last executing test programs: 2.587918572s ago: executing program 3 (id=660): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 2.02694369s ago: executing program 3 (id=665): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.752726558s ago: executing program 0 (id=668): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sysinfo$auto(0x0) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) 1.598641671s ago: executing program 3 (id=670): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstatfs$auto(0x3, 0x0) ioctl$auto(0x3, 0x4020ae46, 0x38) 1.39189822s ago: executing program 2 (id=672): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x6) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(0x3, 0x83) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.362194182s ago: executing program 0 (id=674): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001a14af"], 0x14}}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.289475967s ago: executing program 3 (id=675): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x46, 0xfffffffffffffffe, 0x0) 1.154407639s ago: executing program 3 (id=677): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x58, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) close_range$auto(0x2, 0xa, 0x0) 1.037178721s ago: executing program 0 (id=678): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mountinfo\x00', 0x40001, 0x0) r0 = epoll_create$auto(0x20003f) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 1.014603551s ago: executing program 2 (id=679): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) socket(0x23, 0x5, 0x2) setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000000)='\xe1', 0xbb) ioctl$auto(0x1, 0x541b, 0x8) 872.085312ms ago: executing program 2 (id=680): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 780.173099ms ago: executing program 3 (id=681): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) 775.359025ms ago: executing program 1 (id=682): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14858f00", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 647.343511ms ago: executing program 0 (id=683): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) 621.797949ms ago: executing program 1 (id=684): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) 524.975744ms ago: executing program 1 (id=685): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x40e41, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) 498.385085ms ago: executing program 0 (id=686): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x800001e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 487.095568ms ago: executing program 2 (id=687): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 327.389638ms ago: executing program 1 (id=688): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000000), 0x7f}, 0x6, 0x0) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x0, 0x20, 0x0, 0x15) 198.13869ms ago: executing program 0 (id=689): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 135.898778ms ago: executing program 2 (id=690): mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r0, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x3, 0x5, 0xfffffff9, 0x6}, {0x4000, 0xffffffff, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 101.012797ms ago: executing program 1 (id=691): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80805, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) 20.861333ms ago: executing program 2 (id=692): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x401, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x68) 0s ago: executing program 1 (id=693): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0x19, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 74.566000][ T5833] cgroup: Unknown subsys name 'net' [ 74.757682][ T5833] cgroup: Unknown subsys name 'cpuset' [ 74.766717][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.187544][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.189952][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.198307][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.216513][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.224834][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.244647][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.252897][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.283990][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.303947][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.312075][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.326002][ T5167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.329594][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.344418][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.354196][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.362515][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.370739][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.426301][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.434961][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.445239][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.454871][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.462589][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.902796][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 78.968641][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 79.071411][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.129253][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 79.188028][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.195371][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.202767][ T5847] bridge_slave_0: entered allmulticast mode [ 79.210099][ T5847] bridge_slave_0: entered promiscuous mode [ 79.242705][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.250028][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.257445][ T5847] bridge_slave_1: entered allmulticast mode [ 79.264989][ T5847] bridge_slave_1: entered promiscuous mode [ 79.315503][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.323015][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.330665][ T5851] bridge_slave_0: entered allmulticast mode [ 79.337932][ T5851] bridge_slave_0: entered promiscuous mode [ 79.373135][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.380847][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.388455][ T5851] bridge_slave_1: entered allmulticast mode [ 79.395599][ T5851] bridge_slave_1: entered promiscuous mode [ 79.422837][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.464987][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.472180][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.479538][ T5842] bridge_slave_0: entered allmulticast mode [ 79.486759][ T5842] bridge_slave_0: entered promiscuous mode [ 79.497099][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.521303][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.543670][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.550929][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.558126][ T5856] bridge_slave_0: entered allmulticast mode [ 79.566269][ T5856] bridge_slave_0: entered promiscuous mode [ 79.574018][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.581142][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.588713][ T5842] bridge_slave_1: entered allmulticast mode [ 79.596817][ T5842] bridge_slave_1: entered promiscuous mode [ 79.616649][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.639114][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.646400][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.653519][ T5856] bridge_slave_1: entered allmulticast mode [ 79.660890][ T5856] bridge_slave_1: entered promiscuous mode [ 79.683444][ T5847] team0: Port device team_slave_0 added [ 79.692632][ T5847] team0: Port device team_slave_1 added [ 79.711304][ T5851] team0: Port device team_slave_0 added [ 79.768485][ T5851] team0: Port device team_slave_1 added [ 79.789605][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.807135][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.815661][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.841642][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.866864][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.877958][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.888453][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.896213][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.922352][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.948091][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.992724][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.001663][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.027892][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.077262][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.084333][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.110868][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.139791][ T5842] team0: Port device team_slave_0 added [ 80.151018][ T5847] hsr_slave_0: entered promiscuous mode [ 80.159410][ T5847] hsr_slave_1: entered promiscuous mode [ 80.175967][ T5856] team0: Port device team_slave_0 added [ 80.183479][ T5842] team0: Port device team_slave_1 added [ 80.205428][ T5856] team0: Port device team_slave_1 added [ 80.276211][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.283191][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.309390][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.321206][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.329872][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.356436][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.374955][ T5848] Bluetooth: hci1: command tx timeout [ 80.374959][ T5845] Bluetooth: hci0: command tx timeout [ 80.400582][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.407646][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.434276][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.446078][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.453011][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.479614][ T5845] Bluetooth: hci2: command tx timeout [ 80.485126][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.500785][ T5851] hsr_slave_0: entered promiscuous mode [ 80.507648][ T5851] hsr_slave_1: entered promiscuous mode [ 80.513648][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.521398][ T5851] Cannot create hsr debugfs directory [ 80.534178][ T5845] Bluetooth: hci3: command tx timeout [ 80.637639][ T5856] hsr_slave_0: entered promiscuous mode [ 80.645898][ T5856] hsr_slave_1: entered promiscuous mode [ 80.651885][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.659690][ T5856] Cannot create hsr debugfs directory [ 80.681007][ T5842] hsr_slave_0: entered promiscuous mode [ 80.687328][ T5842] hsr_slave_1: entered promiscuous mode [ 80.693281][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.700950][ T5842] Cannot create hsr debugfs directory [ 