last executing test programs: 7.464388726s ago: executing program 0 (id=1996): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kexec_load$auto(0x2, 0x2, &(0x7f00000000c0)={@kbuf=&(0x7f0000000000)="93d2bfbbbc6fd822c4", 0x8, 0x0, 0x7}, 0x1000) kill$auto(r0, 0x7) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x18, 0x2, 0x0) setreuid$auto(0x3, 0x7) connect$auto(r1, &(0x7f0000000100)=@phonet={0x23, 0x9, 0x81, 0x8}, 0xffffffff) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x8101, 0x0) 5.496463277s ago: executing program 1 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x214, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_RESULT={0x200, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1f8, 0x5, 0x0, 0x1, [{0x1f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xb8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x800}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x65}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x6}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0xf8}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xc}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x89}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x2}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x38}]}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xc4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x58, 0x1, "aa6e1f23d3827df3c22e941c3619bab91fe37a23256ca1df8537dc8e2f00702fa2a3373d42f35a51682e83ac448507d503818266fe8a54c96e122671c0fba542c62778f5e7f5c2b16dae5fc705aa2540ee8bdc3d"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7d, 0x1, "44b0bf6c793f1d4d64c6c915cc6881da036fd9682c65d9da0824b337b02c953f64bd4057735c1e6d3cb8d7547625ffe7dff65eba9169bc3d0614de0b1fbf825e8a858882bb182f74f3011738a2b837a786de20ac53906fc9276d177603e438336f018062d6bb6f5ae0e94d79c035c1529c59772f884eeb7ca4"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5e, 0x1, "d624f96ae3ea297c2bcff23ab9575ef43dadf7e755797f6a00e4cf633fdde3981756c1d3ffdd2bc5c485a19b29466a4c5fb59b2b725531a79aae5c55b6ce034d8ea229a03c910cb93f84aa99a9590eafe154619cbfb5178edc84"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 5.218371675s ago: executing program 2 (id=2011): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x341002, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x80000000000444c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x400080, 0x0) r2 = socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="a4f787eb", @ANYRES16=r4, @ANYRES16=r0], 0x24}}, 0x20000004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000001c0)) mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0) read$auto(r5, 0x0, 0x8c8d) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffa, 0x7, 0xd3e, 0x4, 0x948b, 0x7, 0x95f4da0a, 0xfffffffffffffffc, 0x1, 0x62, 0x37, 0x7, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x4, 0x8, 0x2, 0x19, r3, 0x3) madvise$auto(0x110c234000, 0x1, 0x9) 5.171345489s ago: executing program 1 (id=2012): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(r3, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fcntl$getown(r4, 0x9) (async) r5 = fcntl$getown(r4, 0x9) msgctl$auto_IPC_INFO(0x631, 0x3, &(0x7f00000003c0)={{0x8, 0x0, 0x0, 0x4, 0x9, 0x6, 0x9d6e}, &(0x7f00000001c0)=0xa, &(0x7f0000000380)=0x7f, 0x72, 0xf7f4, 0x2, 0xfffffffffffeffff, 0x6, 0x300, 0xffff, 0xfdd, @inferred, @inferred=r5}) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) 4.720892126s ago: executing program 0 (id=2014): r0 = clone3$auto(&(0x7f0000000000)={0x3, 0x1, 0xfffffffffffffff3, 0x5, 0x8, 0xf, 0x400006, 0x10000, 0x7, 0xb4, 0x401}, 0x800000000) ptrace$auto_ARCH_SHSTK_LOCK(0x9, r0, 0x3, 0x5003) (async) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x280800, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r1, &(0x7f00000001c0)="afc93e6fae8fd75096c45d64c7e21e9a6ed4576130373b937f9d30f71773ebaef893ff4e6e8109e1c0a632c23b33fee3e8e72abc24b7dc126df914c872d9f87467646dc03fcb6adabd2bd947df97f53856043ae8eb3aaf4dffadc327b114ce8e8d481af951bf8aa25f2cceb8e3c24312bf52d507c1d28435e92b4d8ddc06936e8198a9f6933103e4", 0x88) r2 = socket(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) unshare$auto(0x40000080) (async) socketpair$auto(0x8001, 0x3, 0x200, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) (async) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) mmap$auto(0xc0000000, 0x9, 0x10000000000, 0x11, 0x3, 0x3) (async) madvise$auto(0x0, 0x1, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x53564d41, 0x0, 0x0, 0x400000000000000d, 0x1f4ff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5, @ANYRES8=r0, @ANYRES32=r7, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x40488d4}, 0xc050) sendmsg$auto_NET_SHAPER_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf25010000001c00018008000200020000000800020009000000080002000800000c"], 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x404c080) 3.73636179s ago: executing program 0 (id=2015): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r4, 0x0, 0x40044) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x8100, 0x0) read$auto_evdev_fops_evdev(r5, &(0x7f0000000080)=""/38, 0x26) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) 3.736256128s ago: executing program 1 (id=2016): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/rnbd-client/ctl/map_device\x00', 0x60442, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='\x00\x00', 0x6, 0x8000) (fail_nth: 5) 3.335316451s ago: executing program 1 (id=2017): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd=0xffffffffffffffff, 0x8, 0x3, 0x6, 0xff, @count=0xe35c, 0x0, 0x5, 0x6, 0x6, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES8=r0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0xa100, 0x0) read$auto_vga_arb_device_fops_vgaarb(r1, &(0x7f0000000140)=""/16, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) 3.328143602s ago: executing program 2 (id=2018): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SET_NAME(0xf, 0x3, 0x0, 0x7ff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8101, 0x0) 2.943677806s ago: executing program 2 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x214, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_RESULT={0x200, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1f8, 0x5, 0x0, 0x1, [{0x1f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xb8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x800}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x65}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x6}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0xf8}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xc}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x89}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x2}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x38}]}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xc4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x58, 0x1, "aa6e1f23d3827df3c22e941c3619bab91fe37a23256ca1df8537dc8e2f00702fa2a3373d42f35a51682e83ac448507d503818266fe8a54c96e122671c0fba542c62778f5e7f5c2b16dae5fc705aa2540ee8bdc3d"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7d, 0x1, "44b0bf6c793f1d4d64c6c915cc6881da036fd9682c65d9da0824b337b02c953f64bd4057735c1e6d3cb8d7547625ffe7dff65eba9169bc3d0614de0b1fbf825e8a858882bb182f74f3011738a2b837a786de20ac53906fc9276d177603e438336f018062d6bb6f5ae0e94d79c035c1529c59772f884eeb7ca4"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5e, 0x1, "d624f96ae3ea297c2bcff23ab9575ef43dadf7e755797f6a00e4cf633fdde3981756c1d3ffdd2bc5c485a19b29466a4c5fb59b2b725531a79aae5c55b6ce034d8ea229a03c910cb93f84aa99a9590eafe154619cbfb5178edc84"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 2.94285035s ago: executing program 3 (id=2022): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) r1 = pipe2$auto(&(0x7f00000000c0), 0x7) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000100)=0x7b7) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x183c00, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)={0xffff8000, 0x0, [{r1, 0x0, 0x7fff, 0x6}, {r2, 0x0, 0xfffffffffffffff9, 0x4b8}, {r3, 0x0, 0x6}]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000340)='./file0\x00') execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/resource_alignment\x00', 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r4 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x0, 0x0) sendfile$auto(r4, r0, &(0x7f0000000280)=0x80000000, 0xfffffffffffffffd) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x7) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x8, 0x8000000000000000, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129302, 0x0) 2.533104378s ago: executing program 2 (id=2023): ptrace$auto_PTRACE_SINGLESTEP(0x9, 0xffffffffffffffff, 0x5, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0x3) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x8101, 0x0) 2.328634217s ago: executing program 2 (id=2024): socket(0xf, 0x1, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) sendfile$auto(r0, r0, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 1.985783067s ago: executing program 3 (id=2025): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (rerun: 32) write$auto(r0, 0x0, 0x5) madvise$auto(0x4f, 0x3, 0x4b65) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x1) 1.697618867s ago: executing program 0 (id=2026): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r2, 0x545c, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x18c00000, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x2) (async) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) (async) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x2a0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}, @NL802154_ATTR_COORDINATOR={0x274, 0x1e, 0x0, 0x1, [@generic="4b28d73d1a5592fb96ce990d3352bc50f17294cc0304a28800b0bcfc8b0b6d7122873786e67a7db0e52f6e30a08f207e6949312d72aeff5ce80c60390cf879e4279dbcb5681c630ce27850aa26fd70bd6aa99e9f5d6dedf2da1fcc08d99498602b64c9a8845acf794433b0b30372eb697c43bebfaa8165359cecd168c41e933a5a1667497ac10606ff32ad79c296a9fe2b96167c8a918b8b933c7bb36bc2fa3c7f990c46593b31fb1d1db24669d527db7e104d4786ea09f4122f64706725702c14a7e04cd8806e885bd6d496190f5c4c472afff369acf513", @nested={0xc4, 0xd5, 0x0, 0x1, [@nested={0x4, 0xfd}, @generic="9f23c9611b93db56e49c6db03547e680bd1b76331a01b1c2fe728735053cba2c9425c35ad5412962a7daa56853ee4c6e9a91590d663a61c058ca7fbaf8dafc76c91dcdad10ae8c709fd46a80f28f336ea570e9d9b64e86565321df2d1acab18f36d310e405478b5b0725918df9f3dce5f39727a8822819f8b5eb0c3f46dbf354888dc067d232991dcc58eebd56327b10a00591ed271a1924091ca89c5e1c2b4036eea578ec80f55f740cad7ededb671934e299be", @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}]}, @generic="55e0c832f64cfe2151fa66f0505cc360d7e61dbede39aed4b98b062be8815dd22fe130ba041edbe966797c0064cf958588182cf87d8173b8f5a9327883618950c71cbc663072ee620f70c0f877ad37e9798169f47be5a509ba936b0f4f7475c0c0fb51efd59e0e84e91af8e496f8b9301c90a7c0f62ac8b7e805fd30ad5ff5787c1af82528a5abdfe90493207fae275ef6caff1b8bc0fdf037540ee818ab6ef5fcb19ace6b76547b18d00bb03eee5e1db2a76d705923ea49bd2b90b6", @typed={0x4, 0xa0}, @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x9}]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x1}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000482) ioctl$auto(0x3, 