last executing test programs: 8.175388726s ago: executing program 1 (id=4330): memfd_secret$auto(0x8a7) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b39", 0x13) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 6.480718902s ago: executing program 1 (id=4336): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x103080, 0x0) mmap$auto(0x0, 0x5, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1000000000006, 0x10000000000e980, 0xd85e, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0xd, 0x8020000000000b) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40880) mmap$auto(0x0, 0x2020009, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8004) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x200, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) madvise$auto(0xfffffffffffffffd, 0x3, 0x3ff) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0xfff, 0x4) open(&(0x7f00000000c0)='./file1\x00', 0x141840, 0xfb) ppoll$auto(&(0x7f0000000180)={r0, 0x7f, 0x8}, 0x6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clone$auto(0x4, 0x6, 0x0, 0x0, 0x7) setreuid$auto(0x0, 0x0) getpid() open(&(0x7f0000000800)='./file0\x00', 0x1a3342, 0x24) close_range$auto(r1, 0x8, 0x0) 5.982474953s ago: executing program 1 (id=4342): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000000)='-/', 0x2) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd5/queue/write_cache\x00', 0x169882, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) open(&(0x7f0000000000)='./file0\x00', 0xc242, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x2, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/v4l-touch4/name\x00', 0x220240, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800315b2dbd7000fbdbdf251b00000013001300878bef841142000788b272a3130000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000008c}, 0x40080d0) dup2$auto(r3, 0xffffffffffffffff) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000002, 0x3) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x5f1385, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40306f52, 0xffffffffffffffff) 4.880298044s ago: executing program 0 (id=4347): fanotify_init$auto(0x200, 0x2010000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20004000) writev$auto(0xffffffffffffffff, 0x0, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x8922, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x1b, 0x0, 0x201) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='>'], 0x1ac}, 0x1, 0x0, 0x0, 0x40855}, 0x8092) (fail_nth: 2) 4.730162476s ago: executing program 3 (id=4349): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000000)=0x9) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, 0x0) 4.086115225s ago: executing program 1 (id=4350): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/mtrr\x00', 0x441, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(r0, &(0x7f0000000080)='\t\x00\\\x00\x00\x00\x00\x00\x95?\xf2\xa6\xa0.__t_event_not\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x446, 0x810006, 0xffb, 0x8000000008011, r1, 0x10) mmap$auto(0xfffffffffffffffe, 0x0, 0x8, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r3 = eventfd$auto(0x80) readv$auto(r3, &(0x7f0000000380)={0x0, 0x8}, 0x8) read$auto(r3, 0x0, 0xcc9c) write$auto(r3, &(0x7f0000000400)='\'\x00', 0x8) msync$auto(0x0, 0xe0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xf) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x404240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.961564761s ago: executing program 0 (id=4351): fanotify_init$auto(0x200, 0x2010000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20004000) writev$auto(0xffffffffffffffff, 0x0, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x8922, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = socket(0x9, 0x800, 0x1) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) syz_clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x7}, &(0x7f00000001c0)=""/136, 0x88, &(0x7f0000000280), &(0x7f0000000340)=[0x0], 0x1}, 0x58) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000400)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8014) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x6, 0x5, 0x4, 0x8, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 3.302829657s ago: executing program 3 (id=4353): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket(0x2, 0x801, 0x106) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r1, 0x3, 0x0, 0x84, 0x7, r1, 0x6, 0x8001}, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000080)={0xf000000000000000, 0x6, 0x6, 0x8001, 0xee01, 0xffffffffffffffff, 0x0, 0x5, 0x80, 0x1, 0x1, 0x6, 0x68, 0x2, 0x5b82bfc9}) fsconfig$auto(r2, 0x80, &(0x7f0000000000)='/proc/bus/pci/devices\x00', &(0x7f0000000040)="ef4e9ac1be48", r3) pread64$auto(r2, 0x0, 0x8100000041, 0x6) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec3\x00', 0x0, 0x0) 3.151264195s ago: executing program 3 (id=4354): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.071038561s ago: executing program 0 (id=4355): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x804, 0x84) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) mmap$auto(0x140001, 0x2020009, 0x1b64, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000180), 0x1) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r2, 0x8008af26, &(0x7f00000000c0)=0x5) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) poll$auto(&(0x7f0000000140)={r3, 0xd2b4, 0x81}, 0x3, 0xff61) socket(0x10, 0x2, 0x0) timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0xb, 0xe3, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) 2.636433307s ago: executing program 1 (id=4356): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x3, 0x3a) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r1, 0x29, 0x15, 0x0, 0x52b) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) unshare$auto(0xd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x2, 0x80802, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP(r3, 0x4030580a, &(0x7f0000000040)={0x3ff, 0x2d2a, 0x4, 0x2, 0x7, 0x0}) migrate_pages$auto(r4, 0x101, &(0x7f0000000080)=0x1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x8000000000000843, 0xfffffffffffffffe, 0xfffffffffffffffe) mremap$auto(0x4, 0x4, 0x7, 0x7, 0x1001ff000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) socket(0x1d, 0x3, 0x1) 2.445575653s ago: executing program 2 (id=4357): unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a01, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) (async) pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) (async) r1 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) pread64$auto(r1, 0x0, 0x80, 0x8) (async) pread64$auto(r1, 0x0, 0x80, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7c5b28af, 0xfffffffffffffffa, 0x0, 0x220000000000001, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xda45, &(0x7f0000000080)={0xd2, 0x4, 0x800, @raw=0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r3 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r3, &(0x7f00000000c0)={{&(0x7f0000000140), 0x102, &(0x7f0000000280)={0x0, 0x5}, 0xa, 0x0, 0x400, 0x3}, 0x5}, 0x9, 0xee) pipe2$auto(0x0, 0x80) (async) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000940)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\x01\x00\x00\x00C:\x84D\x1du\xb4\x9ab\xb1e\xd9\x05t\xb5\x8fB\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\x03E\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xa7D\xcckBH\xbe\x02b?J\xe3\x81%UI|\xe2\xf58+\xc9\x0fGRT\x1e\xd0\xccb\b#\x0e\xd7\x960\x8f\xdc\xec\x19V\x1e\xf0\xc6Q\xd17G\x8f\x1d\x86\x12\x94\x81k\xfdGSl`#o&e\xec\xb0\x9a\x02\n\xfec\xe0u\xd8L}\xb9N\xb7\x98\xc0\xc8\x83\xe4k?z\x05\xb2.\x8f\xa6\xa8Vb\xfd\xd8\xdc\x1cg\xe2\xe8[\xe0\xa7\xa1\x84\x01~3\x93\xa5\xfbE*\x16YC\xe3\xee\xf3\x00B\xa8\x99y\xd0\xaa\xe3\xfd]\x11kS\xaf\\\x8a\xa1+\xd3\xb8\xb9\x8a\xf3\xaeJ\xfb_\xeb\xed\v\x17\x8c\xad]I\xbbD+\xfc\xe8\x88t\xb6\xb5\xb4\xa5\xb4\xa6\xd4\xa9\xba)B\x16\xf0\x8f\xd6\xfb0\a\xcfhG\x0fv\xe3\xc7\x81\xa9\x10\xb1p\xb4\x89\nz\xe6\xa7\xaa\xa6\xaf\xc8\xf2\xab\xd4\x88\x1b\x9e\xbf\xd6\xa2Ig\xed2\x92n\t\xbd]t\xf0\x06\xee\x9c\\\x86u\x06]\xc6{\xbdQ\xe6\xe9v\x95T\xad\xed\x1c\xcb`X\x1f\xb75\x19\xdf\xf6\x14\x9f\xc1\xdf\xd4_\x13\x0f\xceG\xe9w\xc9\xfd\xdbm\xd5\x81\x1fIbA\xa1V0\x9e\x805\xa4fN&\xcawK\xdc', 0x100000a3dc) (async) write$auto(r0, &(0x7f0000000940)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\x01\x00\x00\x00C:\x84D\x1du\xb4\x9ab\xb1e\xd9\x05t\xb5\x8fB\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\x03E\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xa7D\xcckBH\xbe\x02b?J\xe3\x81%UI|\xe2\xf58+\xc9\x0fGRT\x1e\xd0\xccb\b#\x0e\xd7\x960\x8f\xdc\xec\x19V\x1e\xf0\xc6Q\xd17G\x8f\x1d\x86\x12\x94\x81k\xfdGSl`#o&e\xec\xb0\x9a\x02\n\xfec\xe0u\xd8L}\xb9N\xb7\x98\xc0\xc8\x83\xe4k?z\x05\xb2.\x8f\xa6\xa8Vb\xfd\xd8\xdc\x1cg\xe2\xe8[\xe0\xa7\xa1\x84\x01~3\x93\xa5\xfbE*\x16YC\xe3\xee\xf3\x00B\xa8\x99y\xd0\xaa\xe3\xfd]\x11kS\xaf\\\x8a\xa1+\xd3\xb8\xb9\x8a\xf3\xaeJ\xfb_\xeb\xed\v\x17\x8c\xad]I\xbbD+\xfc\xe8\x88t\xb6\xb5\xb4\xa5\xb4\xa6\xd4\xa9\xba)B\x16\xf0\x8f\xd6\xfb0\a\xcfhG\x0fv\xe3\xc7\x81\xa9\x10\xb1p\xb4\x89\nz\xe6\xa7\xaa\xa6\xaf\xc8\xf2\xab\xd4\x88\x1b\x9e\xbf\xd6\xa2Ig\xed2\x92n\t\xbd]t\xf0\x06\xee\x9c\\\x86u\x06]\xc6{\xbdQ\xe6\xe9v\x95T\xad\xed\x1c\xcb`X\x1f\xb75\x19\xdf\xf6\x14\x9f\xc1\xdf\xd4_\x13\x0f\xceG\xe9w\xc9\xfd\xdbm\xd5\x81\x1fIbA\xa1V0\x9e\x805\xa4fN&\xcawK\xdc', 0x100000a3dc) r4 = seccomp$auto(0x9, 0x1ff, &(0x7f0000000180)="24936d9b9c97233586e0c7733b2a5a8b25e2f5329e4f6bc509c62ace8cb26081c6dc40d671ec9a4ab431b89a011100309abbd2eef41d4cd2f1ebc0fa6d23557d7599a2b9d847c90409b455cab31989cf8c55bb640a8f909f6a83acb5a800dfaf7ec9ace013d0b608ba34fd57c7f887ed4ceeb002bd61861ff8444c6e63473f71b67689eeba2a8cfee900c1dce66055de7c1e6fbb8584b1f2d30321a75cbf21fc57e36ccaf1fcfd610d7a1ec848c3e4323af84dc079689574c36e0d35a93790202faf0257f4fa4045936606bcc744302a332e2077da3e366f16a998f6ac31b67c5da5ebe637c467ef18ae6e298bdc54e7b4535ebb0d154695d5") fsconfig$auto_FSCONFIG_CMD_CREATE(r4, 0x6, &(0x7f0000000280)='&$^\x00', &(0x7f00000003c0)="a812f3d649456d5cc1b56cd709d737c923e1d27c7d2a551ddb197af237da5e583373bda0b02c0f48a300ee64643c866974210a95cb3e1d9049e6c72c5119a724573384915b66040831b43815c5d0f2cb981fb6a947135894dab3c0b6003597ac5f57280ceadf0504293af269590800e3ff00000000000000", 0xa) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) socket(0x2b, 0x3, 0x0) socket(0xb, 0xa, 0x66400559) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x4, 0x7, 0xb, 0x8fd9, 0x948e, 0x5, 0xe, 0x100000000003, 0x3, 0x62, 0x7ffffffe, 0x40000000000007, 0x100000001, 0xd, 0x2, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x4, 0x7, 0xb, 0x8fd9, 0x948e, 0x5, 0xe, 0x100000000003, 0x3, 0x62, 0x7ffffffe, 0x40000000000007, 0x100000001, 0xd, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\xb8\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa4\xc4\x93i\xa0\x8b\x11^\x91\t\xe0F\x0f@\xbd\xc3\xc4E\xbe\xc6\xa1\xbb\r\x05\x8cK\x86\x8e0\x19=\xb7\x04\xfa\x871\xd9\xcf\xc0\x94,\x18q\xb8\xb5\xf0\x02Q\x10\xcdb\x17I\x13\x94\v|\xb2K\xcf\xd4x\xe68{\xbd\xd1\x9fE\x95\xe3\x0f\xe9\x85\b\x97\x11\xc9\xbf\x00\x0e\xa4H\x8a\x0f06\x03%z\xa5\xab\xd7R|\xd3\xab\xf5O\x92\x13\xce\bf\x9c\xb5\x87\x17\xecX\fd\x98\x12J\"\xf9\x19\xb3\a5C\xd8\x17\xa9\tg\xd4\x96\x97\a\x18\xbb\xf7\xc3\xd0\xe1\xfd@-j\xa4\xf2\xd7\xc3v\xdaoF\xa8\x04\xff\xff\xad6)\xd0\vZ!&\xe9\x00\xd5+i;\xfdWf\x04\x8c\x1bj\x80\xe2\xa2\xc2\xe6.A8a\xf5\x1e\xc7h\x024\xcbM\x91\'\xe3\'\x04\xc1\xf5c\xa3\xc0\xacg\xd4{\xef\x1a\xa90\x88$v\xc5%\f\xd8;\xa6y\xce\xc2\x0eY\xd3\x18\xbe\xf8\xe5~\xbd\xc2\xfa\'\x9f\xfb\xaf\xb0\x02\x88\xe5`\x963\x82H\xde@\xa7n\xa2+\x91}\xfa\xbf\xadW\xfd\xb7c\x8f\xf8\x7f\x8f\xc1u\xe4D!i\xf0\'\xa6\xa4\xf5v\x19)X\x81T\xdd\xdbY\xaeK<\xf8\xe6\xcf\x8a\x80\xcc\x16\xde\xaaE\x8b\xd3\x1b:\xaa\x91$\x1c\xd0N\x02\xbaO\xfb\x13\xfe\xfa\xb4xp\xec\xcb\xc7\v\x84\xcd\x96\x9f\xe8\xcb,\x10?\x19\xd8\xf4\xa5\xfe\xcd+fGc5\xc5Qbv:p\xc9\xef\xdb\x8f\xb4\xea\x8c\xccJ\x11\xb9\xddY\x91/\xfbU`\x8f*6{\xa4\xbc\xe4L\xd1]\xd8\x89\x04\xfa\x95\x8f\xd8\xd1\xa3c\r\xe5\xe1\xeah<4Rb\xb0\xefZ\x18\x1a\x17~\xb4\xe4\'\xe7\xd89\xfe\xba\xafe\xf8\v\rv\xe3X\xb6\x10F\r\x19H\xdbYp\xa6\x936s\x9bv9\xce\xa8P1\v\xdd\xd2v\xb4\xc3\xf9\xe4\x03\x18\xe6}\b\xc5\xb4\b\xca\xe48 *\t\x8d\xdf\xd0E \xd5z\x03\xfbv\xa5\xe8%', 0x100000a3dc) socket(0x2c, 0x3, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4e8c, 0x0) 2.146429164s ago: executing program 0 (id=4358): process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_setup$auto(0x400, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(r0, 0x802c550a, 0x1) 2.145691152s ago: executing program 3 (id=4359): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020029, 0x80000000, 0xeb1, r0, 0x8040) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0xffff}) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x48900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80000, 0x300) r1 = getegid() setregid$auto(r1, r1) statx$auto(0xffffffffffffffff, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25040000000500070503000000041fd8b012f97c17a4a93af52cc30000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) semctl$auto(0x7, 0x2, 0x13, 0x1) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r5, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x3, 0x8001}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) 1.743462724s ago: executing program 0 (id=4360): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000000)=0x9) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) 1.555332758s ago: executing program 1 (id=4361): ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x301, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, 0x0, 0x400) mmap$auto(0x0, 0x40000002020009, 0x7, 0xeb3, r0, 0x200000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r2, 0x0, 0x62d4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x4) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x682, 0x0) pread64$auto(r3, &(0x7f0000000000)='}\'\x00', 0x81, 0x2) select$auto(0x6, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x4, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5a, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x35]}, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x7ff, &(0x7f0000000000)="27c2afced1ba09d463134c74d41ad8b7e455c6616636a461636ab88c934d8ea703b7e977da82e36504c017be5967e15b9b4452f41acc34") r4 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r4, 0x0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x214000, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/249, 0xf9) 1.353529889s ago: executing program 2 (id=4362): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)=""/217, 0xd9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x9771, r1, 0x2a9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x14000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)="f9c29e6ceea2982b817a0c445268178fab260b3fe7aee537c258eaedf9f5592bf08242eb5c108f81ebdca8aada595aee2250f7c17a4854da73198bd7c255eb5eb7ab4683d1f347487f867441ad198cf079b83bceb2328f19c338fa9b976db841b7feb7205df67967cfce416babf71e5b0aafbd87cf55dcc67555f88f18719e4e4a6b57843a14ed38c29aea33221f80c515a83faaa7c569f44051fa4116ad2dc1b24300fc7a1696eb9fdbf067") mlock$auto(0xfbe8, 0x4) mlock$auto(0x8a84, 0xff) mlock$auto(0x7c88, 0x7fff) ioctl$auto_IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) 1.216119965s ago: executing program 2 (id=4363): mmap$auto(0x0, 0x4, 0x4000000000df, 0x15, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000, 0x3, 0x3, 0x267e, 0xffffffffffffffff, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, &(0x7f0000000000)='&-', 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x2, 0x0) socket(0xa, 0x2, 0x803a) r1 = epoll_create$auto(0x2) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40103d0b, 0x0) epoll_pwait2$auto(r1, 0x0, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x40, 0x400009, 0x0, 0x9b75, r1, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/name\x00', 0x8e0a00, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r3, &(0x7f0000000180)=""/4125, 0x101d) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x27, 0x6) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video61\x00', 0xf43fb16f207a47a1, 0x0) ioctl$auto(r5, 0xc0445624, r5) write$auto(r2, 0x0, 