last executing test programs: 9.529403301s ago: executing program 0 (id=188): mmap$auto(0x0, 0x2020009, 0x1000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_USBDEVFS_FORBID_SUSPEND(r0, 0x5521, 0x0) r1 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) read$auto(r1, 0x0, 0x4000000081) (async) unshare$auto(0x40000080) (async) r2 = setfsgid$auto(0xee00) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000000c0)={{0x100, 0xffffffffffffffff, r2, 0xe, 0x5, 0x1, 0x2}, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x6, 0x6, 0x2, 0x9, 0xfffffffffffffff7, 0x5, 0x8000, 0xa, 0xa}) keyctl$auto_KEY_SPEC_PROCESS_KEYRING(0x9, r3, 0xee00, r2, 0xfffffffffffffffe) 8.853387832s ago: executing program 3 (id=189): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0xa, 0x801, 0x84) r3 = bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r2, 0x2f, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0xfff}, 0x63a) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x8) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x6, 0x2}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r4, 0x40025504, 0xea3) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/state\x00', 0x2, 0x0) 7.182405638s ago: executing program 1 (id=192): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram4/trace/end_lba\x00', 0x10b001, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) (fail_nth: 2) 6.50364722s ago: executing program 1 (id=193): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffff12}, 0x1, 0x0, 0x0, 0x4004810}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2000c004) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0xe, 0xd9, 0x4, 0x9b76, r0, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(r1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/block/nbd0/make-it-fail\x00', 0xc2681, 0x0) write$auto(r3, &(0x7f0000000040)='-\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(r2, 0x4b67, 0x1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x8}, 0x3, 0x1) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3, 0x1000000}, 0x5, 0x1, 0x8000, "dad29c0500000000000000ffff00"}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x70}, 0x4}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r2, @ANYRES32=r4, @ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="20dc8f93d36cad22da21c064b5f6105f0fd2d67caae6bdfb8805705a30617f45eba29af305340332c088245b27d8d579be184520cbf013ab0177b165bda7124cf23640b5b3f1e6fecf8965c6898175b998facca1137c4fc160f3d2bab8880c7183a631adcbe2d2e9de3151670ae108250447f4486574b757bc74cb1cf2fb246a88d9e8252439fefe", @ANYBLOB="c2d14cec19aea5074b59e9cb864a5b29c169293a4f62ceaaf9f777c38963abf3a5710924ce3dd42baf6a73067597e7fd3b6f715b5b7997ded797070ecca65efa4e8c193e0a0db7c3517427f26d5779ca8b7f8f8a7367e24cb994ee79f9d75f2c3d4bdd03f8137c23f4a98a68d3cc0db0a84af071500954cf71f0c389b1de977239e2229f58c562b91f7990069c0f175b130586b574d890aebacc"], 0x1ac}, 0x1, 0x0, 0x0, 0x200000d1}, 0x40000) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40800) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x108002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x461de4754e6c60de, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8341, 0x0) ioctl$auto(r7, 0x40045109, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f0000000340)={0x5}) 6.130002734s ago: executing program 1 (id=195): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) msgctl$auto(0x6, 0x6, &(0x7f0000000240)={{0x400, 0xee01, 0x0, 0x5, 0x33, 0x2}, &(0x7f0000000100)=0xe3, &(0x7f0000000140), 0x6ad222ff, 0x7fff, 0x7fff, 0x3, 0x7, 0xd8, 0x1000, 0x5, @raw=0x10001, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x11a4, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1190, 0x9, 0x0, 0x1, [@generic="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", @typed={0x1f, 0xcc, 0x0, 0x0, @str='/proc/thread-self/fail-nth\x00'}, @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x4, 0x6e}, @generic="a171f72a1b6ed30a591d9214c55583a34a30af1d6b196f824590b2c50e26d20a09d4ffa014f0a4aab9fe9c02c652a881", @nested={0x8, 0x93, 0x0, 0x1, [@nested={0x4, 0xc6}]}, @nested={0x11a, 0x52, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="f36637df754f98ed417c5e14041dac2bd50133b1e071502c50a18ec3e797b6fa1fdd2f552365a14c67a044267e25a205f59aa5ce7915b7a1fcf9657c41a794a22fc16f078ba78cc66380a1cb542e31441b032298b48002b6b3352cebecb8cf40428468b095663fb04ea323a30cb092c06772c5d910b964f649dec8fe2efae7ffe9e606be7e3925a3120f14b8ee7ffde3610542bab4836fc97846243751087a26588991aa360a7da8159a6fe2f400cd33a436c684ce9dd4e1f7d89d282c8a15907742c861a06804c1fb7de37fe24fe5f9d340cc07b82d17d8e386251110f25e4cc695943ad7408926ee7fca6a4c91f737eaf5", @nested={0x4, 0x57}, @typed={0x8, 0x8f, 0x0, 0x0, @uid=r1}]}]}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x2000000}, 0x40040) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 5.575613682s ago: executing program 0 (id=196): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x5, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0x1, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x8, 0x9, 0xcb, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x7, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', &(0x7f0000000040)=0x6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1200"], 0x1ac}}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) acct$auto(&(0x7f0000000000)='/dev/dri/card1\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40342, 0x62) utimensat$auto(r3, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x7, 0x3ffffffb}, 0x1000) ioctl$auto(0xffffffffffffffff, 0x921064a1, 0x9) socket(0x10, 0x2, 0x0) r4 = fanotify_init$auto(0xba, 0x0) fanotify_mark$auto(r4, 0x205, 0x100002, 0x4, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) 5.509447278s ago: executing program 3 (id=197): madvise$auto(0x0, 0xffffffffffff0006, 0x55) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x100) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)='8', 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x7, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d42, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeed9, 0x7, 0x100000001, 0x800000000000009, 0x6, 0x1ff, 0x400000000000006, 0x3, 0x4, 0x17, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 5.398093124s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x2) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f00000002c0)=@generic={0x11, "fd8f4e3a5a2a2635f2b54ef5616f"}, 0x2) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40811) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xe00}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '})[\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$auto(r1, 0x84, 0x76, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) getcwd$auto(0x0, 0x9) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x7f, 0x80000, @raw=0x1000}, 0x283) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000001f80)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x1, 0x0, 0x0, @str='q\x1b[:+)*\\.#!\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) 4.811078827s ago: executing program 0 (id=199): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x9, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) shmctl$auto(0x0, 0xd, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x58, &(0x7f0000000080)={0x7fffffff, 0x2000d, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x23d8, 0x6, 0xf, 0x4000029f, 0x100, 0x7f, 0x80000, 0x6, 0x5}, {0x203, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x7, 0x100000000}}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) shutdown$auto(0x200000003, 0x2) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc03) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r1 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x1a4) read$auto(r1, 0x0, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) 4.756535637s ago: executing program 1 (id=200): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x4, 0x80000000, 0xffa, 0x16, r1, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4008490) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xeb, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x470801, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r4, 0x0) socket(0xa, 0x3, 0x6) socket(0xb, 0x5, 0x0) 4.477687623s ago: executing program 3 (id=201): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram4/trace/end_lba\x00', 0x10b001, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) (fail_nth: 3) 4.343563416s ago: executing program 1 (id=202): r0 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0xe) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/operstate\x00', 0x40, 0x0) mmap$auto(0x4, 0x1000, 0x46, 0xeb1, r0, 0x8000) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0x3}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x44000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x0, 0x0) ioctl$auto_IOC_PR_CLEAR(r1, 0x401070cd, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r2) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.715012855s