last executing test programs: 13.423475051s ago: executing program 3 (id=3028): pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x15) r0 = socket(0x11, 0x80003, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(r0, 0x107, 0xd, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2b, 0xa, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) unshare$auto(0x40000080) prctl$auto(0x9, 0x1, 0x4, 0x5, 0x7) 10.539753973s ago: executing program 3 (id=3041): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) shmctl$auto_IPC_SET(0x10000, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x9f51, 0xfffffffffffffffd, @raw=0x7, @raw=0x200000, 0x200, 0x0, &(0x7f0000000840), 0x0}) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) io_uring_setup$auto(0xe, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7ffffffff000}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) signalfd4$auto(0xffffffffffffffff, 0x0, 0x1, 0x4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x4) sendfile$auto(r0, r0, 0x0, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) 10.17373669s ago: executing program 3 (id=3044): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/media17/power/runtime_active_time\x00', 0x400480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) (async) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/memmap/5/end\x00', 0x1c1540, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000640)=""/224, 0xe0) (async) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4) (async) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000) mmap$auto(0x200000002, 0x20009, 0x2, 0x12, 0xffffffffffffffff, 0x80001000) (async) sysfs$auto(0x2, 0x11, 0x0) r5 = fsopen$auto(0x0, 0x1) (async, rerun: 64) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) (async, rerun: 64) prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4}) (async, rerun: 64) r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) (rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/veth0_to_bond/optimistic_dad\x00', 0x6a0002, 0x0) (async) write$auto(r6, &(0x7f0000005900)='\x00', 0x6) (async, rerun: 32) mmap$auto(0x1, 0x2, 0x4000000000df, 0x13, r5, 0x400000000000006) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) timer_create$auto(0x8000, &(0x7f0000000300)={@sival_ptr=&(0x7f0000000240)="233b49d64064016490f3b63b81986f53e8ca", @inferred, 0x1, @_sigev_thread={&(0x7f00000002c0)=&(0x7f0000000280)=0x7, &(0x7f0000000380)="18741818b4e731a7e0036ebc30"}}, &(0x7f0000000340)=0xe) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) pipe$auto(0x0) 6.410737907s ago: executing program 2 (id=3063): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x4000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x60042, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_nsim_psample_enable_fops_psample(r1, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1f, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r4 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r5) shmctl$auto_SHM_STAT_ANY(0x3, 0xf, &(0x7f0000000240)={{0xfffffffc, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x9, 0xa448}, 0x0, 0x597, 0xea37, 0x5, @raw=0xf, @inferred, 0x2, 0x0, &(0x7f0000000180)="3d61b20de0516438fb51fac38f4c6676ea0b3ee0f0b697df5d8e6ea9c47851f15e3ca634d80a877193fd23ba9197c81078dcc9fb3d033e0d42bf4cf6f7bfc7a72afb8693e14408896f82bc", &(0x7f0000000200)="df325e765193bf38d666bae79b20bbfbbdaa64aaed4850064595afd29b9f"}) sendmsg$auto_SEG6_CMD_SETHMAC(r4, 0x0, 0x40) mmap$auto(0x0, 0x3, 0x3, 0x17, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) 5.973283538s ago: executing program 2 (id=3064): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x54, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x5}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xd7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1000}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xd}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44881}, 0xc050) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) newfstatat$auto(r3, 0x0, 0x0, 0x3) 5.428786963s ago: executing program 1 (id=3066): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r0 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(r0, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = socket(0x29, 0x2, 0x0) getsockopt$auto(r1, 0x119, 0x1, 0x0, 0x0) epoll_create1$auto(0x4) socket(0x34, 0x800, 0x10000) 5.023857655s ago: executing program 1 (id=3067): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@inferred, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x80000001, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x9, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x3, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0x4000000d8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x8, 0x8001, 0x0, 0x1, 0xe, 0xcf4, 0xeff, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) io_uring_setup$auto(0x8, 0x0) (async) r0 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x303902, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x303902, 0x0) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000001e80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="54160000", @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250500000008000500080000002a04028008004c00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00i\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800f8007f000001040046800400998004005880040058800c00d900060000000000000008009200", @ANYRES32=r0, @ANYBLOB="0086ee88928d06aea1ebe10c9b1f4feb6005f35c1f0038002f70726f632f7468726561642d73656c662f6661696c2d6e74680000000800050000000000"], 0x1654}, 0x1, 0x0, 0x0, 0x1}, 0x4010) mmap$auto(0x0, 0x20009, 0x10df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20180, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20180, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) r3 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) pread64$auto(r3, 0x0, 0x401, 0x7fffffff) r4 = getpid() ustat$auto(0x100, &(0x7f00000000c0)={0x2, 0x400, "bb1d6ba9fd08", "ae160cc81e57"}) (async) ustat$auto(0x100, &(0x7f00000000c0)={0x2, 0x400, "bb1d6ba9fd08", "ae160cc81e57"}) gettid() (async) r5 = gettid() rt_tgsigqueueinfo$auto(r4, r5, 0x21, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x1000006b) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) madvise$auto(0x0, 0x20499b, 0xb) ioctl$auto(0x3, 0x80108907, 0x38) socket(0x23, 0x5, 0x0) socket(0x3, 0x5, 0x800) ioctl$auto(0x1, 0x541b, 0x8) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) 4.551970823s ago: executing program 1 (id=3069): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x802, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) setsockopt$auto(r0, 0x401, 0x9, 0x0, 0x110) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x742, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r4, 0x8946, 0x24) mmap$auto(0x10, 0xffffffffffffff81, 0x7fa4826e, 0x19, 0x2, 0x100000001) madvise$auto(0x4, 0x9, 0xffff) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) 4.504457142s ago: executing program 2 (id=3070): r0 = socket(0x2a, 0x2, 0x1) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x19, 0x0, 0xb4, &(0x7f0000000040), 0x2, 0x80008003}}, 0x5, 0x17fa) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8003) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8003) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x10203, 0x0) semctl$auto_SEM_STAT_ANY(0x0, 0x7c, 0x14, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) recvmmsg$auto(r2, &(0x7f0000000240)={{&(0x7f0000000540)="be9c33df5c8c353735ae9f0e59896ce734a2947de470705514969d5d39224c22b3e740f3eb49f4caac69d2876cd1c27ee4a8a6f1800b38e925041b8cb1a698e738fa874547d44e0a4a5cb5a7cfae9a5940c7d0294ba5e07d0a0e1fc49e31effbba8d3c76977c377b68625c5c083983cea584", 0x7, &(0x7f0000000200)={&(0x7f00000001c0)="76afa3c1fd10f38db0dd5c8d0e58ae3a6495bcaad4f3c263d15f2b932ecf25bf0b87101b7f7a715a9184db333d581b", 0x2}, 0x6, 0x0, 0x7, 0x2}, 0x9}, 0x7, 0x8, 0x0) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x27, 0xa, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000500)=ANY=[@ANYBLOB='E?5\t', @ANYRES8=r3, @ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="0800050006000000110001006f76735f000000957cd6dc6a853e86", @ANYRES32=r1, @ANYBLOB='\x00'], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc4) read$auto(r4, &(0x7f0000000040)='\x00', 0x10001) r7 = setfsgid$auto(0xffffffffffffffff) lstat$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x10, 0x7, 0x3, 0x0, r7, 0x0, 0xffffffffffff0001, 0x6, 0x7, 0x6, 0x6f5, 0x3, 0x3, 0x7fffffffffffffff, 0x3, 0x200000000003}) (async) lstat$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x10, 0x7, 0x3, 0x0, r7, 0x0, 0xffffffffffff0001, 0x6, 0x7, 0x6, 0x6f5, 0x3, 0x3, 0x7fffffffffffffff, 0x3, 0x200000000003}) bind$auto(0x3, &(0x7f0000000140)=@ax25={0x3, @bcast}, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x200000008000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x200000008000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) (async) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000480)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000480)='/dev/pts/ptmx\x00', 0x0, 0x0) r9 = socket(0xa, 0x3, 0x3a) bind$auto(r9, &(0x7f0000000040)=@generic={0xa, "2c551d010000ff6118f3ffffff00"}, 0x66) (async) bind$auto(r9, &(0x7f0000000040)=@generic={0xa, "2c551d010000ff6118f3ffffff00"}, 0x66) ioctl$auto_TIOCSTI2(r8, 0x5412, 0x0) socket(0xa, 0x5, 0x84) 3.8369318s ago: executing program 1 (id=3071): socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x8, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_add_rule$auto(r2, 0x2, &(0x7f0000000180)="8230f9d99c97da8ab7de3167ee15d9c4e6af01c54ecc4a4374f3b8b744b4bccdec2ddfbbd3f08f49e6cdf14aa9f17df10e22326d715122bb4dcdb2488db15831332e9e9ffb82fd5eece9b39bbaaccc562fbac75704f761e52d3deb6f11a08dae69a163a364eecd6c94d4dc2078787c384259d3089e75666723400401b5e15f3c59d0e6a498f31262ebca9ee113b621870a20a68cbe6a38439158d569fdac79a94e4d", 0x8) sysfs$auto(0x2, 0x11, 0x0) sysfs$auto(0x1, 0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r6 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="14000800", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) readv$auto(r6, 0x0, 0x3) r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r8, 0x0, 0xeda5, 0xc86) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x8}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x2}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0xdb75}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x7}, @ETHTOOL_A_MM_TX_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x8}, @ETHTOOL_A_MM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008051}, 0x8000) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3.500619992s ago: executing program 2 (id=3073): mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0xf) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setrlimit$auto(0x1000000007, 0x0) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r0, 0x3, 0x81, @uprobe_multi={0x1, 0x1ff, 0x7, 0x0, 0x1, 0x4}}, 0x92) mmap$auto(0x0, 0x202000b, 0x3, 0x2000f8, 0xfffffffffffffffa, 0x8000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x8a, 0x0, 0x14) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x10000b}, 0x3, 0x0) process_madvise$auto_MADV_FREE(r1, &(0x7f0000000040)={&(0x7f00000000c0)="39ce32fca0c8b6984a9f3a8623e4dce7dc3f2b5a1a72421af01b245e290c802e805c092dba6e49ae734279b11f716d4b6809f54c297b7148877e8ca7cd7fec8e42e0da2ef2610edda9b67abb7791604fb06f151031ad828a1b7dfb83661951402d6c8210adae7fcfff41e8d92cef8e2a5d4045c9da95580e556f0a04c1d0f1d081789d2d1ce1ac2fd14c40", 0xbda}, 0x8, 0x8, 0x8) msgget$auto(0xc, 0x77d9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) msgget$auto(0xf7d4, 0xd3) fcntl$auto_F_UNLCK(r2, 0x9, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 3.296071941s ago: executing program 2 (id=3074): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x800008000) r0 = socket(0x2, 0x5, 0x0) setsockopt$auto(r0, 0x0, 0x2a, 0x0, 0x108) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) mmap$auto(0x0, 0x0, 0x129, 0x9b72, 0x7, 0x200000028000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r3 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) fstat$auto(r3, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0x4008ae9c, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r6 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r6, 0xa0) lseek$auto(0x3, 0x2, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.001446489s ago: executing program 0 (id=3075): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) 2.816054027s ago: executing program 0 (id=3076): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) select$auto(0x3, &(0x7f0000000100)={[0x81, 0x7, 0x1, 0x100, 0x42e1, 0x0, 0x6, 0x2, 0x2, 0x9, 0x2, 0x6, 0x4b7c, 0x4, 0x200, 0x1000]}, &(0x7f0000000340)={[0x8, 0x4, 0x85e5, 0x7, 0x5, 0x7fffffff, 0x6, 0xffffffff, 0x8001, 0xfffffffffffffffb, 0x80, 0x7f800000000, 0x8ca, 0x300000000000, 0x3, 0xffff]}, &(0x7f00000003c0)={[0x5, 0x6, 0x1, 0x9, 0x4, 0x7fff, 0x2, 0x8, 0x6, 0x1, 0x0, 0xb7d, 0x7, 0x400, 0x7fffffffffffffff, 0x6081]}, &(0x7f0000000080)={0x7, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/event1\x00', 0x100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/snmp\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000004c0)={0x1}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x4000084) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000440), r3) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(r3, 0xc0506617, &(0x7f0000000240)={{0x401, 0x0, @descriptor="0e71cb6c718e583f"}, 0x400, 0x81, '\x00', "eb6f1a293fd4bbc4cd4f92faed5e81a7945b86c35625fda4b4d81a9e50d7813898dae3dc824a87e7bb9a574c911e2022248d41de564de18f7e60223e5f368729d5f726617ad7c57a0f2846d28630ce2a5000fb9543cbdd1838d1834475c297c71a0029d67df116c4eba7e0a517d9153dbc253b233d899b223107b753aa76d8b63072023e7297e843d50db7d39c9711cc2dadd7276fa3d2df9e844a"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r4, r4, 0x0, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.815774735s ago: executing program 2 (id=3077): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub4/xrun_injection\x00', 0x181a00, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x800010000000, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x7, 0x0, 0x9, 0x2}, 0x800}, 0xffffff49, 0x4, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x20000000000000a, 0x1000009, 0x5f, 0x3, 0x3}, 0x806f3) read$auto(0x3, 0x0, 0x80) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x84380, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x20000000217) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) pread64$auto(r1, 0x0, 0x400000003f2, 0x5fffffffffc) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) pread64$auto(r3, 0x0, 0x8, 0xfffd) readv$auto(0xffffffffffffffff, 0x0, 0x5) 1.789085371s ago: executing program 0 (id=3079): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffffff7, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) unshare$auto(0x20000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(0x0, 0x9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x2, &(0x7f0000000080)='\x00\x00C\x80\'\xf9\xc4\xf5W_\xa2\x00\x05\x00\x00\x00\f\x8a\x7f\xcf\x9d\xc4ZrAF\xc7\xeeV\xda\x8ex\x1d\xddzL\xba\xc11\xc6\x1c\xe2\xe9\xbb,\x80\xd3\xcc\xf8\xd5h\xf7S\x81r[\xc8\xf1w \x95V?K\xf2\xd0\x02A\xf020\xe1\xd5^\xa8\xa9\xa0\xd5\xfa\x17I\x17\xf5\xdc\xb8\x1bt\xfc\xd9Ei5l\xef\xfbs\x04\xa0\xd8\x94E\b~\xd9\xbb\xeb\xc7\xfe\xe7\xde)\xc4r\x89\x03\xe0;\xa7\x1d+\xd5\x94N\xf4>-\xe3\xd3\x8d\xc7\xa4*\x96\xf7', 0x9) getxattrat$auto(r1, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRK2(r3, 0x5409, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 1.505609737s ago: executing program 1 (id=3080): io_uring_setup$auto(0x6, 0x0) socket(0x1f, 0x6, 0xffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/interface_authorized_default\x00', 0xc2481, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.17965038s ago: executing program 3 (id=3054): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) io_uring_setup$auto(0x7e1b, 0x0) ioctl$auto(0x3, 0x5420, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) read$auto(r0, 0x0, 0x73) ioctl$auto(0x3, 0x402c542c, 0x38) 1.085243062s ago: executing program 1 (id=3081): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram8\x00', 0x8000, 0x0) ioctl$auto_IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x9, 0xfffffffd, 0x9}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x40000006, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r2, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8010aebc, r3) io_uring_setup$auto(0x8, 0x0) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) 944.40976ms ago: executing program 3 (id=3082): rseq$auto(&(0x7f0000000300)={0xe, 0x400, 0x0, 0x4, 0x6, 0x2}, 0x6, 0x0, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ptyda/power/runtime_active_time\x00', 0x68440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/119, 0x77) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sysfs$auto(0x2, 0x4d, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x20001, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000380)=ANY=[@ANYBLOB="7bd5c3208298138ccf04b17b8735075348e93156f3cd8364f89c66cbeccb123c9fb35142653ddbcc4addd49052288551b3239f41033f3b69539f77a2ac77ae894d86c0dffed0ba499128cf8f84015c691d2b68f22a27"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000009fb8d93239ef1851ea6138d2d2455ef3f9d9a013bb36ec1810ce2afb66168c2853f687df1d8520022af35b8083eb66d2b73744fc5a5a62fc5341486f0ea3f7f", @ANYRES16=0x0, @ANYRES16=r2], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80000001, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x2000000000, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r1, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) semtimedop$auto(0x4, &(0x7f0000000080)={0xbde, 0x3, 0x1}, 0x80000c, &(0x7f00000000c0)={0x3ffffffffffffff, 0x100000000ffff}) ioctl$auto(r3, 