0x9) sysfs$auto(0xd0, 0x0, 0x8) 1.042893805s ago: executing program 3 (id=4364): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000000200)={{0x7, 0x0, 0x0, 0xefe, 0x5, 0x2, 0x448}, 0x0, 0x0, 0x156, 0x6, 0x2, 0xb0a, 0x2, 0x7f, 0x17f, 0x2, @raw=0x5, @raw=0x7}) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x80000000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x100, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) ioctl$auto(0x3, 0x5606, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2508000000040007004600110002791d00b9daa999abc72fb8789db1a78835317b7c8a2e1154519c759d9e70df9fd02461040d4c9b74a56c41a2ddb60b3f914e363d5738cfd4829aff32bcaa3b28f18f04cdfc30ac53b34a5f82702a000008000500e00000021400060067656eafbbfed517178404b71587a275a5845aaef51e257aefe102a38a8284161dbdf6ef4571f8114eb63e8f42293043750ee641fa"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004050) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 523.915968ms ago: executing program 0 (id=4365): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x2, 0x10000, 0x10001, 0xffffffbffffffff9, r0, 0x8) madvise$auto(0x0, 0x2000040080000004, 0xe) getrlimit$auto(0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6b) sendfile$auto(r1, r5, 0x0, 0x1000200) mmap$auto(0x0, 0x5, 0x4000, 0xeb1, r5, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r6) listmount$auto(&(0x7f0000000500)={0x1, @raw=0x3, 0x2000, 0x10000, 0x4}, &(0x7f00000000c0)=0x3, 0x7fff, 0x3) socket(0x2, 0x1, 0x84) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x44500, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) 521.759505ms ago: executing program 3 (id=4366): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) rseq$auto(&(0x7f0000000100)={0x1, 0x85, 0x9416, 0x9, 0x7, 0x6, "551e7285968d8e86"}, 0x6, 0x7, 0xff) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0x5}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x7) r4 = socket(0x22, 0x2, 0x24) getsockopt$auto(r4, 0x3, 0x1, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) read$auto(r0, 0x0, 0xe8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0x0, 0x13, 0xffffffffffffffff, 0x8003) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030581e, 0xffffffffffff0001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) socket(0xa, 0x801, 0x84) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 256.251754ms ago: executing program 2 (id=4367): r0 = socket(0x10, 0x2, 0x6) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f00000001c0)={0x28, r3, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x28, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) 102.126118ms ago: executing program 2 (id=4368): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000000200)={{0x7, 0x0, 0x0, 0xefe, 0x5, 0x2, 0x448}, 0x0, 0x0, 0x156, 0x6, 0x2, 0xb0a, 0x2, 0x7f, 0x17f, 0x2, @raw=0x5, @raw=0x7}) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x80000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x100, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) ioctl$auto(0x3, 0x5606, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2508000000040007004600110002791d00b9daa999abc72fb8789db1a78835317b7c8a2e1154519c759d9e70df9fd02461040d4c9b74a56c41a2ddb60b3f914e363d5738cfd4829aff32bcaa3b28f18f04cdfc30ac53b34a5f82702a000008000500e00000021400060067656eafbbfed517178404b71587a275a5845aaef51e257aefe102a38a8284161dbdf6ef4571f8114eb63e8f42293043750ee641fa"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004050) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000300)="4ddc695f5380dd32e9c9280c36bf4f4417153fb01b57029e209896bcecd5c301d1f5ed8659becb1f66ef8f87b589c4f0b1d89a1bfd3631189e63438917ba7e45de28515241c303858f08d2ee61824ad26449012bda89af2ae546103462b75229c807c771e199135e1e6faae2473c57f57b3b3dc4aa0187a44ed27bbbf43900c387b4ff35ccd9e6e84c8d5bd37f3fbcd0157e4ccc250fd47eb0c5c327b3c4750355399257e4a1241d95167378b53de8ffd556038999c39fa624a7e1fa764083d02219332dc34a53f5c37dbafb0eadf22237247bbbda9a7f766e2eafd820bca0cf555c65b4e4d0e483fb21b441", 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 0s ago: executing program 2 (id=4369): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r5, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) kernel console output (not intermixed with test programs): 000000008 RDI: 0000000000000002 [ 1047.776903][T22117] RBP: 00007f82dba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1047.776912][T22117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.776922][T22117] R13: 00007f82dbc16038 R14: 00007f82dbc15fa0 R15: 00007ffffd45d7b8 [ 1047.776942][T22117] [ 1048.450115][T22115] zswap: compressor not available [ 1049.434306][T22145] ubi0: attaching mtd0 [ 1049.454874][T22145] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1049.503660][T22145] eraseblock attaching information dump: [ 1049.531059][T22145] ec 1 [ 1049.551749][T22145] pnum 0 [ 1049.565948][T22145] lnum 0 [ 1049.595995][T22145] scrub 0 [ 1049.630233][T22145] sqnum 1 [ 1049.664898][T22145] Volume identifier header dump: [ 1049.682034][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.690762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.719103][T22145] magic 55424921 [ 1049.738070][T22145] version 1 [ 1049.768516][T22145] vol_type 1 [ 1049.788692][T22145] copy_flag 0 [ 1049.804462][T22145] compat 5 [ 1049.818894][T22145] vol_id 2147479551 [ 1049.846774][T22145] lnum 0 [ 1049.876255][T22145] data_size 0 [ 1049.902472][T22145] used_ebs 0 [ 1049.927598][T22145] data_pad 0 [ 1049.941438][T22145] sqnum 1 [ 1049.958092][T22145] hdr_crc 65b3bd2d [ 1049.997846][T22145] Volume identifier header hexdump: [ 1050.043876][T22151] NFSD: Failed to start, no listeners configured. [ 1050.103805][T22163] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1050.331338][T22173] ptp ptp0: only physical clock in use now [ 1050.382725][T22145] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1050.597137][T22179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4039'. [ 1050.707335][T22179] veth1_macvtap: left promiscuous mode [ 1052.436978][T22214] ptp ptp0: only physical clock in use now [ 1052.699512][T22221] ubi31: attaching mtd0 [ 1052.704555][T22221] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 1052.933389][T22217] zswap: compressor not available [ 1052.939789][T22221] ubi31 error: validate_ec_hdr: bad EC header [ 1052.967658][T22221] Erase counter header dump: [ 1052.993758][T22221] magic 0x55424923 [ 1053.014364][T22221] version 1 [ 1053.028790][T22221] ec 1 [ 1053.052505][T22221] vid_hdr_offset 64 [ 1053.084200][T22221] data_offset 128 [ 1053.093080][T22221] image_seq -511546296 [ 1053.115428][T22221] hdr_crc 0x57961fc8 [ 1053.131352][T22221] erase counter header hexdump: [ 1053.157105][T22221] CPU: 0 UID: 0 PID: 22221 Comm: syz.0.4051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.157126][T22221] Tainted: [L]=SOFTLOCKUP [ 1053.157131][T22221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.157140][T22221] Call Trace: [ 1053.157146][T22221] [ 1053.157152][T22221] dump_stack_lvl+0x100/0x190 [ 1053.157178][T22221] validate_ec_hdr+0x2d0/0x330 [ 1053.157196][T22221] ubi_io_read_ec_hdr+0x656/0x6d0 [ 1053.157214][T22221] ubi_attach+0x601/0x4d30 [ 1053.157239][T22221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1053.157258][T22221] ? ubi_msg+0x114/0x159 [ 1053.157285][T22221] ? __pfx_ubi_msg+0x10/0x10 [ 1053.157307][T22221] ? __pfx_ubi_attach+0x10/0x10 [ 1053.157325][T22221] ? lockdep_init_map_type+0x5c/0x250 [ 1053.157346][T22221] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1053.157366][T22221] ? __vmalloc_node_noprof+0xad/0xf0 [ 1053.157383][T22221] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1053.157404][T22221] ubi_attach_mtd_dev+0x139f/0x32a0 [ 1053.157432][T22221] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1053.157451][T22221] ? __pfx_get_mtd_device+0x10/0x10 [ 1053.157471][T22221] ctrl_cdev_ioctl+0x36a/0x400 [ 1053.157491][T22221] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1053.157516][T22221] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1053.157537][T22221] __x64_sys_ioctl+0x18e/0x210 [ 1053.157559][T22221] do_syscall_64+0x106/0xf80 [ 1053.157576][T22221] ? clear_bhb_loop+0x40/0x90 [ 1053.157594][T22221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.157609][T22221] RIP: 0033:0x7ff47fb9c799 [ 1053.157622][T22221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.157636][T22221] RSP: 002b:00007ff480ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.157650][T22221] RAX: ffffffffffffffda RBX: 00007ff47fe16090 RCX: 00007ff47fb9c799 [ 1053.157660][T22221] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000003 [ 1053.157669][T22221] RBP: 00007ff47fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1053.157678][T22221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.157687][T22221] R13: 00007ff47fe16128 R14: 00007ff47fe16090 R15: 00007ffc481eadb8 [ 1053.157706][T22221] [ 1053.157712][T22221] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1054.000889][T22256] FAULT_INJECTION: forcing a failure. [ 1054.000889][T22256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.023302][T22256] CPU: 0 UID: 0 PID: 22256 Comm: syz.1.4059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.023326][T22256] Tainted: [L]=SOFTLOCKUP [ 1054.023331][T22256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.023340][T22256] Call Trace: [ 1054.023346][T22256] [ 1054.023352][T22256] dump_stack_lvl+0x100/0x190 [ 1054.023380][T22256] should_fail_ex.cold+0x5/0xa [ 1054.023398][T22256] _copy_from_user+0x2e/0xd0 [ 1054.023413][T22256] move_addr_to_kernel+0x65/0x170 [ 1054.023436][T22256] __sys_bind+0x11d/0x260 [ 1054.023451][T22256] ? __pfx___sys_bind+0x10/0x10 [ 1054.023463][T22256] ? __fget_files+0x21f/0x3d0 [ 1054.023483][T22256] ? __pfx_ksys_write+0x10/0x10 [ 1054.023501][T22256] __x64_sys_bind+0x72/0xb0 [ 1054.023514][T22256] ? lockdep_hardirqs_on+0x78/0x100 [ 1054.023532][T22256] do_syscall_64+0x106/0xf80 [ 1054.023548][T22256] ? clear_bhb_loop+0x40/0x90 [ 1054.023566][T22256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.023584][T22256] RIP: 0033:0x7f9d3219c799 [ 1054.023597][T22256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.023612][T22256] RSP: 002b:00007f9d32fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1054.023627][T22256] RAX: ffffffffffffffda RBX: 00007f9d32415fa0 RCX: 00007f9d3219c799 [ 1054.023637][T22256] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 1054.023646][T22256] RBP: 00007f9d32fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.023654][T22256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.023663][T22256] R13: 00007f9d32416038 R14: 00007f9d32415fa0 R15: 00007ffd304cc268 [ 1054.023682][T22256] [ 1054.232384][T22221] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1054.371836][T22249] ubi0: attaching mtd0 [ 1054.376866][T22249] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1054.385482][T22249] eraseblock attaching information dump: [ 1054.407890][T22249] ec 1 [ 1054.420896][T22249] pnum 0 [ 1054.434160][T22249] lnum 0 [ 1054.449916][T22249] scrub 0 [ 1054.458591][T22249] sqnum 1 [ 1054.485396][T22249] Volume identifier header dump: [ 1054.505772][T22249] magic 55424921 [ 1054.527048][T22249] version 1 [ 1054.537849][T22249] vol_type 1 [ 1054.561607][T22249] copy_flag 0 [ 1054.572529][T22249] compat 5 [ 1054.586814][T22249] vol_id 2147479551 [ 1054.609111][T22249] lnum 0 [ 1054.625096][T22249] data_size 0 [ 1054.653821][T22249] used_ebs 0 [ 1054.657209][T22249] data_pad 0 [ 1054.675634][T22267] zswap: compressor not available [ 1054.683351][T22249] sqnum 1 [ 1054.699539][T22249] hdr_crc 65b3bd2d [ 1054.713707][T22249] Volume identifier header hexdump: [ 1054.808566][T22249] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1054.818414][T22251] ubi0: attaching mtd0 [ 1054.837746][T22251] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1054.845618][T22251] eraseblock attaching information dump: [ 1054.879928][T22251] ec 1 [ 1054.883234][T22251] pnum 0 [ 1054.886502][T22251] lnum 0 [ 1054.907434][T22251] scrub 0 [ 1054.920380][T22251] sqnum 1 [ 1054.930448][T22251] Volume identifier header dump: [ 1054.947309][T22251] magic 55424921 [ 1054.951305][T22251] version 1 [ 1054.968638][T22280] FAULT_INJECTION: forcing a failure. [ 1054.968638][T22280] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.981447][T22251] vol_type 1 [ 1054.984812][T22251] copy_flag 0 [ 1055.003153][T22251] compat 5 [ 1055.006542][T22251] vol_id 2147479551 [ 1055.013285][T22281] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input85 [ 1055.022280][T22280] CPU: 0 UID: 0 PID: 22280 Comm: syz.0.4066 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.022304][T22280] Tainted: [L]=SOFTLOCKUP [ 1055.022310][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.022320][T22280] Call Trace: [ 1055.022326][T22280] [ 1055.022333][T22280] dump_stack_lvl+0x100/0x190 [ 1055.022361][T22280] should_fail_ex.cold+0x5/0xa [ 1055.022381][T22280] ? constrain_params_by_rules+0x175/0xcc0 [ 1055.022398][T22280] should_failslab+0xc2/0x120 [ 1055.022415][T22280] __kmalloc_noprof+0xe0/0x850 [ 1055.022437][T22280] ? unwind_get_return_address+0x59/0xa0 [ 1055.022457][T22280] constrain_params_by_rules+0x175/0xcc0 [ 1055.022478][T22280] ? stack_trace_save+0x8e/0xc0 [ 1055.022496][T22280] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1055.022517][T22280] ? __kasan_kmalloc+0xaa/0xb0 [ 1055.022539][T22280] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1055.022563][T22280] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1055.022585][T22280] ? snd_pcm_oss_sync+0x1de/0x840 [ 1055.022604][T22280] ? rcu_is_watching+0x12/0xc0 [ 1055.022626][T22280] ? snd_interval_refine+0x2d0/0x580 [ 1055.022647][T22280] snd_pcm_hw_refine+0x7e7/0xad0 [ 1055.022667][T22280] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1055.022690][T22280] ? __asan_memset+0x23/0x50 [ 1055.022710][T22280] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1055.022787][T22280] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1055.022821][T22280] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1055.022845][T22280] ? __pfx___mutex_lock+0x10/0x10 [ 1055.022879][T22280] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1055.022904][T22280] snd_pcm_oss_sync+0x1de/0x840 [ 1055.022922][T22280] snd_pcm_oss_release+0x238/0x300 [ 1055.022937][T22280] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1055.022952][T22280] __fput+0x3ff/0xb40 [ 1055.022974][T22280] task_work_run+0x150/0x240 [ 1055.022996][T22280] ? __pfx_task_work_run+0x10/0x10 [ 1055.023023][T22280] exit_to_user_mode_loop+0x100/0x4a0 [ 1055.023045][T22280] do_syscall_64+0x668/0xf80 [ 1055.023062][T22280] ? clear_bhb_loop+0x40/0x90 [ 1055.023081][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.023097][T22280] RIP: 0033:0x7ff47fb9c799 [ 1055.023111][T22280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.023126][T22280] RSP: 002b:00007ff480aff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1055.023141][T22280] RAX: 0000000000000000 RBX: 00007ff47fe15fa0 RCX: 00007ff47fb9c799 [ 1055.023151][T22280] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1055.023160][T22280] RBP: 00007ff47fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1055.023169][T22280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.023178][T22280] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1055.023199][T22280] [ 1055.306135][T22251] lnum 0 [ 1055.309506][T22251] data_size 0 [ 1055.314197][T22251] used_ebs 0 [ 1055.317688][T22251] data_pad 0 [ 1055.321043][T22251] sqnum 1 [ 1055.324395][T22251] hdr_crc 65b3bd2d [ 1055.328620][T22251] Volume identifier header hexdump: [ 1055.379018][T22282] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1055.495539][T22251] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1055.542405][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1055.869284][T22291] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1057.078940][T22317] ubi0: attaching mtd0 [ 1057.101527][T22317] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1057.132056][T22317] eraseblock attaching information dump: [ 1057.153481][T22317] ec 1 [ 1057.169774][T22317] pnum 0 [ 1057.184138][T22317] lnum 