last executing test programs: 18.842492677s ago: executing program 3 (id=41): r0 = io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x240, 0x0) r2 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mmap$auto(0x10000000000000, 0x4, 0x4, 0x14, r2, 0x8000) preadv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x2}, 0x4, 0x7, 0xe3) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1030, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_PHY_CAPS={0x1004, 0x18, 0x0, 0x1, [@generic="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"]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 18.45436271s ago: executing program 3 (id=42): pidfd_open$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x18, 0x5, 0x2) r0 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0xc001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) 18.132891227s ago: executing program 3 (id=44): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0xedf, 0x81, 0xdf, 0x100000000000eb1, r1, 0x1) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port8/power/pm_qos_no_power_off\x00', 0x8201, 0x0) read$auto(r2, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x182, 0x0) (async) r3 = fspick$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x6) (async) ioperm$auto(0x3, 0xe, 0x2000000000000149) (async) msgctl$auto_IPC_RMID(0x9, 0x0, 0x0) (async) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6, 0x233, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[], 0x3d0}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 17.278343781s ago: executing program 3 (id=47): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000180)="bf308fd31a0ee1560a63766c9fcf33c74040b214a016c342822bf0d712c7e8cba55b40ab5c50182dfe7c8ef8422423a78c0f1b6afebe4a780146735793cbe3f523e6c19bb493068ae6bc7f3cb84ffdafd1eeeb6e24da3b821232f010d240681d272022d3a7df67c4427e29b41684b53d93129ba8689d420d235ecbd5b36b16278794d6c7997505e767aa1904a5cf0280af3132c7004ea1886ac24e75d08d5093abb9cdff91978bae832251fb219f5a2f1f48ed", 0xb3) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sysfs$auto(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 14.640820754s ago: executing program 3 (id=52): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto_BPF_ITER_CREATE(0x21, 0x0, 0xfffffffd) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r2 = socket(0x39, 0x2, 0x4) socket(0x10, 0x2, 0xc) write$auto(r2, 0x0, 0xfdef) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800fedbdf250300000008000200000000", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) connect$auto(r1, &(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x7) close_range$auto(0x2, 0x8, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0xdb5, 0x1}, 0x7ff, &(0x7f0000000280)={0x9, 0x8}, &(0x7f0000000300)={0x8}, 0x8) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) setrlimit$auto(0x1000000007, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) poll$auto(0x0, 0x0, 0x9f) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x63, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 14.220939889s ago: executing program 3 (id=55): mmap$auto(0xc, 0x1000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x11a) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvlan0\x00'}) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ec0), r4) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$auto_KVM_GET_MSRS(r2, 0x8400ae8e, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xc008ae67, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video33\x00', 0x0, 0x0) ioctl$auto(r6, 0xc0845657, r6) 6.373133437s ago: executing program 0 (id=88): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) sysfs$auto(0x8, 0x4, 0x26f2d20a) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000080)="f8540ba2b2e8b2979f50dd7aee82a7602fd517d011a211a5a2d9e50115d69dd538d7e75e6772b172a2269c5adf29f4843a79a3b916b4599bc9b008fe21f8f15c8127571e1ec92f41fb0178177fe61160c36f8229fd7fd261212feebb498bf06155c6cb1f0a092f92225ab50d0e08b62c15224d513a2e3cfc8be1570dc48729a3dc2098a3a0c21f883a38a69a0cac960a3c80333751ed44871ae13de3a0f7254748d769916e84ceb32144e5d645ce2ee7949aa643db71ef4bfaa10655ce68da6d262cd0af45092f12e39469f233e3af03da33d49954", 0xd5) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 5.736826454s ago: executing program 0 (id=89): socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, 0x0, 0x7f) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, 0x0, 0x20008844) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x22001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0x20, 0x0, 0x13, 0x70bd2a, 0x25dfdc00, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x20}}, 0x480d0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_secret$auto(0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r4 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/trap_flow_action_cookie\x00', 0x20000, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000080)=""/4083, 0x101c) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/fs/orangefs/stats/reads\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000001c0)=""/229, 0xe5) writev$auto(0x3, &(0x7f0000000100)={&(0x7f00000001c0), 0x7111}, 0x8) mmap$auto(0x3, 0x0, 0xdf, 0x9b72, r1, 0x28001) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x4042, 0x0) ioctl$auto_BLKDISCARD(r6, 0x1277, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), 0xffffffffffffffff) 4.124987648s ago: executing program 2 (id=95): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) 3.927828036s ago: executing program 2 (id=97): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x5, 0x0) fanotify_mark$auto(0x1000000000000, 0x65, 0x9, 0x1, 0x0) fanotify_mark$auto(0x0, 0x401, 0x9, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = mq_open$auto(&(0x7f0000000600)='/dev/snd/midiC2D0\x00', 0x7, 0xfffc, &(0x7f0000000640)={0x8000000000000000, 0x45e, 0x6e1}) pread64$auto(r0, &(0x7f0000000680)='\x00', 0x7, 0x37b) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffff9, 0x0, 0x200000100, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) setresuid$auto(0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810008, 0x1, 0x8000000008011, 0x3, 0x8000) read$auto_mon_fops_text_t_mon_text(r0, &(0x7f0000000180)=""/73, 0x49) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r2, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) 3.773008841s ago: executing program 1 (id=98): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f42) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x62, 0x0, &(0x7f00000000c0)=0x565) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r3 = bpf$auto_BPF_LINK_CREATE(0x1c, 0x0, 0x6) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000040)=0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1c8740, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) read$auto(r0, 0x0, 0x1f42) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(r2, 0x0, 0x62, 0x0, &(0x7f00000000c0)=0x565) (async) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) (async) bpf$auto_BPF_LINK_CREATE(0x1c, 0x0, 0x6) (async) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000040)=0x2) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1c8740, 0x0) (async) 3.688519974s ago: executing program 0 (id=99): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x84800, 0x0) ioctl$auto(r0, 0x800064bb, r0) r1 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r1, 0x0, 0x1000e6e) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe98, 0x0, 0x0, &(0x7f0000000040)={[0x54e, 0x10000000000005, 0x1, 0x8fd6, 0x948b, 0x5, 0x3392, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x4, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/0s\x00', 0x200000, 0x0) (async) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000340)={@siginfo_0_0={0x0, 0x2000081, 0x9, @_rt={0x0, 0x0, @sival_ptr=&(0x7f0000000640)="0de4c5c5ad0b640ec78439ac6411c4749553aa4b30690b7d3f60ff29aefb6c7efd524edaa13ddeb640bab7c382454cbc466445fc244d15491814637370085f124fc2dee5c7781db894d75954f4eafe9b33d1649f6c7555af6f39698035823f3666381e0f9f40eecde74591e7d4"}}}, 0xd, &(0x7f00000003c0)={{0x20000001000, 0x7ce}, {0x800000000010001}, 0x7ffffffe, 