0xc040aed4, r4) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setgroups$auto(0xfffffffb, 0x0) 802.64114ms ago: executing program 0 (id=3083): socket(0x10, 0x2, 0xc) socket(0x11, 0x4, 0x3a) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a080, 0x0) socket(0xa, 0x80000, 0x84) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x7fdc00, 0x0) capset$auto(&(0x7f0000000100)={0x1, 0xffffffffffffffff}, &(0x7f0000000140)={0xb1, 0xfdc}) sched_setattr$auto(r0, &(0x7f00000001c0)={0x3df, 0x3ff, 0x0, 0x80000000, 0x9, 0xe, 0x4, 0x8, 0x4, 0x43}, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) inotify_init1$auto(0x3000000000000) socketpair$auto(0xfffffffe, 0x0, 0x9, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x6e643, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 532.728593ms ago: executing program 3 (id=3084): mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, r0, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r1, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r1, r1}, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r5, 0x0, 0xfffffdf1) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 381.038322ms ago: executing program 0 (id=3085): io_uring_register$auto_IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, &(0x7f0000000000)="8876484b857c44472d0d53e514ccb563f5a1b22028a8386cb0f8b43b054ffaadcc735a749e84db312eafd6c3eac09979ba1589ba037493b8734a58d1f2", 0x3) r0 = getsockopt$auto(0xffffffffffffffff, 0x4, 0x4, &(0x7f00000000c0)='@^\x00', &(0x7f0000000100)=0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) (async) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) (async) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x3000000000000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pipe$auto(0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1a, @new_map_fd=r0, 0x4, @old_map_fd=0x3ff}, 0xa3) 0s ago: executing program 0 (id=3086): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/queue_id\x00', 0x80, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) r1 = open(0x0, 0x2e1c2, 0x8c) (async, rerun: 32) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) ioctl$auto_BCH_IOCTL_DISK_ADD(r1, 0x4010bc04, &(0x7f0000000000)={0xfffffff7, 0x0, 0x6}) (async) ioctl$auto_FICLONE(r2, 0x40049409, r1) (async) setsockopt$auto(0x3, 0x29, 0x2d, 0x0, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) socket(0x2a, 0x2, 0x0) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) fanotify_init$auto(0x0, 0x4) (async) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) kernel console output (not intermixed with test programs): 4 [ 706.449699][T17335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 706.627402][T17355] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2460'. [ 706.712085][T13903] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 707.095329][T17374] FAULT_INJECTION: forcing a failure. [ 707.095329][T17374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 707.188058][T17374] CPU: 0 UID: 0 PID: 17374 Comm: syz.1.2465 Tainted: G U syzkaller #0 PREEMPT(full) [ 707.188086][T17374] Tainted: [U]=USER [ 707.188091][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.188099][T17374] Call Trace: [ 707.188105][T17374] [ 707.188111][T17374] dump_stack_lvl+0x16c/0x1f0 [ 707.188133][T17374] should_fail_ex+0x512/0x640 [ 707.188158][T17374] get_futex_key+0x1d0/0x1560 [ 707.188180][T17374] ? __pfx_get_futex_key+0x10/0x10 [ 707.188200][T17374] ? mas_next_slot+0x12d3/0x1cb0 [ 707.188219][T17374] futex_wait_setup+0x9d/0x550 [ 707.188237][T17374] __futex_wait+0x193/0x2f0 [ 707.188250][T17374] ? __pfx___futex_wait+0x10/0x10 [ 707.188266][T17374] ? __pfx_futex_wake_mark+0x10/0x10 [ 707.188288][T17374] ? futex_hash+0x2c5/0x380 [ 707.188310][T17374] ? futex_private_hash_put+0xd5/0x190 [ 707.188330][T17374] futex_wait+0xe8/0x380 [ 707.188349][T17374] ? __pfx_futex_wait+0x10/0x10 [ 707.188360][T17374] ? lock_mm_and_find_vma+0xa6/0x6e0 [ 707.188383][T17374] ? rcu_is_watching+0x12/0xc0 [ 707.188403][T17374] do_futex+0x229/0x350 [ 707.188420][T17374] ? __pfx_do_futex+0x10/0x10 [ 707.188443][T17374] __x64_sys_futex+0x1e0/0x4c0 [ 707.188462][T17374] ? get_user_cpu_mask+0x40/0x80 [ 707.188479][T17374] ? __pfx___x64_sys_futex+0x10/0x10 [ 707.188503][T17374] ? xfd_validate_state+0x61/0x180 [ 707.188531][T17374] do_syscall_64+0xcd/0xfa0 [ 707.188550][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.188565][T17374] RIP: 0033:0x7fa46798f749 [ 707.188577][T17374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.188590][T17374] RSP: 002b:00007fa46884d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 707.188604][T17374] RAX: ffffffffffffffda RBX: 00007fa467be5fa8 RCX: 00007fa46798f749 [ 707.188613][T17374] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa467be5fa8 [ 707.188621][T17374] RBP: 00007fa467be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 707.188630][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.188640][T17374] R13: 00007fa467be6038 R14: 00007ffdf3319c20 R15: 00007ffdf3319d08 [ 707.188658][T17374] [ 707.718829][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 708.150169][T17399] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 708.226076][T17386] could not allocate digest TFM handle [ 708.246888][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 708.253190][T17392] could not allocate digest TFM handle [ 708.333023][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 708.443008][T17402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2470'. [ 708.465980][T13903] Bluetooth: hci3: command 0x0c1a tx timeout [ 708.638318][T17409] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 708.942832][T17418] futex_wake_op: syz.1.2475 tries to shift op by -2048; fix this program [ 708.984645][T17418] futex_wake_op: syz.1.2475 tries to shift op by -2048; fix this program [ 709.015329][T17418] 0x000000000001-0x000000020000 : "" [ 709.055110][T17418] ftl_cs: FTL header corrupt! [ 709.376166][T17427] netlink: 'syz.1.2477': attribute type 4 has an invalid length. [ 709.401675][T17427] netlink: 314 bytes leftover after parsing attributes in process `syz.1.2477'. [ 710.302572][T13903] Bluetooth: hci2: command 0x0c1a tx timeout [ 710.382406][T13903] Bluetooth: hci0: command 0x0c1a tx timeout [ 710.542978][T13903] Bluetooth: hci3: command 0x0c1a tx timeout [ 710.918020][T17453] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 710.968111][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 711.080058][T17456] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 711.652377][T17467] nvme_fabrics: missing parameter 'transport=%s' [ 711.720787][T17467] nvme_fabrics: missing parameter 'nqn=%s' [ 711.881682][T17470] nvme_fabrics: missing parameter 'transport=%s' [ 711.920315][T17470] nvme_fabrics: missing parameter 'nqn=%s' [ 712.382420][T13903] Bluetooth: hci2: command 0x0c1a tx timeout [ 712.462637][T13903] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.627043][T13903] Bluetooth: hci3: command 0x0c1a tx timeout [ 714.136192][T17540] netlink: Conntrack attr has 16 unknown bytes [ 714.508291][T17545] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 714.564016][T17545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2502'. [ 714.703966][T13903] Bluetooth: hci3: command 0x0c1a tx timeout [ 714.758440][T17547] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2503'. [ 714.933721][T17550] random: crng reseeded on system resumption [ 716.269176][T17588] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2515'. [ 717.325450][ T30] audit: type=1800 audit(8277292459.710:24): pid=17617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2522" name="members" dev="configfs" ino=66458 res=0 errno=0 [ 717.345753][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.322840][T17654] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 719.737249][T17665] binder: 17663:17665 unknown command 0 [ 719.821348][T17665] binder: 17663:17665 ioctl c0306201 2000000000c0 returned -22 [ 719.880478][T17666] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 720.016606][T17665] __vm_enough_memory: pid: 17665, comm: syz.0.2535, bytes: 4398046511104 not enough memory for the allocation [ 720.485968][T17669] zswap: compressor not available [ 720.719847][T17669] nvme_fcloop: unknown parameter or missing value '0' [ 722.075932][T17700] netlink: 'syz.2.2542': attribute type 11 has an invalid length. [ 722.282118][T17710] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 723.111635][T17722] sp0: Synchronizing with TNC [ 723.635191][T17733] openvswitch: netlink: IP tunnel dst address not specified [ 723.837181][T17736] Invalid ELF header magic: != ELF [ 724.100642][T17746] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 724.193141][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2557'. [ 724.383983][T17737] vivid-007: ================= START STATUS ================= [ 724.528736][T17737] vivid-007: Generate PTS: true [ 724.581962][T17737] vivid-007: Generate SCR: true [ 724.647974][T17737] tpg source WxH: 320x240 (Y'CbCr) [ 724.728576][T17737] tpg field: 1 [ 724.774383][T17737] tpg crop: (0,0)/320x240 [ 724.826244][T17737] tpg compose: (0,0)/320x240 [ 724.878715][T17737] tpg colorspace: 8 [ 724.924737][T17737] tpg transfer function: 0/0 [ 724.974116][T17737] tpg Y'CbCr encoding: 0/0 [ 725.031568][T17737] tpg quantization: 0/0 [ 725.043346][T17768] sp0: Synchronizing with TNC [ 725.092735][T17737] tpg RGB range: 0/2 [ 725.135212][T17737] vivid-007: ================== END STATUS ================== [ 725.551274][T17778] FAULT_INJECTION: forcing a failure. [ 725.551274][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 725.579733][T17780] FAULT_INJECTION: forcing a failure. [ 725.579733][T17780] name fail_futex, interval 1, probability 0, space 0, times 0 [ 725.600338][T17778] CPU: 0 UID: 0 PID: 17778 Comm: syz.1.2563 Tainted: G U syzkaller #0 PREEMPT(full) [ 725.600371][T17778] Tainted: [U]=USER [ 725.600376][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.600384][T17778] Call Trace: [ 725.600389][T17778] [ 725.600395][T17778] dump_stack_lvl+0x16c/0x1f0 [ 725.600419][T17778] should_fail_ex+0x512/0x640 [ 725.600440][T17778] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 725.600458][T17778] should_failslab+0xc2/0x120 [ 725.600477][T17778] kmem_cache_alloc_noprof+0x75/0x6e0 [ 725.600491][T17778] ? ptlock_alloc+0x1f/0x70 [ 725.600516][T17778] ? ptlock_alloc+0x1f/0x70 [ 725.600534][T17778] ptlock_alloc+0x1f/0x70 [ 725.600553][T17778] pte_alloc_one+0x84/0x350 [ 725.600570][T17778] __pte_alloc+0x6d/0x380 [ 725.600585][T17778] ? __pfx___pte_alloc+0x10/0x10 [ 725.600602][T17778] ? __pfx___might_resched+0x10/0x10 [ 725.600616][T17778] ? copy_page_range+0x1c69/0x6930 [ 725.600639][T17778] copy_page_range+0x44a1/0x6930 [ 725.600682][T17778] ? __pfx_copy_page_range+0x10/0x10 [ 725.600709][T17778] ? __pfx___might_resched+0x10/0x10 [ 725.600721][T17778] ? __pfx_mas_store+0x10/0x10 [ 725.600738][T17778] ? __vma_enter_locked+0x163/0x3f0 [ 725.600759][T17778] ? dup_mmap+0xe30/0x2280 [ 725.600776][T17778] ? down_write+0x14d/0x200 [ 725.600804][T17778] ? up_write+0x1b2/0x520 [ 725.600827][T17778] dup_mmap+0xe80/0x2280 [ 725.600853][T17778] ? __pfx_dup_mmap+0x10/0x10 [ 725.600885][T17778] copy_process+0x3f0c/0x76a0 [ 725.600911][T17778] ? __pfx_copy_process+0x10/0x10 [ 725.600933][T17778] ? _copy_from_user+0x59/0xd0 [ 725.600957][T17778] kernel_clone+0xfc/0x930 [ 725.600974][T17778] ? __pfx_kernel_clone+0x10/0x10 [ 725.600989][T17778] ? futex_private_hash_put+0xd5/0x190 [ 725.601010][T17778] ? __pfx_futex_wait+0x10/0x10 [ 725.601028][T17778] __do_sys_clone3+0x212/0x290 [ 725.601052][T17778] ? __pfx___do_sys_clone3+0x10/0x10 [ 725.601084][T17778] ? __pfx___might_resched+0x10/0x10 [ 725.601115][T17778] do_syscall_64+0xcd/0xfa0 [ 725.601134][T17778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.601149][T17778] RIP: 0033:0x7fa46798f749 [ 725.601162][T17778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.601176][T17778] RSP: 002b:00007fa46884cf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 725.601190][T17778] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa46798f749 [ 725.601199][T17778] RDX: 00007fa46884cf20 RSI: 0000000000000058 RDI: 00007fa46884cf20 [ 725.601208][T17778] RBP: 00007fa467a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 725.601219][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.601228][T17778] R13: 00007fa467be6038 R14: 00007fa467be5fa0 R15: 00007ffdf3319d08 [ 725.601248][T17778] [ 726.202322][T17780] CPU: 0 UID: 0 PID: 17780 Comm: syz.0.2564 Tainted: G U syzkaller #0 PREEMPT(full) [ 726.202349][T17780] Tainted: [U]=USER [ 726.202354][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.202363][T17780] Call Trace: [ 726.202369][T17780] [ 726.202375][T17780] dump_stack_lvl+0x16c/0x1f0 [ 726.202397][T17780] should_fail_ex+0x512/0x640 [ 726.202422][T17780] get_futex_key+0x1d0/0x1560 [ 726.202441][T17780] ? __pfx_do_wp_page+0x10/0x10 [ 726.202459][T17780] ? __pfx_get_futex_key+0x10/0x10 [ 726.202476][T17780] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 726.202497][T17780] ? ___pte_offset_map+0x2ad/0x4f0 [ 726.202518][T17780] futex_wake+0xea/0x530 [ 726.202542][T17780] ? __pfx_futex_wake+0x10/0x10 [ 726.202565][T17780] ? css_rstat_updated+0x1c2/0x510 [ 726.202583][T17780] do_futex+0x1e3/0x350 [ 726.202601][T17780] ? __pfx_do_futex+0x10/0x10 [ 726.202618][T17780] ? find_held_lock+0x2b/0x80 [ 726.202632][T17780] ? handle_mm_fault+0x2ab/0xd10 [ 726.202660][T17780] __x64_sys_futex+0x1e0/0x4c0 [ 726.202680][T17780] ? exc_page_fault+0x64/0xc0 [ 726.202697][T17780] ? __pfx___x64_sys_futex+0x10/0x10 [ 726.202723][T17780] do_syscall_64+0xcd/0xfa0 [ 726.202742][T17780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.202757][T17780] RIP: 0033:0x7f02ed58f749 [ 726.202770][T17780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.202783][T17780] RSP: 002b:00007f02ee3990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 726.202797][T17780] RAX: ffffffffffffffda RBX: 00007f02ed7e5fa8 RCX: 00007f02ed58f749 [ 726.202807][T17780] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f02ed7e5fac [ 726.202816][T17780] RBP: 00007f02ed7e5fa0 R08: 00007f02ee39a000 R09: 0000000000000000 [ 726.202825][T17780] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 726.202834][T17780] R13: 00007f02ed7e6038 R14: 00007ffc57a34790 R15: 00007ffc57a34878 [ 726.202853][T17780] [ 726.412952][T17780] FAULT_INJECTION: forcing a failure. [ 726.412952][T17780] name fail_futex, interval 1, probability 0, space 0, times 0 [ 726.425820][T17780] CPU: 0 UID: 0 PID: 17780 Comm: syz.0.2564 Tainted: G U syzkaller #0 PREEMPT(full) [ 726.425846][T17780] Tainted: [U]=USER [ 726.425850][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.425859][T17780] Call Trace: [ 726.425865][T17780] [ 726.425871][T17780] dump_stack_lvl+0x16c/0x1f0 [ 726.425895][T17780] should_fail_ex+0x512/0x640 [ 726.425919][T17780] get_futex_key+0x1d0/0x1560 [ 726.425941][T17780] ? __pfx_get_futex_key+0x10/0x10 [ 726.425964][T17780] futex_wake+0xea/0x530 [ 726.425984][T17780] ? rcu_is_watching+0x12/0xc0 [ 726.426006][T17780] ? __pfx_futex_wake+0x10/0x10 [ 726.426028][T17780] ? kmem_cache_free+0x2d4/0x6c0 [ 726.426043][T17780] ? putname+0x154/0x1a0 [ 726.426064][T17780] do_futex+0x1e3/0x350 [ 726.426082][T17780] ? __pfx_do_futex+0x10/0x10 [ 726.426105][T17780] __x64_sys_futex+0x1e0/0x4c0 [ 726.426124][T17780] ? __x64_sys_openat+0x174/0x210 [ 726.426143][T17780] ? __pfx___x64_sys_futex+0x10/0x10 [ 726.426169][T17780] do_syscall_64+0xcd/0xfa0 [ 726.426186][T17780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.426200][T17780] RIP: 0033:0x7f02ed58f749 [ 726.426214][T17780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.426227][T17780] RSP: 002b:00007f02ee3990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 726.426242][T17780] RAX: ffffffffffffffda RBX: 00007f02ed7e5fa8 RCX: 00007f02ed58f749 [ 726.426255][T17780] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f02ed7e5fac [ 726.426264][T17780] RBP: 00007f02ed7e5fa0 R08: 00007f02ee39a000 R09: 0000000000000000 [ 726.426273][T17780] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 726.426280][T17780] R13: 00007f02ed7e6038 R14: 00007ffc57a34790 R15: 00007ffc57a34878 [ 726.426299][T17780] [ 726.840079][T13903] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 727.286705][T13903] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 727.293862][T13903] Bluetooth: hci3: unexpected subevent 0x0c length: 727 > 5 [ 729.753272][T17857] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 730.658236][T17869] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 730.713967][T17869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2589'. [ 730.728495][T17866] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 731.005884][T17878] FAULT_INJECTION: forcing a failure. [ 731.005884][T17878] name failslab, interval 1, probability 0, space 0, times 0 [ 731.106582][T17878] CPU: 0 UID: 0 PID: 17878 Comm: syz.1.2591 Tainted: G U syzkaller #0 PREEMPT(full) [ 731.106609][T17878] Tainted: [U]=USER [ 731.106615][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.106624][T17878] Call Trace: [ 731.106628][T17878] [ 731.106637][T17878] dump_stack_lvl+0x16c/0x1f0 [ 731.106661][T17878] should_fail_ex+0x512/0x640 [ 731.106681][T17878] ? fs_reclaim_acquire+0xae/0x150 [ 731.106703][T17878] should_failslab+0xc2/0x120 [ 731.106721][T17878] __kmalloc_noprof+0xdd/0x880 [ 731.106742][T17878] ? kfree+0x252/0x6d0 [ 731.106753][T17878] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.106773][T17878] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.106789][T17878] tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.106816][T17878] tomoyo_check_open_permission+0x2ab/0x3c0 [ 731.106831][T17878] ? _raw_spin_unlock+0x28/0x50 [ 731.106848][T17878] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 731.106978][T17878] ? lock_acquire+0x179/0x350 [ 731.107009][T17878] ? find_held_lock+0x2b/0x80 [ 731.107024][T17878] ? mnt_get_write_access+0x52/0x2f0 [ 731.107046][T17878] tomoyo_file_open+0x6b/0x90 [ 731.107068][T17878] security_file_open+0x84/0x1e0 [ 731.107085][T17878] do_dentry_open+0x596/0x1530 [ 731.107108][T17878] vfs_open+0x82/0x3f0 [ 731.107129][T17878] path_openat+0x1de4/0x2cb0 [ 731.107150][T17878] ? __pfx_path_openat+0x10/0x10 [ 731.107167][T17878] ? __lock_acquire+0xb8a/0x1c90 [ 731.107187][T17878] do_filp_open+0x20b/0x470 [ 731.107202][T17878] ? __pfx_do_filp_open+0x10/0x10 [ 731.107241][T17878] ? alloc_fd+0x471/0x7d0 [ 731.107261][T17878] do_sys_openat2+0x11b/0x1d0 [ 731.107282][T17878] ? __pfx_do_sys_openat2+0x10/0x10 [ 731.107311][T17878] __x64_sys_openat+0x174/0x210 [ 731.107332][T17878] ? __pfx___x64_sys_openat+0x10/0x10 [ 731.107360][T17878] do_syscall_64+0xcd/0xfa0 [ 731.107378][T17878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.107393][T17878] RIP: 0033:0x7fa46798f749 [ 731.107406][T17878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.107420][T17878] RSP: 002b:00007fa46882c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 731.107434][T17878] RAX: ffffffffffffffda RBX: 00007fa467be6090 RCX: 00007fa46798f749 [ 731.107444][T17878] RDX: 0000000000020681 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 731.107453][T17878] RBP: 00007fa467a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 731.107463][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.107471][T17878] R13: 00007fa467be6128 R14: 00007fa467be6090 R15: 00007ffdf3319d08 [ 731.107492][T17878] [ 731.382852][T17878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 731.469774][T17882] futex_wake_op: syz.0.2592 tries to shift op by -2048; fix this program [ 731.560965][T17883] size and base must be multiples of 4 kiB [ 731.567828][T17883] CPU: 0 UID: 0 PID: 17883 Comm: syz.0.2592 Tainted: G U syzkaller #0 PREEMPT(full) [ 731.567853][T17883] Tainted: [U]=USER [ 731.567858][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.567867][T17883] Call Trace: [ 731.567872][T17883] [ 731.567877][T17883] dump_stack_lvl+0x16c/0x1f0 [ 731.567899][T17883] mtrr_add+0xdf/0x110 [ 731.567919][T17883] mtrr_ioctl+0x7ef/0xcf0 [ 731.567938][T17883] ? __pfx_mtrr_ioctl+0x10/0x10 [ 731.567961][T17883] ? find_held_lock+0x2b/0x80 [ 731.567982][T17883] ? __fget_files+0x20e/0x3c0 [ 731.567997][T17883] ? __pfx_mtrr_ioctl+0x10/0x10 [ 731.568014][T17883] proc_reg_unlocked_ioctl+0x229/0x320 [ 731.568033][T17883] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 731.568053][T17883] __x64_sys_ioctl+0x18e/0x210 [ 731.568074][T17883] do_syscall_64+0xcd/0xfa0 [ 731.568091][T17883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.568105][T17883] RIP: 0033:0x7f02ed58f749 [ 731.568119][T17883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.568132][T17883] RSP: 002b:00007f02ee378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.568145][T17883] RAX: ffffffffffffffda RBX: 00007f02ed7e6090 RCX: 00007f02ed58f749 [ 731.568154][T17883] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 731.568162][T17883] RBP: 00007f02ed613f91 R08: 0000000000000000 R09: 0000000000000000 [ 731.568170][T17883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.568178][T17883] R13: 00007f02ed7e6128 R14: 00007f02ed7e6090 R15: 00007ffc57a34878 [ 731.568196][T17883] [ 731.795657][T17885] netlink: Conntrack attr has 16 unknown bytes [ 732.321620][T17899] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 732.391691][T17903] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 732.455080][T17903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2599'. [ 733.723543][T17931] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 734.041627][T17942] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 734.148406][T17942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2609'. [ 734.865458][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.912416][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.372455][T17981] FAULT_INJECTION: forcing a failure. [ 735.372455][T17981] name failslab, interval 1, probability 0, space 0, times 0 [ 735.458904][T17981] CPU: 0 UID: 0 PID: 17981 Comm: syz.3.2619 Tainted: G U syzkaller #0 PREEMPT(full) [ 735.458931][T17981] Tainted: [U]=USER [ 735.458937][T17981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.458945][T17981] Call Trace: [ 735.458951][T17981] [ 735.458957][T17981] dump_stack_lvl+0x16c/0x1f0 [ 735.458981][T17981] should_fail_ex+0x512/0x640 [ 735.459002][T17981] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 735.459022][T17981] should_failslab+0xc2/0x120 [ 735.459041][T17981] __kvmalloc_node_noprof+0x141/0x9c0 [ 735.459058][T17981] ? io_alloc_cache_init+0x38/0x170 [ 735.459081][T17981] ? io_alloc_cache_init+0x38/0x170 [ 735.459098][T17981] io_alloc_cache_init+0x38/0x170 [ 735.459118][T17981] io_uring_setup+0x648/0x20e0 [ 735.459136][T17981] ? __pfx_io_uring_setup+0x10/0x10 [ 735.459151][T17981] ? do_futex+0x122/0x350 [ 735.459170][T17981] ? __pfx_do_futex+0x10/0x10 [ 735.459198][T17981] ? xfd_validate_state+0x61/0x180 [ 735.459216][T17981] ? __pfx_ksys_write+0x10/0x10 [ 735.459234][T17981] __x64_sys_io_uring_setup+0xc2/0x170 [ 735.459256][T17981] do_syscall_64+0xcd/0xfa0 [ 735.459274][T17981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.459289][T17981] RIP: 0033:0x7f2da0f8f749 [ 735.459309][T17981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.459323][T17981] RSP: 002b:00007f2da1ece038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 735.459337][T17981] RAX: ffffffffffffffda RBX: 00007f2da11e5fa0 RCX: 00007f2da0f8f749 [ 735.459347][T17981] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 735.459356][T17981] RBP: 00007f2da1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.459364][T17981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.459373][T17981] R13: 00007f2da11e6038 R14: 00007f2da11e5fa0 R15: 00007fffaadfc488 [ 735.459392][T17981] [ 735.788710][T17986] FAULT_INJECTION: forcing a failure. [ 735.788710][T17986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 735.801567][T17986] CPU: 0 UID: 0 PID: 17986 Comm: syz.3.2623 Tainted: G U syzkaller #0 PREEMPT(full) [ 735.801592][T17986] Tainted: [U]=USER [ 735.801596][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.801605][T17986] Call Trace: [ 735.801610][T17986] [ 735.801615][T17986] dump_stack_lvl+0x16c/0x1f0 [ 735.801637][T17986] should_fail_ex+0x512/0x640 [ 735.801661][T17986] get_futex_key+0x1d0/0x1560 [ 735.801682][T17986] ? __pfx_get_futex_key+0x10/0x10 [ 735.801698][T17986] ? __pfx_stack_trace_save+0x10/0x10 [ 735.801715][T17986] ? stack_depot_save_flags+0x29/0x9c0 [ 735.801741][T17986] futex_wait_setup+0x9d/0x550 [ 735.801759][T17986] __futex_wait+0x193/0x2f0 [ 735.801773][T17986] ? __pfx___futex_wait+0x10/0x10 [ 735.801788][T17986] ? __pfx_futex_wake_mark+0x10/0x10 [ 735.801812][T17986] ? futex_hash+0x2c5/0x380 [ 735.801831][T17986] ? futex_private_hash_put+0xd5/0x190 [ 735.801849][T17986] futex_wait+0xe8/0x380 [ 735.801861][T17986] ? __pfx_futex_wait+0x10/0x10 [ 735.801878][T17986] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.801893][T17986] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.801910][T17986] ? _raw_spin_unlock_irq+0x2e/0x50 [ 735.801927][T17986] do_futex+0x229/0x350 [ 735.801946][T17986] ? __pfx_do_futex+0x10/0x10 [ 735.801963][T17986] ? __fget_files+0x204/0x3c0 [ 735.801982][T17986] __x64_sys_futex+0x1e0/0x4c0 [ 735.802002][T17986] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 735.802024][T17986] ? __pfx___x64_sys_futex+0x10/0x10 [ 735.802046][T17986] ? xfd_validate_state+0x61/0x180 [ 735.802065][T17986] ? __sys_setsockopt+0x140/0x1a0 [ 735.802083][T17986] do_syscall_64+0xcd/0xfa0 [ 735.802102][T17986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.802116][T17986] RIP: 0033:0x7f2da0f8f749 [ 735.802128][T17986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.802142][T17986] RSP: 002b:00007f2da1ece0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 735.802156][T17986] RAX: ffffffffffffffda RBX: 00007f2da11e5fa8 RCX: 00007f2da0f8f749 [ 735.802165][T17986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2da11e5fa8 [ 735.802177][T17986] RBP: 00007f2da11e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 735.802185][T17986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.802192][T17986] R13: 00007f2da11e6038 R14: 00007fffaadfc3a0 R15: 00007fffaadfc488 [ 735.802211][T17986] [ 736.161296][T17992] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 736.178478][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'. [ 736.258944][T17995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'. [ 736.361329][T17996] hub 8-0:1.0: Interface 0 is not authorized for usage [ 736.374792][T17996] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 737.295189][T18027] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 739.300679][T18085] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 739.643581][ T30] audit: type=1804 audit(4294967312.840:25): pid=18092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2641" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 740.392921][T18099] FAULT_INJECTION: forcing a failure. [ 740.392921][T18099] name failslab, interval 1, probability 0, space 0, times 0 [ 740.439031][T18099] CPU: 0 UID: 0 PID: 18099 Comm: syz.3.2644 Tainted: G U syzkaller #0 PREEMPT(full) [ 740.439056][T18099] Tainted: [U]=USER [ 740.439061][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.439070][T18099] Call Trace: [ 740.439076][T18099] [ 740.439081][T18099] dump_stack_lvl+0x16c/0x1f0 [ 740.439104][T18099] should_fail_ex+0x512/0x640 [ 740.439125][T18099] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 740.439144][T18099] should_failslab+0xc2/0x120 [ 740.439162][T18099] kmem_cache_alloc_node_noprof+0x78/0x770 [ 740.439176][T18099] ? alloc_unbound_pwq+0x3ff/0xe10 [ 740.439196][T18099] ? alloc_unbound_pwq+0x3ff/0xe10 [ 740.439209][T18099] alloc_unbound_pwq+0x3ff/0xe10 [ 740.439229][T18099] apply_wqattrs_prepare+0x3af/0xbd0 [ 740.439252][T18099] apply_workqueue_attrs_locked+0x64/0xe0 [ 740.439268][T18099] apply_workqueue_attrs+0x2a/0x50 [ 740.439285][T18099] padata_set_cpumask+0x237/0x510 [ 740.439307][T18099] store_cpumask+0x120/0x1a0 [ 740.439323][T18099] ? __pfx_store_cpumask+0x10/0x10 [ 740.439341][T18099] ? find_held_lock+0x2b/0x80 [ 740.439359][T18099] ? __pfx_store_cpumask+0x10/0x10 [ 740.439375][T18099] padata_sysfs_store+0x5c/0x90 [ 740.439392][T18099] ? __pfx_padata_sysfs_store+0x10/0x10 [ 740.439409][T18099] sysfs_kf_write+0xf2/0x150 [ 740.439426][T18099] kernfs_fop_write_iter+0x3af/0x570 [ 740.439438][T18099] ? __pfx_sysfs_kf_write+0x10/0x10 [ 740.439455][T18099] vfs_write+0x7d3/0x11d0 [ 740.439471][T18099] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 740.439486][T18099] ? __pfx___mutex_lock+0x10/0x10 [ 740.439503][T18099] ? __pfx_vfs_write+0x10/0x10 [ 740.439532][T18099] ksys_write+0x12a/0x250 [ 740.439547][T18099] ? __pfx_ksys_write+0x10/0x10 [ 740.439568][T18099] do_syscall_64+0xcd/0xfa0 [ 740.439586][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.439600][T18099] RIP: 0033:0x7f2da0f8f749 [ 740.439612][T18099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.439625][T18099] RSP: 002b:00007f2da1ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.439639][T18099] RAX: ffffffffffffffda RBX: 00007f2da11e5fa0 RCX: 00007f2da0f8f749 [ 740.439649][T18099] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 740.439657][T18099] RBP: 00007f2da1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 740.439666][T18099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.439674][T18099] R13: 00007f2da11e6038 R14: 00007f2da11e5fa0 R15: 00007fffaadfc488 [ 740.439695][T18099] [ 740.847749][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'. [ 741.135950][T18115] nbd: illegal input index -560326505 [ 741.307796][T18125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 741.425146][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'. [ 741.457655][T18130] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 741.952902][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2655'. [ 742.239981][T18148] FAULT_INJECTION: forcing a failure. [ 742.239981][T18148] name failslab, interval 1, probability 0, space 0, times 0 [ 742.329953][T18148] CPU: 0 UID: 0 PID: 18148 Comm: syz.3.2658 Tainted: G U syzkaller #0 PREEMPT(full) [ 742.329979][T18148] Tainted: [U]=USER [ 742.329984][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.329992][T18148] Call Trace: [ 742.329997][T18148] [ 742.330003][T18148] dump_stack_lvl+0x16c/0x1f0 [ 742.330025][T18148] should_fail_ex+0x512/0x640 [ 742.330045][T18148] ? fs_reclaim_acquire+0xae/0x150 [ 742.330065][T18148] should_failslab+0xc2/0x120 [ 742.330084][T18148] __kmalloc_noprof+0xdd/0x880 [ 742.330106][T18148] ? tomoyo_encode2+0x100/0x3e0 [ 742.330125][T18148] ? tomoyo_encode2+0x100/0x3e0 [ 742.330139][T18148] tomoyo_encode2+0x100/0x3e0 [ 742.330156][T18148] tomoyo_encode+0x29/0x50 [ 742.330171][T18148] tomoyo_realpath_from_path+0x18f/0x6e0 [ 742.330193][T18148] tomoyo_mkdev_perm+0x22b/0x570 [ 742.330205][T18148] ? tomoyo_mkdev_perm+0x217/0x570 [ 742.330219][T18148] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 742.330235][T18148] ? do_raw_spin_lock+0x12c/0x2b0 [ 742.330261][T18148] ? do_raw_spin_unlock+0x172/0x230 [ 742.330284][T18148] ? __pfx_current_check_access_path+0x10/0x10 [ 742.330302][T18148] ? simple_lookup+0x105/0x1d0 [ 742.330320][T18148] tomoyo_path_mknod+0x12a/0x190 [ 742.330338][T18148] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 742.330357][T18148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.330384][T18148] security_path_mknod+0x161/0x310 [ 742.330399][T18148] do_mknodat+0x239/0x5d0 [ 742.330416][T18148] ? __pfx_do_mknodat+0x10/0x10 [ 742.330430][T18148] ? getname_flags.part.0+0x1c5/0x550 [ 742.330454][T18148] __x64_sys_mknod+0x87/0xb0 [ 742.330470][T18148] do_syscall_64+0xcd/0xfa0 [ 742.330489][T18148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.330503][T18148] RIP: 0033:0x7f2da0f8f749 [ 742.330515][T18148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.330528][T18148] RSP: 002b:00007f2da1ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 742.330542][T18148] RAX: ffffffffffffffda RBX: 00007f2da11e5fa0 RCX: 00007f2da0f8f749 [ 742.330551][T18148] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 742.330560][T18148] RBP: 00007f2da1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.330568][T18148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.330577][T18148] R13: 00007f2da11e6038 R14: 00007f2da11e5fa0 R15: 00007fffaadfc488 [ 742.330596][T18148] [ 742.330611][T18148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.711674][T18151] netlink: Conntrack attr has 16 unknown bytes [ 742.775817][T18153] netlink: Conntrack attr has 16 unknown bytes [ 743.523230][T18185] [U] [ 743.526034][T18185] [U] [ 743.528709][T18185] [U] [ 743.531380][T18185] [U] [ 743.549851][T18185] [U] [ 743.552565][T18185] [U] [ 743.555240][T18185] [U] [ 743.557912][T18185] [U] [ 743.561597][T18185] [U] [ 743.564293][T18185] [U] [ 743.566964][T18185] [U] [ 743.569635][T18185] [U] [ 743.595290][T18185] [U] [ 743.598005][T18185] [U] [ 743.600683][T18185] [U] [ 743.603355][T18185] [U] [ 743.631754][T18185] [U] [ 743.678539][T18185] [U] ¨E*É`£UÀܯ\‰E±…§JM^.Ð:Š…ƒ½L€ÈE×ÃNQÖÉ`‘º{ÏX  »œX×Þ ÕU9Ðœ Á´HŒKU:GSZ>F EMY›SÆÚ™PM†‘ϤÏ?¨ˆQZÞ8NF L,W±¯¤1!Õ„Ã_Ö+LN˜‚^DzЗÙ(̧)RTܬ>2÷–¿ÑUVØ Y·Ñ©XXÎ7`HVF•\FŸÚŽÌ˺µÅÇRH=ÅX¨Z…5É4ASÀ²ˆÔ—Ž,ÖÆ4ÂLËÆŠÚ¼Ï9‡±>BDš¶ÔØÏYÕÙ÷Y!F8M©NBΠE [ 743.962487][T18185] [U] SEÁQÒRÏ L´G¨QSF“žÒ¡Ë«4ª [ 743.983053][T18185] [U] Þ³P&‰G­­Ô³QÊÖ2÷MŸ}¿ [ 744.000468][T18185] [U] ÂÇÄË›Þ [ 744.014021][T18185] [U] Á«Yß̆/‹ÌYÑÊ ØÅYWKѨ„/ÓCÙS¥ßNSÀÃ-ž [ 744.040265][T18185] [U] Û2À“+¢Ñħ¯Ý)FD‰´ÄˈUÍ-ÌÖICÚÂÆÙ»CÓ¨.Q0‰UÚƒ ÏH€Hº/+‰LFÂÝO5R”,+Û…¿®1ÌJMÊ´Š2ÛO;±ØPTÔ|ÆS÷€$—ÑÍÍR¸I¹Ñ1KÆ)²¥)< [ 744.104509][T18185] [U] ]ÉR8¹”FC@¸Â´ÏWËEX©Õ}W ˆÂÏ¢¿ÛD¾ÊK)2(;¨Ã›$Ì-Dؾ¿š­«Î6J…¥×$ØNÕ§¶G™WÒÉS–Ðœ.IS3ÉA"_L]KO!ÉHHNÅ`T›L+Ù, [ 744.171268][T18185] [U] Ø•ÑرÖÊ [ 744.191046][T18185] [U] ÚÆÕ)ÛÙÛ•"¸²X¡Ó•WÂ!M¢+ˆAXÂÙÓ¹]µš¶K€ÝÈC2£IÍV"‰+š[•.–¶GZF€\`¦2WAOÁ`ÖWB9€Á9\5A×ÈÍ™ <¿Ä¥ÖŸZÀÂÚNP[`KZÛI¸ÄM™ÅRBµŒšÖ¤¹ÀÀ¾CÊß*LJÃN^…&C›#Ĩ×Ë=OÍ [ 744.311856][T18185] [U]  ƒS0ÕA¤ÒZÛß¡ÁJ’L}^DËÓS…Eš¸Í5J*Û…¼ [ 744.353874][T18185] [U] 4NEƒ6PÌ’¢¤«Ô–ÆÞÖ~J{ÇØÖ .ÐN[4—B˜×HI"¼?\Ý`´='JZÔ{ [ 744.401222][T18185] [U] Ñ¿¿×M‘X¿GœAÎ [ 744.421026][T18185] [U] °X «Ê = WQM¾¹KVÄAˆ¨ËφÂ^OÚC‚Ó’N~TÑÐH—F=Y@)J†E'4QGÛÆ?~ŒQÑÖÖ»ÛM¬Ò/÷M—BWM=Û/ˆ6ÎÊÒÔKŸV$9"‡ ¤G…ÝY­>Þ$¾ËP?