 0000000000000000 R09: 0000000000000000 [ 218.611364][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.611380][ T7620] R13: 00007f8c6d826128 R14: 00007f8c6d826090 R15: 00007ffc257dfc78 [ 218.611419][ T7620] [ 222.932819][ T7648] Process accounting resumed [ 223.498006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.409178][ T7714] kexec: Could not allocate control_code_buffer [ 229.711905][ T7733] Process accounting resumed [ 230.207064][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.213295][ T7726] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.305721][ T7726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.318178][ T7726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.661930][ T7764] ubi0: attaching mtd0 [ 230.682985][ T7764] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 230.703339][ T7764] eraseblock attaching information dump: [ 230.712770][ T7764] ec 1 [ 230.725688][ T7764] pnum 0 [ 230.739527][ T7764] lnum 0 [ 230.750456][ T7764] scrub 0 [ 230.763978][ T7764] sqnum 1 [ 230.778305][ T7764] Volume identifier header dump: [ 230.785512][ T7764] magic 55424921 [ 230.790725][ T7764] version 1 [ 230.829723][ T7764] vol_type 1 [ 230.863728][ T7764] copy_flag 0 [ 230.880187][ T7764] compat 5 [ 230.885642][ T7764] vol_id 2147479551 [ 230.916318][ T7764] lnum 0 [ 230.951580][ T7764] data_size 0 [ 230.956322][ T7764] used_ebs 0 [ 230.983606][ T7764] data_pad 0 [ 231.001607][ T7764] sqnum 1 [ 231.013445][ T7764] hdr_crc 65b3bd2d [ 231.020788][ T7764] Volume identifier header hexdump: [ 231.161027][ T7773] netlink: 222 bytes leftover after parsing attributes in process `syz.0.368'. [ 231.427434][ T7764] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 232.287285][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.367091][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.879054][ T7782] Process accounting resumed [ 232.958920][ T7797] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 233.078557][ T7800] FAULT_INJECTION: forcing a failure. [ 233.078557][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 233.120483][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.0.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.120509][ T7800] Tainted: [L]=SOFTLOCKUP [ 233.120514][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 233.120523][ T7800] Call Trace: [ 233.120529][ T7800] [ 233.120535][ T7800] dump_stack_lvl+0x100/0x190 [ 233.120558][ T7800] should_fail_ex.cold+0x5/0xa [ 233.120575][ T7800] should_failslab+0xc2/0x120 [ 233.120596][ T7800] __kmalloc_noprof+0xfc/0x820 [ 233.120613][ T7800] ? usb_alloc_urb+0x66/0xa0 [ 233.120637][ T7800] usb_alloc_urb+0x66/0xa0 [ 233.120658][ T7800] proc_do_submiturb+0x741/0x3820 [ 233.120693][ T7800] usbdev_ioctl+0x2adb/0x3aa0 [ 233.120717][ T7800] ? __pfx_usbdev_ioctl+0x10/0x10 [ 233.120743][ T7800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.120763][ T7800] ? do_vfs_ioctl+0x226/0x13e0 [ 233.120782][ T7800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.120806][ T7800] ? find_held_lock+0x2b/0x80 [ 233.120822][ T7800] ? __fget_files+0x215/0x3d0 [ 233.120842][ T7800] ? hook_file_ioctl_common+0x140/0x440 [ 233.120868][ T7800] ? __pfx_usbdev_ioctl+0x10/0x10 [ 233.120891][ T7800] __x64_sys_ioctl+0x18e/0x210 [ 233.120911][ T7800] do_syscall_64+0x115/0x840 [ 233.120924][ T7800] ? clear_bhb_loop+0x40/0x90 [ 233.120948][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.120965][ T7800] RIP: 0033:0x7f736679de59 [ 