81.052609][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.072446][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.083107][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.103270][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.159615][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.172818][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.201290][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.217139][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.270375][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.282066][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.325473][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.349266][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.419532][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.432566][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.458954][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.468749][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.485538][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.553169][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.584629][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.591862][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.619028][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.645297][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.652448][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.726543][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.747192][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.766897][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.774094][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.806392][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.813503][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.846933][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.869756][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.876971][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.923005][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.930255][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.019422][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.070160][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.100673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.107875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.148497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.155759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.202252][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.333453][ T5847] veth0_vlan: entered promiscuous mode [ 82.353062][ T5847] veth1_vlan: entered promiscuous mode [ 82.416884][ T5847] veth0_macvtap: entered promiscuous mode [ 82.435791][ T5847] veth1_macvtap: entered promiscuous mode [ 82.454547][ T5845] Bluetooth: hci1: command tx timeout [ 82.460063][ T5845] Bluetooth: hci0: command tx timeout [ 82.507836][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.535040][ T5845] Bluetooth: hci2: command tx timeout [ 82.551184][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.595742][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609394][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622527][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.624132][ T5845] Bluetooth: hci3: command tx timeout [ 82.636071][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.722794][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.759036][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.803896][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.825478][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.833588][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.888955][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.904964][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.923031][ T5851] veth0_vlan: entered promiscuous mode [ 82.983321][ T5851] veth1_vlan: entered promiscuous mode [ 82.999381][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.013188][ T5842] veth0_vlan: entered promiscuous mode [ 83.041988][ T5842] veth1_vlan: entered promiscuous mode [ 83.057872][ T5856] veth0_vlan: entered promiscuous mode [ 83.096640][ T5856] veth1_vlan: entered promiscuous mode [ 83.122983][ T5851] veth0_macvtap: entered promiscuous mode [ 83.181456][ T5851] veth1_macvtap: entered promiscuous mode [ 83.190874][ T5842] veth0_macvtap: entered promiscuous mode [ 83.233758][ T5842] veth1_macvtap: entered promiscuous mode [ 83.245207][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.266390][ T5856] veth0_macvtap: entered promiscuous mode [ 83.277995][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.293330][ T5856] veth1_macvtap: entered promiscuous mode [ 83.304838][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.315412][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.325714][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.335709][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.344612][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.369752][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.411760][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.422161][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432017][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440950][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.501646][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.531095][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.603154][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632225][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.654512][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663259][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732708][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.757044][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.779471][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.789969][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.870105][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.885232][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.951706][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.971746][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.021214][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.050954][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.170401][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.204132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.544561][ T5845] Bluetooth: hci0: command tx timeout [ 84.550014][ T5845] Bluetooth: hci1: command tx timeout [ 84.617243][ T5845] Bluetooth: hci2: command tx timeout [ 84.694087][ T5845] Bluetooth: hci3: command tx timeout [ 84.865670][ T5954] netlink: 'syz.1.2': attribute type 19 has an invalid length. [ 84.883189][ T5954] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.893447][ T5954] Zero length message leads to an empty skb [ 85.292768][ T5972] netlink: 342 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.589439][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.526382][ T6009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.532541][ T6009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.614166][ T5845] Bluetooth: hci1: command tx timeout [ 86.646260][ T6009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.694166][ T5845] Bluetooth: hci2: command tx timeout [ 86.764194][ T6009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.774020][ T5845] Bluetooth: hci3: command tx timeout [ 86.848272][ T6009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.915844][ T6009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.998675][ T6009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.084305][ T6009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.165040][ T6009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.270315][ T6009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.306218][ T6009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.389493][ T6009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.508873][ T6040] ptp ptp0: new virtual clock ptp1 [ 88.525998][ T6040] ptp ptp0: new virtual clock ptp2 [ 88.533973][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.593493][ T6040] ptp ptp0: new virtual clock ptp3 [ 88.634245][ T6040] ptp ptp0: new virtual clock ptp4 [ 88.650616][ T6040] ptp ptp0: new virtual clock ptp5 [ 88.674755][ T6040] ptp ptp0: new virtual clock ptp6 [ 88.712919][ T6040] ptp ptp0: new virtual clock ptp7 [ 88.725199][ T6040] ptp ptp0: new virtual clock ptp8 [ 88.735217][ T6040] ptp ptp0: new virtual clock ptp9 [ 88.769981][ T6040] ptp ptp0: new virtual clock ptp10 [ 88.784123][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.804629][ T6040] ptp ptp0: new virtual clock ptp11 [ 88.823608][ T6040] ptp ptp0: new virtual clock ptp12 [ 88.840887][ T6040] ptp ptp0: new virtual clock ptp13 [ 88.875243][ T6040] ptp ptp0: new virtual clock ptp14 [ 88.893746][ T6040] ptp ptp0: new virtual clock ptp15 [ 88.947491][ T6040] ptp ptp0: new virtual clock ptp16 [ 88.963869][ T6040] ptp ptp0: guarantee physical clock free running [ 89.013860][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.024199][ T6063] capability: warning: `syz.0.45' uses 32-bit capabilities (legacy support in use) [ 89.335161][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.896157][ T6087] netlink: 342 bytes leftover after parsing attributes in process `syz.0.54'. [ 90.624346][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.857210][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.094308][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.413882][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.825115][ T979] cfg80211: failed to load regulatory.db [ 92.495076][ T6141] netlink: 342 bytes leftover after parsing attributes in process `syz.2.75'. [ 92.636899][ T6145] FAULT_INJECTION: forcing a failure. [ 92.636899][ T6145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.695049][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.701551][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.3.76 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 92.701587][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.701605][ T6145] Call Trace: [ 92.701614][ T6145] [ 92.701627][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 92.701676][ T6145] should_fail_ex+0x512/0x640 [ 92.701718][ T6145] should_fail_alloc_page+0xe7/0x130 [ 92.701747][ T6145] prepare_alloc_pages+0x3c2/0x610 [ 92.701777][ T6145] ? rcu_is_watching+0x12/0xc0 [ 92.701808][ T6145] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 92.701859][ T6145] ? rcu_is_watching+0x12/0xc0 [ 92.701886][ T6145] ? trace_mm_page_alloc+0x11f/0x1a0 [ 92.701917][ T6145] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 92.701958][ T6145] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 92.701995][ T6145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.702045][ T6145] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 92.702083][ T6145] ? __get_vm_area_node+0x1ca/0x330 [ 92.702111][ T6145] ? __vmalloc_node_noprof+0xad/0xf0 [ 92.702141][ T6145] ? pcpu_mem_zalloc+0x54/0xb0 [ 92.702170][ T6145] ? pcpu_create_chunk+0x432/0x730 [ 92.702202][ T6145] ? pcpu_alloc_noprof+0x11e3/0x1470 [ 92.702235][ T6145] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 92.702269][ T6145] ? htab_map_alloc+0x10ca/0x1570 [ 92.702290][ T6145] ? map_create+0x58f/0x1db0 [ 92.702339][ T6145] alloc_pages_bulk_noprof+0x71c/0x1410 [ 92.702376][ T6145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.702416][ T6145] ? policy_nodemask+0xea/0x4e0 [ 92.702446][ T6145] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 92.702486][ T6145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 92.702529][ T6145] kasan_populate_vmalloc+0xf1/0x1f0 [ 92.702580][ T6145] alloc_vmap_area+0x959/0x29c0 [ 92.702626][ T6145] ? __pfx_alloc_vmap_area+0x10/0x10 [ 92.702666][ T6145] __get_vm_area_node+0x1ca/0x330 [ 92.702705][ T6145] __vmalloc_node_range_noprof+0x271/0x14b0 [ 92.702739][ T6145] ? pcpu_mem_zalloc+0x54/0xb0 [ 92.702782][ T6145] ? pcpu_mem_zalloc+0x54/0xb0 [ 92.702827][ T6145] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.702875][ T6145] ? pcpu_mem_zalloc+0x54/0xb0 [ 92.702904][ T6145] __vmalloc_node_noprof+0xad/0xf0 [ 92.702936][ T6145] ? pcpu_mem_zalloc+0x54/0xb0 [ 92.702972][ T6145] pcpu_mem_zalloc+0x54/0xb0 [ 92.703006][ T6145] pcpu_create_chunk+0x432/0x730 [ 92.703045][ T6145] pcpu_alloc_noprof+0x11e3/0x1470 [ 92.703102][ T6145] bpf_map_alloc_percpu+0x9a/0x4b0 [ 92.703141][ T6145] htab_map_alloc+0x10ca/0x1570 [ 92.703174][ T6145] ? ns_capable+0xd7/0x110 [ 92.703204][ T6145] map_create+0x58f/0x1db0 [ 92.703254][ T6145] ? __pfx_map_create+0x10/0x10 [ 92.703288][ T6145] ? __might_fault+0xe3/0x190 [ 92.703323][ T6145] ? __might_fault+0xe3/0x190 [ 92.703357][ T6145] ? __might_fault+0x13b/0x190 [ 92.703408][ T6145] __sys_bpf+0x47cc/0x4d80 [ 92.703437][ T6145] ? __pfx___sys_bpf+0x10/0x10 [ 92.703462][ T6145] ? do_writev+0x218/0x340 [ 92.703503][ T6145] ? do_futex+0x122/0x350 [ 92.703536][ T6145] ? __pfx_do_futex+0x10/0x10 [ 92.703582][ T6145] ? fput+0x70/0xf0 [ 92.703610][ T6145] ? xfd_validate_state+0x61/0x180 [ 92.703641][ T6145] ? __pfx_do_writev+0x10/0x10 [ 92.703681][ T6145] __x64_sys_bpf+0x78/0xc0 [ 92.703705][ T6145] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.703742][ T6145] do_syscall_64+0xcd/0x490 [ 92.703785][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.703810][ T6145] RIP: 0033:0x7fe47578e929 [ 92.703841][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.703864][ T6145] RSP: 002b:00007fe476673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.703886][ T6145] RAX: ffffffffffffffda RBX: 00007fe4759b5fa0 RCX: 00007fe47578e929 [ 92.703902][ T6145] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 92.703917][ T6145] RBP: 00007fe475810b39 R08: 0000000000000000 R09: 0000000000000000 [ 92.703932][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.703948][ T6145] R13: 0000000000000000 R14: 00007fe4759b5fa0 R15: 00007fff743ce488 [ 92.703983][ T6145] [ 93.128836][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.173993][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.494083][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.519420][ T6160] HfR: entered promiscuous mode [ 93.570897][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 93.641139][ T6167] HfR: left promiscuous mode [ 93.669070][ T6162] zswap: compressor not available [ 93.699448][ T6172] sd 0:0:1:0: PR command failed: 1026 [ 93.714827][ T6172] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 93.730400][ T6174] FAULT_INJECTION: forcing a failure. [ 93.730400][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 93.731785][ T6172] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 93.763961][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.3.89 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 93.763998][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.764012][ T6174] Call Trace: [ 93.764021][ T6174] [ 93.764031][ T6174] dump_stack_lvl+0x16c/0x1f0 [ 93.764074][ T6174] should_fail_ex+0x512/0x640 [ 93.764111][ T6174] ? __kmalloc_noprof+0xbf/0x510 [ 93.764150][ T6174] ? xfrm_hash_alloc+0xd1/0x100 [ 93.764182][ T6174] should_failslab+0xc2/0x120 [ 93.764207][ T6174] __kmalloc_noprof+0xd2/0x510 [ 93.764244][ T6174] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 93.764273][ T6174] ? __pfx_xfrm_net_init+0x10/0x10 [ 93.764309][ T6174] xfrm_hash_alloc+0xd1/0x100 [ 93.764342][ T6174] xfrm_state_init+0x9c/0x630 [ 93.764382][ T6174] ? __pfx_xfrm_net_init+0x10/0x10 [ 93.764415][ T6174] xfrm_net_init+0x210/0xcc0 [ 93.764457][ T6174] ? __pfx_xfrm_net_init+0x10/0x10 [ 93.764493][ T6174] ops_init+0x1e2/0x5f0 [ 93.764530][ T6174] setup_net+0x1ff/0x510 [ 93.764553][ T6174] ? lockdep_init_map_type+0x5c/0x280 [ 93.764589][ T6174] ? __pfx_setup_net+0x10/0x10 [ 93.764616][ T6174] ? debug_mutex_init+0x37/0x70 [ 93.764645][ T6174] copy_net_ns+0x2a6/0x5f0 [ 93.764675][ T6174] create_new_namespaces+0x3ea/0xa90 [ 93.764713][ T6174] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 93.764745][ T6174] ksys_unshare+0x45b/0xa40 [ 93.764779][ T6174] ? __pfx_ksys_unshare+0x10/0x10 [ 93.764814][ T6174] ? xfd_validate_state+0x61/0x180 [ 93.764858][ T6174] __x64_sys_unshare+0x31/0x40 [ 93.764890][ T6174] do_syscall_64+0xcd/0x490 [ 93.764931][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.764956][ T6174] RIP: 0033:0x7fe47578e929 [ 93.764976][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.764999][ T6174] RSP: 002b:00007fe476673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.765022][ T6174] RAX: ffffffffffffffda RBX: 00007fe4759b5fa0 RCX: 00007fe47578e929 [ 93.765039][ T6174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 93.765054][ T6174] RBP: 00007fe475810b39 R08: 0000000000000000 R09: 0000000000000000 [ 93.765070][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.765084][ T6174] R13: 0000000000000000 R14: 00007fe4759b5fa0 R15: 00007fff743ce488 [ 93.765118][ T6174] [ 94.344171][ T6184] process 'syz.0.95' launched '/dev/fd/4' with NULL argv: empty string added [ 95.423166][ T6220] FAULT_INJECTION: forcing a failure. [ 95.423166][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 95.484204][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.2.102 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 95.484242][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.484257][ T6220] Call Trace: [ 95.484265][ T6220] [ 95.484274][ T6220] dump_stack_lvl+0x16c/0x1f0 [ 95.484318][ T6220] should_fail_ex+0x512/0x640 [ 95.484353][ T6220] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 95.484400][ T6220] should_failslab+0xc2/0x120 [ 95.484424][ T6220] __kmalloc_cache_noprof+0x6a/0x3e0 [ 95.484455][ T6220] ? snd_midi_event_new+0x6f/0x210 [ 95.484494][ T6220] snd_midi_event_new+0x6f/0x210 [ 95.484531][ T6220] snd_virmidi_output_open+0x106/0x670 [ 95.484561][ T6220] open_substream+0x478/0x9b0 [ 95.484594][ T6220] rawmidi_open_priv+0x543/0x6e0 [ 95.484629][ T6220] snd_rawmidi_open+0x4cc/0xbf0 [ 95.484667][ T6220] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 95.484700][ T6220] ? __pfx_default_wake_function+0x10/0x10 [ 95.484730][ T6220] ? do_raw_spin_lock+0x12c/0x2b0 [ 95.484772][ T6220] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 95.484802][ T6220] snd_open+0x1fe/0x450 [ 95.484826][ T6220] ? __pfx_snd_open+0x10/0x10 [ 95.484846][ T6220] chrdev_open+0x231/0x6a0 [ 95.484871][ T6220] ? __pfx_chrdev_open+0x10/0x10 [ 95.484897][ T6220] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 95.484936][ T6220] do_dentry_open+0x744/0x1c10 [ 95.484973][ T6220] ? __pfx_chrdev_open+0x10/0x10 [ 95.485004][ T6220] vfs_open+0x82/0x3f0 [ 95.485036][ T6220] path_openat+0x1de4/0x2cb0 [ 95.485083][ T6220] ? __pfx_path_openat+0x10/0x10 [ 95.485121][ T6220] ? __lock_acquire+0xb8a/0x1c90 [ 95.485157][ T6220] do_filp_open+0x20b/0x470 [ 95.485194][ T6220] ? __pfx_do_filp_open+0x10/0x10 [ 95.485260][ T6220] ? alloc_fd+0x471/0x7d0 [ 95.485305][ T6220] do_sys_openat2+0x11b/0x1d0 [ 95.485334][ T6220] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.485390][ T6220] __x64_sys_openat+0x174/0x210 [ 95.485421][ T6220] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.485468][ T6220] do_syscall_64+0xcd/0x490 [ 95.485510][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.485534][ T6220] RIP: 0033:0x7ff8cf18e929 [ 95.485555][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.485579][ T6220] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.485604][ T6220] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 95.485619][ T6220] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 95.485634][ T6220] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.485648][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.485662][ T6220] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 95.485700][ T6220] [ 95.795311][ T6228] syz.3.105 uses obsolete (PF_INET,SOCK_PACKET) [ 97.024723][ T6254] GUP no longer grows the stack in syz.0.112 (6254): 14000-401000 (4000) [ 97.074269][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.0.112 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 97.074308][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.074323][ T6254] Call Trace: [ 97.074332][ T6254] [ 97.074342][ T6254] dump_stack_lvl+0x16c/0x1f0 [ 97.074386][ T6254] gup_vma_lookup+0x1d2/0x220 [ 97.074417][ T6254] __get_user_pages+0x271/0x3b80 [ 97.074458][ T6254] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 97.074484][ T6254] ? kasan_save_stack+0x42/0x60 [ 97.074521][ T6254] ? __pfx___get_user_pages+0x10/0x10 [ 97.074550][ T6254] ? register_lock_class+0x41/0x4c0 [ 97.074583][ T6254] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 97.074607][ T6254] ? do_syscall_64+0xcd/0x490 [ 97.074654][ T6254] __gup_longterm_locked+0x20d/0x1840 [ 97.074687][ T6254] ? __lock_acquire+0xb8a/0x1c90 [ 97.074727][ T6254] ? __pfx___gup_longterm_locked+0x10/0x10 [ 97.074776][ T6254] pin_user_pages_remote+0xed/0x140 [ 97.074810][ T6254] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 97.074839][ T6254] ? mm_access+0x22d/0x2e0 [ 97.074883][ T6254] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 97.074927][ T6254] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 97.074957][ T6254] ? iovec_from_user+0xbb/0x140 [ 97.075000][ T6254] ? iovec_from_user+0xbb/0x140 [ 97.075028][ T6254] process_vm_rw+0x216/0x2c0 [ 97.075056][ T6254] ? __pfx_process_vm_rw+0x10/0x10 [ 97.075090][ T6254] ? task_mm_cid_work+0x6b9/0x910 [ 97.075152][ T6254] ? xfd_validate_state+0x61/0x180 [ 97.075184][ T6254] ? __task_pid_nr_ns+0x17c/0x500 [ 97.075230][ T6254] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 97.075257][ T6254] ? do_syscall_64+0x91/0x490 [ 97.075295][ T6254] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.075331][ T6254] do_syscall_64+0xcd/0x490 [ 97.075374][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.075399][ T6254] RIP: 0033:0x7f2aab98e929 [ 97.075421][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.075444][ T6254] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 97.075468][ T6254] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 97.075485][ T6254] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000050 [ 97.075501][ T6254] RBP: 00007f2aaba10b39 R08: 0000000000000003 R09: 0000000000000000 [ 97.075517][ T6254] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.075532][ T6254] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 97.075567][ T6254] [ 97.902726][ T6271] FAULT_INJECTION: forcing