0xae41, r0) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000180)="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", 0xe3}, 0x2) 1.377570686s ago: executing program 1 (id=2027): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0e, 0x1, 0x3, 0x62, 0x80000001, 0x40000004, 0x6d3d, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) getpid() ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r1, 0x40184152, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) pselect6$auto(0x6, &(0x7f0000000080)={[0x9, 0x7fff, 0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0xf, 0x1473714f, 0x101, 0x2, 0x8, 0x7ff, 0x7, 0xfffffffffffffffb]}, &(0x7f00000001c0)={[0x4, 0x8000, 0x6000000000, 0x100, 0x0, 0x0, 0x100000000, 0x100, 0x6, 0x3, 0x4, 0x7, 0x59f50ebf, 0x3, 0x4, 0x800]}, &(0x7f0000000340)={[0x0, 0x9, 0x3, 0xc, 0xfffffffffffffffb, 0x80000001, 0x76, 0x3, 0x80000000, 0x3, 0x400, 0x6ed9, 0x0, 0x7, 0x3, 0x8]}, &(0x7f0000000100)={0x7, 0x6}, &(0x7f0000000440)="4ff9df0748fb0c10af60043aa38b1115b68984e2874577b02501fada5705c47ff479690d481a3b051f3f7b3b7dcedfeebe0d226b7e51f6f312679eae2cc18dbe297e57816d3e6ceee10c1e682136d3f6f18014baf3e05ad7b5b0949d1058267f74dbd2e992b1ecbb518312b9ea0cf57809cc587bf856ed5e8cfe205328adfeaa9523c8e0e4b0db7a2b210488c2b4525e7955fa1e8c9a4bca0c3eb89b03695d566d") r2 = getpid() openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8a200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r4, 0x0, 0x42) read$auto(r4, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4800, 0x0) close_range$auto(r4, r3, 0x7) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000500)="f30b653ffda08380931f3d0f9be1ec28dd8e65f9a291a319fbdbad03b4e3e8cface3927a0c63b1e8b3724463986d86c6e17f1dc84dfd0c064b06959bf2f530d8442cf556dceb52b5998fc9184b797ce0f222535b71fdefde76a6294e0bf19aacb7d4289afcaa", 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x16c82, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400455ca, r5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 1.279929877s ago: executing program 2 (id=2028): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd10/range\x00', 0x70004, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto_proc_pid_attr_operations_base(r1, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x64e000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x8080, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/auDio1\x00VI\xa3\xaa\xb1;\x9d\xb8\x85\xe7l\x99\x02\xfe\xb3\xad\xb8r\xafU\xb9\xd01J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x91\x90\xfb\xe3#\xd6B\x8d\xab\xd7\xcd\xb1\xdb\xe9\x7f\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\x00\x00\x00\x00\x00\x00\x00\a\x92D5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb\xff\xff\xff\x7f\xe2\xae,\x95k8\x83\xcf\xc5,\xd3S\xbf1\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x00\x00\x19R\t\x00\x00\x00\x00\x00\x00\x00\xe8\xfb\x00`\xc2\xcezU\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x1e\xe8\x1c\xf2\x94\x90u\v\xf5\xba$JIQ\xb5q\x80\xdd\bVc\xb9\x12\x9f\x7f|\xb4\x92\xc8\xee\f\xdaD0\x9a\xcag\xd4>\xc9\xed\xd1\x87+-y\x92)', 0x400000100000a3da) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x145000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/tty2/power/runtime_active_time\x00', 0xf5292a190ad5cf67, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x1d, 0x6, 0xa0c) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x2000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x418c01, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 884.400035ms ago: executing program 3 (id=2029): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/nullb0/mq/0/nr_tags\x00', 0x123800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/48, 0x30) (async) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x882, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) ioctl$auto(r2, 0xaf01, r0) 729.050301ms ago: executing program 0 (id=2030): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SET_NAME(0xf, 0x3, 0x0, 0x7ff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8101, 0x0) 489.242211ms ago: executing program 3 (id=2031): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r0, &(0x7f0000000340)=""/253, 0xfd) ptrace$auto_PTRACE_SINGLESTEP(0x9, 0xffffffffffffffff, 0x799e, 0xc) timer_create$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004041}, 0xc800) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyx6/power/runtime_active_time\x00', 0x60442, 0x0) pwrite64$auto(r3, &(0x7f0000000040)='\x00\x00', 0x6, 0x8000) fcntl$auto_F_GETLK(r3, 0x5, 0x5) 283.648639ms ago: executing program 1 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x250, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_RESULT={0x23c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x234, 0x5, 0x0, 0x1, [{0x230, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xb8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x800}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x65}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x6}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0xf8}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xc}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x89}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x2}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x38}]}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xc4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x58, 0x1, "aa6e1f23d3827df3c22e941c3619bab91fe37a23256ca1df8537dc8e2f00702fa2a3373d42f35a51682e83ac448507d503818266fe8a54c96e122671c0fba542c62778f5e7f5c2b16dae5fc705aa2540ee8bdc3d"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xba, 0x1, "44b0bf6c793f1d4d64c6c915cc6881da036fd9682c65d9da0824b337b02c953f64bd4057735c1e6d3cb8d7547625ffe7dff65eba9169bc3d0614de0b1fbf825e8a858882bb182f74f3011738a2b837a786de20ac53906fc9276d177603e438336f018062d6bb6f5ae0e94d79c035c1529c59772f884eeb7ca494e7e37af2de7624b3813969cf03dffebfa030b5f6a7bcadefbd0e7346de5de2be4e735e2214c5007a2811f12b28cfe3e6d5bd39495af3dd316b492354"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5e, 0x1, "d624f96ae3ea297c2bcff23ab9575ef43dadf7e755797f6a00e4cf633fdde3981756c1d3ffdd2bc5c485a19b29466a4c5fb59b2b725531a79aae5c55b6ce034d8ea229a03c910cb93f84aa99a9590eafe154619cbfb5178edc84"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 244.190189ms ago: executing program 0 (id=2033): ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x5, 0x3, 0x0) (async) socket(0x5, 0x3, 0x0) mmap$auto(0x0, 0xc, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) socket(0x11, 0x80003, 0x300) (async) r0 = socket(0x11, 0x80003, 0x300) ustat$auto(0x801, 0x0) setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x3, &(0x7f0000000240)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x002\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd2&i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2p\xc3\xce\x92`\xa4\xa4\xc3\x10\xff\xc9\xe6\x05G\x9b\x1fj\xe3W\xfb\x89\xc5\x12}\xafC\xa7M\xb8\x1aE;\xe19\x03<\x7f8\x8e\xbf\xf3\xb2\xba\xcaB\x1c\x1bA\xb2\xb0\xb2\xf4Y2q\xe7\xe7A\xb7\x1a\xbf\x16Z\x9dh\xd2\xc3\xe3\xf6\x9c\xb4V\xc0\xa7\x17e\xd3\x98)\xfb\xb79\xd0\xdb9\xd0\x8c\x98\\ z\xa7:wYX\x10\xe2\x93\xb0\xc9', 0x1) (async) syslog$auto(0x3, &(0x7f0000000240)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x002\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd2&i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2p\xc3\xce\x92`\xa4\xa4\xc3\x10\xff\xc9\xe6\x05G\x9b\x1fj\xe3W\xfb\x89\xc5\x12}\xafC\xa7M\xb8\x1aE;\xe19\x03<\x7f8\x8e\xbf\xf3\xb2\xba\xcaB\x1c\x1bA\xb2\xb0\xb2\xf4Y2q\xe7\xe7A\xb7\x1a\xbf\x16Z\x9dh\xd2\xc3\xe3\xf6\x9c\xb4V\xc0\xa7\x17e\xd3\x98)\xfb\xb79\xd0\xdb9\xd0\x8c\x98\\ z\xa7:wYX\x10\xe2\x93\xb0\xc9', 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socket(0x10, 0x2, 0x4) (async) r2 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x1ff) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r3, 0x2, 0x0, 0x0) (async) landlock_add_rule$auto(r3, 0x2, 0x0, 0x0) mmap$auto(0x38000000, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f00000000c0)={r4, 0xfff7, 0xb816}, 0x82, 0x9) (async) poll$auto(&(0x7f00000000c0)={r4, 0xfff7, 0xb816}, 0x82, 0x9) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x1f40) (async) read$auto(r6, 0x0, 0x1f40) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_VHOST_SET_OWNER(r5, 0x4004af61, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 235.974053ms ago: executing program 3 (id=2034): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) fallocate$auto(0x1, 0x8, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0xa, 0x3, 0xff) ustat$auto(0x801, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1004c010}, 0x48880) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xe22}, 0x1, 0x0, 0x0, 0xfffffffa}, 0x10}, 0xffff, 0x3) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x8101, 0x0) 0s ago: executing program 3 (id=2035): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/reboot/type\x00', 0x180102, 0x0) mmap$auto(0x0, 0x1, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149001, 0x0) socket(0x2b, 0x4, 0x1) writev$auto(r0, 0x0, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x6, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa501}, 0x800}, 0x3, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) kernel console output (not intermixed with test programs): =231 compat=0 ip=0x7f58dcb8ebe9 code=0x0 [ 526.931385][T13958] nbd: must specify a device to reconfigure [ 527.012519][T13961] netlink: 'syz.2.1568': attribute type 11 has an invalid length. [ 527.028998][T13961] netlink: 'syz.2.1568': attribute type 11 has an invalid length. [ 527.049563][T13961] netlink: 'syz.2.1568': attribute type 11 has an invalid length. [ 527.410486][T13965] openvswitch: netlink: IP tunnel TTL not specified. [ 527.771631][T13969] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 527.926547][T13971] nbd: must specify a device to reconfigure [ 529.209221][T13989] [ 529.338212][T13995] __vm_enough_memory: pid: 13995, comm: syz.1.1577, bytes: 4398046511104 not enough memory for the allocation [ 529.511769][T14000] netlink: 'syz.1.1579': attribute type 11 has an invalid length. [ 529.531607][T14000] netlink: 'syz.1.1579': attribute type 11 has an invalid length. [ 529.539497][T14000] netlink: 'syz.1.1579': attribute type 11 has an invalid length. [ 529.892168][T14004] netlink: 'syz.1.1580': attribute type 3 has an invalid length. [ 530.077680][T14009] nbd: must specify a device to reconfigure [ 530.975165][T14013] [ 531.139900][T14017] netlink: 'syz.1.1584': attribute type 3 has an invalid length. [ 531.225539][T14018] nbd: must specify a device to reconfigure [ 532.115759][T14020] openvswitch: netlink: IP tunnel TTL not specified. [ 532.798198][T14031] [ 533.169906][T14042] netlink: 'syz.3.1590': attribute type 3 has an invalid length. [ 533.374604][T14042] nbd: must specify a device to reconfigure [ 534.008435][T14051] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 7 out of range (51000000..2150000000) [ 534.950257][T14097] netlink: 'syz.0.1605': attribute type 3 has an invalid length. [ 535.015651][T14093] mmap: syz.2.1604 (14093): VmData 46014464 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 535.100209][T14097] nbd: must specify a device to reconfigure [ 536.760576][ T5876] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 536.760607][ T5876] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 536.775746][ T5876] Bluetooth: hci2: Dropping invalid advertising data [ 536.782442][ T5876] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 536.782468][ T5876] Bluetooth: hci2: Dropping invalid advertising data [ 536.796442][ T5876] Bluetooth: hci2: Dropping invalid advertising data [ 536.803165][ T5876] Bluetooth: hci2: Malformed LE Event: 0x02 [ 537.460194][T14144] program syz.2.