last executing test programs: 1m38.093486934s ago: executing program 3 (id=2307): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x9, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x6}]}) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-call-arptables\x00', 0x101242, 0x0) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/status\x00', 0x10140, 0x0) tee$auto(r3, 0xffffffffffffffff, 0xe6f, 0xfffffffd) sendfile$auto(r1, r1, 0x0, 0x7fffe000) 1m37.881120254s ago: executing program 3 (id=2310): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_severities_coverage_fops_severity(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume_offset\x00', 0xa081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioperm$auto(0x3, 0x5, 0x149) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/30t\x00', 0x0, 0x0) getsockopt$auto_SO_RCVMARK(r4, 0x22, 0x4b, &(0x7f00000000c0)='\'@^%$\')(\x00', &(0x7f0000000140)=0x5) 1m33.333108466s ago: executing program 3 (id=2322): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) getpeername$auto(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) r5 = pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r5, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0x676164a5, @_rt={0x0, 0x0, @sival_ptr=0x0}}}, 0x2) 1m32.809760399s ago: executing program 3 (id=2325): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002fcdbdf251bd60000180001801400300000000000000000000004cd5f850146361e01355cc1d75a63da562d5892aaaa23ec841fc5aeac16e88638d91aa34859213699f121d174a70645f8ae89049424b800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000353fb3582020d2bfdadad9ad347d5c80b51f7660d7e6de30dc27f7cc39596fd69be7f304982e1552de8cc6ec1c789f78102e69d3d536998bd73b767de390f715bcca21792d4b98ed9598f627d379ea04ed59587235926b4caad6e0e90d1e487600ca294ef1bf032206f0b252ee7dac4578a09ba14167a98300a03417b2f83c96928f8082c512519bffa05091c1ea4d5dd96c69f23516a2d4c64dc13ec9250d5f26bd521c2d3c1cdab37a0aedff0d3741bd1ac1fc355e2597b9c3a9d5af1882546f7debdf91d19ab1efaeddc294baa766", @ANYRES8=r0, @ANYBLOB="01002dbd7000fedbdf257e005c17"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="020025bd7000fcdbdf250543ddff7620aedb0400000008000300", @ANYRES32=r6, @ANYBLOB="1400040076657468315f6d61637674617000000008001c00640200000500370000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x840) r7 = socket(0x1d, 0x3, 0x1) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) setsockopt$auto(r7, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fadbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="05003000000000004c19237ad6d869ddd85832c8cd0ac5cf507a013acf9f1288286234e190f03f4c581769a1aad2a9e198ede295620465b77ae390f5d8ed148bea2d2ee5e3f54681949112a05699f40deda30ca294bad828d162d08deeed8f76ceea46636cd58975e4032790afe24dc977d7ae66a7e959848bded87aeada6b80e126aa485f90fa7234175f87a902edc46a23de257a6eb8d7e9a3076027f2b1cb54cb924a7d77b40d9a76542e99310cb4ffb1e3ec635e02d5fee01c42d9eeb4ba"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) 1m29.713082336s ago: executing program 3 (id=2334): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r0) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0xc000) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x10, 0x61, 0x400, 0x0, 0x1, 0x80f0c8, 0x9, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x800, 0x81, 0xd}, 0x4a) 1m25.275402665s ago: executing program 3 (id=2348): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/tty/ttyp7/uevent\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r2, 0x80044100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r1, 0x0, 0x400000000005) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000480)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 1m9.748700732s ago: executing program 32 (id=2348): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/tty/ttyp7/uevent\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r2, 0x80044100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r1, 0x0, 0x400000000005) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000480)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 13.194574979s ago: executing program 2 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)="73a313b31162330a1a8ace91b486fc014b9142736fee987e697b1db722a15e7c0defd4e443464d70c130") (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) (async) fallocate$auto(0x1, 0x8, 0x0, 0x5) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x80000541b, 0x38) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/286, 0x11e) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd27, 0x25dddbfc}, 0xffffff0d}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x1000000}, 0x400c084) 12.661779147s ago: executing program 2 (id=2632): r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_severities_coverage_fops_severity(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) gettid() r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume_offset\x00', 0xa081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioperm$auto(0x3, 0x5, 0x149) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/30t\x00', 0x0, 0x0) getsockopt$auto_SO_RCVMARK(r4, 0x22, 0x4b, &(0x7f00000000c0)='\'@^%$\')(\x00', &(0x7f0000000140)=0x5) 10.645016601s ago: executing program 4 (id=2641): r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x28003, 0x0) mmap$auto(0x3, 0x4cc, 0x40df, 0x13, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x2283, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffe, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf6) socket(0x2, 0xa, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r3, r1, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(r2, &(0x7f0000000040)=@ax25={0x3, @bcast, 0x8}, 0x100003) sendto$auto(r5, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r4) 9.250928123s ago: executing program 4 (id=2645): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto(0x3, 0x80108907, 0x38) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x0, 0x0) socket(0xa, 0x808, 0xfffffff6) r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r0, &(0x7f0000000100)={&(0x7f0000000400)="260a1df70484c6b0818792f806ab44358c4d4f9f09dce033406c020059dd74a0b4653e078af4b554d2dab7ffa4bf82d2924e94b6fb7da4eb1ce1f75e82d41d3cbbb3b5db2bba37d03d47cd004a759fa1ecc4fa3d7968d2b05d178f10abc57cccaa406736244917e2e4226e2d1b3949a4dc697456f2ccffd1269af97c962765dfb1f817b2ff7c70860ffa08f9a75b64f55093bce277517184a419f961aaeacdd2", 0x9}, 0x8, 0xe637, 0x6) fcntl$auto_F_GETLEASE(r0, 0x401, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x800003e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) sendmsg$auto_NL80211_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b1f9f06aaca79cd4e1bba2e8072b7d24e8a26dbd26fe701162841aa37881003282ebf8808ed514fdb46834504294e96825e9da6596278eb0fc42b93048300a15f511c0f3c44016a5aa06610b6c9ecdf4349f57957b51f286be748ff80d99cfc27e0cf383de1e5e1ef8d2db8a6cd92e889b9a815347d5264101d3c5bfd538c84b3defde8380daf", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf2530000000060098006c0000000800dc000700000006001a010004000008003f000300000008006a00ff07000004005f0005001301010000002b00fc007bea05c2e50de751795c86ace7f4fb27caf888c90a65128b04d592fcd8f9b4fbf585f16049590100"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0xaa1156edfab578fc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3e852b94, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x100005) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x220043, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) ioctl$auto(r5, 0x401870cb, r5) 9.127377074s ago: executing program 2 (id=2647): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) keyctl$auto(0x2, 0xfffffffd, 0x2, 0x0, 0xfffffffffffffbf9) pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sysfs$auto(0x3, 0x401, 0x0) init_module$auto(0x0, 0xffff9, 0x0) r2 = socket(0x22, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x4, 0x311) semtimedop$auto(0x200, &(0x7f0000000140)={0x8, 0x7e, 0x6e}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7ffffffc}, 0x3, 0x8001, 0x9, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) close_range$auto(r3, r3, 0x8) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x23, 0x4, 0x3) 7.358747847s ago: executing program 0 (id=2650): mmap$auto(0x0, 0x4, 0x4000000000df, 0x7ff, 0x401, 0x2ffffffffffd) (async) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x58) (async) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) mmap$auto(0x4, 0x2000c, 0xdf, 0xe35, r0, 0x8000) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) (rerun: 32) ioctl$auto_SG_NEXT_CMD_LEN(r1, 0x2283, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) ioctl$auto(r2, 0x4004550c, 0xffffffffffffffff) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) epoll_create$auto(0x3ff) (async, rerun: 32) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (rerun: 32) unshare$auto(0x40000085) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) read$auto(r3, &(0x7f0000000000)='veth1\x00', 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x34280, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x17) (async, rerun: 32) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6) (rerun: 32) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a9, 0x7000003) (async) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, r4, 0x4000000007ffc) unshare$auto(0x8000000) 6.105193099s ago: executing program 0 (id=2651): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0xfff, 0xb, 0x4002, 0x4}, 0x80000077, 0xfffffff8, 0x0, 0x162bd) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000), 0x2fb) r1 = timerfd_create$auto(0x1, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50, 0x10000}, 0x1000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) r3 = pidfd_open$auto(0x1, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xc, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x800, 0x5, 0x2, 0x1]}, 0x0) r6 = fcntl$auto_F_UNLCK(r4, 0x206, 0x2) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_DEL_STATION(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x620, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_NONCES={0x79, 0xf3, "7b02fe3442a95f695fbe60f6880e76c41ee6d9c9aaa9413cdf014d45fe4a3126a66f91f0c832767bd58c2c0c2ac1250702272fa029105edc7899c7bc76ac52573920b3e1c4fdda6d1b645261f0bd83871b7e8f7b7e4d3a8b8ca022193688c6f0cf98728bf38b813d4b5a328d6d1c4e8f56709af396"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x1}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0xffff}, @NL80211_ATTR_STA_WME={0xc, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xa9d5}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x554, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x550, 0x2, "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"}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xc}]}, 0x620}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r5, 0x0, 0x5946, 0x7f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x5, 0x20}, 0x1000, 0xfffffffc) sendfile$auto(r2, 0x3, 0x0, 0x400000000006) timerfd_settime$auto(r1, 0x3, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r8 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000000)=0x1) 5.962955647s ago: executing program 4 (id=2652): mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0xfffffffffffffffe, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = io_uring_setup$auto(0xb, 0x0) (async) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, r1, 0xcfa) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (rerun: 64) r2 = socket(0x2, 0x1, 0x84) r3 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x10000, 0x0) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (rerun: 32) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x4010, &(0x7f00000000c0)={0x0, 0x19ffc}, 0x7, 0x0, 0x7ff, 0xb}, 0xfff}, 0x5, 0x311) (async) socket(0x0, 0x5, 0x81) (async) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xff23, 0xf3, 0xb0, @raw=0x33}}) (async, rerun: 32) geteuid() (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0x6) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_secret$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x6, 0x100400000000ffb, 0x8000000008011, r3, 0x8000) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv6/conf/wg1/drop_unicast_in_l2_multicast\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x84) r6 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r6, &(0x7f0000000100)={0x0, 0x10}, 0x1) ftruncate$auto(0x3, 0x700) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) prctl$auto_PR_SYS_DISPATCH_ON(0x8, 0x1, 0x0, 0x9, 0x401) 5.776287651s ago: executing program 2 (id=2655): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x10000000, 0x5, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw5\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) 4.913013178s ago: executing program 0 (id=2658): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) mmap$auto(0x400, 0x202020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8020) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlock$auto(0x7c89, 0x47fff) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r1 = setfsuid$auto(0x1) rseq$auto(&(0x7f0000000040)={0x1, 0x9, 0xd2c8a8c, 0x8, 0x0, 0xafb7, "5249b83db6d481689c965f1eebbc882263f00aa63eff5a3ed9062facfd290b8828c7e15c2632a54697f07b54bbfe1e3d0ba2be34568b5814da485e9bc5fdcf958047aadad1189f7608a0f56b150385d62c35b778893ee43ac988b46197aeaf1ede650815cb3d7188922e7c639a4f2e50b2708099603b22daef8e7847dad0bd1980c3a415947ca94d262ca53df02e1aa17b1f6430cc9e2c71bc22cdc24aa58b23d954ce6074fdd7d6477eff88c2a1daeb65442e80a8ada89a2cff68ad04a711df2b3772e448ee36e3ce78a4221b205ff2d355489c2f26dd8ef700308f3f62c68fdd48f5988425ed4a75"}, 0x8, 0x0, 0x3) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_dma_buf_debug_fops_(r2, &(0x7f00000001c0)=""/139, 0x8b) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc208ae62, 0x38) mseal$auto(0x5, 0xe, 0x80000000) r3 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) pread64$auto(r3, &(0x7f0000000300)='\x00', 0x800, 0x2) capset$auto(&(0x7f00000001c0)={0x1, 0xffffffffffffffff}, &(0x7f0000000200)={0x54d73c28, 0xd, 0x6}) pidfd_send_signal$auto_SIGCONT(r3, 0x12, &(0x7f0000000240)={@siginfo_0_0={0x0, 0x8, 0x4, @_rt={r4, r1, @sival_int=0x5}}}, 0xf) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x220200, 0x0) 4.673851561s ago: executing program 1 (id=2659): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002fcdbdf251bd60000180001801400300000000000000000000004cd5f850146361e01355cc1d75a63da562d5892aaaa23ec841fc5aeac16e88638d91aa34859213699f121d174a70645f8ae89049424b800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000353fb3582020d2bfdadad9ad347d5c80b51f7660d7e6de30dc27f7cc39596fd69be7f304982e1552de8cc6ec1c789f78102e69d3d536998bd73b767de390f715bcca21792d4b98ed9598f627d379ea04ed59587235926b4caad6e0e90d1e487600ca294ef1bf032206f0b252ee7dac4578a09ba14167a98300a03417b2f83c96928f8082c512519bffa05091c1ea4d5dd96c69f23516a2d4c64dc13ec9250d5f26bd521c2d3c1cdab37a0aedff0d3741bd1ac1fc355e2597b9c3a9d5af1882546f7debdf91d19ab1efaeddc294baa766", @ANYRES8=r0, @ANYBLOB="01002dbd7000fedbdf257e005c17"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250543ddff7620aedb0400000008000300", @ANYRES32=r6, @ANYBLOB="1400040076657468315f6d61637674617000000008001c00640200000500370000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x840) r7 = socket(0x1d, 0x3, 0x1) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) setsockopt$auto(r7, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) 4.398835139s ago: executing program 0 (id=2660): close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x100000001, 0x0, 0x0) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) (async) bpf$auto(0x100000001, 0x0, 0x0) (async) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) 4.022327227s ago: executing program 0 (id=2661): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setuid$auto(0xe) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x1, 0x0) (async, rerun: 64) r1 = fsopen$auto(0x0, 0x1) (rerun: 64) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0xffffffffffffffff, 0xbc, 0x41, 0x0, 0x88) (async) write$auto(0x3, 0x0, 0xffd6) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000080)="f8540ba2b2e8b2979f50dd7aee82a7602fd517d011a211a5a2d9e50115d69dd538d7e75e6772b172a2269c5adf29f4843a79a3b916b4599bc9b008fe21f8f15c8127571e1ec92f41fb0178177fe61160c36f8229fd7fd261212feebb498bf06155c6cb1f0a092f92225ab50d0e08b62c15224d513a2e3cfc8be1570dc48729a3dc2098a3a0c21f883a38a69a0cac960a3c80333751ed44871ae13de3a0f7254748d769916e84ceb32144e5d645ce2ee7949aa643db71ef4bfaa10655ce68da6d262cd0af45092f12e39469f233e3af03da33d49954", 0xd5) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video60\x00', 0x90500, 0x0) lseek$auto(r4, 0xfd, 0x1) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0xa) (rerun: 32) 3.91554334s ago: executing program 1 (id=2662): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x20009, 0x800000000007, 0xeb1, 0x404, 0x10007ffe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$auto(0x3, 0x5411, 0x38) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYBLOB='&\x00', @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) socket(0x2c, 0x3, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.814556683s ago: executing program 0 (id=2663): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r2, 0x80086601, 0x7fffffffbfffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) getsockopt$auto(r1, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x2, 0x3, 0x0) mmap$auto(0xbbf, 0x40, 0x3, 0xeb1, r1, 0xfaf) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000100)='//\xf2\x00cu\x102\x18\xe2\fv\xe3Tr\xa7\xa9\v\xfd\xa7:\x83O\xabL\x88#\"#\xf8<;E-\xd7z\b\x00\x00\x00\x00@\x00\x00])@\xe30\x95>^kw\x83~\xbe\xa0jZ\xa4', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r6, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 3.097407953s ago: executing program 4 (id=2664): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002fcdbdf251bd60000180001801400300000000000000000000004cd5f850146361e01355cc1d75a63da562d5892aaaa23ec841fc5aeac16e88638d91aa34859213699f121d174a70645f8ae89049424b800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000353fb3582020d2bfdadad9ad347d5c80b51f7660d7e6de30dc27f7cc39596fd69be7f304982e1552de8cc6ec1c789f78102e69d3d536998bd73b767de390f715bcca21792d4b98ed9598f627d379ea04ed59587235926b4caad6e0e90d1e487600ca294ef1bf032206f0b252ee7dac4578a09ba14167a98300a03417b2f83c96928f8082c512519bffa05091c1ea4d5dd96c69f23516a2d4c64dc13ec9250d5f26bd521c2d3c1cdab37a0aedff0d3741bd1ac1fc355e2597b9c3a9d5af1882546f7debdf91d19ab1efaeddc294baa766", @ANYRES8=r0, @ANYBLOB="01002dbd7000fedbdf257e005c17"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250543ddff7620aedb0400000008000300", @ANYRES32=r6, @ANYBLOB="1400040076657468315f6d61637674617000000008001c00640200000500370000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x840) r7 = socket(0x1d, 0x3, 0x1) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) setsockopt$auto(r7, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) 2.929044077s ago: executing program 1 (id=2665): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x7b, 0x0, &(0x7f0000000000)=0x98) mremap$auto(0x4, 0x8000b8, 0x400000013fd4, 0x43, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x1800) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x1800) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x46, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mprotect$auto(0x110c230000, 0x1, 0x2) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) (async) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x1a1942, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x1a1942, 0x0) write$auto(r2, &(0x7f0000005900)='\\\x00', 0x40db) (async) write$auto(r2, &(0x7f0000005900)='\\\x00', 0x40db) 1.90746524s ago: executing program 1 (id=2666): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x400000000000, 0xfffffffffffffffe, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/vulnerabilities/l1tf\x00', 0x0, 0x0) read$auto(r5, &(0x7f0000000200)='\x00', 0xb) getgroups$auto(0xfff, &(0x7f0000000080)=0xd) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, &(0x7f0000000280)='!{\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clone$auto(0x1, 0xad3, 0x0, 0x0, 0x8000004) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) mmap$auto(0x13, 0x1, 0x7, 0x3a78000000000010, r0, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000340)=@batch={0xffffffff00000000, 0x400, 0x0, 0x2, 0x200, r3, 0x5, 0x5}, 0x6) ioctl$auto(r0, 0x2000008, r1) 1.823223081s ago: executing program 4 (id=2667): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ima/parameters/ahash_bufsize\x00', 0x62, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="328017bc", 0x4) (async) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec15\x00', 0x100, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x1, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "00020600", "008b8c00", ["e5a494b8cbb68a9bc6cc2a9f", "f8ffffffffffffff00000001", "b06f8ca10c66eebcbd6f17c8", "5fe1de420000000000002a92"]}) (async) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xe5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xad}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) setsockopt$auto(r0, 0x800, 0x7c55525e, 0x0, 0x40021) 1.575119411s ago: executing program 2 (id=2668): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0x3ff, 0x0) r1 = epoll_create$auto(0x4) epoll_pwait$auto(r1, 0x0, 0x800, 0x4d, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r0, 0x8000) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe2a) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130025bd7000dddbdf650208000008000300", @ANYRES32=r4, @ANYBLOB="05003e00ff"], 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x20040894) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x80003, 0x300) flistxattr$auto(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002c000000000000001000000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) 1.377426932s ago: executing program 4 (id=2669): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x300, 0x3, 0x3, 0x4000000, &(0x7f0000000240)='C2&'}) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x6, 0xfffffffffffffffe, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000810) 838.298382ms ago: executing program 2 (id=2670): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x40800, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x20000001, 0x2, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80000, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000e05f", 0x80}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x8300) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), r0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r6, 0x0, 0x0) unshare$auto(0x40000080) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r7, 0x0, 0x201, 0xc000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000000", @ANYRES64, @ANYBLOB="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"], 0x40}}, 0x4c800) 759.953224ms ago: executing program 1 (id=2671): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) setresuid$auto(0x0, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ptyp1/power/runtime_suspended_time\x00', 0x250200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000500)=""/204, 0xcc) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) ioctl$auto_tracing_buffers_fops_trace(r0, 0x0, &(0x7f0000000200)="8aaf6e8d88cd435860bb13b06dbe46822ba3fc473529a37e22aba9e5d9552286ba6218eaed5d68052df744d566ae9618c274600a42f5") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$auto(r3, 0x3b82, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r4, 0xfffe, 0x7ff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x0, 0x400000000012, 0x401, 0xff) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) read$auto(0xffffffffffffffff, &(0x7f0000000080)=',*(,\x00', 0xffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 0s ago: executing program 1 (id=2672): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x2a, 0x2, 0x8101) close_range$auto(0xffffffffffffffff, r0, 0xb) socket(0x25, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty3\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xf7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000440)='/\x02\x00\x00\x00\x00\x02\x00\x00o1mp3\xe1L\x00\x18\xee\n\xa7\x17\xe4\xbd\xe8\xee\x02\xf6\x06F2\x8d\xc1\xfc\x88HP\x15Riw\xc6\xfc\xd7G\xaa\x8b\"g\x1b\xe7]u\r\xc3i\xf4\xef\xacM\xeeA|\xe5\v\xec\xcb\xe5\xfeQ?\vqq\xe7\xe9\xb1\xa7\x9dq\xa9\xcfDV\xec\x84\xc3*`\xc1\xe4\xfb\x88S\xd5\xd6\xc5\x0e\xb3e\xfe\xf0\xc1\xfe\x00\x00\x00\x00\x0e\xfc\x8ev\xfe/\x99PJ\xf0\xc4\x8b4\xa6E\x91+\x87\xf0d\x8fVV\xd6%S\x9a\t\xb1\xe0!\x89i_h\xd1Og$p\xb5\x84f\xae\x90]\x1e\xdc\x98>F\x9b\x1a\xbd\x9c2\x9e\xc3\x1c\x12dn\x9bK\x1c\xd8Dc\xf2T\xd2\x1f\x91\xab;\xa2\xff\xe6\xfe%\x0f\x96\x17\xfa&\xaf \xbfT\xfb\x11\xd3\xd6\xa8dh\xeb^\xf8\xbc\xe1\xcc\x85\xd7j%\xeb\xf2\xe0\x03\xdb\xa85:\xa3\xa9\n\x8c\xf7Y\xb9\xfbK\\\xdfe\xe0\xb75\xbf\x81-', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x7ff, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x8, 0xfff, @_rt={0x0, r4, @sival_ptr=&(0x7f0000000340)="1aadbdb51e9b968ec393b4b55e8acaa3cdea684a0476e5d9c1c42c6ac10d94cf9fbe892833805d287c7267e8fad0995bd3b4e16b3dc18856a42381c359eb4d6f2425a3c16b0c21ed84b2d2ec620e4be119efb1e833eedc05b0555aad434c957071431bd23ed3835ee9ac1dbcd9df49ccc5ff0af1b0d32bbe5733aaccb7479c2263a16a1d723c8c7a546ca58c988ff970ee5d1b750649225d7af4935e560d09a9b6d8b62a80caae342a9506d8c08926e9de49"}}}, 0x7, &(0x7f0000000600)={{0x3}, {0x3, 0x5}, 0x80, 0x7, 0x2, 0x8, 0xfff, 0x60, 0x2, 0x5, 0xfffffffffffffe00, 0x2, 0x4a9, 0x0, 0x7, 0x80}) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x101501, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x2000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) kernel console output (not intermixed with test programs): ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 460.593592][T13480] __nla_validate_parse: 57 callbacks suppressed [ 460.593609][T13480] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1680'. [ 461.282503][T12744] Bluetooth: hci3: command 0x0419 tx timeout [ 461.288793][T11710] Bluetooth: hci2: command 0x0419 tx timeout [ 461.295077][T12078] Bluetooth: hci1: command 0x0419 tx timeout [ 461.301098][T11723] Bluetooth: hci0: command 0x0419 tx timeout [ 461.309862][T13502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.316843][T13502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.323232][T13502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.330036][T13502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.542637][T13480] binder: BINDER_SET_CONTEXT_MGR already set [ 461.548642][T13480] binder: 13479:13480 ioctl 4018620d 9 returned -16 [ 462.340498][T13528] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 463.382183][T11710] Bluetooth: hci3: command 0x0419 tx timeout [ 463.388338][T12744] Bluetooth: hci2: command 0x0419 tx timeout [ 463.394401][T12078] Bluetooth: hci1: command 0x0419 tx timeout [ 463.400463][T11723] Bluetooth: hci0: command 0x0419 tx timeout [ 464.249586][T13554] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2 is already present [ 464.581686][T13560] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 464.628880][T13560] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 464.658119][T13560] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 465.627627][T11748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.944094][T11723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.995400][T11748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.023745][T11723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.032607][T11723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.045646][T11723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.063956][T11723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.125890][T11748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.254222][T11748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.651590][T11748] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.414093][T11748] bridge_slave_1: left allmulticast mode [ 467.419974][T11748] bridge_slave_1: left promiscuous mode [ 467.484094][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.576199][T11748] bridge_slave_0: left allmulticast mode [ 467.602287][T11748] bridge_slave_0: left promiscuous mode [ 467.622156][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.733395][T13603] FAULT_INJECTION: forcing a failure. [ 467.733395][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 467.832112][T13603] CPU: 1 UID: 0 PID: 13603 Comm: syz.2.1702 Not tainted syzkaller #0 PREEMPT(full) [ 467.832150][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.832167][T13603] Call Trace: [ 467.832176][T13603] [ 467.832185][T13603] dump_stack_lvl+0x16c/0x1f0 [ 467.832224][T13603] should_fail_ex+0x512/0x640 [ 467.832265][T13603] ? fs_reclaim_acquire+0xae/0x150 [ 467.832303][T13603] should_failslab+0xc2/0x120 [ 467.832337][T13603] kmem_cache_alloc_noprof+0x75/0x6e0 [ 467.832364][T13603] ? __pfx_map_id_range_down+0x10/0x10 [ 467.832387][T13603] ? security_inode_alloc+0x3b/0x2b0 [ 467.832433][T13603] ? security_inode_alloc+0x3b/0x2b0 [ 467.832471][T13603] security_inode_alloc+0x3b/0x2b0 [ 467.832520][T13603] inode_init_always_gfp+0xce4/0x1030 [ 467.832555][T13603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 467.832591][T13603] alloc_inode+0x86/0x240 [ 467.832626][T13603] new_inode+0x22/0x1c0 [ 467.832662][T13603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 467.832694][T13603] mqueue_get_inode+0x2e/0xdd0 [ 467.832721][T13603] ? sget_fc+0x808/0xc20 [ 467.832746][T13603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 467.832777][T13603] mqueue_fill_super+0x14d/0x260 [ 467.832810][T13603] get_tree_nodev+0xdd/0x190 [ 467.832841][T13603] mqueue_get_tree+0xf1/0x130 [ 467.832876][T13603] vfs_get_tree+0x8e/0x340 [ 467.832916][T13603] fc_mount_longterm+0x1a/0x270 [ 467.832954][T13603] mq_init_ns+0x426/0x620 [ 467.832997][T13603] copy_ipcs+0x2d6/0x550 [ 467.833038][T13603] create_new_namespaces+0x20a/0xa90 [ 467.833069][T13603] ? security_capable+0x7e/0x260 [ 467.833109][T13603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 467.833143][T13603] ksys_unshare+0x45b/0xa40 [ 467.833179][T13603] ? __pfx_ksys_unshare+0x10/0x10 [ 467.833215][T13603] ? xfd_validate_state+0x61/0x180 [ 467.833253][T13603] __x64_sys_unshare+0x31/0x40 [ 467.833288][T13603] do_syscall_64+0xcd/0xfa0 [ 467.833325][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.833352][T13603] RIP: 0033:0x7fbfbf58f749 [ 467.833374][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.833400][T13603] RSP: 002b:00007fbfc039a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 467.833426][T13603] RAX: ffffffffffffffda RBX: 00007fbfbf7e5fa0 RCX: 00007fbfbf58f749 [ 467.833444][T13603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 467.833461][T13603] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.833477][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.833494][T13603] R13: 00007fbfbf7e6038 R14: 00007fbfbf7e5fa0 R15: 00007ffcf0c5b838 [ 467.833540][T13603] [ 468.104674][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.172040][T11723] Bluetooth: hci0: command tx timeout [ 468.721561][T11748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.735091][T11748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.745475][T11748] bond0 (unregistering): Released all slaves [ 468.814850][T13585] chnl_net:caif_netlink_parms(): no params data found [ 469.289776][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.307668][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.317839][T13585] bridge_slave_0: entered allmulticast mode [ 469.329678][T13585] bridge_slave_0: entered promiscuous mode [ 469.377726][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.406400][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.427382][T13585] bridge_slave_1: entered allmulticast mode [ 469.436738][T13585] bridge_slave_1: entered promiscuous mode [ 469.519725][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.530763][T11748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.542706][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.550128][T11748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.578321][T11748] veth1_macvtap: left allmulticast mode [ 469.584359][T11748] veth1_macvtap: left promiscuous mode [ 469.590254][T11748] veth0_macvtap: left promiscuous mode [ 469.597091][T11748] veth1_vlan: left promiscuous mode [ 469.603750][T11748] veth0_vlan: left promiscuous mode [ 470.060114][T13648] program syz.3.