last executing test programs: 27m4.764753302s ago: executing program 3 (id=339): ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x6, 0xffffffffffffffff}) sendmmsg$auto(r0, 0x0, 0x96, 0x232) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_mon_fops_text_t_mon_text(r0, &(0x7f0000000340)=""/91, 0x5b) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000804) sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=@link_detach={r1}, 0x2) shmget$auto(0x100000000, 0x3, 0x79e56dc9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) shmget$auto(0x2, 0x0, 0x6) setitimer$auto_ITIMER_PROF(0x2, 0x0, &(0x7f0000000040)={{0x0, 0x7}, {0xffffffff, 0x9}}) fcntl$auto(r0, 0x4, r4) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) 27m4.156940447s ago: executing program 3 (id=340): mmap$auto(0xff, 0x400, 0x1, 0xebe, 0x1272, 0x8001) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\xc7\xde\xb3\x03\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xda3V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\x0e\xf7\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f|\b\x17\'F\x1b\xb9\xe9f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\xc9\xa0\xca\xeb\xc22;GH\xdf \x91\x88\x99\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9eF\x18\xcas\x9a\xeaED\x19\xfb\xd3\x94|4\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b\xe9!\xd2X\xf1~\xbb\x13', 0x100400a3db) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89a3, 0x24) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, r0, 0x0) r3 = socket(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="95e949de049449e4d1027d72c35bcb9576e398449b9407aa128d40ac6835cda063e0176a5aeb1b0b17e538be4296c951d53d17890a71717c10d66f88feac3738bf70ef5bba4c17bcf6ba78f7bd8d891528b36487e5214f5e85d469c56acab1cf80c3fe6423c6", @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf250300000044000380400001803c000680380074802f00a800f2590793f5641c4a4c098b2227df3f92974991f9bef60ea66e7f9c8071652809cf796be6f543274e8d8c7d00040003000400038004000280"], 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy13/short_retry_limit\x00', 0x80001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video46\x00', 0x169000, 0x0) ioctl$auto(r7, 0xc0845658, r7) fcntl$auto_F_GETSIG(r6, 0xb, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r8, 0xc0184d15, 0xd3) 27m3.609692965s ago: executing program 3 (id=344): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r0, 0x400445a0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)='4', 0x1) unshare$auto(0x40000080) r4 = socket(0xa, 0x3, 0x3a) socket(0x3, 0x5, 0x0) ioctl$auto(r4, 0x8982, 0x1) r5 = prctl$auto(0x3a, 0x2, r1, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r6, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r7 = prctl$auto(0x5, 0x39a, r1, 0x9, 0x20000000000001ff) ioctl$auto_BLKROSET(r7, 0x125d, 0x0) io_setup$auto(0xe, &(0x7f0000000080)) 27m3.080365149s ago: executing program 3 (id=347): mmap$auto(0x2, 0x3, 0xf8c, 0x14, 0xfffffffffffffffa, 0x869) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40780, 0x0) read$auto(r1, 0x0, 0x400006) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x40) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf237e000000e38d96e8b768453709edd65672a43cf06eaf05206a711c030e1ab8e0a38f2cf9e9fe60f77c01689a50c1db0acf8105965fda7b05ad97b35c6ad912ad25b45c6e9292451ec32699bbf6443eb7becd5cceffd6548d9e9126bb9df828aef6a62df2a6778ad7cd10cfa8ee326087a30986900272cace4e353a14ae4241822902c0030de2da97f5c53e6bea6b49f5a2c6e844a1f171670fcdda885032389bd9953d90a5222e508e7a7b9b432b80ba12e623611da0603caad6beb9"], 0x14}, 0x1, 0x3d04000000000000, 0x0, 0x4004044}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x106) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 27m2.325070883s ago: executing program 3 (id=351): r0 = socket(0xa, 0x2, 0x73) mmap$auto(0x100000000000000, 0xd8f0, 0x7, 0xeb1, 0xfffffffffffffffa, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0xfffe, 0xffb, 0x20010, r0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x20a080, 0x0) mmap$auto(0x0, 0x7, 0x10000000000df, 0x16, r2, 0x7fff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/console\x00', 0x48600, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0xaa101, 0x0) mmap$auto(0x200, 0x2000a, 0x4000000000de, 0x40000000000eb1, r1, 0x800000000008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) close_range$auto(0x2, r2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x321cc0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/bus/pnp/drivers/system/bind\x00', 0x0, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) 27m0.0985652s ago: executing program 3 (id=354): mmap$auto(0x0, 0x2028009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x10002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0) close_range$auto(0x2, 0x8, 0x0) 26m44.90013783s ago: executing program 32 (id=354): mmap$auto(0x0, 0x2028009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x10002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0) close_range$auto(0x2, 0x8, 0x0) 26m21.582167445s ago: executing program 0 (id=473): preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)="8df32cc141492c4a6b3733363e1165b7c6b1bd024900164906c7e7be6feeb0", 0x4}, 0x6, 0x2, 0x0) 26m21.339995804s ago: executing program 0 (id=475): socket(0xa, 0x2, 0x73) mmap$auto(0x100000000000000, 0xd8f0, 0x7, 0xeb1, 0xfffffffffffffffa, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x10000, 0xff7, 0x14, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) unshare$auto(0x20000) mmap$auto(0x0, 0x202000d, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0xa, 0x1) r4 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r3, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r4, 0x8000) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) 26m19.211597247s ago: executing program 0 (id=486): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0) write$auto(r0, &(0x7f0000000000)='j', 0x100) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5ac, 0x0, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r1 = socket(0xb, 0x2, 0x400) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x6040004, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340)="d96369708d903c0feebfbf1946bace56c9c8988dd920763368fed0e427230000000000006121f19d9407f417f266c8f753b3e84db13c4bcd3d5a508dcb35a3fc6f46e23ded4214bd1f3c24bf50df3b1029384a6f7833699160ccd8aa8c32756d3c5bf95bf2ff690358801ddb70c4b5ca8dbf7248505a0ee2db77102b02f88120eba9c8585fe48f10cf4b", 0x7, 0xa509}, 0x800}, 0x7, 0x4008) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0x400c0f0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e018097851cf0d222d81e8a2cda21f24a630ec87584939fca0928515f3a4169ead2aa55400355a27ae074661f44b92318ad59e087e07965f81a98e426"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r4, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xfffffffffffffffd, 0x2003f2, 0x15) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bdefb2e3c97000ffdbdf250500000005"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000802) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/tracing/set_event_pid\x00', 0x2002, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 26m18.878688632s ago: executing program 0 (id=487): mmap$auto(0x0, 0x2028009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{}, {0x2000009}}, 0x0) timer_gettime$auto(0x0, 0x0) 26m18.79572747s ago: executing program 0 (id=488): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x101) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x3) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r2, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x382, 0x0) 26m18.18015584s ago: executing program 0 (id=492): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\b4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccm\xf4\x1b\a&\x84\xfc\xa0?d\xa8\x02l\x05\x06f,\x19f \xc6\x89\a\xaa\xa8\xde\x04\xff\x13\"B\xcbM\xc2r\x96\xc8\xbe+3\xff\x1e\xe2KZ(\xdf\x02 s.o\x18\xfe\x18\xaf?\xda(\xd9\xa8\xd8\xf7\x12\x06Q<(\xb1\xd9\xa6\xcd\xf2\x96\x91HR\xed\x03\x83b\x19\'\x94<\f\xe3', 0x100000a3d9) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x6000, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0xd12, 0x80000000, 0x6, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x8006, 0x1, 0x2000000003, 0xeb1, r3, 0x8000) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x77) prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x2, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) setrlimit$auto(0x9a, &(0x7f0000000240)={0x0, 0x10000}) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000019ff714e00"}, 0x66) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'ip6_vti0\x00'}) 26m3.124226777s ago: executing program 33 (id=492): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\b4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccm\xf4\x1b\a&\x84\xfc\xa0?d\xa8\x02l\x05\x06f,\x19f \xc6\x89\a\xaa\xa8\xde\x04\xff\x13\"B\xcbM\xc2r\x96\xc8\xbe+3\xff\x1e\xe2KZ(\xdf\x02 s.o\x18\xfe\x18\xaf?\xda(\xd9\xa8\xd8\xf7\x12\x06Q<(\xb1\xd9\xa6\xcd\xf2\x96\x91HR\xed\x03\x83b\x19\'\x94<\f\xe3', 0x100000a3d9) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x6000, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0xd12, 0x80000000, 0x6, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x8006, 0x1, 0x2000000003, 0xeb1, r3, 0x8000) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x77) prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x2, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) setrlimit$auto(0x9a, &(0x7f0000000240)={0x0, 0x10000}) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000019ff714e00"}, 0x66) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'ip6_vti0\x00'}) 22m9.752800003s ago: executing program 1 (id=1395): unshare$auto(0x40000080) socket(0x2b, 0x1, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x8905, 0x38) (async, rerun: 32) msgctl$auto_MSG_INFO(0x10, 0xc, 0x0) fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/swaps\x00', 0x200140, 0x0) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socketpair$auto(0x1e, 0x801, 0x8000, 0x0) r2 = socket(0x11, 0x80003, 0x300) (async, rerun: 64) r3 = socket(0x11, 0x80003, 0x300) (rerun: 64) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) (async) fanotify_init$auto(0x5, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000003800)=""/168, 0xa8) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 64) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/comedi\x00', 0xa0000, 0x0) (rerun: 64) pread64$auto(r6, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="0103a8bd7000e9dbdf252e"], 0x14}, 0x1, 0x0, 0x0, 0x44819}, 0x48854) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) 22m8.935050832s ago: executing program 1 (id=1396): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033d940fdf05ecff75c12163ddeab942ed73d07dadd6f419694d591eca8162"}) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f0000000180)=""/97, 0x61) (async) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x53, 0x0, 0x9) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000ab2f43bf2181a3177544a73c2fcb91dbf9b8d7343a3c", @ANYRES16=r3, @ANYBLOB="10002cbd7000fddbdf250200000008000800fbffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0xced5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r4, 0x4b45, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x4000000000000c4}, 0x2, 0x0, 0x0, 0xffffffff}, 0x7}, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r1) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 22m8.887147991s ago: executing program 1 (id=1397): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)="12172a73f11b69a2cb941d84ea35802d47aa104606943b7131e96eac37ee86d369f624747b94f1f62a1a2118510f337273977c75ff5b9ea5cd2c000000000000", 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="15000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf250b000000250001002f7379732f6b65726e656c2f64656275672f77616b6575705f736f757263657300000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(0x3, 0x0, 0x80) unshare$auto(0xa0) socket(0x10, 0x2, 0x0) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) 22m8.817862599s ago: executing program 1 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01082abd7000fedbdf250400000004001e00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 22m7.248522164s ago: executing program 1 (id=1403): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0xa, 0x2, 0x0) ioctl$auto_OTPLOCK(r0, 0x800c4d10, &(0x7f0000000200)={0x4, 0x0, 0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r2, 0x4020565b, r2) 22m6.783241018s ago: executing program 1 (id=1405): mmap$auto(0x0, 0x880000004, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x80, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) ioprio_set$auto(0x1, 0xee01, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x5e0}, 0x1, 0x0, 0x0, 0x4004800}, 0xa388b514d86900bb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(r0, 0x84, 0x5) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x8) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010009"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x2, 0x3, 0xcf, 0xfffffffffffffffe, 0xffffffffffffffff, 0x200000000000) socket(0xa, 0x1, 0x84) 21m51.63154128s ago: executing program 34 (id=1405): mmap$auto(0x0, 0x880000004, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x80, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) ioprio_set$auto(0x1, 0xee01, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x5e0}, 0x1, 0x0, 0x0, 0x4004800}, 0xa388b514d86900bb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(r0, 0x84, 0x5) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x8) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010009"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x2, 0x3, 0xcf, 0xfffffffffffffffe, 0xffffffffffffffff, 0x200000000000) socket(0xa, 0x1, 0x84) 12.885278293s ago: executing program 5 (id=5405): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000300)=@raw_tracepoint={0x1ff, r0, 0x0, 0x1}, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) read$auto_ptdump_curusr_fops_(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x18, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240088d4}, 0x2000c880) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000001c40)={0x1360, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x22a, 0x4, 0x0, 0x1, [@typed={0x5, 0x4d, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x148, 0x0, 0x0, @pid}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}, @nested={0x8e, 0xd9, 0x0, 0x1, [@generic="bd6bdfedcffe422c74442587688653fc7e746d5cb4147c038d5e2f8f30e50bf019cc58d87a9f17baa75d81c8931b415fdef5612e74b4cdd06fbe7a7a76dc828fce05a88efaa772cb2f5961f8b3000e92a04464da56d9ed188b2277c5a4f35c0a3288d5b1822ddb5c5891f5611e576446a12f0d4be6ca", @typed={0x8, 0x5f, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xe6}, @typed={0x8, 0x113, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="814cff82c55b35fba4f0806e49949881d4bd03c8062e083d80c67e4ebc07b9cd324d93f8def98f082a70181a5c51dc405f7d9f75f364ed5f566c5759fb286889e6921d56eb9693d82031f128a9c5e8d38ddf3329d24634f793e4c6d3b20eb0d85d47171cf9865cab617fe6aabd82363491b2ae2426f7c54d1cc6f3e268319b930d08a5509e4393e98c90ef5623ef2e096314ec6e15386b20390b89c021a123f47f85a2ce34eed26b5a3e0d4ff7f64eb46e04aa060fee158905e798c880a4eee20f1f5c4a7882478825b698ad868c6eb61ce34cbdd4b1919dbc75c4", @generic="46373875adb448a68804ee50a6ec077451e79c3ec9211deddd7fe2dcd4efb04938b616795496b1564a93086509f47436dc9f67c8e724b86842293eb2cdc823fb36bab0ce8498e9f7707423269ff8deda0c6ef84d75cd671f7ddf142c8ef0f14c1729e167fc432fac43f5479d2cba1d4134712c0a8d2ec2014959e24d90441b9d5739d3f35f6f1cc94e4fa39bb74d57dc084e58e8b8a6be3cedba2b5903cdc1a40d770e"]}, @TIPC_NLA_PUBL={0x107c, 0x3, 0x0, 0x1, [@nested={0x1076, 0xe5, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0xf6}, @generic="c065237229ff715d311eae3ba988f15fd342f48b0f475b9ee7c886f38df321de7c5879c8cf789ec3c803f644cfa202a5c958211211a3f9678ba3c31cbe5def9fd72dffa9b9fa80f22182ba8e8c177a0e1b6bc43c4c52403ec8ade8f9ba88e855140176d68ecaf4e5ca4b", @generic="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", @generic]}]}, @TIPC_NLA_UNSPEC={0xa1, 0x0, "331e3503d08d6d57876648972fb4a9ecfbb12c2dcb58c6bc274740df3e0f1f85e4716b5e39b73cb24ba19223127dbc2e34fe9f6a6ff232be39a44f7f5e47025e133d819c6edf93d50416f034055ae7affbaa25008b5b4c8225ffec76ddd97b4e6d2e3da7e3c9acbcaefde898a8bf11a6d089de5853e0ef65aee4432411066d8f5248d3960f97c78eb628ed3c4f1e11962a2a674533dd119766a6071e38"}]}, 0x1360}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 12.481431751s ago: executing program 5 (id=5406): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x8000000000000000, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) r0 = timerfd_create$auto(0x69, 0x800007f) mmap$auto(0x2000004, 0x20009, 0x10000000000e3, 0x2000000000eb2, r0, 0x7ffe) io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x100000000001) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) clock_adjtime$auto(0x17, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r4 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x1) kill$auto(r4, 0x11) 8.416787764s ago: executing program 5 (id=5419): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x2) write$auto(r0, 0x0, 0xfdef) 8.063605127s ago: executing program 5 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00eeff03000000000000000c000100400000f900000000020020f1"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#$@\\]\\-\x00'}]}, 0x34}, 0x1, 0x300, 0x0, 0x801}, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000000003, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r5 = io_uring_setup$auto(0x406, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x3, 0xa}, 0x5, 0x3fc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) timerfd_create$auto(0x7, 0x0) timerfd_settime$auto(r9, 0x3, 0x0, 0x0) timerfd_settime$auto(r8, 0x3, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) 6.961151712s ago: executing program 6 (id=5425): r0 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8000008, 0x7, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x7ff, 0x200000100103}) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs1\x00', 0x18b500, 0x0) readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080), 0x8}, 0xc9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x885c2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x5, 0x1f7de, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0x38000000, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1f, 0x8, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(r0, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @empty}, 0x55) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) 5.857777972s ago: executing program 6 (id=5428): r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r0, &(0x7f0000005e00)={0x1, 0xf1, "82"}, 0x80000001) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1200, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x8, 0x800000000052, r1, 0x8000) 5.4259102s ago: executing program 6 (id=5430): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) read$auto(r0, 0x0, 0x2) write$auto(r0, 0x0, 0xfdef) 4.535582327s ago: executing program 6 (id=5432): mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) 4.306052668s ago: executing program 4 (id=5434): madvise$auto(0x1200000000000bf1, 0x300007, 0x40000008) madvise$auto(0x0, 0x6, 