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.472158][T14144] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 538.119932][T14149] QAT: Stopping all acceleration devices. [ 538.145019][T14149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78010 [ 538.173748][T14149] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.235195][T14149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 538.242853][T14149] page_type: f5(slab) [ 538.293105][T14149] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 538.332208][T14152] netlink: 'syz.2.1618': attribute type 3 has an invalid length. [ 538.373079][T14149] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 538.462615][T14149] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 538.534365][T14154] nbd: must specify a device to reconfigure [ 538.571723][T14149] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 538.606816][T14149] head: 00fff00000000003 ffffea0001e00401 00000000ffffffff 00000000ffffffff [ 538.628341][T14149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 538.649023][T14149] page dumped because: unmovable page [ 538.659933][T14149] page_owner tracks the page as allocated [ 538.671220][T14149] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12887, tgid 12887 (kworker/u8:13), ts 531460029178, free_ts 530837469093 [ 538.708430][T14149] post_alloc_hook+0x1c0/0x230 [ 538.719444][T14149] get_page_from_freelist+0x132b/0x38e0 [ 538.736947][T14149] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 538.751799][T14149] alloc_pages_mpol+0x1fb/0x550 [ 538.767076][T14149] new_slab+0x247/0x330 [ 538.783155][T14149] ___slab_alloc+0xcf2/0x1740 [ 538.851933][T14149] __slab_alloc.constprop.0+0x56/0xb0 [ 538.926298][T14149] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 539.020857][T14149] kmalloc_reserve+0xef/0x2c0 [ 539.127020][T14149] __alloc_skb+0x166/0x380 [ 539.189385][T14149] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 539.195095][T14149] process_one_work+0x9cf/0x1b70 [ 539.235541][T14149] worker_thread+0x6c8/0xf10 [ 539.249109][T14149] kthread+0x3c5/0x780 [ 539.257037][T14149] ret_from_fork+0x5d4/0x6f0 [ 539.285417][T14149] ret_from_fork_asm+0x1a/0x30 [ 539.300421][T14149] page last free pid 13991 tgid 13990 stack trace: [ 539.325671][T14149] __free_frozen_pages+0x7d5/0x10f0 [ 539.348151][T14149] __put_partials+0x165/0x1c0 [ 539.352926][T14149] qlist_free_all+0x4d/0x120 [ 539.391020][T14149] kasan_quarantine_reduce+0x195/0x1e0 [ 539.405667][T14149] __kasan_slab_alloc+0x69/0x90 [ 539.410688][T14149] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 539.425607][T14149] ptlock_alloc+0x1f/0x70 [ 539.430019][T14149] pte_alloc_one+0x82/0x3a0 [ 539.444945][T14149] __pte_alloc+0x6d/0x3c0 [ 539.455114][T14149] do_pte_missing+0x285a/0x3ba0 [ 539.465261][T14149] __handle_mm_fault+0x152a/0x2a50 [ 539.481010][T14149] handle_mm_fault+0x589/0xd10 [ 539.486385][T14149] __get_user_pages+0x551/0x34a0 [ 539.501832][T14149] populate_vma_page_range+0x267/0x3f0 [ 539.525747][T14149] __mm_populate+0x1d8/0x380 [ 539.530457][T14149] vm_mmap_pgoff+0x37f/0x470 [ 540.679338][T14175] vhci_hcd: invalid port number 255 [ 540.716286][T14175] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 540.835587][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'. [ 541.089604][T14188] FAULT_INJECTION: forcing a failure. [ 541.089604][T14188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 541.106960][T14188] CPU: 1 UID: 0 PID: 14188 Comm: syz.3.1628 Not tainted syzkaller #0 PREEMPT(full) [ 541.107004][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.107023][T14188] Call Trace: [ 541.107033][T14188] [ 541.107044][T14188] dump_stack_lvl+0x16c/0x1f0 [ 541.107088][T14188] should_fail_ex+0x512/0x640 [ 541.107146][T14188] get_futex_key+0x1d0/0x1560 [ 541.107185][T14188] ? kvm_sched_clock_read+0x11/0x20 [ 541.107222][T14188] ? __pfx_get_futex_key+0x10/0x10 [ 541.107256][T14188] ? sched_clock_cpu+0x6c/0x530 [ 541.107297][T14188] ? rcu_is_watching+0x12/0xc0 [ 541.107331][T14188] futex_wait_setup+0x9d/0x550 [ 541.107385][T14188] __futex_wait+0x194/0x2f0 [ 541.107434][T14188] ? __pfx___futex_wait+0x10/0x10 [ 541.107481][T14188] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 541.107537][T14188] ? __pfx_futex_wake_mark+0x10/0x10 [ 541.107587][T14188] ? lock_release+0x201/0x2f0 [ 541.107623][T14188] ? futex_private_hash_put+0x11c/0x300 [ 541.107657][T14188] futex_wait+0xe8/0x380 [ 541.107697][T14188] ? __pfx_futex_wait+0x10/0x10 [ 541.107741][T14188] ? ksys_read+0x190/0x250 [ 541.107770][T14188] ? rcu_is_watching+0x12/0xc0 [ 541.107796][T14188] ? lock_release+0x201/0x2f0 [ 541.107835][T14188] do_futex+0x229/0x350 [ 541.107871][T14188] ? __pfx_do_futex+0x10/0x10 [ 541.107909][T14188] ? rcu_is_watching+0x12/0xc0 [ 541.107945][T14188] __x64_sys_futex+0x1e0/0x4c0 [ 541.107989][T14188] ? __fget_files+0x20e/0x3c0 [ 541.108024][T14188] ? __pfx___x64_sys_futex+0x10/0x10 [ 541.108069][T14188] ? fdget+0x187/0x210 [ 541.108103][T14188] do_syscall_64+0xcd/0x490 [ 541.108156][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.108188][T14188] RIP: 0033:0x7f364138ebe9 [ 541.108213][T14188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.108246][T14188] RSP: 002b:00007f364221d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.108278][T14188] RAX: ffffffffffffffda RBX: 00007f36415b5fa8 RCX: 00007f364138ebe9 [ 541.108300][T14188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36415b5fa8 [ 541.108319][T14188] RBP: 00007f36415b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 541.108339][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.108359][T14188] R13: 00007f36415b6038 R14: 00007fff03798500 R15: 00007fff037985e8 [ 541.108391][T14188] [ 542.134037][T14203] netlink: 'syz.0.1630': attribute type 3 has an invalid length. [ 542.280063][T14206] nbd: must specify a device to reconfigure [ 543.332843][T14236] netlink: 'syz.3.1638': attribute type 3 has an invalid length. [ 543.487251][T14242] nbd: must specify a device to reconfigure [ 544.201819][T14244] ubi0: attaching mtd0 [ 544.206685][T14244] ubi0: scanning is finished [ 544.403041][T14244] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 544.425824][T14249] 0x000200000001-0xa29656a63616329 : "" [ 544.431562][T14249] mtd: partition "" is out of reach -- disabled [ 544.441367][T14249] ftl_cs: FTL header not found. [ 544.502800][T14244] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 544.510440][T14244] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 544.517567][T14244] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 544.525416][T14244] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 544.532621][T14244] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 544.543147][T14244] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2891250301 [ 544.553543][T14244] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 544.617418][T14251] ubi0: background thread "ubi_bgt0d" started, PID 14251 [ 545.068535][T14260] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 545.158653][T14268] netlink: 'syz.0.1646': attribute type 3 has an invalid length. [ 545.297506][T14263] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 7 out of range (51000000..2150000000) [ 545.313361][T14260] nbd: must specify a device to reconfigure [ 545.571030][T14280] lo: entered allmulticast mode [ 545.762060][T14283] lo: left allmulticast mode [ 546.040417][ T983] smpboot: CPU 0 is now offline [ 546.103309][T14282] svc: failed to register nfsdv3 RPC service (errno 111). [ 546.142913][T14282] svc: failed to register nfsaclv3 RPC service (errno 111). [ 546.709337][T14304] QAT: Stopping all acceleration devices. [ 546.832232][T14304] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78010 [ 546.883727][T14299] 0x000200000001-0xa29656a63616329 : "" [ 546.919469][T14299] mtd: partition "" is out of reach -- disabled [ 546.940770][T14304] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 546.959940][T14299] ftl_cs: FTL header not found. [ 547.035344][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'. [ 547.053778][T14304] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 547.115580][T14304] page_type: f5(slab) [ 547.185778][T14304] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 547.256261][T14304] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 547.297961][T14317] FAULT_INJECTION: forcing a failure. [ 547.297961][T14317] name failslab, interval 1, probability 0, space 0, times 0 [ 547.331824][T14304] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 547.360082][T14317] CPU: 1 UID: 0 PID: 14317 Comm: syz.1.1659 Not tainted syzkaller #0 PREEMPT(full) [ 547.360115][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.360130][T14317] Call Trace: [ 547.360137][T14317] [ 547.360145][T14317] dump_stack_lvl+0x16c/0x1f0 [ 547.360180][T14317] should_fail_ex+0x512/0x640 [ 547.360216][T14317] should_failslab+0xc2/0x120 [ 547.360248][T14317] __kmalloc_cache_noprof+0x6a/0x3e0 [ 547.360272][T14317] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 547.360300][T14317] __v4l2_subdev_state_alloc+0x53/0x400 [ 547.360324][T14317] subdev_open+0xa6/0x560 [ 547.360346][T14317] v4l2_open+0x225/0x490 [ 547.360374][T14317] ? __pfx_v4l2_open+0x10/0x10 [ 547.360401][T14317] chrdev_open+0x231/0x6a0 [ 547.360438][T14317] ? __pfx_apparmor_file_open+0x10/0x10 [ 547.360465][T14317] ? __pfx_chrdev_open+0x10/0x10 [ 547.360496][T14317] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 547.360527][T14317] do_dentry_open+0x97f/0x1530 [ 547.360558][T14317] ? __pfx_chrdev_open+0x10/0x10 [ 547.360592][T14317] vfs_open+0x82/0x3f0 [ 547.360629][T14317] path_openat+0x1de4/0x2cb0 [ 547.360662][T14317] ? __pfx_path_openat+0x10/0x10 [ 547.360693][T14317] do_filp_open+0x20b/0x470 [ 547.360721][T14317] ? __pfx_do_filp_open+0x10/0x10 [ 547.360759][T14317] ? alloc_fd+0x471/0x7d0 [ 547.360787][T14317] do_sys_openat2+0x11b/0x1d0 [ 547.360824][T14317] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.360867][T14317] __x64_sys_openat+0x174/0x210 [ 547.360905][T14317] ? __pfx___x64_sys_openat+0x10/0x10 [ 547.360950][T14317] do_syscall_64+0xcd/0x490 [ 547.360982][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.361007][T14317] RIP: 0033:0x7f5803d8ebe9 [ 547.361025][T14317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.361049][T14317] RSP: 002b:00007f5804be9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.361072][T14317] RAX: ffffffffffffffda RBX: 00007f5803fb6090 RCX: 00007f5803d8ebe9 [ 547.361088][T14317] RDX: 0000000000080002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 547.361104][T14317] RBP: 00007f5803e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 547.361119][T14317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.361133][T14317] R13: 