0 [ 1057.195188][T22317] scrub 0 [ 1057.212485][T22317] sqnum 1 [ 1057.225937][T22317] Volume identifier header dump: [ 1057.244964][T22317] magic 55424921 [ 1057.257917][T22317] version 1 [ 1057.273874][T22317] vol_type 1 [ 1057.282698][T22317] copy_flag 0 [ 1057.293599][T22317] compat 5 [ 1057.301409][T22317] vol_id 2147479551 [ 1057.317426][T22317] lnum 0 [ 1057.325217][T22317] data_size 0 [ 1057.333835][T22317] used_ebs 0 [ 1057.342246][T22317] data_pad 0 [ 1057.354549][T22317] sqnum 1 [ 1057.367290][T22317] hdr_crc 65b3bd2d [ 1057.383271][T22317] Volume identifier header hexdump: [ 1057.565387][T22317] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1057.799917][T22334] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1060.580539][T21262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1060.586710][T22356] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1061.270375][T22356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1061.276574][T22356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1061.283076][T22356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1061.521900][T22386] FAULT_INJECTION: forcing a failure. [ 1061.521900][T22386] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.598839][T22386] CPU: 0 UID: 0 PID: 22386 Comm: syz.1.4095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.598867][T22386] Tainted: [L]=SOFTLOCKUP [ 1061.598873][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.598883][T22386] Call Trace: [ 1061.598889][T22386] [ 1061.598896][T22386] dump_stack_lvl+0x100/0x190 [ 1061.598924][T22386] should_fail_ex.cold+0x5/0xa [ 1061.598943][T22386] should_failslab+0xc2/0x120 [ 1061.598960][T22386] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1061.598994][T22386] ? sock_alloc_inode+0x25/0x1c0 [ 1061.599022][T22386] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1061.599043][T22386] sock_alloc_inode+0x25/0x1c0 [ 1061.599064][T22386] alloc_inode+0x68/0x250 [ 1061.599083][T22386] sock_alloc+0x44/0x280 [ 1061.599101][T22386] ? security_socket_create+0x7f/0x250 [ 1061.599123][T22386] __sock_create+0xc2/0x860 [ 1061.599148][T22386] __sys_socket+0x14d/0x260 [ 1061.599171][T22386] ? __pfx___sys_socket+0x10/0x10 [ 1061.599199][T22386] __x64_sys_socket+0x72/0xb0 [ 1061.599212][T22386] ? lockdep_hardirqs_on+0x78/0x100 [ 1061.599230][T22386] do_syscall_64+0x106/0xf80 [ 1061.599247][T22386] ? clear_bhb_loop+0x40/0x90 [ 1061.599266][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.599282][T22386] RIP: 0033:0x7f9d3219c799 [ 1061.599296][T22386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.599311][T22386] RSP: 002b:00007f9d32fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1061.599327][T22386] RAX: ffffffffffffffda RBX: 00007f9d32415fa0 RCX: 00007f9d3219c799 [ 1061.599338][T22386] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1061.599347][T22386] RBP: 00007f9d32232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1061.599356][T22386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.599365][T22386] R13: 00007f9d32416038 R14: 00007f9d32415fa0 R15: 00007ffd304cc268 [ 1061.599384][T22386] [ 1061.599394][T22386] socket: no more sockets [ 1062.203866][T22403] zswap: compressor not available [ 1062.256260][T22412] overlayfs: missing 'lowerdir' [ 1062.653033][T21262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1062.712455][T22435] futex_wake_op: syz.0.4106 tries to shift op by -2048; fix this program [ 1062.763789][T22435] futex_wake_op: syz.0.4106 tries to shift op by -2048; fix this program [ 1062.868898][T22435] : Can't lookup blockdev [ 1063.031293][T22444] FAULT_INJECTION: forcing a failure. [ 1063.031293][T22444] name fail_futex, interval 1, probability 0, space 0, times 506 [ 1063.067819][T22444] CPU: 0 UID: 0 PID: 22444 Comm: syz.1.4109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.067849][T22444] Tainted: [L]=SOFTLOCKUP [ 1063.067855][T22444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.067865][T22444] Call Trace: [ 1063.067873][T22444] [ 1063.067881][T22444] dump_stack_lvl+0x100/0x190 [ 1063.067909][T22444] should_fail_ex.cold+0x5/0xa [ 1063.067928][T22444] get_futex_key+0x1d2/0x1620 [ 1063.067959][T22444] ? __pfx_get_futex_key+0x10/0x10 [ 1063.067976][T22444] ? futex_hash+0x2c5/0x380 [ 1063.068000][T22444] futex_wake+0xea/0x530 [ 1063.068023][T22444] ? __pfx_futex_wait+0x10/0x10 [ 1063.068045][T22444] ? __pfx_futex_wake+0x10/0x10 [ 1063.068069][T22444] ? __lock_acquire+0x4a5/0x2630 [ 1063.068088][T22444] ? do_sys_openat2+0x1b4/0x1e0 [ 1063.068110][T22444] do_futex+0x32b/0x350 [ 1063.068129][T22444] ? __pfx_do_futex+0x10/0x10 [ 1063.068148][T22444] ? cap_task_prctl+0x104/0xa50 [ 1063.068173][T22444] __x64_sys_futex+0x34f/0x4d0 [ 1063.068194][T22444] ? __pfx___x64_sys_futex+0x10/0x10 [ 1063.068214][T22444] ? __pfx___do_sys_prctl+0x10/0x10 [ 1063.068241][T22444] do_syscall_64+0x106/0xf80 [ 1063.068259][T22444] ? clear_bhb_loop+0x40/0x90 [ 1063.068277][T22444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.068293][T22444] RIP: 0033:0x7f9d3219c799 [ 1063.068307][T22444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.068322][T22444] RSP: 002b:00007f9d32fb90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1063.068338][T22444] RAX: ffffffffffffffda RBX: 00007f9d32415fa8 RCX: 00007f9d3219c799 [ 1063.068348][T22444] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9d32415fac [ 1063.068357][T22444] RBP: 00007f9d32415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.068366][T22444] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1063.068376][T22444] R13: 00007f9d32416038 R14: 00007ffd304cc180 R15: 00007ffd304cc268 [ 1063.068396][T22444] [ 1063.289160][T21262] Bluetooth: hci0: command 0x0406 tx timeout [ 1063.295315][T14562] Bluetooth: hci1: command 0x0406 tx timeout [ 1063.705128][T22449] can: request_module (can-proto-0) failed. [ 1064.113542][ T30] audit: type=1806 audit(4294968532.393:64): xattr="" res=-22 [ 1064.212557][T22463] 0x001c00000000-0x100002c00000200 : "" [ 1064.218405][T22463] mtd: partition "" is out of reach -- disabled [ 1064.252000][T22463] ftl_cs: FTL header not found. [ 1064.641401][T21262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1064.647603][T22429] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1065.476841][T22429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.483152][T22429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.490033][T22429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.735748][T22487] futex_wake_op: syz.1.4117 tries to shift op by -2048; fix this program [ 1065.895312][T22480] zswap: compressor not available [ 1065.934945][T22495] nbd: must specify at least one socket [ 1066.209956][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1066.220597][T22502] zswap: compressor not available [ 1066.230236][T22509] bridge_slave_1: left allmulticast mode [ 1066.244011][T22509] bridge_slave_1: left promiscuous mode [ 1066.256529][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.276196][T22509] bridge_slave_0: left allmulticast mode [ 1066.282159][T22509] bridge_slave_0: left promiscuous mode [ 1066.291467][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.405564][T22512] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input86 [ 1066.677576][T22516] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1066.712410][T21262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1067.333148][T22536] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input87 [ 1067.508317][T21262] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.514377][T14562] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.610060][T22545] 0x001c00000000-0x100002c00000200 : "" [ 1067.631766][T22545] mtd: partition "" is out of reach -- disabled [ 1067.670174][T22545] ftl_cs: FTL header not found. [ 1067.924820][T22553] FAULT_INJECTION: forcing a failure. [ 1067.924820][T22553] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.975195][T22551] 0x001c00000000-0x100002c00000200 : "" [ 1067.987020][T22553] CPU: 0 UID: 0 PID: 22553 Comm: syz.0.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.987045][T22553] Tainted: [L]=SOFTLOCKUP [ 1067.987050][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1067.987059][T22553] Call Trace: [ 1067.987064][T22553] [ 1067.987071][T22553] dump_stack_lvl+0x100/0x190 [ 1067.987098][T22553] should_fail_ex.cold+0x5/0xa [ 1067.987115][T22553] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1067.987132][T22553] should_failslab+0xc2/0x120 [ 1067.987147][T22553] __kmalloc_noprof+0xe0/0x850 [ 1067.987172][T22553] tomoyo_realpath_from_path+0xb6/0x690 [ 1067.987192][T22553] tomoyo_check_open_permission+0x2af/0x3c0 [ 1067.987215][T22553] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1067.987255][T22553] ? lock_acquire+0x1cf/0x380 [ 1067.987273][T22553] ? find_held_lock+0x2b/0x80 [ 1067.987291][T22553] tomoyo_file_open+0x6b/0x90 [ 1067.987310][T22553] security_file_open+0xb5/0x1e0 [ 1067.987326][T22553] do_dentry_open+0x5aa/0x1660 [ 1067.987347][T22553] vfs_open+0x82/0x3f0 [ 1067.987366][T22553] path_openat+0x208c/0x31a0 [ 1067.987388][T22553] ? __pfx_path_openat+0x10/0x10 [ 1067.987410][T22553] do_file_open+0x20e/0x430 [ 1067.987426][T22553] ? __pfx_do_file_open+0x10/0x10 [ 1067.987449][T22553] ? __pfx_kfree_link+0x10/0x10 [ 1067.987475][T22553] ? alloc_fd+0x476/0x790 [ 1067.987491][T22553] ? do_getname+0x191/0x390 [ 1067.987510][T22553] do_sys_openat2+0x10d/0x1e0 [ 1067.987528][T22553] ? __pfx_do_sys_openat2+0x10/0x10 [ 1067.987553][T22553] __x64_sys_openat+0x12d/0x210 [ 1067.987572][T22553] ? __pfx___x64_sys_openat+0x10/0x10 [ 1067.987598][T22553] do_syscall_64+0x106/0xf80 [ 1067.987615][T22553] ? clear_bhb_loop+0x40/0x90 [ 1067.987633][T22553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.987647][T22553] RIP: 0033:0x7ff47fb5cfce [ 1067.987660][T22553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.987673][T22553] RSP: 002b:00007ff480afef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1067.987688][T22553] RAX: ffffffffffffffda RBX: 00007ff480aff6c0 RCX: 00007ff47fb5cfce [ 1067.987697][T22553] RDX: 0000000000000002 RSI: 00007ff47fc324e0 RDI: ffffffffffffff9c [ 1067.987707][T22553] RBP: 00007ff47fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1067.987715][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1067.987723][T22553] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1067.987743][T22553] [ 1067.987749][T22553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1068.247207][T22551] mtd: partition "" is out of reach -- disabled [ 1068.426826][T22551] ftl_cs: FTL header not found. [ 1068.875718][T22553] FAULT_INJECTION: forcing a failure. [ 1068.875718][T22553] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.927120][T22553] CPU: 0 UID: 0 PID: 22553 Comm: syz.0.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.927146][T22553] Tainted: [L]=SOFTLOCKUP [ 1068.927151][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1068.927159][T22553] Call Trace: [ 1068.927165][T22553] [ 1068.927171][T22553] dump_stack_lvl+0x100/0x190 [ 1068.927197][T22553] should_fail_ex.cold+0x5/0xa [ 1068.927214][T22553] should_failslab+0xc2/0x120 [ 1068.927230][T22553] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1068.927252][T22553] ? __get_vm_area_node+0x101/0x330 [ 1068.927272][T22553] __get_vm_area_node+0x101/0x330 [ 1068.927298][T22553] __vmalloc_node_range_noprof+0x213/0x1530 [ 1068.927316][T22553] ? kernel_clone+0xfc/0x9a0 [ 1068.927333][T22553] ? local_lock_release+0x99/0x130 [ 1068.927353][T22553] ? kernel_clone+0xfc/0x9a0 [ 1068.927374][T22553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1068.927392][T22553] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1068.927412][T22553] ? rcu_is_watching+0x12/0xc0 [ 1068.927433][T22553] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1068.927449][T22553] ? kernel_clone+0xfc/0x9a0 [ 1068.927464][T22553] __vmalloc_node_noprof+0xad/0xf0 [ 1068.927481][T22553] ? kernel_clone+0xfc/0x9a0 [ 1068.927498][T22553] copy_process+0x5ec/0x7a10 [ 1068.927514][T22553] ? __pfx__kstrtoull+0x10/0x10 [ 1068.927540][T22553] ? __pfx_copy_process+0x10/0x10 [ 1068.927560][T22553] ? _copy_from_user+0x59/0xd0 [ 1068.927577][T22553] kernel_clone+0xfc/0x9a0 [ 1068.927592][T22553] ? get_pid_task+0xfc/0x250 [ 1068.927610][T22553] ? __pfx_kernel_clone+0x10/0x10 [ 1068.927630][T22553] ? find_held_lock+0x2b/0x80 [ 1068.927649][T22553] __do_sys_clone3+0x214/0x290 [ 1068.927666][T22553] ? __pfx___do_sys_clone3+0x10/0x10 [ 1068.927692][T22553] ? __fget_files+0x21f/0x3d0 [ 1068.927719][T22553] do_syscall_64+0x106/0xf80 [ 1068.927736][T22553] ? clear_bhb_loop+0x40/0x90 [ 1068.927754][T22553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.927769][T22553] RIP: 0033:0x7ff47fb9c799 [ 1068.927782][T22553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.927796][T22553] RSP: 002b:00007ff480afeef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1068.927811][T22553] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff47fb9c799 [ 1068.927820][T22553] RDX: 00007ff480afef10 RSI: 0000000000000058 RDI: 00007ff480afef10 [ 1068.927830][T22553] RBP: 00007ff480aff090 R08: 0000000000000000 R09: 0000000000000058 [ 1068.927838][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.927847][T22553] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1068.927866][T22553] [ 1068.931056][T22553] syz.0.4141: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1069.576112][T22578] FAULT_INJECTION: forcing a failure. [ 1069.576112][T22578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1069.680467][T22578] CPU: 0 UID: 0 PID: 22578 Comm: syz.1.4149 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.680497][T22578] Tainted: [L]=SOFTLOCKUP [ 1069.680503][T22578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.680513][T22578] Call Trace: [ 1069.680520][T22578] [ 1069.680526][T22578] dump_stack_lvl+0x100/0x190 [ 1069.680555][T22578] should_fail_ex.cold+0x5/0xa [ 1069.680571][T22578] ? prepare_alloc_pages+0x16d/0x5f0 [ 1069.680592][T22578] should_fail_alloc_page+0xeb/0x140 [ 1069.680610][T22578] prepare_alloc_pages+0x1f0/0x5f0 [ 1069.680631][T22578] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1069.680657][T22578] ? rcu_is_watching+0x12/0xc0 [ 1069.680681][T22578] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1069.680700][T22578] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1069.680726][T22578] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1069.680753][T22578] ? find_held_lock+0x2b/0x80 [ 1069.680768][T22578] ? is_bpf_text_address+0x8a/0x1a0 [ 1069.680791][T22578] ? is_bpf_text_address+0x8a/0x1a0 [ 1069.680816][T22578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1069.680833][T22578] ? is_bpf_text_address+0x94/0x1a0 [ 1069.680856][T22578] ? kernel_text_address+0x8d/0x100 [ 1069.680879][T22578] ? __kernel_text_address+0xd/0x30 [ 1069.680901][T22578] ? unwind_get_return_address+0x59/0xa0 [ 1069.680924][T22578] alloc_pages_bulk_noprof+0x782/0x1490 [ 1069.680955][T22578] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1069.680981][T22578] ? kasan_save_stack+0x30/0x50 [ 1069.681009][T22578] ? alloc_pages_noprof+0x233/0x390 [ 1069.681028][T22578] __kasan_populate_vmalloc+0xf0/0x210 [ 1069.681055][T22578] alloc_vmap_area+0x95d/0x2bd0 [ 1069.681080][T22578] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1069.681102][T22578] __get_vm_area_node+0x1ca/0x330 [ 1069.681123][T22578] __vmalloc_node_range_noprof+0x213/0x1530 [ 1069.681144][T22578] ? kernel_clone+0xfc/0x9a0 [ 1069.681162][T22578] ? local_lock_release+0x99/0x130 [ 1069.681184][T22578] ? kernel_clone+0xfc/0x9a0 [ 1069.681214][T22578] ? find_held_lock+0x2b/0x80 [ 1069.681230][T22578] ? rcu_read_unlock+0x17/0x60 [ 1069.681248][T22578] ? rcu_read_unlock+0x17/0x60 [ 1069.681265][T22578] ? obj_cgroup_charge_account+0x46d/0x640 [ 1069.681284][T22578] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1069.681305][T22578] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1069.681325][T22578] ? rcu_is_watching+0x12/0xc0 [ 1069.681349][T22578] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1069.681367][T22578] ? kernel_clone+0xfc/0x9a0 [ 1069.681385][T22578] __vmalloc_node_noprof+0xad/0xf0 [ 1069.681404][T22578] ? kernel_clone+0xfc/0x9a0 [ 1069.681423][T22578] copy_process+0x5ec/0x7a10 [ 1069.681440][T22578] ? futex_unqueue+0x133/0x2c0 [ 1069.681468][T22578] ? __pfx_copy_process+0x10/0x10 [ 1069.681491][T22578] ? _copy_from_user+0x59/0xd0 [ 1069.681509][T22578] kernel_clone+0xfc/0x9a0 [ 1069.681528][T22578] ? __pfx_kernel_clone+0x10/0x10 [ 1069.681550][T22578] ? __pfx_futex_wait+0x10/0x10 [ 1069.681578][T22578] __do_sys_clone3+0x214/0x290 [ 1069.681596][T22578] ? __pfx___do_sys_clone3+0x10/0x10 [ 1069.681638][T22578] do_syscall_64+0x106/0xf80 [ 1069.681658][T22578] ? clear_bhb_loop+0x40/0x90 [ 1069.681678][T22578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.681695][T22578] RIP: 0033:0x7f9d3219c799 [ 1069.681710][T22578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.681726][T22578] RSP: 002b:00007f9d32fb8ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1069.681743][T22578] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9d3219c799 [ 1069.681755][T22578] RDX: 00007f9d32fb8f10 RSI: 0000000000000058 RDI: 00007f9d32fb8f10 [ 1069.681765][T22578] RBP: 00007f9d32232bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1069.681774][T22578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.681784][T22578] R13: 00007f9d32416038 R14: 00007f9d32415fa0 R15: 00007ffd304cc268 [ 1069.681804][T22578] [ 1070.541107][T22553] ,cpuset=/,mems_allowed=0-1 [ 1070.546090][T22553] CPU: 0 UID: 0 PID: 22553 Comm: syz.0.