last executing test programs: 9m54.08628645s ago: executing program 1 (id=3158): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D0p\x00', 0xb80, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x27) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x193400, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_BINDTODEVICE(r1, 0x0, 0x19, &(0x7f0000000080)='\'\')[\xa4^\x00', &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x801, 0x106) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 9m51.954676521s ago: executing program 1 (id=3166): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e21c2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4607993d4a772b27a3fa10548", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r1, r1, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r5) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mlockall$auto(0x7) 9m45.252479234s ago: executing program 1 (id=3184): mmap$auto(0x0, 0x2021009, 0xc0000, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="12915fb9d5") openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video30\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400200000800, 0xffffffffffffffff) mmap$auto(0x0, 0x5f, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x72) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x2481, 0x0) mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x22, 0x2, 0x2) setsockopt$auto(0x7, 0x114, 0x2, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port6/usb3_lpm_permit\x00', 0x140, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa8302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 9m41.918959526s ago: executing program 1 (id=3192): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0xff, r0, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x200000000000005, r1, 0x0, 0x1}, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x8}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f23500"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRESOCT=r4], 0x1ac}}, 0x40000) 9m41.423076398s ago: executing program 1 (id=3196): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x1000, 0x6, 0x7, 0x7, 0xffffffffffffffff, [0x0, 0x4, 0x1], {0x6, 0xa, 0x8c44, 0x29b, 0x3, 0x7f, 0xffffffff, 0x6}, {0x100, 0x1, 0x52, 0x1, 0x2, 0x1a7b870c, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1000, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000000d525) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) socket(0x28, 0x5, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) ioctl$auto(r0, 0x64c9, r0) lgetxattr$auto(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='\xda--\x00', 0x0, 0x100) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socketpair$auto(0x1c, 0x1, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x3, 0xfffffffc) socket(0x11, 0x801, 0x4) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) 9m41.240296695s ago: executing program 1 (id=3197): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r0, 0x0, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) socket(0xa, 0x80000, 0x4b6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x8001}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 9m25.97359487s ago: executing program 32 (id=3197): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r0, 0x0, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) socket(0xa, 0x80000, 0x4b6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x8001}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1m12.017440975s ago: executing program 0 (id=5015): keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) read$auto_component_list_fops_(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) unshare$auto(0x40000080) socket(0x11, 0x2, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) ioctl$auto_TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0xfffffff7) 1m7.791957422s ago: executing program 0 (id=5026): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0x4002, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffff004, 0x2) r0 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0xff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x200000000000005, r2, 0x0, 0x1}, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x8}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003", @ANYRES8=r0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRESOCT=r5], 0x1ac}}, 0x40000) 1m7.241610551s ago: executing program 0 (id=5029): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x4e22, @local}, 0x6f) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x1a, 0x0, 0x9, 0x0, 0xf2, 0x7fffffff}, 0x800006}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0) readahead$auto(r2, 0x7ff, 0x9) write$auto(0x3, 0x0, 0x7fffffff) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3b00000e", @ANYRES16=r5, @ANYBLOB="20002bbd7000fcdbdf250700000008000e00d6ffffff0c001700030000000000000005001a0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x44000081}, 0x4000) write$auto(r3, &(0x7f0000000040)='\')%\x00', 0x8b7) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r6, 0xc0285629, r6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) signalfd$auto(r3, &(0x7f00000000c0)={0x200}, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 1m4.511654917s ago: executing program 4 (id=5039): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0xc0105502, 0xffffffffffffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={"843beb0e", 0x3, 0xc, 0x1, 0x8, 0x80, "8a59a63dfcdca4ecf6b9088a298c78", "23dad012", "93d4aed0", "7452fd4d", ["9cbbce59de4024a3fa4f1395", "b35c043db74bbd971c8aac05", "63ec3f6be923d2300e933075", "68d896fe2d986a435429293d"]}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) read$auto(r2, 0x0, 0x8e19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x42002, 0x0) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) write$auto(0x3, 0x0, 0xfdef) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r4, 0x0, 0x6, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/153, 0x99) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r5 = pipe$auto(&(0x7f00000000c0)) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_TUNGETVNETBE(r5, 0x800454df, &(0x7f00000011c0)=0x1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f00000000c0), 0x0) recvfrom$auto(r1, &(0x7f0000000080)="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", 0x401, 0x1, &(0x7f0000001080)=@sco, &(0x7f00000010c0)=0x200) 1m3.492274396s ago: executing program 3 (id=5042): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) syslog$auto(0x2, 0x0, 0xcf) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x80000000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x81, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1m3.456831288s ago: executing program 2 (id=5043): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto(0x3, 0x0, 0x81) (fail_nth: 3) 1m3.385238723s ago: executing program 4 (id=5044): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800006}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0xf500000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0) readahead$auto(r1, 0x7ff, 0x9) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0285629, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) signalfd$auto(r2, &(0x7f00000000c0)={0x200}, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 1m2.872093045s ago: executing program 0 (id=5045): mmap$auto(0x1, 0x8, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x428c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800, 0x9489, 0x3, 0x1ff, 0x1, 0x3, 0x62, 0x80000001, 0x400000000007, 0x6d3f, 0x9, 0x2, 0xfffffffffefffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 1m2.570774433s ago: executing program 3 (id=5046): mmap$auto(0x1, 0x8, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x428c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) prctl$auto_PR_SCHED_CORE_GET(0x200, 0x0, 0x0, 0x1ff, 0x401) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800, 0x9489, 0x3, 0x1ff, 0x1, 0x3, 0x62, 0x80000001, 0x400000000007, 0x6d3f, 0x9, 0x2, 0xfffffffffefffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 1m2.416840185s ago: executing program 2 (id=5047): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f0000000340)='/dev/virtual_nci\x005\xffib\xe2}\x81\xda\x9b\xbaZ\xc0/\x8dBD\xe4\xf5k\x02\xda\xe5]a\x949\xa3a\x7f\xde\xe7\xb2\xe2\xdf\x14\xb4\x1c\x13\xe5`\x8f\x8e\x8aQ\xa6\xa5\xe9e\xbaK\xd3#\xba\xe1*\x16\xb7\xf5\xe2\xf9\xe8\xd2\xca\x99$\x9ex\x05\xb0\x9fe\xf3g\xdb\xd88\x1f\xcd\"F\x13\xf1\x9a\xf3X\x9a\xf8;+e\xf9\xc1\xfb\xb2\xaf\xd0H\xc6{\x9b', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen_full\x00', 0x509080, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0xea) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x81) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x200000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x1c, 0x5, 0x7, 0x1, 0x7, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 1m1.619486037s ago: executing program 3 (id=5048): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) mmap$auto(0x8000000, 0x20009, 0xdf, 0xeb1, 0x401, 0x7f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) adjtimex$auto(&(0x7f00000000c0)={0x4, 0x0, 0x1, 0x70, 0x9, 0xffff, 0x5, 0x0, 0x80, 0x80, 0x8001, {0x5, 0x1}, 0x3, 0x7e, 0x5, 0x10001, 0x0, 0x9, 0x2, 0x3, 0xcb, 0x6, 0x5}) mmap$auto(0x9, 0xeb24, 0x38de, 0x10, r2, 0xffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000080"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r3) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x420, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x81}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6e}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x444}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xce}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x8358, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) 1m1.400200007s ago: executing program 0 (id=5049): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto(0x3, 0x400454da, 0xffffffffffffffff) r0 = socket(0x21, 0x2, 0x2) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) read$auto_proc_pid_cmdline_ops_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xf, 0x3, 0x0) open(0x0, 0x22240, 0x0) socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r2, 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) 1m1.347983193s ago: executing program 2 (id=5050): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mseal$auto(0x10400000000000, 0x7dda, 0x0) 1m0.740865682s ago: executing program 3 (id=5051): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/86, 0x56) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0xffffffffffffff7f) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 1m0.66722707s ago: executing program 2 (id=5052): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x40081271, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000bbf653f038ef4be54afb1202b936534910a51d3a"], 0x1ac}}, 0x20008004) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2503000000180002800c000100060000000000000008000200", @ANYRES32=r5, @ANYBLOB="080001"], 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x1400, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01092dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) shmctl$auto_SHM_INFO(0x1, 0xe, &(0x7f00000004c0)={{0x2, 0xee00, 0xee00, 0x7, 0x6, 0x4d, 0x7}, 0x3, 0x9, 0x8, 0x9, @raw=0x9, @raw=0x3ff, 0x3, 0x0, &(0x7f0000000340)="9fa9d9acafe5f33d19de0f41d7de0c14fb0e32b6cabca17a93d288dc4505335a3b148153fb04427bec64a2210c90caacd33eacedabce6d7de726fc3b1b6059b9c2b6b9a838e353b0333f9361f5108d47d276849fb86dfe4f561bbaad6c9c1f6a070aa81d9ca1d80384434e789bf4ac8bd39ad33b1fa1c409398f1f4fc07abd698a8135a51adb1a0f9b2cc2d81c74510fb2f49c2e63d54097b020ae1c7d01afd330c2c594dc5f57c2701321f234ba548f2835222d72db805bd2ef340b605202304adcee74bf93f54ac56beb5cc3", &(0x7f0000000440)="7571f3145411d63cb5590569a9257847245b3c3cb044d8bfac697e4e7c47f89b9efa56fc9a0e1645629d1bb1076137ae8aeab9a8b45dd975233c31c0fdaf48ce9a60939d1832abf7fa5e16e188d0b032f22b25c4559d4b739e7cbb083681b9261eac3ffcddecb76278566c5de8e07770078d8be3f8e73bef787cf4"}) msgctl$auto_IPC_STAT(0xca, 0x2, &(0x7f0000000600)={{0xf2, 0xee00, 0xffffffffffffffff, 0xfffffe00, 0xdb4000, 0xffffff4d, 0x8}, &(0x7f0000000540)=0x3e, &(0x7f00000005c0)=0x1, 0x1, 0x5, 0x4071, 0x4, 0x49cf, 0x5, 0x9, 0x0, @inferred, @raw=0x10001}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x25c, r6, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_MLO_TTLM_ULINK={0x26, 0x149, "e781b7fd012836aea57421eb5203e75c99bb5e35da80f945be6bdf3ce1b8a44cf98f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1a2, 0x7d, 0x0, 0x1, [@nested={0x10, 0x112, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x27}, @nested={0x4, 0x149}]}, @generic="8e45d2abe52df019f7c356bf456439d841edd5946f5a7baf15d841f45de2699b57dc8abe8b510486fa81cb34c51188a42382c8f0073aba8093d5c076471bb1fdac17f0f91e385dfc2fefe6cef58ff97becbd1eca9277dbeb4d7a8a4b67eca505fb3887fcb6ac813238e8364f8780601bbc59fb08abed36ff9580", @nested={0xc, 0x124, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @uid=r8}]}, @typed={0xc3, 0x53, 0x0, 0x0, @binary="246cf8bc30fc9bb7c51d4f21d0f1409390a9a93ed1b6d1f03f35ce75e7bd90a735435b9ae50662e0a5e604cfb4223153750f06dff741cc6f0a3a893695bfb10404cd7956baaa09d026ecef26451eaaa179514313377754448d85e499114303e9e2697bd5058cd54c12279113dd5702df1bd956e2fbac369a0d3e520ad03513e576a82beb207b6c2c9b51c883bee892eda0f9adf9a740189537b8f0c6f5abfeff7b0a11b15bf0db62c491433eafbc1b175d02b515a945836f223d83bec90373"}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x28, 0xd8, 0x0, 0x1, [@generic="125c745148b82dde31af7b40abc19bc3", @typed={0x8, 0x16, 0x0, 0x0, @binary="8f632258"}, @nested={0x4, 0x58}, @nested={0x4, 0x93}, @nested={0x4, 0x8e}]}, @typed={0x8, 0xc0, 0x0, 0x0, @uid=r9}]}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x61, 0x14e, "e65f8634f72fb532cd8435efcfb14d3456f7d02738669e37ccc4206a151dfcd0d17f918299be1b07af15587c828761acb056cb4ee3c64323944d97f1b323d372fc893efc431f9deb0e732fc58d126b27adf138699564d122ba314b07bc"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) ioctl$auto(r2, 0x89a3, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x45e, 0xfffff800) getsockopt$auto(0x6, 0x84, 0x66, 0x0, &(0x7f00000000c0)=0x10000) ioctl$auto(r0, 0x40005504, 0xffffffffffffffff) rt_sigaction$auto(0x2, &(0x7f0000000180)={&(0x7f0000000080)=&(0x7f0000000000)=0xe, 0x200, &(0x7f0000000140)=&(0x7f0000000100)=0xb1, {0x5c73}}, &(0x7f00000002c0)={&(0x7f0000000200)=&(0x7f00000001c0)=0x6, 0x2c, &(0x7f0000000280)=&(0x7f0000000240)=0x5, {0x2}}, 0x8) 1m0.516053001s ago: executing program 4 (id=5053): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) pwrite64$auto(r0, &(0x7f0000000440)=',^\x00', 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x40081271, 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x9, 0xfffffffffffffff8, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendto$auto(0x3, 0x0, 0x16, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) ioctl$auto_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) socket(0xa, 0x801, 0x84) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x484242, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m0.103704033s ago: executing program 4 (id=5054): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D0p\x00', 0xb80, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x27) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x193400, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_BINDTODEVICE(r1, 0x0, 0x19, &(0x7f0000000080)='\'\')[\xa4^\x00', &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x801, 0x106) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 59.793635109s ago: executing program 3 (id=5055): madvise$auto(0x0, 0xffffffffffff0001, 0x15) syslog$auto(0x2, 0x0, 0xcf) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x80000000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x81, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 59.732558504s ago: executing program 2 (id=5056): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/66, 0x42) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/86, 0x56) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x10, 0xa, 0x20000000000eb1, 0xffffffffffffffff, 0x40000000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2, 0x0) r2 = io_uring_setup$auto(0xc, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x30}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f0000001100)={0x7, 0xe94, 0xd87, 0x5, 0x665fae70, 0xffffffffffffffff}) prctl$auto(0x4, 0x4, r3, 0x6, 0x1) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r4, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)="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", 0x8d2) 59.567780255s ago: executing program 4 (id=5057): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 59.419370259s ago: executing program 4 (id=5058): mmap$auto(0x1, 0x8, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x428c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800, 0x9489, 0x3, 0x1ff, 0x1, 0x3, 0x62, 0x80000001, 0x400000000007, 0x6d3f, 0x9, 0x2, 0xfffffffffefffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 59.070712704s ago: executing program 0 (id=5059): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x48101, 0x0) setsockopt$auto_SO_INCOMING_CPU(r0, 0x3, 0x31, &(0x7f0000000040)='.[\x0e\x00', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = fcntl$auto_F_UNLCK(r1, 0x2, 0x2) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x49af, 0x7fffffff) execveat$auto(r1, &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000500)=0x0, 0x5) ioctl$auto_UDMABUF_CREATE(r2, 0x40187542, 0x0) semctl$auto_SEM_STAT(0x0, 0x8000, 0x12, 0x18000000) getsid$auto(0x0) socket(0x1d, 0x2, 0x6) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x804, 0x0) ioctl$auto_RTC_ALM_SET(r5, 0x40247007, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 58.786410045s ago: executing program 2 (id=5060): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x2, 0x73) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) (async) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) (async) r3 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000100)=0x3) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x1) (async) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), r2) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi20\x00', 0x612400, 0x0) (async) futex_wait$auto(0x0, 0x4, 0x0, 0x2, 0x0, 0x1) mmap$auto(0xfffffffffffffff9, 0xf, 0x7, 0x17, r5, 0xf873) (async) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x5dceeec693dba9ec, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) io_uring_setup$auto(0x86, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) readv$auto(r6, 0x0, 0x6) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) read$auto(r6, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x80000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) 58.737873025s ago: executing program 3 (id=5061): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) waitid$auto(0xe3, r1, &(0x7f0000000000)={@_si_pad}, 0x7, &(0x7f0000000080)={{0x2, 0x8000000000000000}, {0x80000001, 0x1403}, 0x9, 0x3, 0xb8, 0x6, 0xc, 0x6, 0x2, 0x5, 0x2, 0x3e, 0x9, 0x0, 0x8000, 0x5}) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae42, 0x38) 41.216761591s ago: executing program 33 (id=5059): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x48101, 0x0) setsockopt$auto_SO_INCOMING_CPU(r0, 0x3, 0x31, &(0x7f0000000040)='.