233.120978][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.120992][ T7800] RSP: 002b:00007f73675c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.121006][ T7800] RAX: ffffffffffffffda RBX: 00007f7366a25fa0 RCX: 00007f736679de59 [ 233.121016][ T7800] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000007 [ 233.121025][ T7800] RBP: 00007f7366833e6f R08: 0000000000000000 R09: 0000000000000000 [ 233.121034][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.121044][ T7800] R13: 00007f7366a26038 R14: 00007f7366a25fa0 R15: 00007ffdf8941de8 [ 233.121064][ T7800] [ 235.401788][ T7815] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 235.429334][ T7815] netlink: 9 bytes leftover after parsing attributes in process `syz.1.384'. [ 237.735927][ T7861] FAULT_INJECTION: forcing a failure. [ 237.735927][ T7861] name failslab, interval 1, probability 0, space 0, times 0 [ 237.776551][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.2.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.776579][ T7861] Tainted: [L]=SOFTLOCKUP [ 237.776585][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 237.776602][ T7861] Call Trace: [ 237.776608][ T7861] [ 237.776614][ T7861] dump_stack_lvl+0x100/0x190 [ 237.776636][ T7861] should_fail_ex.cold+0x5/0xa [ 237.776653][ T7861] should_failslab+0xc2/0x120 [ 237.776673][ T7861] __kmalloc_cache_noprof+0x91/0x6c0 [ 237.776695][ T7861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.776716][ T7861] ? proc_do_submiturb+0x722/0x3820 [ 237.776742][ T7861] proc_do_submiturb+0x722/0x3820 [ 237.776776][ T7861] usbdev_ioctl+0x2adb/0x3aa0 [ 237.776801][ T7861] ? __pfx_usbdev_ioctl+0x10/0x10 [ 237.776827][ T7861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.776847][ T7861] ? do_vfs_ioctl+0x226/0x13e0 [ 237.776866][ T7861] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 237.776890][ T7861] ? find_held_lock+0x2b/0x80 [ 237.776907][ T7861] ? __fget_files+0x215/0x3d0 [ 237.776926][ T7861] ? hook_file_ioctl_common+0x140/0x440 [ 237.776958][ T7861] ? __pfx_usbdev_ioctl+0x10/0x10 [ 237.776999][ T7861] __x64_sys_ioctl+0x18e/0x210 [ 237.777036][ T7861] do_syscall_64+0x115/0x840 [ 237.777050][ T7861] ? clear_bhb_loop+0x40/0x90 [ 237.777068][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.777084][ T7861] RIP: 0033:0x7f8c6d59de59 [ 237.777098][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.777112][ T7861] RSP: 002b:00007f8c6e4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.777126][ T7861] RAX: ffffffffffffffda RBX: 00007f8c6d825fa0 RCX: 00007f8c6d59de59 [ 237.777135][ T7861] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000007 [ 237.777145][ T7861] RBP: 00007f8c6d633e6f R08: 0000000000000000 R09: 0000000000000000 [ 237.777153][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.777161][ T7861] R13: 00007f8c6d826038 R14: 00007f8c6d825fa0 R15: 00007ffc257dfc78 [ 237.777181][ T7861] [ 238.993952][ T7851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.994095][ T7851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.995813][ T7851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.083973][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 239.085389][ T7875] netlink: 354 bytes leftover after parsing attributes in process `syz.0.388'. [ 239.647490][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.090788][ T7891] netlink: 342 bytes leftover after parsing attributes in process `syz.0.390'. [ 240.253543][ T7891] FAULT_INJECTION: forcing a failure. [ 240.253543][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 240.297262][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.0.