0x9, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0x8205, 0x3, 0xe, 0x0, 0xe}) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYBLOB="5fb3c95bbc35a1e23b085d4570b05d37477ff958595f6a1cb3e94d747502d7582d937cb9152917d1a5f3ef1eaf2b89b986f40a35b66dd0456113a5e253f96e04511dba312c7e80fdcd42978dac790e842b1ea5e7c92086ea87e3c2fe382e7b0f752ad0b030fea2ee2b22f31a7e257cab7777494a15d6f49b738ca8a88484ae43ca7f422ff3ddb43ff40acf604ed2bfcb2148b367bc35f14712d83b8049501378d54da8ef833a21a51445a24cc889940bb1f0308b126cf7ab57096b6819ebe49507b90254722b9bc8b812c70c2fab71f5fa3f4d5f4351620e55d1ebf819eb03b5", @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) close_range$auto(0x2, 0x8, 0x0) (async) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) (async) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 3.146572472s ago: executing program 1 (id=100): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) setresuid$auto(0x60, 0x1000, 0x607) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) r1 = fanotify_init$auto(0x65, 0x2) timer_gettime$auto(0x2, 0x0) r2 = socket(0x25, 0x1, 0xbffffe7a) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x8002) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) timer_settime$auto(0x0, 0x9, &(0x7f0000000000)={{0x5}, {0x3, 0x7}}, &(0x7f0000000040)={{0x0, 0x100000000}, {0x2, 0x7f97}}) io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000140)="b4579744ed405f00299ba54f92a4c5c114476aecff9722cbff56ba2c40743596d2683505ad25a44c1aca7733509e9f1b5df1dd2cb8150c52140020f7475b8c7b07de6a74cc9d5b5b0d0abd1e21155ea65e32ff74ad3f9d029ac81d6b3ca2f8160de5cc3f0f10ba2b23b6a5b97e8b89264986289e4bcc728e1ca04064114f612a734337598c06aaeee4a8f86633", 0x421bcc74) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES32=r1, @ANYBLOB="01002cbd000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) sched_setaffinity$auto(0x1, 0x1, 0x0) mmap$auto(0xb0, 0x7f, 0x6, 0x2000000000000eb0, 0xfffffffffffffffa, 0xfffffffffffffffd) socket(0xa, 0x5, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) 2.773035968s ago: executing program 2 (id=101): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100400, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop10\x00', 0x20000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r1, &(0x7f0000000040)={0x0, 0x7}, 0x3) write$auto(r0, 0x0, 0x6) 2.620759237s ago: executing program 2 (id=102): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd4/hctx0/cpu0/read_rq_list\x00', 0x848000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) mmap$auto(0x0, 0x8, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x13, 0x38) (async) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) (async) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000083, 0x400, 0xfffffffffffffffb}]}) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.415394921s ago: executing program 1 (id=103): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd8) r1 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)={0x400, &(0x7f0000000000)={0x418, 0x1e, 0x7, @raw=0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r5 = semctl$auto(0x831, 0x1, 0x1, 0x72) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r5}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_NAME={0xb, 0x1, 'ns/mnt\x00'}, @OVS_DP_ATTR_NAME={0xb, 0x1, 'ns/mnt\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x20040000) ioctl$auto(r0, 0x4020940c, r0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) socket(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) 2.192988316s ago: executing program 0 (id=104): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x1, 0x84) recvmmsg$auto(r2, 0x0, 0x5, 0x46586, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) kexec_load$auto(0x5, 0x4, 0x0, 0x2) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x80000000, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x6b) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x27fff) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @remote}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9aa, 0xe000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/version\x00', 0x2840, 0x0) 2.04407531s ago: executing program 1 (id=105): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) 2.027110585s ago: executing program 2 (id=106): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x20038045) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001400)=@bpf_attr_3={0x9, 0x3980, 0x9, 0xfffffffffffffffc, 0x9a2d, 0xba0, 0x5, 0x7, 0xffffffff, "931bcb8d96de85c087a1d2590dc12815", 0x0, 0xdf7f, 0xffffffffffffffff, 0xf8, 0x10001, 0xd9, 0x198f, 0x1, 0x486f, 0x6, @attach_btf_obj_fd, 0x0, 0x238ce248, 0xab9, 0x2, 0xfffffff8}, 0x204) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, 0x8, 0x0) open(0x0, 0x6242, 0x0) r3 = clone3$auto(0x0, 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0xffffffffffffffff) getpriority$auto_PRIO_PROCESS(0x0, r5) ptrace$auto(0x10, r4, 0x4, 0x7ff) ptrace$auto(0xf, r4, 0x1, 0x4053) bind$auto(r1, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0x6) syslog$auto(0x3, 0x0, 0xda) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x1, 0x7ff) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x51) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x80800, 0x0) mlockall$auto(0x5) prctl$auto(0x3ff, 0x7, r3, 0x6, 0x100000001) mlockall$auto(0x7) close_range$auto(r1, 0x8, 0x0) 1.6554705s ago: executing program 1 (id=107): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x2001, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x7) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25960000001a000d01e2d1b2c3e0f4246df8a3901298f8aa701033e4ad88680000b7846628098f8a832a0ebe13e17cca69215d1b9771fc05b90dfc148e56e2dec1a28c54c8c0533d15549d37f2fc8b57dc8c9f27743acef9e5a936fb0c5bcc06ae6f18ef52cab14dcbbc0c9c0923d52b4d00"/135], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0x4040aea0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 908.90567ms ago: executing program 1 (id=108): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r1, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000180)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x1000, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0xd1e, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 854.540542ms ago: executing program 0 (id=109): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)={0x48, r2, 0x1b, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x11, 0x0, 0x1, [@nested={0x10, 0xf2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r0, 0x40184152, 0x0) r3 = socket(0x2, 0x3, 0xfd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) 674.640621ms ago: executing program 2 (id=110): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x103, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop10\x00', 0x20000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r1, &(0x7f0000000040)={0x0, 0x7}, 0x3) write$auto(r0, 0x0, 0x6) 0s ago: executing program 0 (id=111): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0xfdfd) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="b2", 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r3, 0x0, 0x1) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x140c02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r6) sendmsg$auto_OVS_VPORT_CMD_NEW(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x2}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400c1) preadv$auto(r4, &(0x7f0000000000)={&(0x7f0000000080)="c027398d182d35fddfe54fed817873b8c2cb0f7e622d5b3a55fab51d504bf69977efab11f793ba6f8c20ee772651082d929160761254c5af7879d5032ef74cc7b603c041d308b0cd69f1944b7b1cc65314", 0xffffffff}, 0x7, 0x1, 0xa) sendfile$auto(r4, r4, &(0x7f0000000140)=0x8010, 0xe76) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 100.862005][ T5816] cgroup: Unknown subsys name 'net' [ 101.059265][ T5816] cgroup: Unknown subsys name 'cpuset' [ 101.069740][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.286134][ T854] cfg80211: failed to load regulatory.db [ 