00007f5803fb6128 R14: 00007f5803fb6090 R15: 00007ffe9fa75278 [ 547.361155][T14317] [ 547.639366][T14304] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 547.648138][T14304] head: 00fff00000000003 ffffea0001e00401 00000000ffffffff 00000000ffffffff [ 547.656914][T14304] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 547.665772][T14304] page dumped because: unmovable page [ 547.671304][T14304] page_owner tracks the page as allocated [ 547.677045][T14304] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12887, tgid 12887 (kworker/u8:13), ts 531460029178, free_ts 530837469093 [ 547.698648][T14304] post_alloc_hook+0x1c0/0x230 [ 547.703741][T14304] get_page_from_freelist+0x132b/0x38e0 [ 547.709535][T14304] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 547.716611][T14304] alloc_pages_mpol+0x1fb/0x550 [ 547.721626][T14304] new_slab+0x247/0x330 [ 547.725797][T14304] ___slab_alloc+0xcf2/0x1740 [ 547.730527][T14304] __slab_alloc.constprop.0+0x56/0xb0 [ 547.735985][T14304] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 547.743022][T14304] kmalloc_reserve+0xef/0x2c0 [ 547.747812][T14304] __alloc_skb+0x166/0x380 [ 547.752286][T14304] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 547.757996][T14304] process_one_work+0x9cf/0x1b70 [ 547.762998][T14304] worker_thread+0x6c8/0xf10 [ 547.767605][T14304] kthread+0x3c5/0x780 [ 547.771829][T14304] ret_from_fork+0x5d4/0x6f0 [ 547.776460][T14304] ret_from_fork_asm+0x1a/0x30 [ 547.781312][T14304] page last free pid 13991 tgid 13990 stack trace: [ 547.788110][T14304] __free_frozen_pages+0x7d5/0x10f0 [ 547.793577][T14304] __put_partials+0x165/0x1c0 [ 547.798356][T14304] qlist_free_all+0x4d/0x120 [ 547.802995][T14304] kasan_quarantine_reduce+0x195/0x1e0 [ 547.808520][T14304] __kasan_slab_alloc+0x69/0x90 [ 547.813430][T14304] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 547.819509][T14304] ptlock_alloc+0x1f/0x70 [ 547.824744][T14304] pte_alloc_one+0x82/0x3a0 [ 547.829276][T14304] __pte_alloc+0x6d/0x3c0 [ 547.833742][T14304] do_pte_missing+0x285a/0x3ba0 [ 547.838607][T14304] __handle_mm_fault+0x152a/0x2a50 [ 547.843757][T14304] handle_mm_fault+0x589/0xd10 [ 547.852885][T14304] __get_user_pages+0x551/0x34a0 [ 547.857906][T14304] populate_vma_page_range+0x267/0x3f0 [ 547.866358][T14320] netlink: 'syz.0.1660': attribute type 3 has an invalid length. [ 547.874228][T14304] __mm_populate+0x1d8/0x380 [ 547.878854][T14304] vm_mmap_pgoff+0x37f/0x470 [ 548.098007][T14329] nbd: must specify a device to reconfigure [ 548.675379][T14340] FAULT_INJECTION: forcing a failure. [ 548.675379][T14340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 548.755662][T14340] CPU: 1 UID: 0 PID: 14340 Comm: syz.2.1665 Not tainted syzkaller #0 PREEMPT(full) [ 548.755695][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.755709][T14340] Call Trace: [ 548.755716][T14340] [ 548.755725][T14340] dump_stack_lvl+0x16c/0x1f0 [ 548.755759][T14340] should_fail_ex+0x512/0x640 [ 548.755795][T14340] get_futex_key+0x1d0/0x1560 [ 548.755826][T14340] ? __pfx_get_futex_key+0x10/0x10 [ 548.755853][T14340] ? rcu_is_watching+0x12/0xc0 [ 548.755877][T14340] ? lock_release+0x201/0x2f0 [ 548.755912][T14340] futex_wait_setup+0x9d/0x550 [ 548.755953][T14340] __futex_wait+0x194/0x2f0 [ 548.755989][T14340] ? __pfx___futex_wait+0x10/0x10 [ 548.756028][T14340] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.756066][T14340] ? lock_release+0x201/0x2f0 [ 548.756098][T14340] ? futex_private_hash_put+0x11c/0x300 [ 548.756127][T14340] futex_wait+0xe8/0x380 [ 548.756163][T14340] ? __pfx_futex_wait+0x10/0x10 [ 548.756202][T14340] ? ksys_read+0x190/0x250 [ 548.756228][T14340] ? rcu_is_watching+0x12/0xc0 [ 548.756252][T14340] ? lock_release+0x201/0x2f0 [ 548.756284][T14340] do_futex+0x229/0x350 [ 548.756314][T14340] ? __pfx_do_futex+0x10/0x10 [ 548.756344][T14340] ? rcu_is_watching+0x12/0xc0 [ 548.756370][T14340] __x64_sys_futex+0x1e0/0x4c0 [ 548.756402][T14340] ? __fget_files+0x20e/0x3c0 [ 548.756427][T14340] ? __pfx___x64_sys_futex+0x10/0x10 [ 548.756461][T14340] ? fdget+0x187/0x210 [ 548.756487][T14340] do_syscall_64+0xcd/0x490 [ 548.756519][T14340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.756551][T14340] RIP: 0033:0x7fdc2618ebe9 [ 548.756569][T14340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.756592][T14340] RSP: 002b:00007fdc270c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 548.756614][T14340] RAX: ffffffffffffffda RBX: 00007fdc263b5fa8 RCX: 00007fdc2618ebe9 [ 548.756629][T14340] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc263b5fa8 [ 548.756644][T14340] RBP: 00007fdc263b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 548.756658][T14340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.756671][T14340] R13: 00007fdc263b6038 R14: 00007fffe69183f0 R15: 00007fffe69184d8 [ 548.756693][T14340] [ 549.989236][T14362] QAT: Stopping all acceleration devices. [ 550.095167][T14362] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78010 [ 550.148565][T14362] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 550.192056][T14362] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 550.233923][T14362] page_type: f5(slab) [ 550.250659][T14362] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 550.299173][T14362] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 550.349433][T14362] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 550.395082][T14362] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 550.438844][T14362] head: 00fff00000000003 ffffea0001e00401 00000000ffffffff 00000000ffffffff [ 550.485257][T14362] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 550.524001][T14362] page dumped because: unmovable page [ 550.553306][T14362] page_owner tracks the page as allocated [ 550.592286][T14362] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12887, tgid 12887 (kworker/u8:13), ts 531460029178, free_ts 530837469093 [ 550.690737][T14362] post_alloc_hook+0x1c0/0x230 [ 550.735470][T14362] get_page_from_freelist+0x132b/0x38e0 [ 550.761623][T14362] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 550.791464][T14362] alloc_pages_mpol+0x1fb/0x550 [ 550.815744][T14362] new_slab+0x247/0x330 [ 550.860888][T14362] ___slab_alloc+0xcf2/0x1740 [ 550.878988][T14362] __slab_alloc.constprop.0+0x56/0xb0 [ 550.900185][T14362] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 550.932141][T14362] kmalloc_reserve+0xef/0x2c0 [ 550.949496][T14362] __alloc_skb+0x166/0x380 [ 550.965251][T14362] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 550.981895][T14362] process_one_work+0x9cf/0x1b70 [ 550.997706][T14362] worker_thread+0x6c8/0xf10 [ 551.009652][T14362] kthread+0x3c5/0x780 [ 551.022206][T14362] ret_from_fork+0x5d4/0x6f0 [ 551.029293][T14362] ret_from_fork_asm+0x1a/0x30 [ 551.035285][T14362] page last free pid 13991 tgid 13990 stack trace: [ 551.042493][T14362] __free_frozen_pages+0x7d5/0x10f0 [ 551.047881][T14362] __put_partials+0x165/0x1c0 [ 551.053854][T14362] qlist_free_all+0x4d/0x120 [ 551.058729][T14362] kasan_quarantine_reduce+0x195/0x1e0 [ 551.065888][T14362] __kasan_slab_alloc+0x69/0x90 [ 551.071093][T14362] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 551.078239][T14362] ptlock_alloc+0x1f/0x70 [ 551.083304][T14362] pte_alloc_one+0x82/0x3a0 [ 551.087904][T14362] __pte_alloc+0x6d/0x3c0 [ 551.093703][T14362] do_pte_missing+0x285a/0x3ba0 [ 551.099986][T14362] __handle_mm_fault+0x152a/0x2a50 [ 551.108367][T14362] handle_mm_fault+0x589/0xd10 [ 551.114211][T14362] __get_user_pages+0x551/0x34a0 [ 551.119401][T14362] populate_vma_page_range+0x267/0x3f0 [ 551.127543][T14362] __mm_populate+0x1d8/0x380 [ 551.133661][T14362] vm_mmap_pgoff+0x37f/0x470 [ 552.960305][T14468] netlink: 'syz.2.1682': attribute type 3 has an invalid length. [ 553.050164][T14475] nbd: must specify a device to reconfigure [ 553.220866][T14405] workqueue: Failed to create a rescuer kthread for wq "nfc25_nci_rx_wq": -EINTR [ 554.834393][T14518] svc: failed to register nfsdv3 RPC service (errno 111). [ 554.905241][T14518] svc: failed to register nfsaclv3 RPC service (errno 111). [ 555.031355][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 555.716285][T14538] netlink: 'syz.2.1692': attribute type 3 has an invalid length. [ 555.775227][T14546] netlink: 'syz.3.1694': attribute type 11 has an invalid length. [ 555.830277][T14546] netlink: 'syz.3.1694': attribute type 11 has an invalid length. [ 556.861117][T14577] HfR: entered promiscuous mode [ 557.316354][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 557.808802][T14602] netlink: 'syz.2.1710': attribute type 3 has an invalid length. [ 557.841730][T14604] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 557.875994][T14604] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1711'. [ 557.905746][T14604] IPv6: NLM_F_CREATE should be specified when creating new route [ 557.922484][T14606] Invalid ELF header magic: != ELF [ 557.959404][T14604] IPv6: Can't replace route, no match found [ 557.970760][T14607] nbd: must specify a device to reconfigure [ 559.201084][ T31] audit: type=1800 audit(6050733243.648:191): pid=14637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1719" name="lu_gp_id" dev="configfs" ino=44179 res=0 errno=0 [ 559.596957][T14636] delete_channel: no stack [ 560.434529][T14673] sd 0:0:1:0: PR command failed: 1026 [ 560.469795][T14673] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 560.570343][T14673] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 560.873771][T14682] netlink: 'syz.1.1726': attribute type 3 has an invalid length. [ 561.172707][T14698] nbd: must specify a device to reconfigure [ 562.206535][T14661] FAULT_INJECTION: forcing a failure. [ 562.206535][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 562.271585][T14661] CPU: 1 UID: 0 PID: 14661 Comm: syz.3.1723 Not tainted syzkaller #0 PREEMPT(full) [ 562.271618][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.271633][T14661] Call Trace: [ 562.271641][T14661] [ 562.271650][T14661] dump_stack_lvl+0x16c/0x1f0 [ 562.271684][T14661] should_fail_ex+0x512/0x640 [ 562.271721][T14661] should_failslab+0xc2/0x120 [ 562.271754][T14661] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 562.271782][T14661] ? trace_cap_capable+0x18d/0x200 [ 562.271806][T14661] ? vm_area_dup+0x27/0x8d0 [ 562.271833][T14661] vm_area_dup+0x27/0x8d0 [ 562.271858][T14661] dup_mmap+0x877/0x21d0 [ 562.271900][T14661] ? __pfx_dup_mmap+0x10/0x10 [ 562.271937][T14661] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 562.271976][T14661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 562.272007][T14661] ? __pfx___might_resched+0x10/0x10 [ 562.272032][T14661] ? mm_init+0xd22/0x13a0 [ 562.272060][T14661] copy_process+0x4081/0x7690 [ 562.272117][T14661] ? preempt_schedule_thunk+0x16/0x30 [ 562.272157][T14661] ? __pfx_copy_process+0x10/0x10 [ 562.272186][T14661] ? rcu_is_watching+0x12/0xc0 [ 562.272210][T14661] ? lock_release+0x201/0x2f0 [ 562.272241][T14661] ? futex_private_hash_put+0x11c/0x300 [ 562.272272][T14661] kernel_clone+0xfc/0x930 [ 562.272301][T14661] ? __pfx_futex_wake+0x10/0x10 [ 562.272334][T14661] ? __pfx_kernel_clone+0x10/0x10 [ 562.272363][T14661] ? rcu_is_watching+0x12/0xc0 [ 562.272393][T14661] __do_sys_clone+0xce/0x120 [ 562.272423][T14661] ? __pfx___do_sys_clone+0x10/0x10 [ 