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.297287][ T7891] Tainted: [L]=SOFTLOCKUP [ 240.297292][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 240.297301][ T7891] Call Trace: [ 240.297306][ T7891] [ 240.297311][ T7891] dump_stack_lvl+0x100/0x190 [ 240.297333][ T7891] should_fail_ex.cold+0x5/0xa [ 240.297351][ T7891] should_failslab+0xc2/0x120 [ 240.297371][ T7891] kmem_cache_alloc_noprof+0x91/0x6a0 [ 240.297388][ T7891] ? fib_insert_alias+0x43e/0xe30 [ 240.297415][ T7891] fib_insert_alias+0x43e/0xe30 [ 240.297435][ T7891] ? lockdep_rtnl_is_held+0x26/0x40 [ 240.297458][ T7891] ? fib_find_node+0x209/0x280 [ 240.297478][ T7891] fib_trie_unmerge+0x289/0xbd0 [ 240.297505][ T7891] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 240.297525][ T7891] ? __pfx___mutex_lock+0x10/0x10 [ 240.297546][ T7891] fib_unmerge+0xee/0x510 [ 240.297568][ T7891] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 240.297591][ T7891] fib4_rule_configure+0x383/0x10c0 [ 240.297611][ T7891] fib_newrule+0x356/0x1ed0 [ 240.297634][ T7891] ? rcu_is_watching+0x12/0xc0 [ 240.297654][ T7891] ? __pfx_fib_newrule+0x10/0x10 [ 240.297674][ T7891] ? kfree_skbmem+0x180/0x210 [ 240.297694][ T7891] ? kmem_cache_free+0x127/0x6b0 [ 240.297716][ T7891] ? skb_release_data+0x6ca/0x8e0 [ 240.297746][ T7891] ? find_held_lock+0x2b/0x80 [ 240.297762][ T7891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 240.297780][ T7891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 240.297799][ T7891] ? __pfx_fib_nl_newrule+0x10/0x10 [ 240.297820][ T7891] rtnetlink_rcv_msg+0x95e/0xe90 [ 240.297839][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.297863][ T7891] ? ref_tracker_free+0x37e/0x6c0 [ 240.297886][ T7891] netlink_rcv_skb+0x159/0x420 [ 240.297908][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.297928][ T7891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.297957][ T7891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 240.297981][ T7891] netlink_unicast+0x585/0x850 [ 240.298013][ T7891] ? __pfx_netlink_unicast+0x10/0x10 [ 240.298041][ T7891] netlink_sendmsg+0x8b0/0xda0 [ 240.298065][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.298090][ T7891] ? apparmor_socket_sendmsg+0x15b/0x270 [ 240.298115][ T7891] ____sys_sendmsg+0xa4d/0xbe0 [ 240.298135][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.298157][ T7891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.298180][ T7891] ? rcu_is_watching+0x12/0xc0 [ 240.298201][ T7891] ___sys_sendmsg+0x190/0x1e0 [ 240.298224][ T7891] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.298246][ T7891] ? irqentry_exit+0x24d/0xa00 [ 240.298284][ T7891] ? __pfx___might_resched+0x10/0x10 [ 240.298308][ T7891] __sys_sendmmsg+0x20c/0x440 [ 240.298328][ T7891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 240.298347][ T7891] ? __fget_files+0x215/0x3d0 [ 240.298391][ T7891] ? __pfx_do_futex+0x10/0x10 [ 240.298416][ T7891] ? xfd_validate_state+0x129/0x190 [ 240.298437][ T7891] __x64_sys_sendmmsg+0x9c/0x100 [ 240.298454][ T7891] ? lockdep_hardirqs_on+0x78/0x100 [ 240.298476][ T7891] do_syscall_64+0x115/0x840 [ 240.298492][ T7891] ? clear_bhb_loop+0x40/0x90 [ 240.298510][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.298525][ T7891] RIP: 0033:0x7f736679de59 [ 240.298539][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.298553][ T7891] RSP: 