ago: executing program 2 (id=203): openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x400383, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 3.714803611s ago: executing program 3 (id=204): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) listen$auto(0xffffffffffffffff, 0x5ed) unshare$auto(0x40000080) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r3, 0x0, 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/version\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r5, 0x0, 0x2, 0x0) 3.641349364s ago: executing program 2 (id=205): close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(r0, 0x0, 0x55) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) r1 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) sysfs$auto(0x2, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r2, 0x8, r1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) 3.295584368s ago: executing program 3 (id=206): madvise$auto(0x0, 0xffffffffffff0007, 0x8000019) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x6}, 0xc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto(r0, &(0x7f0000000100)='syz_tun\x00', 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop13/hctx0/sched_tags\x00', 0x40100, 0x0) lseek$auto(r4, 0x7fffffffff7fffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 3.147539647s ago: executing program 0 (id=207): mmap$auto(0x80000001, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x1, 0x1a09, 0xfffffff9, 0x5cd}, 0x8000, 0x0, 0x6) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x11, 0x3, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) getpid() close_range$auto(0x2, 0x8, 0x0) sched_setaffinity$auto(0x0, 0x80000000, 0x0) mlockall$auto(0x7) 2.67869903s ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2a, 0x2, 0x6) connect$auto(0x3, &(0x7f0000000180), 0x54) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) read$auto_dvb_dvr_fops_dmxdev(r2, &(0x7f0000000380)=""/221, 0xdd) getsockname$auto(r3, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@info={r2, 0x9, 0x100000001}, 0x5) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34010800", @ANYRES16=r1, @ANYBLOB="000128bd7000ffdbdf256900000005001e00b000000008000100ffffff7f92009c00fc3cb95850513f12f75d54e68a56b2f0f4740693a165116df032295b2e0a9b97db74748d7582fbc3c901ca4461a6e3955c89a1583c702ed34caab96665af5309a50bcae37b39ed8f9b15938150960af9f02ab7ddb32006053cdfaa4311b619da7d3a09fb12cd121ee57fe4ace225bd860d0acb510a9f7287c240aee1484c60fff50ea6b1b72de111fa7a0e8dd36700007c009c00ad7b77753448430c51a91a9d72e92fc6518df6d4ef6c8f328aea4fec46632443c0195ad198e53030d4c5220e8a06950593eedfc56538af7cc858f8da8754a0d489346281489d7434b9829b3b727de9ee1c8bfa292a4cac9cc79148ea67017c35c4d824322fcabf125d40b44526ebe31aeaffdfe1ebd72f45"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = socket(0xa, 0x5, 0x0) io_submit$auto(0x1000, 0xfffffffffffffff9, 0x0) r5 = bpf$auto(0xa4d2, &(0x7f0000000280)=@bpf_attr_11={0xc, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8f8a, r4}, 0x30000) write$auto(r5, &(0x7f0000000340)='nl80211\x00', 0x5) getsockopt$auto(r4, 0x84, 0x7a, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) 2.303676902s ago: executing program 3 (id=209): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) (async) io_uring_setup$auto(0x85, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 64) socket(0xb, 0x2, 0xffffffff) (rerun: 64) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x8, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 64) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb2, 0x6, 0x300000000000) (async) madvise$auto(0x0, 0x20000a, 0x4) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) prctl$auto(0x400, 0x6, 0x0, 0x8000000000010000, 0x100000000000007) madvise$auto(0x0, 0xbc6, 0x19) (async) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1, 0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffee) (async) socketpair$auto(0x3, 0x2, 0x20e721b5, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) 2.270954697s ago: executing program 2 (id=210): madvise$auto(0x0, 0xffffffffffff0006, 0x55) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x100) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)='8', 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x7, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d42, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeed9, 0x7, 0x100000001, 0x800000000000009, 0x6, 0x1ff, 0x400000000000006, 0x3, 0x4, 0x17, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 1.169669953s ago: executing program 2 (id=211): mmap$auto(0x1000000000000000, 0xe7, 0xe3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffb) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x8b, 0xa00004, 0x400002, 0xfffffffffffdffff, r0, 0x2fffffffffff) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='\f\x00\x00-\x99+\x04\x00i\x1b\xcf\x01\x17T\xfe}J\x19\xabW\xc3\xf9\x17\x83W\x93\rk\xa3\x03\x00\x00\x00\xef\xfc*\xcb\xbe', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(r2, 0x0, 0x8, 0x5, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r3, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) 850.967791ms ago: executing program 0 (id=212): r0 = socket(0x2, 0xa, 0x0) setsockopt$auto_SO_MARK(r0, 0x0, 0x24, 0x0, 0x3) (async) mmap$auto(0x0, 0x9d, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0x401, 0x8000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mremap$auto(0x8000000003, 0xda1, 0x3fd6, 0xb, 0xfffffffffffffffd) (async, rerun: 32) close_range$auto(r0, r0, 0xffffffff) (async, rerun: 32) semtimedop$auto(0x3, &(0x7f0000000000)={0x2, 0x5a, 0x8003}, 0x9, &(0x7f0000000100)={0x5}) (async) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x18, 0x5, 0x6) (async, rerun: 32) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) (async, rerun: 32) semctl$auto(0x7, 0x2, 0x13, 0x2) (async, rerun: 32) semctl$auto(0x3, 0x2, 0x13, 0x9) (async, rerun: 32) r1 = socket(0x11, 0x80003, 0x10001) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0xce24) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) r2 = socket(0x2, 0x3, 0xa) (async) r3 = socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x10000ce, 0x6, 0x9b72, 0xffffffffffffffff, 0x9) (async) getsockopt$auto(r2, 0x84, 0x84, 0x0, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7) (async) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(r3, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 11.171274ms ago: executing program 0 (id=213): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram4/trace/end_lba\x00', 0x10b001, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) (fail_nth: 4) 0s ago: executing program 2 (id=214): mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) name_to_handle_at$auto(0x1010, 0x0, 0x0, 0x0, 0x202) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x2, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x51, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r3, 0x5523, r3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x311, 0x0) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x89, 0x808, 0x0, 0x0, 0xfffffffa) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 81.535752][ T5816] cgroup: Unknown subsys name 'net' [ 81.711689][ T5816] cgroup: Unknown subsys name 'cpuset' [ 81.720443][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.223969][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.266670][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.276515][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.284545][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.293495][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.301573][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.319557][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.330093][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.338083][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.339272][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.352398][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.361805][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.363630][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.369823][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.377080][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.384994][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.393044][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.405495][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.413351][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.427212][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.438766][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.022711][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.048853][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.097742][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.181370][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.304202][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.311475][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.319307][ T5832] bridge_slave_0: entered allmulticast mode [ 86.327093][ T5832] bridge_slave_0: entered promiscuous mode [ 86.365616][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.373057][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.380710][ T5832] bridge_slave_1: entered allmulticast mode [ 86.387756][ T5832] bridge_slave_1: entered promiscuous mode [ 86.419412][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.426603][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.434271][ T5828] bridge_slave_0: entered allmulticast mode [ 86.441640][ T5828] bridge_slave_0: entered promiscuous mode [ 86.450477][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.457613][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.464907][ T5828] bridge_slave_1: entered allmulticast mode [ 86.472009][ T5828] bridge_slave_1: entered promiscuous mode [ 86.515220][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.522495][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.529881][ T5827] bridge_slave_0: entered allmulticast mode [ 86.536838][ T5827] bridge_slave_0: entered promiscuous mode [ 86.559851][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.583163][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.596229][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.606131][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.613543][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.621121][ T5827] bridge_slave_1: entered allmulticast mode [ 86.628436][ T5827] bridge_slave_1: entered promiscuous mode [ 86.637497][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.646985][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.654395][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.661703][ T5825] bridge_slave_0: entered allmulticast mode [ 86.669555][ T5825] bridge_slave_0: entered promiscuous mode [ 86.728830][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.736047][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.746903][ T5825] bridge_slave_1: entered allmulticast mode [ 86.756234][ T5825] bridge_slave_1: entered promiscuous mode [ 86.805608][ T5832] team0: Port device team_slave_0 added [ 86.834295][ T5828] team0: Port device team_slave_0 added [ 86.859997][ T5832] team0: Port device team_slave_1 added [ 86.870451][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.883084][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.897467][ T5828] team0: Port device team_slave_1 added [ 86.931315][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.943698][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.040131][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.047129][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.074443][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.122695][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.129838][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.155920][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.168718][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.175695][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.201868][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.215637][ T5825] team0: Port device team_slave_0 added [ 87.223990][ T5827] team0: Port device team_slave_0 added [ 87.230996][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.237960][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.264367][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.285229][ T5825] team0: Port device team_slave_1 added [ 87.292709][ T5827] team0: Port device team_slave_1 added [ 87.397474][ T5832] hsr_slave_0: entered promiscuous mode [ 87.403908][ T5832] hsr_slave_1: entered promiscuous mode [ 87.411727][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.419190][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.439390][ T5149] Bluetooth: hci3: command tx timeout [ 87.445928][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.450601][ T5840] Bluetooth: hci2: command tx timeout [ 87.463139][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.466779][ T5829] Bluetooth: hci1: command tx timeout [ 87.473391][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.506020][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.517981][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.518370][ T5840] Bluetooth: hci0: command tx timeout [ 87.528394][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.556795][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.590134][ T5828] hsr_slave_0: entered promiscuous mode [ 87.596662][ T5828] hsr_slave_1: entered promiscuous mode [ 87.603133][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.611043][ T5828] Cannot create hsr debugfs directory [ 87.623697][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.631103][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.657650][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.823620][ T5825] hsr_slave_0: entered promiscuous mode [ 87.831126][ T5825] hsr_slave_1: entered promiscuous mode [ 87.837325][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.845343][ T5825] Cannot create hsr debugfs directory [ 87.896920][ T5827] hsr_slave_0: entered promiscuous mode [ 87.903642][ T5827] hsr_slave_1: entered promiscuous mode [ 87.910190][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.917758][ T5827] Cannot create hsr debugfs directory [ 88.272978][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.284990][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.297662][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.315523][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.375361][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.390372][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.403765][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.414650][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.488822][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.511661][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.525313][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.547662][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.634007][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.655413][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.666757][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.677466][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.800803][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.823506][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.872828][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.906485][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.915618][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.923225][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.946907][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.986717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.993857][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.003194][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.010323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.035777][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.042942][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.056454][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.095761][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.102965][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.146135][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.153286][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.201097][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.267800][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.364687][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.410240][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.417512][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.473536][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.480766][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.518954][ T5829] Bluetooth: hci1: command tx timeout [ 89.524464][ T5829] Bluetooth: hci3: command tx timeout [ 89.531093][ T5840] Bluetooth: hci2: command tx timeout [ 89.596130][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.607530][ T5829] Bluetooth: hci0: command tx timeout [ 89.723973][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.793923][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.835505][ T5832] veth0_vlan: entered promiscuous mode [ 89.878117][ T5832] veth1_vlan: entered promiscuous mode [ 89.965885][ T5828] veth0_vlan: entered promiscuous mode [ 90.015882][ T5832] veth0_macvtap: entered promiscuous mode [ 90.040606][ T5828] veth1_vlan: entered promiscuous mode [ 90.054269][ T5832] veth1_macvtap: entered promiscuous mode [ 90.074557][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.103156][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.125351][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.142578][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.173968][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184444][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194116][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203255][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.214701][ T5828] veth0_macvtap: entered promiscuous mode [ 90.236161][ T5828] veth1_macvtap: entered promiscuous mode [ 90.270969][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.303063][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.349817][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.360793][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.370316][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.379613][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392538][ T5825] veth0_vlan: entered promiscuous mode [ 90.435820][ T5825] veth1_vlan: entered promiscuous mode [ 90.454972][ T5827] veth0_vlan: entered promiscuous mode [ 90.481267][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.484593][ T5827] veth1_vlan: entered promiscuous mode [ 90.495024][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567504][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.585767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.633325][ T5825] veth0_macvtap: entered promiscuous mode [ 90.659712][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.663480][ T5825] veth1_macvtap: entered promiscuous mode [ 90.667549][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.725427][ T5827] veth0_macvtap: entered promiscuous mode [ 90.737359][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.750229][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.769085][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.778779][ T5827] veth1_macvtap: entered promiscuous mode [ 90.806826][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.862914][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.904706][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.917412][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.926297][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.938959][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000730][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.081371][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.135952][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.203072][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.218473][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227723][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.248805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.257229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.588614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.619727][ T5829] Bluetooth: hci3: command tx timeout [ 91.625403][ T5829] Bluetooth: hci2: command tx timeout [ 91.632139][ T5829] Bluetooth: hci1: command tx timeout [ 91.675727][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.688705][ T5840] Bluetooth: hci0: command tx timeout [ 91.698438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.707078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.728126][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.856931][ T9] cfg80211: failed to load regulatory.db [ 91.916951][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.965967][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.019819][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.048678][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.218655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.268129][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.285800][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.641414][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.928893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.938375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.947692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.181025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.679076][ T5840] Bluetooth: hci1: command tx timeout [ 93.684577][ T5829] Bluetooth: hci2: command tx timeout [ 93.693122][ T5149] Bluetooth: hci3: command tx timeout [ 93.758747][ T5840] Bluetooth: hci0: command tx timeout [ 97.550989][ T6025] ======================================================= [ 97.550989][ T6025] WARNING: The mand mount option has been deprecated and [ 97.550989][ T6025] and is ignored by this kernel. Remove the mand [ 97.550989][ T6025] option from the mount to silence this warning. [ 97.550989][ T6025] ======================================================= [ 98.309280][ T6031] process 'syz.2.22' launched '/dev/fd/4' with NULL argv: empty string added [ 100.021645][ T6031] mmap: syz.2.22 (6031) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.802201][ T6093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.814766][ T6093] Zero length message leads to an empty skb [ 104.690827][ T6104] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.277219][ T6109] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 107.485230][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 107.757614][ T6141] team0: Port device team_slave_0 removed [ 108.642211][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 109.161280][ T6159] hsr_slave_0 (unregistering): left promiscuous mode [ 110.612332][ T6182] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 112.408756][ T6203] syz.1.48 (6203) used greatest stack depth: 19800 bytes left [ 115.914300][ T6235] Invalid ELF header magic: != ELF [ 119.595667][ T6316] sctp: failed to load transform for md5: -2 [ 120.476719][ T6331] netlink: 342 bytes leftover after parsing attributes in process `syz.1.66'. [ 120.827597][ T6313] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[6313] [ 124.700296][ T6390] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.593759][ T6478] kafs: addr_prefs: Invalid Command [ 132.587544][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 132.807178][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813999][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.936067][ T6506] capability: warning: `syz.1.96' uses 32-bit capabilities (legacy support in use) [ 137.960600][ T6550] netlink: 504 bytes leftover after parsing attributes in process `syz.3.103'. [ 144.370354][ T6625] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 145.567510][ T6637] netlink: 504 bytes leftover after parsing attributes in process `syz.0.113'. [ 147.928676][ T6661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.943434][ T6661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.099059][ T6661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.169045][ T6661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.195668][ T6661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.371592][ T6661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.591330][ T6661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.616276][ T6661] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.681153][ T6661] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.741023][ T6661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.766133][ T6661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.935131][ T6661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.440310][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.990456][ T6697] delete_channel: no stack [ 150.168237][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.638435][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.831132][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.457793][ T6708] mkiss: ax0: crc mode is auto. [ 151.518336][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.238775][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.717978][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.889030][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.605793][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.024093][ T6765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 154.062898][ T6765] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.109519][ T6765] memcg:ffff888075937001 [ 154.144000][ T6765] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.238112][ T6765] page_type: f5(slab) [ 154.242181][ T6765] raw: 00fff00000000040 ffff88801b84b500 ffffea00016d7e00 dead000000000003 [ 154.318142][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.373340][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 154.385139][ T6765] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888075937001 [ 154.447986][ T6765] head: 00fff00000000040 ffff88801b84b500 ffffea00016d7e00 dead000000000003 [ 154.501813][ T6765] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888075937001 [ 154.618093][ T6765] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 154.637996][ T6765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.748144][ T6765] page dumped because: unmovable page [ 154.753592][ T6765] page_owner tracks the page as allocated [ 154.816496][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.816879][ T6777] FAULT_INJECTION: forcing a failure. [ 154.816879][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 154.845817][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.2.140 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 154.845840][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.845852][ T6777] Call Trace: [ 154.845858][ T6777] [ 154.845866][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 154.845897][ T6777] should_fail_ex+0x512/0x640 [ 154.845918][ T6777] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 154.845940][ T6777] should_failslab+0xc2/0x120 [ 154.845953][ T6777] __kmalloc_cache_noprof+0x6a/0x3e0 [ 154.845971][ T6777] ? __asan_memset+0x23/0x50 [ 154.845989][ T6777] ? snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 154.846009][ T6777] snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 154.846028][ T6777] ? rcu_is_watching+0x12/0xc0 [ 154.846047][ T6777] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 154.846065][ T6777] ? __pfx___mutex_lock+0x10/0x10 [ 154.846099][ T6777] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 154.846116][ T6777] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 154.846131][ T6777] snd_pcm_oss_sync+0x1de/0x840 [ 154.846148][ T6777] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 154.846164][ T6777] snd_pcm_oss_release+0x28b/0x310 [ 154.846180][ T6777] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 154.846195][ T6777] __fput+0x402/0xb70 [ 154.846213][ T6777] task_work_run+0x14d/0x240 [ 154.846235][ T6777] ? __pfx_task_work_run+0x10/0x10 [ 154.846255][ T6777] ? __pfx___do_sys_close_range+0x10/0x10 [ 154.846280][ T6777] exit_to_user_mode_loop+0xeb/0x110 [ 154.846302][ T6777] do_syscall_64+0x3f6/0x490 [ 154.846325][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.846339][ T6777] RIP: 0033:0x7fc4cf78e929 [ 154.846358][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.846374][ T6777] RSP: 002b:00007fc4d059d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.846391][ T6777] RAX: 0000000000000000 RBX: 00007fc4cf9b5fa0 RCX: 00007fc4cf78e929 [ 154.846400][ T6777] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 154.846409][ T6777] RBP: 00007fc4cf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 154.846423][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.846432][ T6777] R13: 0000000000000000 R14: 00007fc4cf9b5fa0 R15: 00007ffe46a29b48 [ 154.846450][ T6777] [ 155.002065][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.047598][ T6765] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5199, tgid 5199 (udevd), ts 52872070228, free_ts 52865721897 [ 155.172410][ T6765] post_alloc_hook+0x1c0/0x230 [ 155.177262][ T6765] get_page_from_freelist+0x1321/0x3890 [ 155.182962][ T6765] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 155.189082][ T6765] alloc_pages_mpol+0x1fb/0x550 [ 155.193971][ T6765] new_slab+0x23b/0x330 [ 155.201631][ T6765] ___slab_alloc+0xd9c/0x1940 [ 155.206374][ T6765] __slab_alloc.constprop.0+0x56/0xb0 [ 155.212023][ T6765] __kvmalloc_node_noprof+0x3b1/0x620 [ 155.217447][ T6765] seq_read_iter+0x826/0x12c0 [ 155.222295][ T6765] kernfs_fop_read_iter+0x40f/0x5a0 [ 155.228045][ T6765] vfs_read+0x8bc/0xc60 [ 155.232250][ T6765] ksys_read+0x12a/0x250 [ 155.251412][ T6765] do_syscall_64+0xcd/0x490 [ 155.289818][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.333327][ T6765] page last free pid 5212 tgid 5212 stack trace: [ 155.368200][ T6765] __free_frozen_pages+0x7fe/0x1180 [ 155.382779][ T6765] qlist_free_all+0x4d/0x120 [ 155.397334][ T6765] kasan_quarantine_reduce+0x195/0x1e0 [ 155.433200][ T6765] __kasan_slab_alloc+0x69/0x90 [ 155.474388][ T6765] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 155.512490][ T6765] kernfs_fop_open+0x244/0xda0 [ 155.517341][ T6765] do_dentry_open+0x741/0x1c10 [ 155.569731][ T6765] vfs_open+0x82/0x3f0 [ 155.573877][ T6765] path_openat+0x1de4/0x2cb0 [ 155.608505][ T6765] do_filp_open+0x20b/0x470 [ 155.613097][ T6765] do_sys_openat2+0x11b/0x1d0 [ 155.651926][ T6765] __x64_sys_openat+0x174/0x210 [ 155.704734][ T6765] do_syscall_64+0xcd/0x490 [ 155.739591][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.234957][ T6781] FAULT_INJECTION: forcing a failure. [ 156.234957][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 156.268829][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.3.141 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 156.268868][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.268883][ T6781] Call Trace: [ 156.268891][ T6781] [ 156.268902][ T6781] dump_stack_lvl+0x16c/0x1f0 [ 156.268946][ T6781] should_fail_ex+0x512/0x640 [ 156.268980][ T6781] ? __kmalloc_noprof+0xbf/0x510 [ 156.269018][ T6781] ? __register_sysctl_table+0xea2/0x1900 [ 156.269057][ T6781] should_failslab+0xc2/0x120 [ 156.269081][ T6781] __kmalloc_noprof+0xd2/0x510 [ 156.269114][ T6781] ? __register_sysctl_table+0xe8e/0x1900 [ 156.269157][ T6781] __register_sysctl_table+0xea2/0x1900 [ 156.269203][ T6781] ? __pfx___register_sysctl_table+0x10/0x10 [ 156.269239][ T6781] ? is_module_address+0x69/0xf0 [ 156.269271][ T6781] ? register_net_sysctl_sz+0x228/0x3e0 [ 156.269309][ T6781] ? __asan_memcpy+0x3c/0x60 [ 156.269345][ T6781] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 156.269374][ T6781] nf_lwtunnel_net_init+0x60/0xf0 [ 156.269404][ T6781] ops_init+0x1e2/0x5f0 [ 156.269432][ T6781] setup_net+0x1ff/0x510 [ 156.269455][ T6781] ? lockdep_init_map_type+0x5c/0x280 [ 156.269488][ T6781] ? __pfx_setup_net+0x10/0x10 [ 156.269515][ T6781] ? debug_mutex_init+0x37/0x70 [ 156.269543][ T6781] copy_net_ns+0x2a6/0x5f0 [ 156.269573][ T6781] create_new_namespaces+0x3ea/0xa90 [ 156.269613][ T6781] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 156.269644][ T6781] ksys_unshare+0x45b/0xa40 [ 156.269680][ T6781] ? __pfx_ksys_unshare+0x10/0x10 [ 156.269714][ T6781] ? xfd_validate_state+0x61/0x180 [ 156.269756][ T6781] __x64_sys_unshare+0x31/0x40 [ 156.269787][ T6781] do_syscall_64+0xcd/0x490 [ 156.269828][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.269853][ T6781] RIP: 0033:0x7efc32b8e929 [ 156.269873][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.269895][ T6781] RSP: 002b:00007efc33a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 156.269919][ T6781] RAX: ffffffffffffffda RBX: 00007efc32db5fa0 RCX: 00007efc32b8e929 [ 156.269934][ T6781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 156.269947][ T6781] RBP: 00007efc32c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.269960][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.269974][ T6781] R13: 0000000000000000 R14: 00007efc32db5fa0 R15: 00007fff727361c8 [ 156.270006][ T6781] [ 156.271132][ T6781] sysctl could not get directory: /net/netfilter -12 [ 156.970343][ T6794] FAULT_INJECTION: forcing a failure. [ 156.970343][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 157.021550][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.1.144 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 157.021589][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.021605][ T6794] Call Trace: [ 157.021613][ T6794] [ 157.021624][ T6794] dump_stack_lvl+0x16c/0x1f0 [ 157.021670][ T6794] should_fail_ex+0x512/0x640 [ 157.021705][ T6794] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.021747][ T6794] should_failslab+0xc2/0x120 [ 157.021773][ T6794] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.021808][ T6794] ? __proc_create+0xc3/0x8c0 [ 157.021844][ T6794] ? __proc_create+0x2ce/0x8c0 [ 157.021887][ T6794] __proc_create+0x2ce/0x8c0 [ 157.021926][ T6794] ? __pfx___proc_create+0x10/0x10 [ 157.021961][ T6794] ? _raw_write_unlock+0x28/0x50 [ 157.021997][ T6794] ? proc_register+0x314/0x5f0 [ 157.022047][ T6794] _proc_mkdir+0xb9/0x200 [ 157.022086][ T6794] ? __pfx__proc_mkdir+0x10/0x10 [ 157.022122][ T6794] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 157.022163][ T6794] ? __pfx_netfilter_net_init+0x10/0x10 [ 157.022200][ T6794] netfilter_net_init+0x37b/0x4b0 [ 157.022233][ T6794] ? sysctl_net_init+0x27/0x30 [ 157.022253][ T6794] ops_init+0x1e2/0x5f0 [ 157.022279][ T6794] setup_net+0x1ff/0x510 [ 157.022300][ T6794] ? lockdep_init_map_type+0x5c/0x280 [ 157.022330][ T6794] ? __pfx_setup_net+0x10/0x10 [ 157.022356][ T6794] ? debug_mutex_init+0x37/0x70 [ 157.022381][ T6794] copy_net_ns+0x2a6/0x5f0 [ 157.022410][ T6794] create_new_namespaces+0x3ea/0xa90 [ 157.022446][ T6794] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 157.022488][ T6794] ksys_unshare+0x45b/0xa40 [ 157.022523][ T6794] ? __pfx_ksys_unshare+0x10/0x10 [ 157.022558][ T6794] ? xfd_validate_state+0x61/0x180 [ 157.022601][ T6794] __x64_sys_unshare+0x31/0x40 [ 157.022633][ T6794] do_syscall_64+0xcd/0x490 [ 157.022674][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.022700][ T6794] RIP: 0033:0x7fa3b198e929 [ 157.022722][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.022745][ T6794] RSP: 002b:00007fa3b2862038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.022769][ T6794] RAX: ffffffffffffffda RBX: 00007fa3b1bb6080 