562.272453][T14661] ? __pfx___might_resched+0x10/0x10 [ 562.272482][T14661] ? xfd_validate_state+0x61/0x180 [ 562.272522][T14661] do_syscall_64+0xcd/0x490 [ 562.272553][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.272577][T14661] RIP: 0033:0x7f364138ebe9 [ 562.272594][T14661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.272619][T14661] RSP: 002b:00007f364221cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 562.272641][T14661] RAX: ffffffffffffffda RBX: 00007f36415b5fa0 RCX: 00007f364138ebe9 [ 562.272657][T14661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 562.272671][T14661] RBP: 00007f3641411e19 R08: 0000000000000000 R09: 0000000000000000 [ 562.272685][T14661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 562.272699][T14661] R13: 00007f36415b6038 R14: 00007f36415b5fa0 R15: 00007fff037985e8 [ 562.272722][T14661] [ 563.315296][T14745] writing to auto_msgmni has no effect [ 563.493806][T14747] netlink: 'syz.0.1741': attribute type 3 has an invalid length. [ 563.796013][T14752] nbd: must specify a device to reconfigure [ 565.565904][T14788] Invalid ELF header magic: != ELF [ 566.721407][T14812] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 566.944977][T14816] netlink: 'syz.2.1754': attribute type 3 has an invalid length. [ 567.270083][T14816] nbd: must specify a device to reconfigure [ 567.458448][T14832] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.193938][T14868] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1766'. [ 569.281113][T14871] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1766'. [ 569.843177][T14883] netlink: 'syz.0.1769': attribute type 11 has an invalid length. [ 569.874066][T14880] rnbd_client L213: map_device: Parameters missing [ 569.893993][T14883] netlink: 'syz.0.1769': attribute type 11 has an invalid length. [ 569.933111][T14883] netlink: 'syz.0.1769': attribute type 11 has an invalid length. [ 570.262068][T14890] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 570.339852][T14890] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 570.408355][T14890] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 571.486158][T14929] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 572.418390][T14943] netlink: 'syz.3.1780': attribute type 11 has an invalid length. [ 572.451438][T14943] netlink: 'syz.3.1780': attribute type 11 has an invalid length. [ 572.483134][T14943] netlink: 'syz.3.1780': attribute type 11 has an invalid length. [ 573.087358][T14960] netlink: 'syz.3.1785': attribute type 11 has an invalid length. [ 573.435284][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.441981][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.491520][T14974] sd 0:0:1:0: PR command failed: 1026 [ 573.530007][T14974] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 573.558047][T14974] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 574.126842][T14980] rnbd_client L213: map_device: Parameters missing [ 576.786134][T15032] nla_validate_range_unsigned: 5 callbacks suppressed [ 576.786154][T15032] netlink: 'syz.2.1797': attribute type 11 has an invalid length. [ 576.849882][T15032] netlink: 'syz.2.1797': attribute type 11 has an invalid length. [ 576.894336][T15032] netlink: 'syz.2.1797': attribute type 11 has an invalid length. [ 577.227283][T15036] FAULT_INJECTION: forcing a failure. [ 577.227283][T15036] name failslab, interval 1, probability 0, space 0, times 0 [ 577.273351][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.3.1799 Not tainted syzkaller #0 PREEMPT(full) [ 577.273382][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.273396][T15036] Call Trace: [ 577.273403][T15036] [ 577.273411][T15036] dump_stack_lvl+0x16c/0x1f0 [ 577.273445][T15036] should_fail_ex+0x512/0x640 [ 577.273479][T15036] ? lsm_blob_alloc+0x68/0x90 [ 577.273498][T15036] should_failslab+0xc2/0x120 [ 577.273529][T15036] __kmalloc_noprof+0xd2/0x510 [ 577.273558][T15036] lsm_blob_alloc+0x68/0x90 [ 577.273577][T15036] security_sk_alloc+0x30/0x270 [ 577.273603][T15036] sk_prot_alloc+0xfb/0x2a0 [ 577.273639][T15036] sk_alloc+0x36/0xc20 [ 577.273664][T15036] inet_create+0x3a1/0x1040 [ 577.273686][T15036] ? inet_create+0x93/0x1040 [ 577.273709][T15036] __sock_create+0x338/0x8d0 [ 577.273733][T15036] smc_create+0x15d/0x2a0 [ 577.273756][T15036] __sock_create+0x338/0x8d0 [ 577.273778][T15036] __sys_socket+0x14d/0x260 [ 577.273799][T15036] ? __pfx___sys_socket+0x10/0x10 [ 577.273820][T15036] ? xfd_validate_state+0x61/0x180 [ 577.273858][T15036] __x64_sys_socket+0x72/0xb0 [ 577.273879][T15036] do_syscall_64+0xcd/0x490 [ 577.273909][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.273932][T15036] RIP: 0033:0x7f364138ebe9 [ 577.273949][T15036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.273979][T15036] RSP: 002b:00007f364221d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 577.274001][T15036] RAX: ffffffffffffffda RBX: 00007f36415b5fa0 RCX: 00007f364138ebe9 [ 577.274016][T15036] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 577.274029][T15036] RBP: 00007f3641411e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.274043][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.274056][T15036] R13: 00007f36415b6038 R14: 00007f36415b5fa0 R15: 00007fff037985e8 [ 577.274078][T15036] [ 577.949144][T15043] netlink: 'syz.2.1802': attribute type 11 has an invalid length. [ 577.985301][T15043] netlink: 'syz.2.1802': attribute type 11 has an invalid length. [ 578.014532][T15043] netlink: 'syz.2.1802': attribute type 11 has an invalid length. [ 578.407762][T15055] FAULT_INJECTION: forcing a failure. [ 578.407762][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 578.468279][T15055] CPU: 1 UID: 0 PID: 15055 Comm: syz.2.1804 Not tainted syzkaller #0 PREEMPT(full) [ 578.468310][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.468324][T15055] Call Trace: [ 578.468331][T15055] [ 578.468339][T15055] dump_stack_lvl+0x16c/0x1f0 [ 578.468372][T15055] should_fail_ex+0x512/0x640 [ 578.468411][T15055] should_failslab+0xc2/0x120 [ 578.468443][T15055] __kmalloc_cache_noprof+0x6a/0x3e0 [ 578.468466][T15055] ? alloc_pipe_info+0x10e/0x590 [ 578.468497][T15055] alloc_pipe_info+0x10e/0x590 [ 578.468528][T15055] splice_direct_to_actor+0x77d/0xa30 [ 578.468552][T15055] ? kstrtouint_from_user+0x13c/0x1d0 [ 578.468579][T15055] ? __pfx_direct_splice_actor+0x10/0x10 [ 578.468604][T15055] ? __pfx_aa_file_perm+0x10/0x10 [ 578.468647][T15055] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 578.468670][T15055] ? lock_release+0x201/0x2f0 [ 578.468704][T15055] do_splice_direct+0x174/0x240 [ 578.468726][T15055] ? __pfx_do_splice_direct+0x10/0x10 [ 578.468749][T15055] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 578.468772][T15055] ? bpf_lsm_file_permission+0x9/0x10 [ 578.468806][T15055] ? security_file_permission+0x71/0x210 [ 578.468839][T15055] ? rw_verify_area+0xcf/0x6c0 [ 578.468862][T15055] do_sendfile+0xb06/0xe50 [ 578.468889][T15055] ? __pfx_do_sendfile+0x10/0x10 [ 578.468913][T15055] ? __fget_files+0x20e/0x3c0 [ 578.468940][T15055] __x64_sys_sendfile64+0x1d8/0x220 [ 578.468971][T15055] ? ksys_write+0x1ac/0x250 [ 578.468997][T15055] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 578.469033][T15055] do_syscall_64+0xcd/0x490 [ 578.469064][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.469087][T15055] RIP: 0033:0x7fdc2618ebe9 [ 578.469104][T15055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.469127][T15055] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.469149][T15055] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 578.469165][T15055] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 578.469179][T15055] RBP: 00007fdc270c0090 R08: 0000000000000000 R09: 0000000000000000 [ 578.469194][T15055] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 578.469208][T15055] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 578.469231][T15055] [ 579.387651][T15059] netlink: 'syz.0.1813': attribute type 11 has an invalid length. [ 579.433582][T15059] netlink: 'syz.0.1813': attribute type 11 has an invalid length. [ 579.488517][T15059] netlink: 'syz.0.1813': attribute type 11 has an invalid length. [ 579.947561][T15063] rnbd_client L213: map_device: Parameters missing [ 580.537739][ T31] audit: type=1804 audit(6050734291.997:192): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1812" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 581.449548][T15092] netlink: 25520 bytes leftover after parsing attributes in process `syz.3.1814'. [ 581.490008][T15092] netlink: zone id is out of range [ 581.506659][T15092] netlink: zone id is out of range [ 581.536709][T15092] netlink: zone id is out of range [ 581.562994][T15092] netlink: zone id is out of range [ 581.576701][T15092] netlink: zone id is out of range [ 581.613414][T15092] netlink: zone id is out of range [ 581.639478][T15092] netlink: zone id is out of range [ 581.669159][T15092] netlink: zone id is out of range [ 581.693034][T15092] netlink: zone id is out of range [ 581.712778][T15092] netlink: zone id is out of range [ 581.738037][T15117] FAULT_INJECTION: forcing a failure. [ 581.738037][T15117] name failslab, interval 1, probability 0, space 0, times 0 [ 581.878411][T15117] CPU: 1 UID: 0 PID: 15117 Comm: syz.1.1816 Not tainted syzkaller #0 PREEMPT(full) [ 581.878444][T15117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.878457][T15117] Call Trace: [ 581.878464][T15117] [ 581.878472][T15117] dump_stack_lvl+0x16c/0x1f0 [ 581.878505][T15117] should_fail_ex+0x512/0x640 [ 581.878539][T15117] ? alloc_pipe_info+0x1ec/0x590 [ 581.878567][T15117] should_failslab+0xc2/0x120 [ 581.878596][T15117] __kmalloc_noprof+0xd2/0x510 [ 581.878621][T15117] ? bpf_lsm_capable+0x9/0x10 [ 581.878641][T15117] ? security_capable+0x7e/0x260 [ 581.878665][T15117] alloc_pipe_info+0x1ec/0x590 [ 581.878702][T15117] splice_direct_to_actor+0x77d/0xa30 [ 581.878726][T15117] ? kstrtouint_from_user+0x13c/0x1d0 [ 581.878754][T15117] ? __pfx_direct_splice_actor+0x10/0x10 [ 581.878778][T15117] ? __pfx_aa_file_perm+0x10/0x10 [ 581.878814][T15117] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 581.878837][T15117] ? lock_release+0x201/0x2f0 [ 581.878870][T15117] do_splice_direct+0x174/0x240 [ 581.878893][T15117] ? __pfx_do_splice_direct+0x10/0x10 [ 581.878916][T15117] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 581.878938][T15117] ? bpf_lsm_file_permission+0x9/0x10 [ 581.878972][T15117] ? security_file_permission+0x71/0x210 [ 581.879004][T15117] ? rw_verify_area+0xcf/0x6c0 [ 581.879027][T15117] do_sendfile+0xb06/0xe50 [ 581.879054][T15117] ? __pfx_do_sendfile+0x10/0x10 [ 581.879078][T15117] ? __fget_files+0x20e/0x3c0 [ 581.879105][T15117] __x64_sys_sendfile64+0x1d8/0x220 [ 581.879137][T15117] ? ksys_write+0x1ac/0x250 [ 581.879162][T15117] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 581.879199][T15117] do_syscall_64+0xcd/0x490 [ 581.879230][T15117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.879253][T15117] RIP: 0033:0x7f5803d8ebe9 [ 581.879275][T15117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.879297][T15117] RSP: 002b:00007f5804c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 581.879319][T15117] RAX: ffffffffffffffda RBX: 00007f5803fb5fa0 RCX: 00007f5803d8ebe9 [ 581.879334][T15117] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 