002b:00007f736759f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.298568][ T7891] RAX: ffffffffffffffda RBX: 00007f7366a26090 RCX: 00007f736679de59 [ 240.298578][ T7891] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 240.298587][ T7891] RBP: 00007f7366833e6f R08: 0000000000000000 R09: 0000000000000000 [ 240.298596][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.298605][ T7891] R13: 00007f7366a26128 R14: 00007f7366a26090 R15: 00007ffdf8941de8 [ 240.298641][ T7891] [ 241.013764][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.013798][ T4943] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.308866][ T7908] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 241.774819][ T7918] futex_wake_op: syz.3.396 tries to shift op by -2048; fix this program [ 241.798830][ T7918] futex_wake_op: syz.3.396 tries to shift op by -2048; fix this program [ 242.191670][ T7906] Process accounting resumed [ 242.456436][ T4943] Bluetooth: hci0: unexpected event 0x05 length: 8 > 4 [ 243.122780][ T7937] ubi0: attaching mtd0 [ 243.179700][ T7937] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 243.202062][ T7937] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 243.220779][ T7937] eraseblock attaching information dump: [ 243.249608][ T7937] ec -1 [ 243.260815][ T7937] pnum 0 [ 243.272419][ T7937] lnum 0 [ 243.285095][ T7937] scrub 1 [ 243.294067][ T7937] sqnum 1 [ 243.315144][ T7937] Volume identifier header dump: [ 243.328456][ T7937] magic 55424921 [ 243.347615][ T7937] version 1 [ 243.360193][ T7937] vol_type 1 [ 243.372088][ T7937] copy_flag 0 [ 243.383594][ T7937] compat 5 [ 243.384336][ T7937] vol_id 2147479551 [ 243.384351][ T7937] lnum 0 [ 243.384361][ T7937] data_size 0 [ 243.394968][ T7937] used_ebs 0 [ 243.394977][ T7937] data_pad 0 [ 243.394983][ T7937] sqnum 1 [ 243.394989][ T7937] hdr_crc 65b3bd2d [ 243.394995][ T7937] Volume identifier header hexdump: [ 243.619722][ T7937] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 244.356871][ T7930] kexec: Could not allocate control_code_buffer [ 244.802778][ T7922] Process accounting paused [ 246.268678][ T7968] Process accounting resumed [ 246.356545][ T7987] ubi0: attaching mtd0 [ 246.385301][ T7987] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 246.402959][ T7987] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 246.421773][ T7987] eraseblock attaching information dump: [ 246.446376][ T7987] ec -1 [ 246.467109][ T7987] pnum 0 [ 246.480608][ T7987] lnum 0 [ 246.505997][ T7987] scrub 1 [ 246.513556][ T7987] sqnum 1 [ 246.540428][ T7987] Volume identifier header dump: [ 246.556802][ T7987] magic 55424921 [ 246.572584][ T7987] version 1 [ 246.585091][ T7987] vol_type 1 [ 246.594083][ T7987] copy_flag 0 [ 246.605344][ T7987] compat 5 [ 246.611720][ T7987] vol_id 2147479551 [ 246.615956][ T7987] lnum 0 [ 246.624454][ T7987] data_size 0 [ 246.629183][ T7987] used_ebs 0 [ 246.638376][ T7987] data_pad 0 [ 246.668960][ T7987] sqnum 1 [ 246.677016][ T7987] hdr_crc 65b3bd2d [ 246.684055][ T7987] Volume identifier header hexdump: [ 246.969628][ T7987] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 247.134880][ T8000] netlink: 342 bytes leftover after parsing attributes in process `syz.0.412'. [ 247.752041][ T8013] Ignoring unsupported numa_zonelist_order value: [ 247.797293][ T8013] random: crng reseeded on system resumption [ 250.234762][ T8036] tipc: Started in network mode [ 250.252177][ T8036] tipc: Node identity ee00, cluster identity 4711 [ 