0x15) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x9, 0x0, 0x5cce, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r0, 0x0, 0x20000881) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) lseek$auto(r1, 0xe, 0x3) sysfs$auto(0x2, 0xbfffffffffd, 0xffffffff) r2 = prctl$auto(0xb, 0x1, 0x0, 0x5, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) write$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xf) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x286600, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, r3, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) listmount$auto(0x0, 0x0, 0xb22, 0x1) mmap$auto(0x0, 0x400009, 0x302afac7, 0x80000010, 0x8000000000000003, 0x7f70) mmap$auto(0x3, 0x5, 0x3, 0x11, 0xfffffffffffffffa, 0x8001) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x0, 0xe) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x8401, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0xfffffc96) 3.966477025s ago: executing program 2 (id=5435): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) mmap$auto(0x22f9, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x80000, 0x100) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c1200030000000000a3677337f9ecba075f6bba441818", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_PMKR0_NAME={0x74, 0x102, "99d7a4c43df5d244652df48edb81424b6536845908beaf1ecca7a7b476801645220710ffe957732b7c6e08520d54a236afc7d69b5e98e0c1da43ed3be20131874fa3174b6465e2e546868be6a8c77daed727ae62129df362bcd0403f9978a76fd22e46ee8affae3331913ed42645c768"}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20040040) read$auto(r4, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0xc) socketpair$auto(0x1e, 0x9, 0x8000000000000000, 0x0) memfd_secret$auto(0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x9c, 0x0, 0x1, @relative_id=0x4, 0x80}, 0x96) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsopen$auto(0x0, 0x3) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f00000000c0)='.', 0x1) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyef\x00', 0x200440, 0x0) ioctl$auto_TIOCSETD(r7, 0x5423, &(0x7f0000000100)="0bbd1d9ca801c79fa94e3dee99280ca46067c1453a943730f22be98b38f8f69050eeabe43a40a7219af6ebc093912047bfa5f61d3748859f3b5227b3dd4945a894db67debba048404379ab047785a3e8c03186d5052a6b16e3b7866d1fa20557b9d93ff77e17c6ec3a1a9a366d2220ea8f0d018ef18324fcf4724e5a18a0f26d68340bbad978") r8 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x6521e7df6fdb0a7e, 0x0) mmap$auto(0x800000, 0x7, 0x1ac, 0x8000000008011, r8, 0x80000000) 3.30052359s ago: executing program 5 (id=5436): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) read$auto(0x3, 0x0, 0x8080) (async) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async, rerun: 32) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) (async, rerun: 32) read$auto_ptdump_curusr_fops_(0xffffffffffffffff, &(0x7f0000001280)=""/234, 0xea) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c1340", 0x35) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) socket(0x2, 0xa, 0x80000001) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) ioctl$auto(0x3, 0x80000541b, 0x38) (rerun: 32) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r1) (async) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0xd0000, 0x0) (rerun: 32) setsockopt$auto(r2, 0x1005, 0x9, &(0x7f0000000140)='/sys/devices/LN\x00SYSTM:00/LNXPWRBN:00/power/wakeup_abo\xbe\x87\xf0#grt_c\xd2\x00\x00\xff\r\x0f\xc9\x99\xbd\xdf\xba', 0xfffeffff) 3.290296772s ago: executing program 2 (id=5437): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x7fffffff) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c4060000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ad42411396417698bd253068ffd662cb0584dbdf252100000008100300d7235ee5141c942673c493b3f7982dde28bd0b3dcdf4455a809d6de1da099f24e35b55c999bbbd225238c7ffe1dcdf2ac8d478430618e62c8cca081bb0f5d8e9d3c31b9f4d0155526d637233c4f01da9bd367219e6bd787c811790b36d26ebf8d5f944205f477175921f5f", @ANYRES32=0x0, @ANYBLOB="05000f000500000005000700d20000005c03308058befb24a435c7e6e1a12fd843a6bcb785b8c95d457279f07ea5b9ec5001ee4179b8c8a52a25c8de0c53d2bda79664146c68b1d36f29d7aff7895a60acb8d57c8833390afaf1121f39f304ed4ac55815fda83501f87aec79a50da207c09e91fd47122640ad6a4c1d079c8f8361d74bb33eb0cb9d71a1c353aa3e2635368b51ddf906f0c4211844e657a5571bf675c03f31fa71995547e596ed36b486bd54a5d9b3a05da53520f34ea74a76922e96eacc98208baee8c1674421f9126fde1fa11340c8fc9396df1208003500", @ANYRES32=0x0, @ANYBLOB="a980298ee7f8fbcca62c6a2a6f6347db68868c9b69ba73016886c5b110c4a10c99e282dec06c9601a925e2e1e0a2437a37d772b32a526fb17cfd1d00a8e71d10b212c676c9a8b6abfbf2a0f3b8bc0d8395ca0461f98aea1635ec2bdc40f2bb86952d7a80fcae3decfbb033a657def46cb3d4af8e0097d19bddac411da16ed51d74ef82ea1c2d8fa760b9eecd2dee4717e5d63579afd51f54236a472cdfd8156cd4484319c90b3781596226d2916bbf1e5354c1433038d2a1770d69978bb553998ca1453cdd1d6f98027b3a49ceb31aba3cf56ee47cc6f16e6d31a3ffd76fbaf4094108003900", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14005500000000000000000000000000000000010400c4800800030047910000fdcb602a486e773e368ec8a22dd70dedffc4f90800de0001000000a4148111a0637b4738c3b0feee0b831579d9665905452eeee43d6eabcefc40dafbdbf85b0ab3b54061bde0b31c2ebed39b50cbf0de80e99df9dd80d7f99990b550c26eaa17abbc9fd542cdee9cfac6e91dff0bd9439b0f79db26b71b15e15be1f280cff9aa83e3ccc54a3c0931616949a8b6e6790757b0f4067d1392cd2f65491a4448e2d385d97860e2cb85f5466c3faef6bc88e07e3c0b8b5d6ce66653e1d2c3bf3130bcd642db991cd4eaa4dee0a94acc309c4bc506b62683e1e5f9df6b54f5fb14564ce5a7ca86f676b5054061b6bfea8b8247f865f519228d5548d9eb6ed15c6c5d04a984042f011c2d52fb4ea9376c4641d2a800000008001d00", @ANYRES32, @ANYBLOB], 0x6c4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0xa, 0xfffffff8) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x9, 0x9, 0x6e, 0x4}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1b, 0x101}, 0x8000}, 0x7, 0x20020000) (async) write$auto(0x3, 0x0, 0x1000) socket(0xa, 0x1, 0x84) 3.25651365s ago: executing program 4 (id=5438): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x83}, {0x2, 0x800000000000006}, 0x4, 0x8, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) poll$auto(&(0x7f0000000040)={r0, 0x0, 0x1}, 0x8000, 0xff) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x5) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0xbb0a, 0x2000000df, 0x20000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) epoll_create$auto(0x8800001) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) 2.721073282s ago: executing program 6 (id=5439): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYRES32=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = socket(0x10, 0x2, 0xc) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r5) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01054d069556c1199d2e08d43f6e7dc69928bd7000fedbdf250300000005000500fc000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000580), 0x101040, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/irq/10/effective_affinity\x00', 0x101, 0x0) socket(0xa, 0x1, 0x106) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xc, 0x3, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x4, 0x6]}, 0x0) write$auto(r7, &(0x7f0000000040)=',/*@\x00', 0xf2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) r8 = socket(0x10, 0x80000, 0x1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) 2.434414736s ago: executing program 4 (id=5440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptys4\x00', 0x30dc0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_unevictable_allowed\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r4, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x2000, 0x20499d, 0x9) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), r2) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x2004c0c5) 2.34647592s ago: executing program 2 (id=5441): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100b02, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x40, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x60, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0xc000) r4 = bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0xd, 0x2, 0x8, 0x9, 0x4, 0x1fc, 0x5, 0xb5, 0x4, 0x808, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, 0x0, 0x400c010) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="04fa0800", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25030000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) epoll_pwait$auto(r5, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x8) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f00000010c0)="054d6a9778a894bfe1a1fa9862f4fc3389eb99a0e39583d6fea8ea04f206bb4394204a58", 0xec) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000025, 0x0, 0x4000000000007, 0x6}, 0x800}, 0x6, 0x5) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x2) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x20000, 0x0) 1.789462917s ago: executing program 4 (id=5442): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r0, 0x802c550a, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) 1.577880329s ago: executing program 2 (id=5443): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x1) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r0, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, r1, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) unshare$auto(0x40000080) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) 1.526499728s ago: executing program 6 (id=5444): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0x4, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x448400, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 1.403410797s ago: executing program 4 (id=5445): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) (async) sysfs$auto(0x2, 0x100000000000030, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x81) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x7, 0x809) (async) r1 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101402, 0x0) mmap$auto(0x200000, 0x400007, 0x9, 0x56, r1, 0x8000) socket(0x2, 0x801, 0x107) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cf5728bd7020fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) (async) mmap$auto(0x0, 0x400008, 0x20000000df, 0x9b72, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) read$auto(r2, 0x0, 0x3) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61) r6 = eventfd$auto(0x80) read$auto(r6, 0x0, 0xcc9c) 931.338318ms ago: executing program 5 (id=5446): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x5a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0xffffffffffffffff) r1 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$auto(r1, 0x0, 0x2000000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x400000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) ioctl$auto(0x3, 0x8906, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/flags\x00', 0x1c9440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000003480)=""/247, 0xf7) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x44088}, 0x20000010) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x89f1, 0x24) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/bpq0/duplex\x00', 0x40280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)=""/4118, 0x1016) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) 925.517497ms ago: executing program 2 (id=5447): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x873) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) 696.145456ms ago: executing program 2 (id=5448): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80, 0x8000, 0x8, 0x73, r0, 0x8) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto_PR_SET_VMA(0x53564d41, 0x4273, 0x7f, 0x200000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r3, [0x0, 0x0, 0x4], {0x6, 0x6, 0x8c48, 0x29a, 0x109, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x7, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xc, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0x100c, 0x2, 0x2]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 0s ago: executing program 4 (id=5449): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x442, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0x49, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x0, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqc\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): 000000246 R12: 0000000000000000 [ 1658.012750][T28958] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1658.012774][T28958] [ 1658.423752][T28958] Invalid ELF header magic: != ELF [ 1659.211680][T20421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1659.224160][T20421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1659.234233][T20421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1659.242627][T20421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1659.253999][T20421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1659.614026][T28979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4886'. [ 1659.753258][T28979] bond0: (slave bond_slave_1): Releasing backup interface [ 1660.512389][T28969] chnl_net:caif_netlink_parms(): no params data found [ 1661.004872][T28969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.051360][T28969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.079466][T28969] bridge_slave_0: entered allmulticast mode [ 1661.113098][T28969] bridge_slave_0: entered promiscuous mode [ 1661.153259][T28969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.205993][T28969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.247375][T28969] bridge_slave_1: entered allmulticast mode [ 1661.274220][T28969] bridge_slave_1: entered promiscuous mode [ 1661.307209][T20421] Bluetooth: hci0: command tx timeout [ 1661.415188][T28969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.478769][T28969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.631047][T28969] team0: Port device team_slave_0 added [ 1661.662666][T28969] team0: Port device team_slave_1 added [ 1661.789411][T28969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.829062][T28969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.891380][T28969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.929335][T28969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.936457][T28969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.998956][T28969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.260604][T28969] hsr_slave_0: entered promiscuous mode [ 1662.284440][T28969] hsr_slave_1: entered promiscuous mode [ 1662.312829][T29027] sp0: Synchronizing with TNC [ 1662.886174][T28969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.917134][T29040] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1663.033162][T28969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.315276][T28969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.387192][T20421] Bluetooth: hci0: command tx timeout [ 1663.628509][T28969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.106678][T28969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1664.221262][T28969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1664.434457][T28969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1664.503917][T28969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1664.587871][T29085] FAULT_INJECTION: forcing a failure. [ 1664.587871][T29085] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1664.618433][T28872] mkiss: ax0: crc mode is auto. [ 1664.669880][T29085] CPU: 0 UID: 0 PID: 29085 Comm: syz.2.4904 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1664.669920][T29085] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1664.669928][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1664.669939][T29085] Call Trace: [ 1664.669946][T29085] [ 1664.669954][T29085] dump_stack_lvl+0x100/0x190 [ 1664.669985][T29085] should_fail_ex.cold+0x5/0xa [ 1664.670007][T29085] get_futex_key+0x1d2/0x1620 [ 1664.670040][T29085] ? __pfx_get_futex_key+0x10/0x10 [ 1664.670077][T29085] futex_wake+0xea/0x530 [ 1664.670101][T29085] ? __pfx_futex_wake+0x10/0x10 [ 1664.670123][T29085] ? __sys_sendmmsg+0x367/0x430 [ 1664.670152][T29085] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1664.670176][T29085] ? __local_bh_enable_ip+0x9e/0x120 [ 1664.670210][T29085] do_futex+0x32b/0x350 [ 1664.670229][T29085] ? __pfx_do_futex+0x10/0x10 [ 1664.670254][T29085] __x64_sys_futex+0x34f/0x4d0 [ 1664.670276][T29085] ? __pfx___x64_sys_futex+0x10/0x10 [ 1664.670295][T29085] ? xfd_validate_state+0x129/0x190 [ 1664.670330][T29085] do_syscall_64+0x106/0xf80 [ 1664.670355][T29085] ? clear_bhb_loop+0x40/0x90 [ 1664.670378][T29085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.670397][T29085] RIP: 0033:0x7f28c499bf79 [ 1664.670413][T29085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.670430][T29085] RSP: 002b:00007f28c58d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1664.670448][T29085] RAX: ffffffffffffffda RBX: 00007f28c4c16098 RCX: 00007f28c499bf79 [ 1664.670460][T29085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28c4c1609c [ 1664.670472][T29085] RBP: 00007f28c4c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.670483][T29085] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1664.670493][T29085] R13: 00007f28c4c16128 R14: 00007ffc9e4cbcc0 R15: 00007ffc9e4cbda8 [ 1664.670517][T29085] [ 1665.455375][T29101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4910'. [ 1665.467426][T20421] Bluetooth: hci0: command tx timeout [ 1665.526467][T29101] bond0: (slave bond_slave_1): Releasing backup interface [ 1665.749126][T28969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.863097][T28969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.946241][T27329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.953400][T27329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.007053][T27329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.014278][T27329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.158436][T29120] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1666.215068][T29121] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1667.002864][T28969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.150355][ T30] audit: type=1326 audit(4294968140.236:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.6.4919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff481b9bf79 code=0x0 [ 1667.245600][T29147] kexec: Could not allocate control_code_buffer [ 1667.305735][T29153] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1667.547197][T20421] Bluetooth: hci0: command tx timeout [ 1668.409532][T28969] veth0_vlan: entered promiscuous mode [ 1668.552667][T28969] veth1_vlan: entered promiscuous mode [ 1668.693657][T28969] veth0_macvtap: entered promiscuous mode [ 1668.766491][T28969] veth1_macvtap: entered promiscuous mode [ 1668.843860][T28969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.921802][T28969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.226348][T27334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.299673][T27334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.358009][T27334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.366732][T27334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.603277][T27332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.648157][T27332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.698198][T27332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.728145][T27332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.062289][T29222] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1672.081850][T29247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4923'. [ 