581.879347][T15117] RBP: 00007f5804c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 581.879360][T15117] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 581.879374][T15117] R13: 00007f5803fb6038 R14: 00007f5803fb5fa0 R15: 00007ffe9fa75278 [ 581.879395][T15117] [ 582.129789][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.244717][T15121] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 582.252718][T15121] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 582.260564][T15121] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 583.528133][T15155] FAULT_INJECTION: forcing a failure. [ 583.528133][T15155] name failslab, interval 1, probability 0, space 0, times 0 [ 583.584596][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.2.1827 Not tainted syzkaller #0 PREEMPT(full) [ 583.584628][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.584642][T15155] Call Trace: [ 583.584649][T15155] [ 583.584657][T15155] dump_stack_lvl+0x16c/0x1f0 [ 583.584689][T15155] should_fail_ex+0x512/0x640 [ 583.584724][T15155] ? copy_splice_read+0x1a8/0xc20 [ 583.584745][T15155] should_failslab+0xc2/0x120 [ 583.584774][T15155] __kmalloc_noprof+0xd2/0x510 [ 583.584803][T15155] copy_splice_read+0x1a8/0xc20 [ 583.584827][T15155] ? __pfx_copy_splice_read+0x10/0x10 [ 583.584850][T15155] ? look_up_lock_class+0x59/0x150 [ 583.584879][T15155] ? lockdep_init_map_type+0x5c/0x280 [ 583.584911][T15155] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 583.584938][T15155] ? __pfx_copy_splice_read+0x10/0x10 [ 583.584958][T15155] do_splice_read+0x282/0x370 [ 583.584981][T15155] splice_direct_to_actor+0x2a1/0xa30 [ 583.585004][T15155] ? __pfx_direct_splice_actor+0x10/0x10 [ 583.585030][T15155] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 583.585056][T15155] do_splice_direct+0x174/0x240 [ 583.585078][T15155] ? __pfx_do_splice_direct+0x10/0x10 [ 583.585101][T15155] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 583.585123][T15155] ? bpf_lsm_file_permission+0x9/0x10 [ 583.585156][T15155] ? security_file_permission+0x71/0x210 [ 583.585194][T15155] ? rw_verify_area+0xcf/0x6c0 [ 583.585217][T15155] do_sendfile+0xb06/0xe50 [ 583.585244][T15155] ? __pfx_do_sendfile+0x10/0x10 [ 583.585268][T15155] ? __fget_files+0x20e/0x3c0 [ 583.585298][T15155] __x64_sys_sendfile64+0x1d8/0x220 [ 583.585330][T15155] ? ksys_write+0x1ac/0x250 [ 583.585355][T15155] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 583.585392][T15155] do_syscall_64+0xcd/0x490 [ 583.585422][T15155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.585445][T15155] RIP: 0033:0x7fdc2618ebe9 [ 583.585461][T15155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.585483][T15155] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 583.585504][T15155] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 583.585519][T15155] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 583.585532][T15155] RBP: 00007fdc270c0090 R08: 0000000000000000 R09: 0000000000000000 [ 583.585546][T15155] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 583.585559][T15155] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 583.585580][T15155] [ 583.836628][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.384533][T15167] netlink: 'syz.2.1831': attribute type 11 has an invalid length. [ 584.412477][T15167] netlink: 'syz.2.1831': attribute type 11 has an invalid length. [ 584.441957][T15167] netlink: 'syz.2.1831': attribute type 11 has an invalid length. [ 584.588261][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 585.566361][T15177] ptrace attach of "./syz-executor exec"[15183] was attempted by "./syz-executor exec"[15177] [ 586.289364][T15182] rnbd_client L213: map_device: Parameters missing [ 586.573926][T15203] FAULT_INJECTION: forcing a failure. [ 586.573926][T15203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.721203][T15203] CPU: 1 UID: 0 PID: 15203 Comm: syz.2.1837 Not tainted syzkaller #0 PREEMPT(full) [ 586.721234][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.721248][T15203] Call Trace: [ 586.721255][T15203] [ 586.721262][T15203] dump_stack_lvl+0x16c/0x1f0 [ 586.721299][T15203] should_fail_ex+0x512/0x640 [ 586.721333][T15203] should_fail_alloc_page+0xe7/0x130 [ 586.721365][T15203] prepare_alloc_pages+0x3c2/0x610 [ 586.721402][T15203] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 586.721430][T15203] ? copy_splice_read+0x1a8/0xc20 [ 586.721452][T15203] ? stack_trace_save+0x8e/0xc0 [ 586.721477][T15203] ? __pfx_stack_trace_save+0x10/0x10 [ 586.721502][T15203] ? is_bpf_text_address+0x8a/0x1a0 [ 586.721531][T15203] ? stack_depot_save_flags+0x29/0x9c0 [ 586.721563][T15203] ? lock_release+0x201/0x2f0 [ 586.721591][T15203] ? bpf_ksym_find+0x124/0x1c0 [ 586.721613][T15203] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 586.721641][T15203] ? kasan_save_stack+0x33/0x60 [ 586.721666][T15203] ? __kasan_kmalloc+0xaa/0xb0 [ 586.721691][T15203] ? copy_splice_read+0x1a8/0xc20 [ 586.721711][T15203] ? do_splice_read+0x282/0x370 [ 586.721731][T15203] ? splice_direct_to_actor+0x2a1/0xa30 [ 586.721753][T15203] ? do_splice_direct+0x174/0x240 [ 586.721774][T15203] ? do_sendfile+0xb06/0xe50 [ 586.721797][T15203] ? __x64_sys_sendfile64+0x1d8/0x220 [ 586.721828][T15203] ? do_syscall_64+0xcd/0x490 [ 586.721874][T15203] alloc_pages_bulk_noprof+0x71c/0x1410 [ 586.721907][T15203] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 586.721939][T15203] ? trace_kmalloc+0x2b/0xd0 [ 586.721970][T15203] ? __kmalloc_noprof+0x242/0x510 [ 586.722000][T15203] copy_splice_read+0x1e1/0xc20 [ 586.722025][T15203] ? __pfx_copy_splice_read+0x10/0x10 [ 586.722048][T15203] ? look_up_lock_class+0x59/0x150 [ 586.722078][T15203] ? lockdep_init_map_type+0x5c/0x280 [ 586.722110][T15203] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 586.722138][T15203] ? __pfx_copy_splice_read+0x10/0x10 [ 586.722159][T15203] do_splice_read+0x282/0x370 [ 586.722182][T15203] splice_direct_to_actor+0x2a1/0xa30 [ 586.722206][T15203] ? __pfx_direct_splice_actor+0x10/0x10 [ 586.722232][T15203] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 586.722259][T15203] do_splice_direct+0x174/0x240 [ 586.722282][T15203] ? __pfx_do_splice_direct+0x10/0x10 [ 586.722305][T15203] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 586.722328][T15203] ? bpf_lsm_file_permission+0x9/0x10 [ 586.722363][T15203] ? security_file_permission+0x71/0x210 [ 586.722394][T15203] ? rw_verify_area+0xcf/0x6c0 [ 586.722417][T15203] do_sendfile+0xb06/0xe50 [ 586.722443][T15203] ? __pfx_do_sendfile+0x10/0x10 [ 586.722467][T15203] ? __fget_files+0x20e/0x3c0 [ 586.722495][T15203] __x64_sys_sendfile64+0x1d8/0x220 [ 586.722526][T15203] ? ksys_write+0x1ac/0x250 [ 586.722552][T15203] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 586.722588][T15203] do_syscall_64+0xcd/0x490 [ 586.722618][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.722641][T15203] RIP: 0033:0x7fdc2618ebe9 [ 586.722657][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.722680][T15203] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.722701][T15203] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 586.722717][T15203] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 586.722731][T15203] RBP: 00007fdc270c0090 R08: 0000000000000000 R09: 0000000000000000 [ 586.722745][T15203] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 586.722759][T15203] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 586.722780][T15203] [ 588.193495][T15224] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 588.217142][T15224] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 588.240446][T15224] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 589.659267][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 590.021617][T15267] net_ratelimit: 227 callbacks suppressed [ 590.021635][T15267] openvswitch: netlink: Key type 69 is out of range max 32 [ 590.045590][T15271] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 590.110798][T15271] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 590.179929][T15264] ======================================================= [ 590.179929][T15264] WARNING: The mand mount option has been deprecated and [ 590.179929][T15264] and is ignored by this kernel. Remove the mand [ 590.179929][T15264] option from the mount to silence this warning. [ 590.179929][T15264] ======================================================= [ 590.221059][T15271] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 590.323762][T15274] rnbd_client L213: map_device: Parameters missing [ 590.773769][T15278] FAULT_INJECTION: forcing a failure. [ 590.773769][T15278] name failslab, interval 1, probability 0, space 0, times 0 [ 590.845310][T15278] CPU: 1 UID: 0 PID: 15278 Comm: syz.1.1851 Not tainted syzkaller #0 PREEMPT(full) [ 590.845341][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.845356][T15278] Call Trace: [ 590.845363][T15278] [ 590.845371][T15278] dump_stack_lvl+0x16c/0x1f0 [ 590.845405][T15278] should_fail_ex+0x512/0x640 [ 590.845449][T15278] should_failslab+0xc2/0x120 [ 590.845480][T15278] __kvmalloc_node_noprof+0x137/0x620 [ 590.845506][T15278] ? seq_read_iter+0x826/0x12c0 [ 590.845530][T15278] ? seq_read_iter+0x826/0x12c0 [ 590.845550][T15278] seq_read_iter+0x826/0x12c0 [ 590.845571][T15278] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 590.845604][T15278] kernfs_fop_read_iter+0x40f/0x5a0 [ 590.845629][T15278] copy_splice_read+0x618/0xc20 [ 590.845654][T15278] ? __pfx_copy_splice_read+0x10/0x10 [ 590.845680][T15278] ? look_up_lock_class+0x59/0x150 [ 590.845720][T15278] ? lockdep_init_map_type+0x5c/0x280 [ 590.845752][T15278] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 590.845780][T15278] ? __pfx_copy_splice_read+0x10/0x10 [ 590.845802][T15278] do_splice_read+0x282/0x370 [ 590.845824][T15278] splice_direct_to_actor+0x2a1/0xa30 [ 590.845848][T15278] ? __pfx_direct_splice_actor+0x10/0x10 [ 590.845874][T15278] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 590.845902][T15278] do_splice_direct+0x174/0x240 [ 590.845925][T15278] ? __pfx_do_splice_direct+0x10/0x10 [ 590.845948][T15278] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 590.845970][T15278] ? bpf_lsm_file_permission+0x9/0x10 [ 590.846011][T15278] ? security_file_permission+0x71/0x210 [ 590.846043][T15278] ? rw_verify_area+0xcf/0x6c0 [ 590.846066][T15278] do_sendfile+0xb06/0xe50 [ 590.846091][T15278] ? __pfx_do_sendfile+0x10/0x10 [ 590.846118][T15278] ? __fget_files+0x20e/0x3c0 [ 590.846145][T15278] __x64_sys_sendfile64+0x1d8/0x220 [ 590.846177][T15278] ? ksys_write+0x1ac/0x250 [ 590.846202][T15278] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 590.846237][T15278] do_syscall_64+0xcd/0x490 [ 590.846268][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.846292][T15278] RIP: 0033:0x7f5803d8ebe9 [ 590.846308][T15278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.846330][T15278] RSP: 002b:00007f5804c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 590.846352][T15278] RAX: ffffffffffffffda RBX: 00007f5803fb5fa0 RCX: 00007f5803d8ebe9 [ 590.846367][T15278] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 590.846380][T15278] RBP: 00007f5804c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 590.846394][T15278] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 