last executing test programs: 7m54.836466557s ago: executing program 3 (id=745): mmap$auto(0xa544, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r1 = socket(0x10, 0x2, 0x4) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0xa, 0x0, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x4, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x9, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x800000100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000009d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200000000, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x800000000000003, 0x7e30e0bc]}, 0x1fe, 0xf) r2 = setfsgid$auto(0xee01) fsconfig$auto(0xffffffffffffffff, 0x175, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', &(0x7f0000000380)="4e39b1701e5f7726e019f92128b1a691fb56d0c3122c633e17643ca2d2bfac4d58baf3545b3b02c7f4a5fa7bf81d072424dffd419253c22b7a7ebf79c1c2c4b128c0ca1a726afcb9f9914b4ccc4f398a7df40f5ab9226a84aa2704711309254cec3aa402e4bc67487e24ea89f109c3072c7a536a2454d1ee2418e654f93e21bfaca3ac155603a4a6721734650c43d223ecc7383884a88c50232f40830ed628d8df76aad2a60c55e1f71668f048b2139430728cb4541f5b9098a0a34df6964292e44b7b36289835baf5a4", r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x2b7cb0f0) (async) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x3aad6dc7}, 0x7, 0x4008) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000080)=0x207f) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000300)=0x7ff) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/arch_status\x00', 0x240, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c801) (async) write$auto(r1, 0x0, 0x2fb) (async) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 7m53.625314253s ago: executing program 3 (id=752): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) acct$auto(&(0x7f00000000c0)='/dev/vcs\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f00000000c0)='0\n\xf48\x97\xff*\x8a\xeb+l\\\x9e@\\}\x04|\x03\xcb\x12\xfa\b\x1c\vr\xc0\\\x17\xcb\xb4Q\xe1)@J}\x7fw\xc7\xe58,.\xf6p\x8d\xa0\x1f\xe3\xc5\xff\r\xde\xaf\x84\xd6P\b\xdf\xfe\x1f\xa1\xb4\x89\xa0\xac\x9a\xb8\x88\xca\x00\x15\x9d`>\xcd\xcb\xbe#k\xaf\xe9\x9a0\xb6\xe2#\xc1u\xfa\xe1\x19\x92qH\x80\xb9\xa4a\xba%\xc7\xc5\xb8\v\x00\xa5\xdd\xa2\x8c\xacBY\x9b\"\x14*\xfd\x87\x84~\x94\xb5\xfd/\xe2\xadz9\xbe!7\xf9\x88F\xe9@L\x1cD\xc2ia*\x81\x10L\x8d\xde\xdf\xc5)$\x03,\xb5\x88\a\xfe\x8c\xea\x16|\x11x\xdaE\x1c\xce\xe1\xdb\xc1\x86\xd9!.\xfb\xb7\xd4%\\\x1eJ\x175\x9c\xc0\x83\x89k+\x1bKk\xc4\x8f\xb01\x9a\x94_r\xa5W\xe0\x16A', 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x141f02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x5) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x800100, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 7m52.009536277s ago: executing program 3 (id=759): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0xffffffffffffffff, 0x8000) bind$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x6a) (async) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x9, 0x45, 0x4) (async, rerun: 32) r1 = getpid() (rerun: 32) ioctl$auto_SNDCTL_DSP_NONBLOCK(r0, 0x500e, &(0x7f00000000c0)="5746ac803baa9066cf2569d2fc0a38685fddbcf395506a7133d93cfa7effb5ac5e5e6b2c57ed0ae23438c16092da0a31caa312134698fc4d8f053e886e0cdbf8c0add064371302aeda61acc253568d1dbf38d8e03584eba5a7a042b29c92de6b018e528a3637e9877be90b3a") (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x181002, 0x0) (async, rerun: 64) setsockopt$auto_SO_SNDBUFFORCE(0xffffffffffffffff, 0x3ac, 0x20, &(0x7f0000000080)='[U){\\\x10*(@j]#+\x04+/\\\\/)^\\]%!\\/\x00', 0x5909) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x100000001, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x8, 0x1}) (async) r3 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x82000, 0x0, 0x1}, 0x18) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 64) memfd_create$auto(0x0, 0x9) (async) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async, rerun: 32) getpeername$auto(0x3, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r4 = socket(0x2, 0x2, 0x1) (rerun: 64) io_uring_setup$auto(0x6, 0x0) sendto$auto(r4, 0x0, 0xb, 0x2, &(0x7f0000000000), 0x7) (async) openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x400, 0x0) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) 7m50.184594879s ago: executing program 3 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, 0x0, 0xa041) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, 0x0, 0x20000800) poll$auto(0x0, 0x8, 0x1) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000000)=@query={@target_ifindex=0x0, 0x1, 0x6163, 0x80000001, 0x80, @prog_cnt=0xfffffffa, 0x0, 0x7f, 0x7, 0x0, 0x5}, 0x1) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000016c0)=ANY=[@ANYBLOB="cc060000", @ANYRES16=r1, @ANYRES8=r1, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000008000100", @ANYRES32=0x0, @ANYBLOB="0480f90009f1eced07ae067d39b7"], 0x6cc}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10) mkdir$auto(&(0x7f0000001580)='macsec\x00', 0x9) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x4) sendmsg$auto_NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r3 = prctl$auto_PR_SET_SECCOMP(0x16, 0x0, 0x1, 0xaa5, 0x2) r4 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000000c0)=@token_create={0x8, r3}, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x1fffe001, 0xb) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, 0x0) r6 = socket(0x4, 0x2, 0x1004) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2, 0x2, 0x88) r8 = socket(0x10, 0x2, 0xc) socket(0x15, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESDEC=r5, @ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nbd(0x0, r7) r9 = gettid() setpgid$auto(r9, 0xe83) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40090) 7m49.867979382s ago: executing program 3 (id=765): openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x100, 0x0) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_percent\x00', 0x389900, 0x0) close_range$auto(r1, r0, 0x897) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400007, 0x10000000de, 0x9b72, 0xffffffffffffffff, 0x100000) unshare$auto(0x40000080) unshare$auto(0x21) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x40000000, 0x2000000000005, 0x2, 0xb85b, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) socket(0xa, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x2b, 0x1, 0x1) rseq$auto(0x0, 0x8000, 0x0, 0x6) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) 7m48.742212263s ago: executing program 3 (id=768): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r1, 0x110, 0x7, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x200, 0x70bd2e, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x379}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x51, 0x14e, "8ec6ebb971e34e9d555dd3463d14e0f94ed69af929b8f225d305ea52951153ea270ae086677f021d384e4609158b55f0d0b324bf0ffeda27f9aa312edbf9a2e27ba99b6ea71c2099f5499b8c94"}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x4}]}, 0x7c}}, 0x4000800) madvise$auto(0x0, 0x2003f2, 0x15) 7m33.664369463s ago: executing program 32 (id=768): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r1, 0x110, 0x7, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x200, 0x70bd2e, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x379}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x51, 0x14e, "8ec6ebb971e34e9d555dd3463d14e0f94ed69af929b8f225d305ea52951153ea270ae086677f021d384e4609158b55f0d0b324bf0ffeda27f9aa312edbf9a2e27ba99b6ea71c2099f5499b8c94"}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x4}]}, 0x7c}}, 0x4000800) madvise$auto(0x0, 0x2003f2, 0x15) 5.526895063s ago: executing program 4 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r4, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000004c0)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x3, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x6d, 0xba, "5014ff4f41308b0ebc5a630caa9cafcda4909b0bdba1b8de74ed9a1f82097a56501eb5ef1b6e218f3b4b2df3a9d9cdb31f735a7c455f1edd70196df4401cef12a42c01820b612370545b5cabbc4e00b99386f68424cf73046335965d34e6064bc69d57a4c447e945c2"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "6aa959f5253d9711a5a3c0b98372"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 5.360082743s ago: executing program 2 (id=2492): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) listxattrat$auto(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x10000000000000) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon28\x00', 0x101000, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0) keyctl$auto(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x8) socket(0x2, 0x80000, 0x100) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) mmap$auto(0x2, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x5, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x8008af83, &(0x7f0000002600)={0x1000000}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.502339687s ago: executing program 4 (id=2494): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101a82, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, 0x0, 0x45c) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r2, 0x0, 0x6) mq_open$auto(&(0x7f0000000040)='/dev/ttyS0\x00', 0x7, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e1842, 0x0) bind$auto(0xffffffffffffffff, &(0x7f00000001c0)=@sco={0x1f, @none}, 0x8) 3.615157735s ago: executing program 4 (id=2495): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x8e) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x15, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) mprotect$auto(0x110c230000, 0x1, 0x2) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000380), 0x44000, 0x0) (async) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) keyctl$auto_KEYCTL_PKEY_QUERY(0x18, 0x1, 0xa, 0x7, 0x6) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci4\x00', 0x880, 0x0) (rerun: 64) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000340)={r1, &(0x7f0000000180)="c76dce9e33676c5ff62704614a0f7e53bf9e840551f605f4321cabd3459c7b2a77375be2756fc4e3ddec88477142f625867fb9139d26144c0c251d64f45ab285bbf7b032bbcf0a311cca25ed5c079cfdbc2d0f9d58c205eda40e6b90895b5efb48bf2d338a0ff171330e674c21ee21b4cd8171182b220aef6e512267355d31e5aad3dc7d244b8e9d7a0a6dae4d7737a0b815574536c084cb470f2d558b7e07a6923d338c11", 0xfffff99a, &(0x7f0000000240)="cdd433ef9a86cc100fcc3d64db67bc5f1dc31fc58c7c2c8b0ac64c934a14d816625b1a79f8c73621b5f3be2caff901a0699b844952e7c09621f3f2986b7676f4853c41ea", 0x7, &(0x7f00000002c0)="452260c7a3f7bf0d72d5c32e222336f4e90efe4c4ecd25f1e1f585e80355a6d017", &(0x7f0000000300)=0xfffffc01}) socket(0x18, 0x0, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1b2082, 0x40) flock$auto(r4, 0x2) (async, rerun: 64) r5 = socket(0xa, 0x3, 0x5) (rerun: 64) sendmmsg$auto(r5, &(0x7f0000000180)={{&(0x7f0000000040), 0x19, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x9, 0x1, @relative_fd, 0xd}, 0x96) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) recvmmsg$auto(r6, &(0x7f0000000240)={{&(0x7f00000000c0)="be9c33df5c8c353735ae9f0e59896ce734a2947de470705514969d5d39224c22b3e740f3eb49f4caac69d2876cd1c27ee4a8a6f1800b38e925041b8cb1a698e738fa874547d44e0a4a5cb5a7cfae9a5940c7d0294ba5e07d0a0e1fc49e31effbba8d3c76977c377b68625c5c083983cea584", 0x7, &(0x7f0000000200)={&(0x7f00000001c0)="76afa3c1fd10f38db0dd5c8d0e58ae3a6495bcaad4f3c263d15f2b932ecf25bf0b87101b7f7a715a9184db333d581b8caaba407596", 0x2}, 0x6, 0x0, 0x7, 0x2}, 0x9}, 0x7, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x88b6, 0x40000000000eb1, 0x401, 0x8000) (rerun: 32) 3.379656486s ago: executing program 0 (id=2497): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0x40000000000df, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r1, 0x0, 0x9) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x2, 0x3a) getsockopt$auto(r2, 0x0, 0xf, 0xfffffffffffffffe, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x2, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffdffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x9, 0x1, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 3.260065457s ago: executing program 2 (id=2498): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r0, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_KEK={0x41, 0xf2, "a4f748a52e494adc1d3db8ef143d63610e415548910f9b49b1625bfc680b02dd23bf5b02bab7bb924dd28fd8faced1ab9fa4a2779b7e1cf4c12676931d"}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffb}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x80) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) prctl$auto(0x22, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r8, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) ioctl$auto(r7, 0x89f3, 0x24) 2.607796725s ago: executing program 0 (id=2499): r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x3) fanotify_init$auto(0x602, 0x1) open$dir(0x0, 0x42, 0x20) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x22, 0x0, 0xa8e, 0x2, 0x1, 0xfffffff4, 0x0, 0x7fff}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x8) mmap$auto(0xfffffffffffffffe, 0xe983, 0xc3c, 0xeb1, r3, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000020) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r4, 0x4, 0x2001d, 0x0, 0x9) r5 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r5, &(0x7f0000000240)=""/177, 0xb1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x7fff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x2, 0x3a) clone$auto(0x100000000021, 0x8000002000000000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x2) unshare$auto(0x40000080) 2.466608907s ago: executing program 2 (id=2501): socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.22507047s ago: executing program 2 (id=2502): setgroups$auto(0xc00000000, 0xfffffffffffffffc) r0 = socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq7\x00', 0x400000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x80b43, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x28000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000080)="33edf62c360f6c256f3875d68ec89fb315d723a9749ea61043fc91c4e18c6a0fbc4fdd776f1e6d1bbed47a36dd0f6941a62269aaec5567feb246973798bb9ffa29cccf4d44d60bc036dde8a0c0031db1f1f0699ad1e4930e61f70420342b089cc02a737b346115916e8a69da3d770f801d98aaf7dd568599323dc420f11c1615d46144c6ba3e0593f94bd8cd585a99f669c391a7d5c9be59143e423826", 0x80) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9f, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00', 0x0}) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000000000)=0x22) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="1a"]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r8 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000240), 0xd8881, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)=@bpf_attr_3={0x3, 0x8, 0x200, 0x7, 0x7, 0x0, 0x200, 0x8, 0x2, "a306bb23ce7045372811d5c62460f7d6", r4, 0x72, r0, 0xfffffffe, 0x8, 0x40, 0x7, 0x6, 0x0, 0x751, @attach_btf_obj_fd=r0, 0xfe69, 0x6, 0x50, 0xc, 0x0, r8, r2}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)={0x18, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004014}, 0xc050) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x84, 0x66, 0x0, 0x0) 1.797331575s ago: executing program 0 (id=2503): r0 = inotify_init1$auto(0x3000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000040)=0x1) shmctl$auto_SHM_UNLOCK(0xfffff800, 0xc, &(0x7f0000000280)={{0x5, 0xee00, 0x0, 0x7, 0x10001, 0x7, 0x4}, 0x7, 0x2, 0x3, 0xe7, @raw=0xfffffffd, @raw=0x2, 0x80, 0x0, &(0x7f0000000080)="3ea9c7cc4ae14017aef4e1530ff607e406b4b39bd4b098b05beb2c86fc8f0b87f55382ba81b795a2dd36d8f5af918a719ae518d282cee31e7a811b40fdde3bbb69f320030d664382798a42cc992f8721c0236135f25007ec4bc05cfd2b99c0829a1c3414a726369d6bacbd620276ca25c8c4299156b4a0f1e28843741b684fa2fe8b2108b5765b56e9765686777861cac91a71a94b291a9c24e6bc5b67807896038e02c931a9c3ea526521ce6d06a60bc5589d0d54432ca2b003f852b8a8ff3c4169c13c70d7e011f838962ca587a52e3665e125c605b6c109227016654da80104802a5f277e329bc94d44f15915dbfa", &(0x7f0000000180)="0df5491c8e50cbd9d5368994892e8a66cfa28a0c9ca0b7e12dc5bcc4f67af510bca1146931af53bdad62f11a93afb96fd9a989fafaaa787c6b6245ff88652c6ebc1623e3471f1b20e3c650efe38b46d0cd96ce58475072e5f664c7d6bd99602942ca89ddbd33ca0c3e0def4ff511c6b32814c15e76c22170cf1962099d0c83caece36c1586adbab916f3346ac27e4fcc4d2b9d93dcbbdb537bc2299dddbb95ddd57673b066df8d1e524dafbfe2de4bdd37568d2e118faf042ac90815f8d31d8e97"}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000000300)={0x17f4, r2, 0x207, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x368, 0x2, 0x0, 0x1, [@nested={0x251, 0x86, 0x0, 0x1, [@nested={0x4, 0x62}, @typed={0x5, 0x56, 0x0, 0x0, @str=','}, @typed={0x8, 0x105, 0x0, 