1672.398851][T29255] vivid-009: ================= START STATUS ================= [ 1672.398892][T29255] vivid-009: Radio HW Seek Mode: Bounded [ 1672.398925][T29255] vivid-009: Radio Programmable HW Seek: false [ 1672.398946][T29255] vivid-009: RDS Rx I/O Mode: Block I/O [ 1672.398966][T29255] vivid-009: Generate RBDS Instead of RDS: false [ 1672.398986][T29255] vivid-009: RDS Reception: true [ 1672.399028][T29255] vivid-009: RDS Program Type: 0 inactive [ 1672.399054][T29255] vivid-009: RDS PS Name: inactive [ 1672.399076][T29255] vivid-009: RDS Radio Text: inactive [ 1672.399099][T29255] vivid-009: RDS Traffic Announcement: false inactive [ 1672.399123][T29255] vivid-009: RDS Traffic Program: false inactive [ 1672.399147][T29255] vivid-009: RDS Music: false inactive [ 1672.399170][T29255] vivid-009: ================== END STATUS ================== [ 1672.413649][T29247] bond0: (slave bond_slave_1): Releasing backup interface [ 1673.758795][T29283] : entered promiscuous mode [ 1673.808455][T29283] netlink: 302 bytes leftover after parsing attributes in process `syz.2.4938'. [ 1674.101788][T29294] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1674.115452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.121891][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.318699][T29297] FAULT_INJECTION: forcing a failure. [ 1674.318699][T29297] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1674.380382][T29297] CPU: 0 UID: 0 PID: 29297 Comm: syz.5.4941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1674.380416][T29297] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1674.380423][T29297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1674.380434][T29297] Call Trace: [ 1674.380442][T29297] [ 1674.380449][T29297] dump_stack_lvl+0x100/0x190 [ 1674.380480][T29297] should_fail_ex.cold+0x5/0xa [ 1674.380499][T29297] ? unwind_get_return_address+0x59/0xa0 [ 1674.380530][T29297] get_futex_key+0x1d2/0x1620 [ 1674.380562][T29297] ? __pfx_get_futex_key+0x10/0x10 [ 1674.380592][T29297] ? stack_trace_save+0x8e/0xc0 [ 1674.380617][T29297] ? __pfx_stack_trace_save+0x10/0x10 [ 1674.380646][T29297] futex_wait_setup+0x81/0x500 [ 1674.380675][T29297] __futex_wait+0x19f/0x300 [ 1674.380700][T29297] ? __pfx___futex_wait+0x10/0x10 [ 1674.380726][T29297] ? __pfx_futex_wake_mark+0x10/0x10 [ 1674.380752][T29297] ? futex_hash+0x2c5/0x380 [ 1674.380787][T29297] futex_wait+0xed/0x380 [ 1674.380820][T29297] ? __pfx_futex_wait+0x10/0x10 [ 1674.380842][T29297] ? release_sock+0x21/0x220 [ 1674.380873][T29297] ? do_raw_spin_lock+0x128/0x260 [ 1674.380896][T29297] ? find_held_lock+0x2b/0x80 [ 1674.380923][T29297] do_futex+0x1ef/0x350 [ 1674.380942][T29297] ? __pfx_do_futex+0x10/0x10 [ 1674.380961][T29297] ? do_fcntl+0x811/0x1670 [ 1674.380992][T29297] __x64_sys_futex+0x34f/0x4d0 [ 1674.381014][T29297] ? __pfx___x64_sys_futex+0x10/0x10 [ 1674.381033][T29297] ? tomoyo_file_fcntl+0xa5/0xc0 [ 1674.381056][T29297] ? fput+0x79/0x100 [ 1674.381085][T29297] do_syscall_64+0x106/0xf80 [ 1674.381109][T29297] ? clear_bhb_loop+0x40/0x90 [ 1674.381131][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.381150][T29297] RIP: 0033:0x7f3bf479bf79 [ 1674.381166][T29297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.381184][T29297] RSP: 002b:00007f3bf56d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1674.381202][T29297] RAX: ffffffffffffffda RBX: 00007f3bf4a15fa8 RCX: 00007f3bf479bf79 [ 1674.381214][T29297] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3bf4a15fa8 [ 1674.381225][T29297] RBP: 00007f3bf4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.381236][T29297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.381247][T29297] R13: 00007f3bf4a16038 R14: 00007ffec26a6820 R15: 00007ffec26a6908 [ 1674.381270][T29297] [ 1674.988837][T20421] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1675.032993][T29310] binder: 29308:29310 ioctl 400454c9 200000000040 returned -22 [ 1675.857475][T29114] mkiss: ax0: crc mode is auto. [ 1675.924465][T20421] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1676.123883][T29334] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1676.383824][T29347] futex_wake_op: syz.2.4955 tries to shift op by -2048; fix this program [ 1676.568537][T29347] futex_wake_op: syz.2.4955 tries to shift op by -2048; fix this program [ 1676.975205][T20421] Bluetooth: hci4: unexpected event 0x2c length: 42 > 17 [ 1676.975233][T20421] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1677.831622][T29375] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1677.996284][T29370] bridge0: port 3(team0) entered blocking state [ 1678.043573][T29370] bridge0: port 3(team0) entered disabled state [ 1678.069249][T29385] random: crng reseeded on system resumption [ 1678.124140][T29370] team0: entered allmulticast mode [ 1678.148257][T29380] ERROR: Out of memory at tomoyo_memory_ok. [ 1678.175339][T29370] team_slave_0: entered allmulticast mode [ 1678.192572][T29384] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1678.213839][T29370] team_slave_1: entered allmulticast mode [ 1678.305795][T29370] team0: entered promiscuous mode [ 1678.374735][T29370] team_slave_0: entered promiscuous mode [ 1678.478174][T29370] team_slave_1: entered promiscuous mode [ 1678.570195][T29370] bridge0: port 3(team0) entered blocking state [ 1678.576570][T29370] bridge0: port 3(team0) entered forwarding state [ 1678.960543][T29395] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4967'. [ 1679.025358][T29398] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4968'. [ 1679.055226][T29399] bridge0: port 4(vlan0) entered blocking state [ 1679.118482][T29399] bridge0: port 4(vlan0) entered disabled state [ 1679.151760][T29399] vlan0: entered allmulticast mode [ 1679.181277][T29399] veth0_vlan: entered allmulticast mode [ 1679.220905][T29399] vlan0: entered promiscuous mode [ 1679.234718][T29399] bridge0: port 4(vlan0) entered blocking state [ 1679.241113][T29399] bridge0: port 4(vlan0) entered forwarding state [ 1679.422192][T29417] netlink: 'syz.2.4972': attribute type 27 has an invalid length. [ 1679.450535][T29417] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1679.488609][T29420] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0014 i0006 l2042 [ 1679.785041][T29433] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1679.814475][T29433] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1679.850696][T29433] cougar: G6 mapped to F18 [ 1680.134905][T29443] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4980'. [ 1682.818165][T16308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1682.830334][T16308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1682.839777][T16308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1682.862187][T16308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1682.872687][T16308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1683.865424][T16301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.141698][T16301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.502793][T16301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.615761][T29503] chnl_net:caif_netlink_parms(): no params data found [ 1684.753534][T16301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.907121][T16308] Bluetooth: hci1: command tx timeout [ 1685.434933][T29503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.485502][T29503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.521059][T29503] bridge_slave_0: entered allmulticast mode [ 1685.557681][T29503] bridge_slave_0: entered promiscuous mode [ 1685.615726][T29503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.660639][T29503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.701172][T29503] bridge_slave_1: entered allmulticast mode [ 1685.740038][T29503] bridge_slave_1: entered promiscuous mode [ 1685.829947][T29544] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4999'. [ 1685.879704][T28157] usb usb40-port2: attempt power cycle [ 1685.891983][T16301] team0: left allmulticast mode [ 1685.927966][T16301] team_slave_0: left allmulticast mode [ 1685.958672][T16301] team_slave_1: left allmulticast mode [ 1685.964648][T16301] team0: left promiscuous mode [ 1686.007478][T16301] team_slave_0: left promiscuous mode [ 1686.030654][T16301] team_slave_1: left promiscuous mode [ 1686.036288][T16301] bridge0: port 3(team0) entered disabled state [ 1686.112753][T16301] bridge_slave_1: left allmulticast mode [ 1686.147298][T16301] bridge_slave_1: left promiscuous mode [ 1686.196208][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.255071][T16301] bridge_slave_0: left allmulticast mode [ 1686.289184][T16301] bridge_slave_0: left promiscuous mode [ 1686.318844][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.498619][T28157] usb usb40-port2: unable to enumerate USB device [ 1686.832351][T16301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.879366][T16301] bond0 (unregistering): Released all slaves [ 1686.926034][T29503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.987222][T20421] Bluetooth: hci1: command tx timeout [ 1686.997292][T29503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.013178][T16301] : left promiscuous mode [ 1687.151932][T16308] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1687.227545][T29360] mkiss: ax0: crc mode is auto. [ 1687.251522][T29503] team0: Port device team_slave_0 added [ 1687.323315][T29503] team0: Port device team_slave_1 added [ 1687.522317][T29503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.560770][T29503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.695389][T29503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.812033][T29503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.848510][T29503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.961580][T29503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.471889][T29503] hsr_slave_0: entered promiscuous mode [ 1688.513441][T29503] hsr_slave_1: entered promiscuous mode [ 1688.543578][T29503] debugfs: 'hsr0' already exists in 'hsr' [ 1688.577420][T29503] Cannot create hsr debugfs directory [ 1689.067781][T16308] Bluetooth: hci1: command tx timeout [ 1689.213693][T16301] hsr_slave_0: left promiscuous mode [ 1689.226219][T16301] hsr_slave_1: left promiscuous mode [ 1689.245570][T16301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.265267][T16301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.282283][T16301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.310363][T16301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.355034][T16301] veth1_macvtap: left promiscuous mode [ 1689.369365][T16301] veth0_macvtap: left promiscuous mode [ 1689.781499][T16301] team0 (unregistering): Port device team_slave_1 removed [ 1689.831326][T16301] team0 (unregistering): Port device team_slave_0 removed [ 1691.147215][T16308] Bluetooth: hci1: command tx timeout [ 1692.649111][T29503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1692.871830][T29503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1692.960013][T29503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1693.076795][T29503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1693.786923][T29503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.810294][ T30] audit: type=1800 audit(4294968166.906:34): pid=29673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5011" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1693.919679][T29503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.220795][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.227972][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.361007][T27334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.368294][T27334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1695.585225][T29503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.674235][T29712] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 1695.757446][T29714] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1695.838432][T29503] veth0_vlan: entered promiscuous mode [ 1695.899358][T29503] veth1_vlan: entered promiscuous mode [ 1695.910840][T29717] random: crng reseeded on system resumption [ 1696.045790][T29503] veth0_macvtap: entered promiscuous mode [ 1696.143390][T29503] veth1_macvtap: entered promiscuous mode [ 1696.234166][T29503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.303965][T29503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.367630][T27334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.409413][T27334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.443086][T27334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.477268][T27334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.679515][T27342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.734630][T27342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.861933][T27332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.882669][T27342] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 917 with max blocks 16 with error 117 [ 1696.914889][T27332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.984364][T27342] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1696.984364][T27342] [ 1698.948825][T29586] mkiss: ax0: crc mode is auto. [ 1699.058702][T29767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5021'. [ 1699.507117][T29777] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5022'. [ 1699.871125][T29786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5025'. [ 1700.221014][T29800] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5026'. [ 1702.395239][T16308] Bluetooth: hci4: unexpected event 0x32 length: 727 > 9 [ 1702.498011][T29832] netlink: zone id is out of range [ 1702.576469][T29831] netlink: set zone limit has 8 unknown bytes [ 1702.638326][T29832] netlink: del zone limit has 4 unknown bytes [ 1703.536273][T29856] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1703.777955][T29858] ERROR: Out of memory at tomoyo_memory_ok. [ 1705.030644][T29879] FAULT_INJECTION: forcing a failure. [ 1705.030644][T29879] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.091445][T29879] CPU: 0 UID: 0 PID: 29879 Comm: syz.5.5052 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1705.091481][T29879] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1705.091490][T29879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1705.091501][T29879] Call Trace: [ 1705.091508][T29879] [ 1705.091516][T29879] dump_stack_lvl+0x100/0x190 [ 1705.091549][T29879] should_fail_ex.cold+0x5/0xa [ 1705.091571][T29879] should_failslab+0xc2/0x120 [ 1705.091597][T29879] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1705.091618][T29879] ? vm_area_alloc+0x1f/0x160 [ 1705.091635][T29879] ? vma_merge_new_range+0x38b/0xa30 [ 1705.091658][T29879] ? __sanitizer_cov_trace_const_cmp2+0x20/0x20 [ 1705.091688][T29879] vm_area_alloc+0x1f/0x160 [ 1705.091706][T29879] __mmap_region+0x1027/0x2760 [ 1705.091730][T29879] ? __pfx___mmap_region+0x10/0x10 [ 1705.091769][T29879] ? finish_task_switch.isra.0+0x205/0xb80 [ 1705.091796][T29879] ? lockdep_hardirqs_on+0x78/0x100 [ 1705.091823][T29879] ? finish_task_switch.isra.0+0x205/0xb80 [ 1705.091895][T29879] ? rcu_is_watching+0x12/0xc0 [ 1705.091925][T29879] mmap_region+0x180/0x3e0 [ 1705.091950][T29879] do_mmap+0xc63/0x12f0 [ 1705.091980][T29879] ? __pfx_do_mmap+0x10/0x10 [ 1705.092006][T29879] ? __pfx_down_write_killable+0x10/0x10 [ 1705.092035][T29879] vm_mmap_pgoff+0x29e/0x470 [ 1705.092067][T29879] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1705.092091][T29879] ? __fget_files+0x215/0x3d0 [ 1705.092118][T29879] ? __fget_files+0x21f/0x3d0 [ 1705.092145][T29879] ksys_mmap_pgoff+0x328/0x5b0 [ 1705.092174][T29879] __x64_sys_mmap+0x125/0x190 [ 1705.092201][T29879] do_syscall_64+0x106/0xf80 [ 1705.092227][T29879] ? clear_bhb_loop+0x40/0x90 [ 1705.092249][T29879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.092268][T29879] RIP: 0033:0x7f3bf479bf79 [ 1705.092284][T29879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.092301][T29879] RSP: 002b:00007f3bf56d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1705.092320][T29879] RAX: ffffffffffffffda RBX: 00007f3bf4a15fa0 RCX: 00007f3bf479bf79 [ 1705.092332][T29879] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 1705.092342][T29879] RBP: 00007f3bf48327e0 R08: 0000000000000003 R09: 0000000000008000 [ 1705.092353][T29879] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 1705.092364][T29879] R13: 00007f3bf4a16038 R14: 00007f3bf4a15fa0 R15: 00007ffec26a6908 [ 1705.092388][T29879] [ 1706.622267][T29895] ptrace attach of "./syz-executor exec"[28969] was attempted by "./syz-executor exec"[29895] [ 1710.000034][T29981] FAULT_INJECTION: forcing a failure. [ 1710.000034][T29981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1710.129496][T29981] CPU: 0 UID: 0 PID: 29981 Comm: syz.2.5067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1710.129529][T29981] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1710.129537][T29981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1710.129553][T29981] Call Trace: [ 1710.129560][T29981] [ 1710.129568][T29981] dump_stack_lvl+0x100/0x190 [ 1710.129599][T29981] should_fail_ex.cold+0x5/0xa [ 1710.129616][T29981] ? prepare_alloc_pages+0x16d/0x5f0 [ 1710.129645][T29981] should_fail_alloc_page+0xeb/0x140 [ 1710.129672][T29981] prepare_alloc_pages+0x1f0/0x5f0 [ 1710.129703][T29981] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1710.129737][T29981] ? __lock_acquire+0x4a5/0x2630 [ 1710.129762][T29981] ? __lock_acquire+0x4a5/0x2630 [ 1710.129789][T29981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1710.129823][T29981] ? __lock_acquire+0x4a5/0x2630 [ 1710.129846][T29981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1710.129874][T29981] ? policy_nodemask+0xed/0x4f0 [ 1710.129901][T29981] alloc_pages_mpol+0x1fb/0x550 [ 1710.129928][T29981] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1710.129959][T29981] alloc_pages_noprof+0x131/0x390 [ 1710.129985][T29981] pte_alloc_one+0x1e/0x3e0 [ 1710.130004][T29981] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 1710.130031][T29981] __handle_mm_fault+0x1e9e/0x2b60 [ 1710.130053][T29981] ? mt_find+0x45e/0x8e0 [ 1710.130082][T29981] ? __pfx___handle_mm_fault+0x10/0x10 [ 1710.130099][T29981] ? __pfx_mt_find+0x10/0x10 [ 1710.130146][T29981] handle_mm_fault+0x36d/0xa20 [ 1710.130169][T29981] __get_user_pages+0xf9c/0x34d0 [ 1710.130201][T29981] ? down_read_killable+0x30e/0x4c0 [ 1710.130217][T29981] ? __lock_acquire+0x4a5/0x2630 [ 1710.130236][T29981] ? __pfx___get_user_pages+0x10/0x10 [ 1710.130261][T29981] ? __lock_acquire+0x4a5/0x2630 [ 1710.130286][T29981] __gup_longterm_locked+0x87d/0x16f0 [ 1710.130321][T29981] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1710.130350][T29981] ? try_get_folio+0x262/0x750 [ 1710.130372][T29981] ? pmd_write+0xd3/0x150 [ 1710.130395][T29981] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1710.130425][T29981] gup_fast_fallback+0x18c6/0x2460 [ 1710.130469][T29981] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1710.130495][T29981] ? kasan_save_stack+0x30/0x50 [ 1710.130515][T29981] ? kasan_save_track+0x14/0x30 [ 1710.130535][T29981] ? __kasan_slab_alloc+0x89/0x90 [ 