a failure. [ 97.902726][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 97.942657][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.116 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 97.942695][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.942711][ T6271] Call Trace: [ 97.942720][ T6271] [ 97.942730][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 97.942775][ T6271] should_fail_ex+0x512/0x640 [ 97.942813][ T6271] ? __kmalloc_noprof+0xbf/0x510 [ 97.942854][ T6271] ? snd_midi_event_new+0xa1/0x210 [ 97.942895][ T6271] should_failslab+0xc2/0x120 [ 97.942921][ T6271] __kmalloc_noprof+0xd2/0x510 [ 97.942966][ T6271] snd_midi_event_new+0xa1/0x210 [ 97.943006][ T6271] snd_virmidi_output_open+0x106/0x670 [ 97.943038][ T6271] open_substream+0x478/0x9b0 [ 97.943072][ T6271] rawmidi_open_priv+0x543/0x6e0 [ 97.943111][ T6271] snd_rawmidi_open+0x4cc/0xbf0 [ 97.943150][ T6271] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 97.943184][ T6271] ? __pfx_default_wake_function+0x10/0x10 [ 97.943217][ T6271] ? kobject_get_unless_zero+0x156/0x1e0 [ 97.943246][ T6271] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 97.943279][ T6271] snd_open+0x1fe/0x450 [ 97.943304][ T6271] ? __pfx_snd_open+0x10/0x10 [ 97.943327][ T6271] chrdev_open+0x231/0x6a0 [ 97.943350][ T6271] ? __pfx_apparmor_file_open+0x10/0x10 [ 97.943383][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 97.943417][ T6271] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 97.943460][ T6271] do_dentry_open+0x744/0x1c10 [ 97.943501][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 97.943534][ T6271] vfs_open+0x82/0x3f0 [ 97.943567][ T6271] path_openat+0x1de4/0x2cb0 [ 97.943616][ T6271] ? __pfx_path_openat+0x10/0x10 [ 97.943656][ T6271] ? __lock_acquire+0xb8a/0x1c90 [ 97.943694][ T6271] do_filp_open+0x20b/0x470 [ 97.943730][ T6271] ? __pfx_do_filp_open+0x10/0x10 [ 97.943794][ T6271] ? alloc_fd+0x471/0x7d0 [ 97.943836][ T6271] do_sys_openat2+0x11b/0x1d0 [ 97.943865][ T6271] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.943907][ T6271] __x64_sys_openat+0x174/0x210 [ 97.943938][ T6271] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.943980][ T6271] do_syscall_64+0xcd/0x490 [ 97.944020][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.944046][ T6271] RIP: 0033:0x7ffa5318e929 [ 97.944066][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.944089][ T6271] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.944113][ T6271] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 97.944131][ T6271] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 97.944147][ T6271] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 97.944161][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.944175][ T6271] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 97.944210][ T6271] [ 98.712666][ T6283] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.461115][ T6293] FAULT_INJECTION: forcing a failure. [ 99.461115][ T6293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.475512][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.2.123 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 99.475548][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.475562][ T6293] Call Trace: [ 99.475570][ T6293] [ 99.475580][ T6293] dump_stack_lvl+0x16c/0x1f0 [ 99.475623][ T6293] should_fail_ex+0x512/0x640 [ 99.475667][ T6293] should_fail_alloc_page+0xe7/0x130 [ 99.475702][ T6293] prepare_alloc_pages+0x3c2/0x610 [ 99.475735][ T6293] ? rcu_is_watching+0x12/0xc0 [ 99.475767][ T6293] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 99.475812][ T6293] ? rcu_is_watching+0x12/0xc0 [ 99.475838][ T6293] ? mod_memcg_lruvec_state+0x394/0x610 [ 99.475874][ T6293] ? __mod_zone_page_state+0xcc/0x1a0 [ 99.475912][ T6293] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.475953][ T6293] ? folios_put_refs+0x5ce/0x740 [ 99.475984][ T6293] ? __pfx_folios_put_refs+0x10/0x10 [ 99.476010][ T6293] ? __lock_acquire+0x622/0x1c90 [ 99.476043][ T6293] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.476091][ T6293] ? policy_nodemask+0xea/0x4e0 [ 99.476114][ T6293] alloc_pages_mpol+0x1fb/0x550 [ 99.476136][ T6293] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.476164][ T6293] ? filemap_get_entry+0x1a7/0x3b0 [ 99.476194][ T6293] folio_alloc_noprof+0x20/0x2d0 [ 99.476223][ T6293] filemap_alloc_folio_noprof+0x3a1/0x470 [ 99.476259][ T6293] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 99.476302][ T6293] __filemap_get_folio+0x5e1/0xc30 [ 99.476336][ T6293] ioctx_alloc+0x761/0x2120 [ 99.476380][ T6293] ? __pfx_ioctx_alloc+0x10/0x10 [ 99.476406][ T6293] ? __might_fault+0x13b/0x190 [ 99.476448][ T6293] __x64_sys_io_setup+0xc9/0x210 [ 99.476479][ T6293] do_syscall_64+0xcd/0x490 [ 99.476518][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.476543][ T6293] RIP: 0033:0x7ff8cf18e929 [ 99.476564][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.476587][ T6293] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 99.476610][ T6293] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 99.476627][ T6293] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 99.476642][ T6293] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.476657][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.476672][ T6293] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 99.476703][ T6293] [ 100.354867][ T6312] netlink: 342 bytes leftover after parsing attributes in process `syz.3.133'. [ 100.410345][ T6314] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.002512][ T6325] FAULT_INJECTION: forcing a failure. [ 101.002512][ T6325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.049206][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.0.137 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 101.049243][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.049257][ T6325] Call Trace: [ 101.049265][ T6325] [ 101.049274][ T6325] dump_stack_lvl+0x16c/0x1f0 [ 101.049319][ T6325] should_fail_ex+0x512/0x640 [ 101.049357][ T6325] should_fail_alloc_page+0xe7/0x130 [ 101.049387][ T6325] prepare_alloc_pages+0x3c2/0x610 [ 101.049419][ T6325] ? rcu_is_watching+0x12/0xc0 [ 101.049450][ T6325] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 101.049496][ T6325] ? __lock_acquire+0x622/0x1c90 [ 101.049533][ T6325] ? xas_create+0x1d7/0x1460 [ 101.049559][ T6325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 101.049602][ T6325] ? lock_acquire+0x179/0x350 [ 101.049632][ T6325] ? rcu_is_watching+0x12/0xc0 [ 101.049667][ T6325] ? __lock_acquire+0x622/0x1c90 [ 101.049698][ T6325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.049733][ T6325] ? policy_nodemask+0xea/0x4e0 [ 101.049759][ T6325] alloc_pages_mpol+0x1fb/0x550 [ 101.049784][ T6325] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 101.049809][ T6325] ? filemap_get_entry+0x1a7/0x3b0 [ 101.049836][ T6325] folio_alloc_noprof+0x20/0x2d0 [ 101.049861][ T6325] filemap_alloc_folio_noprof+0x3a1/0x470 [ 101.049893][ T6325] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 101.049943][ T6325] __filemap_get_folio+0x5e1/0xc30 [ 101.049980][ T6325] ioctx_alloc+0x761/0x2120 [ 101.050034][ T6325] ? __pfx_ioctx_alloc+0x10/0x10 [ 101.050065][ T6325] ? __might_fault+0x13b/0x190 [ 101.050112][ T6325] __x64_sys_io_setup+0xc9/0x210 [ 101.050148][ T6325] do_syscall_64+0xcd/0x490 [ 101.050189][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.050216][ T6325] RIP: 0033:0x7f2aab98e929 [ 101.050236][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.050259][ T6325] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 101.050284][ T6325] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 101.050301][ T6325] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 101.050316][ T6325] RBP: 00007f2aaba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 101.050331][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.050346][ T6325] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 101.050382][ T6325] [ 101.754752][ T6349] program syz.2.147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.218142][ T6364] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.453147][ T6368] FAULT_INJECTION: forcing a failure. [ 102.453147][ T6368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.471538][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.1.155 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 102.471574][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.471588][ T6368] Call Trace: [ 102.471597][ T6368] [ 102.471606][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 102.471651][ T6368] should_fail_ex+0x512/0x640 [ 102.471694][ T6368] should_fail_alloc_page+0xe7/0x130 [ 102.471723][ T6368] prepare_alloc_pages+0x3c2/0x610 [ 102.471754][ T6368] ? rcu_is_watching+0x12/0xc0 [ 102.471785][ T6368] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 102.471832][ T6368] ? __lock_acquire+0x622/0x1c90 [ 102.471880][ T6368] ? xas_create+0x1d7/0x1460 [ 102.471907][ T6368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.471948][ T6368] ? lock_acquire+0x179/0x350 [ 102.471979][ T6368] ? rcu_is_watching+0x12/0xc0 [ 102.472014][ T6368] ? __lock_acquire+0x622/0x1c90 [ 102.472045][ T6368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.472084][ T6368] ? policy_nodemask+0xea/0x4e0 [ 102.472110][ T6368] alloc_pages_mpol+0x1fb/0x550 [ 102.472137][ T6368] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.472163][ T6368] ? filemap_get_entry+0x1a7/0x3b0 [ 102.472193][ T6368] folio_alloc_noprof+0x20/0x2d0 [ 102.472223][ T6368] filemap_alloc_folio_noprof+0x3a1/0x470 [ 102.472261][ T6368] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 102.472303][ T6368] __filemap_get_folio+0x5e1/0xc30 [ 102.472338][ T6368] ioctx_alloc+0x761/0x2120 [ 102.472389][ T6368] ? __pfx_ioctx_alloc+0x10/0x10 [ 102.472419][ T6368] ? __might_fault+0x13b/0x190 [ 102.472465][ T6368] __x64_sys_io_setup+0xc9/0x210 [ 102.472502][ T6368] do_syscall_64+0xcd/0x490 [ 102.472542][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.472568][ T6368] RIP: 0033:0x7ffa5318e929 [ 102.472589][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.472611][ T6368] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 102.472636][ T6368] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 102.472652][ T6368] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 102.472667][ T6368] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.472683][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.472697][ T6368] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 102.472732][ T6368] [ 104.286180][ T6424] netlink: 130 bytes leftover after parsing attributes in process `syz.0.169'. [ 104.891756][ T5845] Bluetooth: hci0: Malformed LE Event: 0x1b [ 105.378390][ T5845] Bluetooth: hci3: Malformed LE Event: 0x1b [ 105.568071][ T6471] netlink: 130 bytes leftover after parsing attributes in process `syz.1.185'. [ 105.973706][ T5845] Bluetooth: hci1: Malformed LE Event: 0x1b [ 106.235701][ T6493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.134288][ T6514] FAULT_INJECTION: forcing a failure. [ 107.134288][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 107.164005][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.0.211 