0x0, @fd=r0}, @generic="83c4b176c7faf891c756fbeedb89d6609fe19e51e658c6730894377bef650a917a9d72bdcbd7b1e95e7eda159dd8d7fd02a59a635345e520ca03d2f2936dea3f73634ac0f9aca162cf3dd3d9f31e2a71b0b77db1a7b86ac4aeb93149eb0cf711534a22dcb9dcba9895f44fe5f31d2f97ab0b8f3822be5a9ed27628dffa4f76dd821dd3f59522b995f42ba74afc182090b68417b799143bca7bbf215117bd4d0dd994f12f05b44c8983f20988a71b039c21d001398f1ba28c5ef9e79ff5ee2d0385a4b16c7f035d9d0ee0f5693fae59d982e3673e5fe437ea6c55d6933730ddd7e1eb4a461bab248aac3d95dc2d820931df192dc93361e1312faa86777d6e", @generic="878093038af2af537b1f2896989e12a7dcad812a1e8f9036aae4b726d309cd296cec1453f31ea2ad08adb625425ea09cd53d554fca79559bf01618e6616c33a3f3afa3dc8c7c9d3e176ce2023792f8911b698e3edf5b38aac4314c628892c4a4b274c1", @typed={0xd1, 0x14d, 0x0, 0x0, @binary="51093b4d5ff9d7525d230158b29f637b59930ab38430b5ce2f64243ce5dc1cb70757b028fdf5a9841ad8e019d98a3a6569b02188ca4ba4df925d538dce060ac8c58b635a1477624321f36a16429ac0d6cab941d2ae4d9a91b3c753ada5e5f50acbcdbf2a6cda31ab7a7fd8ebf874a410b4b01c7263f637f008f83fa2d12de273f2d6714556c65c0fdc03c2ec4f4631dd306ae741e2b0348b03840c912df64dc27dfa7edd14f41586914c676bca8259a15af33037cd7b4fc21f4615c0e4f50380f2b71b064f74b8b653b4016b2f"}, @nested={0x4, 0x138}]}, @nested={0x10e, 0xb, 0x0, 0x1, [@typed={0x14, 0x148, 0x0, 0x0, @ipv6=@empty}, @generic="3771238fa6b30dd538e832a543045b19c809a181ab89ebd0365fcba6ae0a2bd1883bbca2dc6e50783b795c39a416d7759aeef967f62f794907f77abbfae8f7a24ae7ea15b3f2cca864d61a679e3971040fa4401785d7b91201da19d68536cd541cdbb7e7b9fb35b7ef6e75c5d10bd00cf52f863d7c8ca0346be74eea932001fceb416faa8036f58c", @generic="343329fd0a73ba84b861f3e9eb3080cc6b62745c7aa89860f6cc75f762357a513ae87a72cbd617627ef33123e57bc6039e2f4993f872239f2d5dd50930b27bdcd798762c6086ad8c9beb541b25e057d3a3664d6b20dc4000f297485db598abe0cce4ccf948f78e4ac95f", @nested={0x4, 0xb1}]}]}, @TIPC_NLA_SOCK={0xe5, 0x2, 0x0, 0x1, [@generic="ddf26ac4bb4f18c7a8ce745edae1df05129e9157574f376bb7aa2e62af2d2ed7fba0e4045af64addd7acb8f454b1e46e1c4fe848f263f1382c11d4d931b0dbff8895248927d6fe8391ae46ff55553b287bcddc5f3b079dfb184e12f00386630a1666367f0d1fb140dd0f9a595fb1118378284901c09f3b5a54c22358a9573bc39877e889ca8616c32188840b705af675c2f2ff7fcedd9dd10e128668fdb2b0bce3267fdad6a09c9b0376386635cd2ceebb24e83615037f9e6b0f23d8262db049852e0b097b3f72f2fc8a26d17919e563974f3b8ead1d697fed2e6d19368e18b7c8"]}, @TIPC_NLA_NET={0x138d, 0x7, 0x0, 0x1, [@nested={0x1191, 0xdf, 0x0, 0x1, [@generic="21ae9401854c7c9adbf755de1cc30f1bb3987c396c23ef57029f52bf6772aa1214c0e6137e6f5edd68b369615ad3972119ee06100da2ec6c22da61f1292ee18dfe65cc1ab6116ab7f1888eca8e23e076ac32f0f933a74be86b4053f201e7f2bccb2756115e482212386154d58d3e6dcebed1377904113e7cc3d8fdc13ae52fb1c4706150965b6de2b97dead19a2a6dbc1d3f", @generic="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", @nested={0x4, 0x68}, @typed={0x8, 0xd9, 0x0, 0x0, @uid}, @typed={0x6, 0xbc, 0x0, 0x0, @str='{\x00'}, @generic="8b14d421c1ac8a9e2149ad63d1bb97ee0881b9525aace2d1d5cf61a07ddfa9014be1837203cf0ba0104da1805583369837e6fbde46b29334698e42276843dde9ce66ebc7959217f58a9e70a7c3451204acc5b0c7f6851a5e0b4d4fc53b24240bf304e7475056bacfef42957b056ffc16cfe25c387d109e6c54af157a28f4d55869286663fb51151b8eacc3568ab10378c5a4f9d51b7de0ec3917bc0dc6a34f278ace356c8cf5a6187c8a586f9793799199c00a04d213d9481e4f6f3b0eb9809d0a9ca8d56824f6ed264a12c7207f35be02f85aa47869936861908a7842adee5b3f5101d535e77e"]}, @generic="754887d9de5da5c04ea986cf57f04792b4cb22b5c68aa4f205b28c6c26bb35240ebd65dd044c0030cfae586e5f771d4d6a36d2684bb4290388010c3d281ae971f37eb582756cf2df4a546bfbef843634dcf72947697c80131de4e3e3e87512e0430dacad785b878a0905", @nested={0x30, 0xf6, 0x0, 0x1, [@typed={0x14, 0x108, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0xbb}, @typed={0x8, 0x79, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x2}, @typed={0x8, 0xad, 0x0, 0x0, @uid=r4}]}, @generic="da7c108874dd7ddee48437077b1d15c0d734878e3f7d27", @nested={0x141, 0x3c, 0x0, 0x1, [@generic="79ed4c7ba1b02001343a88a022280f89a271b6bc4a84a129d37785b69ed2b4133c126ab745d49c085624f8858b31dd8fa2990c08b7410689cfc7e76fe5888ec2dd4b7c6a6da8c1f82a2b94c991e38dbb1889047bc92f626dbd3e665ebb9946a22ef541cba08db7a15a520181ed82490dbd66", @generic="a816a091eabe10219a36c7fb4228f68cacc9f56c27ac604e04f633fcc5794efcc45a0fd2ae4ef6cca96d90936005856e9a02b864e492aec685bfdc5c64679fcff980b1573cf79378a0655847afb5e0e3dcb633e06acfeaeb7d37e1a201", @generic="a6941a5c500b015662c89792ef52a33f2eecbf1e4ba97f7b06e1ff45d5b20633317ed666bf4bef387d0f", @typed={0x3e, 0x9f, 0x0, 0x0, @binary="cf8f50093f3b945ff6c7cacbbc251bf6e308a2a0a58d30747feef3478b7b39995323a578bfd894b0780c88003fb95a1d4b3e343019d10b5b4879"}, @nested={0x4, 0x21}]}]}]}, 0x17f4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000001) 1.588007297s ago: executing program 1 (id=2504): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty56\x00', 0x445c00, 0x0) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) socket(0x29, 0xcb467e450ad6000e, 0xfffffffe) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x301800, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f00000001c0)={0x0, 0x2}, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe98, 0x0, 0x0, &(0x7f0000000040)={[0x54e, 0x10000000000005, 0x1, 0x8fd6, 0x948b, 0x5, 0x3392, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0) pread64$auto(r2, 0x0, 0x80000006, 0x3) r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$auto(r3, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340)={@_si_pad}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000000, 0xb, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0x8205, 0x3, 0xe, 0x0, 0xe}) msgctl$auto_MSG_INFO(0x8, 0xc, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0x0, &(0x7f0000000480)={[0xa0c, 0x7ff, 0x3, 0x4, 0x5, 0x5, 0x274, 0x401d, 0x2, 0x6, 0x8, 0x40100, 0x86d000000, 0x7f, 0x200000000000000, 0x4]}, &(0x7f0000000500)={[0x3, 0x23, 0x80000000, 0x2, 0x6, 0x6, 0x3, 0x1, 0x80, 0x1, 0x4, 0x3, 0x7ff, 0x2, 0x3, 0x9]}, &(0x7f0000000580)={[0x40000000002, 0xa8fa76b, 0xe8, 0x9, 0x1, 0x2, 0x7, 0x9, 0x100004000, 0x80000001, 0x6, 0x40, 0xd38, 0x5, 0x6ceb]}, &(0x7f0000000280)={0xff, 0x80}, &(0x7f0000000740)="086efac8065a88d410f77f8d6787c6908f147aadaac01836769ca7a004e79e05d877d2d8306400817d305d94bb719e5fb1e4e62dba31ff76aa22f83ff1240409e7cb60c14960ccdaf82e884c8e2645cbece3fe682f78fb6fd060763243f65ef2a5c30ca6d6bc811b80ca4081c4eaf4378ba35b3a00"/129) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x6, 0x0, 0x18) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x200000000000000, 0x9}, 0x7}, 0x3, 0x0) 1.383163232s ago: executing program 1 (id=2505): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) ftruncate$auto(0x3, 0x400180200000) r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20020, 0x0) read$auto_mgts_fops_(r0, &(0x7f0000000080)=""/4096, 0x1000) 1.328603236s ago: executing program 4 (id=2506): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x46, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r2, 0xc0044dff, &(0x7f0000000280)) io_uring_setup$auto(0x6, 0x0) timer_gettime$auto(0x401, &(0x7f00000000c0)={{0x6, 0x27257ca}, {0x7fffffff, 0x100}}) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r1, 0x9) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x120000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/199, 0xc7) writev$auto(r4, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='\f\x00', @ANYBLOB="13002cbd7000dddbdf2502000000080003", @ANYRES32=r8, @ANYBLOB="0800610001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000540)="8dabc6760e11b0145de35343f846b0b6d87043b06540026189bdffa946db0a59585afac2133c728ebdb331a873e7d1ac4f6c29ca15eba84f8fa6e4bed6b9ba202e5267ad94ce090b5e04691ea4390f3d8f9c4af4ad6ac7c8eb00cb686a59fb1649c73a31beba686b009a79f09cf387ba7b3176310b4d22c868e8d230376054764ff392f990cdb751ee5b7f1feb3b06bd42009d3c73b242add60223fa6ab54607ec0ef789b62c58d692512fb16d349daef5e65c6f993bc5d37c14168176cde13626d576390f1357845bcdc6c3c79de41022775b5d92efaab3d5213432b27f480ea184") write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r6, 0x0, 0x0) 1.237932198s ago: executing program 1 (id=2507): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) getsockopt$auto(r0, 0x40000000029, 0x4, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r3 = socket(0x2, 0x80002, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r6 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r6, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) pread64$auto(r7, 0x0, 0x200000000003, 0x2f4a3a23) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) socket(0xb877d7ae5150abdb, 0x3, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 899.420356ms ago: executing program 2 (id=2508): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x2a, 0x800, 0xfffffffe) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f3, 0x400, 0x9}]}) 886.847213ms ago: executing program 0 (id=2509): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, 0xfffff004, 0x2) 803.955972ms ago: executing program 1 (id=2510): socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 692.990901ms ago: executing program 1 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130025bd7000dddbdfd34400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x20040894) sysfs$auto(0x2, 0x0, 0x0) r4 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$auto_l2cap_debugfs_fops_(r4, &(0x7f0000000a40)=""/218, 0xda) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) sysfs$auto(0x2, 0x1e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) r5 = socket(0x15, 0x5, 0x0) sendfile$auto(r5, 0x3, 0x0, 0x7ffff000) epoll_ctl$auto(0x5, 0x5, 0x8000000000000000, 0x0) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r6, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x20008050) 644.204769ms ago: executing program 0 (id=2512): syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syslog$auto(0x1e96, &(0x7f00000000c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\t\x00\x00\x00#+\xfa\xb8\x01\xb9j<\v\xf4G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x06X@\xadD\xf8\x9d\xf31\xd2]\xc4\x139]\xe3\xf1\xa1G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\xf3\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\x04\x9b\x00\x00\x00\x00\x00\x00\x00\x00/\x10\xf7\xd0P\xaa\xe0\x8b\xb4\xaaV\xafqW\xf1\xdc\x02#\x93x>\xbf\x14\x8c\xb5ja\x19W-\xec\v\x176\x85]^\xd2z\"\xb4\b\x7f?\xc5\xbb\xd9\xe7\b\xa2<\x90\x9ct\xd2+\xf3\x1a}\xb7X|\xb2\xe4\x8d\xf9\x83\xaf\x87=94:\x81a]\xef/\xa0@w\xb5\xe55\xc5N.\xa2\xf5\xe8o\xa6i%\x86\xe1)\x1dV\xa8\x10\x1d\x1c&\x9e(\xe5h&1\xeb&\xec\xac\xe0R/\xe0\xde\xee\x9bw\x82O\xdf\xbd\xfeLZ@-\xb8xq\xd0\x1f\xa9\xc5\x03J0x0}) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x89f2, 0x24) (async) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, [0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fe, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) timer_create$auto(0x9, 0x0, 0x0) socketpair$auto(0x1d, 0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4c2, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) (async) pipe$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x38a3743b) 347.87588ms ago: executing program 4 (id=2515): socket(0x22, 0xa, 0x8c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x200080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x339, 0x7, 0x10, 0xfd, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0xb460) write$auto(r0, &(0x7f0000000080)='/\xe4ev/auYio\x00', 0x4) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 276.723166ms ago: executing program 0 (id=2516): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/tracing/set_event_pid\x00', 0x2002, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=&(0x7f0000000d80)="b623d2751b00fbfad2a6d1a6d09b5de74ab60bd7666cde9499615eb7a03982dfecd08c02032d0ff2dd", 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=2517): timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) kernel console output (not intermixed with test programs): [L]=SOFTLOCKUP [ 598.253097][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.253106][T15649] Call Trace: [ 598.253111][T15649] [ 598.253117][T15649] dump_stack_lvl+0x16c/0x1f0 [ 598.253146][T15649] should_fail_ex+0x512/0x640 [ 598.253167][T15649] get_futex_key+0x1d0/0x15f0 [ 598.253186][T15649] ? __pfx_get_futex_key+0x10/0x10 [ 598.253207][T15649] futex_wake+0xea/0x530 [ 598.253225][T15649] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.253250][T15649] ? __pfx_futex_wake+0x10/0x10 [ 598.253268][T15649] ? kmem_cache_free+0x2d8/0x770 [ 598.253288][T15649] ? kfree_skbmem+0x1a4/0x1f0 [ 598.253305][T15649] ? kfree_skbmem+0x1a4/0x1f0 [ 598.253317][T15649] ? kfree_skbmem+0x1a4/0x1f0 [ 598.253332][T15649] do_futex+0x1e3/0x350 [ 598.253349][T15649] ? __pfx_do_futex+0x10/0x10 [ 598.253365][T15649] ? __pfx_do_mq_notify+0x10/0x10 [ 598.253384][T15649] __x64_sys_futex+0x1e0/0x4c0 [ 598.253403][T15649] ? __pfx___x64_sys_futex+0x10/0x10 [ 598.253427][T15649] do_syscall_64+0xcd/0xf80 [ 598.253451][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.253466][T15649] RIP: 0033:0x7fd5c758f7c9 [ 598.253479][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.253494][T15649] RSP: 002b:00007fd5c836e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.253508][T15649] RAX: ffffffffffffffda RBX: 00007fd5c77e6098 RCX: 00007fd5c758f7c9 [ 598.253518][T15649] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c77e609c [ 598.253528][T15649] RBP: 00007fd5c77e6090 R08: 00007fd5c8390000 R09: 0000000000000000 [ 598.253536][T15649] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 598.253545][T15649] R13: 00007fd5c77e6128 R14: 00007ffe1f744550 R15: 00007ffe1f744638 [ 598.253564][T15649] [ 599.662983][T15677] random: crng reseeded on system resumption [ 599.978991][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 600.543947][T15678] hub 1-0:1.0: USB hub found [ 600.676553][T15678] hub 1-0:1.0: 1 port detected [ 602.617298][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 603.237731][T15716] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2016'. [ 604.338065][T15736] FAULT_INJECTION: forcing a failure. [ 604.338065][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 604.425533][T15736] CPU: 0 UID: 0 PID: 15736 Comm: syz.4.2023 Tainted: G I L syzkaller #0 PREEMPT(full) [ 604.425563][T15736] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 604.425570][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.425579][T15736] Call Trace: [ 604.425585][T15736] [ 604.425591][T15736] dump_stack_lvl+0x16c/0x1f0 [ 604.425621][T15736] should_fail_ex+0x512/0x640 [ 604.425643][T15736] ? __kmalloc_cache_noprof+0x5f/0x800 [ 604.425663][T15736] should_failslab+0xc2/0x120 [ 604.425687][T15736] __kmalloc_cache_noprof+0x80/0x800 [ 604.425705][T15736] ? open_substream+0xec/0x9d0 [ 604.425721][T15736] ? mark_held_locks+0x49/0x80 [ 604.425737][T15736] ? open_substream+0xec/0x9d0 [ 604.425752][T15736] ? _raw_spin_unlock_irq+0x2e/0x50 [ 604.425774][T15736] open_substream+0xec/0x9d0 [ 604.425792][T15736] rawmidi_open_priv+0x543/0x6e0 [ 604.425813][T15736] snd_rawmidi_open+0x4cb/0xbf0 [ 604.425851][T15736] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 604.425870][T15736] ? __pfx_default_wake_function+0x10/0x10 [ 604.425892][T15736] ? soundcore_open+0x35a/0x580 [ 604.425917][T15736] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 604.425937][T15736] soundcore_open+0x40c/0x580 [ 604.425961][T15736] ? __pfx_soundcore_open+0x10/0x10 [ 604.425990][T15736] chrdev_open+0x234/0x6a0 [ 604.426014][T15736] ? __pfx_apparmor_file_open+0x10/0x10 [ 604.426030][T15736] ? __pfx_chrdev_open+0x10/0x10 [ 604.426054][T15736] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 604.426081][T15736] do_dentry_open+0x748/0x1590 [ 604.426102][T15736] ? __pfx_chrdev_open+0x10/0x10 [ 604.426129][T15736] vfs_open+0x82/0x3f0 [ 604.426147][T15736] path_openat+0x2078/0x3140 [ 604.426175][T15736] ? __pfx_path_openat+0x10/0x10 [ 604.426203][T15736] do_filp_open+0x20b/0x470 [ 604.426225][T15736] ? __pfx_do_filp_open+0x10/0x10 [ 604.426261][T15736] ? alloc_fd+0x471/0x7d0 [ 604.426287][T15736] do_sys_openat2+0x121/0x290 [ 604.426303][T15736] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.426326][T15736] __x64_sys_openat+0x174/0x210 [ 604.426344][T15736] ? __pfx___x64_sys_openat+0x10/0x10 [ 604.426368][T15736] do_syscall_64+0xcd/0xf80 [ 604.426392][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.426408][T15736] RIP: 0033:0x7fe3b0b8f7c9 [ 604.426421][T15736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.426436][T15736] RSP: 002b:00007fe3b19be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.426450][T15736] RAX: ffffffffffffffda RBX: 00007fe3b0de5fa0 RCX: 00007fe3b0b8f7c9 [ 604.426460][T15736] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 604.426470][T15736] RBP: 00007fe3b0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.426479][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.426488][T15736] R13: 00007fe3b0de6038 