1710.130557][T29981] ? mempool_alloc_noprof+0x1b7/0x310 [ 1710.130581][T29981] ? bvec_alloc+0x197/0x210 [ 1710.130603][T29981] ? bio_alloc_bioset+0x59e/0x850 [ 1710.130626][T29981] ? blkdev_direct_IO+0xeae/0x1fb0 [ 1710.130644][T29981] ? blkdev_write_iter+0x703/0xd70 [ 1710.130662][T29981] ? vfs_write+0x6ac/0x1070 [ 1710.130682][T29981] ? ksys_write+0x12a/0x250 [ 1710.130702][T29981] ? do_syscall_64+0x106/0xf80 [ 1710.130726][T29981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.130750][T29981] pin_user_pages_fast+0xa7/0xf0 [ 1710.130782][T29981] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1710.130811][T29981] ? iov_iter_advance+0xac/0x6d0 [ 1710.130840][T29981] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1710.130876][T29981] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1710.130909][T29981] ? iov_iter_revert+0x252/0x5b0 [ 1710.130933][T29981] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1710.130957][T29981] iov_iter_extract_bvecs+0x10e/0xf40 [ 1710.130995][T29981] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 1710.131024][T29981] ? bio_init+0x404/0x610 [ 1710.131049][T29981] bio_iov_iter_get_pages+0x26a/0x970 [ 1710.131083][T29981] blkdev_direct_IO+0x1302/0x1fb0 [ 1710.131113][T29981] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1710.131145][T29981] blkdev_write_iter+0x703/0xd70 [ 1710.131170][T29981] vfs_write+0x6ac/0x1070 [ 1710.131192][T29981] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1710.131215][T29981] ? __pfx_vfs_write+0x10/0x10 [ 1710.131235][T29981] ? find_held_lock+0x2b/0x80 [ 1710.131275][T29981] ksys_write+0x12a/0x250 [ 1710.131296][T29981] ? __pfx_ksys_write+0x10/0x10 [ 1710.131325][T29981] do_syscall_64+0x106/0xf80 [ 1710.131350][T29981] ? clear_bhb_loop+0x40/0x90 [ 1710.131372][T29981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.131391][T29981] RIP: 0033:0x7fed9a59bf79 [ 1710.131407][T29981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.131426][T29981] RSP: 002b:00007fed98391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.131444][T29981] RAX: ffffffffffffffda RBX: 00007fed9a816270 RCX: 00007fed9a59bf79 [ 1710.131456][T29981] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1710.131467][T29981] RBP: 00007fed9a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.131478][T29981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.131489][T29981] R13: 00007fed9a816308 R14: 00007fed9a816270 R15: 00007ffddd2b5608 [ 1710.131513][T29981] [ 1712.155870][T29997] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5071'. [ 1712.566544][T16308] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1712.574809][T16308] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1712.593978][T29796] mkiss: ax0: crc mode is auto. [ 1713.159575][T30017] FAULT_INJECTION: forcing a failure. [ 1713.159575][T30017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1713.242606][T30017] CPU: 0 UID: 0 PID: 30017 Comm: syz.2.5076 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1713.242637][T30017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1713.242645][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1713.242655][T30017] Call Trace: [ 1713.242661][T30017] [ 1713.242669][T30017] dump_stack_lvl+0x100/0x190 [ 1713.242699][T30017] should_fail_ex.cold+0x5/0xa [ 1713.242720][T30017] get_futex_key+0x1d2/0x1620 [ 1713.242752][T30017] ? __pfx_get_futex_key+0x10/0x10 [ 1713.242795][T30017] futex_wake+0xea/0x530 [ 1713.242819][T30017] ? __pfx_futex_wake+0x10/0x10 [ 1713.242851][T30017] do_futex+0x32b/0x350 [ 1713.242870][T30017] ? __pfx_do_futex+0x10/0x10 [ 1713.242894][T30017] __x64_sys_futex+0x34f/0x4d0 [ 1713.242916][T30017] ? __pfx___x64_sys_futex+0x10/0x10 [ 1713.242944][T30017] do_syscall_64+0x106/0xf80 [ 1713.242968][T30017] ? clear_bhb_loop+0x40/0x90 [ 1713.242990][T30017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.243008][T30017] RIP: 0033:0x7fed9a59bf79 [ 1713.243023][T30017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.243041][T30017] RSP: 002b:00007fed987f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1713.243059][T30017] RAX: ffffffffffffffda RBX: 00007fed9a815fa8 RCX: 00007fed9a59bf79 [ 1713.243071][T30017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed9a815fac [ 1713.243082][T30017] RBP: 00007fed9a815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.243093][T30017] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1713.243103][T30017] R13: 00007fed9a816038 R14: 00007ffddd2b5520 R15: 00007ffddd2b5608 [ 1713.243126][T30017] [ 1713.620819][T16308] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1713.827865][T30035] ERROR: Out of memory at tomoyo_memory_ok. [ 1715.066241][T30049] ERROR: Out of memory at tomoyo_memory_ok. [ 1716.329076][T30081] netlink: 302 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1717.382753][T30106] nbd: must specify a device to reconfigure [ 1717.441393][T30109] FAULT_INJECTION: forcing a failure. [ 1717.441393][T30109] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.516960][T30109] CPU: 0 UID: 0 PID: 30109 Comm: syz.4.5094 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1717.517000][T30109] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1717.517007][T30109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1717.517018][T30109] Call Trace: [ 1717.517025][T30109] [ 1717.517033][T30109] dump_stack_lvl+0x100/0x190 [ 1717.517065][T30109] should_fail_ex.cold+0x5/0xa [ 1717.517086][T30109] should_failslab+0xc2/0x120 [ 1717.517112][T30109] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1717.517130][T30109] ? shrinker_alloc+0xf5/0xbc0 [ 1717.517159][T30109] shrinker_alloc+0xf5/0xbc0 [ 1717.517184][T30109] ? mark_held_locks+0x40/0x70 [ 1717.517203][T30109] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1717.517230][T30109] ? rcu_is_watching+0x12/0xc0 [ 1717.517254][T30109] ? __pfx_shrinker_alloc+0x10/0x10 [ 1717.517280][T30109] ? lockdep_init_map_type+0x5c/0x250 [ 1717.517300][T30109] ? lockdep_init_map_type+0x5c/0x250 [ 1717.517320][T30109] ? __raw_spin_lock_init+0x3a/0x110 [ 1717.517342][T30109] ? __init_rwsem+0x12d/0x1b0 [ 1717.517373][T30109] alloc_super+0x7c7/0xd20 [ 1717.517397][T30109] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1717.517419][T30109] sget_fc+0x117/0xc70 [ 1717.517439][T30109] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1717.517459][T30109] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1717.517479][T30109] get_tree_nodev+0x28/0x190 [ 1717.517502][T30109] mqueue_get_tree+0xf1/0x130 [ 1717.517523][T30109] vfs_get_tree+0x92/0x320 [ 1717.517542][T30109] fc_mount_longterm+0x1a/0x270 [ 1717.517562][T30109] mq_init_ns+0x482/0x820 [ 1717.517588][T30109] copy_ipcs+0x3dd/0x7e0 [ 1717.517614][T30109] create_new_namespaces+0x20a/0xac0 [ 1717.517641][T30109] ? security_capable+0x80/0x260 [ 1717.517667][T30109] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1717.517697][T30109] ksys_unshare+0x455/0xab0 [ 1717.517718][T30109] ? __pfx_ksys_unshare+0x10/0x10 [ 1717.517737][T30109] ? xfd_validate_state+0x129/0x190 [ 1717.517767][T30109] __x64_sys_unshare+0x31/0x40 [ 1717.517786][T30109] do_syscall_64+0x106/0xf80 [ 1717.517818][T30109] ? clear_bhb_loop+0x40/0x90 [ 1717.517841][T30109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.517860][T30109] RIP: 0033:0x7fb166b9bf79 [ 1717.517875][T30109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.517894][T30109] RSP: 002b:00007fb164df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1717.517913][T30109] RAX: ffffffffffffffda RBX: 00007fb166e15fa0 RCX: 00007fb166b9bf79 [ 1717.517926][T30109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1717.517938][T30109] RBP: 00007fb166c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.517949][T30109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1717.517959][T30109] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1717.517984][T30109] [ 1717.934927][T30117] usb usb15: usbfs: process 30117 (syz.6.5097) did not claim interface 0 before use [ 1718.051357][T30119] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1718.067689][T30132] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1719.577712][ C0] sd 0:0:1:0: [sda] tag#9777 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1719.588200][ C0] sd 0:0:1:0: [sda] tag#9777 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 1720.571344][T30175] mkiss: ax0: crc mode is auto. [ 1720.831939][T30170] No such timeout policy "" [ 1720.887837][T30170] netlink: Failed to associated timeout policy '' [ 1720.936123][T30189] FAULT_INJECTION: forcing a failure. [ 1720.936123][T30189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.043596][T30189] CPU: 0 UID: 0 PID: 30189 Comm: syz.4.5113 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1721.043628][T30189] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1721.043635][T30189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1721.043647][T30189] Call Trace: [ 1721.043653][T30189] [ 1721.043660][T30189] dump_stack_lvl+0x100/0x190 [ 1721.043690][T30189] should_fail_ex.cold+0x5/0xa [ 1721.043712][T30189] _copy_from_user+0x2e/0xd0 [ 1721.043759][T30189] sctp_setsockopt+0x8cc/0xb370 [ 1721.043781][T30189] ? __pfx_aa_sk_perm+0x10/0x10 [ 1721.043816][T30189] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1721.043838][T30189] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1721.043858][T30189] ? sock_common_setsockopt+0x2e/0xf0 [ 1721.043887][T30189] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1721.043918][T30189] do_sock_setsockopt+0xf3/0x1d0 [ 1721.043949][T30189] __sys_setsockopt+0x119/0x190 [ 1721.043977][T30189] __x64_sys_setsockopt+0xbd/0x160 [ 1721.044000][T30189] ? do_syscall_64+0x95/0xf80 [ 1721.044025][T30189] ? lockdep_hardirqs_on+0x78/0x100 [ 1721.044050][T30189] do_syscall_64+0x106/0xf80 [ 1721.044074][T30189] ? clear_bhb_loop+0x40/0x90 [ 1721.044097][T30189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.044115][T30189] RIP: 0033:0x7fb166b9bf79 [ 1721.044131][T30189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.044149][T30189] RSP: 002b:00007fb164df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1721.044167][T30189] RAX: ffffffffffffffda RBX: 00007fb166e15fa0 RCX: 00007fb166b9bf79 [ 1721.044179][T30189] RDX: 0000000000000010 RSI: 0000010000000084 RDI: 0000000000000003 [ 1721.044190][T30189] RBP: 00007fb164df6090 R08: 000000000000000c R09: 0000000000000000 [ 1721.044201][T30189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.044211][T30189] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1721.044234][T30189] [ 1724.480534][T30240] netlink: 'syz.2.5125': attribute type 1 has an invalid length. [ 1724.491751][T30242] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1724.547337][T30240] nbd: error processing sock list [ 1724.580732][T30245] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1724.900469][T30247] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1725.267553][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1725.365073][T30258] binder: BINDER_SET_CONTEXT_MGR already set [ 1725.428831][T30258] binder: 30257:30258 ioctl 4018620d 9 returned -16 [ 1725.863624][T30266] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1726.974358][T30293] FAULT_INJECTION: forcing a failure. [ 1726.974358][T30293] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1727.048724][T30293] CPU: 0 UID: 0 PID: 30293 Comm: syz.5.5137 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1727.048768][T30293] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1727.048776][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1727.048786][T30293] Call Trace: [ 1727.048793][T30293] [ 1727.048801][T30293] dump_stack_lvl+0x100/0x190 [ 1727.048832][T30293] should_fail_ex.cold+0x5/0xa [ 1727.048853][T30293] get_futex_key+0x1d2/0x1620 [ 1727.048886][T30293] ? __pfx_get_futex_key+0x10/0x10 [ 1727.048915][T30293] ? __asan_memcpy+0x3c/0x60 [ 1727.048941][T30293] futex_wait_setup+0x81/0x500 [ 1727.048969][T30293] __futex_wait+0x19f/0x300 [ 1727.048994][T30293] ? __pfx___futex_wait+0x10/0x10 [ 1727.049016][T30293] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1727.049046][T30293] ? __pfx_futex_wake_mark+0x10/0x10 [ 1727.049072][T30293] ? futex_hash+0x2c5/0x380 [ 1727.049107][T30293] futex_wait+0xed/0x380 [ 1727.049131][T30293] ? __pfx_futex_wait+0x10/0x10 [ 1727.049158][T30293] ? ksys_read+0x190/0x250 [ 1727.049179][T30293] ? ksys_read+0x190/0x250 [ 1727.049204][T30293] do_futex+0x1ef/0x350 [ 1727.049223][T30293] ? __pfx_do_futex+0x10/0x10 [ 1727.049249][T30293] __x64_sys_futex+0x34f/0x4d0 [ 1727.049270][T30293] ? fput+0x79/0x100 [ 1727.049296][T30293] ? __pfx___x64_sys_futex+0x10/0x10 [ 1727.049314][T30293] ? ksys_read+0x1ac/0x250 [ 1727.049334][T30293] ? __pfx_ksys_read+0x10/0x10 [ 1727.049363][T30293] do_syscall_64+0x106/0xf80 [ 1727.049387][T30293] ? clear_bhb_loop+0x40/0x90 [ 1727.049409][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.049427][T30293] RIP: 0033:0x7f3bf479bf79 [ 1727.049443][T30293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.049461][T30293] RSP: 002b:00007f3bf56d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1727.049479][T30293] RAX: ffffffffffffffda RBX: 00007f3bf4a15fa8 RCX: 00007f3bf479bf79 [ 1727.049491][T30293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3bf4a15fa8 [ 1727.049502][T30293] RBP: 00007f3bf4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.049512][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.049523][T30293] R13: 00007f3bf4a16038 R14: 00007ffec26a6820 R15: 00007ffec26a6908 [ 1727.049546][T30293] [ 1727.451141][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5141'. [ 1727.672945][T30306] hsr_slave_0 (unregistering): left promiscuous mode [ 1727.934521][T30321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5144'. [ 1731.225708][T30395] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1731.314644][T30394] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1731.672304][T30415] FAULT_INJECTION: forcing a failure. [ 1731.672304][T30415] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.875250][T30415] CPU: 0 UID: 0 PID: 30415 Comm: syz.4.5164 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1731.875285][T30415] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1731.875293][T30415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1731.875304][T30415] Call Trace: [ 1731.875311][T30415] [ 1731.875319][T30415] dump_stack_lvl+0x100/0x190 [ 1731.875349][T30415] should_fail_ex.cold+0x5/0xa [ 1731.875371][T30415] should_failslab+0xc2/0x120 [ 1731.875396][T30415] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1731.875417][T30415] ? __kernfs_new_node+0xd2/0x960 [ 1731.875450][T30415] __kernfs_new_node+0xd2/0x960 [ 1731.875482][T30415] ? __pfx___kernfs_new_node+0x10/0x10 [ 1731.875516][T30415] ? find_held_lock+0x2b/0x80 [ 1731.875540][T30415] ? kernfs_root+0xee/0x2a0 [ 1731.875566][T30415] ? kernfs_root+0xee/0x2a0 [ 1731.875599][T30415] kernfs_new_node+0x11b/0x1a0 [ 1731.875621][T30415] __kernfs_create_file+0x53/0x350 [ 1731.875647][T30415] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1731.875680][T30415] sysfs_merge_group+0x194/0x340 [ 1731.875709][T30415] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1731.875741][T30415] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1731.875774][T30415] ? bus_to_subsys+0x114/0x150 [ 1731.875809][T30415] dpm_sysfs_add+0x237/0x280 [ 1731.875834][T30415] device_add+0x9ef/0x1950 [ 1731.875862][T30415] ? __pfx_device_add+0x10/0x10 [ 1731.875897][T30415] nfc_register_device+0x41/0x3e0 [ 1731.875925][T30415] nci_register_device+0x7f1/0xb80 [ 1731.875947][T30415] ? __pfx_nci_register_device+0x10/0x10 [ 1731.875971][T30415] ? lockdep_init_map_type+0x5c/0x250 [ 1731.875996][T30415] virtual_ncidev_open+0x141/0x220 [ 1731.876026][T30415] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1731.876054][T30415] misc_open+0x26d/0x450 [ 1731.876079][T30415] ? __pfx_misc_open+0x10/0x10 [ 1731.876104][T30415] chrdev_open+0x234/0x6a0 [ 1731.876127][T30415] ? __pfx_apparmor_file_open+0x10/0x10 [ 1731.876151][T30415] ? __pfx_chrdev_open+0x10/0x10 [ 1731.876176][T30415] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1731.876206][T30415] do_dentry_open+0x6d8/0x1660 [ 1731.876229][T30415] ? __pfx_chrdev_open+0x10/0x10 [ 1731.876259][T30415] vfs_open+0x82/0x3f0 [ 1731.876290][T30415] path_openat+0x208c/0x31a0 [ 1731.876322][T30415] ? __pfx_path_openat+0x10/0x10 [ 1731.876355][T30415] do_file_open+0x20e/0x430 [ 1731.876381][T30415] ? __pfx_do_file_open+0x10/0x10 [ 1731.876424][T30415] ? alloc_fd+0x476/0x790 [ 1731.876449][T30415] ? do_getname+0x191/0x390 [ 1731.876479][T30415] do_sys_openat2+0x10d/0x1e0 [ 1731.876496][T30415] ? __pfx_do_sys_openat2+0x10/0x10 [ 1731.876534][T30415] __x64_sys_openat+0x12d/0x210 [ 1731.876552][T30415] ? __pfx___x64_sys_openat+0x10/0x10 [ 1731.876569][T30415] ? xfd_validate_state+0x129/0x190 [ 1731.876600][T30415] do_syscall_64+0x106/0xf80 [ 1731.876625][T30415] ? clear_bhb_loop+0x40/0x90 [ 1731.876648][T30415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.876667][T30415] RIP: 0033:0x7fb166b9bf79 [ 1731.876683][T30415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.876701][T30415] RSP: 002b:00007fb164df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1731.876720][T30415] RAX: ffffffffffffffda RBX: 00007fb166e15fa0 RCX: 00007fb166b9bf79 [ 1731.876732][T30415] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1731.876744][T30415] RBP: 00007fb166c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.876761][T30415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.876772][T30415] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1731.876797][T30415] [ 1732.767289][T16296] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 912 with max blocks 21 with error 117 [ 1732.831508][T16296] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1732.831508][T16296] [ 1733.548788][T30199] mkiss: ax0: crc mode is auto. [ 1734.533112][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1735.552434][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.559300][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.435869][T30475] FAULT_INJECTION: forcing a failure. [ 1737.435869][T30475] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.601881][T30475] CPU: 0 UID: 0 PID: 30475 Comm: syz.2.5175 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1737.601914][T30475] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1737.601922][T30475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1737.601932][T30475] Call Trace: [ 1737.601939][T30475] [ 1737.601947][T30475] dump_stack_lvl+0x100/0x190 [ 1737.601977][T30475] should_fail_ex.cold+0x5/0xa [ 1737.601999][T30475] should_failslab+0xc2/0x120 [ 1737.602026][T30475] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1737.602054][T30475] ? security_inode_alloc+0x3b/0x2c0 [ 1737.602079][T30475] ? lockdep_init_map_type+0x5c/0x250 [ 1737.602102][T30475] security_inode_alloc+0x3b/0x2c0 [ 1737.602128][T30475] inode_init_always_gfp+0xced/0x1040 [ 1737.602156][T30475] alloc_inode+0x8e/0x250 [ 1737.602174][T30475] new_inode+0x22/0x1c0 [ 1737.602194][T30475] mqueue_get_inode+0x2e/0xe00 [ 1737.602216][T30475] ? sget_fc+0x801/0xc70 [ 1737.602237][T30475] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1737.602258][T30475] mqueue_fill_super+0x14d/0x260 [ 1737.602279][T30475] get_tree_nodev+0xdd/0x190 [ 1737.602302][T30475] mqueue_get_tree+0xf1/0x130 [ 1737.602322][T30475] vfs_get_tree+0x92/0x320 [ 1737.602341][T30475] fc_mount_longterm+0x1a/0x270 [ 1737.602362][T30475] mq_init_ns+0x482/0x820 [ 1737.602387][T30475] copy_ipcs+0x3dd/0x7e0 [ 1737.602414][T30475] create_new_namespaces+0x20a/0xac0 [ 1737.602441][T30475] ? security_capable+0x80/0x260 [ 1737.602466][T30475] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1737.602497][T30475] ksys_unshare+0x455/0xab0 [ 1737.602519][T30475] ? __pfx_ksys_unshare+0x10/0x10 [ 1737.602538][T30475] ? xfd_validate_state+0x129/0x190 [ 1737.602568][T30475] __x64_sys_unshare+0x31/0x40 [ 1737.602587][T30475] do_syscall_64+0x106/0xf80 [ 1737.602614][T30475] ? clear_bhb_loop+0x40/0x90 [ 1737.602636][T30475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.602655][T30475] RIP: 0033:0x7fed9a59bf79 [ 1737.602670][T30475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.602689][T30475] RSP: 002b:00007fed987f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1737.602708][T30475] RAX: ffffffffffffffda RBX: 00007fed9a815fa0 RCX: 00007fed9a59bf79 [ 1737.602720][T30475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1737.602732][T30475] RBP: 00007fed9a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.602743][T30475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.602754][T30475] R13: 00007fed9a816038 R14: 00007fed9a815fa0 R15: 00007ffddd2b5608 [ 1737.602779][T30475] [ 1738.357425][T30482] ERROR: Out of memory at tomoyo_memory_ok. [ 1738.477981][T30484] FAULT_INJECTION: forcing a failure. [ 1738.477981][T30484] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1738.600092][T30484] CPU: 0 UID: 0 PID: 30484 Comm: syz.2.5179 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1738.600124][T30484] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1738.600132][T30484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1738.600142][T30484] Call Trace: [ 1738.600150][T30484] [ 1738.600157][T30484] dump_stack_lvl+0x100/0x190 [ 1738.600189][T30484] should_fail_ex.cold+0x5/0xa [ 1738.600211][T30484] get_futex_key+0x1d2/0x1620 [ 1738.600243][T30484] ? __pfx_get_futex_key+0x10/0x10 [ 1738.600272][T30484] ? find_held_lock+0x2b/0x80 [ 1738.600296][T30484] ? futex_wake+0x456/0x530 [ 1738.600324][T30484] futex_wake+0xea/0x530 [ 1738.600346][T30484] ? __lock_acquire+0x4a5/0x2630 [ 1738.600365][T30484] ? __pfx_futex_wake+0x10/0x10 [ 1738.600405][T30484] do_futex+0x32b/0x350 [ 1738.600440][T30484] ? __pfx_do_futex+0x10/0x10 [ 1738.600471][T30484] ? __fget_files+0x21f/0x3d0 [ 1738.600501][T30484] __x64_sys_futex+0x34f/0x4d0 [ 1738.600527][T30484] ? __pfx___x64_sys_futex+0x10/0x10 [ 1738.600546][T30484] ? xfd_validate_state+0x129/0x190 [ 1738.600576][T30484] do_syscall_64+0x106/0xf80 [ 1738.600602][T30484] ? clear_bhb_loop+0x40/0x90 [ 1738.600625][T30484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.600644][T30484] RIP: 0033:0x7fed9a59bf79 [ 1738.600660][T30484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.600678][T30484] RSP: 002b:00007fed987f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1738.600696][T30484] RAX: ffffffffffffffda RBX: 00007fed9a815fa8 RCX: 00007fed9a59bf79 [ 1738.600708][T30484] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed9a815fac [ 1738.600719][T30484] RBP: 00007fed9a815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.600730][T30484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1738.600742][T30484] R13: 00007fed9a816038 R14: 00007ffddd2b5520 R15: 00007ffddd2b5608 [ 1738.600765][T30484] [ 1739.545959][T30495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1739.641136][T30495] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1740.101384][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5182'. [ 1741.531771][T30558] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1742.652883][T30588] netlink: 491 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1743.005916][T30592] netlink: 491 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1743.224778][ T30] audit: type=1800 audit(4294968216.316:35): pid=30596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=137986 res=0 errno=0 [ 1743.486924][T30596] could not allocate digest TFM handle [ 1743.744438][T30610] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1743.797858][T30609] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1744.148796][T30627] ERROR: Out of memory at tomoyo_memory_ok. [ 1744.180090][T30627] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1744.804571][T30451] mkiss: ax0: crc mode is auto. [ 1745.098422][T30653] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1746.945739][T30683] usb usb15: usbfs: process 30683 (syz.6.5215) did not claim interface 0 before use [ 1747.245890][T30685] random: crng reseeded on system resumption [ 1747.281853][T20421] Bluetooth: hci0: unexpected event 0x2f length: 435 > 260 [ 1747.281877][T20421] Bluetooth: hci0: Malformed Event: 0x2f [ 1747.400742][T30687] mkiss: ax1: crc mode is auto. [ 1747.948544][T30698] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5220'. [ 1749.093377][T20421] Bluetooth: hci1: unexpected event 0x2f length: 435 > 260 [ 1749.093406][T20421] Bluetooth: hci1: Malformed Event: 0x2f [ 1749.131578][T30730] binder: 30727:30730 ioctl 4068aea3 200000000080 returned -22 [ 1749.355897][T30728] mkiss: ax1: crc mode is auto. [ 1749.490277][T30739] netlink: 93 bytes leftover after parsing attributes in process `syz.6.5229'. [ 1750.001152][ T30] audit: type=1800 audit(4294968223.086:36): pid=30748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5232" name="dbroot" dev="configfs" ino=139246 res=0 errno=0 [ 1751.277904][T30776] FAULT_INJECTION: forcing a failure. [ 1751.277904][T30776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1751.549534][T30776] CPU: 0 UID: 0 PID: 30776 Comm: syz.2.5236 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1751.549568][T30776] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1751.549576][T30776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1751.549586][T30776] Call Trace: [ 1751.549593][T30776] [ 1751.549600][T30776] dump_stack_lvl+0x100/0x190 [ 1751.549631][T30776] should_fail_ex.cold+0x5/0xa [ 1751.549652][T30776] _copy_to_user+0x32/0xd0 [ 1751.549681][T30776] simple_read_from_buffer+0xcb/0x170 [ 1751.549705][T30776] proc_fail_nth_read+0x1af/0x230 [ 1751.549738][T30776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1751.549764][T30776] ? rw_verify_area+0xce/0x6d0 [ 1751.549783][T30776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1751.549807][T30776] vfs_read+0x1e4/0xb30 [ 1751.549831][T30776] ? __pfx_vfs_read+0x10/0x10 [ 1751.549852][T30776] ? __fget_files+0x215/0x3d0 [ 1751.549878][T30776] ? __fget_files+0x21f/0x3d0 [ 1751.549907][T30776] ksys_read+0x12a/0x250 [ 1751.549928][T30776] ? __pfx_ksys_read+0x10/0x10 [ 1751.549949][T30776] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1751.549974][T30776] do_syscall_64+0x106/0xf80 [ 1751.550000][T30776] ? clear_bhb_loop+0x40/0x90 [ 1751.550022][T30776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.550041][T30776] RIP: 0033:0x7fed9a55c84e [ 1751.550057][T30776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1751.550075][T30776] RSP: 002b:00007fed987b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1751.550093][T30776] RAX: ffffffffffffffda RBX: 00007fed987b46c0 RCX: 00007fed9a55c84e [ 1751.550105][T30776] RDX: 000000000000000f RSI: 00007fed987b40a0 RDI: 0000000000000002 [ 1751.550115][T30776] RBP: 00007fed987b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.550126][T30776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.550137][T30776] R13: 00007fed9a816218 R14: 00007fed9a816180 R15: 00007ffddd2b5608 [ 1751.550160][T30776] [ 1755.144639][T30804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'. [ 1755.170506][T20421] Bluetooth: hci3: unexpected event 0x2f length: 435 > 260 [ 1755.170534][T20421] Bluetooth: hci3: Malformed Event: 0x2f [ 1755.504351][T30810] mkiss: ax1: crc mode is auto. [ 1756.258656][T30672] mkiss: ax0: crc mode is auto. [ 1757.008521][T30826] FAULT_INJECTION: forcing a failure. [ 1757.008521][T30826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.169205][T30826] CPU: 0 UID: 0 PID: 30826 Comm: syz.2.5245 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1757.169238][T30826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1757.169245][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1757.169256][T30826] Call Trace: [ 1757.169263][T30826] [ 1757.169271][T30826] dump_stack_lvl+0x100/0x190 [ 1757.169301][T30826] should_fail_ex.cold+0x5/0xa [ 1757.169322][T30826] _copy_from_iter+0x1f4/0x1690 [ 1757.169354][T30826] ? policy_nodemask+0xed/0x4f0 [ 1757.169378][T30826] ? __pfx__copy_from_iter+0x10/0x10 [ 1757.169406][T30826] ? alloc_pages_mpol+0x25a/0x550 [ 1757.169431][T30826] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1757.169460][T30826] copy_page_from_iter+0xde/0x180 [ 1757.169490][T30826] anon_pipe_write+0xae4/0x1d40 [ 1757.169522][T30826] ? __pfx_anon_pipe_write+0x10/0x10 [ 1757.169544][T30826] ? common_file_perm+0x1ab/0x4f0 [ 1757.169572][T30826] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1757.169602][T30826] ? bpf_lsm_file_permission+0x9/0x10 [ 1757.169625][T30826] ? security_file_permission+0x76/0x210 [ 1757.169653][T30826] ? rw_verify_area+0xce/0x6d0 [ 1757.169675][T30826] vfs_write+0x6ac/0x1070 [ 1757.169697][T30826] ? __pfx_anon_pipe_write+0x10/0x10 [ 1757.169722][T30826] ? __pfx_vfs_write+0x10/0x10 [ 1757.169742][T30826] ? find_held_lock+0x2b/0x80 [ 1757.169782][T30826] ksys_write+0x1f8/0x250 [ 1757.169803][T30826] ? __pfx_ksys_write+0x10/0x10 [ 1757.169832][T30826] do_syscall_64+0x106/0xf80 [ 1757.169856][T30826] ? clear_bhb_loop+0x40/0x90 [ 1757.169879][T30826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.169897][T30826] RIP: 0033:0x7fed9a59bf79 [ 1757.169913][T30826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.169931][T30826] RSP: 002b:00007fed987d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.169949][T30826] RAX: ffffffffffffffda RBX: 00007fed9a816090 RCX: 00007fed9a59bf79 [ 1757.169961][T30826] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1757.169971][T30826] RBP: 00007fed9a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.169982][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.169992][T30826] R13: 00007fed9a816128 R14: 00007fed9a816090 R15: 00007ffddd2b5608 [ 1757.170022][T30826] [ 1758.337040][T30851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5249'. [ 1758.364395][T30854] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1758.377194][T30849] bond0: invalid ARP target specified [ 1758.565179][T30849] FAULT_INJECTION: forcing a failure. [ 1758.565179][T30849] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.662655][T30869] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5253'. [ 1758.687407][T30849] CPU: 0 UID: 0 PID: 30849 Comm: syz.4.5249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1758.687440][T30849] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1758.687447][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1758.687459][T30849] Call Trace: [ 1758.687466][T30849] [ 1758.687473][T30849] dump_stack_lvl+0x100/0x190 [ 1758.687504][T30849] should_fail_ex.cold+0x5/0xa [ 1758.687526][T30849] should_failslab+0xc2/0x120 [ 1758.687551][T30849] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1758.687574][T30849] ? is_bpf_text_address+0x8a/0x1a0 [ 1758.687595][T30849] ? __get_vm_area_node+0x101/0x330 [ 1758.687619][T30849] ? is_bpf_text_address+0x8a/0x1a0 [ 1758.687644][T30849] __get_vm_area_node+0x101/0x330 [ 1758.687674][T30849] __vmalloc_node_range_noprof+0x213/0x1530 [ 1758.687703][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1758.687731][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1758.687753][T30849] ? stack_trace_save+0x8e/0xc0 [ 1758.687780][T30849] ? stack_depot_save_flags+0x27/0x9d0 [ 1758.687808][T30849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1758.687839][T30849] ? kasan_save_stack+0x3f/0x50 [ 1758.687858][T30849] ? kasan_save_stack+0x30/0x50 [ 1758.687878][T30849] ? kasan_save_track+0x14/0x30 [ 1758.687898][T30849] ? do_seccomp+0x7ae/0x2740 [ 1758.687915][T30849] ? do_syscall_64+0x106/0xf80 [ 1758.687939][T30849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.687962][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1758.687990][T30849] __vmalloc_node_noprof+0xad/0xf0 [ 1758.688018][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1758.688042][T30849] __vmalloc_noprof+0xa3/0x120 [ 1758.688069][T30849] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1758.688104][T30849] bpf_prog_alloc_no_stats+0x58/0x640 [ 1758.688128][T30849] bpf_prog_alloc+0x3b/0x200 [ 1758.688150][T30849] bpf_prog_create_from_user+0xb4/0x2f0 [ 1758.688180][T30849] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1758.688211][T30849] do_seccomp+0x7f7/0x2740 [ 1758.688235][T30849] ? __pfx_do_seccomp+0x10/0x10 [ 1758.688256][T30849] ? xfd_validate_state+0x129/0x190 [ 1758.688287][T30849] do_syscall_64+0x106/0xf80 [ 1758.688312][T30849] ? clear_bhb_loop+0x40/0x90 [ 1758.688334][T30849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.688353][T30849] RIP: 0033:0x7fb166b9bf79 [ 1758.688369][T30849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.688387][T30849] RSP: 002b:00007fb164df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1758.688410][T30849] RAX: ffffffffffffffda RBX: 00007fb166e15fa0 RCX: 00007fb166b9bf79 [ 1758.688422][T30849] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1758.688434][T30849] RBP: 00007fb166c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.688444][T30849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.688455][T30849] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1758.688479][T30849] [ 1758.693298][T30849] syz.4.5249: vmalloc error: size 32768, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1759.059858][T30876] Invalid ELF header magic: != ELF [ 1759.438381][T30876] Invalid ELF header magic: != ELF [ 1760.060955][T30902] random: crng reseeded on system resumption [ 1761.301054][T30916] program syz.6.5262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1761.348954][T30916] snd_virmidi snd_virmidi.0: control 1:-5:4194312:1Յ:0 is already present [ 1761.651025][T30849] ,cpuset=/,mems_allowed=0-1 [ 1761.717512][T30849] CPU: 0 UID: 0 PID: 30849 Comm: syz.4.5249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1761.717545][T30849] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1761.717552][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1761.717563][T30849] Call Trace: [ 1761.717569][T30849] [ 1761.717577][T30849] dump_stack_lvl+0x100/0x190 [ 1761.717607][T30849] warn_alloc.cold+0x95/0x1c1 [ 1761.717637][T30849] ? __pfx_warn_alloc+0x10/0x10 [ 1761.717657][T30849] ? rcu_is_watching+0x12/0xc0 [ 1761.717681][T30849] ? trace_kmalloc+0x83/0xb0 [ 1761.717703][T30849] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1761.717729][T30849] ? __kasan_kmalloc+0x8a/0xb0 [ 1761.717757][T30849] ? __get_vm_area_node+0x208/0x330 [ 1761.717788][T30849] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1761.717822][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1761.717845][T30849] ? stack_trace_save+0x8e/0xc0 [ 1761.717872][T30849] ? stack_depot_save_flags+0x27/0x9d0 [ 1761.717901][T30849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1761.717931][T30849] ? kasan_save_stack+0x3f/0x50 [ 1761.717951][T30849] ? kasan_save_stack+0x30/0x50 [ 1761.717970][T30849] ? kasan_save_track+0x14/0x30 [ 1761.717990][T30849] ? do_seccomp+0x7ae/0x2740 [ 1761.718007][T30849] ? do_syscall_64+0x106/0xf80 [ 1761.718031][T30849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.718054][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1761.718074][T30849] __vmalloc_node_noprof+0xad/0xf0 [ 1761.718101][T30849] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1761.718125][T30849] __vmalloc_noprof+0xa3/0x120 [ 1761.718152][T30849] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1761.718187][T30849] bpf_prog_alloc_no_stats+0x58/0x640 [ 1761.718212][T30849] bpf_prog_alloc+0x3b/0x200 [ 1761.718234][T30849] bpf_prog_create_from_user+0xb4/0x2f0 [ 1761.718263][T30849] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1761.718293][T30849] do_seccomp+0x7f7/0x2740 [ 1761.718317][T30849] ? __pfx_do_seccomp+0x10/0x10 [ 1761.718338][T30849] ? xfd_validate_state+0x129/0x190 [ 1761.718368][T30849] do_syscall_64+0x106/0xf80 [ 1761.718392][T30849] ? clear_bhb_loop+0x40/0x90 [ 1761.718414][T30849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.718432][T30849] RIP: 0033:0x7fb166b9bf79 [ 1761.718449][T30849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.718467][T30849] RSP: 002b:00007fb164df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1761.718485][T30849] RAX: ffffffffffffffda RBX: 00007fb166e15fa0 RCX: 00007fb166b9bf79 [ 1761.718497][T30849] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1761.718508][T30849] RBP: 00007fb166c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.718518][T30849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.718529][T30849] R13: 00007fb166e16038 R14: 00007fb166e15fa0 R15: 00007ffcfeaef0a8 [ 1761.718557][T30849] [ 1762.038210][T30849] Mem-Info: [ 1762.041426][T30849] active_anon:19041 inactive_anon:23117 isolated_anon:0 [ 1762.041426][T30849] active_file:24141 inactive_file:38810 isolated_file:0 [ 1762.041426][T30849] unevictable:768 dirty:1553 writeback:512 [ 1762.041426][T30849] slab_reclaimable:12900 slab_unreclaimable:98656 [ 1762.041426][T30849] mapped:28411 shmem:14179 pagetables:1706 [ 1762.041426][T30849] sec_pagetables:0 bounce:0 [ 1762.041426][T30849] kernel_misc_reclaimable:0 [ 1762.041426][T30849] free:1250633 free_pcp:32380 free_cma:0 [ 1762.087792][T30849] Node 0 active_anon:76164kB inactive_anon:92468kB active_file:95688kB inactive_file:153448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112812kB dirty:6212kB writeback:2048kB shmem:55180kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:90112kB kernel_stack:13120kB pagetables:6712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1762.122642][T30849] Node 1 active_anon:0kB inactive_anon:0kB active_file:876kB inactive_file:1792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:832kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1762.153771][T30849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.183737][T30849] lowmem_reserve[]: 0 2479 2480 2480 2480 [ 1762.190085][T30849] Node 0 DMA32 free:1126836kB boost:0kB min:34316kB low:42892kB high:51468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76164kB inactive_anon:92468kB active_file:95688kB inactive_file:153448kB unevictable:1536kB writepending:8260kB zspages:504kB present:3129332kB managed:2538564kB mlocked:0kB bounce:0kB free_pcp:63140kB local_pcp:63140kB free_cma:0kB [ 1762.224998][T30849] lowmem_reserve[]: 0 0 1 1 1 [ 1762.230355][T30849] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1096kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1762.260262][T30849] lowmem_reserve[]: 0 0 0 0 0 [ 1762.265038][T30849] Node 1 Normal free:3860324kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:876kB inactive_file:1792kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66360kB local_pcp:66360kB free_cma:0kB [ 1762.298124][T30849] lowmem_reserve[]: 0 0 0 0 0 [ 1762.320326][T30849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1762.393403][T30849] Node 