102.992864][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.447395][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.447791][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.456455][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.465646][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.472788][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.486449][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.494038][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.501289][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.503094][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.520405][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.527908][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.536229][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.536644][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.544467][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.554937][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.565726][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.574700][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.594892][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.617226][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.630927][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.141103][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 106.259408][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 106.372344][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 106.456579][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.464590][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.472117][ T5833] bridge_slave_0: entered allmulticast mode [ 106.481832][ T5833] bridge_slave_0: entered promiscuous mode [ 106.536203][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.543540][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.550877][ T5833] bridge_slave_1: entered allmulticast mode [ 106.558547][ T5833] bridge_slave_1: entered promiscuous mode [ 106.590535][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 106.655338][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.662542][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.669853][ T5834] bridge_slave_0: entered allmulticast mode [ 106.677726][ T5834] bridge_slave_0: entered promiscuous mode [ 106.688645][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.722943][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.731378][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.738781][ T5834] bridge_slave_1: entered allmulticast mode [ 106.746623][ T5834] bridge_slave_1: entered promiscuous mode [ 106.755726][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.817695][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.825173][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.832348][ T5832] bridge_slave_0: entered allmulticast mode [ 106.839969][ T5832] bridge_slave_0: entered promiscuous mode [ 106.879547][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.887067][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.895345][ T5832] bridge_slave_1: entered allmulticast mode [ 106.902693][ T5832] bridge_slave_1: entered promiscuous mode [ 106.919393][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.931413][ T5833] team0: Port device team_slave_0 added [ 106.959529][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.971307][ T5833] team0: Port device team_slave_1 added [ 107.062411][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.087056][ T5834] team0: Port device team_slave_0 added [ 107.093220][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.100906][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.108461][ T5831] bridge_slave_0: entered allmulticast mode [ 107.116256][ T5831] bridge_slave_0: entered promiscuous mode [ 107.125079][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.132106][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.158573][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.172936][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.189388][ T5834] team0: Port device team_slave_1 added [ 107.195901][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.203038][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.210433][ T5831] bridge_slave_1: entered allmulticast mode [ 107.218253][ T5831] bridge_slave_1: entered promiscuous mode [ 107.225814][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.232790][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.259218][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.361051][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.368600][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.394742][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.407691][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.414785][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.440859][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.456248][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.467656][ T5832] team0: Port device team_slave_0 added [ 107.476854][ T5832] team0: Port device team_slave_1 added [ 107.504281][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.547853][ T5833] hsr_slave_0: entered promiscuous mode [ 107.554930][ T5833] hsr_slave_1: entered promiscuous mode [ 107.564432][ T5842] Bluetooth: hci3: command tx timeout [ 107.592576][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.599703][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.625824][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.638859][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.646143][ T5149] Bluetooth: hci1: command tx timeout [ 107.648031][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.652113][ T5842] Bluetooth: hci0: command tx timeout [ 107.683549][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.723596][ T5842] Bluetooth: hci2: command tx timeout [ 107.745358][ T5831] team0: Port device team_slave_0 added [ 107.769744][ T5834] hsr_slave_0: entered promiscuous mode [ 107.776633][ T5834] hsr_slave_1: entered promiscuous mode [ 107.782878][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 107.789078][ T5834] Cannot create hsr debugfs directory [ 107.815143][ T5831] team0: Port device team_slave_1 added [ 107.922240][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.929450][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.955575][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.974175][ T5832] hsr_slave_0: entered promiscuous mode [ 107.980727][ T5832] hsr_slave_1: entered promiscuous mode [ 107.987141][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 107.992928][ T5832] Cannot create hsr debugfs directory [ 108.011998][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.019107][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.045402][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.176657][ T5831] hsr_slave_0: entered promiscuous mode [ 108.183094][ T5831] hsr_slave_1: entered promiscuous mode [ 108.189585][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 108.195407][ T5831] Cannot create hsr debugfs directory [ 