R14: 00007fe3b0de5fa0 R15: 00007fffb9c630c8 [ 604.426508][T15736] [ 605.939523][T15755] FAULT_INJECTION: forcing a failure. [ 605.939523][T15755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.005693][T15749] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 606.005693][T15749] program syz.0.2024 not setting count and/or reply_len properly [ 606.030193][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.4.2026 Tainted: G I L syzkaller #0 PREEMPT(full) [ 606.030221][T15755] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 606.030227][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.030236][T15755] Call Trace: [ 606.030241][T15755] [ 606.030246][T15755] dump_stack_lvl+0x16c/0x1f0 [ 606.030275][T15755] should_fail_ex+0x512/0x640 [ 606.030295][T15755] get_futex_key+0x1d0/0x15f0 [ 606.030313][T15755] ? __pfx_get_futex_key+0x10/0x10 [ 606.030335][T15755] futex_wait_setup+0x9d/0x570 [ 606.030360][T15755] __futex_wait+0x193/0x2f0 [ 606.030380][T15755] ? __pfx___futex_wait+0x10/0x10 [ 606.030402][T15755] ? __pfx_futex_wake_mark+0x10/0x10 [ 606.030424][T15755] ? futex_hash+0x2c5/0x380 [ 606.030441][T15755] ? futex_private_hash_put+0x160/0x1b0 [ 606.030457][T15755] futex_wait+0xe8/0x380 [ 606.030476][T15755] ? __pfx_futex_wait+0x10/0x10 [ 606.030494][T15755] ? __lock_acquire+0x436/0x2890 [ 606.030517][T15755] do_futex+0x229/0x350 [ 606.030533][T15755] ? __pfx_do_futex+0x10/0x10 [ 606.030553][T15755] __x64_sys_futex+0x1e0/0x4c0 [ 606.030571][T15755] ? fput+0x70/0xf0 [ 606.030585][T15755] ? __pfx___x64_sys_futex+0x10/0x10 [ 606.030602][T15755] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 606.030630][T15755] do_syscall_64+0xcd/0xf80 [ 606.030653][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.030668][T15755] RIP: 0033:0x7fe3b0b8f7c9 [ 606.030680][T15755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.030694][T15755] RSP: 002b:00007fe3b199d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 606.030708][T15755] RAX: ffffffffffffffda RBX: 00007fe3b0de6098 RCX: 00007fe3b0b8f7c9 [ 606.030717][T15755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3b0de6098 [ 606.030726][T15755] RBP: 00007fe3b0de6090 R08: 0000000000000000 R09: 0000000000000000 [ 606.030734][T15755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.030742][T15755] R13: 00007fe3b0de6128 R14: 00007fffb9c62fe0 R15: 00007fffb9c630c8 [ 606.030761][T15755] [ 606.612604][T15767] Process accounting resumed [ 606.735774][ T30] audit: type=1800 audit(4294967298.619:28): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2028" name="features" dev="configfs" ino=63051 res=0 errno=0 [ 606.804847][T15771] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 606.827499][T15771] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 606.919778][T15778] netlink: 318 bytes leftover after parsing attributes in process `syz.0.2032'. [ 606.953467][T15778] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2032'. [ 607.483468][T15787] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2035'. [ 608.251064][T15800] FAULT_INJECTION: forcing a failure. [ 608.251064][T15800] name failslab, interval 1, probability 0, space 0, times 0 [ 608.309000][T15800] CPU: 0 UID: 0 PID: 15800 Comm: syz.4.2039 Tainted: G I L syzkaller #0 PREEMPT(full) [ 608.309032][T15800] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 608.309038][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.309048][T15800] Call Trace: [ 608.309054][T15800] [ 608.309060][T15800] dump_stack_lvl+0x16c/0x1f0 [ 608.309090][T15800] should_fail_ex+0x512/0x640 [ 608.309107][T15800] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 608.309128][T15800] should_failslab+0xc2/0x120 [ 608.309151][T15800] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 608.309171][T15800] ? __d_alloc+0x35/0xa80 [ 608.309188][T15800] ? __d_alloc+0x35/0xa80 [ 608.309198][T15800] __d_alloc+0x35/0xa80 [ 608.309210][T15800] ? bpf_lsm_inode_permission+0x9/0x10 [ 608.309229][T15800] d_alloc+0x4a/0x1e0 [ 608.309242][T15800] vfs_tmpfile+0x148/0x9b0 [ 608.309269][T15800] path_openat+0x1936/0x3140 [ 608.309289][T15800] ? do_syscall_64+0xcd/0xf80 [ 608.309311][T15800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.309332][T15800] ? __pfx_path_openat+0x10/0x10 [ 608.309357][T15800] ? __lock_acquire+0x436/0x2890 [ 608.309373][T15800] do_filp_open+0x20b/0x470 [ 608.309395][T15800] ? __pfx_do_filp_open+0x10/0x10 [ 608.309431][T15800] ? _raw_spin_unlock+0x28/0x50 [ 608.309450][T15800] ? alloc_fd+0x471/0x7d0 [ 608.309477][T15800] do_sys_openat2+0x121/0x290 [ 608.309493][T15800] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.309517][T15800] __x64_sys_open+0x153/0x1e0 [ 608.309533][T15800] ? __pfx___x64_sys_open+0x10/0x10 [ 608.309554][T15800] ? rcu_is_watching+0x12/0xc0 [ 608.309576][T15800] do_syscall_64+0xcd/0xf80 [ 608.309599][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.309626][T15800] RIP: 0033:0x7fe3b0b8f7c9 [ 608.309640][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.309655][T15800] RSP: 002b:00007fe3b19be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 608.309670][T15800] RAX: ffffffffffffffda RBX: 00007fe3b0de5fa0 RCX: 00007fe3b0b8f7c9 [ 608.309681][T15800] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 608.309691][T15800] RBP: 00007fe3b0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 608.309700][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.309709][T15800] R13: 00007fe3b0de6038 R14: 00007fe3b0de5fa0 R15: 00007fffb9c630c8 [ 608.309730][T15800] [ 610.622409][T15835] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 610.808377][T15846] zswap: compressor not available [ 612.499106][T15895] FAULT_INJECTION: forcing a failure. [ 612.499106][T15895] name fail_futex, interval 1, probability 0, space 0, times 0 [ 612.565520][T15895] CPU: 0 UID: 0 PID: 15895 Comm: syz.0.2062 Tainted: G I L syzkaller #0 PREEMPT(full) [ 612.565549][T15895] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 612.565555][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.565564][T15895] Call Trace: [ 612.565568][T15895] [ 612.565574][T15895] dump_stack_lvl+0x16c/0x1f0 [ 612.565603][T15895] should_fail_ex+0x512/0x640 [ 612.565622][T15895] get_futex_key+0x293/0x15f0 [ 612.565641][T15895] ? __pfx_get_futex_key+0x10/0x10 [ 612.565662][T15895] futex_wake+0xea/0x530 [ 612.565683][T15895] ? __pfx_futex_wake+0x10/0x10 [ 612.565710][T15895] do_futex+0x1e3/0x350 [ 612.565727][T15895] ? __pfx_do_futex+0x10/0x10 [ 612.565741][T15895] ? __might_fault+0xe3/0x190 [ 612.565763][T15895] mm_release+0x24e/0x300 [ 612.565783][T15895] do_exit+0x69e/0x2bd0 [ 612.565800][T15895] ? __pfx_do_exit+0x10/0x10 [ 612.565813][T15895] ? do_raw_spin_lock+0x12c/0x2b0 [ 612.565829][T15895] ? find_held_lock+0x2b/0x80 [ 612.565850][T15895] do_group_exit+0xd3/0x2a0 [ 612.565865][T15895] get_signal+0x2671/0x26d0 [ 612.565889][T15895] ? putname+0xf5/0x1a0 [ 612.565903][T15895] ? __pfx_get_signal+0x10/0x10 [ 612.565924][T15895] ? do_futex+0x122/0x350 [ 612.565941][T15895] arch_do_signal_or_restart+0x8f/0x7a0 [ 612.565963][T15895] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 612.565988][T15895] ? __x64_sys_openat+0x174/0x210 [ 612.566004][T15895] ? __pfx___x64_sys_futex+0x10/0x10 [ 612.566024][T15895] exit_to_user_mode_loop+0x8c/0x540 [ 612.566044][T15895] do_syscall_64+0x4ee/0xf80 [ 612.566068][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.566083][T15895] RIP: 0033:0x7fd5c758f7c9 [ 612.566095][T15895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.566109][T15895] RSP: 002b:00007fd5c838f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.566123][T15895] RAX: fffffffffffffe00 RBX: 00007fd5c77e5fa8 RCX: 00007fd5c758f7c9 [ 612.566133][T15895] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c77e5fa8 [ 612.566141][T15895] RBP: 00007fd5c77e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.566150][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.566158][T15895] R13: 00007fd5c77e6038 R14: 00007ffe1f744550 R15: 00007ffe1f744638 [ 612.566177][T15895] [ 613.739174][T15911] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2064'. [ 613.890848][T15912] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2064'. [ 614.001933][T15911] netlink: 250 bytes leftover after parsing attributes in process `syz.4.2064'. [ 614.561087][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 615.382196][ T5839] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 615.527978][T15891] kexec: Could not allocate control_code_buffer [ 615.736642][T15946] netlink: 'syz.0.2075': attribute type 11 has an invalid length. [ 616.059845][T15954] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2078'. [ 617.286948][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2089'. [ 617.419152][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 618.459034][T16013] FAULT_INJECTION: forcing a failure. [ 618.459034][T16013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 618.581800][T16013] CPU: 0 UID: 0 PID: 16013 Comm: syz.1.2093 Tainted: G I L syzkaller #0 PREEMPT(full) [ 618.581829][T16013] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 618.581840][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.581849][T16013] Call Trace: [ 618.581855][T16013] [ 618.581861][T16013] dump_stack_lvl+0x16c/0x1f0 [ 618.581890][T16013] should_fail_ex+0x512/0x640 [ 618.581910][T16013] should_fail_alloc_page+0xe7/0x130 [ 618.581934][T16013] prepare_alloc_pages+0x401/0x670 [ 618.581957][T16013] ? rcu_is_watching+0x12/0xc0 [ 618.581979][T16013] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 618.581997][T16013] ? kasan_save_stack+0x33/0x60 [ 618.582016][T16013] ? kasan_save_track+0x14/0x30 [ 618.582034][T16013] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 618.582051][T16013] ? ptlock_alloc+0x1f/0x70 [ 618.582065][T16013] ? pte_alloc_one+0x84/0x3d0 [ 618.582084][T16013] ? __pte_alloc+0x6d/0x3f0 [ 618.582102][T16013] ? do_anonymous_page+0x1092/0x2190 [ 618.582115][T16013] ? __handle_mm_fault+0x1ecf/0x2bb0 [ 618.582129][T16013] ? handle_mm_fault+0x3fe/0xad0 [ 618.582142][T16013] ? __get_user_pages+0x54e/0x3590 [ 618.582162][T16013] ? populate_vma_page_range+0x267/0x3f0 [ 618.582184][T16013] ? __mm_populate+0x1d8/0x380 [ 618.582205][T16013] ? vm_mmap_pgoff+0x37f/0x470 [ 618.582223][T16013] ? ksys_mmap_pgoff+0x32c/0x5c0 [ 618.582242][T16013] ? __x64_sys_mmap+0x125/0x190 [ 618.582260][T16013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 618.582278][T16013] ? css_rstat_updated+0x1d1/0x590 [ 618.582293][T16013] ? __pfx_css_rstat_updated+0x10/0x10 [ 618.582307][T16013] ? lru_gen_add_folio+0x1a4/0xef0 [ 618.582326][T16013] ? __lock_acquire+0x436/0x2890 [ 618.582341][T16013] ? __lock_acquire+0x436/0x2890 [ 618.582353][T16013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 618.582376][T16013] ? policy_nodemask+0xea/0x4e0 [ 618.582400][T16013] alloc_pages_mpol+0x1fb/0x550 [ 618.582422][T16013] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 618.582449][T16013] folio_alloc_mpol_noprof+0x36/0x2f0 [ 618.582465][T16013] vma_alloc_folio_noprof+0xed/0x1e0 [ 618.582479][T16013] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 618.582500][T16013] do_anonymous_page+0xc81/0x2190 [ 618.582522][T16013] __handle_mm_fault+0x1ecf/0x2bb0 [ 618.582542][T16013] ? __pfx___handle_mm_fault+0x10/0x10 [ 618.582558][T16013] ? __pte_offset_map_lock+0x174/0x310 [ 618.582578][T16013] ? find_held_lock+0x2b/0x80 [ 618.582602][T16013] ? follow_page_pte+0x5cf/0x1390 [ 618.582627][T16013] handle_mm_fault+0x3fe/0xad0 [ 618.582646][T16013] __get_user_pages+0x54e/0x3590 [ 618.582674][T16013] ? __pfx___get_user_pages+0x10/0x10 [ 618.582701][T16013] populate_vma_page_range+0x267/0x3f0 [ 618.582725][T16013] ? __pfx_populate_vma_page_range+0x10/0x10 [ 618.582747][T16013] ? __pfx_find_vma_intersection+0x10/0x10 [ 618.582773][T16013] __mm_populate+0x1d8/0x380 [ 618.582796][T16013] ? __pfx___mm_populate+0x10/0x10 [ 618.582819][T16013] ? up_write+0x2cf/0x4e0 [ 618.582844][T16013] vm_mmap_pgoff+0x37f/0x470 [ 618.582866][T16013] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 618.582889][T16013] ? __fget_files+0x20e/0x3c0 [ 618.582914][T16013] ksys_mmap_pgoff+0x32c/0x5c0 [ 618.582937][T16013] __x64_sys_mmap+0x125/0x190 [ 618.582953][T16013] do_syscall_64+0xcd/0xf80 [ 618.582978][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.582993][T16013] RIP: 0033:0x7f3c73d8f7c9 [ 618.583005][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.583018][T16013] RSP: 002b:00007f3c74cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 618.583032][T16013] RAX: ffffffffffffffda RBX: 00007f3c73fe6180 RCX: 00007f3c73d8f7c9 [ 618.583042][T16013] RDX: 0000000000000ffb RSI: 0000000000810006 RDI: 0000000000000000 [ 618.583050][T16013] RBP: 00007f3c73e13f91 R08: 0000000000000003 R09: 0000000000000000 [ 618.583058][T16013] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000000 [ 618.583067][T16013] R13: 00007f3c73fe6218 R14: 00007f3c73fe6180 R15: 00007fff066ec478 [ 618.583086][T16013] [ 619.623092][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.677611][T16019] hugetlbfs: syz.2.2094 (16019): Using mlock ulimits for SHM_HUGETLB is obsolete [ 620.427262][T16017] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2095'. [ 620.530213][T16015] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2095'. [ 620.698339][T16035] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 620.744457][T16035] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 621.009203][ T5832] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 621.009230][ T5832] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 621.024521][ T5832] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 621.024541][ T5832] Bluetooth: hci2: adv larger than maximum supported [ 621.031790][ T5832] Bluetooth: hci2: adv larger than maximum supported [ 621.038721][ T5832] Bluetooth: hci2: Malformed LE Event: 0x0d [ 621.074478][T16045] FAULT_INJECTION: forcing a failure. [ 621.074478][T16045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 621.277178][T16045] CPU: 0 UID: 0 PID: 16045 Comm: syz.0.2102 Tainted: G I L syzkaller #0 PREEMPT(full) [ 621.277208][T16045] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 621.277215][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.277225][T16045] Call Trace: [ 621.277230][T16045] [ 621.277236][T16045] dump_stack_lvl+0x16c/0x1f0 [ 621.277265][T16045] should_fail_ex+0x512/0x640 [ 621.277286][T16045] should_fail_alloc_page+0xe7/0x130 [ 621.277311][T16045] prepare_alloc_pages+0x401/0x670 [ 621.277336][T16045] ? __lock_acquire+0x436/0x2890 [ 621.277352][T16045] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 621.277372][T16045] ? __lock_acquire+0x436/0x2890 [ 621.277391][T16045] ? __lock_acquire+0x436/0x2890 [ 621.277404][T16045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.277425][T16045] ? register_lock_class+0x41/0x4b0 [ 621.277444][T16045] ? __lock_acquire+0x436/0x2890 [ 621.277459][T16045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 621.277483][T16045] ? policy_nodemask+0xea/0x4e0 [ 621.277507][T16045] alloc_pages_mpol+0x1fb/0x550 [ 621.277536][T16045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 621.277560][T16045] ? __pfx___mutex_lock+0x10/0x10 [ 621.277582][T16045] alloc_pages_noprof+0x131/0x390 [ 621.277605][T16045] __pmd_alloc+0x3b/0x9c0 [ 621.277631][T16045] huge_pte_alloc+0x41d/0x5b0 [ 621.277648][T16045] hugetlb_fault+0x36b/0x1730 [ 621.277667][T16045] ? __pfx_hugetlb_fault+0x10/0x10 [ 621.277689][T16045] ? find_vma+0xbf/0x140 [ 621.277708][T16045] ? __pfx_find_vma+0x10/0x10 [ 621.277730][T16045] handle_mm_fault+0x95d/0xad0 [ 621.277749][T16045] do_user_addr_fault+0x7a6/0x1370 [ 621.277768][T16045] ? kmalloc_reserve+0x18b/0x2c0 [ 621.277791][T16045] ? rcu_is_watching+0x12/0xc0 [ 621.277814][T16045] exc_page_fault+0x64/0xc0 [ 621.277836][T16045] asm_exc_page_fault+0x26/0x30 [ 621.277851][T16045] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 621.277870][T16045] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 621.277885][T16045] RSP: 0018:ffffc900042afd68 EFLAGS: 00050216 [ 621.277897][T16045] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000020 [ 621.277906][T16045] RDX: ffffed100b4c4ce4 RSI: 0000000000000000 RDI: ffff88805a626700 [ 621.277916][T16045] RBP: 0000000000000020 R08: 0000000000000001 R09: ffffed100b4c4ce3 [ 621.277924][T16045] R10: ffff88805a62671f R11: ffff88805c2529b0 R12: 0000000000000000 [ 621.277933][T16045] R13: ffff88805a626700 R14: 0000000000000002 R15: ffff88807e541640 [ 621.277952][T16045] _copy_from_user+0x98/0xd0 [ 621.277969][T16045] do_mq_notify+0x3bc/0xfd0 [ 621.277984][T16045] ? __might_fault+0xe3/0x190 [ 621.278001][T16045] ? __pfx_do_mq_notify+0x10/0x10 [ 621.278020][T16045] __x64_sys_mq_notify+0x100/0x170 [ 