[\x0e\x00', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = fcntl$auto_F_UNLCK(r1, 0x2, 0x2) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x49af, 0x7fffffff) execveat$auto(r1, &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000500)=0x0, 0x5) ioctl$auto_UDMABUF_CREATE(r2, 0x40187542, 0x0) semctl$auto_SEM_STAT(0x0, 0x8000, 0x12, 0x18000000) getsid$auto(0x0) socket(0x1d, 0x2, 0x6) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x804, 0x0) ioctl$auto_RTC_ALM_SET(r5, 0x40247007, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 40.945510992s ago: executing program 34 (id=5058): mmap$auto(0x1, 0x8, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x428c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800, 0x9489, 0x3, 0x1ff, 0x1, 0x3, 0x62, 0x80000001, 0x400000000007, 0x6d3f, 0x9, 0x2, 0xfffffffffefffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 38.6357939s ago: executing program 35 (id=5060): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x2, 0x73) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) (async) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) (async) r3 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000100)=0x3) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x1) (async) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), r2) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi20\x00', 0x612400, 0x0) (async) futex_wait$auto(0x0, 0x4, 0x0, 0x2, 0x0, 0x1) mmap$auto(0xfffffffffffffff9, 0xf, 0x7, 0x17, r5, 0xf873) (async) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x5dceeec693dba9ec, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) io_uring_setup$auto(0x86, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) readv$auto(r6, 0x0, 0x6) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) read$auto(r6, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x80000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) 37.188725951s ago: executing program 36 (id=5061): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) waitid$auto(0xe3, r1, &(0x7f0000000000)={@_si_pad}, 0x7, &(0x7f0000000080)={{0x2, 0x8000000000000000}, {0x80000001, 0x1403}, 0x9, 0x3, 0xb8, 0x6, 0xc, 0x6, 0x2, 0x5, 0x2, 0x3e, 0x9, 0x0, 0x8000, 0x5}) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae42, 0x38) 5.358013498s ago: executing program 5 (id=5062): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x18b00, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv8\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000080)="c2cdcd9887e1a56c6be6d42c073b45ba99ccc1d35ca2090069d91b1e621d8f523a5020e9daa4397a171ec652b23304996504c8208ab3d27d266b6f20aede28bbd2a18e3e5ce82fb9a14a586098f5599204e4b5b60cbd65cbb9f1642ee9a4105266") r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC2\x00', 0x50c40, 0x0) getrandom$auto(&(0x7f0000000140)='\\\x00', 0xdaa, 0x0) r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) setsockopt$auto_SO_RXQ_OVFL(r3, 0x7, 0x28, &(0x7f00000001c0)='\x00', 0x6) writev$auto(r0, &(0x7f0000000280)={&(0x7f0000000200)="8844a910e4a3633e3e6de245bf05ca5e1417171f13776543366e858faf2cc4adc9fd032b02d28ca1eaed0cdef7bd8efdfdb6c7af4ea448b86e6c5303d5b30a0bbc9eb36b06dd0716da0f30dce38c0c3af1dd28cddc7ee980af276b4de93a6507027de571b555e403a3e04422", 0xffffffffffffffff}, 0x9) setsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0xd, 0x45, &(0x7f00000002c0)='/dev/vmci\x00', 0x1) munlock$auto(0x3, 0x0) r4 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000300)=0x7fff) ioctl$auto_PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000340)={0x3, 0x3}) read$auto_bm_entry_operations_binfmt_misc(r4, &(0x7f0000000380)=""/80, 0x50) read$auto_proc_pid_cmdline_ops_base(r4, &(0x7f0000000400)=""/154, 0x9a) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x8, 0x6, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000095) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f00000005c0)={{0xb, 0x8}, {0x6}}, &(0x7f0000000600)={{0x97c}, {0xb, 0x9ebf}}) r5 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000680), r4) sendmsg$auto_NLBL_MGMT_C_ADD(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}]}, 0x1c}}, 0x820) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x11) shmat$auto(0x8, &(0x7f00000008c0)='/dev/snd/controlC2\x00', 0x0) mmap$auto(0x7, 0xffffffffffffff6c, 0x0, 0x18, r3, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptyp8\x00', 0x680481, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/conf/veth0_vlan/arp_evict_nocarrier\x00', 0x470002, 0x0) munlock$auto(0x7f, 0x401) ioctl$auto(r2, 0x7fff, 0xffffffffffffffff) getrandom$auto(&(0x7f0000000980)='/dev/ptyv8\x00', 0x3, 0x80) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000ac0)={0xe23, 0x80000001, 0x7fffffff, 0x925}, &(0x7f0000000b00)={0x6, 0x0, 0x7, 0x400}) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x220, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa0000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x33}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x800}, 0x5) 65.608902ms ago: executing program 7 (id=5064): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r1, 0x0, 0x6) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0xffffffff, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) getsockopt$auto_SO_MARK(r0, 0x59dd, 0x24, &(0x7f0000000040)=')%-&\\@$\x00', &(0x7f0000000080)=0x2) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, 0x0, 0x5, 0x8000400) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ethtool(0x0, r7) lseek$auto(r4, 0x100, 0x2) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x20000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x20000000007, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000000005, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.150383ms ago: executing program 8 (id=5065): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, r2, 0x7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 0s ago: executing program 6 (id=5063): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyy6\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x24600, 0x0) socket(0x2, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80000541b, 0x38) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0xffffffffffffffff, 0x2, 0x5, 0x0, 0x10000009) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0xd, 0x1, 0x948e, 0x3, 0xffffffffffff7534, 0x3, 0x3, 0x62, 0x8200, 0x87, 0x6, 0x9, 0x2, 0x4000000006]}, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x4280, 0x0) socketpair$auto(0xfffffffa, 0x9, 0x80000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): 9] bridge0: port 3(team0) entered blocking state [ 1485.266398][T26189] bridge0: port 3(team0) entered disabled state [ 1485.301918][T26189] team0: entered allmulticast mode [ 1485.307384][T26189] team_slave_0: entered allmulticast mode [ 1485.355720][T26189] team_slave_1: entered allmulticast mode [ 1485.364286][T26189] team0: entered promiscuous mode [ 1485.414297][T26189] team_slave_0: entered promiscuous mode [ 1485.420717][T26189] team_slave_1: entered promiscuous mode [ 1485.427320][T26189] bridge0: port 3(team0) entered blocking state [ 1485.433729][T26189] bridge0: port 3(team0) entered forwarding state [ 1485.467971][T26194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4518'. [ 1486.789034][T26214] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4520'. [ 1486.879915][T26219] binder: 26218:26219 ioctl c018620c 0 returned -14 [ 1487.165668][T26229] binder: 26228:26229 ioctl c0306201 0 returned -14 [ 1489.423310][T26263] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4533'. [ 1489.581819][T26265] binder: 26264:26265 ioctl c018620c 0 returned -14 [ 1489.610389][T26268] binder: 26266:26268 ioctl c0306201 0 returned -14 [ 1491.600379][T26304] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1492.148065][T26318] binder: 26317:26318 ioctl c0306201 0 returned -14 [ 1493.205580][T26342] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1493.813939][T26354] binder: 26353:26354 ioctl c018620c 0 returned -14 [ 1494.470572][T26361] [U] - [ 1495.148784][T26363] [U] [ 1495.189333][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.200597][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.226072][T26384] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1496.170787][T26393] ptrace attach of "./syz-executor exec"[26394] was attempted by "./syz-executor exec"[26393] [ 1496.372230][T26397] binder: 26396:26397 ioctl c018620c 0 returned -14 [ 1498.347802][T26421] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1499.456892][T26448] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1499.756065][T26450] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.414587][T26460] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4583'. [ 1500.659330][T26462] binder: 26461:26462 ioctl c0306201 0 returned -14 [ 1500.860393][T26468] vivid-009: ================= START STATUS ================= [ 1500.874645][T26468] vivid-009: Enable Output Cropping: true grabbed [ 1500.887898][T26468] vivid-009: Enable Output Composing: true grabbed [ 1500.896022][T26468] vivid-009: Enable Output Scaler: true grabbed [ 1500.903246][T26468] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1500.923757][T26468] vivid-009: Transmit Mode: HDMI grabbed [ 1500.941374][T26468] vivid-009: Hotplug Present: 0x00000000 [ 1500.963418][T26468] vivid-009: RxSense Present: 0x00000000 [ 1500.970893][T26468] vivid-009: EDID Present: 0x00000000 [ 1500.984153][T26468] vivid-009: ================== END STATUS ================== [ 1501.075713][T26464] [U] - [ 1501.110395][T26468] block nbd7: not configured, cannot reconfigure [ 1502.487973][T15872] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1503.203335][T26464] [U] [ 1503.829028][T26499] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4593'. [ 1504.068894][T26503] ptrace attach of "./syz-executor exec"[26504] was attempted by "./syz-executor exec"[26503] [ 1506.828344][T26522] Process accounting paused [ 1507.003345][T15872] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1507.849434][T26544] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4604'. [ 1508.588751][T26550] zswap: compressor 00000000 not available [ 1508.910193][T26554] zswap: compressor 000 not available [ 1508.981829][T26573] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.118080][T26577] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1509.340643][T26587] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4615'. [ 1509.351176][T26587] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4615'. [ 1509.794731][T26582] binder: 26581:26582 ioctl c0306201 0 returned -14 [ 1510.097193][T26603] ima: policy update failed [ 1510.106545][ T31] audit: type=1802 audit(4294967536.005:91): pid=26603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4619" res=0 errno=0 [ 1513.170857][T26655] FAULT_INJECTION: forcing a failure. [ 1513.170857][T26655] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.222610][T26655] CPU: 0 UID: 0 PID: 26655 Comm: syz.3.4632 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1513.222652][T26655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1513.222672][T26655] Call Trace: [ 1513.222682][T26655] [ 1513.222698][T26655] dump_stack_lvl+0x16c/0x1f0 [ 1513.222738][T26655] should_fail_ex+0x512/0x640 [ 1513.222777][T26655] should_failslab+0xc2/0x120 [ 1513.222815][T26655] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1513.222851][T26655] ? skb_clone+0x190/0x3f0 [ 1513.222892][T26655] skb_clone+0x190/0x3f0 [ 1513.222929][T26655] netlink_deliver_tap+0xabd/0xd30 [ 1513.222975][T26655] netlink_unicast+0x62f/0x850 [ 1513.223024][T26655] ? __pfx_netlink_unicast+0x10/0x10 [ 1513.223079][T26655] netlink_sendmsg+0x8d1/0xdd0 [ 1513.223128][T26655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.223185][T26655] ____sys_sendmsg+0xa98/0xc70 [ 1513.223232][T26655] ? copy_msghdr_from_user+0x10a/0x160 [ 1513.223266][T26655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1513.223331][T26655] ___sys_sendmsg+0x134/0x1d0 [ 1513.223369][T26655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1513.223400][T26655] ? __lock_acquire+0x622/0x1c90 [ 1513.223499][T26655] __sys_sendmsg+0x16d/0x220 [ 1513.223535][T26655] ? __pfx___sys_sendmsg+0x10/0x10 [ 1513.223609][T26655] do_syscall_64+0xcd/0x490 [ 1513.223648][T26655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.223682][T26655] RIP: 0033:0x7fbf8e98e9a9 [ 1513.223709][T26655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.223740][T26655] RSP: 002b:00007fbf8f7a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1513.223769][T26655] RAX: ffffffffffffffda RBX: 00007fbf8ebb5fa0 RCX: 00007fbf8e98e9a9 [ 1513.223790][T26655] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1513.223810][T26655] RBP: 00007fbf8f7a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.223829][T26655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.223847][T26655] R13: 0000000000000000 R14: 00007fbf8ebb5fa0 R15: 00007fffd9f3b818 [ 1513.223893][T26655] [ 1514.085241][T26630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1514.242118][T26668] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78000 [ 1514.263586][T26668] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1514.271087][T26668] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1514.284564][T26668] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1514.295027][T26668] page dumped because: unmovable page [ 1514.302136][T26668] page_owner tracks the page as allocated [ 1514.316654][T26668] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 10957, tgid 10957 (syz.1.1089), ts 547924045051, free_ts 545740123234 [ 1514.335444][T26668] post_alloc_hook+0x1c0/0x230 [ 1514.340598][T26668] get_page_from_freelist+0x1321/0x3890 [ 1514.346981][T26668] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1514.353115][T26668] alloc_pages_mpol+0x1fb/0x550 [ 1514.358709][T26668] alloc_pages_noprof+0x131/0x390 [ 1514.363829][T26668] brd_submit_bio+0x942/0x1180 [ 1514.369586][T26668] __submit_bio+0x301/0x690 [ 1514.376425][T26668] submit_bio_noacct_nocheck+0x852/0xd30 [ 1514.382244][T26668] submit_bio_noacct+0x50d/0x1eb0 [ 1514.389000][T26668] __block_write_full_folio+0x735/0xe00 [ 1514.401933][T26668] block_write_full_folio+0x341/0x400 [ 1514.407971][T26668] blkdev_writepages+0xb8/0x140 [ 1514.413258][T26668] do_writepages+0x277/0x600 [ 1514.420625][T26668] filemap_fdatawrite_wbc+0x104/0x160 [ 1514.427021][T26668] __filemap_fdatawrite_range+0xb2/0xf0 [ 1514.432678][T26668] filemap_write_and_wait_range+0xa3/0x130 [ 1514.440493][T26668] page last free pid 10925 tgid 10924 stack trace: [ 1514.447120][T26668] __free_frozen_pages+0x7fe/0x1180 [ 1514.452434][T26668] tlb_remove_table_rcu+0x116/0x1a0 [ 1514.458108][T26668] rcu_core+0x79c/0x14e0 [ 1514.462436][T26668] handle_softirqs+0x219/0x8e0 [ 1514.467440][T26668] __irq_exit_rcu+0x109/0x170 [ 1514.472223][T26668] irq_exit_rcu+0x9/0x30 [ 1514.476626][T26668] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1514.482372][T26668] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1515.080869][ T31] audit: type=1800 audit(4294967540.985:92): pid=26677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4635" name="file0" dev="tmpfs" ino=1005 res=0 errno=0 [ 1515.426674][T26683] [U] - [ 1516.071925][T26684] [U] [ 1516.325582][T26702] FAULT_INJECTION: forcing a failure. [ 1516.325582][T26702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1516.339014][T26702] CPU: 0 UID: 0 PID: 26702 Comm: syz.2.4644 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1516.339053][T26702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1516.339068][T26702] Call Trace: [ 1516.339076][T26702] [ 1516.339085][T26702] dump_stack_lvl+0x16c/0x1f0 [ 1516.339115][T26702] should_fail_ex+0x512/0x640 [ 1516.339144][T26702] should_fail_alloc_page+0xe7/0x130 [ 1516.339175][T26702] prepare_alloc_pages+0x3c2/0x610 [ 1516.339214][T26702] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1516.339240][T26702] ? copy_splice_read+0x1a8/0xba0 [ 1516.339275][T26702] ? stack_trace_save+0x8e/0xc0 [ 1516.339303][T26702] ? __pfx_stack_trace_save+0x10/0x10 [ 1516.339331][T26702] ? stack_depot_save_flags+0x28/0xa40 [ 1516.339364][T26702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1516.339388][T26702] ? kasan_save_stack+0x33/0x60 [ 1516.339412][T26702] ? __kasan_kmalloc+0xaa/0xb0 [ 1516.339434][T26702] ? copy_splice_read+0x1a8/0xba0 [ 1516.339467][T26702] ? do_splice_read+0x285/0x370 [ 1516.339500][T26702] ? splice_direct_to_actor+0x2a1/0xa30 [ 1516.339536][T26702] ? do_splice_direct+0x174/0x240 [ 1516.339570][T26702] ? do_sendfile+0xb06/0xe50 [ 1516.339606][T26702] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1516.339634][T26702] ? do_syscall_64+0xcd/0x490 [ 1516.339679][T26702] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1516.339714][T26702] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1516.339747][T26702] ? trace_kmalloc+0x2b/0xd0 [ 1516.339775][T26702] ? __kmalloc_noprof+0x242/0x510 [ 1516.339806][T26702] copy_splice_read+0x1e1/0xba0 [ 1516.339840][T26702] ? __pfx_pipe_to_null+0x10/0x10 [ 1516.339872][T26702] ? __pfx_copy_splice_read+0x10/0x10 [ 1516.339907][T26702] ? pipe_unlock+0x4a/0x70 [ 1516.339931][T26702] ? __pfx_splice_from_pipe+0x10/0x10 [ 1516.339977][T26702] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1516.340001][T26702] ? __pfx_copy_splice_read+0x10/0x10 [ 1516.340042][T26702] do_splice_read+0x285/0x370 [ 1516.340081][T26702] splice_direct_to_actor+0x2a1/0xa30 [ 1516.340120][T26702] ? __pfx_direct_splice_actor+0x10/0x10 [ 1516.340163][T26702] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1516.340198][T26702] ? get_pid_task+0xfc/0x250 [ 1516.340240][T26702] do_splice_direct+0x174/0x240 [ 1516.340278][T26702] ? __pfx_do_splice_direct+0x10/0x10 [ 1516.340314][T26702] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1516.340349][T26702] ? bpf_lsm_file_permission+0x9/0x10 [ 1516.340379][T26702] ? security_file_permission+0x71/0x210 [ 1516.340416][T26702] ? rw_verify_area+0xcf/0x680 [ 1516.340452][T26702] do_sendfile+0xb06/0xe50 [ 1516.340493][T26702] ? __pfx_do_sendfile+0x10/0x10 [ 1516.340530][T26702] ? __fget_files+0x20e/0x3c0 [ 1516.340574][T26702] __x64_sys_sendfile64+0x1d8/0x220 [ 1516.340600][T26702] ? ksys_write+0x1ac/0x250 [ 1516.340620][T26702] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1516.340657][T26702] do_syscall_64+0xcd/0x490 [ 1516.340682][T26702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.340706][T26702] RIP: 0033:0x7f0da258e9a9 [ 