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.546115][T22553] Tainted: [L]=SOFTLOCKUP [ 1070.546120][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.546129][T22553] Call Trace: [ 1070.546134][T22553] [ 1070.546140][T22553] dump_stack_lvl+0x100/0x190 [ 1070.546166][T22553] warn_alloc.cold+0x95/0x1c1 [ 1070.546190][T22553] ? __pfx_warn_alloc+0x10/0x10 [ 1070.546218][T22553] ? trace_kmalloc+0x101/0x130 [ 1070.546234][T22553] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1070.546258][T22553] ? __kasan_kmalloc+0x8a/0xb0 [ 1070.546281][T22553] ? __get_vm_area_node+0x208/0x330 [ 1070.546301][T22553] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1070.546318][T22553] ? local_lock_release+0x99/0x130 [ 1070.546340][T22553] ? kernel_clone+0xfc/0x9a0 [ 1070.546361][T22553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1070.546380][T22553] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1070.546399][T22553] ? rcu_is_watching+0x12/0xc0 [ 1070.546421][T22553] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1070.546437][T22553] ? kernel_clone+0xfc/0x9a0 [ 1070.546452][T22553] __vmalloc_node_noprof+0xad/0xf0 [ 1070.546469][T22553] ? kernel_clone+0xfc/0x9a0 [ 1070.546486][T22553] copy_process+0x5ec/0x7a10 [ 1070.546502][T22553] ? __pfx__kstrtoull+0x10/0x10 [ 1070.546528][T22553] ? __pfx_copy_process+0x10/0x10 [ 1070.546553][T22553] ? _copy_from_user+0x59/0xd0 [ 1070.546569][T22553] kernel_clone+0xfc/0x9a0 [ 1070.546585][T22553] ? get_pid_task+0xfc/0x250 [ 1070.546603][T22553] ? __pfx_kernel_clone+0x10/0x10 [ 1070.546623][T22553] ? find_held_lock+0x2b/0x80 [ 1070.546642][T22553] __do_sys_clone3+0x214/0x290 [ 1070.546658][T22553] ? __pfx___do_sys_clone3+0x10/0x10 [ 1070.546684][T22553] ? __fget_files+0x21f/0x3d0 [ 1070.546713][T22553] do_syscall_64+0x106/0xf80 [ 1070.546730][T22553] ? clear_bhb_loop+0x40/0x90 [ 1070.546748][T22553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.546763][T22553] RIP: 0033:0x7ff47fb9c799 [ 1070.546777][T22553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.546791][T22553] RSP: 002b:00007ff480afeef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1070.546805][T22553] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff47fb9c799 [ 1070.546815][T22553] RDX: 00007ff480afef10 RSI: 0000000000000058 RDI: 00007ff480afef10 [ 1070.546824][T22553] RBP: 00007ff480aff090 R08: 0000000000000000 R09: 0000000000000058 [ 1070.546833][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.546842][T22553] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1070.546861][T22553] [ 1070.546867][T22553] Mem-Info: [ 1071.419581][T22553] active_anon:42417 inactive_anon:1163 isolated_anon:0 [ 1071.419581][T22553] active_file:15345 inactive_file:52318 isolated_file:0 [ 1071.419581][T22553] unevictable:768 dirty:77 writeback:0 [ 1071.419581][T22553] slab_reclaimable:12583 slab_unreclaimable:94586 [ 1071.419581][T22553] mapped:36820 shmem:20649 pagetables:1426 [ 1071.419581][T22553] sec_pagetables:0 bounce:0 [ 1071.419581][T22553] kernel_misc_reclaimable:0 [ 1071.419581][T22553] free:1279520 free_pcp:6731 free_cma:0 [ 1071.629466][T22553] Node 0 active_anon:169708kB inactive_anon:4652kB active_file:61380kB inactive_file:209132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149204kB dirty:460kB writeback:0kB shmem:83244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:67584kB kernel_stack:11232kB pagetables:5552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1071.788069][T22553] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1071.923438][T22553] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1072.047112][T22553] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1072.077422][T22553] Node 0 DMA32 free:1155780kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:175312kB inactive_anon:4652kB active_file:61640kB inactive_file:209132kB unevictable:1536kB writepending:664kB zspages:488kB present:3129332kB managed:2537428kB mlocked:0kB bounce:0kB free_pcp:26948kB local_pcp:26948kB free_cma:0kB [ 1072.216786][T22553] lowmem_reserve[]: 0 0 1 1 1 [ 1072.231930][T22553] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1072.432774][T22553] lowmem_reserve[]: 0 0 0 0 0 [ 1072.469524][T22553] Node 1 Normal free:3937856kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5020kB local_pcp:5020kB free_cma:0kB [ 1072.595372][T22610] zswap: compressor not available [ 1072.602390][T22553] lowmem_reserve[]: 0 0 0 0 0 [ 1072.638833][T22553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1072.689697][T22553] Node 0 DMA32: 4782*4kB (UE) 4284*8kB (UE) 3762*16kB (UM) 1878*32kB (UM) 1253*64kB (UME) 797*128kB (UME) 651*256kB (UME) 413*512kB (UME) 265*1024kB (UM) 6*2048kB (UM) 32*4096kB (UM) = 1148728kB [ 1072.749196][T22553] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1072.795796][T22553] Node 1 Normal: 0*4kB 4*8kB (U) 6*16kB (U) 4*32kB (U) 3*64kB (UM) 5*128kB (U) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937856kB [ 1072.847345][T22553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.867835][T22553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.887397][T22553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.909788][T22553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.932563][T22553] 93764 total pagecache pages [ 1072.945427][T22553] 16 pages in swap cache [ 1072.956784][T22553] Free swap = 124792kB [ 1072.967289][T22553] Total swap = 124996kB [ 1072.975886][T22553] 2097051 pages RAM [ 1072.984145][T22553] 0 pages HighMem/MovableOnly [ 1072.994443][T22553] 430814 pages reserved [ 1073.008378][T22553] 0 pages cma reserved [ 1074.674336][T21262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1074.680414][T22623] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1075.531231][T22623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.537409][T22623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.543995][T22623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.690017][T22642] [U] /Eev/audio1 [ 1075.694208][T22642] [U] F츱Z|GP)LnC:DubΧtUwUU3.O"4Y8@Z5`mb4*mlD)}K>f&9- [ 1075.705150][T22642] [U] WwK E6?(I,k8D̙Wpu\U [ 1075.711743][T22642] [U] [ 1075.714437][T22642] [U] [ 1075.782690][T22642] [U] [ 1075.785408][T22642] [U] [ 1075.788124][T22642] [U] [ 1075.790797][T22642] [U] [ 1075.825709][T22642] [U] [ 1075.828423][T22642] [U] [ 1075.831096][T22642] [U] [ 1075.833767][T22642] [U] [ 1075.857451][T22644] 0x001c00000000-0x100002c00000200 : "" [ 1075.867095][T22642] [U] [ 1075.873696][T22644] mtd: partition "" is out of reach -- disabled [ 1075.911617][T22644] ftl_cs: FTL header not found. [ 1075.950839][T21262] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1075.958390][T21262] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1076.320333][T22660] FAULT_INJECTION: forcing a failure. [ 1076.320333][T22660] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.351867][T22660] CPU: 0 UID: 0 PID: 22660 Comm: syz.0.4173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.351895][T22660] Tainted: [L]=SOFTLOCKUP [ 1076.351901][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1076.351910][T22660] Call Trace: [ 1076.351916][T22660] [ 1076.351923][T22660] dump_stack_lvl+0x100/0x190 [ 1076.351951][T22660] should_fail_ex.cold+0x5/0xa [ 1076.351969][T22660] ? constrain_params_by_rules+0x175/0xcc0 [ 1076.351986][T22660] should_failslab+0xc2/0x120 [ 1076.352003][T22660] __kmalloc_noprof+0xe0/0x850 [ 1076.352026][T22660] ? unwind_get_return_address+0x59/0xa0 [ 1076.352047][T22660] constrain_params_by_rules+0x175/0xcc0 [ 1076.352068][T22660] ? stack_trace_save+0x8e/0xc0 [ 1076.352086][T22660] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1076.352107][T22660] ? __kasan_kmalloc+0xaa/0xb0 [ 1076.352147][T22660] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1076.352173][T22660] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1076.352198][T22660] ? snd_pcm_oss_sync+0x1de/0x840 [ 1076.352218][T22660] ? rcu_is_watching+0x12/0xc0 [ 1076.352241][T22660] ? snd_interval_refine+0x2d0/0x580 [ 1076.352263][T22660] snd_pcm_hw_refine+0x7e7/0xad0 [ 1076.352283][T22660] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1076.352305][T22660] ? __asan_memset+0x23/0x50 [ 1076.352325][T22660] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1076.352351][T22660] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1076.352384][T22660] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1076.352407][T22660] ? __pfx___mutex_lock+0x10/0x10 [ 1076.352440][T22660] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1076.352465][T22660] snd_pcm_oss_sync+0x1de/0x840 [ 1076.352483][T22660] snd_pcm_oss_release+0x238/0x300 [ 1076.352498][T22660] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1076.352513][T22660] __fput+0x3ff/0xb40 [ 1076.352535][T22660] task_work_run+0x150/0x240 [ 1076.352557][T22660] ? __pfx_task_work_run+0x10/0x10 [ 1076.352583][T22660] exit_to_user_mode_loop+0x100/0x4a0 [ 1076.352605][T22660] do_syscall_64+0x668/0xf80 [ 1076.352623][T22660] ? clear_bhb_loop+0x40/0x90 [ 1076.352641][T22660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.352657][T22660] RIP: 0033:0x7ff47fb9c799 [ 1076.352670][T22660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.352686][T22660] RSP: 002b:00007ff480aff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1076.352702][T22660] RAX: 0000000000000000 RBX: 00007ff47fe15fa0 RCX: 00007ff47fb9c799 [ 1076.352712][T22660] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1076.352721][T22660] RBP: 00007ff47fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1076.352730][T22660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.352739][T22660] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1076.352759][T22660] [ 1076.933822][T21262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.542323][T14562] Bluetooth: hci0: command 0x0406 tx timeout [ 1077.548367][T21262] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.598927][T22674] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input88 [ 1078.544271][T22683] 0x001c00000000-0x100002c00000200 : "" [ 1078.565907][T22683] mtd: partition "" is out of reach -- disabled [ 1078.617396][T22683] ftl_cs: FTL header not found. [ 1080.710975][T22719] ptrace attach of "./syz-executor exec"[15954] was attempted by ""[22719] [ 1081.687454][T22733] FAULT_INJECTION: forcing a failure. [ 1081.687454][T22733] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.687486][T22733] CPU: 0 UID: 0 PID: 22733 Comm: syz.0.4191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.687509][T22733] Tainted: [L]=SOFTLOCKUP [ 1081.687516][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.687526][T22733] Call Trace: [ 1081.687531][T22733] [ 1081.687537][T22733] dump_stack_lvl+0x100/0x190 [ 1081.687564][T22733] should_fail_ex.cold+0x5/0xa [ 1081.687584][T22733] ? drm_atomic_state_init+0x190/0x490 [ 1081.687600][T22733] should_failslab+0xc2/0x120 [ 1081.687617][T22733] __kmalloc_noprof+0xe0/0x850 [ 1081.687643][T22733] drm_atomic_state_init+0x190/0x490 [ 1081.687658][T22733] ? kasan_save_track+0x14/0x30 [ 1081.687689][T22733] drm_atomic_state_alloc+0xd3/0x120 [ 1081.687707][T22733] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1081.687727][T22733] ? trace_contention_end+0x140/0x180 [ 1081.687750][T22733] ? __mutex_lock+0x26a/0x1b90 [ 1081.687769][T22733] ? __mutex_lock+0x26a/0x1b90 [ 1081.687788][T22733] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1081.687807][T22733] ? drm_master_internal_acquire+0x21/0x80 [ 1081.687844][T22733] drm_client_modeset_commit_locked+0x14d/0x580 [ 1081.687867][T22733] drm_client_modeset_commit+0x4f/0x80 [ 1081.687886][T22733] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1081.687907][T22733] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1081.687927][T22733] drm_fbdev_client_restore+0x1b/0x30 [ 1081.687950][T22733] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1081.687973][T22733] drm_client_dev_restore+0x205/0x2a0 [ 1081.687995][T22733] drm_release+0x2c6/0x360 [ 1081.688012][T22733] ? __pfx_drm_release+0x10/0x10 [ 1081.688028][T22733] __fput+0x3ff/0xb40 [ 1081.688122][T22733] task_work_run+0x150/0x240 [ 1081.688146][T22733] ? __pfx_task_work_run+0x10/0x10 [ 1081.688174][T22733] exit_to_user_mode_loop+0x100/0x4a0 [ 1081.688197][T22733] do_syscall_64+0x668/0xf80 [ 1081.688215][T22733] ? clear_bhb_loop+0x40/0x90 [ 1081.688233][T22733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.688249][T22733] RIP: 0033:0x7ff47fb9c799 [ 1081.688263][T22733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.688278][T22733] RSP: 002b:00007ff480ade028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1081.688294][T22733] RAX: 0000000000000000 RBX: 00007ff47fe16090 RCX: 00007ff47fb9c799 [ 1081.688304][T22733] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1081.688314][T22733] RBP: 00007ff47fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1081.688324][T22733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.688333][T22733] R13: 00007ff47fe16128 R14: 00007ff47fe16090 R15: 00007ffc481eadb8 [ 1081.688355][T22733] [ 1081.977932][T22740] FAULT_INJECTION: forcing a failure. [ 1081.977932][T22740] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.977985][T22740] CPU: 0 UID: 0 PID: 22740 Comm: syz.1.4194 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.978006][T22740] Tainted: [L]=SOFTLOCKUP [ 1081.978011][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.978021][T22740] Call Trace: [ 1081.978026][T22740] [ 1081.978032][T22740] dump_stack_lvl+0x100/0x190 [ 1081.978057][T22740] should_fail_ex.cold+0x5/0xa [ 1081.978075][T22740] should_failslab+0xc2/0x120 [ 1081.978090][T22740] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1081.978124][T22740] ? netlink_policy_dump_add_policy+0x39a/0x4d0 [ 1081.978152][T22740] netlink_policy_dump_add_policy+0x39a/0x4d0 [ 1081.978180][T22740] ? __pfx_netlink_policy_dump_add_policy+0x10/0x10 [ 1081.978210][T22740] ctrl_dumppolicy_start+0x810/0xab0 [ 1081.978231][T22740] ? trace_contention_end+0x140/0x180 [ 1081.978251][T22740] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1081.978275][T22740] ? genl_start+0x6b6/0x970 [ 1081.978298][T22740] ? __pfx___mutex_lock+0x10/0x10 [ 1081.978326][T22740] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 1081.978347][T22740] ? __pfx_devlink_nl_get_doit+0x10/0x10 [ 1081.978360][T22740] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 1081.978382][T22740] ? __pfx_devlink_nl_get_dumpit+0x10/0x10 [ 1081.978404][T22740] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1081.978425][T22740] genl_start+0x601/0x970 [ 1081.978448][T22740] __netlink_dump_start+0x60e/0x990 [ 1081.978469][T22740] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1081.978492][T22740] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1081.978513][T22740] ? __pfx___mutex_lock+0x10/0x10 [ 1081.978535][T22740] ? __pfx_genl_get_cmd+0x10/0x10 [ 1081.978553][T22740] ? __pfx_genl_start+0x10/0x10 [ 1081.978572][T22740] ? __pfx_genl_dumpit+0x10/0x10 [ 1081.978590][T22740] ? __pfx_genl_done+0x10/0x10 [ 1081.978612][T22740] ? __dev_queue_xmit+0x5af/0x4800 [ 1081.978634][T22740] ? __radix_tree_lookup+0x217/0x2b0 [ 1081.978653][T22740] genl_rcv_msg+0x471/0x800 [ 1081.978676][T22740] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.978697][T22740] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1081.978717][T22740] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 1081.978737][T22740] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 1081.978763][T22740] netlink_rcv_skb+0x159/0x420 [ 1081.978782][T22740] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.978804][T22740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1081.978830][T22740] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1081.978851][T22740] genl_rcv+0x28/0x40 [ 1081.978870][T22740] netlink_unicast+0x5aa/0x870 [ 1081.978891][T22740] ? __pfx_netlink_unicast+0x10/0x10 [ 1081.978909][T22740] ? __pfx___might_resched+0x10/0x10 [ 1081.978930][T22740] ? __lock_acquire+0x4a5/0x2630 [ 1081.978954][T22740] netlink_sendmsg+0x8b0/0xda0 [ 1081.978976][T22740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.978993][T22740] ? __import_iovec+0x1d2/0x640 [ 1081.979015][T22740] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1081.979042][T22740] ____sys_sendmsg+0x9e1/0xb70 [ 1081.979062][T22740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.979083][T22740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.979117][T22740] ___sys_sendmsg+0x190/0x1e0 [ 1081.979141][T22740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.979189][T22740] __sys_sendmsg+0x170/0x220 [ 1081.979208][T22740] ? __pfx___sys_sendmsg+0x10/0x10 [ 1081.979238][T22740] do_syscall_64+0x106/0xf80 [ 1081.979254][T22740] ? clear_bhb_loop+0x40/0x90 [ 1081.979272][T22740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.979287][T22740] RIP: 0033:0x7f9d3219c799 [ 1081.979300][T22740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.979315][T22740] RSP: 002b:00007f9d32fb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.979329][T22740] RAX: ffffffffffffffda RBX: 00007f9d32415fa0 RCX: 00007f9d3219c799 [ 1081.979339][T22740] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1081.979348][T22740] RBP: 00007f9d32fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.979356][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.979365][T22740] R13: 00007f9d32416038 R14: 00007f9d32415fa0 R15: 00007ffd304cc268 [ 1081.979385][T22740] [ 1083.098486][T22755] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1085.130120][T22769] zswap: compressor not available [ 1085.321287][T22783] capability: warning: `syz.3.4209' uses deprecated v2 capabilities in a way that may be insecure [ 1085.402439][T14562] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1085.461017][T22780] ACPI: button: Initial lid state set to 'ignore' [ 1085.623945][T22791] FAULT_INJECTION: forcing a failure. [ 1085.623945][T22791] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.751800][T22791] CPU: 0 UID: 0 PID: 22791 Comm: syz.2.4210 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.751829][T22791] Tainted: [L]=SOFTLOCKUP [ 1085.751835][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.751845][T22791] Call Trace: [ 1085.751851][T22791] [ 1085.751859][T22791] dump_stack_lvl+0x100/0x190 [ 1085.751886][T22791] should_fail_ex.cold+0x5/0xa [ 1085.751906][T22791] should_failslab+0xc2/0x120 [ 1085.751921][T22791] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1085.751946][T22791] ? snd_timer_instance_new+0x65/0x2e0 [ 1085.751974][T22791] kstrdup+0x51/0xe0 [ 1085.751998][T22791] snd_timer_instance_new+0x65/0x2e0 [ 1085.752021][T22791] snd_seq_timer_open+0x1d4/0x600 [ 1085.752042][T22791] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1085.752069][T22791] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1085.752086][T22791] ? lockdep_hardirqs_on+0x78/0x100 [ 1085.752104][T22791] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1085.752124][T22791] queue_use+0xdc/0x1f0 [ 1085.752140][T22791] snd_seq_queue_alloc+0x2e5/0x590 [ 1085.752159][T22791] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1085.752181][T22791] call_seq_client_ctl+0xa3/0x130 [ 1085.752203][T22791] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1085.752225][T22791] alloc_seq_queue+0xdb/0x180 [ 1085.752246][T22791] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1085.752278][T22791] ? mark_held_locks+0x40/0x70 [ 1085.752297][T22791] ? _raw_spin_unlock_irq+0x23/0x50 [ 1085.752312][T22791] ? lockdep_hardirqs_on+0x78/0x100 [ 1085.752332][T22791] snd_seq_oss_open+0x2b2/0xa10 [ 1085.752357][T22791] odev_open+0x79/0xc0 [ 1085.752376][T22791] ? __pfx_odev_open+0x10/0x10 [ 1085.752395][T22791] soundcore_open+0x2e3/0x5a0 [ 1085.752418][T22791] ? __pfx_soundcore_open+0x10/0x10 [ 1085.752439][T22791] chrdev_open+0x234/0x6a0 [ 1085.752455][T22791] ? __pfx_apparmor_file_open+0x10/0x10 [ 1085.752477][T22791] ? __pfx_chrdev_open+0x10/0x10 [ 1085.752494][T22791] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1085.752514][T22791] do_dentry_open+0x6d8/0x1660 [ 1085.752529][T22791] ? __pfx_chrdev_open+0x10/0x10 [ 1085.752549][T22791] vfs_open+0x82/0x3f0 [ 1085.752571][T22791] path_openat+0x208c/0x31a0 [ 1085.752593][T22791] ? __pfx_path_openat+0x10/0x10 [ 1085.752615][T22791] do_file_open+0x20e/0x430 [ 1085.752632][T22791] ? __pfx_do_file_open+0x10/0x10 [ 1085.752662][T22791] ? alloc_fd+0x476/0x790 [ 1085.752678][T22791] ? do_getname+0x191/0x390 [ 1085.752706][T22791] do_sys_openat2+0x10d/0x1e0 [ 1085.752726][T22791] ? __pfx_do_sys_openat2+0x10/0x10 [ 1085.752747][T22791] ? __fget_files+0x21f/0x3d0 [ 1085.752766][T22791] __x64_sys_openat+0x12d/0x210 [ 1085.752787][T22791] ? __pfx___x64_sys_openat+0x10/0x10 [ 1085.752815][T22791] do_syscall_64+0x106/0xf80 [ 1085.752833][T22791] ? clear_bhb_loop+0x40/0x90 [ 1085.752852][T22791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.752868][T22791] RIP: 0033:0x7f82db99c799 [ 1085.752882][T22791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.752897][T22791] RSP: 002b:00007f82dc7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.752913][T22791] RAX: ffffffffffffffda RBX: 00007f82dbc15fa0 RCX: 00007f82db99c799 [ 1085.752923][T22791] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1085.752933][T22791] RBP: 00007f82dba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1085.752943][T22791] R10: 0000000000001800 R11: 0000000000000246 R12: 0000000000000000 [ 1085.752952][T22791] R13: 00007f82dbc16038 R14: 00007f82dbc15fa0 R15: 00007ffffd45d7b8 [ 1085.752974][T22791] [ 1086.819806][T22798] binder: 22793:22798 ioctl 400c620e 2000000008c0 returned -22 [ 1087.613593][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1088.506168][T22817] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 1089.797600][T22829] hub 3-0:1.0: USB hub found [ 1089.864807][T22829] hub 3-0:1.0: 1 port detected [ 1090.051613][T22832] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1090.096027][T22829] usb usb3: authorized to connect [ 1090.204309][T22832] ep_00: uevent: failed to send synthetic uevent: -22 [ 1090.805093][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 1091.548649][T22855] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input90 [ 1092.357470][T22862] 0x001c00000000-0x100002c00000200 : "" [ 1092.447181][T22862] mtd: partition "" is out of reach -- disabled [ 1092.604945][T22862] ftl_cs: FTL header not found. [ 1092.620996][T22866] zswap: compressor not available [ 1092.714912][T21262] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1092.726911][T14562] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1092.734950][T14562] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1092.749623][T14562] CPU: 0 UID: 0 PID: 14562 Comm: kworker/u11:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.749649][T14562] Tainted: [L]=SOFTLOCKUP [ 1092.749655][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.749666][T14562] Workqueue: hci2 hci_rx_work [ 1092.749687][T14562] Call Trace: [ 1092.749694][T14562] [ 1092.749700][T14562] dump_stack_lvl+0x100/0x190 [ 1092.749726][T14562] sysfs_warn_dup.cold+0x1c/0x28 [ 1092.749748][T14562] sysfs_create_dir_ns+0x24b/0x2b0 [ 1092.749769][T14562] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1092.749789][T14562] ? find_held_lock+0x2b/0x80 [ 1092.749803][T14562] ? kobject_add_internal+0x25f/0x930 [ 1092.749824][T14562] ? kobject_add_internal+0x25f/0x930 [ 1092.749847][T14562] ? do_raw_spin_unlock+0x145/0x1e0 [ 1092.749869][T14562] kobject_add_internal+0x2c8/0x930 [ 1092.749894][T14562] kobject_add+0x16a/0x1e0 [ 1092.749914][T14562] ? __pfx_kobject_add+0x10/0x10 [ 1092.749933][T14562] ? class_to_subsys+0x10f/0x150 [ 1092.749952][T14562] ? kobject_put+0xb9/0x640 [ 1092.749970][T14562] ? _raw_spin_unlock+0x28/0x50 [ 1092.749991][T14562] device_add+0x294/0x1950 [ 1092.750006][T14562] ? __pfx_dev_set_name+0x10/0x10 [ 1092.750025][T14562] ? __pfx_device_add+0x10/0x10 [ 1092.750041][T14562] ? mgmt_send_event_skb+0x2fb/0x460 [ 1092.750062][T14562] hci_conn_add_sysfs+0x1a3/0x260 [ 1092.750091][T14562] le_conn_complete_evt+0x11cb/0x1f40 [ 1092.750113][T14562] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1092.750128][T14562] ? __pfx_bt_warn+0x10/0x10 [ 1092.750151][T14562] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1092.750168][T14562] ? skb_pull_data+0x15f/0x1e0 [ 1092.750193][T14562] hci_le_meta_evt+0x34a/0x5f0 [ 1092.750210][T14562] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1092.750228][T14562] hci_event_packet+0x682/0x11c0 [ 1092.750245][T14562] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1092.750263][T14562] ? __pfx_hci_event_packet+0x10/0x10 [ 1092.750281][T14562] ? kcov_remote_start+0x374/0x660 [ 1092.750296][T14562] ? lockdep_hardirqs_on+0x78/0x100 [ 1092.750318][T14562] hci_rx_work+0x451/0xfc0 [ 1092.750337][T14562] process_one_work+0x9d7/0x1920 [ 1092.750366][T14562] ? __pfx_process_one_work+0x10/0x10 [ 1092.750393][T14562] ? __pfx_hci_rx_work+0x10/0x10 [ 1092.750410][T14562] worker_thread+0x5da/0xe40 [ 1092.750438][T14562] ? kthread+0x13a/0x450 [ 1092.750456][T14562] ? __pfx_worker_thread+0x10/0x10 [ 1092.750475][T14562] kthread+0x370/0x450 [ 1092.750493][T14562] ? __pfx_kthread+0x10/0x10 [ 1092.750514][T14562] ret_from_fork+0x754/0xd80 [ 1092.750536][T14562] ? __pfx_ret_from_fork+0x10/0x10 [ 1092.750559][T14562] ? __switch_to+0x7b4/0x1120 [ 1092.750575][T14562] ? __pfx_kthread+0x10/0x10 [ 1092.750595][T14562] ret_from_fork_asm+0x1a/0x30 [ 1092.750622][T14562] [ 1092.750640][T14562] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1093.065297][T14562] Bluetooth: hci2: failed to register connection device [ 1093.995341][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1094.248510][T22896] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1094.326965][T22896] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1094.403462][T22896] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1094.504810][T22896] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1094.597636][T22896] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1094.678993][T22896] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1094.740666][T21262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1095.792959][T22933] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1095.826232][T22933] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1095.875638][T22933] veth0_to_bridge: entered allmulticast mode [ 1095.910792][T22933] veth0_to_bridge: entered promiscuous mode [ 1095.944182][T22933] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.012538][T22933] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1096.019868][T22933] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1096.511259][T22948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1096.810207][T14562] Bluetooth: hci2: command 0x0c1a tx timeout [ 1099.226705][T22994] serio: Serial port pty6 [ 1099.466574][T23003] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input91 [ 1099.937501][T23011] FAULT_INJECTION: forcing a failure. [ 1099.937501][T23011] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.063442][T23011] CPU: 0 UID: 60928 PID: 23011 Comm: syz.2.4266 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.063470][T23011] Tainted: [L]=SOFTLOCKUP [ 1100.063476][T23011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1100.063486][T23011] Call Trace: [ 1100.063493][T23011] [ 1100.063499][T23011] dump_stack_lvl+0x100/0x190 [ 1100.063527][T23011] should_fail_ex.cold+0x5/0xa [ 1100.063547][T23011] should_failslab+0xc2/0x120 [ 1100.063564][T23011] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1100.063589][T23011] ? security_inode_alloc+0x3b/0x2c0 [ 1100.063612][T23011] ? lockdep_init_map_type+0x5c/0x250 [ 1100.063636][T23011] security_inode_alloc+0x3b/0x2c0 [ 1100.063659][T23011] inode_init_always_gfp+0xced/0x1040 [ 1100.063678][T23011] alloc_inode+0x8e/0x250 [ 1100.063697][T23011] new_inode+0x22/0x1c0 [ 1100.063717][T23011] hugetlbfs_get_inode+0x313/0x750 [ 1100.063736][T23011] hugetlb_file_setup+0x15b/0x5b0 [ 1100.063755][T23011] ksys_mmap_pgoff+0x232/0x650 [ 1100.063771][T23011] ? __x64_sys_futex+0x358/0x4d0 [ 1100.063791][T23011] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1100.063807][T23011] ? xfd_validate_state+0x129/0x190 [ 1100.063832][T23011] __x64_sys_mmap+0x125/0x190 [ 1100.063857][T23011] do_syscall_64+0x106/0xf80 [ 1100.063875][T23011] ? clear_bhb_loop+0x40/0x90 [ 1100.063895][T23011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.063912][T23011] RIP: 0033:0x7f82db99c799 [ 1100.063927][T23011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.063943][T23011] RSP: 002b:00007f82dc7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1100.063960][T23011] RAX: ffffffffffffffda RBX: 00007f82dbc15fa0 RCX: 00007f82db99c799 [ 1100.063970][T23011] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 1100.063979][T23011] RBP: 00007f82dba32bd9 R08: ffffffffffffffff R09: 0000308000000000 [ 1100.063990][T23011] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1100.063999][T23011] R13: 00007f82dbc16038 R14: 00007f82dbc15fa0 R15: 00007ffffd45d7b8 [ 1100.064018][T23011] [ 1101.443953][T23025] 0x001c00000000-0x100002c00000200 : "" [ 1101.484798][T23025] mtd: partition "" is out of reach -- disabled [ 1101.537290][T23025] ftl_cs: FTL header not found. [ 1102.300006][T23032] 0x001c00000000-0x100002c00000200 : "" [ 1102.305582][T23032] mtd: partition "" is out of reach -- disabled [ 1102.383417][T23032] ftl_cs: FTL header not found. [ 1102.758284][T23049] FAULT_INJECTION: forcing a failure. [ 1102.758284][T23049] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.785444][T23047] 0x001c00000000-0x100002c00000200 : "" [ 1102.833553][T23047] mtd: partition "" is out of reach -- disabled [ 1102.842686][T23049] CPU: 0 UID: 60928 PID: 23049 Comm: syz.3.4279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.842710][T23049] Tainted: [L]=SOFTLOCKUP [ 1102.842716][T23049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.842725][T23049] Call Trace: [ 1102.842730][T23049] [ 1102.842736][T23049] dump_stack_lvl+0x100/0x190 [ 1102.842762][T23049] should_fail_ex.cold+0x5/0xa [ 1102.842779][T23049] should_failslab+0xc2/0x120 [ 1102.842795][T23049] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1102.842816][T23049] ? taskstats_exit+0x650/0xbd0 [ 1102.842841][T23049] taskstats_exit+0x650/0xbd0 [ 1102.842863][T23049] ? __pfx_acct_update_integrals+0x10/0x10 [ 1102.842886][T23049] ? __pfx_taskstats_exit+0x10/0x10 [ 1102.842909][T23049] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1102.842923][T23049] ? exit_signals+0x395/0xaf0 [ 1102.842940][T23049] do_exit+0x659/0x2b60 [ 1102.842970][T23049] ? __pfx_do_exit+0x10/0x10 [ 1102.842988][T23049] ? do_raw_spin_lock+0x128/0x260 [ 1102.843009][T23049] ? find_held_lock+0x2b/0x80 [ 1102.843022][T23049] ? get_signal+0x7e0/0x21e0 [ 1102.843038][T23049] do_group_exit+0xd5/0x2a0 [ 1102.843058][T23049] get_signal+0x1ec7/0x21e0 [ 1102.843080][T23049] ? __pfx_get_signal+0x10/0x10 [ 1102.843095][T23049] ? do_futex+0x192/0x350 [ 1102.843115][T23049] arch_do_signal_or_restart+0x91/0x770 [ 1102.843133][T23049] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1102.843152][T23049] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1102.843174][T23049] ? __pfx___x64_sys_futex+0x10/0x10 [ 1102.843196][T23049] exit_to_user_mode_loop+0x86/0x4a0 [ 1102.843216][T23049] do_syscall_64+0x668/0xf80 [ 1102.843234][T23049] ? clear_bhb_loop+0x40/0x90 [ 1102.843252][T23049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.843266][T23049] RIP: 0033:0x7f3b5319c799 [ 1102.843280][T23049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.843294][T23049] RSP: 002b:00007f3b540660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1102.843308][T23049] RAX: fffffffffffffe00 RBX: 00007f3b53415fa8 RCX: 00007f3b5319c799 [ 1102.843318][T23049] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b53415fa8 [ 1102.843327][T23049] RBP: 00007f3b53415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.843335][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.843344][T23049] R13: 00007f3b53416038 R14: 00007ffdf9152c30 R15: 00007ffdf9152d18 [ 1102.843362][T23049] [ 1103.299612][T23047] ftl_cs: FTL header not found. [ 1103.472552][T23054] zswap: compressor not available [ 1104.256007][T23079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4287'. [ 1104.274529][T23079] nbd: must specify at least one socket [ 1106.019956][T23138] zswap: compressor not available [ 1106.591035][T23168] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 1106.820128][T23176] FAULT_INJECTION: forcing a failure. [ 1106.820128][T23176] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.884151][T23170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.901755][T23176] CPU: 0 UID: 0 PID: 23176 Comm: syz.0.4309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.901781][T23176] Tainted: [L]=SOFTLOCKUP [ 1106.901787][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.901795][T23176] Call Trace: [ 1106.901802][T23176] [ 1106.901808][T23176] dump_stack_lvl+0x100/0x190 [ 1106.901834][T23176] should_fail_ex.cold+0x5/0xa [ 1106.901852][T23176] should_failslab+0xc2/0x120 [ 1106.901868][T23176] __kvmalloc_node_noprof+0xfa/0xa00 [ 1106.901890][T23176] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1106.901918][T23176] proc_sys_call_handler+0x2c7/0x5a0 [ 1106.901941][T23176] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1106.901963][T23176] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1106.901982][T23176] iter_file_splice_write+0x830/0x10a0 [ 1106.902006][T23176] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1106.902024][T23176] ? __pfx_copy_splice_read+0x10/0x10 [ 1106.902057][T23176] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1106.902073][T23176] direct_splice_actor+0x192/0x6c0 [ 1106.902097][T23176] splice_direct_to_actor+0x345/0xa30 [ 1106.902113][T23176] ? __pfx_direct_splice_actor+0x10/0x10 [ 1106.902139][T23176] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1106.902159][T23176] do_splice_direct+0x174/0x240 [ 1106.902174][T23176] ? __pfx_do_splice_direct+0x10/0x10 [ 1106.902188][T23176] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1106.902213][T23176] ? rw_verify_area+0xce/0x6d0 [ 1106.902235][T23176] do_sendfile+0xadc/0xe20 [ 1106.902260][T23176] ? __pfx_do_sendfile+0x10/0x10 [ 1106.902281][T23176] ? __fget_files+0x21f/0x3d0 [ 1106.902300][T23176] __x64_sys_sendfile64+0x1d8/0x220 [ 1106.902315][T23176] ? ksys_write+0x1ac/0x250 [ 1106.902328][T23176] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1106.902350][T23176] do_syscall_64+0x106/0xf80 [ 1106.902367][T23176] ? clear_bhb_loop+0x40/0x90 [ 1106.902385][T23176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.902400][T23176] RIP: 0033:0x7ff47fb9c799 [ 1106.902413][T23176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.902427][T23176] RSP: 002b:00007ff480aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1106.902442][T23176] RAX: ffffffffffffffda RBX: 00007ff47fe15fa0 RCX: 00007ff47fb9c799 [ 1106.902452][T23176] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1106.902460][T23176] RBP: 00007ff480aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.902469][T23176] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.902478][T23176] R13: 00007ff47fe16038 R14: 00007ff47fe15fa0 R15: 00007ffc481eadb8 [ 1106.902498][T23176] [ 1107.951690][T23185] FAULT_INJECTION: forcing a failure. [ 1107.951690][T23185] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.000539][T23185] CPU: 0 UID: 60928 PID: 23185 Comm: syz.0.4312 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.000566][T23185] Tainted: [L]=SOFTLOCKUP [ 1108.000571][T23185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.000579][T23185] Call Trace: [ 1108.000585][T23185] [ 1108.000591][T23185] dump_stack_lvl+0x100/0x190 [ 1108.000617][T23185] should_fail_ex.cold+0x5/0xa [ 1108.000635][T23185] should_failslab+0xc2/0x120 [ 1108.000650][T23185] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1108.000671][T23185] ? taskstats_exit+0x650/0xbd0 [ 1108.000696][T23185] taskstats_exit+0x650/0xbd0 [ 1108.000718][T23185] ? __pfx_acct_update_integrals+0x10/0x10 [ 1108.000741][T23185] ? __pfx_taskstats_exit+0x10/0x10 [ 1108.000763][T23185] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1108.000778][T23185] ? exit_signals+0x395/0xaf0 [ 1108.000795][T23185] do_exit+0x659/0x2b60 [ 1108.000816][T23185] ? __pfx_do_exit+0x10/0x10 [ 1108.000834][T23185] ? do_raw_spin_lock+0x128/0x260 [ 1108.000854][T23185] ? find_held_lock+0x2b/0x80 [ 1108.000868][T23185] ? get_signal+0x7e0/0x21e0 [ 1108.000884][T23185] do_group_exit+0xd5/0x2a0 [ 1108.000904][T23185] get_signal+0x1ec7/0x21e0 [ 1108.000928][T23185] ? __pfx_get_signal+0x10/0x10 [ 1108.000943][T23185] ? do_futex+0x192/0x350 [ 1108.000963][T23185] arch_do_signal_or_restart+0x91/0x770 [ 1108.000981][T23185] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1108.001000][T23185] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1108.001022][T23185] ? __pfx___x64_sys_futex+0x10/0x10 [ 1108.001045][T23185] exit_to_user_mode_loop+0x86/0x4a0 [ 1108.001066][T23185] do_syscall_64+0x668/0xf80 [ 1108.001083][T23185] ? clear_bhb_loop+0x40/0x90 [ 1108.001101][T23185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.001116][T23185] RIP: 0033:0x7ff47fb9c799 [ 1108.001129][T23185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.001144][T23185] RSP: 002b:00007ff480aff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1108.001159][T23185] RAX: fffffffffffffe00 RBX: 00007ff47fe15fa8 RCX: 00007ff47fb9c799 [ 1108.001169][T23185] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff47fe15fa8 [ 1108.001177][T23185] RBP: 00007ff47fe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.001186][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.001195][T23185] R13: 00007ff47fe16038 R14: 00007ffc481eacd0 R15: 00007ffc481eadb8 [ 1108.001214][T23185] [ 1109.143867][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1109.246994][T23218] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1109.310300][T23210] can: request_module (can-proto-5) failed. [ 1109.481002][T23225] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input92 [ 1110.278135][T23236] zswap: compressor not available [ 1110.814278][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.820709][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.244687][T21262] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1111.379719][T23256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1111.385849][T23256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1111.394962][T23256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1111.403370][T23256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1111.409659][T23256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1111.417950][T23256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1111.423998][T23256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1111.744443][T23271] syz.1.4336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1112.183982][T23296] bond0: no command found in slaves file - use +ifname or -ifname [ 1112.264025][T23299] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1112.375778][T23296] zswap: compressor not available [ 1112.529139][T23306] FAULT_INJECTION: forcing a failure. [ 1112.529139][T23306] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.556585][T23306] CPU: 0 UID: 60928 PID: 23306 Comm: syz.3.4345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.556613][T23306] Tainted: [L]=SOFTLOCKUP [ 1112.556619][T23306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1112.556630][T23306] Call Trace: [ 1112.556637][T23306] [ 1112.556643][T23306] dump_stack_lvl+0x100/0x190 [ 1112.556671][T23306] should_fail_ex.cold+0x5/0xa [ 1112.556690][T23306] should_failslab+0xc2/0x120 [ 1112.556707][T23306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1112.556730][T23306] ? alloc_empty_file+0x55/0x1c0 [ 1112.556752][T23306] alloc_empty_file+0x55/0x1c0 [ 1112.556772][T23306] alloc_file_pseudo+0x13a/0x230 [ 1112.556791][T23306] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1112.556811][T23306] ? hugetlbfs_get_inode+0x36e/0x750 [ 1112.556829][T23306] hugetlb_file_setup+0x2a8/0x5b0 [ 1112.556848][T23306] ksys_mmap_pgoff+0x232/0x650 [ 1112.556864][T23306] ? __x64_sys_futex+0x358/0x4d0 [ 1112.556884][T23306] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1112.556900][T23306] ? xfd_validate_state+0x129/0x190 [ 1112.556925][T23306] __x64_sys_mmap+0x125/0x190 [ 1112.556950][T23306] do_syscall_64+0x106/0xf80 [ 1112.556968][T23306] ? clear_bhb_loop+0x40/0x90 [ 1112.556987][T23306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.557003][T23306] RIP: 0033:0x7f3b5319c799 [ 1112.557017][T23306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.557032][T23306] RSP: 002b:00007f3b54066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1112.557047][T23306] RAX: ffffffffffffffda RBX: 00007f3b53415fa0 RCX: 00007f3b5319c799 [ 1112.557057][T23306] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 1112.557074][T23306] RBP: 00007f3b53232bd9 R08: ffffffffffffffff R09: 0000308000000000 [ 1112.557084][T23306] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1112.557094][T23306] R13: 00007f3b53416038 R14: 00007f3b53415fa0 R15: 00007ffdf9152d18 [ 1112.557113][T23306] [ 1113.057370][T23287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1113.074793][T23287] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1113.093340][T23287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1113.107196][T23287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1113.302367][T23315] FAULT_INJECTION: forcing a failure. [ 1113.302367][T23315] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.365194][T23315] CPU: 0 UID: 0 PID: 23315 Comm: syz.0.4347 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.365220][T23315] Tainted: [L]=SOFTLOCKUP [ 1113.365225][T23315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.365235][T23315] Call Trace: [ 1113.365240][T23315] [ 1113.365246][T23315] dump_stack_lvl+0x100/0x190 [ 1113.365272][T23315] should_fail_ex.cold+0x5/0xa [ 1113.365289][T23315] should_failslab+0xc2/0x120 [ 1113.365305][T23315] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1113.365328][T23315] ? __alloc_skb+0x140/0x710 [ 1113.365347][T23315] __alloc_skb+0x140/0x710 [ 1113.365361][T23315] ? __alloc_skb+0x5b7/0x710 [ 1113.365377][T23315] ? __pfx___alloc_skb+0x10/0x10 [ 1113.365398][T23315] netlink_alloc_large_skb+0x69/0x150 [ 1113.365419][T23315] netlink_sendmsg+0x680/0xda0 [ 1113.365440][T23315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1113.365458][T23315] ? __import_iovec+0x1d2/0x640 [ 1113.365475][T23315] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1113.365499][T23315] ____sys_sendmsg+0x9e1/0xb70 [ 1113.365519][T23315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1113.365539][T23315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.365568][T23315] ___sys_sendmsg+0x190/0x1e0 [ 1113.365590][T23315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.365633][T23315] __sys_sendmsg+0x170/0x220 [ 1113.365652][T23315] ? __pfx___sys_sendmsg+0x10/0x10 [ 1113.365681][T23315] do_syscall_64+0x106/0xf80 [ 1113.365697][T23315] ? clear_bhb_loop+0x40/0x90 [ 1113.365715][T23315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.365730][T23315] RIP: 0033:0x7ff47fb9c799 [ 1113.365743][T23315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.365757][T23315] RSP: 002b:00007ff480ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.365772][T23315] RAX: ffffffffffffffda RBX: 00007ff47fe16090 RCX: 00007ff47fb9c799 [ 1113.365781][T23315] RDX: 0000000000008092 RSI: 0000200000000100 RDI: 0000000000000004 [ 1113.365790][T23315] RBP: 00007ff480ade090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.365799][T23315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.365808][T23315] R13: 00007ff47fe16128 R14: 00007ff47fe16090 R15: 00007ffc481eadb8 [ 1113.365827][T23315] [ 1114.153039][T14562] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.544773][T23323] 0x001c00000000-0x100002c00000200 : "" [ 1114.559381][T23323] mtd: partition "" is out of reach -- disabled [ 1114.593966][T23323] ftl_cs: FTL header not found. [ 1115.112260][T14562] Bluetooth: hci1: command 0x0406 tx timeout [ 1115.118367][T21262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1115.184838][T14562] Bluetooth: hci0: command 0x0406 tx timeout [ 1115.807186][T23338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1115.825417][T23338] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1115.845496][T23338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1115.867589][T23338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1116.166202][T23363] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input93 [ 1117.002136][T23369] 0x001c00000000-0x100002c00000200 : "" [ 1117.014034][T23369] mtd: partition "" is out of reach -- disabled [ 1117.085015][T23369] ftl_cs: FTL header not found. [ 1117.173744][T14562] Bluetooth: hci2: command 0x0c1a tx timeout [ 1117.252198][T23384] FAULT_INJECTION: forcing a failure. [ 1117.252198][T23384] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.320126][T23384] CPU: 0 UID: 60928 PID: 23384 Comm: syz.3.4364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.320157][T23384] Tainted: [L]=SOFTLOCKUP [ 1117.320163][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.320173][T23384] Call Trace: [ 1117.320178][T23384] [ 1117.320185][T23384] dump_stack_lvl+0x100/0x190 [ 1117.320212][T23384] should_fail_ex.cold+0x5/0xa [ 1117.320231][T23384] should_failslab+0xc2/0x120 [ 1117.320247][T23384] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1117.320270][T23384] ? __d_alloc+0x34/0xa80 [ 1117.320290][T23384] __d_alloc+0x34/0xa80 [ 1117.320304][T23384] ? new_inode+0x15a/0x1c0 [ 1117.320325][T23384] d_alloc_pseudo+0x1c/0xc0 [ 1117.320345][T23384] alloc_file_pseudo+0xcf/0x230 [ 1117.320365][T23384] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1117.320388][T23384] ? hugetlbfs_get_inode+0x36e/0x750 [ 1117.320408][T23384] hugetlb_file_setup+0x2a8/0x5b0 [ 1117.320428][T23384] ksys_mmap_pgoff+0x232/0x650 [ 1117.320446][T23384] ? __x64_sys_futex+0x358/0x4d0 [ 1117.320465][T23384] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1117.320482][T23384] ? xfd_validate_state+0x129/0x190 [ 1117.320506][T23384] __x64_sys_mmap+0x125/0x190 [ 1117.320531][T23384] do_syscall_64+0x106/0xf80 [ 1117.320549][T23384] ? clear_bhb_loop+0x40/0x90 [ 1117.320582][T23384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.320598][T23384] RIP: 0033:0x7f3b5319c799 [ 1117.320612][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.320627][T23384] RSP: 002b:00007f3b54066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1117.320642][T23384] RAX: ffffffffffffffda RBX: 00007f3b53415fa0 RCX: 00007f3b5319c799 [ 1117.320653][T23384] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 1117.320663][T23384] RBP: 00007f3b53232bd9 R08: ffffffffffffffff R09: 0000308000000000 [ 1117.320673][T23384] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1117.320682][T23384] R13: 