0 DMA32: 3583*4kB (UME) 6535*8kB (UME) 3841*16kB (UME) 1084*32kB (UME) 696*64kB (UME) 436*128kB (UME) 337*256kB (UM) 357*512kB (UME) 198*1024kB (UM) 3*2048kB (UM) 95*4096kB (UM) = 1130180kB [ 1762.551848][T30849] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1762.662893][T30849] Node 1 Normal: 10*4kB (UM) 9*8kB (M) 15*16kB (UME) 12*32kB (UME) 16*64kB (UME) 3*128kB (UM) 2*256kB (UM) 3*512kB (UME) 0*1024kB 1*2048kB (E) 941*4096kB (UM) = 3860576kB [ 1762.788141][T30849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.869648][T30849] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1762.905453][T30849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.937070][T30849] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1762.957302][T30849] 66081 total pagecache pages [ 1762.962031][T30849] 69 pages in swap cache [ 1762.966261][T30849] Free swap = 124528kB [ 1763.007594][T30849] Total swap = 124996kB [ 1763.028286][T27333] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1333 with max blocks 6 with error 117 [ 1763.052577][T30849] 2097051 pages RAM [ 1763.056411][T30849] 0 pages HighMem/MovableOnly [ 1763.071559][T27333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1763.071559][T27333] [ 1763.103296][T30849] 430521 pages reserved [ 1763.118480][T30849] 0 pages cma reserved [ 1763.473339][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5265'. [ 1763.511670][T30933] netlink: 25 bytes leftover after parsing attributes in process `syz.5.5265'. [ 1763.833473][ T30] audit: type=1800 audit(4294968236.926:37): pid=30937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5267" name="dbroot" dev="configfs" ino=140161 res=0 errno=0 [ 1763.990803][T27330] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3239 with max blocks 23 with error 117 [ 1764.066488][T27330] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1764.066488][T27330] [ 1764.144498][T27330] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3262 with max blocks 259 with error 117 [ 1764.220397][T27330] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1764.220397][T27330] [ 1764.364714][T30946] FAULT_INJECTION: forcing a failure. [ 1764.364714][T30946] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.457524][T30946] CPU: 0 UID: 0 PID: 30946 Comm: syz.6.5269 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1764.457558][T30946] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1764.457566][T30946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1764.457577][T30946] Call Trace: [ 1764.457584][T30946] [ 1764.457592][T30946] dump_stack_lvl+0x100/0x190 [ 1764.457623][T30946] should_fail_ex.cold+0x5/0xa [ 1764.457645][T30946] should_failslab+0xc2/0x120 [ 1764.457671][T30946] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1764.457689][T30946] ? alloc_bprm+0x86/0x710 [ 1764.457713][T30946] alloc_bprm+0x86/0x710 [ 1764.457743][T30946] do_execveat_common.isra.0+0x19c/0x580 [ 1764.457765][T30946] ? do_getname+0x191/0x390 [ 1764.457794][T30946] __x64_sys_execve+0x93/0xd0 [ 1764.457816][T30946] do_syscall_64+0x106/0xf80 [ 1764.457843][T30946] ? clear_bhb_loop+0x40/0x90 [ 1764.457866][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.457886][T30946] RIP: 0033:0x7ff481b9bf79 [ 1764.457902][T30946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.457919][T30946] RSP: 002b:00007ff4829d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1764.457938][T30946] RAX: ffffffffffffffda RBX: 00007ff481e15fa0 RCX: 00007ff481b9bf79 [ 1764.457949][T30946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1764.457960][T30946] RBP: 00007ff481c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.457971][T30946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1764.457981][T30946] R13: 00007ff481e16038 R14: 00007ff481e15fa0 R15: 00007ffd411b4c08 [ 1764.458005][T30946] [ 1765.453493][T30950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 1765.496720][T30950] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5270'. [ 1765.840214][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1766.714794][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5276'. [ 1766.810997][T30976] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5276'. [ 1767.897085][T30840] mkiss: ax0: crc mode is auto. [ 1768.668485][T31002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5283'. [ 1768.758007][T31002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.191596][T31010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5285'. [ 1769.244816][T31002] bridge_slave_1 (unregistering): left allmulticast mode [ 1769.348457][T31002] bridge_slave_1 (unregistering): left promiscuous mode [ 1769.424884][T31002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.663433][T31019] netlink: 302 bytes leftover after parsing attributes in process `syz.6.5288'. [ 1770.084593][T31028] FAULT_INJECTION: forcing a failure. [ 1770.084593][T31028] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.162769][T31028] CPU: 0 UID: 0 PID: 31028 Comm: syz.6.5292 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1770.162805][T31028] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1770.162813][T31028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1770.162824][T31028] Call Trace: [ 1770.162831][T31028] [ 1770.162840][T31028] dump_stack_lvl+0x100/0x190 [ 1770.162871][T31028] should_fail_ex.cold+0x5/0xa [ 1770.162893][T31028] should_failslab+0xc2/0x120 [ 1770.162919][T31028] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1770.162937][T31028] ? vkms_plane_duplicate_state+0x45/0x130 [ 1770.162966][T31028] vkms_plane_duplicate_state+0x45/0x130 [ 1770.162990][T31028] drm_atomic_get_plane_state+0x279/0x760 [ 1770.163020][T31028] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1770.163049][T31028] ? rcu_is_watching+0x12/0xc0 [ 1770.163079][T31028] ? __mutex_lock+0x26a/0x1b90 [ 1770.163107][T31028] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1770.163136][T31028] ? trace_contention_end+0xd6/0x110 [ 1770.163156][T31028] ? drm_master_internal_acquire+0x21/0x80 [ 1770.163207][T31028] drm_client_modeset_commit_locked+0x14d/0x580 [ 1770.163242][T31028] drm_client_modeset_commit+0x4f/0x80 [ 1770.163260][T31028] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1770.163294][T31028] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1770.163328][T31028] drm_fbdev_client_restore+0x1b/0x30 [ 1770.163357][T31028] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1770.163382][T31028] drm_client_dev_restore+0x205/0x2a0 [ 1770.163416][T31028] drm_release+0x2c6/0x360 [ 1770.163444][T31028] ? __pfx_drm_release+0x10/0x10 [ 1770.163471][T31028] __fput+0x3ff/0xb40 [ 1770.163503][T31028] task_work_run+0x150/0x240 [ 1770.163528][T31028] ? __pfx_task_work_run+0x10/0x10 [ 1770.163558][T31028] exit_to_user_mode_loop+0x100/0x4a0 [ 1770.163577][T31028] ? rcu_is_watching+0x12/0xc0 [ 1770.163603][T31028] do_syscall_64+0x668/0xf80 [ 1770.163627][T31028] ? clear_bhb_loop+0x40/0x90 [ 1770.163650][T31028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.163669][T31028] RIP: 0033:0x7ff481b9bf79 [ 1770.163685][T31028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.163722][T31028] RSP: 002b:00007ff4829d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1770.163748][T31028] RAX: 0000000000000000 RBX: 00007ff481e15fa0 RCX: 00007ff481b9bf79 [ 1770.163761][T31028] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1770.163772][T31028] RBP: 00007ff481c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.163784][T31028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.163795][T31028] R13: 00007ff481e16038 R14: 00007ff481e15fa0 R15: 00007ffd411b4c08 [ 1770.163821][T31028] [ 1770.989752][T31043] netlink: 338 bytes leftover after parsing attributes in process `syz.6.5292'. [ 1772.195429][T31061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1772.235950][T31062] FAULT_INJECTION: forcing a failure. [ 1772.235950][T31062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1772.298264][T31062] CPU: 0 UID: 0 PID: 31062 Comm: syz.6.5297 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1772.298299][T31062] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1772.298307][T31062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1772.298318][T31062] Call Trace: [ 1772.298325][T31062] [ 1772.298332][T31062] dump_stack_lvl+0x100/0x190 [ 1772.298363][T31062] should_fail_ex.cold+0x5/0xa [ 1772.298380][T31062] ? prepare_alloc_pages+0x16d/0x5f0 [ 1772.298410][T31062] should_fail_alloc_page+0xeb/0x140 [ 1772.298436][T31062] prepare_alloc_pages+0x1f0/0x5f0 [ 1772.298463][T31062] ? rcu_is_watching+0x12/0xc0 [ 1772.298489][T31062] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1772.298512][T31062] ? is_bpf_text_address+0x8a/0x1a0 [ 1772.298535][T31062] ? bpf_ksym_find+0x124/0x1c0 [ 1772.298563][T31062] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1772.298591][T31062] ? is_bpf_text_address+0x94/0x1a0 [ 1772.298613][T31062] ? kernel_text_address+0x8d/0x100 [ 1772.298636][T31062] ? __kernel_text_address+0xd/0x30 [ 1772.298658][T31062] ? unwind_get_return_address+0x59/0xa0 [ 1772.298686][T31062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1772.298717][T31062] ? __pfx_stack_trace_save+0x10/0x10 [ 1772.298744][T31062] ? stack_depot_save_flags+0x27/0x9d0 [ 1772.298779][T31062] ? stack_trace_save+0x8e/0xc0 [ 1772.298806][T31062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1772.298834][T31062] ? policy_nodemask+0xed/0x4f0 [ 1772.298860][T31062] alloc_pages_mpol+0x1fb/0x550 [ 1772.298886][T31062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1772.298918][T31062] alloc_pages_noprof+0x131/0x390 [ 1772.298945][T31062] kimage_alloc_pages+0x72/0x380 [ 1772.298974][T31062] kimage_alloc_control_pages+0x157/0xa20 [ 1772.299007][T31062] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1772.299040][T31062] do_kexec_load+0x275/0x810 [ 1772.299069][T31062] ? __pfx_do_kexec_load+0x10/0x10 [ 1772.299098][T31062] ? _copy_from_user+0x59/0xd0 [ 1772.299127][T31062] __x64_sys_kexec_load+0x1bf/0x230 [ 1772.299157][T31062] do_syscall_64+0x106/0xf80 [ 1772.299183][T31062] ? clear_bhb_loop+0x40/0x90 [ 1772.299205][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.299223][T31062] RIP: 0033:0x7ff481b9bf79 [ 1772.299240][T31062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.299258][T31062] RSP: 002b:00007ff4829d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1772.299276][T31062] RAX: ffffffffffffffda RBX: 00007ff481e15fa0 RCX: 00007ff481b9bf79 [ 1772.299288][T31062] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 1772.299299][T31062] RBP: 00007ff481c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.299310][T31062] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1772.299322][T31062] R13: 00007ff481e16038 R14: 00007ff481e15fa0 R15: 00007ffd411b4c08 [ 1772.299345][T31062] [ 1772.299366][T31062] kexec: Could not allocate control_code_buffer [ 1773.702173][T31087] FAULT_INJECTION: forcing a failure. [ 1773.702173][T31087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.951466][T31087] CPU: 0 UID: 0 PID: 31087 Comm: syz.5.5301 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1773.951499][T31087] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1773.951507][T31087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1773.951518][T31087] Call Trace: [ 1773.951525][T31087] [ 1773.951533][T31087] dump_stack_lvl+0x100/0x190 [ 1773.951563][T31087] should_fail_ex.cold+0x5/0xa [ 1773.951583][T31087] _copy_from_iter+0x1f4/0x1690 [ 1773.951617][T31087] ? __pfx__copy_from_iter+0x10/0x10 [ 1773.951642][T31087] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1773.951668][T31087] ? __asan_memset+0x23/0x50 [ 1773.951687][T31087] ? __build_skb_around+0x278/0x390 [ 1773.951726][T31087] ? is_vmalloc_addr+0x86/0xa0 [ 1773.951750][T31087] netlink_sendmsg+0x808/0xda0 [ 1773.951782][T31087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.951812][T31087] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1773.951839][T31087] sock_write_iter+0x566/0x610 [ 1773.951859][T31087] ? __pfx_sock_write_iter+0x10/0x10 [ 1773.951893][T31087] ? bpf_lsm_file_permission+0x9/0x10 [ 1773.951915][T31087] ? security_file_permission+0x76/0x210 [ 1773.951944][T31087] ? rw_verify_area+0xce/0x6d0 [ 1773.951966][T31087] vfs_write+0x6ac/0x1070 [ 1773.951990][T31087] ? __pfx_sock_write_iter+0x10/0x10 [ 1773.952011][T31087] ? __pfx_vfs_write+0x10/0x10 [ 1773.952032][T31087] ? find_held_lock+0x2b/0x80 [ 1773.952072][T31087] ksys_write+0x1f8/0x250 [ 1773.952094][T31087] ? __pfx_ksys_write+0x10/0x10 [ 1773.952122][T31087] do_syscall_64+0x106/0xf80 [ 1773.952147][T31087] ? clear_bhb_loop+0x40/0x90 [ 1773.952169][T31087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.952188][T31087] RIP: 0033:0x7f3bf479bf79 [ 1773.952204][T31087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.952222][T31087] RSP: 002b:00007f3bf56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1773.952240][T31087] RAX: ffffffffffffffda RBX: 00007f3bf4a16090 RCX: 00007f3bf479bf79 [ 1773.952252][T31087] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1773.952263][T31087] RBP: 00007f3bf48327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.952274][T31087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.952285][T31087] R13: 00007f3bf4a16128 R14: 00007f3bf4a16090 R15: 00007ffec26a6908 [ 1773.952309][T31087] [ 1775.113801][T20421] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 1775.945249][ T30] audit: type=1326 audit(4294968249.036:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.2.5309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed9a59bf79 code=0x0 [ 1777.416054][T31149] openvswitch: netlink: IP tunnel dst address not specified [ 1778.005455][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5315'. [ 1779.692528][T31014] mkiss: ax0: crc mode is auto. [ 1780.149269][T31203] program syz.2.5333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1780.174831][T31204] openvswitch: netlink: IP tunnel dst address not specified [ 1780.205367][ T30] audit: type=1807 audit(4294968253.296:39): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1780.249062][T31201] ima: policy update failed [ 1780.265862][ T30] audit: type=1802 audit(4294968253.296:40): pid=31205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.5333" res=0 errno=0 [ 1780.369423][ T30] audit: type=1802 audit(4294968253.386:41): pid=31201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5333" res=0 errno=0 [ 1781.328952][T31238] blktrace: Concurrent blktraces are not allowed on loop2 [ 1782.622261][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1783.477908][T12918] usb usb40-port2: attempt power cycle [ 1783.707597][T16308] Bluetooth: hci0: command 0x0406 tx timeout [ 1784.057917][T12918] usb usb40-port2: unable to enumerate USB device [ 1784.079577][T31271] vhci_hcd vhci_hcd.3: default hub control req: ff03 v8000 i0002 l8 [ 1784.690859][T27333] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3239 with max blocks 1 with error 117 [ 1785.587217][T27333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1785.587217][T27333] [ 1786.306303][T27333] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 924 with max blocks 9 with error 117 [ 1786.841206][T27333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1786.841206][T27333] [ 1786.963897][T27333] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1355 with max blocks 18 with error 117 [ 1787.016028][T27333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1787.016028][T27333] [ 1787.112533][T31293] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1787.184994][T31293] serio: Serial port pty6 [ 1787.570737][T31305] [U] 0="/ [ 1787.582965][T31305] [U] [ 1787.595345][T31305] [U] EeQ@ [ 1787.608810][T31304] [U]  [ 1788.129380][T31321] sp0: Synchronizing with TNC [ 1788.560723][T31312] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1788.589620][T31327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5350'. [ 1789.751039][T31353] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5355'. [ 1789.864541][ T30] audit: type=1800 audit(4294968262.956:42): pid=31355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5356" name="members" dev="configfs" ino=142550 res=0 errno=0 [ 1790.774249][T31367] netlink: 'syz.4.5362': attribute type 4 has an invalid length. [ 1790.821065][T31367] netlink: 'syz.4.5362': attribute type 4 has an invalid length. [ 1791.120928][T31231] mkiss: ax0: crc mode is auto. [ 1792.616345][T31409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1794.159401][T20421] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1795.045942][T31442] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1795.263199][T31374] kexec: Could not allocate control_code_buffer [ 1795.805436][T31447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1795.842898][T31447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1795.893180][T31447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1795.958609][T31447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1795.965736][T31447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1796.039289][T31461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1796.076855][T31447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1796.114353][T31447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1796.173607][T31447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1796.995619][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.002890][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.131238][T31463] [U] [ 1797.131273][T31463] [U] [ 1797.131300][T31463] [U] [ 1797.131327][T31463] [U] [ 1797.131439][T31463] [U] [ 1797.131465][T31463] [U] [ 1797.131492][T31463] [U] [ 1797.131519][T31463] [U] [ 1797.131977][T31463] [U] [ 1797.132009][T31463] [U] [ 1797.132036][T31463] [U] [ 1797.132063][T31463] [U] [ 1797.132177][T31463] [U] [ 1797.132204][T31463] [U] [ 1797.132230][T31463] [U] [ 1797.132257][T31463] [U] [ 1797.132484][T31463] [U] [ 1797.132513][T31463] [U] [ 1797.132541][T31463] [U] [ 1797.132569][T31463] [U] [ 1797.132686][T31463] [U] [ 1797.132713][T31463] [U] [ 1797.132749][T31463] [U] [ 1797.132776][T31463] [U] [ 1797.132912][T31463] [U] [ 1797.132940][T31463] [U] [ 1797.132967][T31463] [U] [ 1797.132995][T31463] [U] [ 1797.133111][T31463] [U] [ 1797.133139][T31463] [U] [ 1797.133166][T31463] [U] [ 1797.133191][T31463] [U] [ 1797.134000][T31463] [U] [ 1797.134030][T31463] [U] [ 1797.134057][T31463] [U] [ 1797.134086][T31463] [U] [ 1797.134199][T31463] [U] [ 1797.134225][T31463] [U] [ 1797.134252][T31463] [U] [ 1797.134279][T31463] [U] [ 1797.134410][T31463] [U] [ 1797.134437][T31463] [U] [ 1797.134464][T31463] [U] [ 1797.134491][T31463] [U] [ 1797.134604][T31463] [U] [ 1797.134632][T31463] [U] [ 1797.134661][T31463] [U] [ 1797.134688][T31463] [U] [ 1797.134829][T31463] [U] [ 1797.134857][T31463] [U] [ 1797.134884][T31463] [U] [ 1797.134911][T31463] [U] [ 1797.135026][T31463] [U] [ 1797.135055][T31463] [U] [ 1797.135082][T31463] [U] [ 1797.135110][T31463] [U] [ 1797.135353][T31463] [U] [ 1797.135382][T31463] [U] [ 1797.135409][T31463] [U] [ 1797.135436][T31463] [U] [ 1797.135550][T31463] [U] [ 1797.135580][T31463] [U] [ 1797.135606][T31463] [U] [ 1797.135633][T31463] [U] [ 1797.135770][T31463] [U] [ 1797.135798][T31463] [U] [ 1797.135825][T31463] [U] [ 1797.135854][T31463] [U] [ 1797.135970][T31463] [U] [ 1797.135998][T31463] [U] [ 