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 107.164043][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.164058][ T6514] Call Trace: [ 107.164067][ T6514] [ 107.164076][ T6514] dump_stack_lvl+0x16c/0x1f0 [ 107.164119][ T6514] should_fail_ex+0x512/0x640 [ 107.164153][ T6514] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 107.164193][ T6514] should_failslab+0xc2/0x120 [ 107.164217][ T6514] __kmalloc_cache_noprof+0x6a/0x3e0 [ 107.164250][ T6514] ? mark_held_locks+0x49/0x80 [ 107.164281][ T6514] ? rfkill_fop_open+0x1b6/0x750 [ 107.164317][ T6514] rfkill_fop_open+0x1b6/0x750 [ 107.164350][ T6514] ? __pfx_rfkill_fop_open+0x10/0x10 [ 107.164381][ T6514] misc_open+0x35d/0x420 [ 107.164412][ T6514] ? __pfx_misc_open+0x10/0x10 [ 107.164442][ T6514] chrdev_open+0x231/0x6a0 [ 107.164465][ T6514] ? __pfx_apparmor_file_open+0x10/0x10 [ 107.164511][ T6514] ? __pfx_chrdev_open+0x10/0x10 [ 107.164537][ T6514] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 107.164578][ T6514] do_dentry_open+0x744/0x1c10 [ 107.164616][ T6514] ? __pfx_chrdev_open+0x10/0x10 [ 107.164648][ T6514] vfs_open+0x82/0x3f0 [ 107.164681][ T6514] path_openat+0x1de4/0x2cb0 [ 107.164729][ T6514] ? __pfx_path_openat+0x10/0x10 [ 107.164765][ T6514] ? __lock_acquire+0xb8a/0x1c90 [ 107.164801][ T6514] do_filp_open+0x20b/0x470 [ 107.164834][ T6514] ? __pfx_do_filp_open+0x10/0x10 [ 107.164896][ T6514] ? alloc_fd+0x471/0x7d0 [ 107.164938][ T6514] do_sys_openat2+0x11b/0x1d0 [ 107.164965][ T6514] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.165009][ T6514] __x64_sys_openat+0x174/0x210 [ 107.165039][ T6514] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.165085][ T6514] do_syscall_64+0xcd/0x490 [ 107.165126][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.165150][ T6514] RIP: 0033:0x7f2aab98e929 [ 107.165171][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.165193][ T6514] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.165217][ T6514] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 107.165234][ T6514] RDX: 0000000000080480 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 107.165250][ T6514] RBP: 00007f2aaba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 107.165265][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.165280][ T6514] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 107.165317][ T6514] [ 109.244519][ T6518] kexec: Could not allocate control_code_buffer [ 109.864173][ T5845] Bluetooth: hci1: unexpected event 0x04 length: 46 > 10 [ 110.054668][ T30] audit: type=1806 audit(1751658138.315:2): xattr="0x00060000" res=-22 [ 110.185778][ T6567] nbd: must specify at least one socket [ 111.075641][ T6579] ptp ptp0: max value is 20 [ 111.459581][ T6588] netlink: 342 bytes leftover after parsing attributes in process `syz.3.234'. [ 111.484963][ T6588] netlink: 342 bytes leftover after parsing attributes in process `syz.3.234'. [ 111.739490][ T6593] nbd: must specify at least one socket [ 111.804034][ T30] audit: type=1806 audit(1751658140.055:3): xattr="0x00060000" res=-22 [ 111.894839][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.611899][ T5845] Bluetooth: hci2: unexpected event 0x04 length: 46 > 10 [ 112.709137][ T6616] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 112.750322][ T6619] netlink: 342 bytes leftover after parsing attributes in process `syz.0.245'. [ 112.799173][ T6620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.245'. [ 114.375545][ T6649] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 114.614426][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.747589][ T6673] FAULT_INJECTION: forcing a failure. [ 115.747589][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 115.814540][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.2.259 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 115.814577][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.814592][ T6673] Call Trace: [ 115.814601][ T6673] [ 115.814611][ T6673] dump_stack_lvl+0x16c/0x1f0 [ 115.814653][ T6673] should_fail_ex+0x512/0x640 [ 115.814689][ T6673] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 115.814726][ T6673] should_failslab+0xc2/0x120 [ 115.814750][ T6673] __kmalloc_cache_noprof+0x6a/0x3e0 [ 115.814786][ T6673] ? lockdep_init_map_type+0x5c/0x280 [ 115.814818][ T6673] ? dummy_hrtimer_create+0x45/0x170 [ 115.814851][ T6673] dummy_hrtimer_create+0x45/0x170 [ 115.814882][ T6673] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 115.814919][ T6673] dummy_pcm_open+0xd4/0x5b0 [ 115.814951][ T6673] snd_pcm_open_substream+0xa60/0x17f0 [ 115.814988][ T6673] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 115.815024][ T6673] ? rcu_is_watching+0x12/0xc0 [ 115.815057][ T6673] snd_pcm_open+0x29e/0x730 [ 115.815094][ T6673] ? __pfx_snd_pcm_open+0x10/0x10 [ 115.815130][ T6673] ? __pfx_default_wake_function+0x10/0x10 [ 115.815168][ T6673] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 115.815200][ T6673] snd_pcm_capture_open+0x89/0xe0 [ 115.815232][ T6673] snd_open+0x1fe/0x450 [ 115.815256][ T6673] ? __pfx_snd_open+0x10/0x10 [ 115.815279][ T6673] chrdev_open+0x231/0x6a0 [ 115.815302][ T6673] ? __pfx_apparmor_file_open+0x10/0x10 [ 115.815334][ T6673] ? __pfx_chrdev_open+0x10/0x10 [ 115.815360][ T6673] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 115.815401][ T6673] do_dentry_open+0x744/0x1c10 [ 115.815438][ T6673] ? __pfx_chrdev_open+0x10/0x10 [ 115.815469][ T6673] vfs_open+0x82/0x3f0 [ 115.815502][ T6673] path_openat+0x1de4/0x2cb0 [ 115.815551][ T6673] ? __pfx_path_openat+0x10/0x10 [ 115.815590][ T6673] ? __lock_acquire+0xb8a/0x1c90 [ 115.815626][ T6673] do_filp_open+0x20b/0x470 [ 115.815662][ T6673] ? __pfx_do_filp_open+0x10/0x10 [ 115.815728][ T6673] ? alloc_fd+0x471/0x7d0 [ 115.815773][ T6673] do_sys_openat2+0x11b/0x1d0 [ 115.815803][ T6673] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.815849][ T6673] __x64_sys_openat+0x174/0x210 [ 115.815880][ T6673] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.815932][ T6673] do_syscall_64+0xcd/0x490 [ 115.815974][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.816000][ T6673] RIP: 0033:0x7ff8cf18e929 [ 115.816021][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.816045][ T6673] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.816069][ T6673] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 115.816086][ T6673] RDX: 0000000000001200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 115.816102][ T6673] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.816118][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.816133][ T6673] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 115.816166][ T6673] [ 117.379565][ T6708] FAULT_INJECTION: forcing a failure. [ 117.379565][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 117.417280][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.1.275 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 117.417317][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.417331][ T6708] Call Trace: [ 117.417340][ T6708] [ 117.417350][ T6708] dump_stack_lvl+0x16c/0x1f0 [ 117.417395][ T6708] should_fail_ex+0x512/0x640 [ 117.417431][ T6708] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 117.417471][ T6708] should_failslab+0xc2/0x120 [ 117.417497][ T6708] __kmalloc_cache_noprof+0x6a/0x3e0 [ 117.417533][ T6708] ? lockdep_init_map_type+0x5c/0x280 [ 117.417568][ T6708] ? dummy_hrtimer_create+0x45/0x170 [ 117.417619][ T6708] dummy_hrtimer_create+0x45/0x170 [ 117.417650][ T6708] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 117.417680][ T6708] dummy_pcm_open+0xd4/0x5b0 [ 117.417709][ T6708] snd_pcm_open_substream+0xa60/0x17f0 [ 117.417745][ T6708] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 117.417779][ T6708] ? rcu_is_watching+0x12/0xc0 [ 117.417820][ T6708] snd_pcm_open+0x29e/0x730 [ 117.417858][ T6708] ? __pfx_snd_pcm_open+0x10/0x10 [ 117.417896][ T6708] ? __pfx_default_wake_function+0x10/0x10 [ 117.417935][ T6708] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 117.417968][ T6708] snd_pcm_capture_open+0x89/0xe0 [ 117.418001][ T6708] snd_open+0x1fe/0x450 [ 117.418026][ T6708] ? __pfx_snd_open+0x10/0x10 [ 117.418048][ T6708] chrdev_open+0x231/0x6a0 [ 117.418072][ T6708] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.418107][ T6708] ? __pfx_chrdev_open+0x10/0x10 [ 117.418134][ T6708] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 117.418177][ T6708] do_dentry_open+0x744/0x1c10 [ 117.418215][ T6708] ? __pfx_chrdev_open+0x10/0x10 [ 117.418246][ T6708] vfs_open+0x82/0x3f0 [ 117.418280][ T6708] path_openat+0x1de4/0x2cb0 [ 117.418330][ T6708] ? __pfx_path_openat+0x10/0x10 [ 117.418369][ T6708] ? __lock_acquire+0xb8a/0x1c90 [ 117.418407][ T6708] do_filp_open+0x20b/0x470 [ 117.418445][ T6708] ? __pfx_do_filp_open+0x10/0x10 [ 117.418510][ T6708] ? alloc_fd+0x471/0x7d0 [ 117.418556][ T6708] do_sys_openat2+0x11b/0x1d0 [ 117.418585][ T6708] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.418629][ T6708] __x64_sys_openat+0x174/0x210 [ 117.418660][ T6708] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.418707][ T6708] do_syscall_64+0xcd/0x490 [ 117.418748][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.418774][ T6708] RIP: 0033:0x7ffa5318e929 [ 117.418795][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.418829][ T6708] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.418855][ T6708] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 117.418872][ T6708] RDX: 0000000000001200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 117.418889][ T6708] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.418905][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.418921][ T6708] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 117.418957][ T6708] [ 118.506014][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.523760][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.544415][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.584170][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.969164][ T6740] FAULT_INJECTION: forcing a failure. [ 118.969164][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 118.994414][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.1.287 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 118.994452][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.994467][ T6740] Call Trace: [ 118.994476][ T6740] [ 118.994486][ T6740] dump_stack_lvl+0x16c/0x1f0 [ 118.994530][ T6740] should_fail_ex+0x512/0x640 [ 118.994566][ T6740] ? __kvmalloc_node_noprof+0x124/0x620 [ 118.994606][ T6740] should_failslab+0xc2/0x120 [ 118.994632][ T6740] __kvmalloc_node_noprof+0x137/0x620 [ 118.994666][ T6740] ? do_semtimedop+0x235/0x2e0 [ 118.994701][ T6740] ? do_semtimedop+0x235/0x2e0 [ 118.994728][ T6740] do_semtimedop+0x235/0x2e0 [ 118.994759][ T6740] ? __pfx_do_semtimedop+0x10/0x10 [ 118.994827][ T6740] ? rcu_is_watching+0x12/0xc0 [ 118.994859][ T6740] ? __x64_sys_futex+0x1e0/0x4c0 [ 118.994891][ T6740] ? __x64_sys_futex+0x1e9/0x4c0 [ 118.994933][ T6740] __x64_sys_semtimedop+0x1b4/0x1f0 [ 118.994966][ T6740] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 118.995006][ T6740] do_syscall_64+0xcd/0x490 [ 118.995045][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.995071][ T6740] RIP: 0033:0x7ffa5318e929 [ 118.995092][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.995115][ T6740] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 118.995139][ T6740] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 118.995157][ T6740] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000040 [ 118.995171][ T6740] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.995187][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.995201][ T6740] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 118.995236][ T6740] [ 119.530893][ T6750] netlink: 'syz.0.289': attribute type 35 has an invalid length. [ 120.434827][ T6770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.441026][ T6770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.474200][ T6770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.503877][ T6770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.700381][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 121.006879][ T6785] FAULT_INJECTION: forcing a failure. [ 121.006879][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 121.094068][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.2.300 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 121.094103][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.094117][ T6785] Call Trace: [ 121.094124][ T6785] [ 121.094134][ T6785] dump_stack_lvl+0x16c/0x1f0 [ 121.094183][ T6785] should_fail_ex+0x512/0x640 [ 121.094216][ T6785] ? __kvmalloc_node_noprof+0x124/0x620 [ 121.094252][ T6785] should_failslab+0xc2/0x120 [ 121.094279][ T6785] __kvmalloc_node_noprof+0x137/0x620 [ 121.094315][ T6785] ? do_semtimedop+0x235/0x2e0 [ 121.094350][ T6785] ? do_semtimedop+0x235/0x2e0 [ 121.094376][ T6785] do_semtimedop+0x235/0x2e0 [ 121.094408][ T6785] ? __pfx_do_semtimedop+0x10/0x10 [ 121.094475][ T6785] ? rcu_is_watching+0x12/0xc0 [ 121.094506][ T6785] ? __x64_sys_futex+0x1e0/0x4c0 [ 121.094534][ T6785] ? __x64_sys_futex+0x1e9/0x4c0 [ 121.094570][ T6785] __x64_sys_semtimedop+0x1b4/0x1f0 [ 121.094600][ T6785] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 121.094636][ T6785] do_syscall_64+0xcd/0x490 [ 121.094674][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.094698][ T6785] RIP: 0033:0x7ff8cf18e929 [ 121.094718][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.094746][ T6785] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 121.094773][ T6785] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 121.094791][ T6785] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000040 [ 121.094806][ T6785] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.094829][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.094843][ T6785] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 121.094877][ T6785] [ 121.593580][ T6791] netlink: 'syz.2.302': attribute type 35 has an invalid length. [ 121.972934][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 122.044216][ T6802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.087961][ T6802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.105731][ T6805] netlink: 326 bytes leftover after parsing attributes in process `syz.1.310'. [ 122.195143][ T6802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.224100][ T6802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.628156][ T6815] Invalid ELF header magic: != ELF [ 122.855975][ T6820] lo: entered allmulticast mode [ 122.864279][ T6822] netlink: 334 bytes leftover after parsing attributes in process `syz.1.317'. [ 122.970245][ T6823] lo: left allmulticast mode [ 124.053892][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.134733][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.213898][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.304362][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.722039][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 125.129815][ T6872] FAULT_INJECTION: forcing a failure. [ 125.129815][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 125.169761][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.0.337 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 125.169799][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.169814][ T6872] Call Trace: [ 125.169823][ T6872] [ 125.169834][ T6872] dump_stack_lvl+0x16c/0x1f0 [ 125.169877][ T6872] should_fail_ex+0x512/0x640 [ 125.169913][ T6872] ? fs_reclaim_acquire+0xae/0x150 [ 125.169948][ T6872] ? security_inode_init_security+0x13f/0x390 [ 125.169985][ T6872] should_failslab+0xc2/0x120 [ 125.170009][ T6872] __kmalloc_noprof+0xd2/0x510 [ 125.170055][ T6872] security_inode_init_security+0x13f/0x390 [ 125.170096][ T6872] ? __pfx_shmem_initxattrs+0x10/0x10 [ 125.170125][ T6872] ? __pfx_security_inode_init_security+0x10/0x10 [ 125.170178][ T6872] shmem_mknod+0x22e/0x450 [ 125.170215][ T6872] shmem_mkdir+0x31/0x80 [ 125.170246][ T6872] vfs_mkdir+0x590/0x8c0 [ 125.170283][ T6872] do_mkdirat+0x304/0x3e0 [ 125.170323][ T6872] ? __pfx_do_mkdirat+0x10/0x10 [ 125.170365][ T6872] ? getname_flags.part.0+0x1c5/0x550 [ 125.170399][ T6872] __x64_sys_mkdir+0xef/0x140 [ 125.170447][ T6872] do_syscall_64+0xcd/0x490 [ 125.170490][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.170517][ T6872] RIP: 0033:0x7f2aab98e929 [ 125.170537][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.170562][ T6872] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 125.170587][ T6872] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 125.170604][ T6872] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000000000000000 [ 125.170619][ T6872] RBP: 00007f2aaba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 125.170634][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.170649][ T6872] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 125.170684][ T6872] [ 126.051468][ T6890] FAULT_INJECTION: forcing a failure. [ 126.051468][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 126.074099][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.0.345 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 126.074136][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.074151][ T6890] Call Trace: [ 126.074160][ T6890] [ 126.074169][ T6890] dump_stack_lvl+0x16c/0x1f0 [ 126.074212][ T6890] should_fail_ex+0x512/0x640 [ 126.074247][ T6890] ? fs_reclaim_acquire+0xae/0x150 [ 126.074280][ T6890] should_failslab+0xc2/0x120 [ 126.074308][ T6890] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.074337][ T6890] ? find_held_lock+0x2b/0x80 [ 126.074368][ T6890] ? tomoyo_open_control+0x56/0xa30 [ 126.074398][ T6890] tomoyo_open_control+0x56/0xa30 [ 126.074427][ T6890] do_dentry_open+0x744/0x1c10 [ 126.074465][ T6890] ? __pfx_tomoyo_open+0x10/0x10 [ 126.074509][ T6890] vfs_open+0x82/0x3f0 [ 126.074543][ T6890] path_openat+0x1de4/0x2cb0 [ 126.074591][ T6890] ? __pfx_path_openat+0x10/0x10 [ 126.074629][ T6890] ? __lock_acquire+0xb8a/0x1c90 [ 126.074667][ T6890] do_filp_open+0x20b/0x470 [ 126.074704][ T6890] ? __pfx_do_filp_open+0x10/0x10 [ 126.074767][ T6890] ? alloc_fd+0x471/0x7d0 [ 126.074810][ T6890] do_sys_openat2+0x11b/0x1d0 [ 126.074839][ T6890] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.074882][ T6890] __x64_sys_openat+0x174/0x210 [ 126.074911][ T6890] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.074954][ T6890] do_syscall_64+0xcd/0x490 [ 126.074995][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.075020][ T6890] RIP: 0033:0x7f2aab98e929 [ 126.075041][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.075064][ T6890] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.075088][ T6890] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 126.075105][ T6890] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 126.075121][ T6890] RBP: 00007f2aaba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.075136][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.075151][ T6890] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 126.075184][ T6890] [ 126.788847][ T6911] ptp: physical clock is free running [ 126.971442][ T6913] sctp: [Deprecated]: syz.1.353 (pid 6913) Use of int in max_burst socket option deprecated. [ 126.971442][ T6913] Use struct sctp_assoc_value instead [ 127.535132][ T6927] FAULT_INJECTION: forcing a failure. [ 127.535132][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 127.581197][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.3.360 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 127.581236][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.581251][ T6927] Call Trace: [ 127.581260][ T6927] [ 127.581270][ T6927] dump_stack_lvl+0x16c/0x1f0 [ 127.581322][ T6927] should_fail_ex+0x512/0x640 [ 127.581360][ T6927] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 127.581400][ T6927] should_failslab+0xc2/0x120 [ 127.581426][ T6927] __kmalloc_cache_noprof+0x6a/0x3e0 [ 127.581461][ T6927] ? do_eventfd+0x67/0x2c0 [ 127.581491][ T6927] do_eventfd+0x67/0x2c0 [ 127.581513][ T6927] ? rcu_is_watching+0x12/0xc0 [ 127.581542][ T6927] __x64_sys_eventfd+0x32/0x50 [ 127.581568][ T6927] do_syscall_64+0xcd/0x490 [ 127.581610][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.581636][ T6927] RIP: 0033:0x7fe47578e929 [ 127.581657][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.581681][ T6927] RSP: 002b:00007fe476673038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 127.581704][ T6927] RAX: ffffffffffffffda RBX: 00007fe4759b5fa0 RCX: 00007fe47578e929 [ 127.581721][ T6927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 127.581736][ T6927] RBP: 00007fe475810b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.581751][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.581766][ T6927] R13: 0000000000000000 R14: 00007fe4759b5fa0 R15: 00007fff743ce488 [ 127.581798][ T6927] [ 127.943744][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.364'. [ 127.955441][ T6935] hsr0: entered allmulticast mode [ 127.961540][ T6935] hsr_slave_0: entered allmulticast mode [ 127.975661][ T6935] hsr_slave_1: entered allmulticast mode [ 128.034946][ T6943] openvswitch: netlink: Unknown nsh attribute 0 [ 128.181406][ T6947] netlink: 330 bytes leftover after parsing attributes in process `syz.0.368'. [ 128.190816][ T6947] : renamed from bond0 (while UP) [ 128.453497][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 128.473442][ T6959] veth0_vlan: entered allmulticast mode [ 129.322662][ T6991] FAULT_INJECTION: forcing a failure. [ 129.322662][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 129.400223][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.1.389 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 129.400261][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.400276][ T6991] Call Trace: [ 129.400284][ T6991] [ 129.400294][ T6991] dump_stack_lvl+0x16c/0x1f0 [ 129.400340][ T6991] should_fail_ex+0x512/0x640 [ 129.400376][ T6991] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 129.400422][ T6991] should_failslab+0xc2/0x120 [ 129.400448][ T6991] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 129.400487][ T6991] ? __pfx_proc_create_net_data+0x10/0x10 [ 129.400513][ T6991] ? nf_log_net_init+0x9f/0x450 [ 129.400539][ T6991] ? __pfx_nf_log_net_init+0x10/0x10 [ 129.400564][ T6991] kmemdup_noprof+0x29/0x60 [ 129.400601][ T6991] nf_log_net_init+0x9f/0x450 [ 129.400627][ T6991] ? __pfx_nf_log_net_init+0x10/0x10 [ 129.400652][ T6991] ops_init+0x1e2/0x5f0 [ 129.400680][ T6991] setup_net+0x1ff/0x510 [ 129.400701][ T6991] ? lockdep_init_map_type+0x5c/0x280 [ 129.400735][ T6991] ? __pfx_setup_net+0x10/0x10 [ 129.400762][ T6991] ? debug_mutex_init+0x37/0x70 [ 129.400794][ T6991] copy_net_ns+0x2a6/0x5f0 [ 129.400825][ T6991] create_new_namespaces+0x3ea/0xa90 [ 129.400863][ T6991] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 129.400903][ T6991] ksys_unshare+0x45b/0xa40 [ 129.400938][ T6991] ? __pfx_ksys_unshare+0x10/0x10 [ 129.400971][ T6991] ? xfd_validate_state+0x61/0x180 [ 129.401011][ T6991] __x64_sys_unshare+0x31/0x40 [ 129.401043][ T6991] do_syscall_64+0xcd/0x490 [ 129.401083][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.401106][ T6991] RIP: 0033:0x7ffa5318e929 [ 129.401126][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.401150][ T6991] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.401175][ T6991] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 129.401191][ T6991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 129.401204][ T6991] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 129.401219][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.401234][ T6991] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 129.401268][ T6991] [ 129.936816][ T7013] lo: entered allmulticast mode [ 130.011719][ T7016] lo: left allmulticast mode [ 130.126811][ T7020] Invalid ELF header magic: != ELF [ 130.332800][ T7028] netlink: 330 bytes leftover after parsing attributes in process `syz.2.411'. [ 130.433284][ T7028] : renamed from bond0 (while UP) [ 130.491440][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 130.512901][ T7030] veth0_vlan: entered allmulticast mode [ 131.813926][ T7060] lo: entered allmulticast mode [ 131.896617][ T7062] lo: left allmulticast mode [ 132.717218][ T7080] netlink: 330 bytes leftover after parsing attributes in process `syz.3.420'. [ 132.757320][ T7077] lo: entered allmulticast mode [ 132.762292][ T7080] : renamed from bond0 (while UP) [ 132.788767][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.795595][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.905763][ T7077] lo: left allmulticast mode [ 134.127893][ T7111] netlink: 330 bytes leftover after parsing attributes in process `syz.1.434'. [ 134.274753][ T7111] : renamed from bond0 (while UP) [ 134.550847][ T7120] FAULT_INJECTION: forcing a failure. [ 134.550847][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 134.594445][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.2.437 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 134.594481][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.594495][ T7120] Call Trace: [ 134.594503][ T7120] [ 134.594513][ T7120] dump_stack_lvl+0x16c/0x1f0 [ 134.594556][ T7120] should_fail_ex+0x512/0x640 [ 134.594598][ T7120] ? __kmalloc_noprof+0xbf/0x510 [ 134.594639][ T7120] ? __seq_open_private+0x22/0xd0 [ 134.594667][ T7120] should_failslab+0xc2/0x120 [ 134.594692][ T7120] __kmalloc_noprof+0xd2/0x510 [ 134.594726][ T7120] ? apparmor_file_open+0x1a1/0x9c0 [ 134.594757][ T7120] ? find_held_lock+0x2b/0x80 [ 134.594785][ T7120] __seq_open_private+0x22/0xd0 [ 134.594817][ T7120] sysvipc_proc_open+0x29/0x2d0 [ 134.594855][ T7120] ? __pfx_sysvipc_proc_open+0x10/0x10 [ 134.594888][ T7120] proc_reg_open+0x116/0x610 [ 134.594924][ T7120] do_dentry_open+0x744/0x1c10 [ 134.594958][ T7120] ? __pfx_proc_reg_open+0x10/0x10 [ 134.595000][ T7120] vfs_open+0x82/0x3f0 [ 134.595032][ T7120] path_openat+0x1de4/0x2cb0 [ 134.595079][ T7120] ? __pfx_path_openat+0x10/0x10 [ 134.595117][ T7120] ? __lock_acquire+0xb8a/0x1c90 [ 134.595153][ T7120] do_filp_open+0x20b/0x470 [ 134.595191][ T7120] ? __pfx_do_filp_open+0x10/0x10 [ 134.595254][ T7120] ? alloc_fd+0x471/0x7d0 [ 134.595298][ T7120] do_sys_openat2+0x11b/0x1d0 [ 134.595327][ T7120] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.595371][ T7120] __x64_sys_openat+0x174/0x210 [ 134.595402][ T7120] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.595447][ T7120] do_syscall_64+0xcd/0x490 [ 134.595487][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.595514][ T7120] RIP: 0033:0x7ff8cf18e929 [ 134.595535][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.595558][ T7120] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.595582][ T7120] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 134.595598][ T7120] RDX: 0000000000000082 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 134.595614][ T7120] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 134.595628][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.595643][ T7120] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 134.595677][ T7120] [ 137.622398][ T7181] netlink: 186 bytes leftover after parsing attributes in process `syz.3.461'. [ 137.646272][ T7181] netlink: 186 bytes leftover after parsing attributes in process `syz.3.461'. [ 137.695050][ T7192] netlink: 342 bytes leftover after parsing attributes in process `syz.1.465'. [ 137.979783][ T5848] Bluetooth: hci2: ISO packet too small [ 138.267442][ T7206] netlink: 342 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.332050][ T7206] netlink: 342 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.393419][ T7210] netlink: 334 bytes leftover after parsing attributes in process `syz.1.473'. [ 139.219057][ T7248] netlink: 334 bytes leftover after parsing attributes in process `syz.3.490'. [ 140.058708][ T7273] netlink: 342 bytes leftover after parsing attributes in process `syz.2.500'. [ 140.521346][ T7293] netlink: 342 bytes leftover after parsing attributes in process `syz.0.508'. [ 142.057932][ T7338] netlink: 342 bytes leftover after parsing attributes in process `syz.3.526'. [ 142.715776][ T7354] netlink: 342 bytes leftover after parsing attributes in process `syz.3.530'. [ 145.340492][ T7418] netlink: 342 bytes leftover after parsing attributes in process `syz.3.554'. [ 145.939058][ T7436] openvswitch: netlink: IP tunnel dst address not specified [ 145.971974][ T7436] openvswitch: netlink: IP tunnel dst address not specified [ 146.248540][ T7449] netlink: 342 bytes leftover after parsing attributes in process `syz.0.566'. [ 146.994963][ T7473] netlink: 342 bytes leftover after parsing attributes in process `syz.2.575'. [ 148.532197][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 148.571830][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 149.170715][ T7532] netlink: 334 bytes leftover after parsing attributes in process `syz.3.602'. [ 149.228430][ T7534] netlink: 'syz.1.603': attribute type 3 has an invalid length. [ 149.560316][ T7542] FAULT_INJECTION: forcing a failure. [ 149.560316][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 149.593959][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.3.606 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 149.593997][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.594011][ T7542] Call Trace: [ 149.594020][ T7542] [ 149.594029][ T7542] dump_stack_lvl+0x16c/0x1f0 [ 149.594073][ T7542] should_fail_ex+0x512/0x640 [ 149.594109][ T7542] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 149.594152][ T7542] should_failslab+0xc2/0x120 [ 149.594178][ T7542] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 149.594217][ T7542] ? security_file_alloc+0x34/0x2b0 [ 149.594255][ T7542] security_file_alloc+0x34/0x2b0 [ 149.594288][ T7542] init_file+0x93/0x4c0 [ 149.594315][ T7542] alloc_empty_file+0x73/0x1e0 [ 149.594344][ T7542] alloc_file_pseudo+0x13a/0x230 [ 149.594373][ T7542] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.594402][ T7542] ? tipc_sk_finish_conn+0x580/0x790 [ 149.594441][ T7542] sock_alloc_file+0x50/0x210 [ 149.594468][ T7542] __sys_socketpair+0x34e/0x5a0 [ 149.594503][ T7542] ? __pfx___sys_socketpair+0x10/0x10 [ 149.594532][ T7542] ? fput+0x70/0xf0 [ 149.594564][ T7542] ? xfd_validate_state+0x61/0x180 [ 149.594596][ T7542] ? __pfx_do_writev+0x10/0x10 [ 149.594636][ T7542] __x64_sys_socketpair+0x96/0x100 [ 149.594667][ T7542] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.594703][ T7542] do_syscall_64+0xcd/0x490 [ 149.594742][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.594767][ T7542] RIP: 0033:0x7fe47578e929 [ 149.594788][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.594811][ T7542] RSP: 002b:00007fe476673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 149.594835][ T7542] RAX: ffffffffffffffda RBX: 00007fe4759b5fa0 RCX: 00007fe47578e929 [ 149.594852][ T7542] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 149.594867][ T7542] RBP: 00007fe475810b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.594882][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.594897][ T7542] R13: 0000000000000000 R14: 00007fe4759b5fa0 R15: 00007fff743ce488 [ 149.594931][ T7542] [ 149.917242][ T7510] kexec: Could not allocate control_code_buffer [ 150.229441][ T7559] FAULT_INJECTION: forcing a failure. [ 150.229441][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 150.249595][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.1.613 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 150.249629][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.249643][ T7559] Call Trace: [ 150.249651][ T7559] [ 150.249661][ T7559] dump_stack_lvl+0x16c/0x1f0 [ 150.249701][ T7559] should_fail_ex+0x512/0x640 [ 150.249740][ T7559] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 150.249793][ T7559] should_failslab+0xc2/0x120 [ 150.249819][ T7559] __kmalloc_cache_noprof+0x6a/0x3e0 [ 150.249853][ T7559] ? pty_common_install+0x10e/0xb30 [ 150.249891][ T7559] pty_common_install+0x10e/0xb30 [ 150.249931][ T7559] ? __pfx_pty_install+0x10/0x10 [ 150.249965][ T7559] tty_init_dev.part.0+0x99/0x500 [ 150.249994][ T7559] tty_open+0xa50/0xf90 [ 150.250026][ T7559] ? __pfx_tty_open+0x10/0x10 [ 150.250050][ T7559] ? chrdev_open+0x58c/0x6a0 [ 150.250079][ T7559] ? __pfx_tty_open+0x10/0x10 [ 150.250102][ T7559] chrdev_open+0x231/0x6a0 [ 150.250127][ T7559] ? __pfx_chrdev_open+0x10/0x10 [ 150.250153][ T7559] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 150.250193][ T7559] do_dentry_open+0x744/0x1c10 [ 150.250230][ T7559] ? __pfx_chrdev_open+0x10/0x10 [ 150.250261][ T7559] vfs_open+0x82/0x3f0 [ 150.250293][ T7559] path_openat+0x1de4/0x2cb0 [ 150.250349][ T7559] ? __pfx_path_openat+0x10/0x10 [ 150.250394][ T7559] ? __lock_acquire+0xb8a/0x1c90 [ 150.250433][ T7559] do_filp_open+0x20b/0x470 [ 150.250471][ T7559] ? __pfx_do_filp_open+0x10/0x10 [ 150.250535][ T7559] ? alloc_fd+0x471/0x7d0 [ 150.250579][ T7559] do_sys_openat2+0x11b/0x1d0 [ 150.250608][ T7559] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.250651][ T7559] __x64_sys_openat+0x174/0x210 [ 150.250680][ T7559] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.250725][ T7559] do_syscall_64+0xcd/0x490 [ 150.250765][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.250789][ T7559] RIP: 0033:0x7ffa5318e929 [ 150.250809][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.250832][ T7559] RSP: 002b:00007ffa50ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.250855][ T7559] RAX: ffffffffffffffda RBX: 00007ffa533b5fa0 RCX: 00007ffa5318e929 [ 150.250871][ T7559] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 150.250886][ T7559] RBP: 00007ffa53210b39 R08: 0000000000000000 R09: 0000000000000000 [ 150.250902][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.250916][ T7559] R13: 0000000000000000 R14: 00007ffa533b5fa0 R15: 00007fffa1ab99c8 [ 150.250951][ T7559] [ 151.661420][ T7610] netlink: 'syz.2.637': attribute type 11 has an invalid length. [ 152.161156][ T7630] FAULT_INJECTION: forcing a failure. [ 152.161156][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 152.193869][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.2.646 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 152.193904][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.193918][ T7630] Call Trace: [ 152.193926][ T7630] [ 152.193935][ T7630] dump_stack_lvl+0x16c/0x1f0 [ 152.193983][ T7630] should_fail_ex+0x512/0x640 [ 152.194020][ T7630] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 152.194058][ T7630] should_failslab+0xc2/0x120 [ 152.194084][ T7630] __kmalloc_cache_noprof+0x6a/0x3e0 [ 152.194118][ T7630] ? vsnprintf+0x318/0x1160 [ 152.194148][ T7630] ? __alloc_workqueue+0xda2/0x1810 [ 152.194186][ T7630] __alloc_workqueue+0xda2/0x1810 [ 152.194226][ T7630] ? __pfx_vsnprintf+0x10/0x10 [ 152.194262][ T7630] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.194298][ T7630] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 152.194336][ T7630] alloc_workqueue+0xd2/0x200 [ 152.194367][ T7630] ? __pfx_alloc_workqueue+0x10/0x10 [ 152.194409][ T7630] ? __pfx___debug_object_init+0x10/0x10 [ 152.194447][ T7630] nci_register_device+0x21e/0xb80 [ 152.194481][ T7630] ? __pfx_nci_register_device+0x10/0x10 [ 152.194516][ T7630] ? lockdep_init_map_type+0x5c/0x280 [ 152.194555][ T7630] virtual_ncidev_open+0x141/0x220 [ 152.194589][ T7630] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 152.194619][ T7630] misc_open+0x35d/0x420 [ 152.194651][ T7630] ? __pfx_misc_open+0x10/0x10 [ 152.194681][ T7630] chrdev_open+0x231/0x6a0 [ 152.194704][ T7630] ? __pfx_apparmor_file_open+0x10/0x10 [ 152.194737][ T7630] ? __pfx_chrdev_open+0x10/0x10 [ 152.194764][ T7630] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 152.194805][ T7630] do_dentry_open+0x744/0x1c10 [ 152.194843][ T7630] ? __pfx_chrdev_open+0x10/0x10 [ 152.194874][ T7630] vfs_open+0x82/0x3f0 [ 152.194908][ T7630] path_openat+0x1de4/0x2cb0 [ 152.194957][ T7630] ? __pfx_path_openat+0x10/0x10 [ 152.194995][ T7630] ? __lock_acquire+0xb8a/0x1c90 [ 152.195034][ T7630] do_filp_open+0x20b/0x470 [ 152.195086][ T7630] ? __pfx_do_filp_open+0x10/0x10 [ 152.195152][ T7630] ? alloc_fd+0x471/0x7d0 [ 152.195199][ T7630] do_sys_openat2+0x11b/0x1d0 [ 152.195234][ T7630] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.195276][ T7630] __x64_sys_openat+0x174/0x210 [ 152.195305][ T7630] ? __pfx___x64_sys_openat+0x10/0x10 [ 152.195346][ T7630] do_syscall_64+0xcd/0x490 [ 152.195383][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.195408][ T7630] RIP: 0033:0x7ff8cf18e929 [ 152.195427][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.195450][ T7630] RSP: 002b:00007ff8d00a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.195473][ T7630] RAX: ffffffffffffffda RBX: 00007ff8cf3b5fa0 RCX: 00007ff8cf18e929 [ 152.195488][ T7630] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 152.195503][ T7630] RBP: 00007ff8cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.195517][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.195530][ T7630] R13: 0000000000000000 R14: 00007ff8cf3b5fa0 R15: 00007ffe285cd1b8 [ 152.195561][ T7630] [ 152.725412][ T7643] Device name cannot be null; rc = [-22] [ 153.593299][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'. [ 153.634390][ T5848] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 153.759512][ T7666] team0: Port device team_slave_1 removed [ 154.237032][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 155.104447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 155.225536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.148149][ T7737] ptp ptp0: delete virtual clock ptp16 [ 156.169494][ T7737] [ 156.171864][ T7737] ====================================================== [ 156.178896][ T7737] WARNING: possible circular locking dependency detected [ 156.185921][ T7737] 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 Not tainted [ 156.193024][ T7737] ------------------------------------------------------ [ 156.200030][ T7737] syz.0.689/7737 is trying to acquire lock: [ 156.205914][ T7737] ffff8880356a4130 (&clk->rwsem){++++}-{4:4}, at: posix_clock_unregister+0x4d/0xd0 [ 156.215243][ T7737] [ 156.215243][ T7737] but task is already holding lock: [ 156.222598][ T7737] ffff88814bd10868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 156.232156][ T7737] [ 156.232156][ T7737] which lock already depends on the new lock. [ 156.232156][ T7737] [ 156.242566][ T7737] [ 156.242566][ T7737] the existing dependency chain (in reverse order) is: [ 156.251575][ T7737] [ 156.251575][ T7737] -> #1 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 156.259577][ T7737] __mutex_lock+0x199/0xb90 [ 156.264615][ T7737] ptp_clock_adjtime+0x527/0x760 [ 156.270080][ T7737] pc_clock_adjtime+0x118/0x1e0 [ 156.275466][ T7737] __do_sys_clock_adjtime+0x175/0x290 [ 156.281373][ T7737] do_syscall_64+0xcd/0x490 [ 156.286413][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.292833][ T7737] [ 156.292833][ T7737] -> #0 (&clk->rwsem){++++}-{4:4}: [ 156.300134][ T7737] __lock_acquire+0x126f/0x1c90 [ 156.305515][ T7737] lock_acquire+0x179/0x350 [ 156.310540][ T7737] down_write+0x92/0x200 [ 156.315300][ T7737] posix_clock_unregister+0x4d/0xd0 [ 156.321022][ T7737] ptp_clock_unregister+0x14f/0x250 [ 156.326743][ T7737] ptp_vclock_unregister+0x11a/0x160 [ 156.332555][ T7737] unregister_vclock+0x108/0x1a0 [ 156.338021][ T7737] device_for_each_child_reverse+0x133/0x1a0 [ 156.344541][ T7737] n_vclocks_store+0x4b6/0x6d0 [ 156.349832][ T7737] dev_attr_store+0x55/0x80 [ 156.354857][ T7737] sysfs_kf_write+0xf2/0x150 [ 156.359968][ T7737] kernfs_fop_write_iter+0x354/0x510 [ 156.365785][ T7737] vfs_write+0x6c7/0x1150 [ 156.370652][ T7737] ksys_write+0x12a/0x250 [ 156.375511][ T7737] do_syscall_64+0xcd/0x490 [ 156.380547][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.386962][ T7737] [ 156.386962][ T7737] other info that might help us debug this: [ 156.386962][ T7737] [ 156.397187][ T7737] Possible unsafe locking scenario: [ 156.397187][ T7737] [ 156.404628][ T7737] CPU0 CPU1 [ 156.409981][ T7737] ---- ---- [ 156.415336][ T7737] lock(&ptp->n_vclocks_mux); [ 156.420096][ T7737] lock(&clk->rwsem); [ 156.426691][ T7737] lock(&ptp->n_vclocks_mux); [ 156.433983][ T7737] lock(&clk->rwsem); [ 156.438062][ T7737] [ 156.438062][ T7737] *** DEADLOCK *** [ 156.438062][ T7737] [ 156.446196][ T7737] 5 locks held by syz.0.689/7737: [ 156.451209][ T7737] #0: ffff88803578b7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 156.460279][ T7737] #1: ffff88803704c428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 156.469261][ T7737] #2: ffff888033abf488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 156.479013][ T7737] #3: ffff88814bf00d28 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 156.489029][ T7737] #4: ffff88814bd10868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 156.498959][ T7737] [ 156.498959][ T7737] stack backtrace: [ 156.504838][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.0.689 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 156.504862][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.504873][ T7737] Call Trace: [ 156.504881][ T7737] [ 156.504889][ T7737] dump_stack_lvl+0x116/0x1f0 [ 156.504919][ T7737] print_circular_bug+0x275/0x350 [ 156.504944][ T7737] check_noncircular+0x14c/0x170 [ 156.504971][ T7737] __lock_acquire+0x126f/0x1c90 [ 156.504999][ T7737] lock_acquire+0x179/0x350 [ 156.505022][ T7737] ? posix_clock_unregister+0x4d/0xd0 [ 156.505044][ T7737] ? __pfx___might_resched+0x10/0x10 [ 156.505064][ T7737] ? cdev_default_release+0x35/0x50 [ 156.505095][ T7737] down_write+0x92/0x200 [ 156.505112][ T7737] ? posix_clock_unregister+0x4d/0xd0 [ 156.505138][ T7737] ? __pfx_down_write+0x10/0x10 [ 156.505155][ T7737] ? kobject_put+0x210/0x5a0 [ 156.505173][ T7737] posix_clock_unregister+0x4d/0xd0 [ 156.505194][ T7737] ptp_clock_unregister+0x14f/0x250 [ 156.505217][ T7737] ptp_vclock_unregister+0x11a/0x160 [ 156.505244][ T7737] unregister_vclock+0x108/0x1a0 [ 156.505268][ T7737] ? __pfx_unregister_vclock+0x10/0x10 [ 156.505291][ T7737] device_for_each_child_reverse+0x133/0x1a0 [ 156.505318][ T7737] ? __pfx_device_for_each_child_reverse+0x10/0x10 [ 156.505342][ T7737] ? __pfx_kstrtouint+0x10/0x10 [ 156.505367][ T7737] n_vclocks_store+0x4b6/0x6d0 [ 156.505392][ T7737] ? __pfx_n_vclocks_store+0x10/0x10 [ 156.505417][ T7737] ? find_held_lock+0x2b/0x80 [ 156.505437][ T7737] ? __pfx_n_vclocks_store+0x10/0x10 [ 156.505460][ T7737] dev_attr_store+0x55/0x80 [ 156.505478][ T7737] ? __pfx_dev_attr_store+0x10/0x10 [ 156.505495][ T7737] sysfs_kf_write+0xf2/0x150 [ 156.505518][ T7737] kernfs_fop_write_iter+0x354/0x510 [ 156.505537][ T7737] ? __pfx_sysfs_kf_write+0x10/0x10 [ 156.505560][ T7737] vfs_write+0x6c7/0x1150 [ 156.505585][ T7737] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 156.505606][ T7737] ? __pfx___mutex_lock+0x10/0x10 [ 156.505632][ T7737] ? __pfx_vfs_write+0x10/0x10 [ 156.505665][ T7737] ksys_write+0x12a/0x250 [ 156.505690][ T7737] ? __pfx_ksys_write+0x10/0x10 [ 156.505721][ T7737] do_syscall_64+0xcd/0x490 [ 156.505750][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.505769][ T7737] RIP: 0033:0x7f2aab98e929 [ 156.505785][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.505801][ T7737] RSP: 002b:00007f2aa97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.505818][ T7737] RAX: ffffffffffffffda RBX: 00007f2aabbb5fa0 RCX: 00007f2aab98e929 [ 156.505831][ T7737] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 156.505842][ T7737] RBP: 00007f2aaba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.505853][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.505864][ T7737] R13: 0000000000000000 R14: 00007f2aabbb5fa0 R15: 00007ffc2d8b7958 [ 156.505881][ T7737] [ 156.813087][ T7737] ptp ptp0: delete virtual clock ptp15 [ 156.868400][ T7737] ptp ptp0: delete virtual clock ptp14 [ 156.877767][ T7737] ptp ptp0: delete virtual clock ptp13 [ 156.885326][ T7737] ptp ptp0: delete virtual clock ptp12 [ 156.919155][ T7737] ptp ptp0: delete virtual clock ptp11 [ 156.929543][ T7737] ptp ptp0: delete virtual clock ptp10 [ 156.947012][ T7737] ptp ptp0: delete virtual clock ptp9 [ 156.961489][ T7737] ptp ptp0: delete virtual clock ptp8 [ 156.979491][ T7737] ptp ptp0: delete virtual clock ptp7 [ 157.007331][ T7737] ptp ptp0: delete virtual clock ptp6 [ 157.014112][ T7737] ptp ptp0: delete virtual clock ptp5 [ 157.021034][ T7737] ptp ptp0: delete virtual clock ptp4 [ 157.029047][ T7737] ptp ptp0: guarantee physical clock free running