250.272814][ T8036] tipc: Node number set to 60928 [ 252.795240][ T8074] netlink: 342 bytes leftover after parsing attributes in process `syz.3.424'. [ 253.574584][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.427'. [ 255.658996][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.666531][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.705946][ T8135] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 258.473432][ T8125] kexec: Could not allocate control_code_buffer [ 259.294526][ T8137] Process accounting resumed [ 259.603384][ T8163] netlink: 342 bytes leftover after parsing attributes in process `syz.2.441'. [ 259.724591][ T8163] FAULT_INJECTION: forcing a failure. [ 259.724591][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 259.784253][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.2.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.784286][ T8163] Tainted: [L]=SOFTLOCKUP [ 259.784291][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 259.784300][ T8163] Call Trace: [ 259.784305][ T8163] [ 259.784311][ T8163] dump_stack_lvl+0x100/0x190 [ 259.784333][ T8163] should_fail_ex.cold+0x5/0xa [ 259.784350][ T8163] should_failslab+0xc2/0x120 [ 259.784368][ T8163] kmem_cache_alloc_noprof+0x91/0x6a0 [ 259.784386][ T8163] ? fib_insert_alias+0x43e/0xe30 [ 259.784410][ T8163] fib_insert_alias+0x43e/0xe30 [ 259.784429][ T8163] ? lockdep_rtnl_is_held+0x26/0x40 [ 259.784452][ T8163] ? fib_find_node+0x209/0x280 [ 259.784470][ T8163] fib_trie_unmerge+0x289/0xbd0 [ 259.784501][ T8163] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 259.784521][ T8163] ? __pfx___mutex_lock+0x10/0x10 [ 259.784542][ T8163] fib_unmerge+0xee/0x510 [ 259.784563][ T8163] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 259.784587][ T8163] fib4_rule_configure+0x383/0x10c0 [ 259.784607][ T8163] fib_newrule+0x356/0x1ed0 [ 259.784631][ T8163] ? rcu_is_watching+0x12/0xc0 [ 259.784650][ T8163] ? __pfx_fib_newrule+0x10/0x10 [ 259.784670][ T8163] ? kfree_skbmem+0x180/0x210 [ 259.784690][ T8163] ? kmem_cache_free+0x127/0x6b0 [ 259.784712][ T8163] ? skb_release_data+0x6ca/0x8e0 [ 259.784743][ T8163] ? find_held_lock+0x2b/0x80 [ 259.784759][ T8163] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 259.784776][ T8163] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 259.784795][ T8163] ? __pfx_fib_nl_newrule+0x10/0x10 [ 259.784816][ T8163] rtnetlink_rcv_msg+0x95e/0xe90 [ 259.784835][ T8163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.784859][ T8163] ? ref_tracker_free+0x37e/0x6c0 [ 259.784882][ T8163] netlink_rcv_skb+0x159/0x420 [ 259.784904][ T8163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.784924][ T8163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.784953][ T8163] ? netlink_deliver_tap+0x1ae/0xcc0 [ 259.784977][ T8163] netlink_unicast+0x585/0x850 [ 259.785001][ T8163] ? __pfx_netlink_unicast+0x10/0x10 [ 259.785028][ T8163] netlink_sendmsg+0x8b0/0xda0 [ 259.785052][ T8163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.785076][ T8163] ? apparmor_socket_sendmsg+0x15b/0x270 [ 259.785102][ T8163] ____sys_sendmsg+0xa4d/0xbe0 [ 259.785121][ T8163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.785144][ T8163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.785167][ T8163] ? rcu_is_watching+0x12/0xc0 [ 259.785182][ T8163] ? ___sys_sendmsg+0x19d/0x1e0 [ 259.785202][ T8163] ? kfree+0x1e5/0x6c0 [ 259.785225][ T8163] ___sys_sendmsg+0x190/0x1e0 [ 259.785247][ T8163] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.785271][ T8163] ? futex_hash+0x311/0x400 [ 259.785308][ T8163] ? __pfx___might_resched+0x10/0x10 [ 259.785333][ T8163] __sys_sendmmsg+0x20c/0x440 [ 259.785353][ T8163] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.785369][ T8163] ? __fget_files+0x215/0x3d0 [ 259.785395][ T8163] ? __pfx_do_futex+0x10/0x10 [ 259.785419][ T8163] ? xfd_validate_state+0x129/0x190 [ 259.785439][ T8163] __x64_sys_sendmmsg+0x9c/0x100 [ 259.785456][ T8163] ? lockdep_hardirqs_on+0x78/0x100 [ 259.785478][ T8163] do_syscall_64+0x115/0x840 [ 259.785497][ T8163] ? clear_bhb_loop+0x40/0x90 [ 259.785516][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.785532][ T8163] RIP: 0033:0x7f8c6d59de59 [ 259.785545][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.785559][ T8163] RSP: 002b:00007f8c6e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.785574][ T8163] RAX: ffffffffffffffda RBX: 00007f8c6d826090 RCX: 00007f8c6d59de59 [ 259.785584][ T8163] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.785594][ T8163] RBP: 00007f8c6d633e6f R08: 0000000000000000 R09: 0000000000000000 [ 259.785604][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.785612][ T8163] R13: 00007f8c6d826128 R14: 00007f8c6d826090 R15: 00007ffc257dfc78 [ 259.785632][ T8163] [ 260.561970][ T8146] Process accounting paused [ 262.582990][ T8195] futex_wake_op: syz.2.447 tries to shift op by -2048; fix this program [ 262.595982][ T8195] futex_wake_op: syz.2.447 tries to shift op by -2048; fix this program [ 263.054741][ T8203] 0x001c00000000-0x100002c00000200 : "" [ 263.083191][ T8203] mtd: partition "" is out of reach -- disabled [ 263.171173][ T8203] ftl_cs: FTL header not found. [ 265.316552][ T8240] random: crng reseeded on system resumption [ 265.578803][ T8244] hub 1-0:1.0: USB hub found [ 265.640324][ T8244] hub 1-0:1.0: 1 port detected [ 268.312847][ T8284] netlink: 342 bytes leftover after parsing attributes in process `syz.1.465'. [ 268.979408][ T24] ================================================================== [ 268.979431][ T24] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 268.979454][ T24] Write of size 8 at addr ffffc90004a39020 by task kworker/1:0/24 [ 268.979467][ T24] [ 268.979477][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.979497][ T24] Tainted: [L]=SOFTLOCKUP [ 268.979502][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 268.979512][ T24] Workqueue: events_power_efficient fb_flashcursor [ 268.979533][ T24] Call Trace: [ 268.979538][ T24] [ 268.979543][ T24] dump_stack_lvl+0x100/0x190 [ 268.979560][ T24] print_report+0x13d/0x4b0 [ 268.979580][ T24] ? _raw_spin_lock_irqsave+0x52/0x60 [ 268.979602][ T24] ? sys_imageblit+0x19fb/0x1d60 [ 268.979617][ T24] kasan_report+0xdf/0x1c0 [ 268.979636][ T24] ? sys_imageblit+0x19fb/0x1d60 [ 268.979657][ T24] sys_imageblit+0x19fb/0x1d60 [ 268.979689][ T24] ? __pfx_sys_imageblit+0x10/0x10 [ 268.979723][ T24] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 268.979761][ T24] soft_cursor+0x524/0xa10 [ 268.979777][ T24] bit_cursor+0xca1/0x1490 [ 268.979801][ T24] ? __pfx_bit_cursor+0x10/0x10 [ 268.979831][ T24] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 268.979851][ T24] ? get_color+0x1da/0x450 [ 268.979869][ T24] ? __pfx_bit_cursor+0x10/0x10 [ 268.979890][ T24] fb_flashcursor+0x338/0x430 [ 268.979909][ T24] process_one_work+0xa23/0x1940 [ 268.979932][ T24] ? __pfx_process_one_work+0x10/0x10 [ 268.979953][ T24] ? __pfx_fb_flashcursor+0x10/0x10 [ 