RCX: 00007fa3b198e929 [ 157.022785][ T6794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.022800][ T6794] RBP: 00007fa3b1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 157.022815][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.022826][ T6794] R13: 0000000000000000 R14: 00007fa3b1bb6080 R15: 00007ffc94749298 [ 157.022856][ T6794] [ 157.022865][ T6794] cannot create netfilter proc entry [ 157.367586][ T6801] Process accounting resumed [ 158.533987][ T6816] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 159.078017][ T6824] block2mtd: illegal erase size [ 159.289687][ T6829] svc: failed to register nfsdv3 RPC service (errno 111). [ 159.341824][ T6829] svc: failed to register nfsaclv3 RPC service (errno 111). [ 159.607471][ T6837] netlink: 342 bytes leftover after parsing attributes in process `syz.2.155'. [ 159.620268][ T6837] ima: policy update failed [ 159.625938][ T30] audit: type=1802 audit(1750606254.149:2): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.155" res=0 errno=0 [ 162.608899][ T6894] sd 0:0:1:0: PR command failed: 1026 [ 162.614316][ T6894] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.668956][ T6894] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 162.756155][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 163.058376][ T6901] netlink: 296 bytes leftover after parsing attributes in process `syz.2.167'. [ 165.861267][ T6944] netlink: zone id is out of range [ 165.915564][ T6944] netlink: zone id is out of range [ 165.939529][ T6944] netlink: zone id is out of range [ 165.956880][ T6944] netlink: zone id is out of range [ 165.987402][ T6944] netlink: zone id is out of range [ 166.012205][ T6944] netlink: zone id is out of range [ 166.025092][ T6944] netlink: zone id is out of range [ 166.111899][ T6944] netlink: zone id is out of range [ 166.130935][ T6944] netlink: zone id is out of range [ 166.136107][ T6944] netlink: zone id is out of range [ 166.213027][ T6951] FAULT_INJECTION: forcing a failure. [ 166.213027][ T6951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 166.307324][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.3.176 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 166.307362][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.307377][ T6951] Call Trace: [ 166.307385][ T6951] [ 166.307396][ T6951] dump_stack_lvl+0x16c/0x1f0 [ 166.307439][ T6951] should_fail_ex+0x512/0x640 [ 166.307479][ T6951] get_futex_key+0x1d0/0x1540 [ 166.307515][ T6951] ? __pfx_get_futex_key+0x10/0x10 [ 166.307556][ T6951] futex_wake+0xea/0x530 [ 166.307586][ T6951] ? futex_wait+0x120/0x380 [ 166.307624][ T6951] ? __pfx_futex_wait+0x10/0x10 [ 166.307661][ T6951] ? __pfx_futex_wake+0x10/0x10 [ 166.307701][ T6951] ? vfs_read+0x23b/0xc60 [ 166.307742][ T6951] do_futex+0x1e3/0x350 [ 166.307777][ T6951] ? __pfx_do_futex+0x10/0x10 [ 166.307815][ T6951] __x64_sys_futex+0x1e0/0x4c0 [ 166.307846][ T6951] ? __do_sys_close_range+0x278/0x730 [ 166.307879][ T6951] ? fput+0x70/0xf0 [ 166.307901][ T6951] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.307931][ T6951] ? __pfx___do_sys_close_range+0x10/0x10 [ 166.307977][ T6951] do_syscall_64+0xcd/0x490 [ 166.308017][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.308042][ T6951] RIP: 0033:0x7efc32b8e929 [ 166.308064][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.308087][ T6951] RSP: 002b:00007efc33a5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.308112][ T6951] RAX: ffffffffffffffda RBX: 00007efc32db5fa8 RCX: 00007efc32b8e929 [ 166.308129][ T6951] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc32db5fac [ 166.308144][ T6951] RBP: 00007efc32db5fa0 R08: 00007efc33a5d000 R09: 0000000000000000 [ 166.308159][ T6951] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007efc32db5fac [ 166.308176][ T6951] R13: 0000000000000000 R14: 00007fff727360e0 R15: 00007fff727361c8 [ 166.308210][ T6951] [ 167.060991][ T6955] Falling back ldisc for ttyS2. [ 167.075326][ T6958] i2c i2c-0: new_device: Invalid device name [ 167.702209][ T6974] FAULT_INJECTION: forcing a failure. [ 167.702209][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 167.741363][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.3.182 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 167.741401][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.741414][ T6974] Call Trace: [ 167.741422][ T6974] [ 167.741432][ T6974] dump_stack_lvl+0x16c/0x1f0 [ 167.741471][ T6974] should_fail_ex+0x512/0x640 [ 167.741503][ T6974] ? __kmalloc_noprof+0xbf/0x510 [ 167.741537][ T6974] ? kernfs_fop_write_iter+0x237/0x510 [ 167.741560][ T6974] should_failslab+0xc2/0x120 [ 167.741581][ T6974] __kmalloc_noprof+0xd2/0x510 [ 167.741622][ T6974] kernfs_fop_write_iter+0x237/0x510 [ 167.741653][ T6974] vfs_write+0x6c4/0x1150 [ 167.741687][ T6974] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 167.741713][ T6974] ? __pfx___mutex_lock+0x10/0x10 [ 167.741747][ T6974] ? __pfx_vfs_write+0x10/0x10 [ 167.741801][ T6974] ksys_write+0x12a/0x250 [ 167.741833][ T6974] ? __pfx_ksys_write+0x10/0x10 [ 167.741875][ T6974] do_syscall_64+0xcd/0x490 [ 167.741912][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.741937][ T6974] RIP: 0033:0x7efc32b8e929 [ 167.741956][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.741979][ T6974] RSP: 002b:00007efc33a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.742001][ T6974] RAX: ffffffffffffffda RBX: 00007efc32db5fa0 RCX: 00007efc32b8e929 [ 167.742017][ T6974] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 167.742031][ T6974] RBP: 00007efc33a5c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.742044][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.742058][ T6974] R13: 0000000000000000 R14: 00007efc32db5fa0 R15: 00007fff727361c8 [ 167.742090][ T6974] [ 168.067645][ T6969] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 168.597347][ T7000] cgroup: fork rejected by pids controller in /syz3 [ 171.317207][ T7064] FAULT_INJECTION: forcing a failure. [ 171.317207][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.439913][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.1.192 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 171.439949][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.439962][ T7064] Call Trace: [ 171.439970][ T7064] [ 171.439980][ T7064] dump_stack_lvl+0x16c/0x1f0 [ 171.440019][ T7064] should_fail_ex+0x512/0x640 [ 171.440057][ T7064] _copy_from_iter+0x29f/0x16f0 [ 171.440101][ T7064] ? __pfx__copy_from_iter+0x10/0x10 [ 171.440145][ T7064] ? rcu_is_watching+0x12/0xc0 [ 171.440170][ T7064] ? trace_kmalloc+0x2b/0xd0 [ 171.440193][ T7064] ? __kmalloc_noprof+0x242/0x510 [ 171.440236][ T7064] kernfs_fop_write_iter+0x19a/0x510 [ 171.440269][ T7064] vfs_write+0x6c4/0x1150 [ 171.440303][ T7064] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 171.440329][ T7064] ? __pfx___mutex_lock+0x10/0x10 [ 171.440364][ T7064] ? __pfx_vfs_write+0x10/0x10 [ 171.440421][ T7064] ksys_write+0x12a/0x250 [ 171.440453][ T7064] ? __pfx_ksys_write+0x10/0x10 [ 171.440496][ T7064] do_syscall_64+0xcd/0x490 [ 171.440550][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.440575][ T7064] RIP: 0033:0x7fa3b198e929 [ 171.440595][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.440616][ T7064] RSP: 002b:00007fa3b2883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.440638][ T7064] RAX: ffffffffffffffda RBX: 00007fa3b1bb5fa0 RCX: 00007fa3b198e929 [ 171.440653][ T7064] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 171.440667][ T7064] RBP: 00007fa3b2883090 R08: 0000000000000000 R09: 0000000000000000 [ 171.440682][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.440697][ T7064] R13: 0000000000000000 R14: 00007fa3b1bb5fa0 R15: 00007ffc94749298 [ 171.440732][ T7064] [ 172.256305][ T7068] FAULT_INJECTION: forcing a failure. [ 172.256305][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 172.328012][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.1.195 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 172.328052][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.328067][ T7068] Call Trace: [ 172.328076][ T7068] [ 172.328086][ T7068] dump_stack_lvl+0x16c/0x1f0 [ 172.328131][ T7068] should_fail_ex+0x512/0x640 [ 172.328165][ T7068] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 172.328211][ T7068] should_failslab+0xc2/0x120 [ 172.328237][ T7068] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 172.328274][ T7068] ? __pfx_proc_create_net_data+0x10/0x10 [ 172.328315][ T7068] ? nf_log_net_init+0x9f/0x450 [ 172.328342][ T7068] ? __pfx_nf_log_net_init+0x10/0x10 [ 172.328367][ T7068] kmemdup_noprof+0x29/0x60 [ 172.328405][ T7068] nf_log_net_init+0x9f/0x450 [ 172.328433][ T7068] ? __pfx_nf_log_net_init+0x10/0x10 [ 172.328457][ T7068] ops_init+0x1e2/0x5f0 [ 172.328486][ T7068] setup_net+0x1ff/0x510 [ 172.328508][ T7068] ? lockdep_init_map_type+0x5c/0x280 [ 172.328541][ T7068] ? __pfx_setup_net+0x10/0x10 [ 172.328568][ T7068] ? debug_mutex_init+0x37/0x70 [ 172.328597][ T7068] copy_net_ns+0x2a6/0x5f0 [ 172.328628][ T7068] create_new_namespaces+0x3ea/0xa90 [ 172.328663][ T7068] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 172.328694][ T7068] ksys_unshare+0x45b/0xa40 [ 172.328736][ T7068] ? __pfx_ksys_unshare+0x10/0x10 [ 172.328770][ T7068] ? xfd_validate_state+0x61/0x180 [ 172.328815][ T7068] __x64_sys_unshare+0x31/0x40 [ 172.328848][ T7068] do_syscall_64+0xcd/0x490 [ 172.328889][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.328914][ T7068] RIP: 0033:0x7fa3b198e929 [ 172.328935][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.328959][ T7068] RSP: 002b:00007fa3b2883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.328983][ T7068] RAX: ffffffffffffffda RBX: 00007fa3b1bb5fa0 RCX: 00007fa3b198e929 [ 172.329001][ T7068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 172.329016][ T7068] RBP: 00007fa3b1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.329036][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.329051][ T7068] R13: 0000000000000000 R14: 00007fa3b1bb5fa0 R15: 00007ffc94749298 [ 172.329087][ T7068] [ 172.997244][ T7077] FAULT_INJECTION: forcing a failure. [ 172.997244][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 173.010452][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.0.196 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 173.010473][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.010481][ T7077] Call Trace: [ 173.010487][ T7077] [ 173.010492][ T7077] dump_stack_lvl+0x16c/0x1f0 [ 173.010518][ T7077] should_fail_ex+0x512/0x640 [ 173.010538][ T7077] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 173.010562][ T7077] should_failslab+0xc2/0x120 [ 173.010575][ T7077] __kmalloc_cache_noprof+0x6a/0x3e0 [ 173.010593][ T7077] ? __mutex_lock+0x1ca/0xb90 [ 173.010615][ T7077] ? alloc_tty_struct+0x96/0x8c0 [ 173.010640][ T7077] alloc_tty_struct+0x96/0x8c0 [ 173.010652][ T7077] ? __pfx___mutex_lock+0x10/0x10 [ 173.010675][ T7077] ? __pfx_alloc_tty_struct+0x10/0x10 [ 173.010688][ T7077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.010716][ T7077] tty_init_dev.part.0+0x1e/0x500 [ 173.010731][ T7077] tty_init_dev+0x60/0x80 [ 173.010744][ T7077] ? __pfx_ptmx_open+0x10/0x10 [ 173.010761][ T7077] ptmx_open+0x10d/0x360 [ 173.010779][ T7077] ? __pfx_ptmx_open+0x10/0x10 [ 173.010796][ T7077] chrdev_open+0x234/0x6a0 [ 173.010817][ T7077] ? __pfx_apparmor_file_open+0x10/0x10 [ 173.010835][ T7077] ? __pfx_chrdev_open+0x10/0x10 [ 173.010857][ T7077] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 173.010879][ T7077] do_dentry_open+0x741/0x1c10 [ 173.010900][ T7077] ? __pfx_chrdev_open+0x10/0x10 [ 173.010924][ T7077] vfs_open+0x82/0x3f0 [ 173.010941][ T7077] path_openat+0x1de4/0x2cb0 [ 173.010967][ T7077] ? __pfx_path_openat+0x10/0x10 [ 173.010988][ T7077] ? __lock_acquire+0xb8a/0x1c90 [ 173.011009][ T7077] do_filp_open+0x20b/0x470 [ 173.011029][ T7077] ? __pfx_do_filp_open+0x10/0x10 [ 173.011062][ T7077] ? alloc_fd+0x471/0x7d0 [ 173.011086][ T7077] do_sys_openat2+0x11b/0x1d0 [ 173.011101][ T7077] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.011123][ T7077] __x64_sys_openat+0x174/0x210 [ 173.011139][ T7077] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.011162][ T7077] do_syscall_64+0xcd/0x490 [ 173.011185][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.011199][ T7077] RIP: 0033:0x7fa707f8e929 [ 173.011211][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.011224][ T7077] RSP: 002b:00007fa708d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.011237][ T7077] RAX: ffffffffffffffda RBX: 00007fa7081b6080 RCX: 00007fa707f8e929 [ 173.011246][ T7077] RDX: 0000000000002200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 173.011255][ T7077] RBP: 00007fa708010b39 R08: 0000000000000000 R09: 0000000000000000 [ 173.011264][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.011272][ T7077] R13: 0000000000000000 R14: 00007fa7081b6080 R15: 00007ffe0b8b07a8 [ 173.011290][ T7077] [ 173.293695][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.872685][ T7083] netlink: 342 bytes leftover after parsing attributes in process `syz.2.194'. [ 173.978373][ T7086] FAULT_INJECTION: forcing a failure. [ 173.978373][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 174.020085][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.3.201 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 174.020120][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.020133][ T7086] Call Trace: [ 174.020142][ T7086] [ 174.020151][ T7086] dump_stack_lvl+0x16c/0x1f0 [ 174.020191][ T7086] should_fail_ex+0x512/0x640 [ 174.020223][ T7086] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 174.020259][ T7086] should_failslab+0xc2/0x120 [ 174.020284][ T7086] __kmalloc_cache_noprof+0x6a/0x3e0 [ 174.020314][ T7086] ? __pfx___mutex_trylock_common+0x10/0x10 [ 174.020346][ T7086] ? blk_trace_setup_queue+0x4a/0x310 [ 174.020378][ T7086] blk_trace_setup_queue+0x4a/0x310 [ 174.020406][ T7086] sysfs_blk_trace_attr_store+0x6a9/0x9d0 [ 174.020441][ T7086] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 174.020472][ T7086] ? find_held_lock+0x2b/0x80 [ 174.020502][ T7086] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 174.020528][ T7086] dev_attr_store+0x55/0x80 [ 174.020565][ T7086] ? __pfx_dev_attr_store+0x10/0x10 [ 174.020600][ T7086] sysfs_kf_write+0xf2/0x150 [ 174.020633][ T7086] kernfs_fop_write_iter+0x351/0x510 [ 174.020656][ T7086] ? __pfx_sysfs_kf_write+0x10/0x10 [ 174.020686][ T7086] vfs_write+0x6c4/0x1150 [ 174.020720][ T7086] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 174.020748][ T7086] ? __pfx___mutex_lock+0x10/0x10 [ 174.020793][ T7086] ? __pfx_vfs_write+0x10/0x10 [ 174.020852][ T7086] ksys_write+0x12a/0x250 [ 174.020884][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 174.020928][ T7086] do_syscall_64+0xcd/0x490 [ 174.020966][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.020991][ T7086] RIP: 0033:0x7efc32b8e929 [ 174.021011][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.021033][ T7086] RSP: 002b:00007efc33a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.021055][ T7086] RAX: ffffffffffffffda RBX: 00007efc32db5fa0 RCX: 00007efc32b8e929 [ 174.021071][ T7086] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 174.021086][ T7086] RBP: 00007efc33a5c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.021101][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.021118][ T7086] R13: 0000000000000000 R14: 00007efc32db5fa0 R15: 00007fff727361c8 [ 174.021154][ T7086] [ 174.099933][ T4368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.208986][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.387455][ T7088] netlink: 342 bytes leftover after parsing attributes in process `syz.2.194'. [ 174.495781][ T4368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.673524][ T4368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.767985][ T4368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.011028][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.021006][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.041772][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.051989][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.060476][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.341594][ T4368] bridge_slave_1: left allmulticast mode [ 175.347698][ T4368] bridge_slave_1: left promiscuous mode [ 175.376424][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.501862][ T4368] bridge_slave_0: left allmulticast mode [ 175.507572][ T4368] bridge_slave_0: left promiscuous mode [ 175.531203][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.117979][ T5840] Bluetooth: hci1: command tx timeout [ 177.163842][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.194960][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.210604][ T4368] bond0 (unregistering): Released all slaves [ 177.238537][ T7113] lo: entered promiscuous mode [ 177.246942][ T7113] lo: left promiscuous mode [ 177.488024][ T7151] syz.0.212 uses obsolete (PF_INET,SOCK_PACKET) [ 178.306121][ T7169] FAULT_INJECTION: forcing a failure. [ 178.306121][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 178.348469][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.0.213 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 178.348503][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.348523][ T7169] Call Trace: [ 178.348532][ T7169] [ 178.348541][ T7169] dump_stack_lvl+0x16c/0x1f0 [ 178.348581][ T7169] should_fail_ex+0x512/0x640 [ 178.348614][ T7169] ? __kmalloc_noprof+0xbf/0x510 [ 178.348650][ T7169] ? tracepoint_add_func+0x2a6/0xea0 [ 178.348682][ T7169] should_failslab+0xc2/0x120 [ 178.348705][ T7169] __kmalloc_noprof+0xd2/0x510 [ 178.348741][ T7169] ? rcu_is_watching+0x12/0xc0 [ 178.348770][ T7169] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 178.348795][ T7169] tracepoint_add_func+0x2a6/0xea0 [ 178.348822][ T7169] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 178.348855][ T7169] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 178.348880][ T7169] tracepoint_probe_register+0xbf/0x100 [ 178.348914][ T7169] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 178.348948][ T7169] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 178.348983][ T7169] blk_register_tracepoints+0x1b/0x380 [ 178.349019][ T7169] blk_trace_setup_queue+0x270/0x310 [ 178.349047][ T7169] sysfs_blk_trace_attr_store+0x6a9/0x9d0 [ 178.349079][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 178.349108][ T7169] ? find_held_lock+0x2b/0x80 [ 178.349137][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 178.349162][ T7169] dev_attr_store+0x55/0x80 [ 178.349198][ T7169] ? __pfx_dev_attr_store+0x10/0x10 [ 178.349233][ T7169] sysfs_kf_write+0xf2/0x150 [ 178.349265][ T7169] kernfs_fop_write_iter+0x351/0x510 [ 178.349287][ T7169] ? __pfx_sysfs_kf_write+0x10/0x10 [ 178.349319][ T7169] vfs_write+0x6c4/0x1150 [ 178.349352][ T7169] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 178.349388][ T7169] ? __pfx___mutex_lock+0x10/0x10 [ 178.349425][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 178.349484][ T7169] ksys_write+0x12a/0x250 [ 178.349516][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 178.349560][ T7169] do_syscall_64+0xcd/0x490 [ 178.349596][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.349621][ T7169] RIP: 0033:0x7fa707f8e929 [ 178.349640][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.349663][ T7169] RSP: 002b:00007fa708d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.349684][ T7169] RAX: ffffffffffffffda RBX: 00007fa7081b5fa0 RCX: 00007fa707f8e929 [ 178.349699][ T7169] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 178.349712][ T7169] RBP: 00007fa708d68090 R08: 0000000000000000 R09: 0000000000000000 [ 178.349724][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.349738][ T7169] R13: 0000000000000000 R14: 00007fa7081b5fa0 R15: 00007ffe0b8b07a8 [ 178.349773][ T7169] [ 178.351978][ T7169] ------------[ cut here ]------------ [ 178.638955][ T7169] WARNING: CPU: 1 PID: 7169 at kernel/trace/blktrace.c:1078 blk_register_tracepoints+0x2b0/0x380 [ 178.649570][ T7169] Modules linked in: [ 178.653863][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.0.213 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 178.666134][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.676558][ T7169] RIP: 0010:blk_register_tracepoints+0x2b0/0x380 [ 178.683000][ T7169] Code: c7 c7 80 6b 94 90 e8 7f 05 fa ff 31 ff 89 c3 89 c6 e8 c4 12 f8 ff 85 db 0f 85 ca 00 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 <0f> 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 0f 0b 90 e9 95 fd ff ff [ 178.702661][ T7169] RSP: 0018:ffffc90003687b40 EFLAGS: 00010293 [ 178.709239][ T7169] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff81c36eb6 [ 178.717205][ T7169] RDX: ffff8880322f5a00 RSI: ffffffff81c3713f RDI: 0000000000000005 [ 178.725888][ T7169] RBP: 0000000000002000 R08: 0000000000000005 R09: 0000000000000000 [ 178.734200][ T7169] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff88802607a720 [ 178.742374][ T7169] R13: 0000000000000000 R14: ffff88802607a720 R15: ffff88802607ac78 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.750539][ T7169] FS: 00007fa708d686c0(0000) GS:ffff888124861000(0000) knlGS:0000000000000000 [ 178.759641][ T7169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.766259][ T7169] CR2: 00007f5a38d62e9c CR3: 000000007cb38000 CR4: 00000000003526f0 [ 178.774330][ T7169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.782382][ T7169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.790453][ T7169] Call Trace: [ 178.793755][ T7169] [ 178.796703][ T7169] blk_trace_setup_queue+0x270/0x310 [ 178.802187][ T7169] sysfs_blk_trace_attr_store+0x6a9/0x9d0 [ 178.807992][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 178.814706][ T7169] ? find_held_lock+0x2b/0x80 [ 178.819842][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 178.826096][ T7169] dev_attr_store+0x55/0x80 [ 178.830703][ T7169] ? __pfx_dev_attr_store+0x10/0x10 [ 178.835908][ T7169] sysfs_kf_write+0xf2/0x150 [ 178.840558][ T7169] kernfs_fop_write_iter+0x351/0x510 [ 178.845840][ T7169] ? __pfx_sysfs_kf_write+0x10/0x10 [ 178.851080][ T7169] vfs_write+0x6c4/0x1150 [ 178.855413][ T7169] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 178.861257][ T7169] ? __pfx___mutex_lock+0x10/0x10 [ 178.866287][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 178.871125][ T7169] ksys_write+0x12a/0x250 [ 178.875460][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 178.880466][ T7169] do_syscall_64+0xcd/0x490 [ 178.884972][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.890906][ T7169] RIP: 0033:0x7fa707f8e929 [ 178.895312][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.915437][ T7169] RSP: 002b:00007fa708d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.924274][ T7169] RAX: ffffffffffffffda RBX: 00007fa7081b5fa0 RCX: 00007fa707f8e929 [ 178.932284][ T7169] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 178.940287][ T7169] RBP: 00007fa708d68090 R08: 0000000000000000 R09: 0000000000000000 [ 178.948295][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.956256][ T7169] R13: 0000000000000000 R14: 00007fa7081b5fa0 R15: 00007ffe0b8b07a8 [ 178.964403][ T7169] [ 178.967429][ T7169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.974696][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.0.213 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 178.986569][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.996614][ T7169] Call Trace: [ 178.999884][ T7169] [ 179.002807][ T7169] dump_stack_lvl+0x3d/0x1f0 [ 179.007399][ T7169] panic+0x71c/0x800 [ 179.011288][ T7169] ? __pfx_panic+0x10/0x10 [ 179.015707][ T7169] ? show_trace_log_lvl+0x29b/0x3e0 [ 179.020927][ T7169] ? check_panic_on_warn+0x1f/0xb0 [ 179.026064][ T7169] ? blk_register_tracepoints+0x2b0/0x380 [ 179.031783][ T7169] check_panic_on_warn+0xab/0xb0 [ 179.036713][ T7169] __warn+0xf6/0x3c0 [ 179.040600][ T7169] ? blk_register_tracepoints+0x2b0/0x380 [ 179.046323][ T7169] report_bug+0x3c3/0x580 [ 179.050650][ T7169] ? blk_register_tracepoints+0x2b0/0x380 [ 179.056379][ T7169] handle_bug+0x184/0x210 [ 179.060698][ T7169] exc_invalid_op+0x17/0x50 [ 179.065189][ T7169] asm_exc_invalid_op+0x1a/0x20 [ 179.070030][ T7169] RIP: 0010:blk_register_tracepoints+0x2b0/0x380 [ 179.076354][ T7169] Code: c7 c7 80 6b 94 90 e8 7f 05 fa ff 31 ff 89 c3 89 c6 e8 c4 12 f8 ff 85 db 0f 85 ca 00 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 <0f> 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 0f 0b 90 e9 95 fd ff ff [ 179.095950][ T7169] RSP: 0018:ffffc90003687b40 EFLAGS: 00010293 [ 179.102024][ T7169] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff81c36eb6 [ 179.109994][ T7169] RDX: ffff8880322f5a00 RSI: ffffffff81c3713f RDI: 0000000000000005 [ 179.117974][ T7169] RBP: 0000000000002000 R08: 0000000000000005 R09: 0000000000000000 [ 179.125962][ T7169] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff88802607a720 [ 179.133924][ T7169] R13: 0000000000000000 R14: ffff88802607a720 R15: ffff88802607ac78 [ 179.141895][ T7169] ? blk_register_tracepoints+0x26/0x380 [ 179.147539][ T7169] ? blk_register_tracepoints+0x2af/0x380 [ 179.153263][ T7169] blk_trace_setup_queue+0x270/0x310 [ 179.158550][ T7169] sysfs_blk_trace_attr_store+0x6a9/0x9d0 [ 179.164270][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 179.170512][ T7169] ? find_held_lock+0x2b/0x80 [ 179.175184][ T7169] ? __pfx_sysfs_blk_trace_attr_store+0x10/0x10 [ 179.181427][ T7169] dev_attr_store+0x55/0x80 [ 179.185938][ T7169] ? __pfx_dev_attr_store+0x10/0x10 [ 179.191140][ T7169] sysfs_kf_write+0xf2/0x150 [ 179.195736][ T7169] kernfs_fop_write_iter+0x351/0x510 [ 179.201018][ T7169] ? __pfx_sysfs_kf_write+0x10/0x10 [ 179.206216][ T7169] vfs_write+0x6c4/0x1150 [ 179.210547][ T7169] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 179.216346][ T7169] ? __pfx___mutex_lock+0x10/0x10 [ 179.221368][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 179.226139][ T7169] ksys_write+0x12a/0x250 [ 179.230461][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 179.235308][ T7169] do_syscall_64+0xcd/0x490 [ 179.239807][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.245687][ T7169] RIP: 0033:0x7fa707f8e929 [ 179.250097][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.269699][ T7169] RSP: 002b:00007fa708d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.278132][ T7169] RAX: ffffffffffffffda RBX: 00007fa7081b5fa0 RCX: 00007fa707f8e929 [ 179.286118][ T7169] RDX: 0000000000000081 RSI: 00002000000002c0 RDI: 0000000000000003 [ 179.294075][ T7169] RBP: 00007fa708d68090 R08: 0000000000000000 R09: 0000000000000000 [ 179.302082][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.310051][ T7169] R13: 0000000000000000 R14: 00007fa7081b5fa0 R15: 00007ffe0b8b07a8 [ 179.318061][ T7169] [ 179.321341][ T7169] Kernel Offset: disabled [ 179.325682][ T7169] Rebooting in 86400 seconds..