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.085348][T13648] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.242406][T11723] Bluetooth: hci0: command tx timeout [ 470.409207][T11748] team0 (unregistering): Port device team_slave_1 removed [ 470.452924][T11748] team0 (unregistering): Port device team_slave_0 removed [ 470.751030][T11748] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 470.883414][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.908581][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.046940][T13585] team0: Port device team_slave_0 added [ 471.104613][T13585] team0: Port device team_slave_1 added [ 471.330868][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.342693][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.370432][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.551788][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.563964][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.590499][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.026592][T13585] hsr_slave_0: entered promiscuous mode [ 472.033649][T13585] hsr_slave_1: entered promiscuous mode [ 472.211069][T13675] netlink: 'syz.0.1709': attribute type 11 has an invalid length. [ 472.332503][T11723] Bluetooth: hci0: command tx timeout [ 473.844884][T13724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.869236][T13724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.892832][T13724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.952212][T13724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.958375][T13724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 474.036001][T13724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 474.127698][T13585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.180150][T13585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.284573][T13585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.384457][T13585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.569054][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 474.640673][T13745] ovs_: entered promiscuous mode [ 474.810843][T13585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.876161][T13585] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.925955][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.933181][T11725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.013377][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.020573][T11749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.924037][T11723] Bluetooth: hci3: command 0x0419 tx timeout [ 475.930099][T11723] Bluetooth: hci2: command 0x0419 tx timeout [ 475.936213][T11710] Bluetooth: hci1: command 0x0419 tx timeout [ 475.943970][T13788] delete_channel: no stack [ 476.005699][T11723] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.032995][T13783] zswap: compressor not available [ 476.125283][T13791] tc_dump_action: action bad kind [ 476.167109][T13585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.423013][T13585] veth0_vlan: entered promiscuous mode [ 476.663479][T13585] veth1_vlan: entered promiscuous mode [ 477.240204][T13818] Invalid ELF header magic: != ELF [ 477.585936][T13585] veth0_macvtap: entered promiscuous mode [ 477.728781][T13585] veth1_macvtap: entered promiscuous mode [ 477.823660][T13585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.039574][T13841] Unable to find swap-space signature [ 478.060925][T13585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.091047][T11723] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.108325][T11749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.130193][T11749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.228151][T11749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.344593][T11749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.632800][T11749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.660441][T11749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.734709][T11725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.747449][T11725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.867970][T13875] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 480.162029][T11723] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.821677][T13919] nfsd: Unknown parameter '^BÔ-' [ 481.928079][T13933] Unable to find swap-space signature [ 482.086484][T13936] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 482.824823][T13941] busy [ 482.838457][T13941] busy [ 482.852604][T13941] busy [ 483.037831][T13941] busy [ 483.092172][T13941] busy [ 483.094937][T13941] busy [ 487.854978][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 489.944015][T14102] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 489.978052][T14102] synth uevent: /bus/mei: unknown uevent action string [ 490.492255][ T30] audit: type=1800 audit(4294967346.039:43): pid=14117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1787" name="mtdblock0" dev="tmpfs" ino=745 res=0 errno=0 [ 490.513155][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.387632][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 498.326504][T14274] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 500.541497][T14312] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1831'. [ 501.442134][T14336] netlink: 'syz.2.1836': attribute type 27 has an invalid length. [ 501.453921][T14336] netlink: 'syz.2.1836': attribute type 28 has an invalid length. [ 501.463273][T14336] netlink: 'syz.2.1836': attribute type 29 has an invalid length. [ 501.532064][T14336] netlink: 'syz.2.1836': attribute type 30 has an invalid length. [ 501.568390][T14336] netlink: 'syz.2.1836': attribute type 31 has an invalid length. [ 501.686793][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.711749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.722192][T14336] netlink: 'syz.2.1836': attribute type 32 has an invalid length. [ 501.742157][T14336] netlink: 'syz.2.1836': attribute type 33 has an invalid length. [ 501.762244][T14336] netlink: 'syz.2.1836': attribute type 35 has an invalid length. [ 501.788219][T14336] netlink: 'syz.2.1836': attribute type 37 has an invalid length. [ 501.813602][T14349] FAULT_INJECTION: forcing a failure. [ 501.813602][T14349] name failslab, interval 1, probability 0, space 0, times 0 [ 501.826473][T14336] netlink: 'syz.2.1836': attribute type 39 has an invalid length. [ 501.826533][T14336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1836'. [ 501.846974][T14349] CPU: 1 UID: 0 PID: 14349 Comm: syz.1.1839 Not tainted syzkaller #0 PREEMPT(full) [ 501.847012][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.847029][T14349] Call Trace: [ 501.847038][T14349] [ 501.847048][T14349] dump_stack_lvl+0x16c/0x1f0 [ 501.847087][T14349] should_fail_ex+0x512/0x640 [ 501.847126][T14349] ? __kmalloc_cache_noprof+0x5f/0x780 [ 501.847155][T14349] should_failslab+0xc2/0x120 [ 501.847190][T14349] __kmalloc_cache_noprof+0x72/0x780 [ 501.847216][T14349] ? __do_sys_statmount+0x276/0x2090 [ 501.847256][T14349] ? security_capable+0x7e/0x260 [ 501.847295][T14349] ? __do_sys_statmount+0x276/0x2090 [ 501.847334][T14349] __do_sys_statmount+0x276/0x2090 [ 501.847373][T14349] ? __pfx___might_resched+0x10/0x10 [ 501.847405][T14349] ? __x64_sys_futex+0x1e0/0x4c0 [ 501.847439][T14349] ? __x64_sys_futex+0x1e9/0x4c0 [ 501.847475][T14349] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 501.847509][T14349] ? __pfx___do_sys_statmount+0x10/0x10 [ 501.847563][T14349] do_syscall_64+0xcd/0xfa0 [ 501.847597][T14349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.847625][T14349] RIP: 0033:0x7f56ebd8f749 [ 501.847648][T14349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.847674][T14349] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 501.847699][T14349] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 501.847717][T14349] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000200000000000 [ 501.847735][T14349] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.847751][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.847766][T14349] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 501.847803][T14349] [ 502.803356][T14400] mkiss: ax0: crc mode is auto. [ 504.053606][T14429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'. [ 504.447269][T14445] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1865'. [ 504.738429][T14448] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 504.752752][T14445] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1865'. [ 504.766126][T14445] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1865'. [ 505.379952][T14468] nvme_fcloop: unknown parameter or missing value '7' [ 507.228915][T14540] ACPI: Can not change Invalid GPE/Fixed Event status [ 508.413598][ T30] audit: type=1326 audit(4294967363.959:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.1.1888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56ebd8f749 code=0x0 [ 509.509348][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1893'. [ 509.579339][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 511.391295][T14610] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 511.678066][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 515.647062][T14728] delete_channel: no stack [ 516.081741][T14750] FAULT_INJECTION: forcing a failure. [ 516.081741][T14750] name failslab, interval 1, probability 0, space 0, times 0 [ 516.156202][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.3.1922 Not tainted syzkaller #0 PREEMPT(full) [ 516.156241][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.156257][T14750] Call Trace: [ 516.156266][T14750] [ 516.156277][T14750] dump_stack_lvl+0x16c/0x1f0 [ 516.156315][T14750] should_fail_ex+0x512/0x640 [ 516.156353][T14750] ? __kmalloc_cache_noprof+0x5f/0x780 [ 516.156384][T14750] should_failslab+0xc2/0x120 [ 516.156419][T14750] __kmalloc_cache_noprof+0x72/0x780 [ 516.156445][T14750] ? net_generic+0xea/0x2a0 [ 516.156472][T14750] ? tunnel_key_init_net+0x56/0x270 [ 516.156507][T14750] ? tunnel_key_init_net+0x56/0x270 [ 516.156534][T14750] ? __pfx_tunnel_key_init_net+0x10/0x10 [ 516.156572][T14750] tunnel_key_init_net+0x56/0x270 [ 516.156603][T14750] ops_init+0x1e2/0x5f0 [ 516.156636][T14750] setup_net+0x100/0x390 [ 516.156665][T14750] ? __pfx_setup_net+0x10/0x10 [ 516.156695][T14750] ? debug_mutex_init+0x37/0x70 [ 516.156728][T14750] copy_net_ns+0x2f8/0x690 [ 516.156760][T14750] create_new_namespaces+0x3ea/0xa90 [ 516.156803][T14750] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 516.156832][T14750] ksys_unshare+0x45b/0xa40 [ 516.156869][T14750] ? __pfx_ksys_unshare+0x10/0x10 [ 516.156902][T14750] ? xfd_validate_state+0x61/0x180 [ 516.156949][T14750] __x64_sys_unshare+0x31/0x40 [ 516.156983][T14750] do_syscall_64+0xcd/0xfa0 [ 516.157018][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.157044][T14750] RIP: 0033:0x7f30ee38f749 [ 516.157064][T14750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.157088][T14750] RSP: 002b:00007f30ef2ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 516.157114][T14750] RAX: ffffffffffffffda RBX: 00007f30ee5e5fa0 RCX: 00007f30ee38f749 [ 516.157133][T14750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 516.157149][T14750] RBP: 00007f30ee413f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.157166][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.157183][T14750] R13: 00007f30ee5e6038 R14: 00007f30ee5e5fa0 R15: 00007ffeac6dcb98 [ 516.157222][T14750] [ 517.861610][T14768] mkiss: ax0: crc mode is auto. [ 522.373784][T14830] kexec: Could not allocate control_code_buffer [ 522.450773][T14827] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1942'. [ 522.642841][T14827] : renamed from hsr0 (while UP) [ 522.673166][T14827] : entered allmulticast mode [ 522.677984][T14827] hsr_slave_0: entered allmulticast mode [ 522.691993][T14827] hsr_slave_1: entered allmulticast mode [ 522.869122][T14847] validate_nla: 1 callbacks suppressed [ 522.869142][T14847] netlink: 'syz.1.1946': attribute type 1 has an invalid length. [ 522.889890][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'. [ 525.977673][T14881] sp0: Synchronizing with TNC è[ 526.704993][T14906] zswap: compressor not available [ 527.119607][T14922] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1964'. syzkaller syzkaller login: “ÇIãjníüú¡9»_UÏ´îVQ8Àñj@:Un M½×%U¬xþ0 [ 530.207977][T15005] syz.2.1980: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 530.240074][T15005] CPU: 0 UID: 0 PID: 15005 Comm: syz.2.1980 Not tainted syzkaller #0 PREEMPT(full) [ 530.240106][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.240115][T15005] Call Trace: [ 530.240120][T15005] [ 530.240126][T15005] dump_stack_lvl+0x16c/0x1f0 [ 530.240149][T15005] warn_alloc+0x248/0x3a0 [ 530.240165][T15005] ? __pfx_warn_alloc+0x10/0x10 [ 530.240180][T15005] ? alloc_pages_mpol+0x25a/0x550 [ 530.240199][T15005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 530.240216][T15005] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 530.240239][T15005] ? __kmalloc_node_noprof+0x364/0x8a0 [ 530.240255][T15005] ? __get_vm_area_node+0x208/0x330 [ 530.240277][T15005] __vmalloc_node_range_noprof+0x119b/0x1480 [ 530.240302][T15005] ? kernel_clone+0xfc/0x930 [ 530.240323][T15005] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 530.240349][T15005] ? rcu_is_watching+0x12/0xc0 [ 530.240365][T15005] ? kernel_clone+0xfc/0x930 [ 530.240380][T15005] __vmalloc_node_noprof+0xad/0xf0 [ 530.240398][T15005] ? kernel_clone+0xfc/0x930 [ 530.240415][T15005] copy_process+0x2c77/0x76a0 [ 530.240432][T15005] ? __pfx___futex_wait+0x10/0x10 [ 530.240451][T15005] ? __pfx_copy_process+0x10/0x10 [ 530.240471][T15005] ? futex_private_hash_put+0xd5/0x190 [ 530.240492][T15005] kernel_clone+0xfc/0x930 [ 530.240509][T15005] ? __pfx_kernel_clone+0x10/0x10 [ 530.240535][T15005] __do_sys_clone+0xce/0x120 [ 530.240552][T15005] ? __pfx___do_sys_clone+0x10/0x10 [ 530.240576][T15005] ? xfd_validate_state+0x61/0x180 [ 530.240601][T15005] do_syscall_64+0xcd/0xfa0 [ 530.240619][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.240633][T15005] RIP: 0033:0x7fbfbf58f749 [ 530.240645][T15005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.240658][T15005] RSP: 002b:00007fbfc0379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 530.240672][T15005] RAX: ffffffffffffffda RBX: 00007fbfbf7e6090 RCX: 00007fbfbf58f749 [ 530.240681][T15005] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 530.240689][T15005] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.240697][T15005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.240704][T15005] R13: 00007fbfbf7e6128 R14: 00007fbfbf7e6090 R15: 00007ffcf0c5b838 [ 530.240723][T15005] [ 530.240728][T15005] Mem-Info: [ 530.745631][T15012] FAULT_INJECTION: forcing a failure. [ 530.745631][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 530.760758][T15012] CPU: 1 UID: 0 PID: 15012 Comm: syz.1.1983 Not tainted syzkaller #0 PREEMPT(full) [ 530.760780][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.760789][T15012] Call Trace: [ 530.760795][T15012] [ 530.760800][T15012] dump_stack_lvl+0x16c/0x1f0 [ 530.760823][T15012] should_fail_ex+0x512/0x640 [ 530.760844][T15012] ? fs_reclaim_acquire+0xae/0x150 [ 530.760865][T15012] should_failslab+0xc2/0x120 [ 530.760884][T15012] kmem_cache_alloc_noprof+0x75/0x6e0 [ 530.760898][T15012] ? __pfx_map_id_range_down+0x10/0x10 [ 530.760910][T15012] ? security_inode_alloc+0x3b/0x2b0 [ 530.760934][T15012] ? security_inode_alloc+0x3b/0x2b0 [ 530.760953][T15012] security_inode_alloc+0x3b/0x2b0 [ 530.760973][T15012] inode_init_always_gfp+0xce4/0x1030 [ 530.760991][T15012] alloc_inode+0x86/0x240 [ 530.761009][T15012] new_inode+0x22/0x1c0 [ 530.761035][T15012] rpc_new_dir+0xa1/0x440 [ 530.761057][T15012] ? d_instantiate+0x77/0x90 [ 530.761076][T15012] rpc_fill_super+0x344/0x4f0 [ 530.761090][T15012] ? __pfx_rpc_fill_super+0x10/0x10 [ 530.761103][T15012] get_tree_keyed+0x10e/0x1d0 [ 530.761119][T15012] vfs_get_tree+0x8e/0x340 [ 530.761139][T15012] vfs_cmd_create+0xd7/0x2a0 [ 530.761158][T15012] __do_sys_fsconfig+0x7b8/0xbe0 [ 530.761177][T15012] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 530.761204][T15012] do_syscall_64+0xcd/0xfa0 [ 530.761222][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.761236][T15012] RIP: 0033:0x7f56ebd8f749 [ 530.761249][T15012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.761262][T15012] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 530.761276][T15012] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 530.761288][T15012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 530.761296][T15012] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.761304][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.761312][T15012] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 530.761332][T15012] [ 531.056049][T15002] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 531.163948][T15005] active_anon:12814 inactive_anon:1870 isolated_anon:0 [ 531.163948][T15005] active_file:21727 inactive_file:39494 isolated_file:0 [ 531.163948][T15005] unevictable:768 dirty:1302 writeback:0 [ 531.163948][T15005] slab_reclaimable:11927 slab_unreclaimable:96313 [ 531.163948][T15005] mapped:27064 shmem:3361 pagetables:1169 [ 531.163948][T15005] sec_pagetables:0 bounce:0 [ 531.163948][T15005] kernel_misc_reclaimable:0 [ 531.163948][T15005] free:1288398 free_pcp:33591 free_cma:0 [ 531.212159][T15005] Node 0 active_anon:51256kB inactive_anon:7780kB active_file:86872kB inactive_file:157232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108512kB dirty:5208kB writeback:0kB shmem:12208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11588kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.246581][T15005] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.459276][T15005] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.611955][T15005] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 