621.278036][T16045] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 621.278057][T16045] ? rcu_is_watching+0x12/0xc0 [ 621.278078][T16045] do_syscall_64+0xcd/0xf80 [ 621.278102][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.278117][T16045] RIP: 0033:0x7fd5c758f7c9 [ 621.278129][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.278143][T16045] RSP: 002b:00007fd5c836e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 621.278156][T16045] RAX: ffffffffffffffda RBX: 00007fd5c77e6090 RCX: 00007fd5c758f7c9 [ 621.278165][T16045] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 621.278174][T16045] RBP: 00007fd5c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.278183][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.278191][T16045] R13: 00007fd5c77e6128 R14: 00007fd5c77e6090 R15: 00007ffe1f744638 [ 621.278211][T16045] [ 622.177909][T16058] netlink: 'syz.1.2105': attribute type 19 has an invalid length. [ 622.248225][T16058] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2105'. [ 625.800751][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2119'. [ 626.107630][T16121] random: crng reseeded on system resumption [ 626.821434][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 626.932193][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 626.996962][T16136] vivid-007: ================= START STATUS ================= [ 627.056691][T16136] vivid-007: Generate PTS: true [ 627.097746][T16136] vivid-007: Generate SCR: true [ 627.123190][T16136] tpg source WxH: 320x240 (Y'CbCr) [ 627.159614][T16136] tpg field: 1 [ 627.167370][T16136] tpg crop: (0,0)/320x240 [ 627.197606][T16136] tpg compose: (0,0)/320x240 [ 627.202448][T16136] tpg colorspace: 8 [ 627.291912][T16136] tpg transfer function: 0/0 [ 627.350700][T16136] tpg Y'CbCr encoding: 0/0 [ 627.355184][T16136] tpg quantization: 0/0 [ 627.438132][T16136] tpg RGB range: 0/2 [ 627.490198][T16136] vivid-007: ================== END STATUS ================== [ 628.302437][ T5832] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 628.302463][ T5832] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 628.318403][ T5832] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 628.318443][ T5832] Bluetooth: hci4: adv larger than maximum supported [ 628.325630][ T5832] Bluetooth: hci4: adv larger than maximum supported [ 628.332683][ T5832] Bluetooth: hci4: Malformed LE Event: 0x0d [ 628.372615][T16164] FAULT_INJECTION: forcing a failure. [ 628.372615][T16164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.503056][T16164] CPU: 0 UID: 0 PID: 16164 Comm: syz.4.2129 Tainted: G I L syzkaller #0 PREEMPT(full) [ 628.503088][T16164] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 628.503095][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.503104][T16164] Call Trace: [ 628.503110][T16164] [ 628.503116][T16164] dump_stack_lvl+0x16c/0x1f0 [ 628.503146][T16164] should_fail_ex+0x512/0x640 [ 628.503166][T16164] should_fail_alloc_page+0xe7/0x130 [ 628.503192][T16164] prepare_alloc_pages+0x401/0x670 [ 628.503216][T16164] ? __lock_acquire+0x436/0x2890 [ 628.503232][T16164] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 628.503252][T16164] ? __lock_acquire+0x436/0x2890 [ 628.503271][T16164] ? __lock_acquire+0x436/0x2890 [ 628.503284][T16164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.503305][T16164] ? register_lock_class+0x41/0x4b0 [ 628.503325][T16164] ? __lock_acquire+0x436/0x2890 [ 628.503340][T16164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.503365][T16164] ? policy_nodemask+0xea/0x4e0 [ 628.503389][T16164] alloc_pages_mpol+0x1fb/0x550 [ 628.503412][T16164] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 628.503452][T16164] ? __pfx___mutex_lock+0x10/0x10 [ 628.503472][T16164] alloc_pages_noprof+0x131/0x390 [ 628.503496][T16164] __pmd_alloc+0x3b/0x9c0 [ 628.503522][T16164] huge_pte_alloc+0x41d/0x5b0 [ 628.503541][T16164] hugetlb_fault+0x36b/0x1730 [ 628.503565][T16164] ? __pfx_hugetlb_fault+0x10/0x10 [ 628.503589][T16164] ? find_vma+0xbf/0x140 [ 628.503610][T16164] ? __pfx_find_vma+0x10/0x10 [ 628.503633][T16164] handle_mm_fault+0x95d/0xad0 [ 628.503654][T16164] do_user_addr_fault+0x7a6/0x1370 [ 628.503672][T16164] ? kmalloc_reserve+0x18b/0x2c0 [ 628.503697][T16164] ? rcu_is_watching+0x12/0xc0 [ 628.503721][T16164] exc_page_fault+0x64/0xc0 [ 628.503745][T16164] asm_exc_page_fault+0x26/0x30 [ 628.503759][T16164] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 628.503778][T16164] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 628.503792][T16164] RSP: 0018:ffffc9000494fd68 EFLAGS: 00050216 [ 628.503804][T16164] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000020 [ 628.503813][T16164] RDX: ffffed100c8f7754 RSI: 0000000000000000 RDI: ffff8880647bba80 [ 628.503822][T16164] RBP: 0000000000000020 R08: 0000000000000001 R09: ffffed100c8f7753 [ 628.503831][T16164] R10: ffff8880647bba9f R11: ffff88805912c830 R12: 0000000000000000 [ 628.503840][T16164] R13: ffff8880647bba80 R14: 0000000000000002 R15: ffff88809921ba00 [ 628.503860][T16164] _copy_from_user+0x98/0xd0 [ 628.503878][T16164] do_mq_notify+0x3bc/0xfd0 [ 628.503892][T16164] ? __might_fault+0xe3/0x190 [ 628.503909][T16164] ? __pfx_do_mq_notify+0x10/0x10 [ 628.503929][T16164] __x64_sys_mq_notify+0x100/0x170 [ 628.503945][T16164] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 628.503966][T16164] ? rcu_is_watching+0x12/0xc0 [ 628.503988][T16164] do_syscall_64+0xcd/0xf80 [ 628.504013][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.504028][T16164] RIP: 0033:0x7fe3b0b8f7c9 [ 628.504041][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.504055][T16164] RSP: 002b:00007fe3b199d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 628.504068][T16164] RAX: ffffffffffffffda RBX: 00007fe3b0de6090 RCX: 00007fe3b0b8f7c9 [ 628.504081][T16164] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 628.504091][T16164] RBP: 00007fe3b0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.504100][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.504109][T16164] R13: 00007fe3b0de6128 R14: 00007fe3b0de6090 R15: 00007fffb9c630c8 [ 628.504129][T16164] [ 629.687948][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.697434][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.390046][T16230] zswap: compressor û not available [ 632.674830][T16240] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 633.465242][T16248] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2148'. [ 633.629035][T16245] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2148'. [ 633.971952][T16245] netlink: 250 bytes leftover after parsing attributes in process `syz.2.2148'. [ 634.251283][T16279] Invalid ELF header magic: != ELF [ 634.449658][T16285] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2159'. [ 634.771007][T16267] sp0: Synchronizing with TNC [ 638.065180][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.105772][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.179098][T16329] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 638.703513][ T5832] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 638.712629][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 638.722052][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Tainted: G I L syzkaller #0 PREEMPT(full) [ 638.722081][ T5832] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 638.722087][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.722099][ T5832] Workqueue: hci3 hci_rx_work [ 638.722125][ T5832] Call Trace: [ 638.722131][ T5832] [ 638.722138][ T5832] dump_stack_lvl+0x16c/0x1f0 [ 638.722165][ T5832] sysfs_warn_dup+0x7f/0xa0 [ 638.722183][ T5832] sysfs_create_dir_ns+0x24b/0x2b0 [ 638.722199][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 638.722215][ T5832] ? find_held_lock+0x2b/0x80 [ 638.722239][ T5832] ? do_raw_spin_unlock+0x172/0x230 [ 638.722258][ T5832] kobject_add_internal+0x2c4/0x9d0 [ 638.722276][ T5832] kobject_add+0x16e/0x240 [ 638.722292][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 638.722310][ T5832] ? kobject_put+0xaf/0x6f0 [ 638.722322][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 638.722348][ T5832] device_add+0x288/0x1980 [ 638.722371][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 638.722393][ T5832] ? __pfx_device_add+0x10/0x10 [ 638.722429][ T5832] ? mgmt_send_event_skb+0x2fb/0x460 [ 638.722455][ T5832] hci_conn_add_sysfs+0x1a8/0x260 [ 638.722479][ T5832] le_conn_complete_evt+0x11ed/0x1fa0 [ 638.722505][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 638.722525][ T5832] ? __pfx_bt_warn+0x10/0x10 [ 638.722547][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 638.722572][ T5832] hci_le_meta_evt+0x357/0x610 [ 638.722594][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 638.722617][ T5832] hci_event_packet+0x685/0x1210 [ 638.722648][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 638.722673][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 638.722696][ T5832] ? kcov_remote_start+0x399/0x680 [ 638.722719][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 638.722748][ T5832] hci_rx_work+0x2c9/0x1020 [ 638.722771][ T5832] process_one_work+0x9ba/0x1b20 [ 638.722795][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 638.722816][ T5832] ? assign_work+0x1a0/0x250 [ 638.722833][ T5832] worker_thread+0x6c8/0xf10 [ 638.722855][ T5832] ? __kthread_parkme+0x19e/0x250 [ 638.722877][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 638.722893][ T5832] kthread+0x3c5/0x780 [ 638.722907][ T5832] ? __pfx_kthread+0x10/0x10 [ 638.722923][ T5832] ? rcu_is_watching+0x12/0xc0 [ 638.722943][ T5832] ? __pfx_kthread+0x10/0x10 [ 638.722958][ T5832] ret_from_fork+0x983/0xb10 [ 638.722974][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 638.722990][ T5832] ? __switch_to+0x7af/0x10d0 [ 638.723009][ T5832] ? __pfx_kthread+0x10/0x10 [ 638.723024][ T5832] ret_from_fork_asm+0x1a/0x30 [ 638.723056][ T5832] [ 638.723079][ T5832] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 639.022741][ T5832] Bluetooth: hci3: failed to register connection device [ 639.034295][ T5832] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 639.041782][ T5832] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 639.260567][T16314] Process accounting paused [ 643.324028][T16381] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2181'. [ 643.694307][T16400] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2181'. [ 643.930375][T16387] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2181'. [ 646.727636][T16446] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 647.503722][T16428] Invalid ELF header magic: != ELF [ 647.687752][T16426] delete_channel: no stack [ 647.739644][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2197'. [ 647.832668][T16461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.935927][T16461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.056448][T16461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.139928][T16461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.121159][T16476] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2202'. [ 649.517509][T16480] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2202'. [ 650.316594][T16498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2207'. [ 651.560473][T16519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 651.868105][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 654.918046][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2226'. [ 655.208408][T16582] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 655.310572][T16582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2228'. [ 658.453443][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 658.501995][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 659.135212][T16626] Invalid ELF header magic: != ELF [ 659.153309][T16654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.204146][T16654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 659.239634][T16654] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 659.325949][T16654] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 659.418023][T16654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 661.177282][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 661.257269][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 661.468147][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 661.499075][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.336571][T16726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.535039][T16713] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2253'. [ 663.236853][ T5832] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 663.236877][ T5832] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 663.253419][ T5832] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 663.253442][ T5832] Bluetooth: hci3: adv larger than maximum supported [ 663.262059][ T5832] Bluetooth: hci3: adv larger than maximum supported [ 663.269572][ T5832] Bluetooth: hci3: Malformed LE Event: 0x0d [ 663.338158][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 664.915729][T16797] FAULT_INJECTION: forcing a failure. [ 664.915729][T16797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 664.960511][T16797] CPU: 0 UID: 0 PID: 16797 Comm: syz.0.2273 Tainted: G I L syzkaller #0 PREEMPT(full) [ 664.960542][T16797] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 664.960549][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.960559][T16797] Call Trace: [ 664.960564][T16797] [ 664.960571][T16797] dump_stack_lvl+0x16c/0x1f0 [ 664.960602][T16797] should_fail_ex+0x512/0x640 [ 664.960623][T16797] get_futex_key+0x1d0/0x15f0 [ 664.960643][T16797] ? __pfx_get_futex_key+0x10/0x10 [ 664.960659][T16797] ? find_held_lock+0x2b/0x80 [ 664.960685][T16797] futex_wake+0xea/0x530 [ 664.960707][T16797] ? __pfx_futex_wake+0x10/0x10 [ 664.960735][T16797] do_futex+0x1e3/0x350 [ 664.960753][T16797] ? __pfx_do_futex+0x10/0x10 [ 664.960774][T16797] __x64_sys_futex+0x1e0/0x4c0 [ 664.960792][T16797] ? fdget_pos+0x2b8/0x370 [ 664.960815][T16797] ? __pfx___x64_sys_futex+0x10/0x10 [ 664.960830][T16797] ? ksys_write+0x1ac/0x250 [ 664.960851][T16797] ? __pfx_ksys_write+0x10/0x10 [ 664.960877][T16797] do_syscall_64+0xcd/0xf80 [ 664.960902][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.960925][T16797] RIP: 0033:0x7fd5c758f7c9 [ 664.960939][T16797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.960956][T16797] RSP: 002b:00007fd5c836e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 664.960971][T16797] RAX: ffffffffffffffda RBX: 00007fd5c77e6098 RCX: 00007fd5c758f7c9 [ 664.960980][T16797] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c77e609c [ 664.960990][T16797] RBP: 00007fd5c77e6090 R08: 00007fd5c8390000 R09: 0000000000000000 [ 664.960999][T16797] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 664.961009][T16797] R13: 00007fd5c77e6128 R14: 00007ffe1f744550 R15: 00007ffe1f744638 [ 664.961029][T16797] [ 665.456048][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 665.629988][T16801] FAULT_INJECTION: forcing a failure. [ 665.629988][T16801] name failslab, interval 1, probability 0, space 0, times 0 [ 665.653634][T16801] CPU: 0 UID: 0 PID: 16801 Comm: syz.0.2276 Tainted: G I L syzkaller #0 PREEMPT(full) [ 665.653667][T16801] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 665.653674][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.653684][T16801] Call Trace: [ 665.653689][T16801] [ 665.653696][T16801] dump_stack_lvl+0x16c/0x1f0 [ 665.653725][T16801] should_fail_ex+0x512/0x640 [ 665.653743][T16801] ? __kmalloc_cache_noprof+0x5f/0x800 [ 665.653763][T16801] should_failslab+0xc2/0x120 [ 665.653786][T16801] __kmalloc_cache_noprof+0x80/0x800 [ 665.653803][T16801] ? input_allocate_device+0x44/0x350 [ 665.653827][T16801] ? input_allocate_device+0x44/0x350 [ 665.653845][T16801] input_allocate_device+0x44/0x350 [ 665.653871][T16801] uinput_write+0x9cc/0xff0 [ 665.653891][T16801] ? __pfx_uinput_write+0x10/0x10 [ 665.653908][T16801] ? bpf_lsm_file_permission+0x9/0x10 [ 665.653925][T16801] ? security_file_permission+0x71/0x210 [ 665.653946][T16801] ? rw_verify_area+0xcf/0x6c0 [ 665.653966][T16801] ? __pfx_uinput_write+0x10/0x10 [ 665.653980][T16801] vfs_write+0x2a0/0x11d0 [ 665.654004][T16801] ? __pfx_vfs_write+0x10/0x10 [ 665.654023][T16801] ? find_held_lock+0x2b/0x80 [ 665.654043][T16801] ? __fget_files+0x204/0x3c0 [ 665.654066][T16801] ? __fget_files+0x20e/0x3c0 [ 665.654091][T16801] ksys_write+0x1f8/0x250 [ 665.654112][T16801] ? __pfx_ksys_write+0x10/0x10 [ 665.654137][T16801] do_syscall_64+0xcd/0xf80 [ 665.654162][T16801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.654177][T16801] RIP: 0033:0x7fd5c758f7c9 [ 665.654191][T16801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.654205][T16801] RSP: 002b:00007fd5c838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 