108.548957][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.562577][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.574817][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.598578][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.661140][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.680625][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.697932][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.712373][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.821966][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.832869][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.846933][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.858033][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.994777][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.008216][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.019731][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.031952][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.053735][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.116823][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.147207][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.154484][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.167975][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.198217][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.205531][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.290203][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.307926][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.336436][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.343673][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.368667][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.375826][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.441724][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.472607][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.515962][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.523228][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.548027][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.555287][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.580581][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.595739][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.622928][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.630146][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.659695][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.666897][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.681196][ T5842] Bluetooth: hci3: command tx timeout [ 109.725452][ T5842] Bluetooth: hci0: command tx timeout [ 109.730933][ T5842] Bluetooth: hci1: command tx timeout [ 109.806365][ T5842] Bluetooth: hci2: command tx timeout [ 109.829337][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.037218][ T5833] veth0_vlan: entered promiscuous mode [ 110.108038][ T5833] veth1_vlan: entered promiscuous mode [ 110.136448][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.266709][ T5833] veth0_macvtap: entered promiscuous mode [ 110.313261][ T5833] veth1_macvtap: entered promiscuous mode [ 110.326306][ T5834] veth0_vlan: entered promiscuous mode [ 110.366446][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.388938][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.412347][ T5834] veth1_vlan: entered promiscuous mode [ 110.427315][ T3001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.437327][ T3001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.460758][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.468149][ T3001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.477180][ T3001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.492566][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.591892][ T5834] veth0_macvtap: entered promiscuous mode [ 110.631488][ T5834] veth1_macvtap: entered promiscuous mode [ 110.678888][ T5831] veth0_vlan: entered promiscuous mode [ 110.695004][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.708149][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.717116][ T5832] veth0_vlan: entered promiscuous mode [ 110.730314][ T5831] veth1_vlan: entered promiscuous mode [ 110.748609][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.795185][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.807056][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.807627][ T5832] veth1_vlan: entered promiscuous mode [ 110.824259][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.853168][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.901609][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.910833][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.920544][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.939621][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.967179][ T5831] veth0_macvtap: entered promiscuous mode [ 110.980225][ T5832] veth0_macvtap: entered promiscuous mode [ 111.000338][ T5832] veth1_macvtap: entered promiscuous mode [ 111.029323][ T5831] veth1_macvtap: entered promiscuous mode [ 111.112661][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.152421][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.172131][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.183899][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.192581][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.215591][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.242137][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.286320][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.318358][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.331481][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.345782][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.345814][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.364088][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.377687][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.401844][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.421759][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.656347][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.671881][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.723715][ T5842] Bluetooth: hci3: command tx timeout [ 111.740212][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.770130][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.804175][ T5842] Bluetooth: hci1: command tx timeout [ 111.809683][ T5149] Bluetooth: hci0: command tx timeout [ 111.847822][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.868623][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.888349][ T5149] Bluetooth: hci2: command tx timeout [ 111.952068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.992864][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.391921][ T5939] zswap: compressor not available [ 112.404526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.448015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.480406][ T5947] coredump: 15(syz.2.8): Core dump to core aborted: cannot preserve file permissions [ 112.724751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.912924][ T5939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.166396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.407022][ T5953] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 113.804278][ T5149] Bluetooth: hci3: command tx timeout [ 113.883941][ T5149] Bluetooth: hci0: command tx timeout [ 113.893525][ T5149] Bluetooth: hci1: command tx timeout [ 113.964284][ T5149] Bluetooth: hci2: command tx timeout [ 114.264501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.394289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 114.578811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.763995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.111929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.256833][ T5983] Console: switching to colour VGA+ 80x25 [ 115.703893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.988414][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 116.516481][ T5994] syz.1.16 (5994) used greatest stack depth: 19720 bytes left [ 116.882071][ T6010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.917017][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.308223][ T6004] random: crng reseeded on system resumption [ 117.485320][ T6017] FAULT_INJECTION: forcing a failure. [ 117.485320][ T6017] name failslab, interval 1, probability 0, space 0, times 1 [ 117.543165][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 117.543209][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.543232][ T6017] Call Trace: [ 117.543243][ T6017] [ 117.543256][ T6017] dump_stack_lvl+0x16c/0x1f0 [ 117.543302][ T6017] should_fail_ex+0x512/0x640 [ 117.543355][ T6017] ? __kmalloc_cache_noprof+0x5f/0x780 [ 117.543411][ T6017] should_failslab+0xc2/0x120 [ 117.543453][ T6017] __kmalloc_cache_noprof+0x72/0x780 [ 117.543507][ T6017] ? snd_seq_timer_new+0x44/0x1b0 [ 117.543545][ T6017] ? snd_seq_timer_new+0x44/0x1b0 [ 117.543574][ T6017] snd_seq_timer_new+0x44/0x1b0 [ 117.543608][ T6017] snd_seq_queue_alloc+0x177/0x5a0 [ 117.543664][ T6017] snd_seq_ioctl_create_queue+0xa9/0x390 [ 117.543707][ T6017] call_seq_client_ctl+0x9f/0x110 [ 117.543744][ T6017] snd_seq_kernel_client_ctl+0x77/0xd0 [ 117.543780][ T6017] alloc_seq_queue+0xda/0x180 [ 117.543829][ T6017] ? __pfx_alloc_seq_queue+0x10/0x10 [ 117.543890][ T6017] ? mark_held_locks+0x49/0x80 [ 117.543933][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.543963][ T6017] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.544003][ T6017] snd_seq_oss_open+0x38c/0xa20 [ 117.544051][ T6017] odev_open+0x79/0xc0 [ 117.544086][ T6017] ? __pfx_odev_open+0x10/0x10 [ 117.544122][ T6017] soundcore_open+0x40c/0x580 [ 117.544162][ T6017] ? __pfx_soundcore_open+0x10/0x10 [ 117.544199][ T6017] chrdev_open+0x234/0x6a0 [ 117.544240][ T6017] ? __pfx_chrdev_open+0x10/0x10 [ 117.544282][ T6017] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 117.544326][ T6017] do_dentry_open+0x982/0x1530 [ 117.544366][ T6017] ? __pfx_chrdev_open+0x10/0x10 [ 117.544415][ T6017] vfs_open+0x82/0x3f0 [ 117.544466][ T6017] path_openat+0x1de4/0x2cb0 [ 117.544516][ T6017] ? __pfx_path_openat+0x10/0x10 [ 117.544556][ T6017] ? __lock_acquire+0xb8a/0x1c90 [ 117.544606][ T6017] do_filp_open+0x20b/0x470 [ 117.544643][ T6017] ? __pfx_do_filp_open+0x10/0x10 [ 117.544710][ T6017] ? alloc_fd+0x471/0x7d0 [ 117.544756][ T6017] do_sys_openat2+0x11b/0x1d0 [ 117.544803][ T6017] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.544876][ T6017] __x64_sys_openat+0x174/0x210 [ 117.544928][ T6017] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.544993][ T6017] do_syscall_64+0xcd/0xfa0 [ 117.545031][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.545065][ T6017] RIP: 0033:0x7f6b2118efc9 [ 117.545100][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.545132][ T6017] RSP: 002b:00007f6b21f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.545163][ T6017] RAX: ffffffffffffffda RBX: 00007f6b213e5fa0 RCX: 00007f6b2118efc9 [ 117.545184][ T6017] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 117.545205][ T6017] RBP: 00007f6b21211f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.545224][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.545244][ T6017] R13: 00007f6b213e6038 R14: 00007f6b213e5fa0 R15: 00007fff94fb03d8 [ 117.545290][ T6017] [ 117.991090][ T6004] Restarting kernel threads ... [ 118.098624][ T6004] Done restarting kernel threads. [ 118.356153][ T6032] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.395053][ T6032] FAULT_INJECTION: forcing a failure. [ 118.395053][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 118.410720][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT(full) [ 118.410766][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.410785][ T6032] Call Trace: [ 118.410796][ T6032] [ 118.410807][ T6032] dump_stack_lvl+0x16c/0x1f0 [ 118.410851][ T6032] should_fail_ex+0x512/0x640 [ 118.410900][ T6032] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 118.410946][ T6032] should_failslab+0xc2/0x120 [ 118.411001][ T6032] __kmalloc_node_noprof+0xe0/0x8a0 [ 118.411042][ T6032] ? __rb_allocate_pages+0x4b7/0xeb0 [ 118.411087][ T6032] ? complete+0x131/0x200 [ 118.411130][ T6032] ? __rb_allocate_pages+0x4b7/0xeb0 [ 118.411171][ T6032] __rb_allocate_pages+0x4b7/0xeb0 [ 118.411227][ T6032] ring_buffer_subbuf_order_set+0x446/0x1910 [ 118.411284][ T6032] ? tracing_stop_tr+0x1cc/0x2a0 [ 118.411336][ T6032] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 118.411399][ T6032] buffer_subbuf_size_write+0x187/0x260 [ 118.411433][ T6032] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 118.411499][ T6032] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 118.411554][ T6032] vfs_write+0x2a0/0x11d0 [ 118.411595][ T6032] ? __pfx___mutex_lock+0x10/0x10 [ 118.411635][ T6032] ? __pfx_vfs_write+0x10/0x10 [ 118.411683][ T6032] ? __fget_files+0x20e/0x3c0 [ 118.411727][ T6032] ksys_write+0x12a/0x250 [ 118.411761][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 118.411809][ T6032] do_syscall_64+0xcd/0xfa0 [ 118.411848][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.411880][ T6032] RIP: 0033:0x7f6b2118efc9 [ 118.411906][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.411936][ T6032] RSP: 002b:00007f6b21f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.411966][ T6032] RAX: ffffffffffffffda RBX: 00007f6b213e5fa0 RCX: 00007f6b2118efc9 [ 118.411996][ T6032] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 118.412015][ T6032] RBP: 00007f6b21211f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.412034][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.412054][ T6032] R13: 00007f6b213e6038 R14: 00007f6b213e5fa0 R15: 00007fff94fb03d8 [ 118.412099][ T6032] [ 119.538254][ T6042] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 120.043245][ T6037] Zero length message leads to an empty skb [ 120.109168][ T6047] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.587562][ T6101] erspan0: entered allmulticast mode [ 123.704959][ T6103] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 6103 comm: syz.3.41) [ 123.839592][ T30] audit: type=1800 audit(1761790036.752:2): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.41" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=8125 res=0 errno=0 [ 124.094849][ T6109] netlink: 354 bytes leftover after parsing attributes in process `syz.3.42'. [ 124.551373][ T6120] mmap: syz.3.44 (6120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.952706][ T6119] netlink: 342 bytes leftover after parsing attributes in process `syz.2.45'. [ 125.000748][ T6119] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.100450][ T6119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.108118][ T6119] IPv6: NLM_F_CREATE should be set when creating new route [ 125.115451][ T6119] IPv6: NLM_F_CREATE should be set when creating new route [ 125.129524][ T6089] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 125.543107][ T6132] zswap: compressor not available [ 126.959917][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 127.303576][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.477815][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 128.060889][ T6170] FAULT_INJECTION: forcing a failure. [ 128.060889][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 128.103517][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT(full) [ 128.103562][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.103581][ T6170] Call Trace: [ 128.103591][ T6170] [ 128.103603][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 128.103642][ T6170] should_fail_ex+0x512/0x640 [ 128.103704][ T6170] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 128.103751][ T6170] should_failslab+0xc2/0x120 [ 128.103796][ T6170] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 128.103834][ T6170] ? kasan_save_stack+0x42/0x60 [ 128.103868][ T6170] ? kasan_save_stack+0x33/0x60 [ 128.103901][ T6170] ? kstrdup_const+0x63/0x80 [ 128.103938][ T6170] ? __kasan_kmalloc+0xaa/0xb0 [ 128.103983][ T6170] ? kstrdup+0x53/0x100 [ 128.104013][ T6170] kstrdup+0x53/0x100 [ 128.104048][ T6170] kstrdup_const+0x63/0x80 [ 128.104080][ T6170] __kernfs_new_node+0x9b/0x8e0 [ 128.104127][ T6170] ? __pfx___kernfs_new_node+0x10/0x10 [ 128.104177][ T6170] ? find_held_lock+0x2b/0x80 [ 128.104211][ T6170] ? kernfs_root+0xee/0x2a0 [ 128.104258][ T6170] kernfs_new_node+0x13c/0x1e0 [ 128.104306][ T6170] ? kasan_save_track+0x14/0x30 [ 128.104346][ T6170] kernfs_create_dir_ns+0x4c/0x1a0 [ 128.104400][ T6170] cgroup_mkdir+0x40f/0x1310 [ 128.104435][ T6170] ? __pfx_cgroup_mkdir+0x10/0x10 [ 128.104469][ T6170] kernfs_iop_mkdir+0x111/0x190 [ 128.104514][ T6170] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 128.104549][ T6170] vfs_mkdir+0x593/0x8c0 [ 128.104603][ T6170] do_mkdirat+0x304/0x3e0 [ 128.104642][ T6170] ? __pfx_do_mkdirat+0x10/0x10 [ 128.104695][ T6170] ? getname_flags.part.0+0x1c5/0x550 [ 128.104748][ T6170] __x64_sys_mkdir+0xef/0x140 [ 128.104786][ T6170] do_syscall_64+0xcd/0xfa0 [ 128.104826][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.104858][ T6170] RIP: 0033:0x7f481dd8efc9 [ 128.104886][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.104919][ T6170] RSP: 002b:00007f481ed0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 128.104951][ T6170] RAX: ffffffffffffffda RBX: 00007f481dfe5fa0 RCX: 00007f481dd8efc9 [ 128.104972][ T6170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 128.104992][ T6170] RBP: 00007f481de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.105012][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.105031][ T6170] R13: 00007f481dfe6038 R14: 00007f481dfe5fa0 R15: 00007ffc1e4fa538 [ 128.105077][ T6170] [ 129.950065][ T6206] netlink: 330 bytes leftover after parsing attributes in process `syz.2.64'. [ 130.025247][ T6206] : renamed from bond_slave_1 (while UP) [ 131.540005][ T6231] random: crng reseeded on system resumption [ 134.664512][ T6293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.674665][ T6293] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.826663][ T6293] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.866471][ T6293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.893603][ T6293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.961430][ T6293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.044884][ T6293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.052166][ T6293] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.139834][ T6293] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.174691][ T6293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.190436][ T6293] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.286223][ T6293] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.614521][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.835924][ T6353] FAULT_INJECTION: forcing a failure. [ 136.835924][ T6353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.906318][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 136.906363][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.906382][ T6353] Call Trace: [ 136.906392][ T6353] [ 136.906404][ T6353] dump_stack_lvl+0x16c/0x1f0 [ 136.906445][ T6353] should_fail_ex+0x512/0x640 [ 136.906501][ T6353] should_fail_alloc_page+0xe7/0x130 [ 136.906548][ T6353] prepare_alloc_pages+0x3c2/0x610 [ 136.906591][ T6353] ? rcu_is_watching+0x12/0xc0 [ 136.906630][ T6353] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 136.906671][ T6353] ? rcu_is_watching+0x12/0xc0 [ 136.906720][ T6353] ? trace_mm_page_alloc+0x11f/0x1a0 [ 136.906768][ T6353] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 136.906807][ T6353] ? __pfx_stack_trace_save+0x10/0x10 [ 136.906847][ T6353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.906881][ T6353] ? stack_depot_save_flags+0x29/0x9c0 [ 136.906945][ T6353] ? alloc_vmap_area+0x648/0x29e0 [ 136.906985][ T6353] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 136.907032][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.907082][ T6353] ? do_syscall_64+0xcd/0xfa0 [ 136.907116][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.907168][ T6353] alloc_pages_bulk_noprof+0x71c/0x1410 [ 136.907201][ T6353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.907259][ T6353] ? policy_nodemask+0xea/0x4e0 [ 136.907321][ T6353] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 136.907356][ T6353] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.907417][ T6353] kasan_populate_vmalloc+0x112/0x2d0 [ 136.907451][ T6353] ? alloc_vmap_area+0x8b5/0x29e0 [ 136.907497][ T6353] alloc_vmap_area+0x960/0x29e0 [ 136.907555][ T6353] ? __pfx_alloc_vmap_area+0x10/0x10 [ 136.907606][ T6353] __get_vm_area_node+0x1ca/0x330 [ 136.907657][ T6353] __vmalloc_node_range_noprof+0x271/0x1480 [ 136.907715][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.907764][ T6353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.907819][ T6353] ? policy_nodemask+0xea/0x4e0 [ 136.907864][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.907926][ T6353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.907980][ T6353] ? ___kmalloc_large_node+0xed/0x160 [ 136.908032][ T6353] __kvmalloc_node_noprof+0x431/0x9c0 [ 136.908069][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.908120][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.908168][ T6353] ? _copy_from_user+0x59/0xd0 [ 136.908222][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 136.908269][ T6353] __do_sys_listmount+0x280/0xeb0 [ 136.908331][ T6353] ? __pfx___do_sys_listmount+0x10/0x10 [ 136.908409][ T6353] do_syscall_64+0xcd/0xfa0 [ 136.908446][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.908478][ T6353] RIP: 0033:0x7f6d7e78efc9 [ 136.908503][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.908534][ T6353] RSP: 002b:00007f6d7f6da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 136.908565][ T6353] RAX: ffffffffffffffda RBX: 00007f6d7e9e5fa0 RCX: 00007f6d7e78efc9 [ 136.908587][ T6353] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 136.908607][ T6353] RBP: 00007f6d7e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.908626][ T6353] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 136.908643][ T6353] R13: 00007f6d7e9e6038 R14: 00007f6d7e9e5fa0 R15: 00007ffcdc321cb8 [ 136.908715][ T6353] [ 137.243601][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.249670][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.255872][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.381482][ T6353] syz.0.89: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.463479][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 137.463520][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.463542][ T6353] Call Trace: [ 137.463552][ T6353] [ 137.463564][ T6353] dump_stack_lvl+0x16c/0x1f0 [ 137.463603][ T6353] warn_alloc+0x248/0x3a0 [ 137.463636][ T6353] ? __pfx_warn_alloc+0x10/0x10 [ 137.463672][ T6353] ? kfree+0x2b8/0x6d0 [ 137.463695][ T6353] ? __get_vm_area_node+0x2cd/0x330 [ 137.463745][ T6353] ? __get_vm_area_node+0x2cd/0x330 [ 137.463786][ T6353] ? __get_vm_area_node+0x208/0x330 [ 137.463837][ T6353] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 137.463884][ T6353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.463946][ T6353] ? policy_nodemask+0xea/0x4e0 [ 137.463991][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 137.464050][ T6353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.464102][ T6353] ? ___kmalloc_large_node+0xed/0x160 [ 137.464153][ T6353] __kvmalloc_node_noprof+0x431/0x9c0 [ 137.464190][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 137.464240][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 137.464286][ T6353] ? _copy_from_user+0x59/0xd0 [ 137.464340][ T6353] ? __do_sys_listmount+0x280/0xeb0 [ 137.464385][ T6353] __do_sys_listmount+0x280/0xeb0 [ 137.464445][ T6353] ? __pfx___do_sys_listmount+0x10/0x10 [ 137.464519][ T6353] do_syscall_64+0xcd/0xfa0 [ 137.464556][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.464587][ T6353] RIP: 0033:0x7f6d7e78efc9 [ 137.464611][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.464641][ T6353] RSP: 002b:00007f6d7f6da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 137.464672][ T6353] RAX: ffffffffffffffda RBX: 00007f6d7e9e5fa0 RCX: 00007f6d7e78efc9 [ 137.464692][ T6353] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 137.464711][ T6353] RBP: 00007f6d7e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.464730][ T6353] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 137.464749][ T6353] R13: 00007f6d7e9e6038 R14: 00007f6d7e9e5fa0 R15: 00007ffcdc321cb8 [ 137.464791][ T6353] [ 137.771330][ T6353] Mem-Info: [ 137.774684][ T6353] active_anon:6106 inactive_anon:0 isolated_anon:0 [ 137.774684][ T6353] active_file:11764 inactive_file:40338 isolated_file:0 [ 137.774684][ T6353] unevictable:768 dirty:241 writeback:0 [ 137.774684][ T6353] slab_reclaimable:10513 slab_unreclaimable:91557 [ 137.774684][ T6353] mapped:24365 shmem:1359 pagetables:1116 [ 137.774684][ T6353] sec_pagetables:0 bounce:0 [ 137.774684][ T6353] kernel_misc_reclaimable:0 [ 137.774684][ T6353] free:1340754 free_pcp:2839 free_cma:0 [ 137.862170][ T6353] Node 0 active_anon:24224kB inactive_anon:0kB active_file:47056kB inactive_file:161224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97460kB dirty:960kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11356kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.896045][ T6353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.928369][ T6353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.960360][ T6353] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 137.966268][ T6353] Node 0 DMA32 free:1436788kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24224kB inactive_anon:0kB active_file:47056kB inactive_file:161224kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2545108kB mlocked:0kB bounce:0kB free_pcp:12240kB local_pcp:4740kB free_cma:0kB [ 138.002803][ T6353] lowmem_reserve[]: 0 0 1 1 1 [ 138.007662][ T6353] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.037588][ T6353] lowmem_reserve[]: 0 0 0 0 0 [ 138.042383][ T6353] Node 1 Normal free:3910868kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 138.075047][ T6353] lowmem_reserve[]: 0 0 0 0 0 [ 138.079847][ T6353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.177359][ T6353] Node 0 DMA32: 567*4kB (ME) 514*8kB (UME) 914*16kB (UM) 575*32kB (UME) 258*64kB (UME) 118*128kB (UME) 52*256kB (UME) 19*512kB (UME) 9*1024kB (UME) 7*2048kB (UM) 322*4096kB (M) = 1436524kB [ 138.235890][ T6373] synth uevent: /bus/usb/drivers/atusb: unknown uevent action string [ 138.255946][ T6353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.313444][ T6353] Node 1 Normal: 169*4kB (UME) 44*8kB (UME) 37*16kB (UME) 240*32kB (UME) 111*64kB (UME) 30*128kB (UME) 12*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3910932kB [ 138.365371][ T6353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.406604][ T6353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.444899][ T6353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.477646][ T6353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.503448][ T6353] 53457 total pagecache pages [ 138.516823][ T6353] 0 pages in swap cache [ 138.521170][ T6353] Free swap = 124996kB [ 138.533426][ T6353] Total swap = 124996kB [ 138.537634][ T6353] 2097051 pages RAM [ 138.569511][ T6353] 0 pages HighMem/MovableOnly [ 138.584963][ T6353] 428684 pages reserved [ 138.589167][ T6353] 0 pages cma reserved [ 138.685473][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.772073][ T6386] FAULT_INJECTION: forcing a failure. [ 138.772073][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 138.871015][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT(full) [ 138.871052][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.871068][ T6386] Call Trace: [ 138.871077][ T6386] [ 138.871088][ T6386] dump_stack_lvl+0x16c/0x1f0 [ 138.871126][ T6386] should_fail_ex+0x512/0x640 [ 138.871170][ T6386] ? __kmalloc_cache_noprof+0x5f/0x780 [ 138.871221][ T6386] should_failslab+0xc2/0x120 [ 138.871261][ T6386] __kmalloc_cache_noprof+0x72/0x780 [ 138.871309][ T6386] ? snd_seq_prioq_new+0x3f/0x110 [ 138.871355][ T6386] ? lockdep_init_map_type+0x5c/0x280 [ 138.871401][ T6386] ? snd_seq_prioq_new+0x3f/0x110 [ 138.871447][ T6386] snd_seq_prioq_new+0x3f/0x110 [ 138.871492][ T6386] snd_seq_queue_alloc+0x153/0x5a0 [ 138.871540][ T6386] snd_seq_ioctl_create_queue+0xa9/0x390 [ 138.871579][ T6386] call_seq_client_ctl+0x9f/0x110 [ 138.871612][ T6386] snd_seq_kernel_client_ctl+0x77/0xd0 [ 138.871646][ T6386] alloc_seq_queue+0xda/0x180 [ 138.871680][ T6386] ? __pfx_alloc_seq_queue+0x10/0x10 [ 138.871735][ T6386] ? mark_held_locks+0x49/0x80 [ 138.871773][ T6386] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.871808][ T6386] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.871857][ T6386] snd_seq_oss_open+0x38c/0xa20 [ 138.871897][ T6386] odev_open+0x79/0xc0 [ 138.871944][ T6386] ? __pfx_odev_open+0x10/0x10 [ 138.871976][ T6386] soundcore_open+0x40c/0x580 [ 138.872013][ T6386] ? __pfx_soundcore_open+0x10/0x10 [ 138.872046][ T6386] chrdev_open+0x234/0x6a0 [ 138.872080][ T6386] ? __pfx_apparmor_file_open+0x10/0x10 [ 138.872124][ T6386] ? __pfx_chrdev_open+0x10/0x10 [ 138.872161][ T6386] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 138.872202][ T6386] do_dentry_open+0x982/0x1530 [ 138.872236][ T6386] ? __pfx_chrdev_open+0x10/0x10 [ 138.872280][ T6386] vfs_open+0x82/0x3f0 [ 138.872325][ T6386] path_openat+0x1de4/0x2cb0 [ 138.872370][ T6386] ? __pfx_path_openat+0x10/0x10 [ 138.872405][ T6386] ? __lock_acquire+0xb8a/0x1c90 [ 138.872448][ T6386] do_filp_open+0x20b/0x470 [ 138.872481][ T6386] ? __pfx_do_filp_open+0x10/0x10 [ 138.872542][ T6386] ? alloc_fd+0x471/0x7d0 [ 138.872581][ T6386] do_sys_openat2+0x11b/0x1d0 [ 138.872623][ T6386] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.872668][ T6386] ? find_held_lock+0x2b/0x80 [ 138.872707][ T6386] __x64_sys_openat+0x174/0x210 [ 138.872752][ T6386] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.872820][ T6386] do_syscall_64+0xcd/0xfa0 [ 138.872855][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.872884][ T6386] RIP: 0033:0x7f481dd8efc9 [ 138.872906][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.872933][ T6386] RSP: 002b:00007f481ed0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.872960][ T6386] RAX: ffffffffffffffda RBX: 00007f481dfe5fa0 RCX: 00007f481dd8efc9 [ 138.872979][ T6386] RDX: 00000000001c8740 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 138.872998][ T6386] RBP: 00007f481de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.873016][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.873033][ T6386] R13: 00007f481dfe6038 R14: 00007f481dfe5fa0 R15: 00007ffc1e4fa538 [ 138.873074][ T6386] [ 139.325960][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.332799][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.339124][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.252217][ T6422] ovs_: entered promiscuous mode [ 140.418224][ T6427] FAULT_INJECTION: forcing a failure. [ 140.418224][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 140.467317][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 140.467358][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.467376][ T6427] Call Trace: [ 140.467386][ T6427] [ 140.467398][ T6427] dump_stack_lvl+0x16c/0x1f0 [ 140.467437][ T6427] should_fail_ex+0x512/0x640 [ 140.467496][ T6427] ? __kmalloc_cache_noprof+0x5f/0x780 [ 140.467550][ T6427] should_failslab+0xc2/0x120 [ 140.467597][ T6427] __kmalloc_cache_noprof+0x72/0x780 [ 140.467646][ T6427] ? __pfx_srcu_delay_timer+0x10/0x10 [ 140.467691][ T6427] ? init_srcu_struct_fields+0x97a/0xde0 [ 140.467745][ T6427] ? init_srcu_struct_fields+0x97a/0xde0 [ 140.467790][ T6427] init_srcu_struct_fields+0x97a/0xde0 [ 140.467838][ T6427] ? lockdep_init_map_type+0x5c/0x280 [ 140.467905][ T6427] kvm_dev_ioctl+0x7ac/0x1a80 [ 140.467949][ T6427] ? find_held_lock+0x2b/0x80 [ 140.467979][ T6427] ? hook_file_ioctl_common+0x145/0x410 [ 140.468012][ T6427] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 140.468053][ T6427] ? __fget_files+0x20e/0x3c0 [ 140.468090][ T6427] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 140.468129][ T6427] __x64_sys_ioctl+0x18e/0x210 [ 140.468179][ T6427] do_syscall_64+0xcd/0xfa0 [ 140.468216][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.468247][ T6427] RIP: 0033:0x7f6d7e78efc9 [ 140.468270][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.468310][ T6427] RSP: 002b:00007f6d7f6da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.468339][ T6427] RAX: ffffffffffffffda RBX: 00007f6d7e9e5fa0 RCX: 00007f6d7e78efc9 [ 140.468359][ T6427] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 140.468377][ T6427] RBP: 00007f6d7e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.468396][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.468415][ T6427] R13: 00007f6d7e9e6038 R14: 00007f6d7e9e5fa0 R15: 00007ffcdc321cb8 [ 140.468455][ T6427] [ 140.774124][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.404605][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.410651][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.416794][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.719332][ T6450] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 142.112218][ T6454] FAULT_INJECTION: forcing a failure. [ 142.112218][ T6454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.161698][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 142.161741][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.161761][ T6454] Call