590.846411][T15278] R13: 00007f5803fb6038 R14: 00007f5803fb5fa0 R15: 00007ffe9fa75278 [ 590.846460][T15278] [ 591.443426][T15285] FAULT_INJECTION: forcing a failure. [ 591.443426][T15285] name failslab, interval 1, probability 0, space 0, times 0 [ 591.464733][T15285] CPU: 1 UID: 0 PID: 15285 Comm: syz.3.1854 Not tainted syzkaller #0 PREEMPT(full) [ 591.464764][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.464779][T15285] Call Trace: [ 591.464786][T15285] [ 591.464794][T15285] dump_stack_lvl+0x16c/0x1f0 [ 591.464827][T15285] should_fail_ex+0x512/0x640 [ 591.464864][T15285] should_failslab+0xc2/0x120 [ 591.464896][T15285] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 591.464926][T15285] ? trace_kmem_cache_alloc+0x28/0xc0 [ 591.464962][T15285] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 591.464989][T15285] ? unwind_get_return_address+0x59/0xa0 [ 591.465014][T15285] ? mas_alloc_nodes+0x18b/0x8b0 [ 591.465041][T15285] ? mas_alloc_nodes+0x2f1/0x8b0 [ 591.465065][T15285] mas_alloc_nodes+0x2f1/0x8b0 [ 591.465092][T15285] mas_node_count_gfp+0x105/0x130 [ 591.465119][T15285] mas_preallocate+0x7e0/0xde0 [ 591.465156][T15285] ? __pfx_mas_preallocate+0x10/0x10 [ 591.465194][T15285] ? rcu_is_watching+0x12/0xc0 [ 591.465217][T15285] ? lock_release+0x201/0x2f0 [ 591.465250][T15285] vma_link+0x135/0x6a0 [ 591.465278][T15285] ? __pfx_vma_link+0x10/0x10 [ 591.465306][T15285] ? rcu_is_watching+0x12/0xc0 [ 591.465332][T15285] ? anon_vma_clone+0x405/0x5c0 [ 591.465356][T15285] ? anon_vma_name+0x81/0x2f0 [ 591.465393][T15285] copy_vma+0x6c2/0xaa0 [ 591.465422][T15285] ? __pfx_copy_vma+0x10/0x10 [ 591.465455][T15285] ? update_load_avg+0x23f/0x1fc0 [ 591.465489][T15285] ? kvm_sched_clock_read+0x11/0x20 [ 591.465515][T15285] ? sched_clock+0x38/0x60 [ 591.465553][T15285] ? rcu_is_watching+0x12/0xc0 [ 591.465575][T15285] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 591.465615][T15285] copy_vma_and_data+0x1cf/0x790 [ 591.465643][T15285] ? __pfx_copy_vma_and_data+0x10/0x10 [ 591.465669][T15285] ? rcu_is_watching+0x12/0xc0 [ 591.465694][T15285] ? __vma_enter_locked+0x163/0x3f0 [ 591.465718][T15285] ? __pfx___vma_enter_locked+0x10/0x10 [ 591.465740][T15285] ? move_vma+0x536/0x1780 [ 591.465764][T15285] ? rcu_is_watching+0x12/0xc0 [ 591.465786][T15285] ? lock_release+0x201/0x2f0 [ 591.465819][T15285] move_vma+0x548/0x1780 [ 591.465846][T15285] ? __pfx_move_vma+0x10/0x10 [ 591.465871][T15285] ? mm_get_unmapped_area+0x95/0xe0 [ 591.465905][T15285] ? shmem_get_unmapped_area+0x170/0xa00 [ 591.465928][T15285] ? cap_mmap_addr+0x4b/0x120 [ 591.465951][T15285] ? bpf_lsm_mmap_addr+0x9/0x10 [ 591.465985][T15285] ? security_mmap_addr+0x6c/0x1e0 [ 591.466016][T15285] ? __get_unmapped_area+0x267/0x440 [ 591.466052][T15285] ? vrm_set_new_addr+0x208/0x290 [ 591.466079][T15285] mremap_to+0x1b7/0x450 [ 591.466104][T15285] do_mremap+0x1004/0x1f80 [ 591.466136][T15285] ? __pfx_do_mremap+0x10/0x10 [ 591.466165][T15285] ? up_write+0x1b2/0x520 [ 591.466202][T15285] __do_sys_mremap+0x119/0x170 [ 591.466227][T15285] ? __pfx___do_sys_mremap+0x10/0x10 [ 591.466258][T15285] ? __x64_sys_futex+0x1e0/0x4c0 [ 591.466297][T15285] do_syscall_64+0xcd/0x490 [ 591.466328][T15285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.466352][T15285] RIP: 0033:0x7f364138ebe9 [ 591.466369][T15285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.466392][T15285] RSP: 002b:00007f364221d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 591.466415][T15285] RAX: ffffffffffffffda RBX: 00007f36415b5fa0 RCX: 00007f364138ebe9 [ 591.466431][T15285] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 591.466451][T15285] RBP: 00007f3641411e19 R08: 00007effffffb000 R09: 0000000000000000 [ 591.466466][T15285] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 591.466480][T15285] R13: 00007f36415b6038 R14: 00007f36415b5fa0 R15: 00007fff037985e8 [ 591.466503][T15285] [ 591.835633][T15295] syz.1.1853 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 592.124864][T15305] HfR: entered promiscuous mode [ 592.206548][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 592.215691][T15306] HfR: left promiscuous mode [ 592.538671][T15314] netlink: 'syz.1.1860': attribute type 11 has an invalid length. [ 592.559455][T15314] netlink: 'syz.1.1860': attribute type 11 has an invalid length. [ 592.595853][T15314] netlink: 'syz.1.1860': attribute type 11 has an invalid length. [ 592.773273][T15316] FAULT_INJECTION: forcing a failure. [ 592.773273][T15316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.820389][T15318] rnbd_client L213: map_device: Parameters missing [ 592.873977][T15316] CPU: 1 UID: 0 PID: 15316 Comm: syz.0.1861 Not tainted syzkaller #0 PREEMPT(full) [ 592.874009][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.874023][T15316] Call Trace: [ 592.874030][T15316] [ 592.874039][T15316] dump_stack_lvl+0x16c/0x1f0 [ 592.874072][T15316] should_fail_ex+0x512/0x640 [ 592.874105][T15316] _copy_to_user+0x32/0xd0 [ 592.874126][T15316] simple_read_from_buffer+0xcb/0x170 [ 592.874149][T15316] proc_fail_nth_read+0x197/0x240 [ 592.874172][T15316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.874201][T15316] ? security_file_permission+0x71/0x210 [ 592.874234][T15316] ? rw_verify_area+0xcf/0x6c0 [ 592.874256][T15316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.874279][T15316] vfs_read+0x1e4/0xcf0 [ 592.874311][T15316] ? __pfx___mutex_lock+0x10/0x10 [ 592.874342][T15316] ? __pfx_vfs_read+0x10/0x10 [ 592.874367][T15316] ? __fget_files+0x204/0x3c0 [ 592.874390][T15316] ? rcu_is_watching+0x12/0xc0 [ 592.874416][T15316] ? __fget_files+0x20e/0x3c0 [ 592.874443][T15316] ksys_read+0x12a/0x250 [ 592.874468][T15316] ? __pfx_ksys_read+0x10/0x10 [ 592.874498][T15316] do_syscall_64+0xcd/0x490 [ 592.874530][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.874553][T15316] RIP: 0033:0x7f58dcb8d5fc [ 592.874569][T15316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.874593][T15316] RSP: 002b:00007f58dd975030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.874614][T15316] RAX: ffffffffffffffda RBX: 00007f58dcdb5fa0 RCX: 00007f58dcb8d5fc [ 592.874630][T15316] RDX: 000000000000000f RSI: 00007f58dd9750a0 RDI: 0000000000000004 [ 592.874644][T15316] RBP: 00007f58dd975090 R08: 0000000000000000 R09: 0000000000000000 [ 592.874657][T15316] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 592.874671][T15316] R13: 00007f58dcdb6038 R14: 00007f58dcdb5fa0 R15: 00007ffeff6b19b8 [ 592.874692][T15316] [ 594.743675][T15370] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 594.805708][T15370] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 594.845832][T15370] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 596.277867][T15328] syz.2.1865: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 596.362699][T15328] CPU: 1 UID: 0 PID: 15328 Comm: syz.2.1865 Not tainted syzkaller #0 PREEMPT(full) [ 596.362731][T15328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.362745][T15328] Call Trace: [ 596.362752][T15328] [ 596.362760][T15328] dump_stack_lvl+0x16c/0x1f0 [ 596.362794][T15328] warn_alloc+0x248/0x3a0 [ 596.362821][T15328] ? __pfx_warn_alloc+0x10/0x10 [ 596.362853][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.362876][T15328] ? __vmalloc_node_noprof+0xad/0xf0 [ 596.362898][T15328] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 596.362925][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.362952][T15328] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.362985][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363008][T15328] __vmalloc_node_noprof+0xad/0xf0 [ 596.363028][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363053][T15328] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 596.363076][T15328] ? kvm_sched_clock_read+0x11/0x20 [ 596.363103][T15328] ? sched_clock+0x38/0x60 [ 596.363138][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363163][T15328] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 596.363201][T15328] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.363224][T15328] ? finish_task_switch.isra.0+0x221/0xc10 [ 596.363250][T15328] ? ___kmalloc_large_node+0xed/0x160 [ 596.363289][T15328] __kvmalloc_node_noprof+0x30a/0x620 [ 596.363316][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363339][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363365][T15328] ? lru_gen_seq_write+0x128/0x18f0 [ 596.363387][T15328] lru_gen_seq_write+0x128/0x18f0 [ 596.363410][T15328] ? futex_private_hash_put+0x112/0x300 [ 596.363437][T15328] ? rcu_is_watching+0x12/0xc0 [ 596.363461][T15328] ? lock_release+0x201/0x2f0 [ 596.363494][T15328] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 596.363517][T15328] ? rcu_is_watching+0x12/0xc0 [ 596.363540][T15328] ? aa_file_perm+0x28f/0x12e0 [ 596.363574][T15328] ? rcu_is_watching+0x12/0xc0 [ 596.363597][T15328] ? lock_release+0x201/0x2f0 [ 596.363628][T15328] ? aa_file_perm+0x29e/0x12e0 [ 596.363666][T15328] ? __pfx_aa_file_perm+0x10/0x10 [ 596.363707][T15328] ? __debugfs_file_get+0x1fe/0x840 [ 596.363748][T15328] ? __pfx___debugfs_file_get+0x10/0x10 [ 596.363785][T15328] ? rcu_is_watching+0x12/0xc0 [ 596.363810][T15328] ? full_proxy_write+0x12e/0x1a0 [ 596.363844][T15328] full_proxy_write+0x12e/0x1a0 [ 596.363880][T15328] ? __pfx_full_proxy_write+0x10/0x10 [ 596.363916][T15328] vfs_write+0x29d/0x11d0 [ 596.363944][T15328] ? __pfx___mutex_lock+0x10/0x10 [ 596.363975][T15328] ? __pfx_vfs_write+0x10/0x10 [ 596.364005][T15328] ? __fget_files+0x204/0x3c0 [ 596.364030][T15328] ? rcu_is_watching+0x12/0xc0 [ 596.364056][T15328] ? __fget_files+0x20e/0x3c0 [ 596.364084][T15328] ksys_write+0x12a/0x250 [ 596.364110][T15328] ? __pfx_ksys_write+0x10/0x10 [ 596.364141][T15328] do_syscall_64+0xcd/0x490 [ 596.364172][T15328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.364196][T15328] RIP: 0033:0x7fdc2618ebe9 [ 596.364213][T15328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.364236][T15328] RSP: 002b:00007fdc2709f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.364257][T15328] RAX: ffffffffffffffda RBX: 00007fdc263b6090 RCX: 00007fdc2618ebe9 [ 596.364273][T15328] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 596.364287][T15328] RBP: 00007fdc26211e19 R08: 0000000000000000 R09: 0000000000000000 [ 596.364301][T15328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.364316][T15328] R13: 00007fdc263b6128 R14: 00007fdc263b6090 R15: 00007fffe69184d8 [ 596.364338][T15328] [ 596.724507][T15328] Mem-Info: [ 596.728262][T15328] active_anon:11291 inactive_anon:6143 isolated_anon:0 [ 596.728262][T15328] active_file:22016 inactive_file:37774 isolated_file:0 [ 596.728262][T15328] unevictable:768 dirty:730 writeback:0 [ 596.728262][T15328] slab_reclaimable:13215 slab_unreclaimable:100806 [ 596.728262][T15328] mapped:28037 shmem:2172 pagetables:1593 [ 596.728262][T15328] sec_pagetables:0 bounce:0 [ 596.728262][T15328] kernel_misc_reclaimable:0 [ 596.728262][T15328] free:1221130 free_pcp:24499 free_cma:0 [ 596.774493][T15328] Node 0 active_anon:45164kB inactive_anon:24572kB active_file:88040kB inactive_file:150916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112148kB dirty:2916kB writeback:0kB shmem:7152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:6232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 