1516.340725][T26702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.340750][T26702] RSP: 002b:00007f0da33ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1516.340774][T26702] RAX: ffffffffffffffda RBX: 00007f0da27b5fa0 RCX: 00007f0da258e9a9 [ 1516.340791][T26702] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1516.340806][T26702] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.340821][T26702] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000002 [ 1516.340837][T26702] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1516.340867][T26702] [ 1516.878229][T26704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143 [ 1516.995369][T26710] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4645'. [ 1517.529044][T26698] [U] - [ 1518.685871][T26741] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1518.739928][T26741] vhci_hcd: invalid port number 16 [ 1518.753306][T26741] vhci_hcd: invalid port number 16 [ 1519.408756][T26711] [U] [ 1519.925342][T26764] program syz.2.4658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.957310][T26765] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4656'. [ 1521.476531][T26778] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78000 [ 1521.489915][T26778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1521.501710][T26778] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1521.510805][T26778] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1521.524649][T26778] page dumped because: unmovable page [ 1521.532168][T26778] page_owner tracks the page as allocated [ 1521.539026][T26778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 10957, tgid 10957 (syz.1.1089), ts 547924045051, free_ts 545740123234 [ 1521.567454][T26778] post_alloc_hook+0x1c0/0x230 [ 1521.577710][T26778] get_page_from_freelist+0x1321/0x3890 [ 1521.592594][T26778] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1521.601461][T26778] alloc_pages_mpol+0x1fb/0x550 [ 1521.607991][T26778] alloc_pages_noprof+0x131/0x390 [ 1521.614737][T26778] brd_submit_bio+0x942/0x1180 [ 1521.621496][T26778] __submit_bio+0x301/0x690 [ 1521.652234][T26778] submit_bio_noacct_nocheck+0x852/0xd30 [ 1521.659514][T26778] submit_bio_noacct+0x50d/0x1eb0 [ 1521.667374][T26778] __block_write_full_folio+0x735/0xe00 [ 1521.677523][T26778] block_write_full_folio+0x341/0x400 [ 1521.687537][T26778] blkdev_writepages+0xb8/0x140 [ 1521.694323][T26778] do_writepages+0x277/0x600 [ 1521.702237][T26778] filemap_fdatawrite_wbc+0x104/0x160 [ 1521.710011][T26778] __filemap_fdatawrite_range+0xb2/0xf0 [ 1521.717090][T26778] filemap_write_and_wait_range+0xa3/0x130 [ 1521.730198][T26778] page last free pid 10925 tgid 10924 stack trace: [ 1521.745201][T26778] __free_frozen_pages+0x7fe/0x1180 [ 1521.752086][T26778] tlb_remove_table_rcu+0x116/0x1a0 [ 1521.759940][T26778] rcu_core+0x79c/0x14e0 [ 1521.766738][T26778] handle_softirqs+0x219/0x8e0 [ 1521.771690][T26778] __irq_exit_rcu+0x109/0x170 [ 1521.784244][T26778] irq_exit_rcu+0x9/0x30 [ 1521.790628][T26778] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1521.797427][T26778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1522.293334][T26793] [U] - [ 1522.852264][T26807] binder: 26806:26807 ioctl c0306201 0 returned -14 [ 1522.924764][T26792] [U] [ 1523.311233][T26811] can: request_module (can-proto-3) failed. [ 1525.007774][T15872] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1528.529087][T26886] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1528.905946][T26894] FAULT_INJECTION: forcing a failure. [ 1528.905946][T26894] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.144602][T26894] CPU: 0 UID: 0 PID: 26894 Comm: syz.0.4688 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1529.144651][T26894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1529.144673][T26894] Call Trace: [ 1529.144684][T26894] [ 1529.144699][T26894] dump_stack_lvl+0x16c/0x1f0 [ 1529.144740][T26894] should_fail_ex+0x512/0x640 [ 1529.144774][T26894] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1529.144834][T26894] ? __pfx_mon_text_open+0x10/0x10 [ 1529.144869][T26894] should_failslab+0xc2/0x120 [ 1529.144908][T26894] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1529.144955][T26894] ? mon_text_open+0x1cb/0x4f0 [ 1529.144990][T26894] ? __pfx_mon_text_open+0x10/0x10 [ 1529.145027][T26894] mon_text_open+0x1cb/0x4f0 [ 1529.145078][T26894] ? __pfx_mon_text_open+0x10/0x10 [ 1529.145114][T26894] ? __debugfs_file_get+0x1fe/0x840 [ 1529.145157][T26894] ? __pfx___debugfs_file_get+0x10/0x10 [ 1529.145202][T26894] ? __pfx_apparmor_file_open+0x10/0x10 [ 1529.145254][T26894] ? lockdown_is_locked_down+0x3f/0x130 [ 1529.145288][T26894] ? bpf_lsm_locked_down+0x9/0x10 [ 1529.145345][T26894] ? __pfx_mon_text_open+0x10/0x10 [ 1529.145381][T26894] full_proxy_open_regular+0x1b6/0x360 [ 1529.145434][T26894] do_dentry_open+0x744/0x1c10 [ 1529.145471][T26894] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1529.145528][T26894] vfs_open+0x82/0x3f0 [ 1529.145578][T26894] path_openat+0x1de4/0x2cb0 [ 1529.145623][T26894] ? __pfx_path_openat+0x10/0x10 [ 1529.145660][T26894] ? __lock_acquire+0xb8a/0x1c90 [ 1529.145711][T26894] do_filp_open+0x20b/0x470 [ 1529.145748][T26894] ? __pfx_do_filp_open+0x10/0x10 [ 1529.145812][T26894] ? alloc_fd+0x471/0x7d0 [ 1529.145878][T26894] do_sys_openat2+0x11b/0x1d0 [ 1529.145924][T26894] ? __pfx_do_sys_openat2+0x10/0x10 [ 1529.145988][T26894] __x64_sys_openat+0x174/0x210 [ 1529.146037][T26894] ? __pfx___x64_sys_openat+0x10/0x10 [ 1529.146116][T26894] do_syscall_64+0xcd/0x490 [ 1529.146154][T26894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.146186][T26894] RIP: 0033:0x7f219b78e9a9 [ 1529.146213][T26894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.146246][T26894] RSP: 002b:00007f219c590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1529.146278][T26894] RAX: ffffffffffffffda RBX: 00007f219b9b5fa0 RCX: 00007f219b78e9a9 [ 1529.146300][T26894] RDX: 000000000000003f RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1529.146322][T26894] RBP: 00007f219b810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1529.146342][T26894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.146361][T26894] R13: 0000000000000000 R14: 00007f219b9b5fa0 R15: 00007ffd9327beb8 [ 1529.146404][T26894] [ 1530.712030][T15872] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1531.334023][T26906] binder: 26905:26906 ioctl c0306201 0 returned -14 [ 1531.538217][T26910] netlink: 'syz.2.4694': attribute type 3 has an invalid length. [ 1531.554795][T26909] netlink: 'syz.2.4694': attribute type 3 has an invalid length. [ 1532.613673][T26922] FAULT_INJECTION: forcing a failure. [ 1532.613673][T26922] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.025086][T26922] CPU: 0 UID: 0 PID: 26922 Comm: syz.4.4693 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1533.025138][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.025161][T26922] Call Trace: [ 1533.025172][T26922] [ 1533.025187][T26922] dump_stack_lvl+0x16c/0x1f0 [ 1533.025228][T26922] should_fail_ex+0x512/0x640 [ 1533.025262][T26922] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1533.025318][T26922] ? __pfx_mon_text_open+0x10/0x10 [ 1533.025354][T26922] should_failslab+0xc2/0x120 [ 1533.025395][T26922] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1533.025450][T26922] ? mon_text_open+0x1cb/0x4f0 [ 1533.025492][T26922] ? __pfx_mon_text_open+0x10/0x10 [ 1533.025530][T26922] mon_text_open+0x1cb/0x4f0 [ 1533.025570][T26922] ? __pfx_mon_text_open+0x10/0x10 [ 1533.025606][T26922] ? __debugfs_file_get+0x1fe/0x840 [ 1533.025649][T26922] ? __pfx___debugfs_file_get+0x10/0x10 [ 1533.025693][T26922] ? __pfx_apparmor_file_open+0x10/0x10 [ 1533.025751][T26922] ? lockdown_is_locked_down+0x3f/0x130 [ 1533.025785][T26922] ? bpf_lsm_locked_down+0x9/0x10 [ 1533.025840][T26922] ? __pfx_mon_text_open+0x10/0x10 [ 1533.025876][T26922] full_proxy_open_regular+0x1b6/0x360 [ 1533.025925][T26922] do_dentry_open+0x744/0x1c10 [ 1533.025963][T26922] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1533.026019][T26922] vfs_open+0x82/0x3f0 [ 1533.026072][T26922] path_openat+0x1de4/0x2cb0 [ 1533.026121][T26922] ? __pfx_path_openat+0x10/0x10 [ 1533.026158][T26922] ? __lock_acquire+0xb8a/0x1c90 [ 1533.026211][T26922] do_filp_open+0x20b/0x470 [ 1533.026245][T26922] ? __pfx_do_filp_open+0x10/0x10 [ 1533.026311][T26922] ? alloc_fd+0x471/0x7d0 [ 1533.026377][T26922] do_sys_openat2+0x11b/0x1d0 [ 1533.026422][T26922] ? __pfx_do_sys_openat2+0x10/0x10 [ 1533.026485][T26922] __x64_sys_openat+0x174/0x210 [ 1533.026532][T26922] ? __pfx___x64_sys_openat+0x10/0x10 [ 1533.026596][T26922] do_syscall_64+0xcd/0x490 [ 1533.026635][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.026670][T26922] RIP: 0033:0x7fc2fef8e9a9 [ 1533.026697][T26922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.026740][T26922] RSP: 002b:00007fc2ffe93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1533.026772][T26922] RAX: ffffffffffffffda RBX: 00007fc2ff1b5fa0 RCX: 00007fc2fef8e9a9 [ 1533.026794][T26922] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1533.026814][T26922] RBP: 00007fc2ff010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1533.026834][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.026853][T26922] R13: 0000000000000000 R14: 00007fc2ff1b5fa0 R15: 00007ffd8c072a98 [ 1533.026896][T26922] [ 1534.111590][T26933] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1536.110830][T15872] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1536.942959][T26956] Process accounting resumed [ 1536.990141][T26968] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4708'. [ 1536.999453][T26968] IPv6: NLM_F_CREATE should be specified when creating new route [ 1537.020982][T26965] binder: 26964:26965 ioctl c0306201 0 returned -14 [ 1538.128001][T26990] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1538.758522][T15872] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1539.178049][T27011] binder: 27010:27011 ioctl c0306201 0 returned -14 [ 1539.520220][T27017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1539.528270][T27017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1539.534659][T27017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1539.542202][T27017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1539.549593][T27017] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1539.656462][T27017] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1539.762769][T27020] Process accounting resumed [ 1540.659791][T27040] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1540.747621][T27031] can: request_module (can-proto-0) failed. [ 1541.231931][T15872] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1541.375631][T27053] FAULT_INJECTION: forcing a failure. [ 1541.375631][T27053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1541.414710][T27053] CPU: 1 UID: 0 PID: 27053 Comm: syz.4.4728 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1541.414754][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1541.414773][T27053] Call Trace: [ 1541.414785][T27053] [ 1541.414799][T27053] dump_stack_lvl+0x16c/0x1f0 [ 1541.414837][T27053] should_fail_ex+0x512/0x640 [ 1541.414877][T27053] should_fail_alloc_page+0xe7/0x130 [ 1541.414919][T27053] prepare_alloc_pages+0x3c2/0x610 [ 1541.414967][T27053] ? lock_acquire+0x179/0x350 [ 1541.415024][T27053] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1541.415069][T27053] ? __lock_acquire+0x622/0x1c90 [ 1541.415114][T27053] ? css_rstat_updated+0x9d/0xd30 [ 1541.415154][T27053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1541.415193][T27053] ? find_held_lock+0x2b/0x80 [ 1541.415239][T27053] ? find_held_lock+0x2b/0x80 [ 1541.415275][T27053] ? rcu_read_unlock+0x17/0x60 [ 1541.415311][T27053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1541.415363][T27053] ? policy_nodemask+0xea/0x4e0 [ 1541.415405][T27053] alloc_pages_mpol+0x1fb/0x550 [ 1541.415446][T27053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1541.415484][T27053] ? rcu_is_watching+0x12/0xc0 [ 1541.415519][T27053] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1541.415559][T27053] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1541.415599][T27053] alloc_pages_noprof+0x131/0x390 [ 1541.415640][T27053] kvm_vm_ioctl+0xbce/0x3dd0 [ 1541.415708][T27053] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1541.415785][T27053] ? kasan_quarantine_put+0x10a/0x240 [ 1541.415816][T27053] ? lockdep_hardirqs_on+0x7c/0x110 [ 1541.415850][T27053] ? find_held_lock+0x2b/0x80 [ 1541.415884][T27053] ? tomoyo_path_number_perm+0x295/0x580 [ 1541.415938][T27053] ? tomoyo_path_number_perm+0x18d/0x580 [ 1541.415996][T27053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1541.416041][T27053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1541.416093][T27053] ? do_vfs_ioctl+0x523/0x1a60 [ 1541.416133][T27053] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1541.416192][T27053] ? find_held_lock+0x2b/0x80 [ 1541.416218][T27053] ? hook_file_ioctl_common+0x145/0x410 [ 1541.416262][T27053] ? __fget_files+0x20e/0x3c0 [ 1541.416309][T27053] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1541.416354][T27053] __x64_sys_ioctl+0x18e/0x210 [ 1541.416394][T27053] do_syscall_64+0xcd/0x490 [ 1541.416426][T27053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.416454][T27053] RIP: 0033:0x7fc2fef8e9a9 [ 1541.416476][T27053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.416502][T27053] RSP: 002b:00007fc2ffe72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.416528][T27053] RAX: ffffffffffffffda RBX: 00007fc2ff1b6080 RCX: 00007fc2fef8e9a9 [ 1541.416547][T27053] RDX: 0000000000000038 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1541.416564][T27053] RBP: 00007fc2ffe72090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.416581][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.416598][T27053] R13: 0000000000000001 R14: 00007fc2ff1b6080 R15: 00007ffd8c072a98 [ 1541.416632][T27053] [ 1541.995633][T15872] Bluetooth: hci4: command 0x0c1a tx timeout [ 1542.002213][T15872] Bluetooth: hci1: command 0x040f tx timeout [ 1542.009603][T15872] Bluetooth: hci3: command 0x0406 tx timeout [ 1542.016191][T15872] Bluetooth: hci2: command 0x0c1a tx timeout [ 1542.435214][T27063] binder: 27055:27063 ioctl c0306201 0 returned -14 [ 1542.464415][T27065] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1542.479722][T27064] FAULT_INJECTION: forcing a failure. [ 1542.479722][T27064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1542.513779][T27064] CPU: 0 UID: 0 PID: 27064 Comm: syz.3.4733 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1542.513824][T27064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1542.513843][T27064] Call Trace: [ 1542.513855][T27064] [ 1542.513874][T27064] dump_stack_lvl+0x16c/0x1f0 [ 1542.513915][T27064] should_fail_ex+0x512/0x640 [ 1542.513955][T27064] should_fail_alloc_page+0xe7/0x130 [ 1542.514000][T27064] prepare_alloc_pages+0x3c2/0x610 [ 1542.514045][T27064] ? rcu_is_watching+0x12/0xc0 [ 1542.514091][T27064] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1542.514131][T27064] ? rcu_is_watching+0x12/0xc0 [ 1542.514163][T27064] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1542.514205][T27064] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1542.514242][T27064] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1542.514295][T27064] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1542.514332][T27064] ? __lock_acquire+0xb8a/0x1c90 [ 1542.514384][T27064] ? __kasan_slab_free+0x51/0x70 [ 1542.514419][T27064] ? alloc_vmap_area+0x1f06/0x29c0 [ 1542.514460][T27064] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1542.514506][T27064] ? __bpf_map_area_alloc+0x12e/0x200 [ 1542.514534][T27064] ? htab_map_alloc+0x44b/0x1570 [ 1542.514580][T27064] ? map_create+0x58f/0x1db0 [ 1542.514626][T27064] ? __sys_bpf+0x4d8d/0x4ea0 [ 1542.514653][T27064] ? __x64_sys_bpf+0x78/0xc0 [ 1542.514682][T27064] ? do_syscall_64+0xcd/0x490 [ 1542.514732][T27064] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1542.514768][T27064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1542.514821][T27064] ? policy_nodemask+0xea/0x4e0 [ 1542.514875][T27064] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1542.514912][T27064] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1542.514967][T27064] kasan_populate_vmalloc+0xf1/0x1f0 [ 1542.515030][T27064] alloc_vmap_area+0x959/0x29c0 [ 1542.515099][T27064] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1542.515153][T27064] __get_vm_area_node+0x1ca/0x330 [ 1542.515204][T27064] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1542.515252][T27064] ? htab_map_alloc+0x44b/0x1570 [ 1542.515297][T27064] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1542.515338][T27064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1542.515379][T27064] ? htab_map_alloc+0x44b/0x1570 [ 1542.515431][T27064] ? mark_held_locks+0x49/0x80 [ 1542.515488][T27064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1542.515538][T27064] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 1542.515581][T27064] ? htab_map_alloc+0x44b/0x1570 [ 1542.515628][T27064] __bpf_map_area_alloc+0x12e/0x200 [ 1542.515662][T27064] ? htab_map_alloc+0x44b/0x1570 [ 1542.515718][T27064] htab_map_alloc+0x44b/0x1570 [ 1542.515779][T27064] ? htab_map_alloc_check+0x2f2/0x430 [ 1542.515836][T27064] map_create+0x58f/0x1db0 [ 1542.515900][T27064] ? __pfx_map_create+0x10/0x10 [ 1542.515954][T27064] ? __might_fault+0xe3/0x190 [ 1542.515987][T27064] ? __might_fault+0xe3/0x190 [ 1542.516016][T27064] ? __might_fault+0x13b/0x190 [ 1542.516063][T27064] __sys_bpf+0x4d8d/0x4ea0 [ 1542.516106][T27064] ? __pfx___sys_bpf+0x10/0x10 [ 1542.516135][T27064] ? ksys_write+0x190/0x250 [ 1542.516173][T27064] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1542.516234][T27064] ? fput+0x70/0xf0 [ 1542.516272][T27064] ? ksys_write+0x1ac/0x250 [ 1542.516303][T27064] ? __pfx_ksys_write+0x10/0x10 [ 1542.516344][T27064] __x64_sys_bpf+0x78/0xc0 [ 1542.516376][T27064] ? lockdep_hardirqs_on+0x7c/0x110 [ 1542.516409][T27064] do_syscall_64+0xcd/0x490 [ 1542.516449][T27064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.516490][T27064] RIP: 0033:0x7fbf8e98e9a9 [ 1542.516517][T27064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.516549][T27064] RSP: 002b:00007fbf8f7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1542.516581][T27064] RAX: ffffffffffffffda RBX: 00007fbf8ebb5fa0 RCX: 00007fbf8e98e9a9 [ 1542.516604][T27064] RDX: 0000000000000198 RSI: 0000200000000100 RDI: 0000000000000000 [ 1542.516625][T27064] RBP: 00007fbf8f7a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.516645][T27064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.516663][T27064] R13: 0000000000000001 R14: 00007fbf8ebb5fa0 R15: 00007fffd9f3b818 [ 1542.516704][T27064] [ 1543.589647][T27075] FAULT_INJECTION: forcing a failure. [ 1543.589647][T27075] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.661190][T27077] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1543.714060][T27075] CPU: 1 