531.617786][T15005] Node 0 DMA32 free:1263732kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51256kB inactive_anon:12864kB active_file:86872kB inactive_file:157232kB unevictable:1536kB writepending:5408kB zspages:0kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:96352kB local_pcp:57604kB free_cma:0kB [ 531.659680][T15005] lowmem_reserve[]: 0 0 1 1 1 [ 531.725076][T15005] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 531.882006][T15005] lowmem_reserve[]: 0 0 0 0 0 [ 531.911925][T15005] Node 1 Normal free:3874000kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:744kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32344kB local_pcp:18440kB free_cma:0kB [ 532.021920][T15005] lowmem_reserve[]: 0 0 0 0 0 [ 532.037023][T15005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.052217][T15005] Node 0 DMA32: 1588*4kB (UME) 476*8kB (UME) 1394*16kB (UME) 1355*32kB (UME) 382*64kB (UME) 320*128kB (UM) 161*256kB (UME) 37*512kB (UME) 23*1024kB (UME) 17*2048kB (UM) 246*4096kB (UM) = 1267376kB [ 532.141943][T15005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 532.896263][T15005] Node 1 Normal: 174*4kB (UME) 67*8kB (UME) 21*16kB (UME) 175*32kB (UME) 70*64kB (UME) 15*128kB (UM) 11*256kB (M) 7*512kB (ME) 4*1024kB (UM) 8*2048kB (UME) 936*4096kB (M) = 3874304kB [ 532.914580][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.039391][T15005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.072229][T15005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.147263][T15005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.231925][T15005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.288647][T15005] 66719 total pagecache pages [ 533.298820][T15005] 0 pages in swap cache [ 533.308761][T15005] Free swap = 123700kB [ 533.337228][T15005] Total swap = 124996kB [ 533.357117][T15005] 2097051 pages RAM [ 533.368643][T15005] 0 pages HighMem/MovableOnly [ 533.388822][T15005] 428695 pages reserved [ 533.398910][T15005] 0 pages cma reserved [ 534.125465][T15070] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 534.151925][T15070] bond0: option packets_per_slave: allowed values 0 - 65535 [ 534.558500][T15089] block2mtd: device name too long [ 535.301138][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 535.841932][ T30] audit: type=1800 audit(4294967391.309:45): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2008" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 536.166027][T15132] bridge0: port 3(veth1_macvtap) entered blocking state [ 536.173575][T15132] bridge0: port 3(veth1_macvtap) entered disabled state [ 536.181556][T15132] veth1_macvtap: entered allmulticast mode [ 536.196191][T15132] veth1_macvtap: left allmulticast mode [ 540.381900][ T30] audit: type=1804 audit(4294967395.939:46): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2033" name="/newroot/120/file0" dev="tmpfs" ino=638 res=1 errno=0 [ 542.780328][T15296] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2050'. [ 543.115137][T15306] program syz.1.2053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.132174][T15306] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 545.840489][T15384] FAULT_INJECTION: forcing a failure. [ 545.840489][T15384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.876879][T15384] CPU: 0 UID: 0 PID: 15384 Comm: syz.3.2068 Not tainted syzkaller #0 PREEMPT(full) [ 545.876911][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.876924][T15384] Call Trace: [ 545.876932][T15384] [ 545.876941][T15384] dump_stack_lvl+0x16c/0x1f0 [ 545.876977][T15384] should_fail_ex+0x512/0x640 [ 545.877017][T15384] _copy_from_user+0x2e/0xd0 [ 545.877051][T15384] do_pidfd_send_signal+0x26c/0x400 [ 545.877083][T15384] ? __pfx_do_pidfd_send_signal+0x10/0x10 [ 545.877131][T15384] __x64_sys_pidfd_send_signal+0x358/0x430 [ 545.877169][T15384] do_syscall_64+0xcd/0xfa0 [ 545.877202][T15384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.877227][T15384] RIP: 0033:0x7f30ee38f749 [ 545.877247][T15384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.877271][T15384] RSP: 002b:00007f30ef2ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 545.877295][T15384] RAX: ffffffffffffffda RBX: 00007f30ee5e5fa0 RCX: 00007f30ee38f749 [ 545.877313][T15384] RDX: 0000200000000440 RSI: 0000000000000008 RDI: 0000000000000004 [ 545.877328][T15384] RBP: 00007f30ef2ca090 R08: 0000000000000000 R09: 0000000000000000 [ 545.877343][T15384] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 545.877358][T15384] R13: 00007f30ee5e6038 R14: 00007f30ee5e5fa0 R15: 00007ffeac6dcb98 [ 545.877394][T15384] [ 546.023648][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.150923][T15420] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2077'. [ 547.621245][T15424] FAULT_INJECTION: forcing a failure. [ 547.621245][T15424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.652171][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.1.2078 Not tainted syzkaller #0 PREEMPT(full) [ 547.652208][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.652223][T15424] Call Trace: [ 547.652233][T15424] [ 547.652243][T15424] dump_stack_lvl+0x16c/0x1f0 [ 547.652287][T15424] should_fail_ex+0x512/0x640 [ 547.652328][T15424] _copy_from_user+0x2e/0xd0 [ 547.652366][T15424] post_copy_siginfo_from_user.isra.0+0x16e/0x300 [ 547.652406][T15424] ? __pfx_post_copy_siginfo_from_user.isra.0+0x10/0x10 [ 547.652444][T15424] ? find_held_lock+0x2b/0x80 [ 547.652488][T15424] do_pidfd_send_signal+0x29e/0x400 [ 547.652522][T15424] ? __pfx_do_pidfd_send_signal+0x10/0x10 [ 547.652572][T15424] __x64_sys_pidfd_send_signal+0x358/0x430 [ 547.652614][T15424] do_syscall_64+0xcd/0xfa0 [ 547.652646][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.652673][T15424] RIP: 0033:0x7f56ebd8f749 [ 547.652693][T15424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.652718][T15424] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 547.652742][T15424] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 547.652759][T15424] RDX: 0000200000000440 RSI: 0000000000000008 RDI: 0000000000000004 [ 547.652775][T15424] RBP: 00007f56ecc10090 R08: 0000000000000000 R09: 0000000000000000 [ 547.652790][T15424] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 547.652806][T15424] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 547.652841][T15424] [ 547.821929][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.950989][T15452] netlink: 306 bytes leftover after parsing attributes in process `syz.1.2086'. [ 550.856190][T15499] sctp: [Deprecated]: syz.1.2097 (pid 15499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.856190][T15499] Use struct sctp_sack_info instead [ 551.451288][T15516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.178005][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2109'. [ 553.284574][T15543] bridge_slave_1: left allmulticast mode [ 553.290270][T15543] bridge_slave_1: left promiscuous mode [ 553.313665][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.352373][T15543] bridge_slave_0: left allmulticast mode [ 553.359046][T15543] bridge_slave_0: left promiscuous mode [ 553.372236][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.395499][T15592] hub 8-0:1.0: USB hub found [ 555.402794][T15592] hub 8-0:1.0: 1 port detected [ 555.454118][T15592] random: crng reseeded on system resumption [ 557.216534][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.236539][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.255352][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.274398][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.302338][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.310816][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.332021][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.356259][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.369476][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.416063][T15624] futex_wake_op: syz.1.2126 tries to shift op by -2048; fix this program [ 557.700402][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2129'. [ 558.013519][T15637] bond0: (slave bond_slave_1): Releasing backup interface [ 559.395539][T15618] FAULT_INJECTION: forcing a failure. [ 559.395539][T15618] name failslab, interval 1, probability 0, space 0, times 0 [ 559.542408][T15618] CPU: 1 UID: 0 PID: 15618 Comm: syz.2.2124 Not tainted syzkaller #0 PREEMPT(full) [ 559.542449][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.542466][T15618] Call Trace: [ 559.542475][T15618] [ 559.542485][T15618] dump_stack_lvl+0x16c/0x1f0 [ 559.542524][T15618] should_fail_ex+0x512/0x640 [ 559.542562][T15618] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 559.542596][T15618] should_failslab+0xc2/0x120 [ 559.542631][T15618] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 559.542662][T15618] ? shmem_alloc_inode+0x25/0x50 [ 559.542702][T15618] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 559.542733][T15618] ? shmem_alloc_inode+0x25/0x50 [ 559.542763][T15618] shmem_alloc_inode+0x25/0x50 [ 559.542794][T15618] alloc_inode+0x64/0x240 [ 559.542827][T15618] new_inode+0x22/0x1c0 [ 559.542864][T15618] shmem_get_inode+0x19a/0xfb0 [ 559.542905][T15618] shmem_mknod+0x1a8/0x450 [ 559.542945][T15618] ? __pfx_shmem_create+0x10/0x10 [ 559.542977][T15618] lookup_open.isra.0+0x11d3/0x1580 [ 559.543025][T15618] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 559.543072][T15618] ? find_held_lock+0x2b/0x80 [ 559.543107][T15618] ? __pfx_down_write+0x10/0x10 [ 559.543152][T15618] path_openat+0x893/0x2cb0 [ 559.543202][T15618] ? __pfx_path_openat+0x10/0x10 [ 559.543234][T15618] ? __lock_acquire+0xb8a/0x1c90 [ 559.543275][T15618] do_filp_open+0x20b/0x470 [ 559.543302][T15618] ? __pfx_do_filp_open+0x10/0x10 [ 559.543346][T15618] ? alloc_fd+0x471/0x7d0 [ 559.543382][T15618] do_sys_openat2+0x11b/0x1d0 [ 559.543421][T15618] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.543470][T15618] __x64_sys_openat+0x174/0x210 [ 559.543509][T15618] ? __pfx___x64_sys_openat+0x10/0x10 [ 559.543557][T15618] do_syscall_64+0xcd/0xfa0 [ 559.543589][T15618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.543615][T15618] RIP: 0033:0x7fbfbf58f749 [ 559.543635][T15618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.543661][T15618] RSP: 002b:00007fbfc0358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 559.543687][T15618] RAX: ffffffffffffffda RBX: 00007fbfbf7e6180 RCX: 00007fbfbf58f749 [ 559.543705][T15618] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 559.543721][T15618] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 559.543737][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.543753][T15618] R13: 00007fbfbf7e6218 R14: 00007fbfbf7e6180 R15: 00007ffcf0c5b838 [ 559.543792][T15618] [ 560.238900][T15690] Invalid ELF header magic: != ELF [ 560.592421][T15681] ucma_write: process 1617 (syz.2.2139) changed security contexts after opening file descriptor, this is not allowed. [ 561.302767][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 562.072652][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2150'. [ 563.128124][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.135041][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.785235][T15774] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 570.710591][T15818] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2168'. [ 571.332573][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 571.979175][T15850] block nbd9: NBD_DISCONNECT [ 574.384557][T15885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2182'. [ 574.991035][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.328799][T15922] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 578.013603][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2199'. [ 578.658258][T15960] bridge0: port 3(bond0) entered blocking state [ 578.665494][T15960] bridge0: port 3(bond0) entered disabled state [ 578.704209][T15960] bond0: entered allmulticast mode [ 578.765723][T15960] bond_slave_0: entered allmulticast mode [ 578.816772][T15960] bond_slave_1: entered allmulticast mode [ 578.919764][T15960] bond0: entered promiscuous mode [ 578.942705][T15960] bond_slave_0: entered promiscuous mode [ 578.958878][T15960] bond_slave_1: entered promiscuous mode [ 578.982952][T15960] bridge0: port 3(bond0) entered blocking state [ 578.989410][T15960] bridge0: port 3(bond0) entered forwarding state [ 579.783787][T15987] netlink: 266 bytes leftover after parsing attributes in process `syz.3.2207'. [ 579.892541][T15987] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.577985][T16013] nfsd: Unknown parameter 'TšR‚Ð' [ 581.929787][T16023] FAULT_INJECTION: forcing a failure. [ 581.929787][T16023] name failslab, interval 1, probability 0, space 0, times 0 [ 581.944668][T16023] CPU: 0 UID: 0 PID: 16023 Comm: syz.1.2216 Not tainted syzkaller #0 PREEMPT(full) [ 581.944708][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.944724][T16023] Call Trace: [ 581.944733][T16023] [ 581.944743][T16023] dump_stack_lvl+0x16c/0x1f0 [ 581.944783][T16023] should_fail_ex+0x512/0x640 [ 581.944821][T16023] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 581.944856][T16023] should_failslab+0xc2/0x120 [ 581.944891][T16023] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 581.944923][T16023] ? shmem_alloc_inode+0x25/0x50 [ 581.944970][T16023] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 581.945004][T16023] ? shmem_alloc_inode+0x25/0x50 [ 581.945036][T16023] shmem_alloc_inode+0x25/0x50 [ 581.945069][T16023] alloc_inode+0x64/0x240 [ 581.945105][T16023] new_inode+0x22/0x1c0 [ 581.945142][T16023] shmem_get_inode+0x19a/0xfb0 [ 581.945186][T16023] shmem_mknod+0x1a8/0x450 [ 581.945226][T16023] ? __pfx_shmem_create+0x10/0x10 [ 581.945259][T16023] lookup_open.isra.0+0x11d3/0x1580 [ 581.945309][T16023] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 581.945358][T16023] ? find_held_lock+0x2b/0x80 [ 581.945396][T16023] ? __pfx_down_write+0x10/0x10 [ 581.945441][T16023] path_openat+0x893/0x2cb0 [ 581.945483][T16023] ? __pfx_path_openat+0x10/0x10 [ 581.945516][T16023] ? __lock_acquire+0xb8a/0x1c90 [ 581.945555][T16023] do_filp_open+0x20b/0x470 [ 581.945585][T16023] ? __pfx_do_filp_open+0x10/0x10 [ 581.945648][T16023] ? alloc_fd+0x471/0x7d0 [ 581.945687][T16023] do_sys_openat2+0x11b/0x1d0 [ 581.945725][T16023] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.945779][T16023] __x64_sys_openat+0x174/0x210 [ 581.945817][T16023] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.945871][T16023] do_syscall_64+0xcd/0xfa0 [ 581.945906][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.945933][T16023] RIP: 0033:0x7f56ebd8f749 [ 581.945963][T16023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.945991][T16023] RSP: 002b:00007f56ecbce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.946017][T16023] RAX: ffffffffffffffda RBX: 00007f56ebfe6180 RCX: 00007f56ebd8f749 [ 581.946035][T16023] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 581.946051][T16023] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.946067][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.946084][T16023] R13: 00007f56ebfe6218 R14: 00007f56ebfe6180 R15: 00007ffc9833a448 [ 581.946122][T16023] [ 583.410708][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 584.821999][T16085] Unable to find swap-space signature [ 588.533122][T16180] could not allocate digest TFM handle [ 589.259964][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 591.699231][T16240] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2266'. [ 591.700792][T16238] Invalid ELF header magic: != ELF [ 592.395868][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 592.529513][T16269] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2272'. [ 593.236688][T16278] mkiss: ax0: crc mode is auto. [ 593.413402][T16281] netlink: 'syz.1.2279': attribute type 11 has an invalid length. [ 593.439186][T16281] netlink: 'syz.1.2279': attribute type 11 has an invalid length. [ 595.242846][T16301] zswap: compressor not available [ 596.780177][T16331] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 598.572184][T16353] mkiss: ax0: crc mode is auto. [ 599.591374][T16360] program syz.3.2289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.908160][T16359] cgroup: fork rejected by pids controller in /syz3 [ 600.924674][T16525] sd 0:0:1:0: PR command failed: 1026 [ 600.930183][T16525] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 600.937530][T16525] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 601.077648][T16524] netlink: 'syz.3.2301': attribute type 11 has an invalid length. [ 601.096498][T16522] netlink: 'syz.3.2301': attribute type 11 has an invalid length. [ 602.732998][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2312'. [ 602.769198][T16559] FAULT_INJECTION: forcing a failure. [ 602.769198][T16559] name failslab, interval 1, probability 0, space 0, times 0 [ 