Å$Ú*ËÞÆM©?I¾£ß† [ 744.449036][T18198] zswap: compressor not available [ 744.519009][T18185] [U] KIœÈ{BÊB¿ˆIÜAÇOÃK×­ÆGžÎ;NÁ†Â`…½«@N}$L­Á/ÍLA@²‘}–J“$5†Å<Ë›Y´OLœRFÔƒÅ,šG.S]ÂB>S¾O¹¬Z+Ö„Ì-&³É+RQ™™|-©Iƒ‘ÊMÉÖ„&]…-^ V3€8À€Ö¿}•ÜL‚NEQ [ 744.555451][T18211] netlink: Conntrack attr has 16 unknown bytes [ 745.119368][T18233] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 745.192986][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2677'. [ 745.228269][T18233] veth0_macvtap: left promiscuous mode [ 745.849569][T18251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 745.941733][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2680'. [ 746.000401][T18254] mkiss: ax0: crc mode is auto. [ 746.174155][T18255] ptp ptp0: new virtual clock ptp1 [ 746.223940][T18255] ptp ptp0: new virtual clock ptp2 [ 746.282760][T18255] ptp ptp0: new virtual clock ptp3 [ 746.298083][T18255] ptp ptp0: guarantee physical clock free running [ 747.157613][T18301] futex_wake_op: syz.0.2691 tries to shift op by -2048; fix this program [ 747.185635][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.191998][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.261817][T18303] size and base must be multiples of 4 kiB [ 747.300754][T18303] CPU: 0 UID: 0 PID: 18303 Comm: syz.0.2691 Tainted: G U syzkaller #0 PREEMPT(full) [ 747.300786][T18303] Tainted: [U]=USER [ 747.300897][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.300907][T18303] Call Trace: [ 747.300915][T18303] [ 747.300922][T18303] dump_stack_lvl+0x16c/0x1f0 [ 747.300945][T18303] mtrr_add+0xdf/0x110 [ 747.300966][T18303] mtrr_ioctl+0x7ef/0xcf0 [ 747.300985][T18303] ? __pfx_mtrr_ioctl+0x10/0x10 [ 747.301008][T18303] ? find_held_lock+0x2b/0x80 [ 747.301116][T18303] ? __fget_files+0x20e/0x3c0 [ 747.301133][T18303] ? __pfx_mtrr_ioctl+0x10/0x10 [ 747.301153][T18303] proc_reg_unlocked_ioctl+0x229/0x320 [ 747.301174][T18303] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 747.301194][T18303] __x64_sys_ioctl+0x18e/0x210 [ 747.301215][T18303] do_syscall_64+0xcd/0xfa0 [ 747.301233][T18303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.301250][T18303] RIP: 0033:0x7f02ed58f749 [ 747.301265][T18303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.301279][T18303] RSP: 002b:00007f02ee378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.301293][T18303] RAX: ffffffffffffffda RBX: 00007f02ed7e6090 RCX: 00007f02ed58f749 [ 747.301303][T18303] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 747.301312][T18303] RBP: 00007f02ed613f91 R08: 0000000000000000 R09: 0000000000000000 [ 747.301321][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.301330][T18303] R13: 00007f02ed7e6128 R14: 00007f02ed7e6090 R15: 00007ffc57a34878 [ 747.301349][T18303] [ 748.070918][T18326] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2697'. [ 748.424251][T18330] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2698'. [ 748.802599][T18342] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 748.819318][T18341] base or size exceeds the MTRR width [ 750.205750][T18383] netlink: Conntrack attr has 16 unknown bytes [ 751.176399][T18404] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 751.508918][T18416] mkiss: ax0: crc mode is auto. [ 751.636852][T18416] ptp ptp0: guarantee physical clock free running [ 752.425195][T18439] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 752.905393][T18452] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 753.638584][T18463] FAULT_INJECTION: forcing a failure. [ 753.638584][T18463] name failslab, interval 1, probability 0, space 0, times 0 [ 753.710493][T18463] CPU: 0 UID: 0 PID: 18463 Comm: syz.2.2731 Tainted: G U syzkaller #0 PREEMPT(full) [ 753.710519][T18463] Tainted: [U]=USER [ 753.710524][T18463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.710533][T18463] Call Trace: [ 753.710538][T18463] [ 753.710543][T18463] dump_stack_lvl+0x16c/0x1f0 [ 753.710566][T18463] should_fail_ex+0x512/0x640 [ 753.710586][T18463] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 753.710603][T18463] should_failslab+0xc2/0x120 [ 753.710621][T18463] kmem_cache_alloc_noprof+0x75/0x6e0 [ 753.710635][T18463] ? security_file_alloc+0x34/0x2b0 [ 753.710654][T18463] ? security_file_alloc+0x34/0x2b0 [ 753.710667][T18463] security_file_alloc+0x34/0x2b0 [ 753.710682][T18463] init_file+0x93/0x4c0 [ 753.710700][T18463] alloc_empty_file+0x73/0x1e0 [ 753.710719][T18463] path_openat+0xda/0x2cb0 [ 753.710740][T18463] ? __pfx_path_openat+0x10/0x10 [ 753.710756][T18463] ? __lock_acquire+0xb8a/0x1c90 [ 753.710776][T18463] do_filp_open+0x20b/0x470 [ 753.710791][T18463] ? __pfx_do_filp_open+0x10/0x10 [ 753.710819][T18463] ? alloc_fd+0x471/0x7d0 [ 753.710838][T18463] do_sys_openat2+0x11b/0x1d0 [ 753.710857][T18463] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.710883][T18463] __x64_sys_openat+0x174/0x210 [ 753.710902][T18463] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.710938][T18463] do_syscall_64+0xcd/0xfa0 [ 753.710957][T18463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.710972][T18463] RIP: 0033:0x7f059198f749 [ 753.710984][T18463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.710998][T18463] RSP: 002b:00007f0592753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.711012][T18463] RAX: ffffffffffffffda RBX: 00007f0591be6090 RCX: 00007f059198f749 [ 753.711021][T18463] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 753.711030][T18463] RBP: 00007f0591a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.711039][T18463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.711050][T18463] R13: 00007f0591be6128 R14: 00007f0591be6090 R15: 00007ffc11611bf8 [ 753.711069][T18463] [ 754.558235][T18479] FAULT_INJECTION: forcing a failure. [ 754.558235][T18479] name failslab, interval 1, probability 0, space 0, times 0 [ 754.720352][T18479] CPU: 0 UID: 0 PID: 18479 Comm: syz.1.2736 Tainted: G U syzkaller #0 PREEMPT(full) [ 754.720379][T18479] Tainted: [U]=USER [ 754.720384][T18479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.720392][T18479] Call Trace: [ 754.720397][T18479] [ 754.720402][T18479] dump_stack_lvl+0x16c/0x1f0 [ 754.720425][T18479] should_fail_ex+0x512/0x640 [ 754.720446][T18479] ? fs_reclaim_acquire+0xae/0x150 [ 754.720466][T18479] should_failslab+0xc2/0x120 [ 754.720485][T18479] __kmalloc_noprof+0xdd/0x880 [ 754.720507][T18479] ? tomoyo_encode2+0x100/0x3e0 [ 754.720526][T18479] ? tomoyo_encode2+0x100/0x3e0 [ 754.720540][T18479] tomoyo_encode2+0x100/0x3e0 [ 754.720558][T18479] tomoyo_encode+0x29/0x50 [ 754.720573][T18479] tomoyo_realpath_from_path+0x18f/0x6e0 [ 754.720591][T18479] ? tomoyo_profile+0x47/0x60 [ 754.720611][T18479] tomoyo_path_number_perm+0x245/0x580 [ 754.720625][T18479] ? tomoyo_path_number_perm+0x237/0x580 [ 754.720639][T18479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.720653][T18479] ? find_held_lock+0x2b/0x80 [ 754.720685][T18479] ? find_held_lock+0x2b/0x80 [ 754.720699][T18479] ? hook_file_ioctl_common+0x145/0x410 [ 754.720719][T18479] ? __fget_files+0x20e/0x3c0 [ 754.720736][T18479] security_file_ioctl+0x9b/0x240 [ 754.720752][T18479] __x64_sys_ioctl+0xb7/0x210 [ 754.720775][T18479] do_syscall_64+0xcd/0xfa0 [ 754.720794][T18479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.720808][T18479] RIP: 0033:0x7fa46798f749 [ 754.720820][T18479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.720834][T18479] RSP: 002b:00007fa46880b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.720848][T18479] RAX: ffffffffffffffda RBX: 00007fa467be6180 RCX: 00007fa46798f749 [ 754.720857][T18479] RDX: 0010000000000402 RSI: 0000000000005760 RDI: 0000000000000003 [ 754.720865][T18479] RBP: 00007fa46880b090 R08: 0000000000000000 R09: 0000000000000000 [ 754.720873][T18479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.720881][T18479] R13: 00007fa467be6218 R14: 00007fa467be6180 R15: 00007ffdf3319d08 [ 754.720901][T18479] [ 754.720915][T18479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 755.109400][T18492] snd_virmidi snd_virmidi.0: control -12839:2047:3:yÚüd:1 is already present [ 756.594496][T18512] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 756.649293][T18512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2746'. [ 756.854229][T18522] vhci_hcd: not connected 4 [ 757.404997][ C0] sd 0:0:1:0: [sda] tag#4872 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 757.415520][ C0] sd 0:0:1:0: [sda] tag#4872 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 758.150369][T18564] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 758.515366][T18554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 758.546549][T18554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.575479][T18554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 758.608050][T18554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.638056][T18554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 758.883035][T18574] vhci_hcd: not connected 4 [ 759.002043][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'. [ 759.071081][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'. [ 759.816826][T18596] FAULT_INJECTION: forcing a failure. [ 759.816826][T18596] name failslab, interval 1, probability 0, space 0, times 0 [ 759.952594][T18596] CPU: 0 UID: 0 PID: 18596 Comm: syz.1.2762 Tainted: G U syzkaller #0 PREEMPT(full) [ 759.952620][T18596] Tainted: [U]=USER [ 759.952629][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.952638][T18596] Call Trace: [ 759.952647][T18596] [ 759.952655][T18596] dump_stack_lvl+0x16c/0x1f0 [ 759.952680][T18596] should_fail_ex+0x512/0x640 [ 759.952702][T18596] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 759.952720][T18596] should_failslab+0xc2/0x120 [ 759.952739][T18596] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 759.952755][T18596] ? __d_alloc+0x32/0xae0 [ 759.952775][T18596] ? __d_alloc+0x32/0xae0 [ 759.952788][T18596] __d_alloc+0x32/0xae0 [ 759.952802][T18596] ? stack_trace_save+0x8e/0xc0 [ 759.952820][T18596] d_alloc_parallel+0x111/0x1510 [ 759.952841][T18596] ? __lock_acquire+0xb8a/0x1c90 [ 759.952864][T18596] ? __pfx_d_alloc_parallel+0x10/0x10 [ 759.952885][T18596] ? lockdep_init_map_type+0x5c/0x280 [ 759.952904][T18596] ? lockdep_init_map_type+0x5c/0x280 [ 759.952926][T18596] __lookup_slow+0x193/0x460 [ 759.952946][T18596] ? __pfx___lookup_slow+0x10/0x10 [ 759.952976][T18596] ? lookup_fast+0x156/0x610 [ 759.952988][T18596] ? _raw_spin_unlock+0x28/0x50 [ 759.953004][T18596] walk_component+0x353/0x5b0 [ 759.953018][T18596] link_path_walk+0x627/0xe20 [ 759.953038][T18596] path_openat+0x1b0/0x2cb0 [ 759.953059][T18596] ? __pfx_path_openat+0x10/0x10 [ 759.953076][T18596] ? __lock_acquire+0xb8a/0x1c90 [ 759.953095][T18596] do_filp_open+0x20b/0x470 [ 759.953110][T18596] ? __pfx_do_filp_open+0x10/0x10 [ 759.953142][T18596] ? alloc_fd+0x471/0x7d0 [ 759.953161][T18596] do_sys_openat2+0x11b/0x1d0 [ 759.953181][T18596] ? __pfx_do_sys_openat2+0x10/0x10 [ 759.953207][T18596] __x64_sys_openat+0x174/0x210 [ 759.953227][T18596] ? __pfx___x64_sys_openat+0x10/0x10 [ 759.953256][T18596] do_syscall_64+0xcd/0xfa0 [ 759.953274][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.953288][T18596] RIP: 0033:0x7fa46798f749 [ 759.953300][T18596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.953314][T18596] RSP: 002b:00007fa46882c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 759.953328][T18596] RAX: ffffffffffffffda RBX: 00007fa467be6090 RCX: 00007fa46798f749 [ 759.953363][T18596] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 759.953379][T18596] RBP: 00007fa467a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 759.953388][T18596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.953397][T18596] R13: 00007fa467be6128 R14: 00007fa467be6090 R15: 00007ffdf3319d08 [ 759.953417][T18596] [ 760.687131][T13903] Bluetooth: hci1: command 0x0c1a tx timeout [ 760.693269][T13903] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.699286][T13903] Bluetooth: hci0: command 0x0c1a tx timeout [ 760.715017][T13903] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.935776][T18607] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 761.317228][T18621] Invalid ELF header magic: != ELF [ 761.923269][T18634] ubi0: attaching mtd1 [ 761.937253][T18634] ubi0: scanning is finished [ 761.953412][T18634] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 762.126022][T18622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.454326][T18634] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 762.793969][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 764.797309][T18666] netlink: Conntrack attr has 16 unknown bytes [ 764.949193][T18668] netlink: 'syz.3.2781': attribute type 11 has an invalid length. [ 765.136701][T18677] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2784'. [ 765.637032][T18686] Console: switching to colour frame buffer device 128x48 [ 766.266236][T18696] FAULT_INJECTION: forcing a failure. [ 766.266236][T18696] name failslab, interval 1, probability 0, space 0, times 0 [ 766.438734][T18696] CPU: 0 UID: 0 PID: 18696 Comm: syz.0.2787 Tainted: G U syzkaller #0 PREEMPT(full) [ 766.438760][T18696] Tainted: [U]=USER [ 766.438764][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.438773][T18696] Call Trace: [ 766.438777][T18696] [ 766.438783][T18696] dump_stack_lvl+0x16c/0x1f0 [ 766.438807][T18696] should_fail_ex+0x512/0x640 [ 766.438827][T18696] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 766.438843][T18696] should_failslab+0xc2/0x120 [ 766.438862][T18696] kmem_cache_alloc_noprof+0x75/0x6e0 [ 766.438876][T18696] ? find_held_lock+0x2b/0x80 [ 766.438889][T18696] ? getname_flags.part.0+0x4c/0x550 [ 766.438918][T18696] ? getname_flags.part.0+0x4c/0x550 [ 766.438936][T18696] ? find_held_lock+0x2b/0x80 [ 766.438948][T18696] getname_flags.part.0+0x4c/0x550 [ 766.438970][T18696] getname_flags+0x93/0xf0 [ 766.438984][T18696] vfs_fstatat+0xe1/0xf0 [ 766.439004][T18696] __do_sys_newfstatat+0x97/0x120 [ 766.439027][T18696] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 766.439046][T18696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.439075][T18696] ? syscall_user_dispatch+0x78/0x140 [ 766.439094][T18696] do_syscall_64+0xcd/0xfa0 [ 766.439112][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.439126][T18696] RIP: 0033:0x7f02ed58f749 [ 766.439141][T18696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.439272][T18696] RSP: 002b:00007f02ee357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 766.439289][T18696] RAX: ffffffffffffffda RBX: 00007f02ed7e6180 RCX: 00007f02ed58f749 [ 766.439299][T18696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.439307][T18696] RBP: 00007f02ee357090 R08: 0000000000000000 R09: 0000000000000000 [ 766.439316][T18696] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 766.439324][T18696] R13: 00007f02ed7e6218 R14: 00007f02ed7e6180 R15: 00007ffc57a34878 [ 766.439346][T18696] [ 767.437701][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2788'. [ 767.807340][T18721] bond0: (slave bond_slave_1): Releasing backup interface [ 768.282782][T18742] FAULT_INJECTION: forcing a failure. [ 768.282782][T18742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.460795][T18742] CPU: 0 UID: 0 PID: 18742 Comm: syz.2.2798 Tainted: G U syzkaller #0 PREEMPT(full) [ 768.460819][T18742] Tainted: [U]=USER [ 768.460825][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.460833][T18742] Call Trace: [ 768.460838][T18742] [ 768.460843][T18742] dump_stack_lvl+0x16c/0x1f0 [ 768.460866][T18742] should_fail_ex+0x512/0x640 [ 768.460890][T18742] strncpy_from_user+0x3b/0x2e0 [ 768.460911][T18742] getname_flags.part.0+0x8f/0x550 [ 768.460935][T18742] getname_flags+0x93/0xf0 [ 768.460949][T18742] vfs_fstatat+0xe1/0xf0 [ 768.460969][T18742] __do_sys_newfstatat+0x97/0x120 [ 768.460989][T18742] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 768.461014][T18742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 768.461043][T18742] ? syscall_user_dispatch+0x78/0x140 [ 768.461064][T18742] do_syscall_64+0xcd/0xfa0 [ 768.461082][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.461096][T18742] RIP: 0033:0x7f059198f749 [ 768.461108][T18742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.461121][T18742] RSP: 002b:00007f058fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 768.461135][T18742] RAX: ffffffffffffffda RBX: 00007f0591be6180 RCX: 00007f059198f749 [ 768.461145][T18742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.461153][T18742] RBP: 00007f058fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 768.461161][T18742] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 768.461170][T18742] R13: 00007f0591be6218 R14: 00007f0591be6180 R15: 00007ffc11611bf8 [ 768.461188][T18742] [ 769.079373][T18760] netlink: Conntrack attr has 16 unknown bytes [ 769.303117][T18769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2806'. [ 769.352725][T18769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.396173][T18769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.445398][T18769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.467515][T18769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.777341][T18776] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.784198][T18776] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 770.011800][T18777] FAULT_INJECTION: forcing a failure. [ 770.011800][T18777] name fail_futex, interval 1, probability 0, space 0, times 0 [ 770.089157][T18777] CPU: 0 UID: 0 PID: 18777 Comm: syz.3.2810 Tainted: G U syzkaller #0 PREEMPT(full) [ 770.089184][T18777] Tainted: [U]=USER [ 770.089188][T18777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.089197][T18777] Call Trace: [ 770.089202][T18777] [ 770.089207][T18777] dump_stack_lvl+0x16c/0x1f0 [ 770.089230][T18777] should_fail_ex+0x512/0x640 [ 770.089254][T18777] get_futex_key+0x1d0/0x1560 [ 770.089275][T18777] ? __pfx_get_futex_key+0x10/0x10 [ 770.089293][T18777] ? find_held_lock+0x2b/0x80 [ 770.089308][T18777] ? __handle_mm_fault+0x1529/0x2aa0 [ 770.089332][T18777] futex_wake+0xea/0x530 [ 770.089355][T18777] ? __pfx_futex_wake+0x10/0x10 [ 770.089380][T18777] ? css_rstat_updated+0x1c2/0x510 [ 770.089398][T18777] do_futex+0x1e3/0x350 [ 770.089417][T18777] ? __pfx_do_futex+0x10/0x10 [ 770.089435][T18777] ? find_held_lock+0x2b/0x80 [ 770.089449][T18777] ? handle_mm_fault+0x2ab/0xd10 [ 770.089471][T18777] __x64_sys_futex+0x1e0/0x4c0 [ 770.089492][T18777] ? __pfx___x64_sys_futex+0x10/0x10 [ 770.089518][T18777] do_syscall_64+0xcd/0xfa0 [ 770.089536][T18777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.089550][T18777] RIP: 0033:0x7f2da0f8f749 [ 770.089562][T18777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.089576][T18777] RSP: 002b:00007fffaadfc5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 770.089590][T18777] RAX: ffffffffffffffda RBX: 00007f2da11e5fa8 RCX: 00007f2da0f8f749 [ 770.089599][T18777] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2da11e5fa8 [ 770.089607][T18777] RBP: 0000000000000000 R08: 0000000000000002 R09: 00000003aadfc8df [ 770.089616][T18777] R10: 00007f2da11e5fa0 R11: 0000000000000246 R12: 00007f2da11e5fac [ 770.089624][T18777] R13: 00007f2da11e5fa0 R14: 0000000000001c26 R15: 0000000000000003 [ 770.089648][T18777] syzkaller syzkaller login: [ 770.726219][T18786] netlink: Conntrack attr has 16 unknown bytes [ 771.124555][T18800] program syz.1.2816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.466672][T18803] FAULT_INJECTION: forcing a failure. [ 771.466672][T18803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.643146][T18803] CPU: 0 UID: 0 PID: 18803 Comm: syz.3.2815 Tainted: G U syzkaller #0 PREEMPT(full) [ 771.643172][T18803] Tainted: [U]=USER [ 771.643177][T18803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.643185][T18803] Call Trace: [ 771.643190][T18803] [ 771.643195][T18803] dump_stack_lvl+0x16c/0x1f0 [ 771.643217][T18803] should_fail_ex+0x512/0x640 [ 771.643241][T18803] _copy_to_user+0x32/0xd0 [ 771.643256][T18803] simple_read_from_buffer+0xcb/0x170 [ 771.643280][T18803] proc_fail_nth_read+0x197/0x240 [ 771.643296][T18803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.643313][T18803] ? rw_verify_area+0xcf/0x6c0 [ 771.643326][T18803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.643341][T18803] vfs_read+0x1e4/0xcf0 [ 771.643358][T18803] ? __pfx___mutex_lock+0x10/0x10 [ 771.643377][T18803] ? __pfx_vfs_read+0x10/0x10 [ 771.643396][T18803] ? __fget_files+0x20e/0x3c0 [ 771.643416][T18803] ksys_read+0x12a/0x250 [ 771.643430][T18803] ? __pfx_ksys_read+0x10/0x10 [ 771.643444][T18803] ? syscall_user_dispatch+0x78/0x140 [ 771.643463][T18803] do_syscall_64+0xcd/0xfa0 [ 771.643481][T18803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.643496][T18803] RIP: 0033:0x7f2da0f8e15c [ 771.643513][T18803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 771.643526][T18803] RSP: 002b:00007f2da1e8c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 771.643540][T18803] RAX: ffffffffffffffda RBX: 00007f2da11e6180 RCX: 00007f2da0f8e15c [ 771.643550][T18803] RDX: 000000000000000f RSI: 00007f2da1e8c0a0 RDI: 0000000000000003 [ 771.643558][T18803] RBP: 00007f2da1e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 771.643566][T18803] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 771.643575][T18803] R13: 00007f2da11e6218 R14: 00007f2da11e6180 R15: 00007fffaadfc488 [ 771.643594][T18803] [ 772.730115][T18826] netlink: Conntrack attr has 16 unknown bytes [ 772.760649][T18828] nbd: must specify a size in bytes for the device [ 772.928831][T18831] Invalid ELF header magic: != ELF [ 773.514662][T18834] FAULT_INJECTION: forcing a failure. [ 773.514662][T18834] name failslab, interval 1, probability 0, space 0, times 0 [ 773.680173][T18834] CPU: 0 UID: 0 PID: 18834 Comm: syz.3.2821 Tainted: G U syzkaller #0 PREEMPT(full) [ 773.680201][T18834] Tainted: [U]=USER [ 773.680205][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.680214][T18834] Call Trace: [ 773.680219][T18834] [ 773.680225][T18834] dump_stack_lvl+0x16c/0x1f0 [ 773.680248][T18834] should_fail_ex+0x512/0x640 [ 773.680269][T18834] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 773.680288][T18834] should_failslab+0xc2/0x120 [ 773.680307][T18834] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 773.680323][T18834] ? look_up_lock_class+0x59/0x150 [ 773.680339][T18834] ? __get_vm_area_node+0x101/0x330 [ 773.680360][T18834] ? __get_vm_area_node+0x101/0x330 [ 773.680388][T18834] __get_vm_area_node+0x101/0x330 [ 773.680407][T18834] ? __lock_acquire+0xb8a/0x1c90 [ 773.680429][T18834] __vmalloc_node_range_noprof+0x271/0x1480 [ 773.680449][T18834] ? n_tty_open+0x1a/0x170 [ 773.680470][T18834] ? do_raw_spin_unlock+0x172/0x230 [ 773.680488][T18834] ? n_tty_open+0x1a/0x170 [ 773.680510][T18834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 773.680529][T18834] ? console_unlock+0x184/0x210 [ 773.680543][T18834] ? __pfx_console_unlock+0x10/0x10 [ 773.680559][T18834] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 773.680579][T18834] ? n_tty_open+0x1a/0x170 [ 773.680595][T18834] __vmalloc_node_noprof+0xad/0xf0 [ 773.680613][T18834] ? n_tty_open+0x1a/0x170 [ 773.680630][T18834] ? __pfx_n_tty_open+0x10/0x10 [ 773.680647][T18834] n_tty_open+0x1a/0x170 [ 773.680664][T18834] ? __pfx_n_tty_open+0x10/0x10 [ 773.680680][T18834] tty_ldisc_open+0x9f/0x120 [ 773.680694][T18834] tty_ldisc_setup+0x40/0x100 [ 773.680708][T18834] tty_init_dev.part.0+0x1ec/0x500 [ 773.680726][T18834] tty_open+0xa4f/0xf90 [ 773.680745][T18834] ? __pfx_tty_open+0x10/0x10 [ 773.680761][T18834] ? chrdev_open+0x10b/0x6a0 [ 773.680780][T18834] ? __pfx_tty_open+0x10/0x10 [ 773.680795][T18834] chrdev_open+0x234/0x6a0 [ 773.680811][T18834] ? __pfx_apparmor_file_open+0x10/0x10 [ 773.680831][T18834] ? __pfx_chrdev_open+0x10/0x10 [ 773.680848][T18834] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 773.680867][T18834] do_dentry_open+0x982/0x1530 [ 773.680883][T18834] ? __pfx_chrdev_open+0x10/0x10 [ 773.680904][T18834] vfs_open+0x82/0x3f0 [ 773.680925][T18834] path_openat+0x1de4/0x2cb0 [ 773.680946][T18834] ? __pfx_path_openat+0x10/0x10 [ 773.680962][T18834] ? __lock_acquire+0xb8a/0x1c90 [ 773.680982][T18834] do_filp_open+0x20b/0x470 [ 773.680997][T18834] ? __pfx_do_filp_open+0x10/0x10 [ 773.681026][T18834] ? alloc_fd+0x471/0x7d0 [ 773.681049][T18834] do_sys_openat2+0x11b/0x1d0 [ 773.681068][T18834] ? __pfx_do_sys_openat2+0x10/0x10 [ 773.681095][T18834] __x64_sys_openat+0x174/0x210 [ 773.681115][T18834] ? __pfx___x64_sys_openat+0x10/0x10 [ 773.681143][T18834] do_syscall_64+0xcd/0xfa0 [ 773.681167][T18834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.681182][T18834] RIP: 0033:0x7f2da0f8f749 [ 773.681195][T18834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.681212][T18834] RSP: 002b:00007f2da1e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 773.681227][T18834] RAX: ffffffffffffffda RBX: 00007f2da11e6180 RCX: 00007f2da0f8f749 [ 773.681237][T18834] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 773.681246][T18834] RBP: 00007f2da1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 773.681255][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.681263][T18834] R13: 00007f2da11e6218 R14: 00007f2da11e6180 R15: 00007fffaadfc488 [ 773.681284][T18834] [ 774.442437][T18834] syz.3.2821: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 774.474483][T18834] CPU: 0 UID: 0 PID: 18834 Comm: syz.3.2821 Tainted: G U syzkaller #0 PREEMPT(full) [ 774.474510][T18834] Tainted: [U]=USER [ 774.474515][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.474524][T18834] Call Trace: [ 774.474529][T18834] [ 774.474534][T18834] dump_stack_lvl+0x16c/0x1f0 [ 774.474557][T18834] warn_alloc+0x248/0x3a0 [ 774.474574][T18834] ? __pfx_warn_alloc+0x10/0x10 [ 774.474586][T18834] ? rcu_is_watching+0x12/0xc0 [ 774.474601][T18834] ? __kmalloc_cache_node_noprof+0x2df/0x7a0 [ 774.474623][T18834] ? __kasan_kmalloc+0x8a/0xb0 [ 774.474640][T18834] ? __get_vm_area_node+0x208/0x330 [ 774.474663][T18834] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 774.474682][T18834] ? do_raw_spin_unlock+0x172/0x230 [ 774.474700][T18834] ? n_tty_open+0x1a/0x170 [ 774.474722][T18834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.474741][T18834] ? console_unlock+0x184/0x210 [ 774.474754][T18834] ? __pfx_console_unlock+0x10/0x10 [ 774.474769][T18834] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 774.474789][T18834] ? n_tty_open+0x1a/0x170 [ 774.474805][T18834] __vmalloc_node_noprof+0xad/0xf0 [ 774.474824][T18834] ? n_tty_open+0x1a/0x170 [ 774.474840][T18834] ? __pfx_n_tty_open+0x10/0x10 [ 774.474858][T18834] n_tty_open+0x1a/0x170 [ 774.474874][T18834] ? __pfx_n_tty_open+0x10/0x10 [ 774.474890][T18834] tty_ldisc_open+0x9f/0x120 [ 774.474903][T18834] tty_ldisc_setup+0x40/0x100 [ 774.474917][T18834] tty_init_dev.part.0+0x1ec/0x500 [ 774.474935][T18834] tty_open+0xa4f/0xf90 [ 774.474955][T18834] ? __pfx_tty_open+0x10/0x10 [ 774.474971][T18834] ? chrdev_open+0x10b/0x6a0 [ 774.474989][T18834] ? __pfx_tty_open+0x10/0x10 [ 774.475014][T18834] chrdev_open+0x234/0x6a0 [ 774.475030][T18834] ? __pfx_apparmor_file_open+0x10/0x10 [ 774.475052][T18834] ? __pfx_chrdev_open+0x10/0x10 [ 774.475070][T18834] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 774.475090][T18834] do_dentry_open+0x982/0x1530 [ 774.475106][T18834] ? __pfx_chrdev_open+0x10/0x10 [ 774.475127][T18834] vfs_open+0x82/0x3f0 [ 774.475148][T18834] path_openat+0x1de4/0x2cb0 [ 774.475170][T18834] ? __pfx_path_openat+0x10/0x10 [ 774.475186][T18834] ? __lock_acquire+0xb8a/0x1c90 [ 774.475206][T18834] do_filp_open+0x20b/0x470 [ 774.475221][T18834] ? __pfx_do_filp_open+0x10/0x10 [ 774.475251][T18834] ? alloc_fd+0x471/0x7d0 [ 774.475270][T18834] do_sys_openat2+0x11b/0x1d0 [ 774.475296][T18834] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.475324][T18834] __x64_sys_openat+0x174/0x210 [ 774.475344][T18834] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.475372][T18834] do_syscall_64+0xcd/0xfa0 [ 774.475391][T18834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.475405][T18834] RIP: 0033:0x7f2da0f8f749 [ 774.475418][T18834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.475432][T18834] RSP: 002b:00007f2da1e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.475446][T18834] RAX: ffffffffffffffda RBX: 00007f2da11e6180 RCX: 00007f2da0f8f749 [ 774.475456][T18834] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 774.475465][T18834] RBP: 00007f2da1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.475474][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.475482][T18834] R13: 00007f2da11e6218 R14: 00007f2da11e6180 R15: 00007fffaadfc488 [ 774.475503][T18834] [ 774.475508][T18834] Mem-Info: [ 775.033814][T18858] netlink: 'syz.0.2832': attribute type 1 has an invalid length. [ 775.052052][T18858] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2832'. [ 775.214159][T18834] active_anon:50346 inactive_anon:11 isolated_anon:0 [ 775.214159][T18834] active_file:6981 inactive_file:50088 isolated_file:0 [ 775.214159][T18834] unevictable:768 dirty:504 writeback:0 [ 775.214159][T18834] slab_reclaimable:11868 slab_unreclaimable:93268 [ 775.214159][T18834] mapped:37446 shmem:22750 pagetables:1259 [ 775.214159][T18834] sec_pagetables:0 bounce:0 [ 775.214159][T18834] kernel_misc_reclaimable:0 [ 775.214159][T18834] free:1276508 free_pcp:19174 free_cma:0 [ 775.342097][T18834] Node 0 active_anon:207504kB inactive_anon:44kB active_file:29276kB inactive_file:200220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153788kB dirty:2016kB writeback:0kB shmem:92644kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:34816kB kernel_stack:12208kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 775.413222][T18834] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 775.476474][T18834] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.540791][T18834] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 775.554516][T18834] Node 0 DMA32 free:1207984kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:219672kB inactive_anon:44kB active_file:29276kB inactive_file:200220kB unevictable:1536kB writepending:2016kB zspages:8kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:23948kB local_pcp:23948kB free_cma:0kB [ 775.626064][T18834] lowmem_reserve[]: 0 0 1 1 1 [ 775.636359][T18834] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 775.698807][T18834] lowmem_reserve[]: 0 0 0 0 0 [ 775.709076][T18834] Node 1 Normal free:3860452kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51348kB local_pcp:51348kB free_cma:0kB [ 775.768951][T18834] lowmem_reserve[]: 0 0 0 0 0 [ 775.775524][T18834] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 775.789234][T18834] Node 0 DMA32: 417*4kB (UME) 640*8kB (UME) 208*16kB (UME) 1189*32kB (UME) 856*64kB (UME) 632*128kB (UME) 414*256kB (UM) 204*512kB (UM) 117*1024kB (UME) 4*2048kB (UE) 165*4096kB (UM) = 1198116kB [ 775.810267][T18834] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 775.846178][T18834] Node 1 Normal: 38*4kB (UME) 49*8kB (UME) 16*16kB (UME) 136*32kB (UME) 49*64kB (UME) 39*128kB (UME) 19*256kB (UM) 3*512kB (ME) 1*1024kB (U) 3*2048kB (UME) 936*4096kB (M) = 3860704kB [ 775.884909][T18834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.909179][T18834] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB [ 775.928424][T18834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.950698][T18834] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 775.970796][T18834] 89583 total pagecache pages [ 775.981579][T18834] 2 pages in swap cache [ 776.002254][T18834] Free swap = 124980kB [ 776.013671][T18834] Total swap = 124996kB [ 776.022937][T18834] 2097051 pages RAM [ 776.031252][T18834] 0 pages HighMem/MovableOnly [ 776.040515][T18834] 428695 pages reserved [ 776.050624][T18834] 0 pages cma reserved [ 776.059349][T18834] tty tty29: ldisc open failed (-12), clearing slot 28 [ 776.078221][T18853] pty pty32: ldisc open failed (-12), clearing slot 32 [ 776.111578][T18855] pty pty183: ldisc open failed (-12), clearing slot 183 [ 776.158328][T18857] tty tty1: ldisc open failed (-12), clearing slot 0 [ 776.454413][T18868] netlink: Conntrack attr has 16 unknown bytes [ 776.984446][T18881] ubi0: attaching mtd1 [ 776.992263][T18881] ubi0 error: ubi_attach_mtd_dev: bad VID header (266109) or data offsets (266173) [ 777.050372][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 777.349423][T18883] zswap: compressor - not available [ 778.062306][ T5149] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 778.776009][T18918] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 778.805937][T18918] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 779.861300][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2851'. [ 780.128511][T18936] bond0: (slave bond_slave_0): Releasing backup interface [ 780.881968][T18956] zswap: compressor - not available [ 781.570175][T18969] ubi0: attaching mtd1 [ 781.627529][T18969] ubi0 error: ubi_attach_mtd_dev: bad VID header (266109) or data offsets (266173) [ 781.719281][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 782.724562][T19009] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 783.195331][T19014] netlink: Conntrack attr has 16 unknown bytes [ 783.412778][T19016] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2868'. [ 783.445649][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 783.485868][T19016] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 783.899094][T19027] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2873'. [ 783.929244][T19031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2874'. [ 785.497103][T19066] ptrace attach of "./syz-executor exec"[16624] was attempted by ""[19066] [ 785.967144][T19071] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 787.209368][T19092] Console: switching to colour VGA+ 80x25 [ 787.304769][T19100] Console: switching to colour frame buffer device 128x48 [ 787.851944][T19109] netlink: Conntrack attr has 16 unknown bytes [ 788.264704][T19119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2896'. [ 789.623251][T19164] netlink: 'syz.3.2908': attribute type 9 has an invalid length. [ 789.672962][T19169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'. [ 790.269106][T19189] FAULT_INJECTION: forcing a failure. [ 790.269106][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 790.295779][T19189] CPU: 0 UID: 0 PID: 19189 Comm: syz.0.2913 Tainted: G U syzkaller #0 PREEMPT(full) [ 790.295807][T19189] Tainted: [U]=USER [ 790.295812][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.295822][T19189] Call Trace: [ 790.295828][T19189] [ 790.295834][T19189] dump_stack_lvl+0x16c/0x1f0 [ 790.295857][T19189] should_fail_ex+0x512/0x640 [ 790.295878][T19189] ? fs_reclaim_acquire+0xae/0x150 [ 790.295898][T19189] should_failslab+0xc2/0x120 [ 790.295917][T19189] __kmalloc_noprof+0xdd/0x880 [ 790.295938][T19189] ? kfree+0x252/0x6d0 [ 790.295949][T19189] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 790.295970][T19189] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 790.295985][T19189] tomoyo_realpath_from_path+0xc2/0x6e0 [ 790.296014][T19189] tomoyo_check_open_permission+0x2ab/0x3c0 [ 790.296030][T19189] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 790.296064][T19189] ? do_raw_spin_lock+0x12c/0x2b0 [ 790.296090][T19189] tomoyo_file_open+0x6b/0x90 [ 790.296109][T19189] security_file_open+0x84/0x1e0 [ 790.296125][T19189] do_dentry_open+0x596/0x1530 [ 790.296147][T19189] vfs_open+0x82/0x3f0 [ 790.296168][T19189] path_openat+0x1de4/0x2cb0 [ 790.296190][T19189] ? __pfx_path_openat+0x10/0x10 [ 790.296206][T19189] ? __lock_acquire+0xb8a/0x1c90 [ 790.296226][T19189] do_filp_open+0x20b/0x470 [ 790.296242][T19189] ? __pfx_do_filp_open+0x10/0x10 [ 790.296271][T19189] ? alloc_fd+0x471/0x7d0 [ 790.296290][T19189] do_sys_openat2+0x11b/0x1d0 [ 790.296310][T19189] ? __pfx_do_sys_openat2+0x10/0x10 [ 790.296336][T19189] __x64_sys_openat+0x174/0x210 [ 790.296356][T19189] ? __pfx___x64_sys_openat+0x10/0x10 [ 790.296383][T19189] do_syscall_64+0xcd/0xfa0 [ 790.296401][T19189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.296416][T19189] RIP: 0033:0x7f02ed58f749 [ 790.296429][T19189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.296443][T19189] RSP: 002b:00007f02ee399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 790.296457][T19189] RAX: ffffffffffffffda RBX: 00007f02ed7e5fa0 RCX: 00007f02ed58f749 [ 790.296467][T19189] RDX: 0000000000080800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 790.296477][T19189] RBP: 00007f02ed613f91 R08: 0000000000000000 R09: 0000000000000000 [ 790.296485][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.296495][T19189] R13: 00007f02ed7e6038 R14: 00007f02ed7e5fa0 R15: 00007ffc57a34878 [ 790.296515][T19189] [ 790.297645][T19189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.407021][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 791.431041][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2921'. [ 791.448340][T19211] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2920'. [ 791.491241][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'. [ 791.768833][T19223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2924'. [ 792.077132][T19234] hub 1-0:1.0: USB hub found [ 792.131880][T19240] FAULT_INJECTION: forcing a failure. [ 792.131880][T19240] name failslab, interval 1, probability 0, space 0, times 0 [ 792.162398][T19234] hub 1-0:1.0: 1 port detected [ 792.169104][T19240] CPU: 0 UID: 0 PID: 19240 Comm: syz.2.2931 Tainted: G U syzkaller #0 PREEMPT(full) [ 792.169130][T19240] Tainted: [U]=USER [ 792.169134][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 792.169143][T19240] Call Trace: [ 792.169148][T19240] [ 