665.654220][T16801] RAX: ffffffffffffffda RBX: 00007fd5c77e5fa0 RCX: 00007fd5c758f7c9 [ 665.654230][T16801] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000004 [ 665.654238][T16801] RBP: 00007fd5c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 665.654247][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.654255][T16801] R13: 00007fd5c77e6038 R14: 00007fd5c77e5fa0 R15: 00007ffe1f744638 [ 665.654275][T16801] [ 666.553987][T16810] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 666.627401][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2278'. [ 670.010787][T16885] FAULT_INJECTION: forcing a failure. [ 670.010787][T16885] name failslab, interval 1, probability 0, space 0, times 0 [ 670.028530][T16882] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2295'. [ 670.055928][T16885] CPU: 0 UID: 0 PID: 16885 Comm: syz.0.2296 Tainted: G I L syzkaller #0 PREEMPT(full) [ 670.055958][T16885] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 670.055964][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.055974][T16885] Call Trace: [ 670.055979][T16885] [ 670.055986][T16885] dump_stack_lvl+0x16c/0x1f0 [ 670.056014][T16885] should_fail_ex+0x512/0x640 [ 670.056032][T16885] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 670.056056][T16885] should_failslab+0xc2/0x120 [ 670.056079][T16885] __kmalloc_cache_node_noprof+0x83/0x830 [ 670.056100][T16885] ? __get_vm_area_node+0x101/0x330 [ 670.056126][T16885] ? __get_vm_area_node+0x101/0x330 [ 670.056147][T16885] __get_vm_area_node+0x101/0x330 [ 670.056172][T16885] __vmalloc_node_range_noprof+0x247/0x16b0 [ 670.056187][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.056212][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.056231][T16885] ? set_next_entity+0x11a/0x9d0 [ 670.056249][T16885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 670.056266][T16885] ? __lock_acquire+0x436/0x2890 [ 670.056281][T16885] ? trace_ignore_this_task+0xbc/0x100 [ 670.056305][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.056323][T16885] __vmalloc_node_noprof+0xad/0xf0 [ 670.056337][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.056357][T16885] __vmalloc_noprof+0xa3/0x120 [ 670.056371][T16885] ? __pfx___vmalloc_noprof+0x10/0x10 [ 670.056386][T16885] ? rcu_is_watching+0x12/0xc0 [ 670.056408][T16885] ? apparmor_capable+0x1d7/0x4e0 [ 670.056425][T16885] bpf_prog_alloc_no_stats+0x58/0x600 [ 670.056442][T16885] ? security_capable+0x7e/0x260 [ 670.056467][T16885] bpf_prog_alloc+0x3b/0x230 [ 670.056483][T16885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 670.056506][T16885] bpf_prog_load+0x19bc/0x2cc0 [ 670.056534][T16885] ? __pfx_bpf_prog_load+0x10/0x10 [ 670.056555][T16885] ? __lock_acquire+0x436/0x2890 [ 670.056570][T16885] ? event_filter_pid_sched_wakeup_probe_post+0x103/0x270 [ 670.056594][T16885] ? preempt_schedule_thunk+0x16/0x30 [ 670.056621][T16885] ? bpf_lsm_bpf+0x9/0x10 [ 670.056641][T16885] __sys_bpf+0x3e72/0x4980 [ 670.056654][T16885] ? futex_private_hash_put+0x160/0x1b0 [ 670.056672][T16885] ? __pfx___sys_bpf+0x10/0x10 [ 670.056695][T16885] ? __pfx_futex_wake+0x10/0x10 [ 670.056725][T16885] ? do_futex+0x122/0x350 [ 670.056751][T16885] ? fput+0x70/0xf0 [ 670.056768][T16885] ? xfd_validate_state+0x61/0x180 [ 670.056781][T16885] ? __pfx_ksys_write+0x10/0x10 [ 670.056804][T16885] __x64_sys_bpf+0x78/0xc0 [ 670.056817][T16885] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.056841][T16885] do_syscall_64+0xcd/0xf80 [ 670.056865][T16885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.056882][T16885] RIP: 0033:0x7fd5c758f7c9 [ 670.056895][T16885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.056910][T16885] RSP: 002b:00007fd5c838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.056927][T16885] RAX: ffffffffffffffda RBX: 00007fd5c77e5fa0 RCX: 00007fd5c758f7c9 [ 670.056938][T16885] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005 [ 670.056947][T16885] RBP: 00007fd5c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 670.056956][T16885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.056965][T16885] R13: 00007fd5c77e6038 R14: 00007fd5c77e5fa0 R15: 00007ffe1f744638 [ 670.056984][T16885] [ 670.391160][T16885] syz.0.2296: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 670.407514][T16885] CPU: 0 UID: 0 PID: 16885 Comm: syz.0.2296 Tainted: G I L syzkaller #0 PREEMPT(full) [ 670.407541][T16885] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 670.407547][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.407556][T16885] Call Trace: [ 670.407564][T16885] [ 670.407570][T16885] dump_stack_lvl+0x16c/0x1f0 [ 670.407598][T16885] warn_alloc+0x248/0x3a0 [ 670.407619][T16885] ? __pfx_warn_alloc+0x10/0x10 [ 670.407634][T16885] ? trace_kmalloc+0x2b/0xb0 [ 670.407661][T16885] ? __kmalloc_cache_node_noprof+0x2ed/0x830 [ 670.407688][T16885] ? __kasan_kmalloc+0x8a/0xb0 [ 670.407710][T16885] ? __get_vm_area_node+0x208/0x330 [ 670.407737][T16885] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 670.407758][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.407779][T16885] ? set_next_entity+0x11a/0x9d0 [ 670.407796][T16885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 670.407814][T16885] ? __lock_acquire+0x436/0x2890 [ 670.407829][T16885] ? trace_ignore_this_task+0xbc/0x100 [ 670.407853][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.407871][T16885] __vmalloc_node_noprof+0xad/0xf0 [ 670.407886][T16885] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 670.407906][T16885] __vmalloc_noprof+0xa3/0x120 [ 670.407920][T16885] ? __pfx___vmalloc_noprof+0x10/0x10 [ 670.407934][T16885] ? rcu_is_watching+0x12/0xc0 [ 670.407956][T16885] ? apparmor_capable+0x1d7/0x4e0 [ 670.407973][T16885] bpf_prog_alloc_no_stats+0x58/0x600 [ 670.407991][T16885] ? security_capable+0x7e/0x260 [ 670.408016][T16885] bpf_prog_alloc+0x3b/0x230 [ 670.408032][T16885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 670.408055][T16885] bpf_prog_load+0x19bc/0x2cc0 [ 670.408083][T16885] ? __pfx_bpf_prog_load+0x10/0x10 [ 670.408104][T16885] ? __lock_acquire+0x436/0x2890 [ 670.408118][T16885] ? event_filter_pid_sched_wakeup_probe_post+0x103/0x270 [ 670.408143][T16885] ? preempt_schedule_thunk+0x16/0x30 [ 670.408170][T16885] ? bpf_lsm_bpf+0x9/0x10 [ 670.408191][T16885] __sys_bpf+0x3e72/0x4980 [ 670.408204][T16885] ? futex_private_hash_put+0x160/0x1b0 [ 670.408222][T16885] ? __pfx___sys_bpf+0x10/0x10 [ 670.408237][T16885] ? __pfx_futex_wake+0x10/0x10 [ 670.408264][T16885] ? do_futex+0x122/0x350 [ 670.408290][T16885] ? fput+0x70/0xf0 [ 670.408304][T16885] ? xfd_validate_state+0x61/0x180 [ 670.408317][T16885] ? __pfx_ksys_write+0x10/0x10 [ 670.408341][T16885] __x64_sys_bpf+0x78/0xc0 [ 670.408354][T16885] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.408378][T16885] do_syscall_64+0xcd/0xf80 [ 670.408402][T16885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.408418][T16885] RIP: 0033:0x7fd5c758f7c9 [ 670.408431][T16885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.408445][T16885] RSP: 002b:00007fd5c838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.408459][T16885] RAX: ffffffffffffffda RBX: 00007fd5c77e5fa0 RCX: 00007fd5c758f7c9 [ 670.408469][T16885] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005 [ 670.408478][T16885] RBP: 00007fd5c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 670.408487][T16885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.408496][T16885] R13: 00007fd5c77e6038 R14: 00007fd5c77e5fa0 R15: 00007ffe1f744638 [ 670.408515][T16885] [ 670.408522][T16885] Mem-Info: [ 670.737056][T16885] active_anon:7289 inactive_anon:24200 isolated_anon:0 [ 670.737056][T16885] active_file:19563 inactive_file:37923 isolated_file:0 [ 670.737056][T16885] unevictable:768 dirty:850 writeback:0 [ 670.737056][T16885] slab_reclaimable:12666 slab_unreclaimable:95823 [ 670.737056][T16885] mapped:25636 shmem:17143 pagetables:1410 [ 670.737056][T16885] sec_pagetables:0 bounce:0 [ 670.737056][T16885] kernel_misc_reclaimable:0 [ 670.737056][T16885] free:1276896 free_pcp:24124 free_cma:0 [ 670.788861][T16885] Node 0 active_anon:29156kB inactive_anon:96800kB active_file:78192kB inactive_file:151564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102492kB dirty:3400kB writeback:0kB shmem:67036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13472kB pagetables:5496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 670.821259][T16885] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 670.887186][T16885] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.920734][T16863] Process accounting resumed [ 670.997073][T16885] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 671.010815][T16885] Node 0 DMA32 free:1202740kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29156kB inactive_anon:96748kB active_file:78192kB inactive_file:151564kB unevictable:1536kB writepending:3400kB zspages:740kB present:3129332kB managed:2541012kB mlocked:0kB bounce:0kB free_pcp:83388kB local_pcp:83388kB free_cma:0kB [ 671.117467][T16885] lowmem_reserve[]: 0 0 1 1 1 [ 671.146092][T16885] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 671.288672][T16885] lowmem_reserve[]: 0 0 0 0 0 [ 671.298760][T16885] Node 1 Normal free:3889484kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13116kB local_pcp:13116kB free_cma:0kB [ 671.393576][T16885] lowmem_reserve[]: 0 0 0 0 0 [ 671.517370][T16885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 671.593035][T16885] Node 0 DMA32: 6641*4kB (UM) 5582*8kB (UME) 3360*16kB (UM) 2856*32kB (UM) 1487*64kB (UME) 983*128kB (UME) 583*256kB (UM) 352*512kB (UM) 246*1024kB (UM) 16*2048kB (UE) 38*4096kB (UM) = 1207156kB [ 671.718122][T16885] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 671.730788][T16911] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 671.826862][T16885] Node 1 Normal: 125*4kB (UME) 39*8kB (UME) 42*16kB (UME) 238*32kB (UME) 115*64kB (UME) 38*128kB (UME) 16*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 3*2048kB (UME) 940*4096kB (M) = 3889484kB [ 672.130725][T16885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.268066][T16879] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2295'. [ 672.381830][T16885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 672.600272][T16885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.647322][T16885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 672.694917][T16885] 74688 total pagecache pages [ 672.727192][T16885] 53 pages in swap cache [ 672.731452][T16885] Free swap = 117780kB [ 672.760365][T16885] Total swap = 124996kB [ 672.764555][T16885] 2097051 pages RAM [ 672.796078][T16885] 0 pages HighMem/MovableOnly [ 672.806015][T16885] 429772 pages reserved [ 672.824105][T16885] 0 pages cma reserved [ 673.645853][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 674.230546][T16938] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2311'. [ 676.705011][T16989] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2322'. [ 676.801068][T16987] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2322'. [ 677.238766][T17000] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2323'. [ 677.438602][T17001] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2323'. [ 678.390271][T17010] bridge0: port 3(veth1_macvtap) entered blocking state [ 678.428107][T17010] bridge0: port 3(veth1_macvtap) entered disabled state [ 678.435352][T17010] veth1_macvtap: entered allmulticast mode [ 678.488952][T17010] veth1_macvtap: left allmulticast mode [ 682.287938][T17043] FAULT_INJECTION: forcing a failure. [ 682.287938][T17043] name failslab, interval 1, probability 0, space 0, times 0 [ 682.430186][T17043] CPU: 0 UID: 0 PID: 17043 Comm: syz.1.2336 Tainted: G I L syzkaller #0 PREEMPT(full) [ 682.430216][T17043] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 682.430223][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.430233][T17043] Call Trace: [ 682.430238][T17043] [ 682.430245][T17043] dump_stack_lvl+0x16c/0x1f0 [ 682.430276][T17043] should_fail_ex+0x512/0x640 [ 682.430295][T17043] ? kmem_cache_alloc_noprof+0x62/0x770 [ 682.430316][T17043] should_failslab+0xc2/0x120 [ 682.430340][T17043] kmem_cache_alloc_noprof+0x83/0x770 [ 682.430358][T17043] ? fasync_helper+0x3d/0xd0 [ 682.430379][T17043] ? fasync_helper+0x3d/0xd0 [ 682.430394][T17043] fasync_helper+0x3d/0xd0 [ 682.430410][T17043] pipe_fasync+0xc7/0x200 [ 682.430432][T17043] ? __pfx_pipe_fasync+0x10/0x10 [ 682.430451][T17043] do_fcntl+0xc56/0x1660 [ 682.430477][T17043] ? __pfx_do_fcntl+0x10/0x10 [ 682.430499][T17043] ? tomoyo_file_fcntl+0xa5/0xc0 [ 682.430527][T17043] __x64_sys_fcntl+0x163/0x200 [ 682.430545][T17043] do_syscall_64+0xcd/0xf80 [ 682.430570][T17043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.430585][T17043] RIP: 0033:0x7f3c73d8f7c9 [ 682.430598][T17043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.430613][T17043] RSP: 002b:00007f3c74cfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 682.430628][T17043] RAX: ffffffffffffffda RBX: 00007f3c73fe5fa0 RCX: 00007f3c73d8f7c9 [ 682.430639][T17043] RDX: fffffffffffffffc RSI: 0000000000000004 RDI: ff80000000000000 [ 682.430648][T17043] RBP: 00007f3c73e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 682.430658][T17043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.430667][T17043] R13: 00007f3c73fe6038 R14: 00007f3c73fe5fa0 R15: 00007fff066ec478 [ 682.430686][T17043] [ 683.290898][T17082] FAULT_INJECTION: forcing a failure. [ 683.290898][T17082] name fail_futex, interval 1, probability 0, space 0, times 0 [ 683.374521][T17082] CPU: 0 UID: 0 PID: 17082 Comm: syz.0.2344 Tainted: G I L syzkaller #0 PREEMPT(full) [ 683.374552][T17082] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 683.374559][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.374569][T17082] Call Trace: [ 683.374575][T17082] [ 683.374581][T17082] dump_stack_lvl+0x16c/0x1f0 [ 683.374612][T17082] should_fail_ex+0x512/0x640 [ 683.374632][T17082] get_futex_key+0x1d0/0x15f0 [ 683.374651][T17082] ? __pfx_get_futex_key+0x10/0x10 [ 683.374674][T17082] futex_wake+0xea/0x530 [ 683.374692][T17082] ? lockdep_hardirqs_on+0x7c/0x110 [ 683.374718][T17082] ? __pfx_futex_wake+0x10/0x10 [ 683.374739][T17082] ? kmem_cache_free+0x2d8/0x770 [ 683.374758][T17082] ? kfree_skbmem+0x1a4/0x1f0 [ 683.374776][T17082] ? kfree_skbmem+0x1a4/0x1f0 [ 683.374788][T17082] ? kfree_skbmem+0x1a4/0x1f0 [ 683.374804][T17082] do_futex+0x1e3/0x350 [ 683.374826][T17082] ? __pfx_do_futex+0x10/0x10 [ 683.374848][T17082] ? __pfx_do_mq_notify+0x10/0x10 [ 683.374867][T17082] __x64_sys_futex+0x1e0/0x4c0 [ 683.374887][T17082] ? __pfx___x64_sys_futex+0x10/0x10 [ 683.374912][T17082] do_syscall_64+0xcd/0xf80 [ 683.374936][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.374952][T17082] RIP: 0033:0x7fd5c758f7c9 [ 683.374965][T17082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.374980][T17082] RSP: 002b:00007fd5c836e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 683.374995][T17082] RAX: ffffffffffffffda RBX: 00007fd5c77e6098 RCX: 00007fd5c758f7c9 [ 683.375004][T17082] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c77e609c [ 683.375012][T17082] RBP: 00007fd5c77e6090 R08: 00007fd5c8390000 R09: 0000000000000000 [ 683.375021][T17082] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 683.375030][T17082] R13: 00007fd5c77e6128 R14: 00007ffe1f744550 R15: 00007ffe1f744638 [ 683.375049][T17082] [ 684.458334][ T30] audit: type=1800 audit(4294967376.289:29): pid=17090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2346" name="lu_gp_id" dev="configfs" ino=71477 res=0 errno=0 [ 685.041710][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 685.109475][T17089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 685.172835][T17089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 685.249705][T17089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 685.297282][T17089] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.427295][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 685.510662][T17112] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 685.681156][T17112] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2351'. [ 686.069081][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.081142][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.089380][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.097053][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.104891][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.460047][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.177218][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 687.274165][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 687.281717][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.137279][ T5832] Bluetooth: hci0: command tx timeout [ 690.227432][ T5832] Bluetooth: hci0: command tx timeout [ 691.022271][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.029055][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.102142][T12786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.310924][T17115] chnl_net:caif_netlink_parms(): no params data found [ 691.337963][ T5832] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 691.337986][ T5832] Bluetooth: hci3: unexpected subevent 0x06 length: 725 > 10 [ 691.602049][T12786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.920299][T12786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.249988][T17115] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.268153][T17115] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.304069][ T5832] Bluetooth: hci0: command tx timeout [ 692.317332][T17115] bridge_slave_0: entered allmulticast mode [ 692.325089][T17115] bridge_slave_0: entered promiscuous mode [ 692.408184][T17115] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.415350][T17115] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.448731][T17115] bridge_slave_1: entered allmulticast mode [ 692.471549][T17115] bridge_slave_1: entered promiscuous mode [ 692.627822][T17115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.667710][T12786] bridge_slave_1: left allmulticast mode [ 692.684339][T12786] bridge_slave_1: left promiscuous mode [ 692.723656][T12786] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.843372][T12786] bridge_slave_0: left allmulticast mode [ 692.864184][T12786] bridge_slave_0: left promiscuous mode [ 692.884896][T12786] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.038990][T17156] hub 8-0:1.0: USB hub found [ 693.060359][T17162] __vm_enough_memory: pid: 17162, comm: syz.1.2364, bytes: 4398046511104 not enough memory for the allocation [ 693.156279][T17156] hub 8-0:1.0: 1 port detected [ 693.427134][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 693.963430][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2366'. [ 694.378291][ T5832] Bluetooth: hci0: command tx timeout [ 694.793216][T12786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.838440][T12786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.906548][T12786] bond0 (unregistering): Released all slaves [ 694.979224][T17115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.115293][T17172] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2367'. [ 695.291446][T12786] &#$@\]\-: left promiscuous mode [ 695.466301][T17115] team0: Port device team_slave_0 added [ 695.520110][T12786] HfR: left promiscuous mode [ 695.614912][T17115] team0: Port device team_slave_1 added [ 695.959896][T17115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.966860][T17115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.095304][T17115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.305553][T17115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.331544][T17115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.417264][T17115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.752765][T17115] hsr_slave_0: entered promiscuous mode [ 696.769131][T17115] hsr_slave_1: entered promiscuous mode [ 697.815542][T12786] hsr_slave_0: left promiscuous mode [ 697.848402][T12786] hsr_slave_1: left promiscuous mode [ 697.873456][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.911385][T12786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.949688][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.963724][T12786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.008106][T12786] veth0_macvtap: left promiscuous mode [ 699.720257][T17234] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2375'. [ 699.904320][T17241] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.253986][T17261] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2377'. [ 701.619752][T17270] Process accounting paused [ 701.735121][T17115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.868365][T17277] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 701.958020][T17115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 702.065465][T17115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 702.249514][T17115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 704.318686][T17115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.391250][T17115] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.549620][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.556778][ T9934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.700537][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.707695][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.538783][T17115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.765624][T17360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2385'. [ 706.427836][T17115] veth0_vlan: entered promiscuous mode [ 706.489211][T17115] veth1_vlan: entered promiscuous mode [ 706.519297][T17353] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2383'. [ 706.607576][T17115] veth0_macvtap: entered promiscuous mode [ 706.651609][T17115] veth1_macvtap: entered promiscuous mode [ 706.748780][T17115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.813359][T17115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.933419][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.062881][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.136486][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.191603][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.251935][T17387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.437181][T17390] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.454526][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.495702][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.583530][T11502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.604942][T11502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.772059][T17391] syz.1.2389 (17391): attempted to duplicate a private mapping with mremap. This is not supported. [ 708.798675][T17397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 708.824217][T17397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 708.845653][T17397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 708.870267][T17397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 708.911512][T17397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 709.067743][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 709.078585][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 709.086691][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 709.097919][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.105330][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 709.880534][ T6220] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.062839][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 710.400912][ T6220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.503325][T17403] chnl_net:caif_netlink_parms(): no params data found [ 710.772506][ T6220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.858618][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 710.864825][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 711.003905][T17442] input: f¬ as /devices/virtual/input/input61 [ 711.089649][ T6220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.177372][ T5839] Bluetooth: hci2: command tx timeout [ 711.339440][ T6220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.463258][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.503206][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.539197][T17403] bridge_slave_0: entered allmulticast mode [ 711.572240][T17403] bridge_slave_0: entered promiscuous mode [ 711.680587][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.711363][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.749929][T17403] bridge_slave_1: entered allmulticast mode [ 711.780847][T17403] bridge_slave_1: entered promiscuous mode [ 712.015412][T17403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.113681][T17403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.280556][T17403] team0: Port device team_slave_0 added [ 712.339735][T17403] team0: Port device team_slave_1 added [ 712.565058][T17403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.601716][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.740913][T17403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.937254][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 713.260078][ T5839] Bluetooth: hci2: command tx timeout [ 714.269217][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.316823][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.355542][ T6220] bond0 (unregistering): Released all slaves [ 714.394779][T17403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.439422][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.611739][T17403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.950451][T17403] hsr_slave_0: entered promiscuous mode [ 714.991641][T17403] hsr_slave_1: entered promiscuous mode [ 715.011482][T17403] debugfs: 'hsr0' already exists in 'hsr' [ 715.017477][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 715.044733][T17403] Cannot create hsr debugfs directory [ 715.337628][ T5839] Bluetooth: hci2: command tx timeout [ 715.977058][ T6220] hsr_slave_0: left promiscuous mode [ 716.025870][ T6220] hsr_slave_1: left promiscuous mode [ 716.057576][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.118713][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.240407][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.289336][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.361062][ T6220] veth1_vlan: left promiscuous mode [ 716.366320][ T6220] veth0_vlan: left promiscuous mode [ 717.417989][ T5839] Bluetooth: hci2: command tx timeout [ 717.536093][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 718.897880][T17548] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2416'. [ 719.048194][T17559] netlink: 5020 bytes leftover after parsing attributes in process `syz.0.2417'. [ 719.215922][T17564] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 719.317960][T17403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 719.420063][T17403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 719.536815][T17403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 719.607774][T17403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.084407][T17403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.175286][T17403] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.234685][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.241847][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.347447][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.354628][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.726144][T17617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.382675][T17403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.731551][T17403] veth0_vlan: entered promiscuous mode [ 721.813060][T17403] veth1_vlan: entered promiscuous mode [ 721.986154][T17403] veth0_macvtap: entered promiscuous mode [ 722.150916][T17403] veth1_macvtap: entered promiscuous mode [ 722.208432][T17647] cifs: Unknown parameter 'Ź;B5èiÊrDðÖ°²p' [ 722.239830][T17403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.278041][T17647] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 722.374332][T17403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.455138][ T9934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.479698][T17647] CIFS mount error: No usable UNC path provided in device string! [ 722.479698][T17647] [ 722.521743][ T9934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.575826][ T9934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.606536][T17647] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 722.670910][ T9934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.688765][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2425'. [ 723.110646][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.160486][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.303329][T11502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.337343][T11502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.500869][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 724.353472][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.364703][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.373551][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.389451][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.398878][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.419645][T17689] chnl_net:caif_netlink_parms(): no params data found [ 726.079514][T17689] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.127535][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.197685][T17689] bridge_slave_0: entered allmulticast mode [ 726.290138][T17689] bridge_slave_0: entered promiscuous mode [ 726.317851][T17689] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.387536][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.441398][T17689] bridge_slave_1: entered allmulticast mode [ 726.462341][ T5832] Bluetooth: hci3: command tx timeout [ 726.481587][T17689] bridge_slave_1: entered promiscuous mode [ 726.675873][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.736716][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.914640][T17689] team0: Port device team_slave_0 added [ 726.968349][T17689] team0: Port device team_slave_1 added [ 727.087371][T17689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.117632][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.213555][T17689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.289569][T17689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.306789][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.375092][T17689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.498239][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.644456][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.745072][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.790604][T17689] hsr_slave_0: entered promiscuous mode [ 727.809552][T17689] hsr_slave_1: entered promiscuous mode [ 727.826736][T17689] debugfs: 'hsr0' already exists in 'hsr' [ 727.840362][T17689] Cannot create hsr debugfs directory [ 727.880949][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.986263][T17752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 728.543313][ T5832] Bluetooth: hci3: command tx timeout [ 728.764734][ T13] bridge_slave_1: left allmulticast mode [ 728.798684][ T13] bridge_slave_1: left promiscuous mode [ 728.841736][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.886363][ T13] bridge_slave_0: left allmulticast mode [ 728.892138][ T13] bridge_slave_0: left promiscuous mode [ 728.983561][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.169911][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.207140][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.250864][ T13] bond0 (unregistering): Released all slaves [ 730.630498][ T5832] Bluetooth: hci3: command tx timeout [ 731.350822][T17689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.503950][T17689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.574400][T17689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 731.718989][ T30] audit: type=1804 audit(4294968446.595:30): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2447" name="/newroot/389/file0" dev="tmpfs" ino=2063 res=1 errno=0 [ 731.756118][T17689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.144046][T17810] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 732.240109][ T13] hsr_slave_0: left promiscuous mode [ 732.354370][ T13] hsr_slave_1: left promiscuous mode [ 732.374307][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.393784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.423593][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.445953][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.482868][ T13] veth1_macvtap: left promiscuous mode [ 732.497674][ T13] veth0_macvtap: left promiscuous mode [ 732.705262][ T5832] Bluetooth: hci3: command tx timeout [ 733.209245][ T13] team0 (unregistering): Port device team_slave_1 removed [ 733.296691][ T13] team0 (unregistering): Port device team_slave_0 removed [ 734.535510][T17689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.693837][T17689] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.725419][T17860] ubi0: attaching mtd0 [ 734.739099][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.746273][T12781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.791903][T17860] ubi0: scanning is finished [ 734.842859][T17860] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 