602.782523][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.2.2312 Not tainted syzkaller #0 PREEMPT(full) [ 602.782562][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.782578][T16559] Call Trace: [ 602.782587][T16559] [ 602.782597][T16559] dump_stack_lvl+0x16c/0x1f0 [ 602.782635][T16559] should_fail_ex+0x512/0x640 [ 602.782673][T16559] ? __kmalloc_cache_noprof+0x5f/0x780 [ 602.782704][T16559] should_failslab+0xc2/0x120 [ 602.782739][T16559] __kmalloc_cache_noprof+0x72/0x780 [ 602.782767][T16559] ? __do_sys_fanotify_init+0x4c3/0xc80 [ 602.782808][T16559] ? get_mem_cgroup_from_mm+0x12a/0x600 [ 602.782849][T16559] ? __do_sys_fanotify_init+0x4c3/0xc80 [ 602.782890][T16559] __do_sys_fanotify_init+0x4c3/0xc80 [ 602.782936][T16559] do_syscall_64+0xcd/0xfa0 [ 602.782972][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.782998][T16559] RIP: 0033:0x7fbfbf58f749 [ 602.783020][T16559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.783045][T16559] RSP: 002b:00007fbfc039a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 602.783070][T16559] RAX: ffffffffffffffda RBX: 00007fbfbf7e5fa0 RCX: 00007fbfbf58f749 [ 602.783087][T16559] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 602.783103][T16559] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.783119][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.783135][T16559] R13: 00007fbfbf7e6038 R14: 00007fbfbf7e5fa0 R15: 00007ffcf0c5b838 [ 602.783173][T16559] [ 602.949748][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.510864][T16587] FAULT_INJECTION: forcing a failure. [ 605.510864][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 605.554157][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.1.2318 Not tainted syzkaller #0 PREEMPT(full) [ 605.554197][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.554214][T16587] Call Trace: [ 605.554223][T16587] [ 605.554234][T16587] dump_stack_lvl+0x16c/0x1f0 [ 605.554272][T16587] should_fail_ex+0x512/0x640 [ 605.554311][T16587] ? __kmalloc_cache_noprof+0x5f/0x780 [ 605.554342][T16587] should_failslab+0xc2/0x120 [ 605.554378][T16587] __kmalloc_cache_noprof+0x72/0x780 [ 605.554405][T16587] ? nexthop_net_init+0x73/0x140 [ 605.554437][T16587] ? nexthop_net_init+0x73/0x140 [ 605.554461][T16587] ? __pfx_nexthop_net_init+0x10/0x10 [ 605.554485][T16587] nexthop_net_init+0x73/0x140 [ 605.554509][T16587] ? tcf_net_init+0x55/0x150 [ 605.554532][T16587] ops_init+0x1e2/0x5f0 [ 605.554564][T16587] setup_net+0x100/0x390 [ 605.554593][T16587] ? __pfx_setup_net+0x10/0x10 [ 605.554623][T16587] ? debug_mutex_init+0x37/0x70 [ 605.554656][T16587] copy_net_ns+0x2f8/0x690 [ 605.554691][T16587] create_new_namespaces+0x3ea/0xa90 [ 605.554730][T16587] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 605.554773][T16587] ksys_unshare+0x45b/0xa40 [ 605.554809][T16587] ? __pfx_ksys_unshare+0x10/0x10 [ 605.554846][T16587] ? xfd_validate_state+0x61/0x180 [ 605.554894][T16587] __x64_sys_unshare+0x31/0x40 [ 605.554928][T16587] do_syscall_64+0xcd/0xfa0 [ 605.554963][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.554990][T16587] RIP: 0033:0x7f56ebd8f749 [ 605.555011][T16587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.555037][T16587] RSP: 002b:00007f56ecbef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 605.555063][T16587] RAX: ffffffffffffffda RBX: 00007f56ebfe6090 RCX: 00007f56ebd8f749 [ 605.555081][T16587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 605.555097][T16587] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.555113][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.555128][T16587] R13: 00007f56ebfe6128 R14: 00007f56ebfe6090 R15: 00007ffc9833a448 [ 605.555166][T16587] [ 606.539807][T16598] FAULT_INJECTION: forcing a failure. [ 606.539807][T16598] name failslab, interval 1, probability 0, space 0, times 0 [ 606.552759][T16598] CPU: 1 UID: 0 PID: 16598 Comm: syz.2.2319 Not tainted syzkaller #0 PREEMPT(full) [ 606.552797][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.552814][T16598] Call Trace: [ 606.552823][T16598] [ 606.552833][T16598] dump_stack_lvl+0x16c/0x1f0 [ 606.552873][T16598] should_fail_ex+0x512/0x640 [ 606.552912][T16598] ? fs_reclaim_acquire+0xae/0x150 [ 606.552951][T16598] should_failslab+0xc2/0x120 [ 606.552987][T16598] __kmalloc_noprof+0xdd/0x880 [ 606.553025][T16598] ? kfree+0x252/0x6d0 [ 606.553046][T16598] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.553086][T16598] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.553116][T16598] tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.553158][T16598] tomoyo_check_open_permission+0x2ab/0x3c0 [ 606.553186][T16598] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 606.553213][T16598] ? __lock_acquire+0xb8a/0x1c90 [ 606.553281][T16598] ? lock_acquire+0x179/0x350 [ 606.553316][T16598] ? find_held_lock+0x2b/0x80 [ 606.553345][T16598] ? mnt_get_write_access+0x52/0x2f0 [ 606.553385][T16598] tomoyo_file_open+0x6b/0x90 [ 606.553421][T16598] security_file_open+0x84/0x1e0 [ 606.553451][T16598] do_dentry_open+0x596/0x1530 [ 606.553493][T16598] vfs_open+0x82/0x3f0 [ 606.553534][T16598] path_openat+0x1de4/0x2cb0 [ 606.553576][T16598] ? __pfx_path_openat+0x10/0x10 [ 606.553608][T16598] ? __lock_acquire+0xb8a/0x1c90 [ 606.553647][T16598] do_filp_open+0x20b/0x470 [ 606.553677][T16598] ? __pfx_do_filp_open+0x10/0x10 [ 606.553741][T16598] ? alloc_fd+0x471/0x7d0 [ 606.553779][T16598] do_sys_openat2+0x11b/0x1d0 [ 606.553817][T16598] ? __pfx_do_sys_openat2+0x10/0x10 [ 606.553870][T16598] __x64_sys_openat+0x174/0x210 [ 606.553908][T16598] ? __pfx___x64_sys_openat+0x10/0x10 [ 606.553962][T16598] do_syscall_64+0xcd/0xfa0 [ 606.553996][T16598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.554025][T16598] RIP: 0033:0x7fbfbf58f749 [ 606.554047][T16598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.554073][T16598] RSP: 002b:00007fbfc0379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 606.554100][T16598] RAX: ffffffffffffffda RBX: 00007fbfbf7e6090 RCX: 00007fbfbf58f749 [ 606.554118][T16598] RDX: 0000000000080002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 606.554136][T16598] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.554153][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.554169][T16598] R13: 00007fbfbf7e6128 R14: 00007fbfbf7e6090 R15: 00007ffcf0c5b838 [ 606.554208][T16598] [ 606.554220][T16598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.161151][T16592] zswap: compressor _¥ not available [ 607.761050][T16622] random: crng reseeded on system resumption [ 608.529489][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 609.328149][T16648] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 612.209007][T16699] netlink: 'syz.1.2340': attribute type 11 has an invalid length. [ 612.510652][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2341'. [ 612.523553][T16704] veth1_macvtap: left allmulticast mode [ 612.529433][T16704] veth1_macvtap: left promiscuous mode [ 612.656947][T16705] nbd: socks must be embedded in a SOCK_ITEM attr [ 612.858249][T16703] FAULT_INJECTION: forcing a failure. [ 612.858249][T16703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.897759][T16703] CPU: 0 UID: 0 PID: 16703 Comm: syz.2.2341 Not tainted syzkaller #0 PREEMPT(full) [ 612.897797][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.897812][T16703] Call Trace: [ 612.897831][T16703] [ 612.897841][T16703] dump_stack_lvl+0x16c/0x1f0 [ 612.897880][T16703] should_fail_ex+0x512/0x640 [ 612.897917][T16703] ? page_copy_sane+0xcd/0x2d0 [ 612.897957][T16703] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 612.897996][T16703] ? fault_in_readable+0x135/0x1d0 [ 612.898029][T16703] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 612.898055][T16703] ? fault_in_readable+0x179/0x1d0 [ 612.898087][T16703] ? __pfx_fault_in_readable+0x10/0x10 [ 612.898115][T16703] ? rcu_is_watching+0x12/0xc0 [ 612.898142][T16703] ? I_BDEV+0xd/0x20 [ 612.898175][T16703] ? inode_to_bdi+0x9e/0x160 [ 612.898215][T16703] iomap_file_buffered_write+0x535/0xac0 [ 612.898268][T16703] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 612.898312][T16703] ? inode_set_ctime_current+0x2a1/0x8f0 [ 612.898373][T16703] ? __pfx_down_read+0x10/0x10 [ 612.898409][T16703] ? preempt_count_add+0x76/0x150 [ 612.898446][T16703] ? mnt_put_write_access_file+0xc1/0xf0 [ 612.898474][T16703] blkdev_write_iter+0x575/0xe00 [ 612.898513][T16703] vfs_write+0x7d3/0x11d0 [ 612.898540][T16703] ? __pfx_blkdev_write_iter+0x10/0x10 [ 612.898574][T16703] ? __pfx_vfs_write+0x10/0x10 [ 612.898600][T16703] ? find_held_lock+0x2b/0x80 [ 612.898651][T16703] ksys_write+0x12a/0x250 [ 612.898679][T16703] ? __pfx_ksys_write+0x10/0x10 [ 612.898718][T16703] do_syscall_64+0xcd/0xfa0 [ 612.898753][T16703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.898781][T16703] RIP: 0033:0x7fbfbf58f749 [ 612.898803][T16703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.898838][T16703] RSP: 002b:00007fbfc039a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.898864][T16703] RAX: ffffffffffffffda RBX: 00007fbfbf7e5fa0 RCX: 00007fbfbf58f749 [ 612.898882][T16703] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 612.898899][T16703] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 612.898915][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.898930][T16703] R13: 00007fbfbf7e6038 R14: 00007fbfbf7e5fa0 R15: 00007ffcf0c5b838 [ 612.898968][T16703] [ 613.217347][T16711] FAULT_INJECTION: forcing a failure. [ 613.217347][T16711] name failslab, interval 1, probability 0, space 0, times 0 [ 613.232538][T16711] CPU: 1 UID: 0 PID: 16711 Comm: syz.1.2344 Not tainted syzkaller #0 PREEMPT(full) [ 613.232579][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.232596][T16711] Call Trace: [ 613.232605][T16711] [ 613.232616][T16711] dump_stack_lvl+0x16c/0x1f0 [ 613.232656][T16711] should_fail_ex+0x512/0x640 [ 613.232695][T16711] ? __kmalloc_noprof+0xca/0x880 [ 613.232739][T16711] should_failslab+0xc2/0x120 [ 613.232782][T16711] __kmalloc_noprof+0xdd/0x880 [ 613.232824][T16711] ? udpv6_init_sock+0x24e/0x450 [ 613.232858][T16711] ? udpv6_init_sock+0x24e/0x450 [ 613.232883][T16711] udpv6_init_sock+0x24e/0x450 [ 613.232909][T16711] ? __pfx_udpv6_init_sock+0x10/0x10 [ 613.232940][T16711] inet6_create+0xb30/0x12b0 [ 613.232975][T16711] ? inet6_create+0x7f/0x12b0 [ 613.233017][T16711] __sock_create+0x338/0x8d0 [ 613.233063][T16711] __sys_socket+0x14d/0x260 [ 613.233100][T16711] ? __pfx___sys_socket+0x10/0x10 [ 613.233137][T16711] ? xfd_validate_state+0x61/0x180 [ 613.233173][T16711] ? __pfx_ksys_write+0x10/0x10 [ 613.233210][T16711] __x64_sys_socket+0x72/0xb0 [ 613.233244][T16711] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.233276][T16711] do_syscall_64+0xcd/0xfa0 [ 613.233310][T16711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.233338][T16711] RIP: 0033:0x7f56ebd8f749 [ 613.233360][T16711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.233386][T16711] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 613.233411][T16711] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 613.233430][T16711] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 613.233446][T16711] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 613.233463][T16711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.233479][T16711] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 613.233516][T16711] [ 615.234676][T16732] vhci_hcd: invalid port number 16 [ 617.175256][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2348'. [ 619.544749][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 619.554587][T16794] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2361'. [ 619.564443][T16792] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2361'. [ 621.751172][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2368'. [ 623.038511][T16848] ovs_: entered promiscuous mode [ 623.924250][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 624.569423][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.575856][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.737442][T16867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.743796][T16867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 624.750514][T16867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 624.758036][T16867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.133559][T16888] netlink: 1608 bytes leftover after parsing attributes in process `syz.0.2386'. [ 625.678274][T16880] FAULT_INJECTION: forcing a failure. [ 625.678274][T16880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.695069][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.1.2385 Not tainted syzkaller #0 PREEMPT(full) [ 625.695108][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.695125][T16880] Call Trace: [ 625.695134][T16880] [ 625.695144][T16880] dump_stack_lvl+0x16c/0x1f0 [ 625.695182][T16880] should_fail_ex+0x512/0x640 [ 625.695237][T16880] _copy_to_user+0x32/0xd0 [ 625.695266][T16880] poll_select_finish+0x339/0x6b0 [ 625.695296][T16880] ? __pfx_poll_select_finish+0x10/0x10 [ 625.695323][T16880] ? read_tsc+0x9/0x20 [ 625.695351][T16880] ? ktime_get_ts64+0x256/0x400 [ 625.695391][T16880] kern_select+0x16e/0x1e0 [ 625.695415][T16880] ? __pfx_kern_select+0x10/0x10 [ 625.695444][T16880] ? __pfx_do_writev+0x10/0x10 [ 625.695468][T16880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.695541][T16880] __x64_sys_select+0xbd/0x160 [ 625.695566][T16880] ? do_syscall_64+0x91/0xfa0 [ 625.695599][T16880] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.695633][T16880] do_syscall_64+0xcd/0xfa0 [ 625.695668][T16880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.695695][T16880] RIP: 0033:0x7f56ebd8f749 [ 625.695718][T16880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.695742][T16880] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 625.695769][T16880] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 625.695788][T16880] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000005 [ 625.695805][T16880] RBP: 00007f56ebe13f91 R08: 0000200000000000 R09: 0000000000000000 [ 625.695821][T16880] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 625.695837][T16880] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 625.695874][T16880] [ 626.322611][T11723] Bluetooth: hci1: command 0x0419 tx timeout [ 626.807641][T11723] Bluetooth: hci0: command 0x0c1a tx timeout [ 626.814712][T11710] Bluetooth: hci3: command 0x0419 tx timeout [ 626.820931][T12078] Bluetooth: hci2: command 0x0419 tx timeout [ 626.886066][T16911] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2391'. [ 626.988328][T16911] binder: BINDER_SET_CONTEXT_MGR already set [ 626.994449][T16911] binder: 16910:16911 ioctl 4018620d 9 returned -16 [ 629.836796][T16974] random: crng reseeded on system resumption [ 631.433946][T16993] syz.2.2410 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 631.659209][T11710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.670611][T11710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.692574][T11710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.703052][T11710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.713757][T11710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.389646][T16998] chnl_net:caif_netlink_parms(): no params data found [ 633.771987][T11723] Bluetooth: hci4: command tx timeout [ 634.409133][T16998] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.450053][T16998] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.494316][T16998] bridge_slave_0: entered allmulticast mode [ 634.536305][T16998] bridge_slave_0: entered promiscuous mode [ 634.571311][T16998] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.601086][T16998] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.637048][T16998] bridge_slave_1: entered allmulticast mode [ 634.663565][T16998] bridge_slave_1: entered promiscuous mode [ 635.124144][T16998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.198027][T16998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.376201][T16998] team0: Port device team_slave_0 added [ 635.389274][T16998] team0: Port device team_slave_1 added [ 635.689238][T16998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.696515][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.722874][T16998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.743093][T16998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.750350][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.788985][T16998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.847375][T11723] Bluetooth: hci4: command tx timeout [ 636.473003][T16998] hsr_slave_0: entered promiscuous mode [ 636.483294][T16998] hsr_slave_1: entered promiscuous mode [ 636.489658][T16998] debugfs: 'hsr0' already exists in 'hsr' [ 636.505846][T16998] Cannot create hsr debugfs directory [ 636.855580][T17146] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2432'. [ 