1797.136026][T31463] [U] [ 1797.136053][T31463] [U] [ 1797.136183][T31463] [U] [ 1797.136211][T31463] [U] [ 1797.136237][T31463] [U] [ 1797.136263][T31463] [U] [ 1797.136376][T31463] [U] [ 1797.136402][T31463] [U] [ 1797.136429][T31463] [U] [ 1797.136454][T31463] [U] [ 1797.136585][T31463] [U] [ 1797.136612][T31463] [U] [ 1797.136638][T31463] [U] [ 1797.136664][T31463] [U] [ 1797.136784][T31463] [U] [ 1797.136810][T31463] [U] [ 1797.136837][T31463] [U] [ 1797.136863][T31463] [U] [ 1797.164526][T31463] [U] [ 1797.164560][T31463] [U] [ 1797.164587][T31463] [U] [ 1797.164615][T31463] [U] [ 1797.164736][T31463] [U] [ 1797.164765][T31463] [U] [ 1797.164794][T31463] [U] [ 1797.164820][T31463] [U] [ 1797.164958][T31463] [U] [ 1797.164985][T31463] [U] [ 1797.165011][T31463] [U] [ 1797.165037][T31463] [U] [ 1797.165150][T31463] [U] [ 1797.165177][T31463] [U] [ 1797.165205][T31463] [U] [ 1797.165231][T31463] [U] [ 1797.165363][T31463] [U] [ 1797.165391][T31463] [U] [ 1797.165417][T31463] [U] [ 1797.165443][T31463] [U] [ 1797.165555][T31463] [U] [ 1797.165581][T31463] [U] [ 1797.165610][T31463] [U] [ 1797.165636][T31463] [U] [ 1797.165772][T31463] [U] [ 1797.165800][T31463] [U] [ 1797.165826][T31463] [U] [ 1797.165853][T31463] [U] [ 1797.165966][T31463] [U] [ 1797.165993][T31463] [U] [ 1797.166019][T31463] [U] [ 1797.166047][T31463] [U] [ 1797.166177][T31463] [U] [ 1797.166204][T31463] [U] [ 1797.166230][T31463] [U] [ 1797.166257][T31463] [U] [ 1797.166350][T31463] [U] [ 1797.166377][T31463] [U] [ 1797.166406][T31463] [U] [ 1797.346430][T31480] [U] [ 1797.467132][T20421] Bluetooth: hci3: command 0x0c1a tx timeout [ 1797.470765][T31482] nfs: Unknown parameter 'nl802154' [ 1797.868658][T20421] Bluetooth: hci4: command 0x0406 tx timeout [ 1798.027166][T20421] Bluetooth: hci0: command 0x0406 tx timeout [ 1798.107581][T20421] Bluetooth: hci1: command 0x0c1a tx timeout [ 1798.568011][T31493] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5385'. [ 1799.586391][T20421] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1799.947285][T20421] Bluetooth: hci4: command 0x0406 tx timeout [ 1800.108095][T20421] Bluetooth: hci0: command 0x0406 tx timeout [ 1800.190670][T20421] Bluetooth: hci1: command 0x0c1a tx timeout [ 1801.883364][T31562] nfs: Unknown parameter 'nl802154' [ 1802.267374][T20421] Bluetooth: hci1: command 0x0c1a tx timeout [ 1802.485636][T31401] mkiss: ax0: crc mode is auto. [ 1802.952794][T31573] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1804.949364][T31592] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5405'. [ 1804.966291][T31587] Process accounting resumed [ 1805.475579][T31597] can: request_module (can-proto-5) failed. [ 1805.647272][T31596] zswap: compressor not available [ 1805.718152][T31606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1805.859045][T31606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1806.114514][T31606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1807.393824][T31636] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1810.998839][T31670] Invalid ELF header magic: != ELF [ 1812.480433][T31689] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1812.522110][T31689] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1812.568127][T31689] veth0_to_bridge: entered allmulticast mode [ 1812.619819][T31689] veth0_to_bridge: entered promiscuous mode [ 1812.660513][T31689] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1812.784254][T31689] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1812.791499][T31689] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1813.828146][T31580] mkiss: ax0: crc mode is auto. [ 1815.424545][T31745] ERROR: Out of memory at tomoyo_memory_ok. [ 1816.442579][T31763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5445'. [ 1817.110010][T28494] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 924 with max blocks 9 with error 117 [ 1817.221169][T28494] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1817.221169][T28494] [ 1817.470805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.483417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.495828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.508195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.520551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.532920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.545284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.557862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.570295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1817.582690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.273336][T28157] usb usb40-port2: attempt power cycle [ 1822.476965][ C0] net_ratelimit: 13498 callbacks suppressed [ 1822.476987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.495294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.507655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.520034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.532412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.544763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.557243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.569644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.582131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1822.594623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1823.846956][ C0] sched: DL replenish lagged too much [ 1827.486992][ C0] net_ratelimit: 13329 callbacks suppressed [ 1827.487013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.505272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.517650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1827.530483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.542804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.555175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1827.567517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.579828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.592181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1827.604517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.496991][ C0] net_ratelimit: 13146 callbacks suppressed [ 1832.497010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.515343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1832.527724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.540109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.552449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1832.564896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.577244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.589587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1832.601995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.614464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.507103][ C0] net_ratelimit: 13472 callbacks suppressed [ 1837.507124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.525451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1837.537800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.550159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.562526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1837.574862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.587210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.599825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1837.612523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.624927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.517079][ C0] net_ratelimit: 13129 callbacks suppressed [ 1842.517100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.535382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.547772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1842.560114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.572454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.584838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1842.597182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.609504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.622120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1842.634597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.527010][ C0] net_ratelimit: 13334 callbacks suppressed [ 1847.527030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.545354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.557783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1847.570161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.582483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.594863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1847.607206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.619516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.631867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1847.644189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.536942][ C0] net_ratelimit: 13259 callbacks suppressed [ 1852.536961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.555417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.567798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1852.580406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.592758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.605129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1852.617458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.629775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.642169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1852.654507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.547089][ C0] net_ratelimit: 13291 callbacks suppressed [ 1857.547110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1857.565527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.577889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.590281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1857.602728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.615174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.627593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1857.640008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.652443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.664840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1858.566197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.557301][ C0] net_ratelimit: 13345 callbacks suppressed [ 1862.557321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.575573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1862.587875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.600161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.612536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1862.624924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.637219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.649995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1862.662298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.674570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1863.924192][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1867.567042][ C0] net_ratelimit: 13336 callbacks suppressed [ 1867.567062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.585283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.597668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1867.610107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.622583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.635009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1867.647430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.659931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.672569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1867.685058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.577006][ C0] net_ratelimit: 13407 callbacks suppressed [ 1872.577027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.595543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1872.608105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.620457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.632848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1872.645198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.657524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.669898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1872.682313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.694642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.587200][ C0] net_ratelimit: 13598 callbacks suppressed [ 1877.587221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.605509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1877.618027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.630410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.642933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1877.655319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.667659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.680107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1877.692440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.704793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.596996][ C0] net_ratelimit: 13667 callbacks suppressed [ 1882.597018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.615286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1882.627603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.639890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.652252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1882.664560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.676838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.689161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1882.701477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.713762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.607164][ C0] net_ratelimit: 14461 callbacks suppressed [ 1887.607184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.625404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.638018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1887.650326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.662589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.675017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1887.687437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.699721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.712156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1887.724851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.617161][ C0] net_ratelimit: 14519 callbacks suppressed [ 1892.617182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.635396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.647727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1892.660023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.672279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.684604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1892.696890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.709243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.721585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1892.733898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.627120][ C0] net_ratelimit: 14596 callbacks suppressed [ 1897.627138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1897.645359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.657746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.670067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1897.682359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.694670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.707032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1897.719446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.731913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.744381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1902.637092][ C0] net_ratelimit: 14663 callbacks suppressed [ 1902.637112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1902.655366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.667649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.679964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1902.692267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.704566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.716914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1902.729202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.741462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.753835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1907.647227][ C0] net_ratelimit: 13498 callbacks suppressed [ 1907.647249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.665603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1907.677961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.690283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.702649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1907.715022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.727929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.740403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1907.752755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.765121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.657114][ C0] net_ratelimit: 13269 callbacks suppressed [ 1912.657132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1912.675526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.687933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.700322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1912.712773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.725385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.737882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1912.750250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.762575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.774965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1917.667039][ C0] net_ratelimit: 13094 callbacks suppressed [ 1917.667062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1917.685450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.697792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.710294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1917.722621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.734973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.747334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1917.759692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.772003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.784391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1922.677068][ C0] net_ratelimit: 13839 callbacks suppressed [ 1922.677088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.695400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.707745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1922.720057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.732338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.744689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1922.757008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.769472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.781818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1922.794235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.976896][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1922.983864][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31756/1:b..l [ 1922.992385][ C0] rcu: (detected by 0, t=10502 jiffies, g=274005, q=1050 ncpus=1) [ 1923.000263][ C0] task:syz.6.5444 state:R running task stack:23680 pid:31756 tgid:31755 ppid:22975 task_flags:0x400140 flags:0x00080002 [ 1923.014470][ C0] Call Trace: [ 1923.017752][ C0] [ 1923.020677][ C0] __schedule+0xfee/0x6020 [ 1923.025102][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.031261][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 1923.036456][ C0] ? __pfx___schedule+0x10/0x10 [ 1923.041310][ C0] ? mark_held_locks+0x40/0x70 [ 1923.046072][ C0] preempt_schedule_irq+0x50/0x90 [ 1923.051092][ C0] irqentry_exit+0x17b/0x670 [ 1923.055689][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1923.061748][ C0] RIP: 0010:lock_acquire+0x5e/0x330 [ 1923.066955][ C0] Code: 05 bb e9 25 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 46 ff f5 0e 0f 82 6f 02 00 00 8b 35 3e 32 f6 0e 85 f6 0f 85 8a 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d e9 25 12 0f 85 b8 02 00 00 48 83 c4 [ 1923.086566][ C0] RSP: 0018:ffffc9000bedf6d0 EFLAGS: 00000206 [ 1923.092686][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1923.100657][ C0] RDX: 0000000000000000 RSI: ffffffff8de4ddbd RDI: ffffffff8c1ad620 [ 1923.108666][ C0] RBP: ffffffff8e7e7460 R08: 00000000ae5f00db R09: 0000000000000007 [ 1923.116671][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1923.124638][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1923.132613][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1923.137822][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1923.143029][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.149186][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1923.154130][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1923.159242][ C0] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1923.164269][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.170455][ C0] arch_stack_walk+0x94/0xf0 [ 1923.175051][ C0] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1923.180081][ C0] stack_trace_save+0x8e/0xc0 [ 1923.184844][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1923.190213][ C0] ? arch_stack_walk+0xa6/0xf0 [ 1923.194998][ C0] kasan_save_stack+0x30/0x50 [ 1923.199690][ C0] ? kasan_save_stack+0x30/0x50 [ 1923.204540][ C0] ? kasan_save_track+0x14/0x30 [ 1923.209418][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1923.214203][ C0] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1923.219853][ C0] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1923.224916][ C0] kasan_save_track+0x14/0x30 [ 1923.229592][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1923.234188][ C0] __kvmalloc_node_noprof+0x360/0xa00 [ 1923.239734][ C0] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1923.244763][ C0] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 1923.250398][ C0] alloc_netdev_mqs+0xd7/0x14f0 [ 1923.255252][ C0] ? __pfx_ip6gre_init_net+0x10/0x10 [ 1923.260529][ C0] ip6gre_init_net+0x9e/0x420 [ 1923.265290][ C0] ? __pfx_ip6gre_init_net+0x10/0x10 [ 1923.270572][ C0] ops_init+0x1e2/0x5f0 [ 1923.274745][ C0] setup_net+0x118/0x3a0 [ 1923.278989][ C0] ? __pfx_setup_net+0x10/0x10 [ 1923.283748][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1923.289115][ C0] ? mutex_init_lockep+0x110/0x150 [ 1923.294231][ C0] copy_net_ns+0x46f/0x7c0 [ 1923.298655][ C0] create_new_namespaces+0x3ea/0xac0 [ 1923.303944][ C0] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1923.309667][ C0] ksys_unshare+0x455/0xab0 [ 1923.314177][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1923.319194][ C0] ? xfd_validate_state+0x129/0x190 [ 1923.324391][ C0] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1923.330539][ C0] ? syscall_user_dispatch+0x76/0x130 [ 1923.335996][ C0] __x64_sys_unshare+0x31/0x40 [ 1923.340757][ C0] do_syscall_64+0x106/0xf80 [ 1923.345359][ C0] ? clear_bhb_loop+0x40/0x90 [ 1923.350037][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.355923][ C0] RIP: 0033:0x7ff481b9bf79 [ 1923.360331][ C0] RSP: 002b:00007ff4829d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1923.368822][ C0] RAX: ffffffffffffffda RBX: 00007ff481e15fa0 RCX: 00007ff481b9bf79 [ 1923.376786][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1923.384751][ C0] RBP: 00007ff481c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.392711][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1923.400672][ C0] R13: 00007ff481e16038 R14: 00007ff481e15fa0 R15: 00007ffd411b4c08 [ 1923.408647][ C0] [ 1923.411663][ C0] rcu: rcu_preempt kthread starved for 565 jiffies! g274005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1923.422948][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1923.432910][ C0] rcu: RCU grace-period kthread stack dump: [ 1923.438786][ C0] task:rcu_preempt state:R running task stack:28584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1923.452436][ C0] Call Trace: [ 1923.455717][ C0] [ 1923.458644][ C0] __schedule+0xfee/0x6020 [ 1923.463066][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1923.468009][ C0] ? __pfx___schedule+0x10/0x10 [ 1923.472859][ C0] ? find_held_lock+0x2b/0x80 [ 1923.477535][ C0] ? schedule+0x2bf/0x390 [ 1923.481865][ C0] schedule+0xdd/0x390 [ 1923.485931][ C0] schedule_timeout+0x127/0x280 [ 1923.490793][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1923.496180][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1923.501480][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1923.507297][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1923.512772][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1923.517535][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1923.522818][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1923.528273][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1923.533206][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1923.538411][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1923.544226][ C0] rcu_gp_kthread+0x179/0x230 [ 1923.548898][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1923.554128][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1923.559932][ C0] ? __kthread_parkme+0x18c/0x230 [ 1923.564965][ C0] ? kthread+0x13a/0x450 [ 1923.569210][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1923.574405][ C0] kthread+0x370/0x450 [ 1923.578466][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.583052][ C0] ret_from_fork+0x754/0xd80 [ 1923.587644][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.592757][ C0] ? __switch_to+0x7b4/0x10c0 [ 1923.597423][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.602009][ C0] ret_from_fork_asm+0x1a/0x30 [ 1923.606774][ C0] [ 1923.609783][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1923.616100][ C0] CPU: 0 UID: 0 PID: 27341 Comm: kworker/u10:21 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1923.627375][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1923.632559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1923.642608][ C0] Workqueue: bat_events batadv_tt_purge [ 1923.648153][ C0] RIP: 0010:lock_acquire+0x5e/0x330 [ 1923.653343][ C0] Code: 05 bb e9 25 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 46 ff f5 0e 0f 82 6f 02 00 00 8b 35 3e 32 f6 0e 85 f6 0f 85 8a 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d e9 25 12 0f 85 b8 02 00 00 48 83 c4 [ 1923.673124][ C0] RSP: 0018:ffffc90000006100 EFLAGS: 00000206 [ 1923.679183][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000007 [ 1923.687144][ C0] RDX: 0000000000000000 RSI: ffffffff8de4ddbd RDI: ffffffff8c1ad620 [ 1923.695105][ C0] RBP: ffffffff8e7e7460 R08: 00000000a0f10c3c R09: 0000000000000007 [ 1923.703063][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1923.711023][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1923.718985][ C0] FS: 0000000000000000(0000) GS:ffff888124392000(0000) knlGS:0000000000000000 [ 1923.727908][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1923.734487][ C0] CR2: 00005654ca4a5a38 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1923.742449][ C0] Call Trace: [ 1923.745717][ C0] [ 1923.748553][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1923.753842][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1923.759040][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.765198][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1923.770134][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1923.775240][ C0] ? ip_tunnel_xmit+0x8e8/0x3200 [ 1923.780171][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.786322][ C0] arch_stack_walk+0x94/0xf0 [ 1923.790911][ C0] ? ip_tunnel_xmit+0x8e8/0x3200 [ 1923.795839][ C0] ? skb_free_head+0x1c6/0x220 [ 1923.800596][ C0] stack_trace_save+0x8e/0xc0 [ 1923.805268][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1923.810674][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1923.815605][ C0] kasan_save_stack+0x30/0x50 [ 1923.820273][ C0] ? kasan_save_stack+0x30/0x50 [ 1923.825114][ C0] ? kasan_save_track+0x14/0x30 [ 1923.829970][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1923.835168][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1923.840096][ C0] ? kmem_cache_free+0x124/0x670 [ 1923.845026][ C0] ? skb_free_head+0x1c6/0x220 [ 1923.849783][ C0] ? skb_release_data+0x79b/0x9d0 [ 1923.854802][ C0] ? sk_skb_reason_drop+0x102/0x1b0 [ 1923.859996][ C0] ? ip_tunnel_xmit+0x8e8/0x3200 [ 1923.864946][ C0] kasan_save_track+0x14/0x30 [ 1923.869651][ C0] kasan_save_free_info+0x3b/0x70 [ 1923.874685][ C0] __kasan_slab_free+0x5f/0x80 [ 1923.879530][ C0] kmem_cache_free+0x124/0x670 [ 1923.884286][ C0] ? br_nf_dev_queue_xmit+0x741/0x2a20 [ 1923.889738][ C0] ? br_nf_post_routing+0xcbb/0x16a0 [ 1923.895026][ C0] ? nf_hook_slow+0xbf/0x220 [ 1923.899627][ C0] skb_free_head+0x1c6/0x220 [ 1923.904226][ C0] ? br_handle_frame_finish+0xf57/0x1f00 [ 1923.909858][ C0] skb_release_data+0x79b/0x9d0 [ 1923.914706][ C0] ? ip_tunnel_xmit+0x8e8/0x3200 [ 1923.919642][ C0] ? rcu_is_watching+0x12/0xc0 [ 1923.924410][ C0] sk_skb_reason_drop+0x102/0x1b0 [ 1923.929435][ C0] ip_tunnel_xmit+0x8e8/0x3200 [ 1923.934202][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1923.939395][ C0] ? rcu_is_watching+0x12/0xc0 [ 1923.944156][ C0] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1923.949521][ C0] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 1923.955600][ C0] ? kmalloc_reserve+0xf9/0x350 [ 1923.960447][ C0] __gre_xmit+0x820/0xb20 [ 1923.964814][ C0] ? __pfx___gre_xmit+0x10/0x10 [ 1923.969673][ C0] ? __pfx_pskb_expand_head+0x10/0x10 [ 1923.975047][ C0] gre_tap_xmit+0x3b3/0x630 [ 1923.979558][ C0] dev_hard_start_xmit+0x127/0x6c0 [ 1923.984674][ C0] sch_direct_xmit+0x1b2/0xc60 [ 1923.989439][ C0] ? lock_acquire+0x17c/0x330 [ 1923.994108][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1923.999392][ C0] ? do_raw_spin_lock+0x1a0/0x260 [ 1924.004427][ C0] ? br_nf_forward_finish+0x693/0xb30 [ 1924.009795][ C0] ? br_nf_forward_ip.part.0+0x61e/0x820 [ 1924.015432][ C0] __dev_queue_xmit+0x24bd/0x46f0 [ 1924.020542][ C0] ? do_exit+0xdd1/0x2a30 [ 1924.024865][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 1924.030314][ C0] ? batadv_tt_purge+0x8b/0xbd0 [ 1924.035161][ C0] ? process_one_work+0x9c2/0x1840 [ 1924.040281][ C0] ? worker_thread+0x5da/0xe40 [ 1924.045040][ C0] ? kthread+0x370/0x450 [ 1924.049282][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1924.054653][ C0] ? __skb_ext_put+0x102/0x2f0 [ 1924.059417][ C0] ? mark_held_locks+0x40/0x70 [ 1924.064190][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1924.069558][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1924.074761][ C0] ? __skb_ext_put+0x102/0x2f0 [ 1924.079515][ C0] ? kmem_cache_free+0x124/0x670 [ 1924.084447][ C0] ? __skb_ext_put+0x107/0x2f0 [ 1924.089201][ C0] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 1924.093967][ C0] br_dev_queue_push_xmit+0x360/0x550 [ 1924.099339][ C0] br_nf_dev_queue_xmit+0x741/0x2a20 [ 1924.104641][ C0] ? find_held_lock+0x2b/0x80 [ 1924.109344][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1924.115060][ C0] ? br_nf_post_routing+0xafb/0x16a0 [ 1924.120345][ C0] br_nf_post_routing+0xcbb/0x16a0 [ 1924.125456][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1924.131004][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1924.136724][ C0] ? lock_acquire+0x17c/0x330 [ 1924.141399][ C0] nf_hook_slow+0xbf/0x220 [ 1924.145819][ C0] br_forward_finish+0x261/0x4d0 [ 1924.150753][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1924.156210][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1924.162101][ C0] ? nf_hook_slow+0x167/0x220 [ 1924.166804][ C0] br_nf_hook_thresh+0x30d/0x420 [ 1924.171759][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1924.177216][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1924.182670][ C0] ? lock_acquire+0x17c/0x330 [ 1924.187343][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1924.192797][ C0] ? net_generic+0xea/0x2a0 [ 1924.197303][ C0] br_nf_forward_finish+0x693/0xb30 [ 1924.202501][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1924.207958][ C0] br_nf_forward_ip.part.0+0x61e/0x820 [ 1924.213433][ C0] br_nf_forward+0xfe5/0x19f0 [ 1924.218111][ C0] nf_hook_slow+0xbf/0x220 [ 1924.222526][ C0] __br_forward+0x2f6/0x970 [ 1924.227026][ C0] ? __pfx___br_forward+0x10/0x10 [ 1924.232044][ C0] ? __asan_memcpy+0x3c/0x60 [ 1924.236633][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1924.242098][ C0] ? __skb_clone+0x570/0x760 [ 1924.246696][ C0] maybe_deliver+0xf0/0x180 [ 1924.251197][ C0] br_flood+0x193/0x650 [ 1924.255354][ C0] br_handle_frame_finish+0xf57/0x1f00 [ 1924.260923][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1924.266819][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1924.272106][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 1924.276952][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1924.282071][ C0] ? nf_hook_slow+0x167/0x220 [ 1924.286749][ C0] br_nf_hook_thresh+0x30d/0x420 [ 1924.291685][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1924.297576][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1924.303037][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1924.308928][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1924.314210][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1924.320102][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1924.325992][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 1924.331966][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1924.337859][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 1924.343243][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1924.349130][ C0] ? lock_acquire+0x17c/0x330 [ 1924.353818][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1924.360319][ C0] ? net_generic+0xea/0x2a0 [ 1924.364822][ C0] br_nf_pre_routing+0x93b/0x1510 [ 1924.369848][ C0] br_handle_frame+0xcdd/0x1520 [ 1924.374701][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1924.380005][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1924.385899][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1924.391181][ C0] __netif_receive_skb_core.constprop.0+0x6c2/0x34f0 [ 1924.397853][ C0] ? mark_held_locks+0x40/0x70 [ 1924.402615][ C0] ? kmem_cache_free+0x124/0x670 [ 1924.407543][ C0] ? skb_release_data+0x7a0/0x9d0 [ 1924.412567][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1924.419680][ C0] ? kfree_skbmem+0x19f/0x210 [ 1924.424353][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 1924.429553][ C0] ? ip6_mc_input+0x51a/0xf50 [ 1924.434227][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1924.439280][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1924.444214][ C0] ? process_backlog+0x32a/0x1580 [ 1924.449231][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1924.455033][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1924.461442][ C0] ? lock_acquire+0x17c/0x330 [ 1924.466114][ C0] ? process_backlog+0x32a/0x1580 [ 1924.471136][ C0] ? process_backlog+0x32a/0x1580 [ 1924.476153][ C0] __netif_receive_skb+0x1f/0x120 [ 1924.481172][ C0] process_backlog+0x37a/0x1580 [ 1924.486024][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1924.491401][ C0] net_rx_action+0xa40/0xf20 [ 1924.495991][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1924.501093][ C0] ? find_held_lock+0x2b/0x80 [ 1924.505767][ C0] ? try_to_wake_up+0x154/0x1a80 [ 1924.510699][ C0] ? try_to_wake_up+0x154/0x1a80 [ 1924.515643][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1924.520844][ C0] ? sched_clock+0x38/0x60 [ 1924.525253][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1924.530103][ C0] ? mark_held_locks+0x40/0x70 [ 1924.534862][ C0] handle_softirqs+0x1ea/0x910 [ 1924.539626][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1924.544915][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 1924.550367][ C0] do_softirq+0xac/0xe0 [ 1924.554526][ C0] [ 1924.557448][ C0] [ 1924.560370][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1924.565484][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 1924.570759][ C0] ? look_up_lock_class+0x55/0x120 [ 1924.575871][ C0] ? find_held_lock+0x2b/0x80 [ 1924.580542][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 1924.586342][ C0] batadv_tt_purge+0x8b/0xbd0 [ 1924.591013][ C0] ? try_to_wake_up+0x160/0x1a80 [ 1924.596208][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1924.601841][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1924.607122][ C0] ? process_one_work+0x80b/0x1840 [ 1924.612225][ C0] ? rcu_is_watching+0x12/0xc0 [ 1924.616984][ C0] process_one_work+0x9c2/0x1840 [ 1924.621921][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1924.627292][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1924.632572][ C0] worker_thread+0x5da/0xe40 [ 1924.637167][ C0] ? kthread+0x13a/0x450 [ 1924.641414][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1924.646516][ C0] kthread+0x370/0x450 [ 1924.650580][ C0] ? __pfx_kthread+0x10/0x10 [ 1924.655164][ C0] ret_from_fork+0x754/0xd80 [ 1924.659749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1924.664854][ C0] ? __switch_to+0x7b4/0x10c0 [ 1924.669623][ C0] ? __pfx_kthread+0x10/0x10 [ 1924.674211][ C0] ret_from_fork_asm+0x1a/0x30 [ 1924.678975][ C0] [ 1924.809494][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.826270][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1927.686934][ C0] net_ratelimit: 9087 callbacks suppressed [ 1927.686954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.705307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1927.717634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.729949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.742298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1927.754709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.767050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.779454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1927.791763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.804056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.697034][ C0] net_ratelimit: 13307 callbacks suppressed [ 1932.697055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.715496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1932.727856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.740184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.752696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1932.765144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.777647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.790062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:59:1f:76:4b:2f, vlan:0) [ 1932.802446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.814795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)