UID: 0 PID: 27075 Comm: syz.0.4735 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1543.714107][T27075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1543.714127][T27075] Call Trace: [ 1543.714138][T27075] [ 1543.714152][T27075] dump_stack_lvl+0x16c/0x1f0 [ 1543.714191][T27075] should_fail_ex+0x512/0x640 [ 1543.714232][T27075] should_failslab+0xc2/0x120 [ 1543.714270][T27075] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1543.714322][T27075] ? sctp_add_bind_addr+0xae/0x3f0 [ 1543.714359][T27075] sctp_add_bind_addr+0xae/0x3f0 [ 1543.714403][T27075] sctp_copy_local_addr_list+0x39d/0x5a0 [ 1543.714451][T27075] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1543.714496][T27075] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1543.714544][T27075] ? sctp_bind_addr_copy+0xe0/0x530 [ 1543.714576][T27075] sctp_bind_addr_copy+0xe0/0x530 [ 1543.714617][T27075] sctp_connect_new_asoc+0x1d7/0x790 [ 1543.714668][T27075] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1543.714717][T27075] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1543.714826][T27075] __sctp_connect+0x3f3/0xc60 [ 1543.714878][T27075] ? do_raw_spin_lock+0x12c/0x2b0 [ 1543.714932][T27075] ? __pfx___sctp_connect+0x10/0x10 [ 1543.714981][T27075] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1543.715029][T27075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1543.715082][T27075] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1543.715126][T27075] sctp_inet_connect+0x15f/0x200 [ 1543.715174][T27075] __sys_connect_file+0x141/0x1a0 [ 1543.715230][T27075] __sys_connect+0x13b/0x160 [ 1543.715278][T27075] ? __pfx___sys_connect+0x10/0x10 [ 1543.715342][T27075] ? __pfx_ksys_write+0x10/0x10 [ 1543.715381][T27075] __x64_sys_connect+0x72/0xb0 [ 1543.715428][T27075] ? lockdep_hardirqs_on+0x7c/0x110 [ 1543.715460][T27075] do_syscall_64+0xcd/0x490 [ 1543.715499][T27075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.715533][T27075] RIP: 0033:0x7f219b78e9a9 [ 1543.715559][T27075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.715590][T27075] RSP: 002b:00007f219c590038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1543.715622][T27075] RAX: ffffffffffffffda RBX: 00007f219b9b5fa0 RCX: 00007f219b78e9a9 [ 1543.715643][T27075] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1543.715663][T27075] RBP: 00007f219c590090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.715682][T27075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.715700][T27075] R13: 0000000000000000 R14: 00007f219b9b5fa0 R15: 00007ffd9327beb8 [ 1543.715753][T27075] [ 1544.018411][T25455] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1544.065603][T25455] Bluetooth: hci4: command 0x0c1a tx timeout [ 1544.925100][T27091] FAULT_INJECTION: forcing a failure. [ 1544.925100][T27091] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.970619][T27091] CPU: 0 UID: 0 PID: 27091 Comm: syz.2.4741 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1544.970664][T27091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1544.970683][T27091] Call Trace: [ 1544.970695][T27091] [ 1544.970708][T27091] dump_stack_lvl+0x16c/0x1f0 [ 1544.970746][T27091] should_fail_ex+0x512/0x640 [ 1544.970780][T27091] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1544.970818][T27091] should_failslab+0xc2/0x120 [ 1544.970857][T27091] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1544.970892][T27091] ? getname_flags.part.0+0x4c/0x550 [ 1544.970951][T27091] getname_flags.part.0+0x4c/0x550 [ 1544.970999][T27091] getname_flags+0x93/0xf0 [ 1544.971048][T27091] do_sys_openat2+0xb8/0x1d0 [ 1544.971089][T27091] ? __pfx_do_sys_openat2+0x10/0x10 [ 1544.971134][T27091] ? __fget_files+0x20e/0x3c0 [ 1544.971194][T27091] __x64_sys_openat+0x174/0x210 [ 1544.971237][T27091] ? __pfx___x64_sys_openat+0x10/0x10 [ 1544.971281][T27091] ? ksys_write+0x1ac/0x250 [ 1544.971326][T27091] do_syscall_64+0xcd/0x490 [ 1544.971364][T27091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.971396][T27091] RIP: 0033:0x7f0da258e9a9 [ 1544.971421][T27091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.971453][T27091] RSP: 002b:00007f0da33ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1544.971483][T27091] RAX: ffffffffffffffda RBX: 00007f0da27b5fa0 RCX: 00007f0da258e9a9 [ 1544.971503][T27091] RDX: 0000000000000102 RSI: 0000200000004000 RDI: ffffffffffffff9c [ 1544.971523][T27091] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.971541][T27091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.971560][T27091] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1544.971600][T27091] [ 1545.577948][T27097] binder: 27096:27097 ioctl c0306201 0 returned -14 [ 1545.932303][T27110] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1546.081035][T27095] [U]  [ 1546.147288][T25455] Bluetooth: hci4: command 0x0c1a tx timeout [ 1546.575334][T27124] FAULT_INJECTION: forcing a failure. [ 1546.575334][T27124] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.591038][T27124] CPU: 0 UID: 0 PID: 27124 Comm: syz.2.4753 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1546.591079][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1546.591097][T27124] Call Trace: [ 1546.591108][T27124] [ 1546.591120][T27124] dump_stack_lvl+0x16c/0x1f0 [ 1546.591157][T27124] should_fail_ex+0x512/0x640 [ 1546.591188][T27124] ? __kmalloc_noprof+0xbf/0x510 [ 1546.591221][T27124] ? do_handle_open+0x585/0xb70 [ 1546.591263][T27124] should_failslab+0xc2/0x120 [ 1546.591299][T27124] __kmalloc_noprof+0xd2/0x510 [ 1546.591340][T27124] do_handle_open+0x585/0xb70 [ 1546.591381][T27124] ? __fget_files+0x20e/0x3c0 [ 1546.591431][T27124] ? __pfx_do_handle_open+0x10/0x10 [ 1546.591482][T27124] ? ksys_write+0x1ac/0x250 [ 1546.591526][T27124] ? do_syscall_64+0xcd/0x490 [ 1546.591557][T27124] do_syscall_64+0xcd/0x490 [ 1546.591592][T27124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.591624][T27124] RIP: 0033:0x7f0da258e9a9 [ 1546.591649][T27124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.591679][T27124] RSP: 002b:00007f0da33ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1546.591708][T27124] RAX: ffffffffffffffda RBX: 00007f0da27b5fa0 RCX: 00007f0da258e9a9 [ 1546.591729][T27124] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 1546.591756][T27124] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.591777][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.591795][T27124] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1546.591835][T27124] [ 1547.187614][T27095] [U] [ 1547.473294][T27134] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1547.482984][T27134] IPv6: NLM_F_CREATE should be specified when creating new route [ 1548.017224][T27145] mtrr: base(0x40000) is not aligned on a size(0x0000) boundary [ 1548.743239][T27153] [U]  [ 1549.376117][T27153] [U] [ 1550.843246][T27213] [U] - [ 1550.846333][T27213] [U] [ 1550.881799][T27211] binder: 27196:27211 ioctl c0306201 0 returned -14 [ 1551.592333][T27214] [U] [ 1552.395079][T27246] syz.3.4785 (27246): attempted to duplicate a private mapping with mremap. This is not supported. [ 1552.460990][T27235] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.4785: 7 [ 1553.831723][T27269] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4791'. [ 1554.424094][T27283] random: crng reseeded on system resumption [ 1556.577974][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 1556.603957][T27294] sp0: Synchronizing with TNC [ 1556.614093][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4801'. [ 1556.629369][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.645708][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.706367][T27298] ovs_: entered promiscuous mode [ 1556.798148][T27298] sp0: Synchronizing with TNC [ 1556.984349][T27310] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1557.267838][T27317] binder: 27314:27317 ioctl c0306201 0 returned -14 [ 1557.680772][T27333] delete_channel: no stack [ 1558.479737][T27343] delete_channel: no stack [ 1558.499344][T27342] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1559.738509][T27377] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4824'. [ 1559.838754][T27374] binder: 27372:27374 ioctl c0306201 2000000011c0 returned -14 [ 1559.924937][T27382] FAULT_INJECTION: forcing a failure. [ 1559.924937][T27382] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.937839][T27382] CPU: 1 UID: 0 PID: 27382 Comm: syz.2.4825 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1559.937883][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1559.937903][T27382] Call Trace: [ 1559.937914][T27382] [ 1559.937926][T27382] dump_stack_lvl+0x16c/0x1f0 [ 1559.937967][T27382] should_fail_ex+0x512/0x640 [ 1559.938001][T27382] ? __kmalloc_noprof+0xbf/0x510 [ 1559.938036][T27382] ? input_ff_create+0x60/0x350 [ 1559.938075][T27382] should_failslab+0xc2/0x120 [ 1559.938115][T27382] __kmalloc_noprof+0xd2/0x510 [ 1559.938156][T27382] input_ff_create+0x60/0x350 [ 1559.938203][T27382] uinput_ioctl_handler.isra.0+0x1181/0x1df0 [ 1559.938254][T27382] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1559.938308][T27382] ? find_held_lock+0x2b/0x80 [ 1559.938366][T27382] ? __pfx_uinput_ioctl+0x10/0x10 [ 1559.938411][T27382] __x64_sys_ioctl+0x18e/0x210 [ 1559.938463][T27382] do_syscall_64+0xcd/0x490 [ 1559.938503][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.938537][T27382] RIP: 0033:0x7f0da258e9a9 [ 1559.938563][T27382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.938596][T27382] RSP: 002b:00007f0da33ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1559.938625][T27382] RAX: ffffffffffffffda RBX: 00007f0da27b5fa0 RCX: 00007f0da258e9a9 [ 1559.938656][T27382] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1559.938676][T27382] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.938695][T27382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.938714][T27382] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1559.938754][T27382] [ 1561.559455][T27415] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4834'. [ 1561.667221][T27416] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4833'. [ 1561.736143][T25455] Bluetooth: hci3: unexpected event 0x01 length: 2 > 1 [ 1561.870341][T27429] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1563.434717][T27445] binder: 27444:27445 unknown command 0 [ 1563.454677][T27445] binder: 27444:27445 ioctl c0306201 2000000011c0 returned -22 [ 1563.981462][T27477] binder: 27475:27477 ioctl c00c6211 0 returned -14 [ 1564.804580][ C1] sd 0:0:1:0: [sda] tag#8141 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1564.815230][ C1] sd 0:0:1:0: [sda] tag#8141 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 1565.138643][T27499] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1565.375093][T27504] sock: sock_timestamping_bind_phc: sock not bind to device [ 1566.167898][T27519] FAULT_INJECTION: forcing a failure. [ 1566.167898][T27519] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.185923][T27519] CPU: 1 UID: 0 PID: 27519 Comm: syz.3.4856 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1566.185958][T27519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1566.185973][T27519] Call Trace: [ 1566.185981][T27519] [ 1566.185991][T27519] dump_stack_lvl+0x16c/0x1f0 [ 1566.186020][T27519] should_fail_ex+0x512/0x640 [ 1566.186045][T27519] ? fs_reclaim_acquire+0xae/0x150 [ 1566.186080][T27519] ? usb_alloc_urb+0x66/0xa0 [ 1566.186108][T27519] should_failslab+0xc2/0x120 [ 1566.186136][T27519] __kmalloc_noprof+0xd2/0x510 [ 1566.186168][T27519] usb_alloc_urb+0x66/0xa0 [ 1566.186196][T27519] do_proc_control+0x2ef/0x10a0 [ 1566.186229][T27519] ? __might_fault+0x13b/0x190 [ 1566.186254][T27519] ? __pfx_do_proc_control+0x10/0x10 [ 1566.186293][T27519] usbdev_ioctl+0x2300/0x4070 [ 1566.186328][T27519] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1566.186358][T27519] ? do_vfs_ioctl+0x523/0x1a60 [ 1566.186392][T27519] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1566.186446][T27519] ? find_held_lock+0x2b/0x80 [ 1566.186471][T27519] ? hook_file_ioctl_common+0x145/0x410 [ 1566.186511][T27519] ? __fget_files+0x20e/0x3c0 [ 1566.186557][T27519] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1566.186589][T27519] __x64_sys_ioctl+0x18e/0x210 [ 1566.186625][T27519] do_syscall_64+0xcd/0x490 [ 1566.186654][T27519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.186678][T27519] RIP: 0033:0x7fbf8e98e9a9 [ 1566.186697][T27519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1566.186721][T27519] RSP: 002b:00007fbf8f767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.186744][T27519] RAX: ffffffffffffffda RBX: 00007fbf8ebb6160 RCX: 00007fbf8e98e9a9 [ 1566.186761][T27519] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000004 [ 1566.186776][T27519] RBP: 00007fbf8f767090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.186791][T27519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.186806][T27519] R13: 0000000000000000 R14: 00007fbf8ebb6160 R15: 00007fffd9f3b818 [ 1566.186837][T27519] [ 1567.095117][T27535] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1567.399196][T27541] Process accounting paused [ 1567.803619][T27552] binder: 27549:27552 ioctl c0306201 0 returned -14 [ 1568.210491][T27563] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1568.221104][T27563] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1568.254827][T27563] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1568.278530][T27563] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1569.250597][T27575] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4871'. [ 1569.314626][T27575] IPv6: NLM_F_CREATE should be specified when creating new route [ 1569.369218][T27579] ovs_: entered promiscuous mode [ 1569.443026][T27580] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 1569.701359][T27581] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147 [ 1570.192284][T27572] Process accounting paused [ 1570.261193][T27587] ima: policy update failed [ 1570.313337][ T31] audit: type=1802 audit(4294967596.175:93): pid=27587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4875" res=0 errno=0 [ 1570.607630][T27591] binder: 27589:27591 ioctl c0306201 0 returned -14 [ 1571.500100][T27604] FAULT_INJECTION: forcing a failure. [ 1571.500100][T27604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1571.514038][T27604] CPU: 1 UID: 0 PID: 27604 Comm: syz.2.4880 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1571.514081][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.514097][T27604] Call Trace: [ 1571.514106][T27604] [ 1571.514116][T27604] dump_stack_lvl+0x16c/0x1f0 [ 1571.514146][T27604] should_fail_ex+0x512/0x640 [ 1571.514175][T27604] should_fail_alloc_page+0xe7/0x130 [ 1571.514206][T27604] prepare_alloc_pages+0x3c2/0x610 [ 1571.514244][T27604] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1571.514273][T27604] ? __lock_acquire+0x622/0x1c90 [ 1571.514316][T27604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1571.514345][T27604] ? find_held_lock+0x2b/0x80 [ 1571.514376][T27604] ? page_table_check_set+0x631/0x750 [ 1571.514406][T27604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1571.514444][T27604] ? policy_nodemask+0xea/0x4e0 [ 1571.514489][T27604] alloc_pages_mpol+0x1fb/0x550 [ 1571.514531][T27604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1571.514582][T27604] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1571.514630][T27604] vma_alloc_folio_noprof+0xed/0x1e0 [ 1571.514675][T27604] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1571.514716][T27604] ? find_held_lock+0x2b/0x80 [ 1571.514758][T27604] ? __handle_mm_fault+0x1092/0x5490 [ 1571.514801][T27604] __handle_mm_fault+0x2f21/0x5490 [ 1571.514848][T27604] ? __pfx___handle_mm_fault+0x10/0x10 [ 1571.514890][T27604] ? lock_vma_under_rcu+0x47d/0x970 [ 1571.514941][T27604] ? lock_vma_under_rcu+0x47d/0x970 [ 1571.515021][T27604] handle_mm_fault+0x589/0xd10 [ 1571.515070][T27604] ? __pkru_allows_pkey+0x51/0xb0 [ 1571.515117][T27604] do_user_addr_fault+0x60c/0x1370 [ 1571.515171][T27604] ? rcu_is_watching+0x12/0xc0 [ 1571.515208][T27604] exc_page_fault+0x5c/0xb0 [ 1571.515232][T27604] asm_exc_page_fault+0x26/0x30 [ 1571.515255][T27604] RIP: 0033:0x7f0da245a3ab [ 1571.515275][T27604] Code: 00 00 00 48 8d 3d 8d 2b 19 00 48 89 c1 31 c0 e8 8b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 2b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1571.515299][T27604] RSP: 002b:00007f0da33acfb0 EFLAGS: 00010202 [ 1571.515318][T27604] RAX: 0000000000000000 RBX: 00007f0da27b5fa0 RCX: 0000000000000000 [ 1571.515333][T27604] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 1571.515349][T27604] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.515365][T27604] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 1571.515379][T27604] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1571.515410][T27604] [ 1571.761844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.778881][T27604] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1573.844419][T27626] binder: 27621:27626 ioctl c0306201 2000000011c0 returned -14 [ 1574.997023][T27642] blkio.reset_stats is deprecated [ 1577.092357][T27683] FAULT_INJECTION: forcing a failure. [ 1577.092357][T27683] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.139411][T27683] CPU: 1 UID: 0 PID: 27683 Comm: syz.3.4896 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1577.139458][T27683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1577.139478][T27683] Call Trace: [ 1577.139490][T27683] [ 1577.139503][T27683] dump_stack_lvl+0x16c/0x1f0 [ 1577.139542][T27683] should_fail_ex+0x512/0x640 [ 1577.139576][T27683] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1577.139616][T27683] should_failslab+0xc2/0x120 [ 1577.139655][T27683] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1577.139690][T27683] ? vma_merge_new_range+0x37f/0xa00 [ 1577.139721][T27683] ? vm_area_alloc+0x1f/0x160 [ 1577.139778][T27683] vm_area_alloc+0x1f/0x160 [ 1577.139829][T27683] __mmap_region+0xf0a/0x25e0 [ 1577.139870][T27683] ? __pfx___mmap_region+0x10/0x10 [ 1577.139925][T27683] ? __lock_acquire+0x622/0x1c90 [ 1577.140050][T27683] ? trace_cap_capable+0x18d/0x200 [ 1577.140106][T27683] mmap_region+0x32b/0x3f0 [ 1577.140149][T27683] do_mmap+0xa3e/0x1210 [ 1577.140215][T27683] ? __pfx_do_mmap+0x10/0x10 [ 1577.140262][T27683] ? __pfx_down_write_killable+0x10/0x10 [ 1577.140312][T27683] vm_mmap_pgoff+0x281/0x450 [ 1577.140361][T27683] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1577.140411][T27683] ? __fget_files+0x20e/0x3c0 [ 1577.140474][T27683] ksys_mmap_pgoff+0x32c/0x5c0 [ 1577.140518][T27683] ? __pfx_ksys_write+0x10/0x10 [ 1577.140555][T27683] __x64_sys_mmap+0x125/0x190 [ 1577.140610][T27683] do_syscall_64+0xcd/0x490 [ 1577.140648][T27683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.140683][T27683] RIP: 0033:0x7fbf8e98e9a9 [ 1577.140710][T27683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1577.140743][T27683] RSP: 002b:00007fbf8f7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1577.140773][T27683] RAX: ffffffffffffffda RBX: 00007fbf8ebb5fa0 RCX: 00007fbf8e98e9a9 [ 1577.140793][T27683] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 1577.140824][T27683] RBP: 00007fbf8f7a9090 R08: 0000000000000003 R09: 0000000000008000 [ 1577.140845][T27683] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1577.140865][T27683] R13: 0000000000000000 R14: 00007fbf8ebb5fa0 R15: 00007fffd9f3b818 [ 1577.140907][T27683] [ 1577.401963][T27681] binder: 27680:27681 ioctl c0306201 0 returned -14 [ 1579.881417][T27715] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1580.089941][T27713] usb usb36: usbfs: process 27713 (syz.3.4903) did not claim interface 0 before use [ 1580.434629][ T31] audit: type=1804 audit(4294967606.335:94): pid=27727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4907" name="/newroot/172/file0" dev="tmpfs" ino=908 res=1 errno=0 [ 1586.629903][ C1] sd 0:0:1:0: [sda] tag#8166 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1586.640431][ C1] sd 0:0:1:0: [sda] tag#8166 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1586.917954][T27812] FAULT_INJECTION: forcing a failure. [ 1586.917954][T27812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.933897][T27812] CPU: 1 UID: 0 PID: 27812 Comm: syz.2.4927 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1586.933947][T27812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1586.933969][T27812] Call Trace: [ 1586.933981][T27812] [ 1586.933993][T27812] dump_stack_lvl+0x16c/0x1f0 [ 1586.934033][T27812] should_fail_ex+0x512/0x640 [ 1586.934073][T27812] _copy_to_user+0x32/0xd0 [ 1586.934125][T27812] simple_read_from_buffer+0xcb/0x170 [ 1586.934180][T27812] proc_fail_nth_read+0x197/0x270 [ 1586.934229][T27812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1586.934278][T27812] ? rw_verify_area+0xcf/0x680 [ 1586.934327][T27812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1586.934373][T27812] vfs_read+0x1e4/0xc60 [ 1586.934409][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1586.934447][T27812] ? __pfx_vfs_read+0x10/0x10 [ 1586.934487][T27812] ? __fget_files+0x20e/0x3c0 [ 1586.934551][T27812] ksys_read+0x12a/0x250 [ 1586.934580][T27812] ? __pfx_ksys_read+0x10/0x10 [ 1586.934612][T27812] ? fput+0x70/0xf0 [ 1586.934657][T27812] do_syscall_64+0xcd/0x490 [ 1586.934696][T27812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.934729][T27812] RIP: 0033:0x7f0da258d3bc [ 1586.934755][T27812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1586.934787][T27812] RSP: 002b:00007f0da33ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1586.934818][T27812] RAX: ffffffffffffffda RBX: 00007f0da27b5fa0 RCX: 00007f0da258d3bc [ 1586.934841][T27812] RDX: 000000000000000f RSI: 00007f0da33ae0a0 RDI: 0000000000000006 [ 1586.934862][T27812] RBP: 00007f0da33ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.934883][T27812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.934904][T27812] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1586.934947][T27812] [ 1587.121426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.694612][ T31] audit: type=1804 audit(4294967613.595:95): pid=27817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4928" name="/newroot/183/file0" dev="tmpfs" ino=965 res=1 errno=0 [ 1588.436808][T27827] FAULT_INJECTION: forcing a failure. [ 1588.436808][T27827] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.449745][T27827] CPU: 1 UID: 0 PID: 27827 Comm: syz.2.4930 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1588.449793][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1588.449814][T27827] Call Trace: [ 1588.449826][T27827] [ 1588.449839][T27827] dump_stack_lvl+0x16c/0x1f0 [ 1588.449882][T27827] should_fail_ex+0x512/0x640 [ 1588.449918][T27827] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1588.449961][T27827] should_failslab+0xc2/0x120 [ 1588.450004][T27827] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1588.450042][T27827] ? __d_alloc+0x31/0xaa0 [ 1588.450085][T27827] __d_alloc+0x31/0xaa0 [ 1588.450139][T27827] path_from_stashed+0x500/0xb00 [ 1588.450180][T27827] ? __pfx_path_from_stashed+0x10/0x10 [ 1588.450218][T27827] ? do_raw_read_unlock+0x44/0xe0 [ 1588.450256][T27827] ns_get_path+0x5f/0x80 [ 1588.450315][T27827] proc_ns_get_link+0x121/0x260 [ 1588.450368][T27827] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1588.450425][T27827] ? atime_needs_update+0x8b/0x710 [ 1588.450473][T27827] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1588.450527][T27827] step_into+0x1a29/0x2270 [ 1588.450586][T27827] ? __pfx_step_into+0x10/0x10 [ 1588.450635][T27827] ? find_held_lock+0x2b/0x80 [ 1588.450685][T27827] path_openat+0x6db/0x2cb0 [ 1588.450732][T27827] ? __pfx_path_openat+0x10/0x10 [ 1588.450766][T27827] ? __lock_acquire+0xb8a/0x1c90 [ 1588.450816][T27827] do_filp_open+0x20b/0x470 [ 1588.450848][T27827] ? __pfx_do_filp_open+0x10/0x10 [ 1588.450911][T27827] ? alloc_fd+0x471/0x7d0 [ 1588.450974][T27827] do_sys_openat2+0x11b/0x1d0 [ 1588.451037][T27827] ? __pfx_do_sys_openat2+0x10/0x10 [ 1588.451080][T27827] ? find_held_lock+0x2b/0x80 [ 1588.451117][T27827] ? handle_mm_fault+0x2ab/0xd10 [ 1588.451177][T27827] __x64_sys_openat+0x174/0x210 [ 1588.451222][T27827] ? __pfx___x64_sys_openat+0x10/0x10 [ 1588.451273][T27827] ? do_user_addr_fault+0x843/0x1370 [ 1588.451341][T27827] do_syscall_64+0xcd/0x490 [ 1588.451380][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.451416][T27827] RIP: 0033:0x7f0da258d310 [ 1588.451443][T27827] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1588.451476][T27827] RSP: 002b:00007f0da33adf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1588.451506][T27827] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0da258d310 [ 1588.451526][T27827] RDX: 0000000000000002 RSI: 00007f0da33adfa0 RDI: 00000000ffffff9c [ 1588.451546][T27827] RBP: 00007f0da33adfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.451567][T27827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1588.451587][T27827] R13: 0000000000000000 R14: 00007f0da27b5fa0 R15: 00007ffc8391bb78 [ 1588.451629][T27827] [ 1589.902809][T27855] random: crng reseeded on system resumption [ 1589.994880][T27857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148 [ 1590.945662][T27853] FAULT_INJECTION: forcing a failure. [ 1590.945662][T27853] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.981633][T27853] CPU: 1 UID: 0 PID: 27853 Comm: syz.4.4940 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1590.981682][T27853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.981704][T27853] Call Trace: [ 1590.981715][T27853] [ 1590.981730][T27853] dump_stack_lvl+0x16c/0x1f0 [ 1590.981781][T27853] should_fail_ex+0x512/0x640 [ 1590.981817][T27853] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1590.981876][T27853] should_failslab+0xc2/0x120 [ 1590.981917][T27853] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1590.981967][T27853] ? allocate_file_region_entries+0x15b/0x620 [ 1590.982002][T27853] ? allocate_file_region_entries+0x1a0/0x620 [ 1590.982047][T27853] allocate_file_region_entries+0x1a0/0x620 [ 1590.982094][T27853] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1590.982146][T27853] region_chg+0x85/0x140 [ 1590.982182][T27853] __vma_reservation_common+0x43b/0x740 [ 1590.982224][T27853] ? __pfx___vma_reservation_common+0x10/0x10 [ 1590.982278][T27853] alloc_hugetlb_folio+0x946/0x1560 [ 1590.982334][T27853] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1590.982381][T27853] ? __pfx_down_read+0x10/0x10 [ 1590.982427][T27853] ? __filemap_get_folio+0x32b/0xc30 [ 1590.982480][T27853] hugetlb_fault+0x2005/0x3070 [ 1590.982540][T27853] ? __pfx_hugetlb_fault+0x10/0x10 [ 1590.982611][T27853] ? find_vma+0xbf/0x140 [ 1590.982653][T27853] ? __pfx_find_vma+0x10/0x10 [ 1590.982700][T27853] handle_mm_fault+0xbfa/0xd10 [ 1590.982764][T27853] ? __pkru_allows_pkey+0x51/0xb0 [ 1590.982816][T27853] do_user_addr_fault+0x7a6/0x1370 [ 1590.982872][T27853] ? rcu_is_watching+0x12/0xc0 [ 1590.982916][T27853] exc_page_fault+0x5c/0xb0 [ 1590.982951][T27853] asm_exc_page_fault+0x26/0x30 [ 1590.982985][T27853] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1590.983032][T27853] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1590.983067][T27853] RSP: 0018:ffffc9000b8f7910 EFLAGS: 00050246 [ 1590.983094][T27853] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 1590.983114][T27853] RDX: fffff5200171ef3d RSI: 0000000000000000 RDI: ffffc9000b8f79e0 [ 1590.983135][T27853] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200171ef3c [ 1590.983155][T27853] R10: ffffc9000b8f79e7 R11: 0000000000000001 R12: 0000000000000000 [ 1590.983175][T27853] R13: ffffc9000b8f79e0 R14: 0000000000000000 R15: ffff88802a71c0c0 [ 1590.983219][T27853] _copy_from_user+0x98/0xd0 [ 1590.983261][T27853] sctp_getsockopt_local_addrs+0x11d/0xde0 [ 1590.983324][T27853] ? __lock_acquire+0x622/0x1c90 [ 1590.983372][T27853] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 1590.983428][T27853] ? do_raw_spin_lock+0x12c/0x2b0 [ 1590.983484][T27853] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1590.983557][T27853] ? sctp_getsockopt+0x12a1/0x6b10 [ 1590.983607][T27853] sctp_getsockopt+0x12a1/0x6b10 [ 1590.983658][T27853] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1590.983715][T27853] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1590.983785][T27853] ? __pfx_futex_wake_mark+0x10/0x10 [ 1590.983847][T27853] ? __lock_acquire+0xb8a/0x1c90 [ 1590.983905][T27853] ? __pfx___might_resched+0x10/0x10 [ 1590.983941][T27853] ? __futex_hash.constprop.0+0x1e9/0x440 [ 1590.983997][T27853] ? find_held_lock+0x2b/0x80 [ 1590.984031][T27853] ? __might_fault+0xe3/0x190 [ 1590.984065][T27853] ? __might_fault+0xe3/0x190 [ 1590.984095][T27853] ? __might_fault+0x13b/0x190 [ 1590.984140][T27853] ? sock_common_getsockopt+0x21/0xb0 [ 1590.984187][T27853] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1590.984233][T27853] do_sock_getsockopt+0x34d/0x440 [ 1590.984281][T27853] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1590.984328][T27853] ? __fget_files+0x204/0x3c0 [ 1590.984407][T27853] __sys_getsockopt+0x123/0x1b0 [ 1590.984457][T27853] __x64_sys_getsockopt+0xbd/0x160 [ 1590.984489][T27853] ? do_syscall_64+0x91/0x490 [ 1590.984523][T27853] ? lockdep_hardirqs_on+0x7c/0x110 [ 1590.984557][T27853] do_syscall_64+0xcd/0x490 [ 1590.984596][T27853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.984631][T27853] RIP: 0033:0x7fc2fef8e9a9 [ 1590.984660][T27853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.984694][T27853] RSP: 002b:00007fc2ffe93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1590.984725][T27853] RAX: ffffffffffffffda RBX: 00007fc2ff1b5fa0 RCX: 00007fc2fef8e9a9 [ 1590.984749][T27853] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000006 [ 1590.984779][T27853] RBP: 00007fc2ff010d69 R08: 0000200000000280 R09: 0000000000000000 [ 1590.984801][T27853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.984821][T27853] R13: 0000000000000000 R14: 00007fc2ff1b5fa0 R15: 00007ffd8c072a98 [ 1590.984866][T27853] [ 1591.101631][T27860] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149 [ 1592.737795][ C1] sd 0:0:1:0: [sda] tag#8175 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1592.748570][ C1] sd 0:0:1:0: [sda] tag#8175 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1593.114818][T27899] FAULT_INJECTION: forcing a failure. [ 1593.114818][T27899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.128401][T27899] CPU: 0 UID: 0 PID: 27899 Comm: syz.3.4951 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1593.128446][T27899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1593.128466][T27899] Call Trace: [ 1593.128477][T27899] [ 1593.128489][T27899] dump_stack_lvl+0x16c/0x1f0 [ 1593.128530][T27899] should_fail_ex+0x512/0x640 [ 1593.128571][T27899] _copy_to_user+0x32/0xd0 [ 1593.128622][T27899] simple_read_from_buffer+0xcb/0x170 [ 1593.128683][T27899] proc_fail_nth_read+0x197/0x270 [ 1593.128733][T27899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.128783][T27899] ? rw_verify_area+0xcf/0x680 [ 1593.128830][T27899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.128876][T27899] vfs_read+0x1e4/0xc60 [ 1593.128914][T27899] ? __pfx___mutex_lock+0x10/0x10 [ 1593.128949][T27899] ? __pfx_vfs_read+0x10/0x10 [ 1593.128992][T27899] ? __fget_files+0x20e/0x3c0 [ 1593.129059][T27899] ksys_read+0x12a/0x250 [ 1593.129091][T27899] ? __pfx_ksys_read+0x10/0x10 [ 1593.129136][T27899] do_syscall_64+0xcd/0x490 [ 1593.129176][T27899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.129211][T27899] RIP: 0033:0x7fbf8e98d3bc [ 1593.129238][T27899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1593.129271][T27899] RSP: 002b:00007fbf8f767030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1593.129302][T27899] RAX: ffffffffffffffda RBX: 00007fbf8ebb6160 RCX: 00007fbf8e98d3bc [ 1593.129325][T27899] RDX: 000000000000000f RSI: 00007fbf8f7670a0 RDI: 000000000000000a [ 1593.129346][T27899] RBP: 00007fbf8f767090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.129367][T27899] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 1593.129387][T27899] R13: 0000000000000000 R14: 00007fbf8ebb6160 R15: 00007fffd9f3b818 [ 1593.129432][T27899] [ 1593.317275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.546422][ C1] sd 0:0:1:0: [sda] tag#8176 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1593.557068][ C1] sd 0:0:1:0: [sda] tag#8176 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1594.822048][T27945] netlink: 'syz.2.4961': attribute type 21 has an invalid length. [ 1594.830306][T27945] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1595.978322][T27975] random: crng reseeded on system resumption [ 1597.061066][T27996] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150 [ 1597.290250][T28000] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151 [ 1598.120593][T27987] Process accounting resumed [ 1598.897904][T28029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1599.034201][T28029] Hfi: entered promiscuous mode [ 1599.342195][T28042] vhci_hcd: invalid port number 16 [ 1599.347883][T28042] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1600.602407][T28059] Process accounting resumed [ 1601.346934][T28095] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1605.833482][T28157] zswap: compressor 000 not available [ 1607.955490][T28205] FAULT_INJECTION: forcing a failure. [ 1607.955490][T28205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1607.985463][T28205] CPU: 1 UID: 0 PID: 28205 Comm: syz.3.5022 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1607.985510][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1607.985528][T28205] Call Trace: [ 1607.985539][T28205] [ 1607.985553][T28205] dump_stack_lvl+0x16c/0x1f0 [ 1607.985593][T28205] should_fail_ex+0x512/0x640 [ 1607.985635][T28205] _copy_from_user+0x2e/0xd0 [ 1607.985674][T28205] copy_msghdr_from_user+0x98/0x160 [ 1607.985711][T28205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1607.985754][T28205] ? kfree+0x24f/0x4d0 [ 1607.985800][T28205] ? __pfx__kstrtoull+0x10/0x10 [ 1607.985856][T28205] ___sys_sendmsg+0xfe/0x1d0 [ 1607.985895][T28205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1607.985971][T28205] ? __pfx___might_resched+0x10/0x10 [ 1607.986019][T28205] __sys_sendmmsg+0x200/0x420 [ 1607.986062][T28205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1607.986112][T28205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1607.986167][T28205] ? fput+0x70/0xf0 [ 1607.986207][T28205] ? ksys_write+0x1ac/0x250 [ 1607.986237][T28205] ? __pfx_ksys_write+0x10/0x10 [ 1607.986276][T28205] __x64_sys_sendmmsg+0x9c/0x100 [ 1607.986312][T28205] ? lockdep_hardirqs_on+0x7c/0x110 [ 1607.986356][T28205] do_syscall_64+0xcd/0x490 [ 1607.986395][T28205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.986430][T28205] RIP: 0033:0x7fbf8e98e9a9 [ 1607.986455][T28205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.986488][T28205] RSP: 002b:00007fbf8f767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1607.986520][T28205] RAX: ffffffffffffffda RBX: 00007fbf8ebb6160 RCX: 00007fbf8e98e9a9 [ 1607.986541][T28205] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1607.986559][T28205] RBP: 00007fbf8f767090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.986578][T28205] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 1607.986600][T28205] R13: 0000000000000000 R14: 00007fbf8ebb6160 R15: 00007fffd9f3b818 [ 1607.986642][T28205] [ 1609.991918][T28229] FAULT_INJECTION: forcing a failure. [ 1609.991918][T28229] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.004948][T28229] CPU: 1 UID: 0 PID: 28229 Comm: syz.3.5030 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1610.004993][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1610.005013][T28229] Call Trace: [ 1610.005025][T28229] [ 1610.005039][T28229] dump_stack_lvl+0x16c/0x1f0 [ 1610.005080][T28229] should_fail_ex+0x512/0x640 [ 1610.005113][T28229] ? fs_reclaim_acquire+0xae/0x150 [ 1610.005164][T28229] should_failslab+0xc2/0x120 [ 1610.005205][T28229] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1610.005242][T28229] ? security_inode_alloc+0x3b/0x2b0 [ 1610.005295][T28229] security_inode_alloc+0x3b/0x2b0 [ 1610.005343][T28229] inode_init_always_gfp+0xce4/0x1030 [ 1610.005408][T28229] alloc_inode+0x86/0x240 [ 1610.005462][T28229] sock_alloc+0x40/0x280 [ 1610.005503][T28229] __sock_create+0xc1/0x8d0 [ 1610.005559][T28229] __sys_socket+0x14d/0x260 [ 1610.005605][T28229] ? __pfx___sys_socket+0x10/0x10 [ 1610.005653][T28229] ? xfd_validate_state+0x61/0x180 [ 1610.005699][T28229] ? __pfx_do_writev+0x10/0x10 [ 1610.005758][T28229] __x64_sys_socket+0x72/0xb0 [ 1610.005806][T28229] ? lockdep_hardirqs_on+0x7c/0x110 [ 1610.005839][T28229] do_syscall_64+0xcd/0x490 [ 1610.005970][T28229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.006003][T28229] RIP: 0033:0x7fbf8e98e9a9 [ 1610.006031][T28229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.006063][T28229] RSP: 002b:00007fbf8f7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1610.006094][T28229] RAX: ffffffffffffffda RBX: 00007fbf8ebb5fa0 RCX: 00007fbf8e98e9a9 [ 1610.006116][T28229] RDX: 00000000000000e7 RSI: 0000000000000003 RDI: 000000000000000a [ 1610.006135][T28229] RBP: 00007fbf8ea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1610.006155][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.006174][T28229] R13: 0000000000000000 R14: 00007fbf8ebb5fa0 R15: 00007fffd9f3b818 [ 1610.006217][T28229] [ 1610.006253][T28229] socket: no more sockets [ 1610.097757][T25455] Bluetooth: hci1: unexpected event for opcode 0x0001 [ 1612.427233][T28269] warning: `syz.2.5038' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1613.665838][T28286] FAULT_INJECTION: forcing a failure. [ 1613.665838][T28286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1613.685002][T28286] CPU: 1 UID: 0 PID: 28286 Comm: syz.2.5043 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1613.685047][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1613.685066][T28286] Call