268.979978][ T24] worker_thread+0x5ef/0xe50 [ 268.980000][ T24] ? kthread+0x13a/0x450 [ 268.980016][ T24] ? __pfx_worker_thread+0x10/0x10 [ 268.980034][ T24] kthread+0x370/0x450 [ 268.980050][ T24] ? __pfx_kthread+0x10/0x10 [ 268.980067][ T24] ret_from_fork+0x72b/0xd50 [ 268.980083][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 268.980102][ T24] ? __switch_to+0x800/0x10f0 [ 268.980135][ T24] ? __switch_to_asm+0x39/0x70 [ 268.980153][ T24] ? __pfx_kthread+0x10/0x10 [ 268.980171][ T24] ret_from_fork_asm+0x1a/0x30 [ 268.980193][ T24] [ 268.980198][ T24] [ 268.980202][ T24] The buggy address belongs to a vmalloc virtual mapping [ 268.980213][ T24] Memory state around the buggy address: [ 268.980222][ T24] ffffc90004a38f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 268.980232][ T24] ffffc90004a38f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 268.980241][ T24] >ffffc90004a39000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 268.980249][ T24] ^ [ 268.980256][ T24] ffffc90004a39080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 268.980266][ T24] ffffc90004a39100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 268.980273][ T24] ================================================================== [ 268.982648][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.982672][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.982712][ T24] Tainted: [L]=SOFTLOCKUP [ 268.982722][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 268.982741][ T24] Workqueue: events_power_efficient fb_flashcursor [ 268.982779][ T24] Call Trace: [ 268.982788][ T24] [ 268.982798][ T24] dump_stack_lvl+0x100/0x190 [ 268.982834][ T24] vpanic+0x552/0x970 [ 268.982859][ T24] ? __pfx_vpanic+0x10/0x10 [ 268.982890][ T24] ? sys_imageblit+0x19fb/0x1d60 [ 268.982922][ T24] panic+0xd1/0xe0 [ 268.982947][ T24] ? __pfx_panic+0x10/0x10 [ 268.982974][ T24] ? sys_imageblit+0x19fb/0x1d60 [ 268.983004][ T24] ? preempt_schedule_common+0x42/0xc0 [ 268.983048][ T24] ? check_panic_on_warn+0x1f/0x90 [ 268.983088][ T24] check_panic_on_warn.cold+0x19/0x34 [ 268.983118][ T24] end_report.part.0+0x3a/0x90 [ 268.983155][ T24] kasan_report.cold+0xe/0x18 [ 268.983194][ T24] ? sys_imageblit+0x19fb/0x1d60 [ 268.983228][ T24] sys_imageblit+0x19fb/0x1d60 [ 268.983263][ T24] ? __pfx_sys_imageblit+0x10/0x10 [ 268.983301][ T24] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 268.983344][ T24] soft_cursor+0x524/0xa10 [ 268.983375][ T24] bit_cursor+0xca1/0x1490 [ 268.983421][ T24] ? __pfx_bit_cursor+0x10/0x10 [ 268.983468][ T24] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 268.983507][ T24] ? get_color+0x1da/0x450 [ 268.983544][ T24] ? __pfx_bit_cursor+0x10/0x10 [ 268.983586][ T24] fb_flashcursor+0x338/0x430 [ 268.983622][ T24] process_one_work+0xa23/0x1940 [ 268.983663][ T24] ? __pfx_process_one_work+0x10/0x10 [ 268.983702][ T24] ? __pfx_fb_flashcursor+0x10/0x10 [ 268.983732][ T24] worker_thread+0x5ef/0xe50 [ 268.983753][ T24] ? kthread+0x13a/0x450 [ 268.983770][ T24] ? __pfx_worker_thread+0x10/0x10 [ 268.983788][ T24] kthread+0x370/0x450 [ 268.983805][ T24] ? __pfx_kthread+0x10/0x10 [ 268.983828][ T24] ret_from_fork+0x72b/0xd50 [ 268.983845][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 268.983861][ T24] ? __switch_to+0x800/0x10f0 [ 268.983881][ T24] ? __switch_to_asm+0x39/0x70 [ 268.983900][ T24] ? __pfx_kthread+0x10/0x10 [ 268.983917][ T24] ret_from_fork_asm+0x1a/0x30 [ 268.983940][ T24] [ 268.984211][ T24] Kernel Offset: disabled