637.928003][T11723] Bluetooth: hci4: command tx timeout [ 638.398075][T16998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.567438][T16998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.663228][T16998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.743303][T16998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.324621][T16998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.451564][T16998] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.558133][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.565369][T11732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.684247][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.691384][T11725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.005547][T11723] Bluetooth: hci4: command tx timeout [ 640.274124][T16998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.399636][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2450'. [ 641.630360][T17242] macvtap0: entered promiscuous mode [ 641.717926][T17255] random: crng reseeded on system resumption [ 641.951469][T17265] ptrace attach of "./syz-executor exec"[17268] was attempted by "./syz-executor exec"[17265] [ 642.090955][T17271] sp0: Synchronizing with TNC [ 642.447399][T16998] veth0_vlan: entered promiscuous mode [ 642.506482][T16998] veth1_vlan: entered promiscuous mode [ 642.548764][T16998] veth0_macvtap: entered promiscuous mode [ 642.559671][T16998] veth1_macvtap: entered promiscuous mode [ 642.623036][T16998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.657800][T16998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.154685][T11749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.213886][T11749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.233777][T11749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.314333][T11749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.530134][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.601204][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.693016][T17179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.723114][T17179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.573245][T11710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 645.583627][T11710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 645.591936][T11710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 645.599810][T11710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 645.608409][T11710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 647.561307][T17312] chnl_net:caif_netlink_parms(): no params data found [ 647.687188][T11723] Bluetooth: hci5: command tx timeout [ 648.077075][T17312] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.112040][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.119330][T17312] bridge_slave_0: entered allmulticast mode [ 648.182001][T17312] bridge_slave_0: entered promiscuous mode [ 648.205873][T17312] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.222908][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.255479][T17312] bridge_slave_1: entered allmulticast mode [ 648.290673][T17312] bridge_slave_1: entered promiscuous mode [ 648.548554][T17312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.563862][T17312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.071752][T17375] mkiss: ax0: crc mode is auto. [ 649.133321][T17312] team0: Port device team_slave_0 added [ 649.343769][T17312] team0: Port device team_slave_1 added [ 649.607279][T17312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.762298][T11723] Bluetooth: hci5: command tx timeout [ 649.821930][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.848548][T17312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.866568][T17312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.880585][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.969402][T17312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.490828][T17312] hsr_slave_0: entered promiscuous mode [ 650.513941][T17312] hsr_slave_1: entered promiscuous mode [ 650.704262][T17312] debugfs: 'hsr0' already exists in 'hsr' [ 650.710051][T17312] Cannot create hsr debugfs directory [ 651.842003][T11723] Bluetooth: hci5: command tx timeout [ 653.133326][T17312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.922357][T11723] Bluetooth: hci5: command tx timeout [ 653.963685][T11739] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.289383][T17312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.358828][T17445] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 654.384798][T17445] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 654.464226][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 654.497666][T11739] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.567025][T17312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.795997][T11739] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.022334][T17455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.057170][T11739] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.396982][T17312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 655.500376][T17312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 655.591627][T17312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 655.782693][T17312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 656.079199][T17460] FAULT_INJECTION: forcing a failure. [ 656.079199][T17460] name failslab, interval 1, probability 0, space 0, times 0 [ 656.116581][T17460] CPU: 0 UID: 0 PID: 17460 Comm: syz.2.2495 Not tainted syzkaller #0 PREEMPT(full) [ 656.116622][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.116639][T17460] Call Trace: [ 656.116649][T17460] [ 656.116660][T17460] dump_stack_lvl+0x16c/0x1f0 [ 656.116697][T17460] should_fail_ex+0x512/0x640 [ 656.116736][T17460] ? __kmalloc_cache_noprof+0x5f/0x780 [ 656.116767][T17460] should_failslab+0xc2/0x120 [ 656.116802][T17460] __kmalloc_cache_noprof+0x72/0x780 [ 656.116827][T17460] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 656.116872][T17460] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 656.116911][T17460] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 656.116953][T17460] ? __pfx___might_resched+0x10/0x10 [ 656.116983][T17460] ? rcu_is_watching+0x12/0xc0 [ 656.117013][T17460] ? trace_contention_end+0xdd/0x130 [ 656.117050][T17460] ? __mutex_lock+0x1c5/0x1060 [ 656.117084][T17460] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 656.117135][T17460] ? __futex_wait+0x24b/0x2f0 [ 656.117171][T17460] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 656.117205][T17460] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 656.117245][T17460] snd_pcm_oss_write+0x4c2/0xa10 [ 656.117284][T17460] ? bpf_lsm_file_permission+0x9/0x10 [ 656.117315][T17460] ? security_file_permission+0x71/0x210 [ 656.117353][T17460] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 656.117387][T17460] vfs_writev+0x5df/0xde0 [ 656.117422][T17460] ? __pfx_vfs_writev+0x10/0x10 [ 656.117474][T17460] ? __fget_files+0x20e/0x3c0 [ 656.117513][T17460] ? do_writev+0x132/0x340 [ 656.117538][T17460] do_writev+0x132/0x340 [ 656.117565][T17460] ? __pfx_do_writev+0x10/0x10 [ 656.117635][T17460] do_syscall_64+0xcd/0xfa0 [ 656.117670][T17460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.117697][T17460] RIP: 0033:0x7fbfbf58f749 [ 656.117720][T17460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.117745][T17460] RSP: 002b:00007fbfc039a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 656.117771][T17460] RAX: ffffffffffffffda RBX: 00007fbfbf7e5fa0 RCX: 00007fbfbf58f749 [ 656.117789][T17460] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 656.117805][T17460] RBP: 00007fbfbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.117820][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.117836][T17460] R13: 00007fbfbf7e6038 R14: 00007fbfbf7e5fa0 R15: 00007ffcf0c5b838 [ 656.117873][T17460] [ 656.559752][T11739] bridge_slave_1: left allmulticast mode [ 656.568916][T11739] bridge_slave_1: left promiscuous mode [ 656.574797][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.585599][T11739] bridge_slave_0: left allmulticast mode [ 656.591282][T11739] bridge_slave_0: left promiscuous mode [ 656.598688][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.190308][T11739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.206757][T11739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.218041][T11739] bond0 (unregistering): Released all slaves [ 657.332231][T11739] : left promiscuous mode [ 657.457305][T17312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.568126][T17312] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.638124][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.645333][T11730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.786939][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.794137][T11730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.837890][T17520] binder: 17518:17520 unknown command 1969382756 [ 657.861939][T17520] binder: 17518:17520 ioctl c0306201 0 returned -22 [ 657.912766][T11739] hsr_slave_0: left promiscuous mode [ 657.930861][T11739] hsr_slave_1: left promiscuous mode [ 657.949698][T11739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.969311][T11739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.000555][T11739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.010427][T11739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.068845][T11739] veth1_macvtap: left promiscuous mode [ 658.088080][T11739] veth0_macvtap: left promiscuous mode [ 658.104545][T11739] veth1_vlan: left promiscuous mode [ 658.110014][T11739] veth0_vlan: left promiscuous mode [ 658.411417][T17538] Invalid ELF header magic: != ELF [ 659.113726][T11739] team0 (unregistering): Port device team_slave_1 removed [ 659.163366][T11739] team0 (unregistering): Port device team_slave_0 removed [ 660.846165][T17312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.030739][T17312] veth0_vlan: entered promiscuous mode [ 661.291263][T17312] veth1_vlan: entered promiscuous mode [ 661.585804][T17312] veth0_macvtap: entered promiscuous mode [ 661.709000][T17312] veth1_macvtap: entered promiscuous mode [ 661.724269][T17312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.770972][T17312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.962762][T11749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.972865][T11749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.981610][T11749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.040455][T11749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.970682][T11749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.990907][T11749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.030442][T11749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.089579][T11749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.338526][T17654] FAULT_INJECTION: forcing a failure. [ 664.338526][T17654] name failslab, interval 1, probability 0, space 0, times 0 [ 664.370285][T17654] CPU: 1 UID: 0 PID: 17654 Comm: syz.1.2528 Not tainted syzkaller #0 PREEMPT(full) [ 664.370325][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.370342][T17654] Call Trace: [ 664.370350][T17654] [ 664.370361][T17654] dump_stack_lvl+0x16c/0x1f0 [ 664.370401][T17654] should_fail_ex+0x512/0x640 [ 664.370441][T17654] ? __kmalloc_noprof+0xca/0x880 [ 664.370486][T17654] should_failslab+0xc2/0x120 [ 664.370520][T17654] __kmalloc_noprof+0xdd/0x880 [ 664.370579][T17654] ? ima_eventdigest_init_common+0x154/0x430 [ 664.370613][T17654] ? ima_write_template_field_data+0x5d/0x1f0 [ 664.370654][T17654] ? ima_write_template_field_data+0x5d/0x1f0 [ 664.370683][T17654] ima_write_template_field_data+0x5d/0x1f0 [ 664.370719][T17654] ima_eventname_init_common+0x1b8/0x260 [ 664.370753][T17654] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 664.370792][T17654] ? __kmalloc_noprof+0x34f/0x880 [ 664.370832][T17654] ? __pfx_prepend_path+0x10/0x10 [ 664.370866][T17654] ? ima_alloc_init_template+0x19d/0x720 [ 664.370902][T17654] ima_alloc_init_template+0x3a0/0x720 [ 664.370937][T17654] ima_store_measurement+0x1eb/0x5c0 [ 664.370969][T17654] ? __pfx_ima_store_measurement+0x10/0x10 [ 664.371006][T17654] ? vfs_getxattr_alloc+0xec/0x350 [ 664.371043][T17654] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 664.371089][T17654] process_measurement+0x1ddb/0x23e0 [ 664.371144][T17654] ? __pfx_process_measurement+0x10/0x10 [ 664.371187][T17654] ? find_held_lock+0x2b/0x80 [ 664.371215][T17654] ? rcu_read_unlock+0x17/0x60 [ 664.371259][T17654] ? __memcg_slab_post_alloc_hook+0x47c/0x940 [ 664.371326][T17654] ? __pfx_tracing_clock_show+0x10/0x10 [ 664.371357][T17654] ? single_open+0x15f/0x1f0 [ 664.371389][T17654] ? inode_to_bdi+0x9e/0x160 [ 664.371427][T17654] ima_file_check+0xc5/0x110 [ 664.371463][T17654] ? __pfx_ima_file_check+0x10/0x10 [ 664.371506][T17654] security_file_post_open+0x8e/0x210 [ 664.371533][T17654] path_openat+0x1404/0x2cb0 [ 664.371578][T17654] ? __pfx_path_openat+0x10/0x10 [ 664.371611][T17654] ? __lock_acquire+0xb8a/0x1c90 [ 664.371672][T17654] do_filp_open+0x20b/0x470 [ 664.371703][T17654] ? __pfx_do_filp_open+0x10/0x10 [ 664.371760][T17654] ? alloc_fd+0x471/0x7d0 [ 664.371797][T17654] do_sys_openat2+0x11b/0x1d0 [ 664.371841][T17654] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.371894][T17654] __x64_sys_openat+0x174/0x210 [ 664.371930][T17654] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.371994][T17654] do_syscall_64+0xcd/0xfa0 [ 664.372030][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.372060][T17654] RIP: 0033:0x7f56ebd8f749 [ 664.372082][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.372110][T17654] RSP: 002b:00007f56ecc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.372137][T17654] RAX: ffffffffffffffda RBX: 00007f56ebfe5fa0 RCX: 00007f56ebd8f749 [ 664.372156][T17654] RDX: 0000000000008000 RSI: 0000200000002840 RDI: ffffffffffffff9c [ 664.372173][T17654] RBP: 00007f56ebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 664.372190][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.372206][T17654] R13: 00007f56ebfe6038 R14: 00007f56ebfe5fa0 R15: 00007ffc9833a448 [ 664.372246][T17654] [ 664.722362][ T30] audit: type=1804 audit(4294985864.265:47): pid=17654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2528" name="/newroot/sys/kernel/tracing/trace_clock" dev="tracefs" ino=1256 res=0 errno=0 [ 664.844203][T17659] sp0: Synchronizing with TNC [ 664.864495][T17658] [U] è [ 665.283646][T17679] netlink: 'syz.0.2532': attribute type 1 has an invalid length. [ 665.442520][T17678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 665.448677][T17678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 665.455420][T17678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 665.462165][T17678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 665.483556][T17678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 665.492496][T17678] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 665.498521][T17678] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 665.514748][T17678] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 665.533318][T17684] netlink: 'syz.0.2532': attribute type 1 has an invalid length. [ 665.803272][T17691] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2535'. [ 665.933150][T17691] binder: BINDER_SET_CONTEXT_MGR already set [ 665.939271][T17691] binder: 17690:17691 ioctl 4018620d 9 returned -16 [ 666.545704][T17712] FAULT_INJECTION: forcing a failure. [ 666.545704][T17712] name failslab, interval 1, probability 0, space 0, times 0 [ 666.634983][T17712] CPU: 0 UID: 0 PID: 17712 Comm: syz.0.2537 Not tainted syzkaller #0 PREEMPT(full) [ 666.635022][T17712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.635039][T17712] Call Trace: [ 666.635047][T17712] [ 666.635058][T17712] dump_stack_lvl+0x16c/0x1f0 [ 666.635097][T17712] should_fail_ex+0x512/0x640 [ 666.635135][T17712] ? fs_reclaim_acquire+0xae/0x150 [ 666.635173][T17712] should_failslab+0xc2/0x120 [ 666.635208][T17712] __kmalloc_noprof+0xdd/0x880 [ 666.635249][T17712] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.635289][T17712] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.635319][T17712] tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.635355][T17712] ? tomoyo_profile+0x47/0x60 [ 666.635392][T17712] tomoyo_path_number_perm+0x245/0x580 [ 666.635416][T17712] ? tomoyo_path_number_perm+0x237/0x580 [ 666.635445][T17712] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 666.635474][T17712] ? rcu_read_unlock+0x17/0x60 [ 666.635529][T17712] ? do_raw_spin_lock+0x12c/0x2b0 [ 666.635567][T17712] ? find_held_lock+0x2b/0x80 [ 666.635610][T17712] ? find_held_lock+0x2b/0x80 [ 666.635635][T17712] ? __pfx___d_add+0x10/0x10 [ 666.635667][T17712] ? d_alloc+0x176/0x1e0 [ 666.635691][T17712] ? current_check_access_path+0x33c/0x460 [ 666.635725][T17712] ? __pfx_current_check_access_path+0x10/0x10 [ 666.635758][T17712] ? simple_lookup+0x105/0x1d0 [ 666.635788][T17712] tomoyo_path_mknod+0x10c/0x190 [ 666.635820][T17712] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 666.635854][T17712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.635898][T17712] security_path_mknod+0x161/0x310 [ 666.635926][T17712] do_mknodat+0x239/0x5d0 [ 666.635957][T17712] ? __pfx_do_mknodat+0x10/0x10 [ 666.635981][T17712] ? getname_flags.part.0+0x1c5/0x550 [ 666.636021][T17712] __x64_sys_mknod+0x87/0xb0 [ 666.636046][T17712] do_syscall_64+0xcd/0xfa0 [ 666.636078][T17712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.636103][T17712] RIP: 0033:0x7f711258f749 [ 666.636124][T17712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.636147][T17712] RSP: 002b:00007f711347f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 666.636172][T17712] RAX: ffffffffffffffda RBX: 00007f71127e5fa0 RCX: 00007f711258f749 [ 666.636189][T17712] RDX: 0000000000000103 RSI: 0000000000000007 RDI: 00002000000003c0 [ 666.636204][T17712] RBP: 00007f7112613f91 R08: 0000000000000000 R09: 0000000000000000 [ 666.636218][T17712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.636232][T17712] R13: 00007f71127e6038 R14: 00007f71127e5fa0 R15: 00007fff3e63d318 [ 666.636267][T17712] [ 666.907284][T17712] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.362466][T11723] Bluetooth: hci2: command 0x0419 tx timeout [ 667.532013][T11723] Bluetooth: hci5: command 0x0c1a tx timeout [ 667.538048][T11710] Bluetooth: hci4: command 0x0c1a tx timeout [ 667.544068][T12078] Bluetooth: hci0: command 0x0c1a tx timeout [ 669.602053][T11710] Bluetooth: hci4: command 0x0c1a tx timeout [ 669.608730][T11723] Bluetooth: hci5: command 0x0c1a tx timeout [ 671.682314][T11723] Bluetooth: hci5: command 0x0c1a tx timeout [ 671.689061][T11710] Bluetooth: hci4: command 0x0c1a tx timeout [ 671.864156][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 673.606824][T17869] netlink: 266 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.615997][T17869] IPv6: NLM_F_CREATE should be specified when creating new route [ 673.861471][T17875] nbd: must specify a device to reconfigure [ 674.263554][T17889] FAULT_INJECTION: forcing a failure. [ 674.263554][T17889] name failslab, interval 1, probability 0, space 0, times 0 [ 674.276844][T17889] CPU: 1 UID: 0 PID: 17889 Comm: syz.0.2573 Not tainted syzkaller #0 PREEMPT(full) [ 674.276876][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.276889][T17889] Call Trace: [ 674.276896][T17889] [ 674.276906][T17889] dump_stack_lvl+0x16c/0x1f0 [ 674.276950][T17889] should_fail_ex+0x512/0x640 [ 674.276986][T17889] ? __kmalloc_noprof+0xca/0x880 [ 674.277027][T17889] should_failslab+0xc2/0x120 [ 674.277058][T17889] __kmalloc_noprof+0xdd/0x880 [ 674.277092][T17889] ? __pfx_sprintf+0x10/0x10 [ 674.277117][T17889] ? do_syscall_64+0xcd/0xfa0 [ 674.277146][T17889] ? ima_write_template_field_data+0x5d/0x1f0 [ 674.277183][T17889] ? ima_write_template_field_data+0x5d/0x1f0 [ 674.277212][T17889] ima_write_template_field_data+0x5d/0x1f0 [ 674.277248][T17889] ima_eventdigest_init_common+0x154/0x430 [ 674.277282][T17889] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 674.277337][T17889] ? trace_kmalloc+0x2b/0xd0 [ 674.277365][T17889] ? __kmalloc_noprof+0x34f/0x880 [ 674.277402][T17889] ? ima_alloc_init_template+0x19d/0x720 [ 674.277435][T17889] ima_alloc_init_template+0x3a0/0x720 [ 674.277468][T17889] ima_store_measurement+0x1eb/0x5c0 [ 674.277496][T17889] ? __pfx_ima_store_measurement+0x10/0x10 [ 674.277523][T17889] ? vfs_getxattr_alloc+0xec/0x350 [ 674.277560][T17889] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 674.277600][T17889] process_measurement+0x1ddb/0x23e0 [ 674.277646][T17889] ? __lock_acquire+0x622/0x1c90 [ 674.277678][T17889] ? __pfx_process_measurement+0x10/0x10 [ 674.277712][T17889] ? __kasan_slab_alloc+0x89/0x90 [ 674.277740][T17889] ? security_file_alloc+0x34/0x2b0 [ 674.277766][T17889] ? alloc_empty_file+0x73/0x1e0 [ 674.277798][T17889] ? alloc_file_pseudo+0x13a/0x230 [ 674.277841][T17889] ? find_held_lock+0x2b/0x80 [ 674.277912][T17889] ima_file_mmap+0x1b1/0x1d0 [ 674.277952][T17889] ? __pfx_ima_file_mmap+0x10/0x10 [ 674.277997][T17889] security_mmap_file+0x88c/0x990 [ 674.278026][T17889] vm_mmap_pgoff+0xec/0x470 [ 674.278062][T17889] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 674.278091][T17889] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 674.278129][T17889] ? hugetlbfs_get_inode+0x31f/0x730 [ 674.278171][T17889] ksys_mmap_pgoff+0x1c8/0x5c0 [ 674.278210][T17889] __x64_sys_mmap+0x125/0x190 [ 674.278256][T17889] do_syscall_64+0xcd/0xfa0 [ 674.278289][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.278315][T17889] RIP: 0033:0x7f711258f749 [ 674.278335][T17889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.278360][T17889] RSP: 002b:00007f711347f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 674.278384][T17889] RAX: ffffffffffffffda RBX: 00007f71127e5fa0 RCX: 00007f711258f749 [ 674.278401][T17889] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 674.278416][T17889] RBP: 00007f7112613f91 R08: ffffffffffffffff R09: 0000300000000000 [ 674.278433][T17889] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 674.278448][T17889] R13: 00007f71127e6038 R14: 00007f71127e5fa0 R15: 00007fff3e63d318 [ 674.278485][T17889] [ 674.280568][ T30] audit: type=1804 audit(4294985873.835:48): pid=17889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.2573" name="anon_hugepage" dev="hugetlbfs" ino=63548 res=0 errno=0 [ 675.740458][T17946] kfence: disabled [ 676.338093][T17958] netlink: 74 bytes leftover after parsing attributes in process `syz.0.2587'. [ 676.879146][T17973] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2591'. [ 677.743851][T17989] FAULT_INJECTION: forcing a failure. [ 677.743851][T17989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.773702][T17989] CPU: 1 UID: 0 PID: 17989 Comm: syz.2.2594 Not tainted syzkaller #0 PREEMPT(full) [ 677.773725][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.773733][T17989] Call Trace: [ 677.773738][T17989] [ 677.773744][T17989] dump_stack_lvl+0x16c/0x1f0 [ 677.773766][T17989] should_fail_ex+0x512/0x640 [ 677.773790][T17989] get_futex_key+0xff0/0x1560 [ 677.773811][T17989] ? __pfx_get_futex_key+0x10/0x10 [ 677.773829][T17989] ? __mutex_trylock_common+0xe9/0x250 [ 677.773854][T17989] futex_wake+0xea/0x530 [ 677.773882][T17989] ? __pfx_futex_wake+0x10/0x10 [ 677.773901][T17989] ? __lock_acquire+0xb8a/0x1c90 [ 677.773928][T17989] do_futex+0x1e3/0x350 [ 677.773946][T17989] ? __pfx_do_futex+0x10/0x10 [ 677.773966][T17989] ? __might_fault+0xe3/0x190 [ 677.773985][T17989] mm_release+0x24e/0x300 [ 677.774001][T17989] do_exit+0x68e/0x2bf0 [ 677.774019][T17989] ? __pfx_try_to_wake_up+0x10/0x10 [ 677.774037][T17989] ? __pfx_do_exit+0x10/0x10 [ 677.774055][T17989] ? do_raw_spin_lock+0x12c/0x2b0 [ 677.774075][T17989] ? find_held_lock+0x2b/0x80 [ 677.774092][T17989] do_group_exit+0xd3/0x2a0 [ 677.774112][T17989] get_signal+0x2671/0x26d0 [ 677.774135][T17989] ? __pfx_get_signal+0x10/0x10 [ 677.774150][T17989] ? do_futex+0x122/0x350 [ 677.774168][T17989] ? __pfx_do_futex+0x10/0x10 [ 677.774188][T17989] arch_do_signal_or_restart+0x8f/0x790 [ 677.774206][T17989] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 677.774228][T17989] ? xfd_validate_state+0x61/0x180 [ 677.774247][T17989] ? __task_pid_nr_ns+0x1f5/0x500 [ 677.774269][T17989] exit_to_user_mode_loop+0x85/0x130 [ 677.774291][T17989] do_syscall_64+0x426/0xfa0 [ 677.774310][T17989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.774324][T17989] RIP: 0033:0x7fbfbf58f749 [ 677.774336][T17989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.774349][T17989] RSP: 002b:00007fbfc039a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.774363][T17989] RAX: 0000000000000001 RBX: 00007fbfbf7e5fa8 RCX: 00007fbfbf58f749 [ 677.774371][T17989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbfbf7e5fac [ 677.774380][T17989] RBP: 00007fbfbf7e5fa0 R08: 00007fbfc039b000 R09: 0000000000000000 [ 677.774394][T17989] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 677.774402][T17989] R13: 00007fbfbf7e6038 R14: 00007ffcf0c5b750 R15: 00007ffcf0c5b838 [ 677.774421][T17989] [ 678.022608][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.984125][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2597'. [ 681.407052][T18057] tc_dump_action: action bad kind [ 681.425352][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'. [ 681.483021][T18059] tc_dump_action: action bad kind [ 681.910961][T18070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2606'. [ 682.738234][T18085] netlink: 'syz.4.2612': attribute type 21 has an invalid length. [ 682.752915][T18085] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2612'. [ 683.484615][ T30] audit: type=1800 audit(4294985883.045:49): pid=18108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2616" name="features" dev="configfs" ino=63283 res=0 errno=0 [ 683.894128][T18124] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2618'. [ 684.185981][T18125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 684.608562][T18119] delete_channel: no stack [ 686.009255][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.015682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.811941][ T30] audit: type=1800 audit(4294985886.365:50): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2626" name="members" dev="configfs" ino=64350 res=0 errno=0 [ 687.528452][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 689.370613][T18241] binder: 18236:18241 ioctl c018620c 0 returned -22 [ 689.620821][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 689.736606][T18258] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2640'. [ 690.260464][T18277] sp0: Synchronizing with TNC [ 692.293905][T18291] netlink: 194 bytes leftover after parsing attributes in process `syz.1.2648'. [ 693.571217][T18310] Invalid ELF header magic: != ELF [ 693.721668][T18287] sd 0:0:1:0: PR command failed: 1026 [ 693.868356][T18287] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 693.940553][T18287] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 697.035886][T18382] __vm_enough_memory: pid: 18382, comm: syz.0.2663, bytes: 4398046511104 not enough memory for the allocation [ 698.925220][T18406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2668'. [ 699.325326][T18408] bridge0: port 3(veth0_to_bridge) entered blocking state [ 699.454602][T18408] bridge0: port 3(veth0_to_bridge) entered disabled state [ 699.533859][T18408] veth0_to_bridge: entered allmulticast mode [ 699.782602][T18408] veth0_to_bridge: entered promiscuous mode [ 699.963325][T18408] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.035231][T18408] bridge0: port 3(veth0_to_bridge) entered blocking state [ 700.042520][T18408] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 700.723502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.736098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.748411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.760643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.772839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.785244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.797704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.810047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.822278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.834581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.731963][ C0] net_ratelimit: 20769 callbacks suppressed [ 705.731979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.750311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.762594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.774879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.787165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.799372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.811732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.824054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.836276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.848549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.061910][ C0] sched: DL replenish lagged too much [ 710.741951][ C0] net_ratelimit: 20997 callbacks suppressed [ 710.741968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.760095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.772364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.784597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.796808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.809061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.821298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.833493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.845853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.858118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.751972][ C0] net_ratelimit: 20803 callbacks suppressed [ 715.751989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.770257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.782492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.794746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.807021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.819255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.831514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.843932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.856171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.868411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.762048][ C0] net_ratelimit: 20870 callbacks suppressed [ 720.762065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.780339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.792560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.804828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.817117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.829352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.841664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.853972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.866202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.878425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.772094][ C0] net_ratelimit: 21020 callbacks suppressed [ 725.772111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.790333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.802547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.814813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.827099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.839340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.851668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.863972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.876207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.888452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.781922][ C0] net_ratelimit: 21029 callbacks suppressed [ 730.781940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.800186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.812866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.825193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.837489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.849731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.862092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.874369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.886560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.898823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.792085][ C0] net_ratelimit: 20899 callbacks suppressed [ 735.792102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.810300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.822603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.834806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.847138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.859427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.871721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.883971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.896251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.908487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.801864][ C0] net_ratelimit: 20853 callbacks suppressed [ 740.801888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.820116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.832423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.844854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.857140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.869349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.881605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.893846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.906057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.918311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.811919][ C0] net_ratelimit: 20997 callbacks suppressed [ 745.811936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.830056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.842292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.854616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.866834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.879093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.891344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.903572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.915799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.928053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.822151][ C0] net_ratelimit: 20650 callbacks suppressed [ 750.822167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.840374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.852576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.864803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.877053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.889249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.901465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.913747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.925945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.938179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.832028][ C0] net_ratelimit: 20955 callbacks suppressed [ 755.832045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.850542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.862815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.875055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.887239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.899453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.911712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.923923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.936170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.948394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.841893][ C0] net_ratelimit: 20720 callbacks suppressed [ 760.841910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.860073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.872376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.884634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.896844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.909100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.921371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.933599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.945875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.958188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.852043][ C0] net_ratelimit: 15902 callbacks suppressed [ 765.852059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.870232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.882518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.894795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 765.907654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.919907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.932128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.944364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 765.957272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.969549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.861960][ C0] net_ratelimit: 14945 callbacks suppressed [ 770.861980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.880658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.892918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.905138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.917364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 770.929593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.941835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.954082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.966868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.979130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.871940][ C0] net_ratelimit: 15979 callbacks suppressed [ 775.871958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.890147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.902393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.914628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 775.926876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.939129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.951570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.964472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.976743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.988972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.882568][ C0] net_ratelimit: 15684 callbacks suppressed [ 780.882585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.900752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.912976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.925545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 780.937968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.950352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.962658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.975535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.987815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.000053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.891866][ C0] net_ratelimit: 15524 callbacks suppressed [ 785.891889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.910012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.922266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 785.934615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.946880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.959124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.972048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.984321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.996512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.008855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 790.902287][ C0] net_ratelimit: 16072 callbacks suppressed [ 790.902305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.920489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.932728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.945531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.957812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.970023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.982276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 790.994578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.006808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.019089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.911912][ C0] net_ratelimit: 15148 callbacks suppressed [ 795.911929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.930113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.942302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.954531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 795.966857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.979131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.991372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.004188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.016417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.028596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.922060][ C0] net_ratelimit: 15199 callbacks suppressed [ 800.922077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.940271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.953612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.965931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.978160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.990428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 801.002735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.014975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.027357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.040334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.901838][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 805.908833][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15896/1:b..l [ 805.917274][ C0] rcu: (detected by 0, t=10502 jiffies, g=84521, q=993 ncpus=2) [ 805.924979][ C0] task:udevd state:R running task stack:25112 pid:15896 tgid:15896 ppid:5198 task_flags:0x400140 flags:0x00080001 [ 805.939435][ C0] Call Trace: [ 805.942715][ C0] [ 805.945641][ C0] __schedule+0x1190/0x5de0 [ 805.950151][ C0] ? __pfx___schedule+0x10/0x10 [ 805.954999][ C0] ? mark_held_locks+0x49/0x80 [ 805.959758][ C0] preempt_schedule_irq+0x51/0x90 [ 805.964779][ C0] irqentry_exit+0x36/0x90 [ 805.969186][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.975155][ C0] RIP: 0010:unwind_next_frame+0x50c/0x20a0 [ 805.980958][ C0] Code: e8 19 f1 ff ff 48 89 c1 48 85 c0 0f 84 05 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 63 15 00 00 0f b6 41 05 [ 806.000556][ C0] RSP: 0018:ffffc900049af568 EFLAGS: 00000a07 [ 806.006622][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91246090 [ 806.014596][ C0] RDX: 1ffffffff2248c12 RSI: 0000000000000000 RDI: ffffffff909cd4a0 [ 806.022558][ C0] RBP: ffffc900049af620 R08: ffffffff912460e4 R09: 0000000000000000 [ 806.030611][ C0] R10: 0000000000000000 R11: 00000000000123d4 R12: ffffc900049af628 [ 806.038579][ C0] R13: ffffc900049af5d8 R14: ffffc900049af60d R15: ffffffff91246095 [ 806.046624][ C0] ? unwind_next_frame+0x2ec/0x20a0 [ 806.051819][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 806.056860][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 806.063002][ C0] arch_stack_walk+0x94/0x100 [ 806.067670][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 806.072685][ C0] stack_trace_save+0x8e/0xc0 [ 806.077351][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 806.082711][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 806.087644][ C0] kasan_save_stack+0x33/0x60 [ 806.092373][ C0] ? kasan_save_stack+0x33/0x60 [ 806.097214][ C0] ? kasan_save_track+0x14/0x30 [ 806.102055][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 806.107098][ C0] kasan_save_track+0x14/0x30 [ 806.111767][ C0] __kasan_slab_alloc+0x89/0x90 [ 806.116606][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 806.122049][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 806.127938][ C0] ? mas_store_gfp+0xd1e/0x1000 [ 806.132786][ C0] ? mas_store_gfp+0xd1e/0x1000 [ 806.137629][ C0] mas_store_gfp+0xd1e/0x1000 [ 806.142304][ C0] ? __pfx_mas_store_gfp+0x10/0x10 [ 806.147405][ C0] ? vms_complete_munmap_vmas+0x738/0x970 [ 806.153114][ C0] ? vms_complete_munmap_vmas+0x667/0x970 [ 806.158828][ C0] do_vmi_align_munmap+0x3fc/0x7e0 [ 806.163929][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 806.169553][ C0] ? on_each_cpu_cond_mask+0x5a/0x90 [ 806.174853][ C0] do_vmi_munmap+0x204/0x3e0 [ 806.179435][ C0] __vm_munmap+0x196/0x380 [ 806.184016][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 806.188955][ C0] ? __pfx_ksys_read+0x10/0x10 [ 806.193712][ C0] __x64_sys_munmap+0x59/0x80 [ 806.198382][ C0] do_syscall_64+0xcd/0xfa0 [ 806.202882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.208764][ C0] RIP: 0033:0x7f7b96f1e097 [ 806.213166][ C0] RSP: 002b:00007ffc970d5418 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 806.221578][ C0] RAX: ffffffffffffffda RBX: 0000564fa85a4290 RCX: 00007f7b96f1e097 [ 806.229714][ C0] RDX: 0000564fa85a4278 RSI: 0000000000001000 RDI: 00007f7b975c1000 [ 806.237698][ C0] RBP: 0000564fa85910c0 R08: 0000000000000030 R09: 0000000000040000 [ 806.245667][ C0] R10: 0000564fa85910b0 R11: 0000000000000246 R12: 00007f7b976f07c0 [ 806.253710][ C0] R13: 00007f7b976f239c R14: 0000000000000022 R15: 0000000000000001 [ 806.261685][ C0] [ 806.264693][ C0] rcu: rcu_preempt kthread starved for 9173 jiffies! g84521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 806.275783][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 806.285739][ C0] rcu: RCU grace-period kthread stack dump: [ 806.291609][ C0] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 806.305078][ C0] Call Trace: [ 806.308347][ C0] [ 806.311268][ C0] __schedule+0x1190/0x5de0 [ 806.315780][ C0] ? __pfx___schedule+0x10/0x10 [ 806.320633][ C0] ? find_held_lock+0x2b/0x80 [ 806.325299][ C0] ? schedule+0x2d7/0x3a0 [ 806.329619][ C0] schedule+0xe7/0x3a0 [ 806.333674][ C0] schedule_timeout+0x123/0x290 [ 806.338511][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 806.343867][ C0] ? __pfx_process_timeout+0x10/0x10 [ 806.349145][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 806.354940][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 806.360396][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 806.365155][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 806.370433][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 806.375630][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 806.380559][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 806.385408][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 806.391205][ C0] rcu_gp_kthread+0x26d/0x380 [ 806.395894][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 806.401086][ C0] ? rcu_is_watching+0x12/0xc0 [ 806.405846][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 806.411066][ C0] ? __kthread_parkme+0x19e/0x250 [ 806.416086][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 806.421282][ C0] kthread+0x3c5/0x780 [ 806.425347][ C0] ? __pfx_kthread+0x10/0x10 [ 806.429934][ C0] ? rcu_is_watching+0x12/0xc0 [ 806.434686][ C0] ? __pfx_kthread+0x10/0x10 [ 806.439265][ C0] ret_from_fork+0x675/0x7d0 [ 806.443849][ C0] ? __pfx_kthread+0x10/0x10 [ 806.448435][ C0] ret_from_fork_asm+0x1a/0x30 [ 806.453214][ C0] [ 806.456220][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 806.462530][ C0] Sending NMI from CPU 0 to CPUs 1: [ 806.467749][ C1] NMI backtrace for cpu 1 [ 806.467767][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 806.467794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.467807][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 806.467840][ C1] Code: 67 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 74 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 806.467861][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 806.467879][ C1] RAX: 0000000000720011 RBX: 0000000000000001 RCX: ffffffff8b5db2a9 [ 806.467895][ C1] RDX: 0000000000000000 RSI: ffffffff8da29329 RDI: ffffffff8bf078c0 [ 806.467910][ C1] RBP: ffffed1003a5bb58 R08: 0000000000000001 R09: ffffed10170a6655 [ 806.467924][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 806.467938][ C1] R13: ffff88801d2ddac0 R14: ffffffff90824cd0 R15: 0000000000000000 [ 806.467953][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 806.467974][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.467989][ C1] CR2: 00007f9126d62fb3 CR3: 0000000078f8a000 CR4: 00000000003526f0 [ 806.468005][ C1] Call Trace: [ 806.468013][ C1] [ 806.468021][ C1] default_idle+0x13/0x20 [ 806.468051][ C1] default_idle_call+0x6c/0xb0 [ 806.468081][ C1] do_idle+0x38d/0x500 [ 806.468105][ C1] ? __pfx_do_idle+0x10/0x10 [ 806.468128][ C1] ? do_idle+0x2e2/0x500 [ 806.468152][ C1] cpu_startup_entry+0x4f/0x60 [ 806.468176][ C1] start_secondary+0x21d/0x2b0 [ 806.468205][ C1] ? __pfx_start_secondary+0x10/0x10 [ 806.468238][ C1] common_startup_64+0x13e/0x148 [ 806.468270][ C1] [ 806.637516][ C0] net_ratelimit: 15484 callbacks suppressed [ 806.637531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.655650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.667903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 806.680175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.692400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.704656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.717529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.729814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.742078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.755147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 806.892626][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.898976][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.886285][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.642565][ C0] net_ratelimit: 15100 callbacks suppressed [ 811.642583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.660759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.673634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.685910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.698118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.710355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:59:ab:32:d7:41, vlan:0) [ 811.722602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.734873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.747137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.759983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)