Trace: [ 1613.685077][T28286] [ 1613.685091][T28286] dump_stack_lvl+0x16c/0x1f0 [ 1613.685130][T28286] should_fail_ex+0x512/0x640 [ 1613.685169][T28286] should_fail_alloc_page+0xe7/0x130 [ 1613.685212][T28286] prepare_alloc_pages+0x3c2/0x610 [ 1613.685266][T28286] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1613.685304][T28286] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1613.685343][T28286] ? kasan_save_stack+0x42/0x60 [ 1613.685374][T28286] ? kasan_save_stack+0x33/0x60 [ 1613.685405][T28286] ? kasan_save_track+0x14/0x30 [ 1613.685436][T28286] ? __kasan_slab_alloc+0x89/0x90 [ 1613.685468][T28286] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1613.685499][T28286] ? __pmd_alloc+0xbf/0x930 [ 1613.685539][T28286] ? __handle_mm_fault+0xaac/0x5490 [ 1613.685586][T28286] ? handle_mm_fault+0x589/0xd10 [ 1613.685632][T28286] ? do_user_addr_fault+0x7a6/0x1370 [ 1613.685677][T28286] ? exc_page_fault+0x5c/0xb0 [ 1613.685703][T28286] ? asm_exc_page_fault+0x26/0x30 [ 1613.685737][T28286] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1613.685770][T28286] ? ksys_write+0x1f8/0x250 [ 1613.685800][T28286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.685860][T28286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1613.685913][T28286] ? policy_nodemask+0xea/0x4e0 [ 1613.685982][T28286] alloc_pages_mpol+0x1fb/0x550 [ 1613.686022][T28286] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1613.686067][T28286] ? do_raw_spin_lock+0x12c/0x2b0 [ 1613.686120][T28286] ? find_held_lock+0x2b/0x80 [ 1613.686157][T28286] alloc_pages_noprof+0x131/0x390 [ 1613.686354][T28286] pte_alloc_one+0x1c/0x3a0 [ 1613.686404][T28286] __do_fault+0x320/0x490 [ 1613.686441][T28286] ? __pfx_filemap_map_pages+0x10/0x10 [ 1613.686478][T28286] __handle_mm_fault+0x3c2a/0x5490 [ 1613.686541][T28286] ? __pfx___handle_mm_fault+0x10/0x10 [ 1613.686588][T28286] ? __pfx_mt_find+0x10/0x10 [ 1613.686645][T28286] ? find_vma+0xbf/0x140 [ 1613.686679][T28286] ? __pfx_find_vma+0x10/0x10 [ 1613.686719][T28286] handle_mm_fault+0x589/0xd10 [ 1613.686767][T28286] ? __pkru_allows_pkey+0x51/0xb0 [ 1613.686808][T28286] do_user_addr_fault+0x7a6/0x1370 [ 1613.686971][T28286] ? rcu_is_watching+0x12/0xc0 [ 1613.687013][T28286] exc_page_fault+0x5c/0xb0 [ 1613.687043][T28286] asm_exc_page_fault+0x26/0x30 [ 1613.687071][T28286] RIP: 0010:__get_user_1+0x14/0x30 [ 1613.687118][T28286] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca e9 7f 0a 04 00 66 66 2e 0f 1f 84 00 00 00 [ 1613.687148][T28286] RSP: 0018:ffffc90005467cc0 EFLAGS: 00050287 [ 1613.687173][T28286] RAX: 0000000000000000 RBX: ffff88805bd3d000 RCX: ffffc90005467c64 [ 1613.687194][T28286] RDX: 00007ffffffff000 RSI: ffffffff87afab5c RDI: ffffffff8c155e60 [ 1613.687213][T28286] RBP: 0000000000000000 R08: a23edf14cf8df726 R09: 0000000000000000 [ 1613.687233][T28286] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1613.687252][T28286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000081 [ 1613.687284][T28286] ? mousedev_write+0x17c/0x850 [ 1613.687337][T28286] mousedev_write+0x189/0x850 [ 1613.687389][T28286] ? __pfx_mousedev_write+0x10/0x10 [ 1613.687432][T28286] vfs_write+0x29d/0x1150 [ 1613.687473][T28286] ? __pfx_vfs_write+0x10/0x10 [ 1613.687500][T28286] ? find_held_lock+0x2b/0x80 [ 1613.687534][T28286] ? __fget_files+0x204/0x3c0 [ 1613.687589][T28286] ? __fget_files+0x20e/0x3c0 [ 1613.687653][T28286] ksys_write+0x1f8/0x250 [ 1613.687684][T28286] ? __pfx_ksys_write+0x10/0x10 [ 1613.687748][T28286] do_syscall_64+0xcd/0x490 [ 1613.687786][T28286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.687819][T28286] RIP: 0033:0x7f0da258e9a9 [ 1613.687845][T28286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.687904][T28286] RSP: 002b:00007f0da338d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1613.687934][T28286] RAX: ffffffffffffffda RBX: 00007f0da27b6080 RCX: 00007f0da258e9a9 [ 1613.687954][T28286] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1613.687972][T28286] RBP: 00007f0da338d090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.687991][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.688009][T28286] R13: 0000000000000001 R14: 00007f0da27b6080 R15: 00007ffc8391bb78 [ 1613.688050][T28286] [ 1614.157049][T25455] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1614.168901][T25455] Bluetooth: hci1: Injecting HCI hardware error event [ 1614.180417][T25455] Bluetooth: hci1: hardware error 0x00 [ 1615.595500][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1615.650972][T28317] FAULT_INJECTION: forcing a failure. [ 1615.650972][T28317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.671540][T28317] CPU: 1 UID: 0 PID: 28317 Comm: syz.3.5048 Not tainted 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1615.671589][T28317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1615.671611][T28317] Call Trace: [ 1615.671621][T28317] [ 1615.671633][T28317] dump_stack_lvl+0x16c/0x1f0 [ 1615.671671][T28317] should_fail_ex+0x512/0x640 [ 1615.671716][T28317] _copy_to_iter+0x29f/0x16f0 [ 1615.671758][T28317] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1615.671814][T28317] ? __pfx__copy_to_iter+0x10/0x10 [ 1615.671853][T28317] ? __skb_recv_datagram+0x1b2/0x220 [ 1615.671899][T28317] ? __pfx___skb_recv_datagram+0x10/0x10 [ 1615.671959][T28317] simple_copy_to_iter+0x46/0x90 [ 1615.672003][T28317] __skb_datagram_iter+0x129/0x900 [ 1615.672045][T28317] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1615.672090][T28317] ? skb_recv_datagram+0x88/0xc0 [ 1615.672142][T28317] skb_copy_datagram_iter+0x40/0x50 [ 1615.672193][T28317] netlink_recvmsg+0x27e/0xa90 [ 1615.672232][T28317] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1615.672274][T28317] ? __fget_files+0x204/0x3c0 [ 1615.672343][T28317] sock_recvmsg+0x1f6/0x250 [ 1615.672391][T28317] __sys_recvfrom+0x203/0x310 [ 1615.672424][T28317] ? __pfx___sys_recvfrom+0x10/0x10 [ 1615.672470][T28317] ? __pfx_task_mm_cid_work+0x10/0x10 [ 1615.672524][T28317] ? xfd_validate_state+0x61/0x180 [ 1615.672597][T28317] __x64_sys_recvfrom+0xe0/0x1c0 [ 1615.672630][T28317] ? do_syscall_64+0x91/0x490 [ 1615.672664][T28317] ? lockdep_hardirqs_on+0x7c/0x110 [ 1615.672697][T28317] do_syscall_64+0xcd/0x490 [ 1615.672736][T28317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.672770][T28317] RIP: 0033:0x7fbf8e990774 [ 1615.672798][T28317] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1615.672832][T28317] RSP: 002b:00007fbf8f7a7ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1615.672866][T28317] RAX: ffffffffffffffda RBX: 00007fbf8f7a7fc0 RCX: 00007fbf8e990774 [ 1615.672888][T28317] RDX: 0000000000001000 RSI: 00007fbf8f7a8010 RDI: 0000000000000007 [ 1615.672908][T28317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1615.672926][T28317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1615.672955][T28317] R13: 00007fbf8f7a7f68 R14: 00007fbf8f7a8010 R15: 0000000000000000 [ 1615.672998][T28317] [ 1616.260691][T25455] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1616.488048][T28335] netlink: 'syz.2.5052': attribute type 2 has an invalid length. [ 1616.609829][T28339] Setting dangerous option i915.mitigations - tainting kernel [ 1616.754262][T28339] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1616.762876][T28339] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1616.776146][T28339] veth0_to_bridge: entered allmulticast mode [ 1616.788085][T28339] veth0_to_bridge: entered promiscuous mode [ 1616.794288][T28339] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1616.812828][T28339] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1616.820243][T28339] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1617.548375][T28350] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1618.069511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.076443][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1628.724466][ C0] sched: DL replenish lagged too much [ 1635.766792][T28361] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1635.776129][T28361] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1635.784112][T28361] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1635.804596][T28361] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1635.813289][T28361] page dumped because: unmovable page [ 1635.854683][T28361] page_owner info is not present (never set?) [ 1635.998132][T17910] Process accounting paused [ 1639.871599][T23354] Process accounting paused [ 1643.687879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.701410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.715003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.728332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.741623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.755033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.768288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.781610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.795103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1643.808478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.694906][ C0] net_ratelimit: 3896 callbacks suppressed [ 1648.694928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.714080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.727562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.740821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.753998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.767168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.785200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.799329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.813489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1648.826981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.705607][ C0] net_ratelimit: 4106 callbacks suppressed [ 1653.705638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.725505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.739385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.753207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.767094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.780978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.795552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.809865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.823787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1653.837738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.716241][ C0] net_ratelimit: 2908 callbacks suppressed [ 1658.716270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.736225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.750239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.764332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.778274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.792415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.806287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.820232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.834158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1658.848097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.724963][ C0] net_ratelimit: 3429 callbacks suppressed [ 1663.724984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.744303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.757685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.771060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.784942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.798390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.811715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.825032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.838315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1663.851632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1664.822466][T25455] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1664.883220][T15872] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1664.951711][T11001] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1667.458168][T28393] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1667.561400][T28389] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 1667.583153][T28394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1667.702445][T28387] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 1667.744291][T28393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1667.754641][T28391] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 1667.883731][T11001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1668.734521][ C0] net_ratelimit: 5309 callbacks suppressed [ 1668.734547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1668.754543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.767305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.780114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1668.794077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.806906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.819665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1668.833682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.846457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1668.859770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1669.997374][T28385] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 1670.600755][T11001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1673.745038][ C0] net_ratelimit: 5214 callbacks suppressed [ 1673.745068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.763836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.776630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1673.790842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.803730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.816640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1673.830763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.843658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1673.856539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1673.870677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.755469][ C0] net_ratelimit: 5261 callbacks suppressed [ 1678.755498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.774149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.786910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1678.801081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.813876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.826635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1678.840606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.853399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.866156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1678.880135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.353670][T28394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1679.383782][T28394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1679.433659][T28395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1679.510003][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.516479][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.530434][T28419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1679.628384][T28419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1679.658718][T28420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1679.712915][T28419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1679.740320][T15872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1679.942426][T28420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1680.020343][T28420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1680.046924][T28420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1680.113684][T28419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1680.141394][T28394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1680.203784][T28420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1680.233369][T15872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1680.353258][T28419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1680.437858][T28420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1680.602057][T15872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1680.633858][T28420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1682.211831][T25455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1682.573315][T28396] Bluetooth: hci2: command tx timeout [ 1683.765823][ C0] net_ratelimit: 4859 callbacks suppressed [ 1683.765855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.784503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.797197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1683.810959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.823669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.836519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1683.850313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.863046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.875727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1683.889703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.033697][T25455] Bluetooth: hci0: command tx timeout [ 1686.202119][T28394] Bluetooth: hci4: command tx timeout [ 1686.260077][T28394] Bluetooth: hci2: command tx timeout [ 1686.302510][T25455] Bluetooth: hci3: command tx timeout [ 1686.327365][T25455] Bluetooth: hci0: command tx timeout [ 1688.774787][ C0] net_ratelimit: 5248 callbacks suppressed [ 1688.774825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1688.794831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.807542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.820362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1688.834138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.846842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.859522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1688.873607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.886317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.899058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1689.290816][T28394] Bluetooth: hci4: command tx timeout [ 1689.314804][T28394] Bluetooth: hci2: command tx timeout [ 1689.320317][T28394] Bluetooth: hci0: command tx timeout [ 1689.345203][T25455] Bluetooth: hci3: command tx timeout [ 1691.682389][T28394] Bluetooth: hci3: command tx timeout [ 1691.707398][T28394] Bluetooth: hci2: command tx timeout [ 1691.712910][T28394] Bluetooth: hci4: command tx timeout [ 1691.738266][T28396] Bluetooth: hci0: command tx timeout [ 1693.784817][ C0] net_ratelimit: 5192 callbacks suppressed [ 1693.784848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1693.804601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.817548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.830282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1693.844124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.856918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.869615][T28394] Bluetooth: hci4: command tx timeout [ 1693.875391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1693.877191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.877837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.878392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1694.018609][T25455] Bluetooth: hci3: command tx timeout [ 1698.794677][ C0] net_ratelimit: 5674 callbacks suppressed [ 1698.794706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1698.814464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1698.827080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.839797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.852860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1698.866751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1698.879402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.892763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.905556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1698.919368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1703.804942][ C0] net_ratelimit: 5633 callbacks suppressed [ 1703.804972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.823684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1703.837572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1703.850277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.863562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.876295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1703.890247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1703.902935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.915698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.928454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1708.814776][ C0] net_ratelimit: 5797 callbacks suppressed [ 1708.814805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.833642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.846414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1708.860425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1708.873078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.885904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.898644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1708.912699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1708.925384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.938154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.824956][ C0] net_ratelimit: 5889 callbacks suppressed [ 1713.824986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1713.843517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.856235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.869346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1713.883204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1713.895837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.908553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.921281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1713.935148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1713.947785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.834833][ C0] net_ratelimit: 5956 callbacks suppressed [ 1718.834865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.853475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1718.867293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1718.879941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.892667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.905419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1718.919257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1718.931936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.944691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.957581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1723.846054][ C0] net_ratelimit: 5836 callbacks suppressed [ 1723.846083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1723.864718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.877449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.890318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1723.904367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1723.917114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.929938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.942735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1723.956702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1723.969389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.855037][ C0] net_ratelimit: 5946 callbacks suppressed [ 1728.855065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1728.873801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.886510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.899268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1728.913317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1728.925958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.940081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.952873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1728.966789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1728.979436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.865493][ C0] net_ratelimit: 5731 callbacks suppressed [ 1733.865523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.884309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.897060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1733.911035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1733.923729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.936490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.949319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1733.963300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1733.975964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.988704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.875246][ C0] net_ratelimit: 5753 callbacks suppressed [ 1738.875274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1738.894064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.906838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.919567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1738.933399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1738.946057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.958770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.971524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1738.985448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1738.998074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.963443][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.969915][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.884720][ C0] net_ratelimit: 5942 callbacks suppressed [ 1743.884750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1743.903298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.916156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.929018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1743.943008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1743.955769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.968528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.981291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1743.995307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1744.008127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.462486][T28396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1748.489963][T28420] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1748.545617][T28419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1748.643152][T28420] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1748.674282][T11001] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1748.702993][T28396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1748.732820][T11001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1748.760185][T28419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1748.787383][T28396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1748.840255][T28396] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1748.865798][T28419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1748.896874][ C0] net_ratelimit: 5678 callbacks suppressed [ 1748.896903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1748.915473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.928313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.941100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1748.955159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1748.967853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.980746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.993528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1749.007592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1749.020233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.083294][T28419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1749.109522][T11001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1749.139540][T28396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1749.168926][T28419] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1749.196307][T11001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1749.242885][T28420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1749.342491][T28420] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1749.482034][T28420] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1749.554105][T28420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1751.762099][T15872] Bluetooth: hci5: command tx timeout [ 1751.787942][T15872] Bluetooth: hci6: command tx timeout [ 1752.388401][T11001] Bluetooth: hci7: command tx timeout [ 1752.412910][T11001] Bluetooth: hci8: command tx timeout [ 1753.904884][ C0] net_ratelimit: 5540 callbacks suppressed [ 1753.904914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.923644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1753.937581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1753.950299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.963232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.975994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1753.989988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1754.002678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.015409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.028153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1754.897521][T15872] Bluetooth: hci5: command tx timeout [ 1754.903067][T15872] Bluetooth: hci6: command tx timeout [ 1754.948116][T11001] Bluetooth: hci8: command tx timeout [ 1754.953654][T11001] Bluetooth: hci7: command tx timeout [ 1757.154022][T11001] Bluetooth: hci7: command tx timeout [ 1757.177195][T11001] Bluetooth: hci6: command tx timeout [ 1757.182702][T11001] Bluetooth: hci8: command tx timeout [ 1757.206324][T15872] Bluetooth: hci5: command tx timeout [ 1758.915259][ C0] net_ratelimit: 5704 callbacks suppressed [ 1758.915287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1758.933871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.946655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.959532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1758.973631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1758.986298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.999035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.011828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1759.025799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1759.038461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.928610][T11001] Bluetooth: hci8: command tx timeout [ 1759.952421][T11001] Bluetooth: hci5: command tx timeout [ 1759.979121][T28420] Bluetooth: hci6: command tx timeout [ 1760.003718][T15872] Bluetooth: hci7: command tx timeout [ 1763.924784][ C0] net_ratelimit: 5704 callbacks suppressed [ 1763.924812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.943422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1763.957256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1763.970048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.982785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.995498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1764.009413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1764.022086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.034999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.047740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1768.934595][ C0] net_ratelimit: 5771 callbacks suppressed [ 1768.934624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1768.954437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1768.967073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1768.979845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1768.992535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1769.006371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1769.018978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.031668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.044739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1769.058555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1773.944710][ C0] net_ratelimit: 5821 callbacks suppressed [ 1773.944752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1773.963436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1773.977382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1773.990103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.002884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.015675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1774.029608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1774.042358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.055114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.068022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1778.955078][ C0] net_ratelimit: 5764 callbacks suppressed [ 1778.955113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1778.973668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.986531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1778.999287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1779.013133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.025770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.038499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.051324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:03:7c:6d:ae:3a, vlan:0) [ 1779.065185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.077869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.344514][ T32] INFO: task kworker/1:2:55 blocked for more than 143 seconds. [ 1779.352176][ T32] Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 [ 1779.374845][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1779.383611][ T32] task:kworker/1:2 state:D stack:26616 pid:55 tgid:55 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1779.434488][ T32] Workqueue: events reg_todo [ 1779.439260][ T32] Call Trace: [ 1779.442591][ T32] [ 1779.464498][ T32] __schedule+0x116a/0x5dd0 [ 1779.469137][ T32] ? __lock_acquire+0x622/0x1c90 [ 1779.474173][ T32] ? __lock_acquire+0xb8a/0x1c90 [ 1779.504635][ T32] ? __pfx___schedule+0x10/0x10 [ 1779.509647][ T32] ? find_held_lock+0x2b/0x80 [ 1779.524566][ T32] ? schedule+0x2d7/0x3a0 [ 1779.529048][ T32] schedule+0xe7/0x3a0 [ 1779.533216][ T32] schedule_preempt_disabled+0x13/0x30 [ 1779.544984][ T32] __mutex_lock+0x6c7/0xb90 [ 1779.549632][ T32] ? reg_process_self_managed_hints+0x95/0x1f0 [ 1779.574491][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1779.579643][ T32] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1779.594486][ T32] ? do_raw_spin_lock+0x12c/0x2b0 [ 1779.599664][ T32] ? reg_process_self_managed_hints+0x95/0x1f0 [ 1779.614847][ T32] reg_process_self_managed_hints+0x95/0x1f0 [ 1779.620994][ T32] reg_todo+0x66f/0x900 [ 1779.644553][ T32] ? rcu_is_watching+0x12/0xc0 [ 1779.649453][ T32] process_one_work+0x9cf/0x1b70 [ 1779.664535][ T32] ? __pfx_gc_worker+0x10/0x10 [ 1779.669441][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1779.684913][ T32] ? assign_work+0x1a0/0x250 [ 1779.689656][ T32] worker_thread+0x6c8/0xf10 [ 1779.704917][ T32] ? __kthread_parkme+0x19e/0x250 [ 1779.710084][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1779.724579][ T32] kthread+0x3c2/0x780 [ 1779.728792][ T32] ? __pfx_kthread+0x10/0x10 [ 1779.733493][ T32] ? rcu_is_watching+0x12/0xc0 [ 1779.754460][ T32] ? __pfx_kthread+0x10/0x10 [ 1779.759203][ T32] ret_from_fork+0x5d4/0x6f0 [ 1779.763875][ T32] ? __pfx_kthread+0x10/0x10 [ 1779.784552][ T32] ret_from_fork_asm+0x1a/0x30 [ 1779.789463][ T32] [ 1779.792623][ T32] INFO: task kworker/1:3:5833 blocked for more than 143 seconds. [ 1779.814491][ T32] Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 [ 1779.823791][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1779.854446][ T32] task:kworker/1:3 state:D stack:26280 pid:5833 tgid:5833 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1779.874446][ T32] Workqueue: events reg_regdb_apply [ 1779.879804][ T32] Call Trace: [ 1779.883147][ T32] [ 1779.894953][ T32] __schedule+0x116a/0x5dd0 [ 1779.899670][ T32] ? find_held_lock+0x2b/0x80 [ 1779.914841][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1779.920791][ T32] ? __pfx___schedule+0x10/0x10 [ 1779.944548][ T32] ? find_held_lock+0x2b/0x80 [ 1779.949346][ T32] ? schedule+0x2d7/0x3a0 [ 1779.953787][ T32] schedule+0xe7/0x3a0 [ 1779.965007][ T32] schedule_preempt_disabled+0x13/0x30 [ 1779.970604][ T32] __mutex_lock+0x6c7/0xb90 [ 1779.994472][ T32] ? reg_regdb_apply+0x1c/0x1d0 [ 1779.999458][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1780.014872][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1780.020852][ T32] ? reg_regdb_apply+0x1c/0x1d0 [ 1780.034938][ T32] ? rtnl_lock+0x9/0x20 [ 1780.039211][ T32] reg_regdb_apply+0x1c/0x1d0 [ 1780.043976][ T32] process_one_work+0x9cf/0x1b70 [ 1780.064556][ T32] ? __pfx_gc_worker+0x10/0x10 [ 1780.069450][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1780.084543][ T32] ? assign_work+0x1a0/0x250 [ 1780.089280][ T32] worker_thread+0x6c8/0xf10 [ 1780.093976][ T32] ? __kthread_parkme+0x19e/0x250 [ 1780.114450][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1780.120054][ T32] kthread+0x3c2/0x780 [ 1780.124214][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.144553][ T32] ? rcu_is_watching+0x12/0xc0 [ 1780.149516][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.154188][ T32] ret_from_fork+0x5d4/0x6f0 [ 1780.174485][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.179323][ T32] ret_from_fork_asm+0x1a/0x30 [ 1780.184203][ T32] [ 1780.204529][ T32] INFO: task kworker/u10:4:8869 blocked for more than 144 seconds. [ 1780.212532][ T32] Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 [ 1780.234819][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1780.243588][ T32] task:kworker/u10:4 state:D stack:23512 pid:8869 tgid:8869 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1780.274465][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 1780.280840][ T32] Call Trace: [ 1780.284180][ T32] [ 1780.305020][ T32] __schedule+0x116a/0x5dd0 [ 1780.309696][ T32] ? __pfx___schedule+0x10/0x10 [ 1780.324562][ T32] ? find_held_lock+0x2b/0x80 [ 1780.329365][ T32] ? schedule+0x2d7/0x3a0 [ 1780.333786][ T32] schedule+0xe7/0x3a0 [ 1780.354468][ T32] schedule_preempt_disabled+0x13/0x30 [ 1780.360055][ T32] __mutex_lock+0x6c7/0xb90 [ 1780.374505][ T32] ? __lock_acquire+0xb8a/0x1c90 [ 1780.379577][ T32] ? addrconf_verify_work+0x12/0x30 [ 1780.394838][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1780.399976][ T32] ? try_to_wake_up+0x157/0x1680 [ 1780.414855][ T32] ? addrconf_verify_work+0x12/0x30 [ 1780.420167][ T32] ? rtnl_lock+0x9/0x20 [ 1780.434842][ T32] addrconf_verify_work+0x12/0x30 [ 1780.439987][ T32] process_one_work+0x9cf/0x1b70 [ 1780.454852][ T32] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1780.460857][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1780.484577][ T32] ? assign_work+0x1a0/0x250 [ 1780.489297][ T32] worker_thread+0x6c8/0xf10 [ 1780.493983][ T32] ? __kthread_parkme+0x19e/0x250 [ 1780.514476][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1780.519722][ T32] kthread+0x3c2/0x780 [ 1780.523898][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.544568][ T32] ? rcu_is_watching+0x12/0xc0 [ 1780.549466][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.554223][ T32] ret_from_fork+0x5d4/0x6f0 [ 1780.574471][ T32] ? __pfx_kthread+0x10/0x10 [ 1780.579199][ T32] ret_from_fork_asm+0x1a/0x30 [ 1780.584052][ T32] [ 1780.594516][ T32] INFO: task syz.3.5061:28366 blocked for more than 144 seconds. [ 1780.602376][ T32] Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 [ 1780.634479][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1780.643247][ T32] task:syz.3.5061 state:D stack:27576 pid:28366 tgid:28365 ppid:23354 task_flags:0x400140 flags:0x00004006 [ 1780.674516][ T32] Call Trace: [ 1780.677900][ T32] [ 1780.680899][ T32] __schedule+0x116a/0x5dd0 [ 1780.694993][ T32] ? unwind_get_return_address+0x59/0xa0 [ 1780.700767][ T32] ? __lock_acquire+0x622/0x1c90 [ 1780.724496][ T32] ? __pfx___schedule+0x10/0x10 [ 1780.729503][ T32] ? find_held_lock+0x2b/0x80 [ 1780.734248][ T32] ? schedule+0x2d7/0x3a0 [ 1780.745058][ T32] schedule+0xe7/0x3a0 [ 1780.749295][ T32] schedule_preempt_disabled+0x13/0x30 [ 1780.774515][ T32] __mutex_lock+0x6c7/0xb90 [ 1780.779150][ T32] ? wg_netns_pre_exit+0x1b/0x230 [ 1780.784252][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1780.804470][ T32] ? find_held_lock+0x2b/0x80 [ 1780.809361][ T32] ? net_generic+0xea/0x2a0 [ 1780.813938][ T32] ? __pfx_wg_netns_pre_exit+0x10/0x10 [ 1780.834545][ T32] ? wg_netns_pre_exit+0x1b/0x230 [ 1780.839688][ T32] ? rtnl_lock+0x9/0x20 [ 1780.843919][ T32] wg_netns_pre_exit+0x1b/0x230 [ 1780.864437][ T32] ? __pfx_wg_netns_pre_exit+0x10/0x10 [ 1780.870118][ T32] ops_undo_list+0x184/0xab0 [ 1780.884468][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 1780.889705][ T32] ? ops_init+0x2fa/0x5f0 [ 1780.894107][ T32] setup_net+0x2e1/0x510 [ 1780.914544][ T32] ? __pfx_setup_net+0x10/0x10 [ 1780.919530][ T32] ? debug_mutex_init+0x37/0x70 [ 1780.934929][ T32] copy_net_ns+0x2a6/0x5f0 [ 1780.939477][ T32] create_new_namespaces+0x3ea/0xa90 [ 1780.954922][ T32] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1780.960678][ T32] ksys_unshare+0x45b/0xa40 [ 1780.974913][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1780.980071][ T32] ? xfd_validate_state+0x61/0x180 [ 1780.994977][ T32] __x64_sys_unshare+0x31/0x40 [ 1780.999958][ T32] do_syscall_64+0xcd/0x490 [ 1781.014544][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.020554][ T32] RIP: 0033:0x7fbf8e98e9a9 [ 1781.034529][ T32] RSP: 002b:00007fbf8f7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1781.043063][ T32] RAX: ffffffffffffffda RBX: 00007fbf8ebb5fa0 RCX: 00007fbf8e98e9a9 [ 1781.074524][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1781.082605][ T32] RBP: 00007fbf8ea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1781.104437][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1781.112515][ T32] R13: 0000000000000000 R14: 00007fbf8ebb5fa0 R15: 00007fffd9f3b818 [ 1781.134918][ T32] [ 1781.138055][ T32] [ 1781.138055][ T32] Showing all locks held in the system: [ 1781.164460][ T32] 1 lock held by khungtaskd/32: [ 1781.169406][ T32] #0: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1781.194542][ T32] 4 locks held by kworker/1:2/55: [ 1781.199665][ T32] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1781.224475][ T32] #1: ffffc9000130fd10 (reg_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1781.233881][ T32] #2: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x900 [ 1781.265101][ T32] #3: ffff888082c28768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x95/0x1f0 [ 1781.284848][ T32] 2 locks held by udevd/5216: [ 1781.289625][ T32] 4 locks held by syz-executor/5832: [ 1781.304511][ T32] #0: ffff888025392808 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 1781.314006][ T32] #1: ffff88814dd2a520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 1781.344454][ T32] #2: ffff888078d28580 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x374/0x1760 [ 1781.364454][ T32] #3: ffff888078d28270 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x69e/0x11e0 [ 1781.384735][ T32] 3 locks held by kworker/1:3/5833: [ 1781.390116][ T32] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1781.424472][ T32] #1: ffffc90003ebfd10 (reg_regdb_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1781.444440][ T32] #2: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: reg_regdb_apply+0x1c/0x1d0 [ 1781.453853][ T32] 3 locks held by kworker/1:5/5914: [ 1781.474542][ T32] #0: ffff88801b881d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1781.494516][ T32] #1: ffffc900043efd10 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1781.514876][ T32] #2: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 1781.534803][ T32] 3 locks held by kworker/0:5/5932: [ 1781.540090][ T32] 3 locks held by kworker/u10:2/8789: [ 1781.564457][ T32] 2 locks held by kworker/u10:3/8799: [ 1781.569978][ T32] 3 locks held by kworker/u10:4/8869: [ 1781.584515][ T32] #0: ffff88814cba8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1781.604803][ T32] #1: ffffc90003eafd10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1781.634527][ T32] #2: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1781.644191][ T32] 3 locks held by kworker/u10:5/9003: [ 1781.664442][ T32] 2 locks held by kworker/u10:6/9004: [ 1781.669910][ T32] 3 locks held by kworker/u10:8/17502: [ 1781.684848][ T32] 3 locks held by kworker/u10:9/18132: [ 1781.690485][ T32] 3 locks held by kworker/u10:10/18133: [ 1781.714516][ T32] 2 locks held by kworker/0:6/18155: [ 1781.719904][ T32] 6 locks held by kworker/u10:0/23147: [ 1781.734578][ T32] 1 lock held by syz.4.3788/23172: [ 1781.739818][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1781.764446][ T32] 4 locks held by kworker/0:1/23628: [ 1781.769833][ T32] #0: ffff8880449b1548 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1781.794929][ T32] #1: ffffc9000412fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1781.874520][ T32] #2: ffff8880360b5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1781.905173][ T32] #3: ffff88802a0ba0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1781.924744][ T32] 2 locks held by getty/24016: [ 1781.929599][ T32] #0: ffff888035e3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1781.954527][ T32] #1: ffffc900034212f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1781.984437][ T32] 1 lock held by syz.2.4655/26758: [ 1781.989736][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1782.014545][ T32] 1 lock held by syz.0.5059/28359: [ 1782.019844][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1782.044458][ T32] 2 locks held by syz.3.5061/28366: [ 1782.049753][ T32] #0: ffffffff90349e50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1782.074506][ T32] #1: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 1782.084003][ T32] 4 locks held by kworker/u10:7/28369: [ 1782.104458][ T32] 6 locks held by kworker/u10:11/28372: [ 1782.110190][ T32] 3 locks held by kworker/u10:13/28374: [ 1782.124895][ T32] 4 locks held by kworker/u10:14/28375: [ 1782.130536][ T32] 3 locks held by kworker/u10:15/28376: [ 1782.144455][ T32] 4 locks held by kworker/1:4/28379: [ 1782.149924][ T32] #0: ffff8880449b1548 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1782.184460][ T32] #1: ffffc90000127d10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1782.264470][ T32] #2: ffff8880360b5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1782.294513][ T32] #3: ffff88802a0ba0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1782.314499][ T32] 4 locks held by kworker/u10:16/28381: [ 1782.320249][ T32] 3 locks held by kworker/0:2/28384: [ 1782.334557][ T32] 4 locks held by kworker/u10:18/28399: [ 1782.340215][ T32] 1 lock held by syz-executor/28409: [ 1782.364460][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.374127][ T32] 1 lock held by syz-executor/28410: [ 1782.394505][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.404089][ T32] 1 lock held by syz-executor/28413: [ 1782.424459][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.434056][ T32] 1 lock held by syz-executor/28414: [ 1782.454531][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.464208][ T32] 4 locks held by kworker/u10:21/28418: [ 1782.484491][ T32] 3 locks held by kworker/0:7/28421: [ 1782.489879][ T32] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1782.514869][ T32] #1: ffffc90003417d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1782.534877][ T32] #2: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1782.564469][ T32] 6 locks held by kworker/u10:22/28423: [ 1782.570120][ T32] 5 locks held by kworker/u10:23/28425: [ 1782.584487][ T32] 1 lock held by syz-executor/28436: [ 1782.589868][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.614510][ T32] 1 lock held by syz-executor/28438: [ 1782.619900][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.644481][ T32] 1 lock held by syz-executor/28440: [ 1782.650055][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.674915][ T32] 1 lock held by syz-executor/28442: [ 1782.680388][ T32] #0: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1782.704475][ T32] [ 1782.706891][ T32] ============================================= [ 1782.706891][ T32] [ 1782.734585][ T32] NMI backtrace for cpu 1 [ 1782.734619][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1782.734667][ T32] Tainted: [U]=USER [ 1782.734678][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1782.734696][ T32] Call Trace: [ 1782.734707][ T32] [ 1782.734720][ T32] dump_stack_lvl+0x116/0x1f0 [ 1782.734771][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1782.734820][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1782.734866][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1782.734917][ T32] watchdog+0xf70/0x12c0 [ 1782.734973][ T32] ? __pfx_watchdog+0x10/0x10 [ 1782.735018][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1782.735053][ T32] ? __kthread_parkme+0x19e/0x250 [ 1782.735098][ T32] ? __pfx_watchdog+0x10/0x10 [ 1782.735146][ T32] kthread+0x3c2/0x780 [ 1782.735196][ T32] ? __pfx_kthread+0x10/0x10 [ 1782.735246][ T32] ? rcu_is_watching+0x12/0xc0 [ 1782.735282][ T32] ? __pfx_kthread+0x10/0x10 [ 1782.735332][ T32] ret_from_fork+0x5d4/0x6f0 [ 1782.735378][ T32] ? __pfx_kthread+0x10/0x10 [ 1782.735427][ T32] ret_from_fork_asm+0x1a/0x30 [ 1782.735483][ T32] [ 1782.735495][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1782.860553][ C0] NMI backtrace for cpu 0 [ 1782.860578][ C0] CPU: 0 UID: 0 PID: 28425 Comm: kworker/u10:23 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1782.860620][ C0] Tainted: [U]=USER [ 1782.860630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1782.860649][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1782.860696][ C0] RIP: 0010:match_held_lock+0x76/0xc0 [ 1782.860724][ C0] Code: e2 ff 1f 00 00 48 39 d0 0f 94 c0 0f b6 c0 e9 91 f3 02 00 b8 01 00 00 00 5b e9 86 f3 02 00 31 f6 e8 2f fe ff ff 48 85 c0 75 a7 <31> c0 5b c3 cc cc cc cc 90 e8 3c 9e 51 f9 85 c0 74 0a 8b 05 22 ed [ 1782.860751][ C0] RSP: 0018:ffffc90000007368 EFLAGS: 00000093 [ 1782.860770][ C0] RAX: 0000000000000005 RBX: ffff88802bd12918 RCX: 0000000000000001 [ 1782.860788][ C0] RDX: 0000000000000000 RSI: ffffffff8e5c4c80 RDI: ffff88802bd12918 [ 1782.860805][ C0] RBP: ffffffff8e5c4c80 R08: 0000000000000001 R09: 0000000000000000 [ 1782.860822][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802bd11e00 [ 1782.860839][ C0] R13: ffff88802bd128f0 R14: 00000000ffffffff R15: 0000000000000001 [ 1782.860857][ C0] FS: 0000000000000000(0000) GS:ffff88812472d000(0000) knlGS:0000000000000000 [ 1782.860883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1782.860900][ C0] CR2: 00007f7c858a06c8 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1782.860917][ C0] Call Trace: [ 1782.860933][ C0] [ 1782.860943][ C0] lock_is_held_type+0xb0/0x150 [ 1782.860972][ C0] find_match+0x373/0x15d0 [ 1782.861004][ C0] ? br_pass_frame_up+0x31f/0x490 [ 1782.861037][ C0] ? __pfx_find_match+0x10/0x10 [ 1782.861068][ C0] ? __lock_acquire+0x622/0x1c90 [ 1782.861108][ C0] __find_rr_leaf+0x140/0xe00 [ 1782.861145][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1782.861180][ C0] ? fib6_node_lookup+0x12d/0x190 [ 1782.861210][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1782.861241][ C0] ? find_held_lock+0x2b/0x80 [ 1782.861273][ C0] fib6_table_lookup+0x57c/0xa30 [ 1782.861317][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1782.861360][ C0] ip6_pol_route+0x1cc/0x1230 [ 1782.861398][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1782.861435][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 1782.861479][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1782.861516][ C0] fib6_rule_lookup+0x536/0x720 [ 1782.861550][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1782.861584][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 1782.861623][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1782.861664][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1782.861708][ C0] ip6_route_input+0x662/0xc00 [ 1782.861747][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1782.861784][ C0] ? lock_acquire+0x179/0x350 [ 1782.861831][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1782.861873][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1782.861914][ C0] ipv6_rcv+0x1e8/0x680 [ 1782.861957][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1782.861993][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1782.862037][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1782.862082][ C0] ? lock_acquire+0x179/0x350 [ 1782.862120][ C0] ? process_backlog+0x3f0/0x15e0 [ 1782.862161][ C0] __netif_receive_skb+0x1d/0x160 [ 1782.862202][ C0] process_backlog+0x442/0x15e0 [ 1782.862247][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1782.862274][ C0] net_rx_action+0xa9f/0xfe0 [ 1782.862305][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1782.862329][ C0] ? mark_held_locks+0x49/0x80 [ 1782.862364][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1782.862389][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1782.862420][ C0] ? run_timer_base+0x121/0x190 [ 1782.862454][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1782.862490][ C0] handle_softirqs+0x219/0x8e0 [ 1782.862523][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1782.862554][ C0] ? kernel_fpu_end+0x59/0x70 [ 1782.862578][ C0] do_softirq+0xb2/0xf0 [ 1782.862605][ C0] [ 1782.862614][ C0] [ 1782.862623][ C0] __local_bh_enable_ip+0x100/0x120 [ 1782.862654][ C0] kernel_fpu_end+0x5e/0x70 [ 1782.862677][ C0] blake2s_compress+0x7f/0xe0 [ 1782.862715][ C0] blake2s_final+0xc9/0x150 [ 1782.862742][ C0] hmac.constprop.0+0x335/0x420 [ 1782.862772][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 1782.862814][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1782.862839][ C0] ? kernel_fpu_end+0x59/0x70 [ 1782.862860][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1782.862893][ C0] kdf.constprop.0+0x1a1/0x280 [ 1782.862922][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 1782.862955][ C0] ? __pfx_mix_hash+0x10/0x10 [ 1782.862989][ C0] ? __crypto_memneq+0x203/0x430 [ 1782.863033][ C0] wg_noise_handshake_create_initiation+0x3b0/0x650 [ 1782.863070][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1782.863105][ C0] ? find_held_lock+0x2b/0x80 [ 1782.863133][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 1782.863168][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1782.863192][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 1782.863226][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 1782.863262][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 1782.863304][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 1782.863359][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 1782.863398][ C0] process_one_work+0x9cf/0x1b70 [ 1782.863444][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1782.863487][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1782.863532][ C0] ? assign_work+0x1a0/0x250 [ 1782.863571][ C0] worker_thread+0x6c8/0xf10 [ 1782.863616][ C0] ? __kthread_parkme+0x19e/0x250 [ 1782.863649][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1782.863691][ C0] kthread+0x3c2/0x780 [ 1782.863727][ C0] ? __pfx_kthread+0x10/0x10 [ 1782.863766][ C0] ? rcu_is_watching+0x12/0xc0 [ 1782.863793][ C0] ? __pfx_kthread+0x10/0x10 [ 1782.863831][ C0] ret_from_fork+0x5d4/0x6f0 [ 1782.863866][ C0] ? __pfx_kthread+0x10/0x10 [ 1782.863903][ C0] ret_from_fork_asm+0x1a/0x30 [ 1782.863946][ C0] [ 1783.004457][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1783.004494][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1783.004551][ T32] Tainted: [U]=USER [ 1783.004565][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1783.004590][ T32] Call Trace: [ 1783.004603][ T32] [ 1783.004618][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1783.004663][ T32] panic+0x71c/0x800 [ 1783.004715][ T32] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1783.004776][ T32] ? __pfx_panic+0x10/0x10 [ 1783.004829][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1783.004883][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1783.004943][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1783.004993][ T32] ? watchdog+0xdda/0x12c0 [ 1783.005048][ T32] ? watchdog+0xdcd/0x12c0 [ 1783.528132][ T32] watchdog+0xdeb/0x12c0 [ 1783.532463][ T32] ? __pfx_watchdog+0x10/0x10 [ 1783.537215][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1783.542480][ T32] ? __kthread_parkme+0x19e/0x250 [ 1783.547577][ T32] ? __pfx_watchdog+0x10/0x10 [ 1783.552338][ T32] kthread+0x3c2/0x780 [ 1783.556489][ T32] ? __pfx_kthread+0x10/0x10 [ 1783.561260][ T32] ? rcu_is_watching+0x12/0xc0 [ 1783.566090][ T32] ? __pfx_kthread+0x10/0x10 [ 1783.570780][ T32] ret_from_fork+0x5d4/0x6f0 [ 1783.575445][ T32] ? __pfx_kthread+0x10/0x10 [ 1783.580634][ T32] ret_from_fork_asm+0x1a/0x30 [ 1783.585626][ T32] [ 1783.589001][ T32] Kernel Offset: disabled [ 1783.593352][ T32] Rebooting in 86400 seconds..