792.169154][T19240] dump_stack_lvl+0x16c/0x1f0 [ 792.169177][T19240] should_fail_ex+0x512/0x640 [ 792.169198][T19240] ? __kmalloc_noprof+0xca/0x880 [ 792.169221][T19240] should_failslab+0xc2/0x120 [ 792.169242][T19240] __kmalloc_noprof+0xdd/0x880 [ 792.169263][T19240] ? kernfs_fop_write_iter+0x237/0x570 [ 792.169281][T19240] ? kernfs_fop_write_iter+0x237/0x570 [ 792.169293][T19240] kernfs_fop_write_iter+0x237/0x570 [ 792.169309][T19240] vfs_write+0x7d3/0x11d0 [ 792.169326][T19240] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 792.169340][T19240] ? __pfx___mutex_lock+0x10/0x10 [ 792.169359][T19240] ? __pfx_vfs_write+0x10/0x10 [ 792.169387][T19240] ksys_write+0x12a/0x250 [ 792.169402][T19240] ? __pfx_ksys_write+0x10/0x10 [ 792.169423][T19240] do_syscall_64+0xcd/0xfa0 [ 792.169442][T19240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.169457][T19240] RIP: 0033:0x7f059198f749 [ 792.169469][T19240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.169483][T19240] RSP: 002b:00007f0592774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.169497][T19240] RAX: ffffffffffffffda RBX: 00007f0591be5fa0 RCX: 00007f059198f749 [ 792.169507][T19240] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 792.169516][T19240] RBP: 00007f0592774090 R08: 0000000000000000 R09: 0000000000000000 [ 792.169525][T19240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.169533][T19240] R13: 00007f0591be6038 R14: 00007f0591be5fa0 R15: 00007ffc11611bf8 [ 792.169553][T19240] [ 792.659866][T19241] hub 1-0:1.0: USB hub found [ 792.686619][T19241] hub 1-0:1.0: 1 port detected [ 793.600689][T19270] FAULT_INJECTION: forcing a failure. [ 793.600689][T19270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.722126][T19280] FAULT_INJECTION: forcing a failure. [ 793.722126][T19280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.792516][T19280] CPU: 0 UID: 0 PID: 19280 Comm: syz.2.2944 Tainted: G U syzkaller #0 PREEMPT(full) [ 793.792545][T19280] Tainted: [U]=USER [ 793.792550][T19280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.792559][T19280] Call Trace: [ 793.792564][T19280] [ 793.792570][T19280] dump_stack_lvl+0x16c/0x1f0 [ 793.792594][T19280] should_fail_ex+0x512/0x640 [ 793.792618][T19280] _copy_from_iter+0x29f/0x1720 [ 793.792645][T19280] ? __pfx__copy_from_iter+0x10/0x10 [ 793.792666][T19280] ? rcu_is_watching+0x12/0xc0 [ 793.792682][T19280] ? trace_kmalloc+0x2b/0xd0 [ 793.792700][T19280] ? __kmalloc_noprof+0x34f/0x880 [ 793.792721][T19280] ? kernfs_fop_write_iter+0x237/0x570 [ 793.792740][T19280] kernfs_fop_write_iter+0x19a/0x570 [ 793.792761][T19280] vfs_write+0x7d3/0x11d0 [ 793.792778][T19280] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 793.792793][T19280] ? __pfx___mutex_lock+0x10/0x10 [ 793.792812][T19280] ? __pfx_vfs_write+0x10/0x10 [ 793.792839][T19280] ksys_write+0x12a/0x250 [ 793.792855][T19280] ? __pfx_ksys_write+0x10/0x10 [ 793.792875][T19280] do_syscall_64+0xcd/0xfa0 [ 793.792894][T19280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.792909][T19280] RIP: 0033:0x7f059198f749 [ 793.792921][T19280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.792934][T19280] RSP: 002b:00007f0592774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 793.792949][T19280] RAX: ffffffffffffffda RBX: 00007f0591be5fa0 RCX: 00007f059198f749 [ 793.792959][T19280] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 793.792967][T19280] RBP: 00007f0592774090 R08: 0000000000000000 R09: 0000000000000000 [ 793.792976][T19280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.792984][T19280] R13: 00007f0591be6038 R14: 00007f0591be5fa0 R15: 00007ffc11611bf8 [ 793.793004][T19280] [ 793.991689][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.015728][T19270] CPU: 0 UID: 0 PID: 19270 Comm: syz.1.2938 Tainted: G U syzkaller #0 PREEMPT(full) [ 794.015758][T19270] Tainted: [U]=USER [ 794.015763][T19270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.015772][T19270] Call Trace: [ 794.015778][T19270] [ 794.015784][T19270] dump_stack_lvl+0x16c/0x1f0 [ 794.015807][T19270] should_fail_ex+0x512/0x640 [ 794.015831][T19270] should_fail_alloc_page+0xe7/0x130 [ 794.015851][T19270] prepare_alloc_pages+0x3c2/0x610 [ 794.015871][T19270] ? rcu_is_watching+0x12/0xc0 [ 794.015888][T19270] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 794.015906][T19270] ? __pfx_stack_trace_save+0x10/0x10 [ 794.015925][T19270] ? __lock_acquire+0x622/0x1c90 [ 794.015946][T19270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.015968][T19270] ? rcu_read_unlock+0x17/0x60 [ 794.015989][T19270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.016013][T19270] ? policy_nodemask+0xea/0x4e0 [ 794.016032][T19270] alloc_pages_mpol+0x1fb/0x550 [ 794.016052][T19270] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 794.016068][T19270] ? trace_kmalloc+0x2b/0xd0 [ 794.016085][T19270] ? trace_kmalloc+0x2b/0xd0 [ 794.016101][T19270] ? __kmalloc_noprof.cold+0x5d/0x62 [ 794.016119][T19270] ? relay_open_buf.part.0+0x194/0xc40 [ 794.016140][T19270] alloc_pages_noprof+0x131/0x390 [ 794.016159][T19270] relay_open_buf.part.0+0x262/0xc40 [ 794.016185][T19270] relay_open+0x653/0xad0 [ 794.016203][T19270] ? debugfs_create_file_full+0x41/0x60 [ 794.016220][T19270] do_blk_trace_setup+0x4c5/0xb00 [ 794.016241][T19270] blk_trace_setup+0xed/0x1b0 [ 794.016258][T19270] ? __pfx_blk_trace_setup+0x10/0x10 [ 794.016275][T19270] ? __pfx_snprintf+0x10/0x10 [ 794.016295][T19270] ? do_vfs_ioctl+0x128/0x14f0 [ 794.016318][T19270] blk_trace_ioctl+0x146/0x280 [ 794.016336][T19270] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 794.016356][T19270] ? find_held_lock+0x2b/0x80 [ 794.016370][T19270] ? hook_file_ioctl_common+0x145/0x410 [ 794.016387][T19270] blkdev_ioctl+0x108/0x6d0 [ 794.016403][T19270] ? __pfx_blkdev_ioctl+0x10/0x10 [ 794.016420][T19270] ? __pfx_blkdev_ioctl+0x10/0x10 [ 794.016435][T19270] __x64_sys_ioctl+0x18e/0x210 [ 794.016456][T19270] do_syscall_64+0xcd/0xfa0 [ 794.016475][T19270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.016488][T19270] RIP: 0033:0x7fa46798f749 [ 794.016501][T19270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.016515][T19270] RSP: 002b:00007fa46880b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.016529][T19270] RAX: ffffffffffffffda RBX: 00007fa467be6180 RCX: 00007fa46798f749 [ 794.016540][T19270] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000009 [ 794.016549][T19270] RBP: 00007fa467a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.016558][T19270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.016567][T19270] R13: 00007fa467be6218 R14: 00007fa467be6180 R15: 00007ffdf3319d08 [ 794.016587][T19270] [ 794.314210][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.417278][T19283] vhci_hcd: not connected 4 [ 794.778129][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 794.929778][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 794.962036][T19311] HfR: entered promiscuous mode [ 795.122432][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 795.589907][T19322] vhci_hcd: not connected 4 [ 795.602798][T19322] FAULT_INJECTION: forcing a failure. [ 795.602798][T19322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.629990][T19322] CPU: 0 UID: 0 PID: 19322 Comm: syz.1.2955 Tainted: G U syzkaller #0 PREEMPT(full) [ 795.630017][T19322] Tainted: [U]=USER [ 795.630021][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.630030][T19322] Call Trace: [ 795.630035][T19322] [ 795.630041][T19322] dump_stack_lvl+0x16c/0x1f0 [ 795.630064][T19322] should_fail_ex+0x512/0x640 [ 795.630088][T19322] _copy_to_user+0x32/0xd0 [ 795.630104][T19322] simple_read_from_buffer+0xcb/0x170 [ 795.630127][T19322] proc_fail_nth_read+0x197/0x240 [ 795.630145][T19322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.630161][T19322] ? rw_verify_area+0xcf/0x6c0 [ 795.630174][T19322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.630190][T19322] vfs_read+0x1e4/0xcf0 [ 795.630208][T19322] ? __pfx___mutex_lock+0x10/0x10 [ 795.630226][T19322] ? __pfx_vfs_read+0x10/0x10 [ 795.630246][T19322] ? __fget_files+0x20e/0x3c0 [ 795.630266][T19322] ksys_read+0x12a/0x250 [ 795.630281][T19322] ? __pfx_ksys_read+0x10/0x10 [ 795.630302][T19322] do_syscall_64+0xcd/0xfa0 [ 795.630320][T19322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.630335][T19322] RIP: 0033:0x7fa46798e15c [ 795.630348][T19322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 795.630361][T19322] RSP: 002b:00007fa46884d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.630376][T19322] RAX: ffffffffffffffda RBX: 00007fa467be5fa0 RCX: 00007fa46798e15c [ 795.630386][T19322] RDX: 000000000000000f RSI: 00007fa46884d0a0 RDI: 0000000000000004 [ 795.630395][T19322] RBP: 00007fa46884d090 R08: 0000000000000000 R09: 0000000000000000 [ 795.630403][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.630412][T19322] R13: 00007fa467be6038 R14: 00007fa467be5fa0 R15: 00007ffdf3319d08 [ 795.630431][T19322] [ 795.815675][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.564943][T19358] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 797.647906][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 798.817394][T19399] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 798.868930][T19399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2977'. [ 799.181828][T19409] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 800.295082][T19429] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2984'. [ 801.851368][T19479] vhci_hcd: not connected 4 [ 801.894593][T19463] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3005'. [ 802.633322][T19518] overlayfs: missing 'lowerdir' [ 802.670187][T19520] overlayfs: missing 'lowerdir' [ 803.600541][T19537] bridge0: port 3(bond0) entered blocking state [ 803.623266][T19537] bridge0: port 3(bond0) entered disabled state [ 803.647000][T19537] bond0: entered allmulticast mode [ 803.680501][T19537] bond_slave_0: entered allmulticast mode [ 803.701471][T19537] bond_slave_1: entered allmulticast mode [ 803.731047][T19537] bond0: entered promiscuous mode [ 803.766569][T19537] bond_slave_0: entered promiscuous mode [ 803.803193][T19537] bond_slave_1: entered promiscuous mode [ 803.853523][T19537] bridge0: port 3(bond0) entered blocking state [ 803.859971][T19537] bridge0: port 3(bond0) entered forwarding state [ 804.610456][T19540] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3015'. [ 804.917198][T19562] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 804.972025][T19562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 806.825478][T19610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3036'. [ 806.935218][T19615] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 808.065944][T19630] bridge0: port 3(veth0_to_bridge) entered blocking state [ 808.099705][T19621] zswap: compressor not available [ 808.107067][T19630] bridge0: port 3(veth0_to_bridge) entered disabled state [ 808.134749][T19630] veth0_to_bridge: entered allmulticast mode [ 808.163287][T19630] veth0_to_bridge: entered promiscuous mode [ 808.194582][T19630] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.232638][T19630] bridge0: port 3(veth0_to_bridge) entered blocking state [ 808.239866][T19630] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 808.629676][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.636118][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.037644][T19661] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 809.133476][T19661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 809.162543][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3050'. [ 809.805111][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 810.089057][T19683] hub 1-0:1.0: USB hub found [ 810.134801][T19683] hub 1-0:1.0: 1 port detected [ 810.182665][T19668] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 810.380286][T19687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'. [ 810.606438][T13903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.615663][T13903] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.627645][T13903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.636392][T13903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.644102][T13903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.702792][T19687] team0: Port device team_slave_0 removed [ 810.974471][T19696] ceph: Failed to parse sending metrics switch value 'P@' [ 811.079601][T19696] random: crng reseeded on system resumption [ 811.690873][T19710] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 811.745262][T19690] chnl_net:caif_netlink_parms(): no params data found [ 811.776035][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3060'. [ 812.217507][T19690] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.267359][T19690] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.315366][T19690] bridge_slave_0: entered allmulticast mode [ 812.346520][T19690] bridge_slave_0: entered promiscuous mode [ 812.426693][T19690] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.453969][T19690] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.485489][T19727] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 812.492797][T19690] bridge_slave_1: entered allmulticast mode [ 812.513876][T19690] bridge_slave_1: entered promiscuous mode [ 812.626929][T19690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.688619][T19690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.702941][T13903] Bluetooth: hci1: command tx timeout [ 812.840048][T19690] team0: Port device team_slave_0 added [ 812.870749][T19690] team0: Port device team_slave_1 added [ 813.081034][T19690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.125998][T19690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.252234][T19690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.302105][T19690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.323982][T19690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.437806][T19690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.872453][T19690] hsr_slave_0: entered promiscuous mode [ 813.902934][T19690] hsr_slave_1: entered promiscuous mode [ 813.922323][T19690] debugfs: 'hsr0' already exists in 'hsr' [ 813.928058][T19690] Cannot create hsr debugfs directory [ 814.537691][T19690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.694592][T19690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.782453][T13903] Bluetooth: hci1: command tx timeout [ 814.793783][T19690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.877379][T19690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.151399][T19690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.259269][T19690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.302799][T19690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.342790][T19690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.466574][T19772] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 815.635176][T19690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.708825][T19690] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.754041][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.761160][T12146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.842542][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.849648][T12146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.096439][T19789] bridge0: port 3(veth0_to_bridge) entered blocking state [ 816.132279][T19789] bridge0: port 3(veth0_to_bridge) entered disabled state [ 816.152283][T19789] veth0_to_bridge: entered allmulticast mode [ 816.179664][T19789] veth0_to_bridge: entered promiscuous mode [ 816.194701][T19789] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.244244][T19789] bridge0: port 3(veth0_to_bridge) entered blocking state [ 816.251470][T19789] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 816.478542][T19690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.585382][T19690] veth0_vlan: entered promiscuous mode [ 816.625028][T19690] veth1_vlan: entered promiscuous mode [ 816.700082][T19690] veth0_macvtap: entered promiscuous mode [ 816.737159][T19690] veth1_macvtap: entered promiscuous mode [ 816.794926][T19690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.830836][T19690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.866455][T13903] Bluetooth: hci1: command tx timeout [ 816.911136][ T9854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.942261][ T9854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.004178][ T9854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.044412][ T9854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.181510][T12146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.225535][T12146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.334358][T12146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.369004][T12146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.433944][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3085'. [ 818.866896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.879187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.891630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.903962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.916235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.928430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.940626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.952845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.965044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.977256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.872180][ C0] net_ratelimit: 23184 callbacks suppressed [ 823.872198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.890311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.902519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.914943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.927193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.939381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.951635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.963800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.976001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.988329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.269857][T13903] Bluetooth: hci1: command tx timeout [ 828.882274][ C0] net_ratelimit: 21810 callbacks suppressed [ 828.882292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.900425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.912654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.924797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.937021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.949228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.961366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.973580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.985775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.997912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.892399][ C0] net_ratelimit: 21216 callbacks suppressed [ 833.892421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.910603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.922780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.935002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.947222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.959446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.971668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.983913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.996074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.008269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.982158][ C0] sched: DL replenish lagged too much [ 838.902259][ C0] net_ratelimit: 21012 callbacks suppressed [ 838.902281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.920433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.932675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.944924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.957118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.969337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.981546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.993729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.005949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.018179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.912380][ C0] net_ratelimit: 20761 callbacks suppressed [ 843.912400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.930505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.942645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.954879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.967078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.979207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.991445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.003662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.015812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.028036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.922235][ C0] net_ratelimit: 21045 callbacks suppressed [ 848.922253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.940373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.952595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.964934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.977156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.989516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.001843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.014043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.026275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.038538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.932246][ C0] net_ratelimit: 21066 callbacks suppressed [ 853.932265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.950512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.962775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.974946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.987186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.999412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.011577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.023833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.036072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.048299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.942142][ C0] net_ratelimit: 20932 callbacks suppressed [ 858.942159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.960259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.972546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.984785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.996981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.009209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.021422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.033569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.045806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.058015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.952217][ C0] net_ratelimit: 20914 callbacks suppressed [ 863.952235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.970434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.982619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.994823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.007056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.019220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.031583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.043819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.055971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.068216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.962351][ C0] net_ratelimit: 20974 callbacks suppressed [ 868.962369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.980539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.992746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.004913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.017160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.029371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.041532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.053771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.065993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.078184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.972219][ C0] net_ratelimit: 21008 callbacks suppressed [ 873.972238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.990438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.002708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.014923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.027256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.039530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.051759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.064036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.076265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.088442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.982241][ C0] net_ratelimit: 20878 callbacks suppressed [ 878.982259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.000897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.013136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.025356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.037504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.049738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.061981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.074164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.086547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.098815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.992170][ C0] net_ratelimit: 20988 callbacks suppressed [ 883.992188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.010375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.022607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.034801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.047118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.059389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.071700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.084046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.096308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.108504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.002304][ C0] net_ratelimit: 21060 callbacks suppressed [ 889.002327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.020748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.032993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.045244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.057497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.069651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.081848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.094071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.106222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.118428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.343019][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.012274][ C0] net_ratelimit: 21037 callbacks suppressed [ 894.012293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.030480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.042784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.054967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.067221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.079456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.091618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.103838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.116063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.128247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.022294][ C0] net_ratelimit: 20992 callbacks suppressed [ 899.022312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.040479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.052798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.065012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.077180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.089390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.101626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.113771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.125957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.138162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.227736][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.032375][ C0] net_ratelimit: 20674 callbacks suppressed [ 904.032397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.050568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.062726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.074939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.087175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.099375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.111589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.123834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.136047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.148277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.042345][ C0] net_ratelimit: 21260 callbacks suppressed [ 909.042362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.060507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.072673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.084921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.097172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.109348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.121567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.133768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.145952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.158195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.052154][ C0] net_ratelimit: 21466 callbacks suppressed [ 914.052172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.070348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.082574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.094726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.106925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.119162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.131323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.143543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.155759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.167936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.062170][ C0] net_ratelimit: 21504 callbacks suppressed [ 919.062187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.080350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.092554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.104777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.116998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.129195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.141450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.153683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.165835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.178055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.852096][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 923.859051][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19825/1:b..l P19808/1:b..l [ 923.868650][ C0] rcu: (detected by 0, t=10502 jiffies, g=131053, q=1517 ncpus=1) [ 923.876522][ C0] task:syz.1.3081 state:R running task stack:26984 pid:19808 tgid:19807 ppid:16906 task_flags:0x480140 flags:0x00080003 [ 923.890667][ C0] Call Trace: [ 923.893944][ C0] [ 923.896865][ C0] __schedule+0x1190/0x5de0 [ 923.901365][ C0] ? __lock_acquire+0x622/0x1c90 [ 923.906300][ C0] ? __pfx___schedule+0x10/0x10 [ 923.911139][ C0] ? find_held_lock+0x2b/0x80 [ 923.915830][ C0] ? mark_held_locks+0x49/0x80 [ 923.920583][ C0] preempt_schedule_irq+0x51/0x90 [ 923.925599][ C0] irqentry_exit+0x36/0x90 [ 923.929998][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 923.935959][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 923.941144][ C0] Code: dd 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 f9 e9 0e 0f 82 74 02 00 00 8b 35 fa 29 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 dc 08 12 0f 85 c7 02 00 00 48 83 c4 [ 923.960752][ C0] RSP: 0018:ffffc9000480f3b8 EFLAGS: 00000206 [ 923.966814][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c45e0 RCX: 00000000605e38ba [ 923.974783][ C0] RDX: 0000000000000000 RSI: ffffffff8da0398a RDI: ffffffff8bf078c0 [ 923.982750][ C0] RBP: 0000000000000002 R08: 133ba44746c7042c R09: 0000000000000000 [ 923.990707][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 923.998663][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.006634][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 924.011826][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 924.017964][ C0] is_module_text_address+0x33/0x220 [ 924.023234][ C0] ? is_module_text_address+0x1f/0x220 [ 924.028684][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 924.034821][ C0] kernel_text_address+0x81/0x100 [ 924.039827][ C0] __kernel_text_address+0xd/0x40 [ 924.044832][ C0] unwind_get_return_address+0x59/0xa0 [ 924.050276][ C0] arch_stack_walk+0xa6/0x100 [ 924.054946][ C0] stack_trace_save+0x8e/0xc0 [ 924.059605][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 924.064963][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 924.069889][ C0] kasan_save_stack+0x33/0x60 [ 924.074550][ C0] ? kasan_save_stack+0x33/0x60 [ 924.079386][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 924.084737][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 924.090795][ C0] ? kernfs_put.part.0+0x162/0x640 [ 924.095889][ C0] ? kernfs_remove_by_name_ns+0xdf/0x110 [ 924.101507][ C0] ? remove_files+0x96/0x1c0 [ 924.106104][ C0] ? sysfs_remove_group+0x8b/0x180 [ 924.111200][ C0] ? sysfs_remove_groups+0x60/0xa0 [ 924.116305][ C0] ? device_remove_attrs+0x192/0x290 [ 924.121593][ C0] ? device_del+0x38e/0x9f0 [ 924.126092][ C0] ? unregister_netdevice_many_notify+0x14d6/0x25c0 [ 924.132673][ C0] ? ops_undo_list+0x8fc/0xab0 [ 924.137423][ C0] ? setup_net+0x1e2/0x390 [ 924.141821][ C0] ? copy_net_ns+0x2f8/0x690 [ 924.146399][ C0] ? create_new_namespaces+0x3ea/0xa90 [ 924.151842][ C0] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 924.157636][ C0] ? ksys_unshare+0x45b/0xa40 [ 924.162299][ C0] ? __x64_sys_unshare+0x31/0x40 [ 924.167221][ C0] ? do_syscall_64+0xcd/0xfa0 [ 924.171881][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.177949][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 924.183138][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 924.188412][ C0] __call_rcu_common.constprop.0+0xa5/0xa10 [ 924.194296][ C0] kernfs_put.part.0+0x162/0x640 [ 924.199221][ C0] kernfs_remove_by_name_ns+0xdf/0x110 [ 924.204670][ C0] remove_files+0x96/0x1c0 [ 924.209073][ C0] sysfs_remove_group+0x8b/0x180 [ 924.213999][ C0] sysfs_remove_groups+0x60/0xa0 [ 924.218923][ C0] device_remove_attrs+0x192/0x290 [ 924.224020][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 924.229633][ C0] ? up_write+0x1b2/0x520 [ 924.233953][ C0] device_del+0x38e/0x9f0 [ 924.238269][ C0] ? __pfx_device_del+0x10/0x10 [ 924.243108][ C0] ? netdev_unregister_kobject+0x2da/0x540 [ 924.248899][ C0] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 924.255306][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 924.262056][ C0] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 924.267846][ C0] ops_undo_list+0x8fc/0xab0 [ 924.272426][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 924.277521][ C0] ? ops_init+0x2f0/0x5f0 [ 924.281835][ C0] ? ops_init+0x2fa/0x5f0 [ 924.286157][ C0] setup_net+0x1e2/0x390 [ 924.290380][ C0] ? __pfx_setup_net+0x10/0x10 [ 924.295127][ C0] ? debug_mutex_init+0x37/0x70 [ 924.299959][ C0] copy_net_ns+0x2f8/0x690 [ 924.304361][ C0] create_new_namespaces+0x3ea/0xa90 [ 924.309648][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 924.315282][ C0] ksys_unshare+0x45b/0xa40 [ 924.319775][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 924.324790][ C0] ? do_user_addr_fault+0x843/0x1370 [ 924.330067][ C0] __x64_sys_unshare+0x31/0x40 [ 924.334825][ C0] do_syscall_64+0xcd/0xfa0 [ 924.339315][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.345193][ C0] RIP: 0033:0x7fa46798f749 [ 924.349593][ C0] RSP: 002b:00007fa46884d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 924.357986][ C0] RAX: ffffffffffffffda RBX: 00007fa467be5fa0 RCX: 00007fa46798f749 [ 924.365939][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 924.373888][ C0] RBP: 00007fa467a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.381838][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.389787][ C0] R13: 00007fa467be6038 R14: 00007fa467be5fa0 R15: 00007ffdf3319d08 [ 924.397747][ C0] [ 924.400746][ C0] task:syz.3.3084 state:R running task stack:26264 pid:19825 tgid:19819 ppid:19690 task_flags:0x400140 flags:0x00080003 [ 924.414205][ C0] Call Trace: [ 924.417464][ C0] [ 924.420380][ C0] __schedule+0x1190/0x5de0 [ 924.424873][ C0] ? __page_table_check_zero+0x346/0x5d0 [ 924.430488][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 924.436454][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.441639][ C0] ? __pfx___schedule+0x10/0x10 [ 924.446476][ C0] ? mark_held_locks+0x49/0x80 [ 924.451225][ C0] preempt_schedule_irq+0x51/0x90 [ 924.456234][ C0] irqentry_exit+0x36/0x90 [ 924.460630][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.466593][ C0] RIP: 0010:__orc_find+0x7e/0xf0 [ 924.471510][ C0] Code: ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 <40> 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 [ 924.491105][ C0] RSP: 0018:ffffc900046d70d0 EFLAGS: 00000206 [ 924.497149][ C0] RAX: ffffffff91252fc6 RBX: ffffffff909d5ec8 RCX: dffffc0000000000 [ 924.505100][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff909d5ec4 [ 924.513051][ C0] RBP: ffffffff909d5ec8 R08: ffffffff91252fe4 R09: 0000000000000000 [ 924.521003][ C0] R10: 0000000000000000 R11: 0000000000012e22 R12: ffffffff909d5ec8 [ 924.528984][ C0] R13: ffffffff822e2210 R14: ffffffff909d5ec4 R15: ffffffff909d5ec4 [ 924.536938][ C0] ? __set_page_owner+0x90/0x560 [ 924.541875][ C0] ? __set_page_owner+0x90/0x560 [ 924.546794][ C0] unwind_next_frame+0x2ec/0x20a0 [ 924.551800][ C0] ? __set_page_owner+0x91/0x560 [ 924.556722][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 924.562859][ C0] arch_stack_walk+0x94/0x100 [ 924.567525][ C0] ? __set_page_owner+0x91/0x560 [ 924.572451][ C0] stack_trace_save+0x8e/0xc0 [ 924.577113][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 924.582469][ C0] ? folio_batch_move_lru+0x278/0x3a0 [ 924.587833][ C0] ? __pfx_lru_add+0x10/0x10 [ 924.592405][ C0] save_stack+0x160/0x1f0 [ 924.596716][ C0] ? __pfx_save_stack+0x10/0x10 [ 924.601558][ C0] ? __lock_acquire+0x622/0x1c90 [ 924.606483][ C0] __set_page_owner+0x91/0x560 [ 924.611236][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 924.616590][ C0] ? bad_range+0x261/0x4c0 [ 924.620989][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.626175][ C0] post_alloc_hook+0x1af/0x220 [ 924.630930][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 924.636463][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 924.641736][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 924.647612][ C0] ? finish_fault+0xb37/0x13e0 [ 924.652362][ C0] ? finish_fault+0x885/0x13e0 [ 924.657123][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 924.663442][ C0] ? folio_unlock+0x7d/0xd0 [ 924.667929][ C0] ? do_pte_missing+0x567/0x3ba0 [ 924.672859][ C0] ? __handle_mm_fault+0x1529/0x2aa0 [ 924.678131][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.684013][ C0] ? policy_nodemask+0xea/0x4e0 [ 924.688856][ C0] alloc_pages_mpol+0x1fb/0x550 [ 924.693697][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 924.699061][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 924.704420][ C0] shmem_alloc_folio+0x135/0x160 [ 924.709352][ C0] shmem_alloc_and_add_folio+0x494/0xc20 [ 924.714968][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 924.721103][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 924.726980][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 924.732162][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 924.737780][ C0] shmem_write_begin+0x160/0x300 [ 924.742703][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 924.748142][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 924.754977][ C0] generic_perform_write+0x3c4/0x900 [ 924.760256][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 924.766050][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 924.772277][ C0] shmem_file_write_iter+0x10e/0x140 [ 924.777546][ C0] vfs_write+0x7d3/0x11d0 [ 924.781858][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 924.787648][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 924.792672][ C0] ? __pfx_vfs_write+0x10/0x10 [ 924.797429][ C0] ksys_write+0x12a/0x250 [ 924.801741][ C0] ? __pfx_ksys_write+0x10/0x10 [ 924.806580][ C0] do_syscall_64+0xcd/0xfa0 [ 924.811073][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.816947][ C0] RIP: 0033:0x7f361158f749 [ 924.821345][ C0] RSP: 002b:00007f3612403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.829738][ C0] RAX: ffffffffffffffda RBX: 00007f36117e6270 RCX: 00007f361158f749 [ 924.837698][ C0] RDX: 00000000fffffdf1 RSI: 0000000000000000 RDI: 0000000000000007 [ 924.845648][ C0] RBP: 00007f3611613f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.853599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.861549][ C0] R13: 00007f36117e6308 R14: 00007f36117e6270 R15: 00007fffdd60bf18 [ 924.869514][ C0] [ 924.872516][ C0] rcu: rcu_preempt kthread starved for 1719 jiffies! g131053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 924.883689][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 924.893632][ C0] rcu: RCU grace-period kthread stack dump: [ 924.899497][ C0] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 924.912955][ C0] Call Trace: [ 924.916213][ C0] [ 924.919126][ C0] __schedule+0x1190/0x5de0 [ 924.923621][ C0] ? __lock_acquire+0x622/0x1c90 [ 924.928550][ C0] ? __pfx___schedule+0x10/0x10 [ 924.933383][ C0] ? find_held_lock+0x2b/0x80 [ 924.938045][ C0] ? schedule+0x2d7/0x3a0 [ 924.942360][ C0] schedule+0xe7/0x3a0 [ 924.946419][ C0] schedule_timeout+0x123/0x290 [ 924.951251][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 924.956602][ C0] ? __pfx_process_timeout+0x10/0x10 [ 924.961872][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 924.967661][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 924.973109][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 924.977863][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 924.983149][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.988347][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 924.993275][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 924.998120][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 925.003921][ C0] rcu_gp_kthread+0x26d/0x380 [ 925.008595][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 925.013782][ C0] ? rcu_is_watching+0x12/0xc0 [ 925.018531][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.023716][ C0] ? __kthread_parkme+0x19e/0x250 [ 925.028729][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 925.033916][ C0] kthread+0x3c5/0x780 [ 925.037974][ C0] ? __pfx_kthread+0x10/0x10 [ 925.042565][ C0] ? rcu_is_watching+0x12/0xc0 [ 925.047311][ C0] ? __pfx_kthread+0x10/0x10 [ 925.051888][ C0] ret_from_fork+0x675/0x7d0 [ 925.056466][ C0] ? __pfx_kthread+0x10/0x10 [ 925.061044][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.065805][ C0] [ 925.068806][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 925.075112][ C0] CPU: 0 UID: 0 PID: 9851 Comm: kworker/u8:20 Tainted: G U syzkaller #0 PREEMPT(full) [ 925.086226][ C0] Tainted: [U]=USER [ 925.090026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 925.100078][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 925.107018][ C0] RIP: 0010:__find_rr_leaf+0x10b/0xe00 [ 925.112482][ C0] Code: 28 e9 8b 01 00 00 e8 14 40 b3 f7 48 8d 8b c0 00 00 00 48 89 c8 48 c1 e8 03 80 3c 28 00 0f 85 e0 0a 00 00 4c 8b bb c0 00 00 00 <4d> 85 ff 0f 85 3b 03 00 00 e8 e7 3f b3 f7 4c 8d bb c8 00 00 00 8b [ 925.132076][ C0] RSP: 0018:ffffc90000006a08 EFLAGS: 00000246 [ 925.138126][ C0] RAX: 1ffff1100f5ac098 RBX: ffff88807ad60400 RCX: ffff88807ad604c0 [ 925.146094][ C0] RDX: ffff88802ccabc80 RSI: ffffffff8a09177c RDI: 0000000000000005 [ 925.154059][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 925.162016][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ad60464 [ 925.169974][ C0] R13: ffffc90000006d10 R14: 0000000000000001 R15: 0000000000000000 [ 925.177930][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 925.186843][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.193410][ C0] CR2: 00007fb579ed2d09 CR3: 0000000033c64000 CR4: 00000000003526f0 [ 925.201368][ C0] Call Trace: [ 925.204632][ C0] [ 925.207467][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 925.212677][ C0] ? fib6_node_lookup+0x12d/0x190 [ 925.217698][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 925.223052][ C0] ? nf_hook_slow+0xbe/0x200 [ 925.227633][ C0] ? nf_hook+0x45e/0x780 [ 925.231853][ C0] ? br_forward_finish+0xcd/0x130 [ 925.236859][ C0] ? __br_forward+0x1be/0x5b0 [ 925.241515][ C0] ? br_flood+0x39c/0x650 [ 925.245831][ C0] ? br_handle_frame_finish+0x1117/0x1f00 [ 925.251541][ C0] fib6_table_lookup+0x57c/0xa30 [ 925.256477][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 925.261927][ C0] ip6_pol_route+0x1cc/0x1230 [ 925.266590][ C0] ? rt6_multipath_hash+0x1de/0x1920 [ 925.271862][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 925.276959][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 925.282497][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 925.288116][ C0] fib6_rule_lookup+0x536/0x720 [ 925.292956][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 925.298314][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 925.304023][ C0] ? br_nf_post_routing+0x59b/0x1190 [ 925.309296][ C0] ? find_held_lock+0x2b/0x80 [ 925.313955][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.319839][ C0] ip6_route_input+0x662/0xc70 [ 925.324591][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 925.329862][ C0] ? __pfx_nf_hook+0x10/0x10 [ 925.334441][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 925.340154][ C0] ? __lock_acquire+0x622/0x1c90 [ 925.345080][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 925.351223][ C0] ip6_rcv_finish+0x130/0x580 [ 925.355880][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 925.361063][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 925.366243][ C0] ip_sabotage_in+0x21e/0x290 [ 925.370902][ C0] nf_hook_slow+0xbe/0x200 [ 925.375301][ C0] nf_hook.constprop.0+0x424/0x750 [ 925.380399][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 925.385579][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 925.391198][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 925.395955][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 925.401130][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 925.405882][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 925.410535][ C0] ipv6_rcv+0xa4/0x650 [ 925.414581][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 925.419234][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 925.425115][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 925.431515][ C0] ? lock_acquire+0x179/0x350 [ 925.436184][ C0] __netif_receive_skb+0x1d/0x160 [ 925.441192][ C0] netif_receive_skb+0x137/0x7b0 [ 925.446115][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 925.451562][ C0] ? br_netif_receive_skb+0xff/0x200 [ 925.456828][ C0] br_pass_frame_up+0x346/0x490 [ 925.461664][ C0] br_handle_frame_finish+0x10e8/0x1f00 [ 925.467195][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 925.473075][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 925.477914][ C0] ? nf_hook_slow+0x132/0x200 [ 925.482572][ C0] br_nf_hook_thresh+0x307/0x410 [ 925.487494][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 925.493372][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 925.498810][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 925.504082][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 925.509956][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 925.515661][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.521543][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.527429][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 925.533397][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 925.539276][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 925.544632][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 925.550507][ C0] ? lock_acquire+0x179/0x350 [ 925.555171][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 925.561658][ C0] ? net_generic+0xea/0x2a0 [ 925.566146][ C0] br_nf_pre_routing+0x860/0x15b0 [ 925.571154][ C0] br_handle_frame+0xb28/0x14e0 [ 925.575992][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 925.581263][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 925.587143][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 925.592410][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 925.599107][ C0] ? kmem_cache_free+0x2d4/0x6c0 [ 925.604048][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 925.608712][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 925.615909][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 925.620574][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 925.625240][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 925.630421][ C0] ? ip6_mc_input+0x515/0xf60 [ 925.635081][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 925.640084][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 925.645264][ C0] ? __lock_acquire+0x622/0x1c90 [ 925.650192][ C0] ? process_backlog+0x3e7/0x15e0 [ 925.655202][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 925.660995][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 925.667395][ C0] ? lock_acquire+0x179/0x350 [ 925.672061][ C0] ? process_backlog+0x3e7/0x15e0 [ 925.677069][ C0] __netif_receive_skb+0x1d/0x160 [ 925.682078][ C0] process_backlog+0x439/0x15e0 [ 925.686920][ C0] __napi_poll.constprop.0+0xba/0x550 [ 925.692276][ C0] ? skb_defer_free_flush+0x149/0x280 [ 925.697628][ C0] net_rx_action+0x97f/0xef0 [ 925.702208][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 925.707303][ C0] ? __print_lock_name+0xb0/0xe0 [ 925.712222][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 925.717404][ C0] ? sched_clock+0x38/0x60 [ 925.721806][ C0] ? sched_clock_cpu+0x6c/0x530 [ 925.726657][ C0] ? mark_held_locks+0x49/0x80 [ 925.731406][ C0] handle_softirqs+0x219/0x8e0 [ 925.736161][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 925.741426][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 925.746702][ C0] ? kernel_fpu_end+0x59/0x70 [ 925.751362][ C0] do_softirq+0xb2/0xf0 [ 925.755499][ C0] [ 925.758408][ C0] [ 925.761325][ C0] __local_bh_enable_ip+0x100/0x120 [ 925.766506][ C0] kernel_fpu_end+0x5e/0x70 [ 925.770990][ C0] blake2s_compress+0x7b/0xe0 [ 925.775648][ C0] blake2s_final+0xc9/0x150 [ 925.780129][ C0] mix_hash+0xfa/0x140 [ 925.784184][ C0] ? __pfx_mix_hash+0x10/0x10 [ 925.788850][ C0] ? ktime_get_real_ts64+0x2b0/0x3f0 [ 925.794120][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.799324][ C0] ? read_tsc+0x9/0x20 [ 925.803385][ C0] ? ktime_get_real_ts64+0x21a/0x3f0 [ 925.808653][ C0] wg_noise_handshake_create_initiation+0x48b/0x610 [ 925.815236][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 925.822334][ C0] ? find_held_lock+0x2b/0x80 [ 925.826996][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 925.833044][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.838227][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 925.844278][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 925.850332][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 925.856822][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 925.863844][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 925.869808][ C0] process_one_work+0x9cf/0x1b70 [ 925.874737][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 925.881397][ C0] ? __pfx_process_one_work+0x10/0x10 [ 925.886761][ C0] ? assign_work+0x1a0/0x250 [ 925.891339][ C0] worker_thread+0x6c8/0xf10 [ 925.895917][ C0] ? __pfx_worker_thread+0x10/0x10 [ 925.901018][ C0] kthread+0x3c5/0x780 [ 925.905080][ C0] ? __pfx_kthread+0x10/0x10 [ 925.909661][ C0] ? rcu_is_watching+0x12/0xc0 [ 925.914405][ C0] ? __pfx_kthread+0x10/0x10 [ 925.918987][ C0] ret_from_fork+0x675/0x7d0 [ 925.923565][ C0] ? __pfx_kthread+0x10/0x10 [ 925.928141][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.932907][ C0] [ 925.936482][ C0] net_ratelimit: 19901 callbacks suppressed [ 925.936495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.954670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.967300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 925.979553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.991775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.004018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.016225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.028429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.040598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.054542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.942184][ C0] net_ratelimit: 15629 callbacks suppressed [ 930.942201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.960387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.972582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 930.984967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.997274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.009479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.021864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.034122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.046336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.058706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)