00007f3b53416038 R14: 00007f3b53415fa0 R15: 00007ffdf9152d18 [ 1117.320703][T23384] [ 1117.801489][ T30] audit: type=1800 audit(4294967319.024:65): pid=23387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4366" name="dbroot" dev="configfs" ino=395969 res=0 errno=0 [ 1117.888549][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1117.948650][T14562] Bluetooth: hci0: command 0x0406 tx timeout [ 1117.954751][T14562] Bluetooth: hci1: command 0x0406 tx timeout [ 1117.961909][T14562] Bluetooth: hci4: command 0x0c1a tx timeout [ 1118.347210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.347898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.348440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.348723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.348960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.349241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.349448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.349729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.349936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.350217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.328030][ C0] net_ratelimit: 21544 callbacks suppressed [ 1123.328047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.328364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.328570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.328840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.329046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.329321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.329545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.329814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.330015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.330289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.309488][ C0] net_ratelimit: 21095 callbacks suppressed [ 1128.309507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.309727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.310004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.310211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.310498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.310711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.310985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.311191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.311502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.311710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.306926][T21262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1133.291400][ C0] net_ratelimit: 20732 callbacks suppressed [ 1133.291417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.291637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.291923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.292143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.292427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.292640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.292930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.293149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.293434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.293647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.272808][ C0] net_ratelimit: 20816 callbacks suppressed [ 1138.272827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.273035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.273306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.273515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.273798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.274000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.274291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.274493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.274768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.274975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.254416][ C0] net_ratelimit: 20200 callbacks suppressed [ 1143.254433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.254652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.254935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.255171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.255644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.255879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.256184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.256409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.256719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.256943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.236096][ C0] net_ratelimit: 20994 callbacks suppressed [ 1148.236113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.236331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.236615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.236834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.237117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.237328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.237623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.237861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.238165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.238377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.217622][ C0] net_ratelimit: 20962 callbacks suppressed [ 1153.217639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.217857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.218147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.218358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.218640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.218851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.219137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.219348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.219653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.219864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.199291][ C0] net_ratelimit: 20996 callbacks suppressed [ 1158.199308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.199523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.199862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.200070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.200345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.200551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.200833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.201038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.201325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.201535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.180804][ C0] net_ratelimit: 21089 callbacks suppressed [ 1163.180822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.181098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.181308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.181577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.181783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.182052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.182283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.182552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.182758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.183025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.162470][ C0] net_ratelimit: 20951 callbacks suppressed [ 1168.162510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.162734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.163024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.163235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.163527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.163744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.164031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.164242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.164548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.164789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.143966][ C0] net_ratelimit: 21007 callbacks suppressed [ 1173.143984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.144262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.144488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.144758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.144960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.145229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.145437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.145705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.145907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.146199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.358320][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.365034][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.125637][ C0] net_ratelimit: 21380 callbacks suppressed [ 1178.125654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.125935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.126161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.126429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.126630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.126903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.127105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.127372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.127573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.127846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.107351][ C0] net_ratelimit: 21141 callbacks suppressed [ 1183.107368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.107582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.107860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.108085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.108386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.108600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.108876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.109082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.109362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.109569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.088982][ C0] net_ratelimit: 21020 callbacks suppressed [ 1188.089000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.089218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.089499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.089710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.089995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.090206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.090484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.090693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.091002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.091232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.070443][ C0] net_ratelimit: 20986 callbacks suppressed [ 1193.070461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.070683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.070984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.071199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.071491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.071712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.072013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.072227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.072519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.072733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.052116][ C0] net_ratelimit: 20854 callbacks suppressed [ 1198.052135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.052343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.052613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.052830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.053099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.053300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.053568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.053769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.054056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.054258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.033619][ C0] net_ratelimit: 20873 callbacks suppressed [ 1203.033636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.034318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.034548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.034831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.035061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.035342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.035583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.035864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.036075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.036356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.015318][ C0] net_ratelimit: 21079 callbacks suppressed [ 1208.015336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.015537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.015801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.016025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.016286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.016481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.016742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.016942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.017224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.017420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.996970][ C0] net_ratelimit: 21082 callbacks suppressed [ 1212.996988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.997196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.997473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.997676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.997953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.998174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.999083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.999305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.999591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.999799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.978375][ C0] net_ratelimit: 20798 callbacks suppressed [ 1217.978393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.978603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.978874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.979085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.979355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.979565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.979847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.980048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.980323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.980524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.960071][ C0] net_ratelimit: 21234 callbacks suppressed [ 1222.960087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.960289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.960591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.960786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.961070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.961273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.961553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.961748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.962008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.962206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.941578][ C0] net_ratelimit: 21121 callbacks suppressed [ 1227.941596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.941872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.942081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.942352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.942582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.942852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.943053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.943321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.943529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.943797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.923324][ C0] net_ratelimit: 20863 callbacks suppressed [ 