Trace: [ 142.161771][ T6454] [ 142.161783][ T6454] dump_stack_lvl+0x16c/0x1f0 [ 142.161825][ T6454] should_fail_ex+0x512/0x640 [ 142.161881][ T6454] should_fail_alloc_page+0xe7/0x130 [ 142.161931][ T6454] prepare_alloc_pages+0x3c2/0x610 [ 142.161973][ T6454] ? ksys_write+0x12a/0x250 [ 142.162006][ T6454] ? do_syscall_64+0xcd/0xfa0 [ 142.162046][ T6454] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 142.162117][ T6454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.162186][ T6454] ? rcu_is_watching+0x12/0xc0 [ 142.162222][ T6454] ? trace_kmalloc+0x2b/0xd0 [ 142.162260][ T6454] ? __kmalloc_node_noprof+0x364/0x8a0 [ 142.162297][ T6454] ? __rb_allocate_pages+0x4b7/0xeb0 [ 142.162338][ T6454] ? complete+0x131/0x200 [ 142.162377][ T6454] __alloc_pages_noprof+0xb/0x1b0 [ 142.162409][ T6454] __rb_allocate_pages+0x64f/0xeb0 [ 142.162463][ T6454] ring_buffer_subbuf_order_set+0x446/0x1910 [ 142.162518][ T6454] ? tracing_stop_tr+0x1cc/0x2a0 [ 142.162566][ T6454] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 142.162626][ T6454] buffer_subbuf_size_write+0x187/0x260 [ 142.162658][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.162727][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.162778][ T6454] vfs_write+0x2a0/0x11d0 [ 142.162819][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 142.162857][ T6454] ? __pfx_vfs_write+0x10/0x10 [ 142.162902][ T6454] ? __fget_files+0x20e/0x3c0 [ 142.162946][ T6454] ksys_write+0x12a/0x250 [ 142.162979][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 142.163025][ T6454] do_syscall_64+0xcd/0xfa0 [ 142.163061][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.163091][ T6454] RIP: 0033:0x7f6b2118efc9 [ 142.163116][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.163153][ T6454] RSP: 002b:00007f6b21f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.163184][ T6454] RAX: ffffffffffffffda RBX: 00007f6b213e5fa0 RCX: 00007f6b2118efc9 [ 142.163205][ T6454] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 142.163224][ T6454] RBP: 00007f6b21211f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.163243][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.163262][ T6454] R13: 00007f6b213e6038 R14: 00007f6b213e5fa0 R15: 00007fff94fb03d8 [ 142.163303][ T6454] [ 142.163762][ T6454] ------------[ cut here ]------------ [ 142.419913][ T6454] WARNING: CPU: 1 PID: 6454 at kernel/trace/trace.c:2497 tracing_start_tr+0x250/0x2f0 [ 142.429512][ T6454] Modules linked in: [ 142.433556][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 142.442777][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.452859][ T6454] RIP: 0010:tracing_start_tr+0x250/0x2f0 [ 142.458564][ T6454] Code: 00 0f 85 99 00 00 00 48 83 3d ab 22 61 0c 00 74 70 e8 14 19 fb ff 4c 89 ef e8 6c 81 9e 09 90 e9 eb fe ff ff e8 01 19 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 ce fe ff ff e8 e9 18 fb [ 142.478205][ T6454] RSP: 0018:ffffc9000b0e7bd8 EFLAGS: 00010087 [ 142.484302][ T6454] RAX: 00000000000171ee RBX: ffffffff8e44aa20 RCX: ffffc9000c3bc000 [ 142.492292][ T6454] RDX: 0000000000080000 RSI: ffffffff81c1523f RDI: 0000000000000005 [ 142.500282][ T6454] RBP: 1ffff9200161cf7c R08: 0000000000000005 R09: 0000000000000000 [ 142.508269][ T6454] R10: 00000000ffffffff R11: 0000000000000001 R12: 00000000ffffffff [ 142.516255][ T6454] R13: dffffc0000000000 R14: 0000000000000283 R15: ffffffff8e44ab00 [ 142.524361][ T6454] FS: 00007f6b21f6f6c0(0000) GS:ffff888124b10000(0000) knlGS:0000000000000000 [ 142.533313][ T6454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.539922][ T6454] CR2: 0000001b315f6ff8 CR3: 000000004b7be000 CR4: 00000000003526f0 [ 142.547914][ T6454] Call Trace: [ 142.551206][ T6454] [ 142.554152][ T6454] ? __pfx_tracing_start_tr+0x10/0x10 [ 142.559575][ T6454] buffer_subbuf_size_write+0x1ca/0x260 [ 142.565156][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.571314][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.577428][ T6454] vfs_write+0x2a0/0x11d0 [ 142.581793][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 142.586844][ T6454] ? __pfx_vfs_write+0x10/0x10 [ 142.591643][ T6454] ? __fget_files+0x20e/0x3c0 [ 142.596358][ T6454] ksys_write+0x12a/0x250 [ 142.600711][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 142.605596][ T6454] do_syscall_64+0xcd/0xfa0 [ 142.610126][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.616049][ T6454] RIP: 0033:0x7f6b2118efc9 [ 142.620503][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.640225][ T6454] RSP: 002b:00007f6b21f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.648663][ T6454] RAX: ffffffffffffffda RBX: 00007f6b213e5fa0 RCX: 00007f6b2118efc9 [ 142.656647][ T6454] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 142.664657][ T6454] RBP: 00007f6b21211f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.672654][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.680654][ T6454] R13: 00007f6b213e6038 R14: 00007f6b213e5fa0 R15: 00007fff94fb03d8 [ 142.688665][ T6454] [ 142.691700][ T6454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.698993][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 142.708205][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.718275][ T6454] Call Trace: [ 142.721570][ T6454] [ 142.724515][ T6454] dump_stack_lvl+0x3d/0x1f0 [ 142.729137][ T6454] vpanic+0x640/0x6f0 [ 142.733247][ T6454] ? tracing_start_tr+0x250/0x2f0 [ 142.738303][ T6454] panic+0xca/0xd0 [ 142.742061][ T6454] ? __pfx_panic+0x10/0x10 [ 142.746548][ T6454] check_panic_on_warn+0xab/0xb0 [ 142.751566][ T6454] __warn+0xf6/0x3c0 [ 142.755516][ T6454] ? tracing_start_tr+0x250/0x2f0 [ 142.760586][ T6454] report_bug+0x3c3/0x580 [ 142.764949][ T6454] ? tracing_start_tr+0x250/0x2f0 [ 142.770023][ T6454] handle_bug+0x184/0x210 [ 142.774395][ T6454] exc_invalid_op+0x17/0x50 [ 142.778934][ T6454] asm_exc_invalid_op+0x1a/0x20 [ 142.783811][ T6454] RIP: 0010:tracing_start_tr+0x250/0x2f0 [ 142.789481][ T6454] Code: 00 0f 85 99 00 00 00 48 83 3d ab 22 61 0c 00 74 70 e8 14 19 fb ff 4c 89 ef e8 6c 81 9e 09 90 e9 eb fe ff ff e8 01 19 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 ce fe ff ff e8 e9 18 fb [ 142.809118][ T6454] RSP: 0018:ffffc9000b0e7bd8 EFLAGS: 00010087 [ 142.815213][ T6454] RAX: 00000000000171ee RBX: ffffffff8e44aa20 RCX: ffffc9000c3bc000 [ 142.823216][ T6454] RDX: 0000000000080000 RSI: ffffffff81c1523f RDI: 0000000000000005 [ 142.831204][ T6454] RBP: 1ffff9200161cf7c R08: 0000000000000005 R09: 0000000000000000 [ 142.839192][ T6454] R10: 00000000ffffffff R11: 0000000000000001 R12: 00000000ffffffff [ 142.847180][ T6454] R13: dffffc0000000000 R14: 0000000000000283 R15: ffffffff8e44ab00 [ 142.855195][ T6454] ? tracing_start_tr+0x24f/0x2f0 [ 142.860286][ T6454] ? tracing_start_tr+0x24f/0x2f0 [ 142.865356][ T6454] ? __pfx_tracing_start_tr+0x10/0x10 [ 142.870801][ T6454] buffer_subbuf_size_write+0x1ca/0x260 [ 142.876384][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.882513][ T6454] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 142.888627][ T6454] vfs_write+0x2a0/0x11d0 [ 142.892994][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 142.898049][ T6454] ? __pfx_vfs_write+0x10/0x10 [ 142.902868][ T6454] ? __fget_files+0x20e/0x3c0 [ 142.907582][ T6454] ksys_write+0x12a/0x250 [ 142.911942][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 142.916832][ T6454] do_syscall_64+0xcd/0xfa0 [ 142.921367][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.927284][ T6454] RIP: 0033:0x7f6b2118efc9 [ 142.931715][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.951400][ T6454] RSP: 002b:00007f6b21f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.959856][ T6454] RAX: ffffffffffffffda RBX: 00007f6b213e5fa0 RCX: 00007f6b2118efc9 [ 142.967855][ T6454] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 142.975946][ T6454] RBP: 00007f6b21211f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.984038][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.992031][ T6454] R13: 00007f6b213e6038 R14: 00007f6b213e5fa0 R15: 00007fff94fb03d8 [ 143.000043][ T6454] [ 143.003408][ T6454] Kernel Offset: disabled [ 143.007747][ T6454] Rebooting in 86400 seconds..