734.945924][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.953094][T12781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.434726][T17860] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 735.480749][T17866] mkiss: ax0: crc mode is auto. [ 735.608707][T17883] kAFS: Invalid Command on /proc/fs/afs/cells file [ 735.770968][T17689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.970520][T17689] veth0_vlan: entered promiscuous mode [ 736.037081][T17689] veth1_vlan: entered promiscuous mode [ 736.422801][T17689] veth0_macvtap: entered promiscuous mode [ 736.519160][T17689] veth1_macvtap: entered promiscuous mode [ 736.709334][T17689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.766570][T17689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.308064][T11502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.471058][T11502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.614123][T11502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.748113][T17930] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.2465' sets config #-1 [ 737.795195][T11502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.910162][T17933] FAULT_INJECTION: forcing a failure. [ 737.910162][T17933] name failslab, interval 1, probability 0, space 0, times 0 [ 738.168148][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.2.2465 Tainted: G I L syzkaller #0 PREEMPT(full) [ 738.168179][T17933] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 738.168186][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.168196][T17933] Call Trace: [ 738.168202][T17933] [ 738.168209][T17933] dump_stack_lvl+0x16c/0x1f0 [ 738.168238][T17933] should_fail_ex+0x512/0x640 [ 738.168257][T17933] ? kmem_cache_alloc_noprof+0x62/0x770 [ 738.168279][T17933] should_failslab+0xc2/0x120 [ 738.168301][T17933] kmem_cache_alloc_noprof+0x83/0x770 [ 738.168320][T17933] ? do_timer_create+0x201/0x14c0 [ 738.168341][T17933] ? do_timer_create+0x201/0x14c0 [ 738.168359][T17933] do_timer_create+0x201/0x14c0 [ 738.168378][T17933] ? do_futex+0x122/0x350 [ 738.168395][T17933] ? __pfx_do_timer_create+0x10/0x10 [ 738.168413][T17933] ? __pfx_do_futex+0x10/0x10 [ 738.168430][T17933] ? iput+0x35/0x40 [ 738.168444][T17933] ? __sock_release+0x20b/0x270 [ 738.168471][T17933] __x64_sys_timer_create+0x199/0x1d0 [ 738.168490][T17933] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 738.168509][T17933] ? fput+0x70/0xf0 [ 738.168523][T17933] ? xfd_validate_state+0x61/0x180 [ 738.168537][T17933] ? __pfx_ksys_write+0x10/0x10 [ 738.168564][T17933] do_syscall_64+0xcd/0xf80 [ 738.168589][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.168604][T17933] RIP: 0033:0x7f7d8ff8f7c9 [ 738.168617][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.168632][T17933] RSP: 002b:00007f7d90e94038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 738.168647][T17933] RAX: ffffffffffffffda RBX: 00007f7d901e6090 RCX: 00007f7d8ff8f7c9 [ 738.168657][T17933] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000003 [ 738.168666][T17933] RBP: 00007f7d90013f91 R08: 0000000000000000 R09: 0000000000000000 [ 738.168675][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.168692][T17933] R13: 00007f7d901e6128 R14: 00007f7d901e6090 R15: 00007ffe8ada3be8 [ 738.168712][T17933] [ 739.387643][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.424212][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.525635][ T9934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.549661][ T9934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.588838][ T5832] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 739.932952][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 740.311954][T17955] random: crng reseeded on system resumption [ 740.953154][T17965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.100410][T17968] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 742.141619][T18000] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 742.639900][T18014] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 742.774108][T18015] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 742.811479][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2481'. [ 742.847465][T18015] vhci_hcd vhci_hcd.1: invalid port number 184 [ 742.899828][T18022] FAULT_INJECTION: forcing a failure. [ 742.899828][T18022] name failslab, interval 1, probability 0, space 0, times 0 [ 742.934358][T18015] vhci_hcd vhci_hcd.1: default hub control req: 0a00 v0000 i00b8 l0 [ 742.978973][T18022] CPU: 0 UID: 0 PID: 18022 Comm: syz.0.2482 Tainted: G I L syzkaller #0 PREEMPT(full) [ 742.979003][T18022] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 742.979010][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.979019][T18022] Call Trace: [ 742.979026][T18022] [ 742.979032][T18022] dump_stack_lvl+0x16c/0x1f0 [ 742.979063][T18022] should_fail_ex+0x512/0x640 [ 742.979081][T18022] ? __kmalloc_cache_noprof+0x5f/0x800 [ 742.979101][T18022] should_failslab+0xc2/0x120 [ 742.979125][T18022] __kmalloc_cache_noprof+0x80/0x800 [ 742.979142][T18022] ? input_allocate_device+0x44/0x350 [ 742.979174][T18022] ? input_allocate_device+0x44/0x350 [ 742.979194][T18022] input_allocate_device+0x44/0x350 [ 742.979215][T18022] uinput_write+0x9cc/0xff0 [ 742.979236][T18022] ? __pfx_uinput_write+0x10/0x10 [ 742.979252][T18022] ? bpf_lsm_file_permission+0x9/0x10 [ 742.979270][T18022] ? security_file_permission+0x71/0x210 [ 742.979292][T18022] ? rw_verify_area+0xcf/0x6c0 [ 742.979312][T18022] ? __pfx_uinput_write+0x10/0x10 [ 742.979326][T18022] vfs_write+0x2a0/0x11d0 [ 742.979351][T18022] ? __pfx_vfs_write+0x10/0x10 [ 742.979371][T18022] ? find_held_lock+0x2b/0x80 [ 742.979391][T18022] ? __fget_files+0x204/0x3c0 [ 742.979415][T18022] ? __fget_files+0x20e/0x3c0 [ 742.979441][T18022] ksys_write+0x1f8/0x250 [ 742.979462][T18022] ? __pfx_ksys_write+0x10/0x10 [ 742.979488][T18022] do_syscall_64+0xcd/0xf80 [ 742.979513][T18022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.979528][T18022] RIP: 0033:0x7ff1aff8f7c9 [ 742.979543][T18022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.979557][T18022] RSP: 002b:00007ff1b0d42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 742.979571][T18022] RAX: ffffffffffffffda RBX: 00007ff1b01e5fa0 RCX: 00007ff1aff8f7c9 [ 742.979582][T18022] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000003 [ 742.979590][T18022] RBP: 00007ff1b0013f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.979600][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.979608][T18022] R13: 00007ff1b01e6038 R14: 00007ff1b01e5fa0 R15: 00007fff1fe477e8 [ 742.979628][T18022] [ 743.613828][T18031] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2485'. [ 743.630737][T18032] usb usb3: usbfs: interface 0 claimed by hub while 'syz.4.2486' sets config #-1 [ 743.682021][T18032] FAULT_INJECTION: forcing a failure. [ 743.682021][T18032] name fail_futex, interval 1, probability 0, space 0, times 0 [ 743.713108][T18032] CPU: 0 UID: 0 PID: 18032 Comm: syz.4.2486 Tainted: G I L syzkaller #0 PREEMPT(full) [ 743.713141][T18032] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 743.713148][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 743.713158][T18032] Call Trace: [ 743.713164][T18032] [ 743.713171][T18032] dump_stack_lvl+0x16c/0x1f0 [ 743.713200][T18032] should_fail_ex+0x512/0x640 [ 743.713220][T18032] ? local_lock_release+0x99/0x130 [ 743.713239][T18032] get_futex_key+0x1d0/0x15f0 [ 743.713259][T18032] ? __pfx_get_futex_key+0x10/0x10 [ 743.713276][T18032] ? __lock_acquire+0x436/0x2890 [ 743.713297][T18032] futex_wake+0xea/0x530 [ 743.713319][T18032] ? __pfx_futex_wake+0x10/0x10 [ 743.713341][T18032] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.713362][T18032] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.713386][T18032] ? _raw_spin_unlock_irq+0x2e/0x50 [ 743.713409][T18032] do_futex+0x1e3/0x350 [ 743.713426][T18032] ? __pfx_do_futex+0x10/0x10 [ 743.713442][T18032] ? iput+0x35/0x40 [ 743.713456][T18032] ? __sock_release+0x20b/0x270 [ 743.713482][T18032] __x64_sys_futex+0x1e0/0x4c0 [ 743.713500][T18032] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 743.713519][T18032] ? fput+0x70/0xf0 [ 743.713533][T18032] ? __pfx___x64_sys_futex+0x10/0x10 [ 743.713550][T18032] ? xfd_validate_state+0x61/0x180 [ 743.713564][T18032] ? __pfx_ksys_write+0x10/0x10 [ 743.713590][T18032] do_syscall_64+0xcd/0xf80 [ 743.713615][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.713631][T18032] RIP: 0033:0x7fe3b0b8f7c9 [ 743.713645][T18032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.713660][T18032] RSP: 002b:00007fe3b19be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.713675][T18032] RAX: ffffffffffffffda RBX: 00007fe3b0de5fa8 RCX: 00007fe3b0b8f7c9 [ 743.713685][T18032] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3b0de5fac [ 743.713694][T18032] RBP: 00007fe3b0de5fa0 R08: 00007fe3b19bf000 R09: 0000000000000000 [ 743.713703][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.713712][T18032] R13: 00007fe3b0de6038 R14: 00007fffb9c62fe0 R15: 00007fffb9c630c8 [ 743.713732][T18032] [ 744.129478][T18035] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2487'. [ 744.140233][T18035] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2487'. [ 744.149684][T18035] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2487'. [ 744.161564][T18035] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2487'. [ 745.506515][T18076] FAULT_INJECTION: forcing a failure. [ 745.506515][T18076] name failslab, interval 1, probability 0, space 0, times 0 [ 745.586129][T18076] CPU: 0 UID: 0 PID: 18076 Comm: syz.4.2494 Tainted: G I L syzkaller #0 PREEMPT(full) [ 745.586175][T18076] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 745.586182][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 745.586192][T18076] Call Trace: [ 745.586198][T18076] [ 745.586204][T18076] dump_stack_lvl+0x16c/0x1f0 [ 745.586235][T18076] should_fail_ex+0x512/0x640 [ 745.586253][T18076] ? __kmalloc_cache_noprof+0x5f/0x800 [ 745.586272][T18076] should_failslab+0xc2/0x120 [ 745.586296][T18076] __kmalloc_cache_noprof+0x80/0x800 [ 745.586314][T18076] ? input_allocate_device+0x44/0x350 [ 745.586338][T18076] ? input_allocate_device+0x44/0x350 [ 745.586357][T18076] input_allocate_device+0x44/0x350 [ 745.586377][T18076] uinput_write+0x9cc/0xff0 [ 745.586397][T18076] ? __pfx_uinput_write+0x10/0x10 [ 745.586413][T18076] ? bpf_lsm_file_permission+0x9/0x10 [ 745.586431][T18076] ? security_file_permission+0x71/0x210 [ 745.586452][T18076] ? rw_verify_area+0xcf/0x6c0 [ 745.586472][T18076] ? __pfx_uinput_write+0x10/0x10 [ 745.586486][T18076] vfs_write+0x2a0/0x11d0 [ 745.586511][T18076] ? __pfx_vfs_write+0x10/0x10 [ 745.586530][T18076] ? find_held_lock+0x2b/0x80 [ 745.586550][T18076] ? __fget_files+0x204/0x3c0 [ 745.586574][T18076] ? __fget_files+0x20e/0x3c0 [ 745.586600][T18076] ksys_write+0x1f8/0x250 [ 745.586620][T18076] ? __pfx_ksys_write+0x10/0x10 [ 745.586647][T18076] do_syscall_64+0xcd/0xf80 [ 745.586672][T18076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.586687][T18076] RIP: 0033:0x7fe3b0b8f7c9 [ 745.586701][T18076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.586715][T18076] RSP: 002b:00007fe3b19be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.586729][T18076] RAX: ffffffffffffffda RBX: 00007fe3b0de5fa0 RCX: 00007fe3b0b8f7c9 [ 745.586739][T18076] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000003 [ 745.586748][T18076] RBP: 00007fe3b0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 745.586757][T18076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.586766][T18076] R13: 00007fe3b0de6038 R14: 00007fe3b0de5fa0 R15: 00007fffb9c630c8 [ 745.586785][T18076] [ 746.746796][T18094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2497'. [ 746.877932][T18094] ipvlan0: entered promiscuous mode [ 746.919119][T18094] ipvlan0: entered allmulticast mode [ 746.981531][T18094] veth0_vlan: entered allmulticast mode [ 748.113384][T18108] bridge0: port 3(veth0_to_bridge) entered blocking state [ 748.217423][T18112] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 748.267512][T18108] bridge0: port 3(veth0_to_bridge) entered disabled state [ 748.344665][T18108] veth0_to_bridge: entered allmulticast mode [ 748.426599][T18108] veth0_to_bridge: entered promiscuous mode [ 748.471344][T18108] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.648411][T18108] bridge0: port 3(veth0_to_bridge) entered blocking state [ 748.655706][T18108] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 748.744763][T18113] tipc: Started in network mode [ 748.762427][T18113] tipc: Node identity ee00, cluster identity 4711 [ 748.800288][T18113] tipc: Node number set to 60928 [ 749.469841][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 749.557300][T18135] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 751.833327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.845583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.858452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.870713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.883556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.895781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.908629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.920858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.933720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.219491][ C0] net_ratelimit: 2899 callbacks suppressed [ 753.219509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.237559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 753.249847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.262745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.274970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 753.287599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.300448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.312680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 753.324943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.337734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.229011][ C0] net_ratelimit: 12089 callbacks suppressed [ 758.229030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.247215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 758.259581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.272426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.284667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 758.296965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.309766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.322007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 758.334372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.347206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.719614][ C0] sched: DL replenish lagged too much [ 763.238931][ C0] net_ratelimit: 12099 callbacks suppressed [ 763.238949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 763.257122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.269882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.282075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 763.294350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.307141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.319346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 763.331607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.344356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.356556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 768.249369][ C0] net_ratelimit: 11884 callbacks suppressed [ 768.249387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.267531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 768.279811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.293194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.305419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 768.317676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.330444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.342756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 768.355073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.367819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.470809][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.259524][ C0] net_ratelimit: 12029 callbacks suppressed [ 773.259542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.277683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 773.289967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.302960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.315205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 773.327486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.340316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.352558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 773.365236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.378600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.997755][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.269171][ C0] net_ratelimit: 12959 callbacks suppressed [ 778.269189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.287404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.299605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 778.311855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.324606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.336788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.348976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 778.361187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.373938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.386062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.278827][ C0] net_ratelimit: 12881 callbacks suppressed [ 783.278846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.297473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.310113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.322299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 783.334535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.347383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.360041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.372238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 783.384485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.397188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.289108][ C0] net_ratelimit: 11211 callbacks suppressed [ 788.289125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.307414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 788.319756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.332027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.344764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.356961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 788.369177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.381888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.394105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 788.406281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.298967][ C0] net_ratelimit: 13251 callbacks suppressed [ 793.298987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.317684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.329930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 793.342193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.354903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.367108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 793.379341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.391561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.404398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.416669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 798.309313][ C0] net_ratelimit: 13788 callbacks suppressed [ 798.309333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.327486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 798.339763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.352487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.364739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 798.376959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.389285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.402056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.414300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 798.426584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.318792][ C0] net_ratelimit: 13231 callbacks suppressed [ 803.318810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 803.337026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.349266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.362158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.374432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 803.386715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.399487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.411764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 803.424004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.436235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.328840][ C0] net_ratelimit: 12883 callbacks suppressed [ 808.328858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.347029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 808.359285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.371539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.384355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.396821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 808.409096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.421907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.434153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 808.446414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.339254][ C0] net_ratelimit: 12769 callbacks suppressed [ 813.339271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.357418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 813.369670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.382383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.394589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 813.406795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.419024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.431733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.443947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 813.456229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.019164][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.032744][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.348813][ C0] net_ratelimit: 13225 callbacks suppressed [ 818.348831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.366962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.379608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.391981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 818.404334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.417031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.429216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 818.441459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.453669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.466323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.358814][ C0] net_ratelimit: 13192 callbacks suppressed [ 823.358833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.377026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.389879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.402104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 823.414429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.427344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.439630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 823.451963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.464209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.476974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.368899][ C0] net_ratelimit: 13134 callbacks suppressed [ 828.368917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.387162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 828.399432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.411665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.424441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.436697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 828.448980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.461789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.474032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 828.486255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.438828][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 833.379601][ C0] net_ratelimit: 13521 callbacks suppressed [ 833.379619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.397797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 833.410129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.422334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.435059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.447301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 833.459557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.472253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.484447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 833.496786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.388937][ C0] net_ratelimit: 13558 callbacks suppressed [ 838.388956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 838.407328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.419567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.432103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.444596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.456835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 838.469095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.481919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.494165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 838.506429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.399008][ C0] net_ratelimit: 13581 callbacks suppressed [ 843.399027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.417263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 843.429539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.441776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.454294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.466796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.479073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 843.491360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.504117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.516378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 848.408855][ C0] net_ratelimit: 12313 callbacks suppressed [ 848.408873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.427292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.440275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.452624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 848.464950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.477691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.489900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 848.502396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.514619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.527071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.419267][ C0] net_ratelimit: 11912 callbacks suppressed [ 853.419285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.437477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 853.449742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.462587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.474888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 853.487163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.499396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.511913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.524846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.537055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 854.918748][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 854.925735][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18036/1:b..l [ 854.934276][ C0] rcu: (detected by 0, t=10502 jiffies, g=97841, q=2080 ncpus=1) [ 854.942093][ C0] task:syz.2.2487 state:R running task stack:23288 pid:18036 tgid:18036 ppid:17403 task_flags:0x40064c flags:0x00080001 [ 854.956651][ C0] Call Trace: [ 854.959989][ C0] [ 854.962930][ C0] ? __schedule+0x10b9/0x6150 [ 854.967612][ C0] __schedule+0x1139/0x6150 [ 854.972170][ C0] ? __pfx___schedule+0x10/0x10 [ 854.977047][ C0] preempt_schedule_irq+0x51/0x90 [ 854.982077][ C0] irqentry_exit+0x1d8/0x8c0 [ 854.986690][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 854.992692][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 854.997910][ C0] Code: cb 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 a2 58 ef 0e 0f 82 74 02 00 00 8b 35 1a 89 ef 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 ca 18 12 0f 85 ad 02 00 00 48 83 c4 [ 855.017527][ C0] RSP: 0018:ffffc90004a07138 EFLAGS: 00000206 [ 855.023618][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9520 RCX: 0000000068c1bacb [ 855.031591][ C0] RDX: 0000000000000000 RSI: ffffffff8daa5041 RDI: ffffffff8bf2b600 [ 855.039563][ C0] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 855.047548][ C0] R10: 0000000000000002 R11: ffff8880297d8b30 R12: 0000000000000000 [ 855.055553][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.063547][ C0] ? rcu_is_watching+0x12/0xc0 [ 855.068336][ C0] ? memcg1_uncharge_batch+0xdb/0x120 [ 855.073743][ C0] uncharge_batch+0x1cc/0x480 [ 855.078443][ C0] ? uncharge_batch+0x1b8/0x480 [ 855.083305][ C0] __mem_cgroup_uncharge_folios+0x145/0x1e0 [ 855.089192][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 855.095598][ C0] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 855.101143][ C0] ? rcu_is_watching+0x12/0xc0 [ 855.105924][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 855.111760][ C0] folios_put_refs+0x4b1/0x750 [ 855.116547][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 855.121854][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 855.128197][ C0] shmem_undo_range+0x58f/0x1140 [ 855.133151][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 855.138531][ C0] ? find_held_lock+0x2b/0x80 [ 855.143234][ C0] shmem_evict_inode+0x39e/0xbe0 [ 855.148180][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 855.153910][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 855.159444][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 855.165519][ C0] ? find_held_lock+0x2b/0x80 [ 855.170284][ C0] ? evict+0x37e/0xad0 [ 855.174426][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 855.179871][ C0] evict+0x3c2/0xad0 [ 855.183753][ C0] ? find_held_lock+0x2b/0x80 [ 855.188418][ C0] ? __pfx_evict+0x10/0x10 [ 855.192823][ C0] ? iput.part.0+0x619/0x1190 [ 855.197492][ C0] iput.part.0+0x621/0x1190 [ 855.202004][ C0] iput+0x35/0x40 [ 855.205640][ C0] dentry_unlink_inode+0x29c/0x480 [ 855.210757][ C0] __dentry_kill+0x1d0/0x600 [ 855.215358][ C0] finish_dput+0x76/0x480 [ 855.219691][ C0] dput.part.0+0x451/0x570 [ 855.224108][ C0] dput+0x1f/0x30 [ 855.227741][ C0] __fput+0x51c/0xb70 [ 855.231713][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 855.236910][ C0] task_work_run+0x150/0x240 [ 855.241500][ C0] ? __pfx_task_work_run+0x10/0x10 [ 855.246604][ C0] do_exit+0x87f/0x2bd0 [ 855.250767][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 855.256443][ C0] ? __pfx_do_exit+0x10/0x10 [ 855.261047][ C0] do_group_exit+0xd3/0x2a0 [ 855.265568][ C0] get_signal+0x2671/0x26d0 [ 855.270080][ C0] ? __pfx_get_signal+0x10/0x10 [ 855.274930][ C0] arch_do_signal_or_restart+0x8f/0x7a0 [ 855.280483][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 855.286648][ C0] ? do_user_addr_fault+0x926/0x1370 [ 855.291928][ C0] irqentry_exit+0x38a/0x8c0 [ 855.296515][ C0] asm_exc_page_fault+0x26/0x30 [ 855.301364][ C0] RIP: 0033:0x401000 [ 855.305266][ C0] RSP: 002b:000000000000000a EFLAGS: 00010246 [ 855.311336][ C0] RAX: 0000000000000000 RBX: 00007f7d901e6090 RCX: 00007f7d8ff8f7c9 [ 855.319298][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 855.327252][ C0] RBP: 00007f7d90013f91 R08: 0000000000000002 R09: 0000000000000000 [ 855.335218][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.343192][ C0] R13: 00007f7d901e6128 R14: 00007f7d901e6090 R15: 00007ffe8ada3be8 [ 855.351171][ C0] [ 858.428905][ C0] net_ratelimit: 10961 callbacks suppressed [ 858.428925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.447104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 858.459386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.471706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 858.484094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.496534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.509531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.521792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 858.534065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.546857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.438942][ C0] net_ratelimit: 12344 callbacks suppressed [ 863.438960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.457141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 863.469471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.482282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.494524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 863.506756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.519111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:da:bb:97:15:4b, vlan:0) [ 863.531413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.543971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.556940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)