1232.923347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.923568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.923846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.924088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.924367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.924574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.924843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.925046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.925313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.925543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.108516][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.115316][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.904761][ C0] net_ratelimit: 21457 callbacks suppressed [ 1237.904779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.905054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.905255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.905518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.905715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.905983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.906179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.906441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.906637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.906921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.886433][ C0] net_ratelimit: 21134 callbacks suppressed [ 1242.886453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.886730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.886928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.887190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.887385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.887652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.887868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.888129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.888324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.888604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.868147][ C0] net_ratelimit: 20815 callbacks suppressed [ 1247.868165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.868386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.868636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.868947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.869169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.869435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.869724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.869934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.870187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.870473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.849582][ C0] net_ratelimit: 21000 callbacks suppressed [ 1252.849600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.849863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.850162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.850404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.850687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.850974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.851195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.851445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.851736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.851955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.831287][ C0] net_ratelimit: 20818 callbacks suppressed [ 1257.831305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.831506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.831748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.832037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.832231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.832456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.832726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.832941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.833165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.833430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.812830][ C0] net_ratelimit: 20735 callbacks suppressed [ 1262.812847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.813085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.813327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.813630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.813840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.814074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.814347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.814549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.814789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.815063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.017441][T23389] delete_channel: no stack [ 1267.794441][ C0] net_ratelimit: 12791 callbacks suppressed [ 1267.794460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.794684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.795602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.795896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.796110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.796957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.797254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.797470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.798359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.798656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.776779][ C0] net_ratelimit: 11278 callbacks suppressed [ 1272.776797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.777088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.777303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.778142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.778457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.778669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.779539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.779849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.780063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.780919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.282819][ T31] INFO: task kworker/0:1:10 blocked for more than 144 seconds. [ 1277.282843][ T31] Tainted: G L syzkaller #0 [ 1277.282858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1277.282868][ T31] task:kworker/0:1 state:D stack:25928 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1277.282916][ T31] Workqueue: events switchdev_deferred_process_work [ 1277.282954][ T31] Call Trace: [ 1277.282960][ T31] [ 1277.282971][ T31] __schedule+0xfee/0x6120 [ 1277.282990][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1277.283013][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 1277.283034][ T31] ? __pfx___schedule+0x10/0x10 [ 1277.283049][ T31] ? find_held_lock+0x2b/0x80 [ 1277.283065][ T31] ? schedule+0x2bf/0x390 [ 1277.283085][ T31] schedule+0xdd/0x390 [ 1277.283101][ T31] schedule_preempt_disabled+0x13/0x30 [ 1277.283118][ T31] __mutex_lock+0xc9a/0x1b90 [ 1277.283138][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1277.283160][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1277.283181][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1277.283202][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1277.283242][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1277.283258][ T31] ? rtnl_lock+0x9/0x20 [ 1277.283280][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1277.283297][ T31] process_one_work+0x9d7/0x1920 [ 1277.283327][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1277.283354][ T31] ? __pfx_switchdev_deferred_process_work+0x10/0x10 [ 1277.283375][ T31] worker_thread+0x5da/0xe40 [ 1277.283401][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1277.283423][ T31] ? kthread+0x13a/0x450 [ 1277.283442][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1277.283462][ T31] kthread+0x370/0x450 [ 1277.283480][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.283501][ T31] ret_from_fork+0x754/0xd80 [ 1277.283525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.283548][ T31] ? __switch_to+0x7b4/0x1120 [ 1277.283566][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.283586][ T31] ret_from_fork_asm+0x1a/0x30 [ 1277.283613][ T31] [ 1277.283672][ T31] INFO: task kworker/R-ipv6_:3185 blocked for more than 144 seconds. [ 1277.283685][ T31] Tainted: G L syzkaller #0 [ 1277.283694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1277.283700][ T31] task:kworker/R-ipv6_ state:D stack:30000 pid:3185 tgid:3185 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1277.283751][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 1277.283772][ T31] Call Trace: [ 1277.283778][ T31] [ 1277.283787][ T31] __schedule+0xfee/0x6120 [ 1277.283804][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1277.283832][ T31] ? __pfx___schedule+0x10/0x10 [ 1277.283847][ T31] ? find_held_lock+0x2b/0x80 [ 1277.283866][ T31] ? schedule+0x2bf/0x390 [ 1277.283885][ T31] schedule+0xdd/0x390 [ 1277.283902][ T31] schedule_preempt_disabled+0x13/0x30 [ 1277.283918][ T31] __mutex_lock+0xc9a/0x1b90 [ 1277.283937][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1277.283959][ T31] ? addrconf_verify_work+0x12/0x30 [ 1277.283983][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1277.284004][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1277.284035][ T31] ? addrconf_verify_work+0x12/0x30 [ 1277.284054][ T31] ? rtnl_lock+0x9/0x20 [ 1277.284074][ T31] addrconf_verify_work+0x12/0x30 [ 1277.284094][ T31] process_one_work+0x9d7/0x1920 [ 1277.284123][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1277.284150][ T31] ? __pfx_addrconf_verify_work+0x10/0x10 [ 1277.284175][ T31] rescuer_thread+0x902/0x1490 [ 1277.284203][ T31] ? rescuer_thread+0x23d/0x1490 [ 1277.284230][ T31] ? rescuer_thread+0x118/0x1490 [ 1277.284251][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 1277.284273][ T31] ? __kthread_parkme+0x18c/0x230 [ 1277.284292][ T31] ? kthread+0x13a/0x450 [ 1277.284311][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 1277.284331][ T31] kthread+0x370/0x450 [ 1277.284350][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.284371][ T31] ret_from_fork+0x754/0xd80 [ 1277.284393][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.284417][ T31] ? __switch_to+0x7b4/0x1120 [ 1277.284433][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.284454][ T31] ret_from_fork_asm+0x1a/0x30 [ 1277.284484][ T31] [ 1277.284533][ T31] [ 1277.284533][ T31] Showing all locks held in the system: [ 1277.284543][ T31] 2 locks held by kthreadd/2: [ 1277.284558][ T31] 3 locks held by kworker/0:1/10: [ 1277.284567][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1277.284612][ T31] #1: ffffc900000f7d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1277.284655][ T31] #2: ffffffff90615128 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1277.284694][ T31] 1 lock held by khungtaskd/31: [ 1277.284703][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1277.284753][ T31] 2 locks held by khugepaged/38: [ 1277.284776][ T31] 3 locks held by kworker/R-ipv6_/3185: [ 1277.284785][ T31] #0: ffff888033069948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1277.284836][ T31] #1: ffffc9000e4cfc70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1277.284882][ T31] #2: ffffffff90615128 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1277.284926][ T31] 1 lock held by klogd/5184: [ 1277.284934][ T31] 2 locks held by udevd/5195: [ 1277.284944][ T31] 1 lock held by dhcpcd/5490: [ 1277.284952][ T31] 1 lock held by crond/5568: [ 1277.284962][ T31] 2 locks held by syz-executor/5812: [ 1277.284971][ T31] 3 locks held by kworker/0:5/5887: [ 1277.284980][ T31] #0: ffff888032f09948 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1277.285022][ T31] #1: ffffc90004adfd08 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1277.285066][ T31] #2: ffff88803825f538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x42/0xc10 [ 1277.285103][ T31] 3 locks held by kworker/0:2/10907: [ 1277.285113][ T31] #0: ffff88813fe61d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1277.285171][ T31] #1: ffffc9000653fd08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1277.285219][ T31] #2: ffffffff90615128 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x11d0 [ 1277.285264][ T31] 1 lock held by syz-executor/15954: [ 1277.285274][ T31] 2 locks held by syz-executor/16319: [ 1277.285284][ T31] 3 locks held by kworker/u10:11/16628: [ 1277.285293][ T31] 3 locks held by kworker/u10:14/16632: [ 1277.285302][ T31] 3 locks held by kworker/u10:15/16633: [ 1277.285312][ T31] 3 locks held by kworker/u10:16/16634: [ 1277.285325][ T31] 3 locks held by kworker/u10:17/16635: [ 1277.285334][ T31] 3 locks held by kworker/u10:18/16636: [ 1277.285343][ T31] 2 locks held by kworker/u10:19/16637: [ 1277.285352][ T31] 1 lock held by syz.0.3209/18928: [ 1277.285362][ T31] 2 locks held by syz.1.4336/23281: [ 1277.285371][ T31] 2 locks held by syz.1.4361/23372: [ 1277.285379][ T31] #0: ffffffff905fc8d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1277.285421][ T31] #1: ffffffff90615128 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 1277.285463][ T31] 1 lock held by syz.3.4366/23389: [ 1277.285472][ T31] 4 locks held by syz.0.4365/23390: [ 1277.285481][ T31] 6 locks held by syz.0.4365/23393: [ 1277.285490][ T31] 2 locks held by kworker/u10:0/23399: [ 1277.285499][ T31] 3 locks held by kworker/u10:1/23400: [ 1277.285509][ T31] 2 locks held by dhcpcd/23401: [ 1277.285517][ T31] #0: ffff88802f4d0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1277.285562][ T31] #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1277.285601][ T31] [ 1277.285605][ T31] ============================================= [ 1277.285605][ T31] [ 1277.285620][ T31] NMI backtrace for cpu 0 [ 1277.285638][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.285658][ T31] Tainted: [L]=SOFTLOCKUP [ 1277.285663][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1277.285672][ T31] Call Trace: [ 1277.285677][ T31] [ 1277.285683][ T31] dump_stack_lvl+0x100/0x190 [ 1277.285704][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1277.285727][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1277.285747][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1277.285772][ T31] sys_info+0x141/0x190 [ 1277.285790][ T31] watchdog+0xd25/0x1050 [ 1277.285810][ T31] ? __pfx_watchdog+0x10/0x10 [ 1277.285824][ T31] ? __kthread_parkme+0x18c/0x230 [ 1277.285841][ T31] ? kthread+0x13a/0x450 [ 1277.285857][ T31] ? __pfx_watchdog+0x10/0x10 [ 1277.285870][ T31] kthread+0x370/0x450 [ 1277.285887][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.285906][ T31] ret_from_fork+0x754/0xd80 [ 1277.285926][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.285948][ T31] ? __switch_to+0x7b4/0x1120 [ 1277.285963][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.285982][ T31] ret_from_fork_asm+0x1a/0x30 [ 1277.286005][ T31] [ 1277.286020][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1277.286031][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.286050][ T31] Tainted: [L]=SOFTLOCKUP [ 1277.286056][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1277.286064][ T31] Call Trace: [ 1277.286069][ T31] [ 1277.286075][ T31] dump_stack_lvl+0x100/0x190 [ 1277.286095][ T31] vpanic+0x552/0x970 [ 1277.286110][ T31] ? __pfx_vpanic+0x10/0x10 [ 1277.286124][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1277.286146][ T31] ? rcu_is_watching+0x12/0xc0 [ 1277.286171][ T31] panic+0xd1/0xe0 [ 1277.286185][ T31] ? __pfx_panic+0x10/0x10 [ 1277.286200][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 1277.286229][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 1277.286251][ T31] ? watchdog.cold+0x198/0x1ca [ 1277.286267][ T31] ? watchdog+0xd35/0x1050 [ 1277.286282][ T31] watchdog.cold+0x1a9/0x1ca [ 1277.286303][ T31] ? __pfx_watchdog+0x10/0x10 [ 1277.286317][ T31] ? __kthread_parkme+0x18c/0x230 [ 1277.286335][ T31] ? kthread+0x13a/0x450 [ 1277.286352][ T31] ? __pfx_watchdog+0x10/0x10 [ 1277.286365][ T31] kthread+0x370/0x450 [ 1277.286382][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.286402][ T31] ret_from_fork+0x754/0xd80 [ 1277.286423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.286445][ T31] ? __switch_to+0x7b4/0x1120 [ 1277.286461][ T31] ? __pfx_kthread+0x10/0x10 [ 1277.286481][ T31] ret_from_fork_asm+0x1a/0x30 [ 1277.286505][ T31] [ 1277.286564][ T31] Kernel Offset: disabled