596.807604][T15328] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 596.838138][T15328] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.867249][T15328] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 596.873299][T15328] Node 0 DMA32 free:958844kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45116kB inactive_anon:24572kB active_file:86804kB inactive_file:150840kB unevictable:1536kB writepending:2916kB present:3129332kB managed:2539600kB mlocked:0kB bounce:0kB free_pcp:97524kB local_pcp:97524kB free_cma:0kB [ 596.906598][T15328] lowmem_reserve[]: 0 0 1 1 1 [ 596.911793][T15328] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1236kB inactive_file:76kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 596.941228][T15328] lowmem_reserve[]: 0 0 0 0 0 [ 596.946037][T15328] Node 1 Normal free:3910304kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:180kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:456kB free_cma:0kB [ 596.977524][T15328] lowmem_reserve[]: 0 0 0 0 0 [ 596.982311][T15328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 596.995675][T15328] Node 0 DMA32: 2205*4kB (UME) 913*8kB (M) 734*16kB (M) 538*32kB (ME) 345*64kB (ME) 186*128kB (UM) 60*256kB (ME) 15*512kB (UME) 13*1024kB (UME) 2*2048kB (ME) 202*4096kB (M) = 958812kB [ 597.014754][T15328] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 597.027161][T15328] Node 1 Normal: 183*4kB (U) 54*8kB (UE) 34*16kB (UME) 215*32kB (UME) 101*64kB (UME) 28*128kB (UM) 10*256kB (UM) 6*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 946*4096kB (M) = 3910348kB [ 597.045479][T15328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.055084][T15328] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 597.064819][T15328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.074520][T15328] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 597.083928][T15328] 61964 total pagecache pages [ 597.097384][T15328] 6 pages in swap cache [ 597.107398][T15328] Free swap = 120720kB [ 597.119438][T15328] Total swap = 124996kB [ 597.134077][T15328] 2097051 pages RAM [ 597.151439][T15328] 0 pages HighMem/MovableOnly [ 597.166311][T15328] 430189 pages reserved [ 597.177690][T15328] 0 pages cma reserved [ 597.218178][T15390] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[15390] [ 598.740258][T15435] netlink: 'syz.0.1883': attribute type 11 has an invalid length. [ 598.789970][T15435] netlink: 'syz.0.1883': attribute type 11 has an invalid length. [ 598.847479][T15435] netlink: 'syz.0.1883': attribute type 11 has an invalid length. [ 600.661741][T15486] netlink: 'syz.3.1894': attribute type 11 has an invalid length. [ 600.694444][T15486] netlink: 'syz.3.1894': attribute type 11 has an invalid length. [ 600.723505][T15486] netlink: 'syz.3.1894': attribute type 11 has an invalid length. [ 601.721150][T15559] bridge0: port 3(veth0_to_bridge) entered blocking state [ 601.739848][T15561] Line length is too long: Should be less than 4094 [ 601.764053][T15559] bridge0: port 3(veth0_to_bridge) entered disabled state [ 601.790270][T15559] veth0_to_bridge: entered allmulticast mode [ 601.833835][T15559] veth0_to_bridge: entered promiscuous mode [ 601.913333][T15559] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.998102][T15559] bridge0: port 3(veth0_to_bridge) entered blocking state [ 602.005363][T15559] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 602.405036][T15584] netlink: 'syz.0.1905': attribute type 11 has an invalid length. [ 602.442468][T15584] netlink: 'syz.0.1905': attribute type 11 has an invalid length. [ 602.472227][T15584] netlink: 'syz.0.1905': attribute type 11 has an invalid length. [ 603.627028][T15614] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 603.915723][T15618] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1912'. [ 604.180386][T15630] netlink: 'syz.0.1916': attribute type 11 has an invalid length. [ 604.237568][T15630] netlink: 'syz.0.1916': attribute type 11 has an invalid length. [ 604.268520][T15630] netlink: 'syz.0.1916': attribute type 11 has an invalid length. [ 605.610170][T15658] FAULT_INJECTION: forcing a failure. [ 605.610170][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 605.654940][T15658] CPU: 1 UID: 0 PID: 15658 Comm: syz.2.1923 Not tainted syzkaller #0 PREEMPT(full) [ 605.654973][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.654987][T15658] Call Trace: [ 605.654995][T15658] [ 605.655003][T15658] dump_stack_lvl+0x16c/0x1f0 [ 605.655035][T15658] should_fail_ex+0x512/0x640 [ 605.655070][T15658] should_failslab+0xc2/0x120 [ 605.655106][T15658] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 605.655134][T15658] ? ptlock_alloc+0x1f/0x70 [ 605.655158][T15658] ptlock_alloc+0x1f/0x70 [ 605.655179][T15658] pte_alloc_one+0x82/0x3a0 [ 605.655204][T15658] __pte_alloc+0x6d/0x3c0 [ 605.655235][T15658] ? __pfx___pte_alloc+0x10/0x10 [ 605.655265][T15658] ? rcu_is_watching+0x12/0xc0 [ 605.655289][T15658] ? do_raw_spin_lock+0x12c/0x2b0 [ 605.655326][T15658] do_pte_missing+0x285a/0x3ba0 [ 605.655349][T15658] ? do_raw_spin_unlock+0x172/0x230 [ 605.655385][T15658] ? _raw_spin_unlock+0x28/0x50 [ 605.655408][T15658] ? __pmd_alloc+0x3fb/0x930 [ 605.655443][T15658] __handle_mm_fault+0x152a/0x2a50 [ 605.655470][T15658] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.655492][T15658] ? mt_validate+0x1d6/0x4210 [ 605.655530][T15658] ? find_vma+0xbf/0x140 [ 605.655559][T15658] ? __pfx_find_vma+0x10/0x10 [ 605.655591][T15658] handle_mm_fault+0x589/0xd10 [ 605.655616][T15658] __get_user_pages+0x551/0x34a0 [ 605.655657][T15658] ? __pfx___get_user_pages+0x10/0x10 [ 605.655692][T15658] ? __pfx___might_resched+0x10/0x10 [ 605.655714][T15658] ? cap_capable+0xb3/0x250 [ 605.655738][T15658] populate_vma_page_range+0x267/0x3f0 [ 605.655777][T15658] ? __pfx_populate_vma_page_range+0x10/0x10 [ 605.655814][T15658] ? __pfx_find_vma_intersection+0x10/0x10 [ 605.655847][T15658] ? do_mmap+0x69c/0x1210 [ 605.655882][T15658] __mm_populate+0x1d8/0x380 [ 605.655918][T15658] ? __pfx___mm_populate+0x10/0x10 [ 605.655959][T15658] ? up_write+0x1b2/0x520 [ 605.655994][T15658] vm_mmap_pgoff+0x37f/0x470 [ 605.656027][T15658] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 605.656063][T15658] ? __x64_sys_futex+0x1e0/0x4c0 [ 605.656092][T15658] ? __x64_sys_futex+0x1e9/0x4c0 [ 605.656126][T15658] ksys_mmap_pgoff+0x7d/0x5c0 [ 605.656158][T15658] ? xfd_validate_state+0x61/0x180 [ 605.656190][T15658] ? __pfx_ksys_write+0x10/0x10 [ 605.656218][T15658] __x64_sys_mmap+0x125/0x190 [ 605.656255][T15658] do_syscall_64+0xcd/0x490 [ 605.656286][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.656308][T15658] RIP: 0033:0x7fdc2618ebe9 [ 605.656326][T15658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.656349][T15658] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 605.656371][T15658] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 605.656387][T15658] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 605.656400][T15658] RBP: 00007fdc26211e19 R08: 0000000000000002 R09: 0000000000008000 [ 605.656415][T15658] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 605.656429][T15658] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 605.656451][T15658] [ 606.090843][T15653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.096935][T15653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.103961][T15653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.110011][T15653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.115967][T15653] CPU0 is offline. [ 606.569898][T15684] netlink: 'syz.2.1930': attribute type 11 has an invalid length. [ 606.602946][T15684] netlink: 'syz.2.1930': attribute type 11 has an invalid length. [ 607.277458][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 607.360359][T15707] zram: Added device: zram1 [ 607.667162][T15718] svc: failed to register nfsdv3 RPC service (errno 111). [ 607.695486][T15718] svc: failed to register nfsaclv3 RPC service (errno 111). [ 608.243180][T15730] lo: entered allmulticast mode [ 608.317455][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout [ 608.323873][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 608.330045][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 608.360564][T15730] lo: left allmulticast mode [ 608.381824][T15739] netlink: 'syz.1.1942': attribute type 11 has an invalid length. [ 608.421918][T15739] netlink: 'syz.1.1942': attribute type 11 has an invalid length. [ 609.113851][T15690] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 609.336722][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1946'. [ 609.451218][T15755] hub 8-0:1.0: USB hub found [ 609.478640][T15755] hub 8-0:1.0: 1 port detected [ 609.653479][T15769] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 609.685950][T15771] netlink: 'syz.0.1952': attribute type 11 has an invalid length. [ 609.729762][T15771] netlink: 'syz.0.1952': attribute type 11 has an invalid length. [ 611.040906][T15803] random: crng reseeded on system resumption [ 611.490076][T15812] FAULT_INJECTION: forcing a failure. [ 611.490076][T15812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.565391][T15812] CPU: 1 UID: 0 PID: 15812 Comm: syz.2.1962 Not tainted syzkaller #0 PREEMPT(full) [ 611.565424][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.565438][T15812] Call Trace: [ 611.565446][T15812] [ 611.565454][T15812] dump_stack_lvl+0x16c/0x1f0 [ 611.565487][T15812] should_fail_ex+0x512/0x640 [ 611.565524][T15812] _copy_from_user+0x2e/0xd0 [ 611.565565][T15812] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 611.565596][T15812] snd_rawmidi_write+0x26e/0xc10 [ 611.565623][T15812] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 611.565648][T15812] ? __pfx_default_wake_function+0x10/0x10 [ 611.565673][T15812] ? bpf_lsm_file_permission+0x9/0x10 [ 611.565708][T15812] ? security_file_permission+0x71/0x210 [ 611.565741][T15812] ? rw_verify_area+0xcf/0x6c0 [ 611.565764][T15812] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 611.565787][T15812] vfs_write+0x29d/0x11d0 [ 611.565826][T15812] ? __pfx_vfs_write+0x10/0x10 [ 611.565852][T15812] ? __fget_files+0x204/0x3c0 [ 611.565881][T15812] ? rcu_is_watching+0x12/0xc0 [ 611.565904][T15812] ? lock_release+0x201/0x2f0 [ 611.565936][T15812] ? __fget_files+0x20e/0x3c0 [ 611.565964][T15812] ksys_write+0x1f8/0x250 [ 611.565990][T15812] ? __pfx_ksys_write+0x10/0x10 [ 611.566021][T15812] do_syscall_64+0xcd/0x490 [ 611.566053][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.566076][T15812] RIP: 0033:0x7fdc2618ebe9 [ 611.566094][T15812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.566117][T15812] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.566139][T15812] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 611.566155][T15812] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000004 [ 611.566170][T15812] RBP: 00007fdc26211e19 R08: 0000000000000000 R09: 0000000000000000 [ 611.566184][T15812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.566198][T15812] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 611.566220][T15812] [ 611.777159][T15814] netlink: 'syz.0.1963': attribute type 11 has an invalid length. [ 611.952964][T15817] openvswitch: netlink: Message has 63 unknown bytes. [ 612.399555][T15838] rnbd_client L213: map_device: Parameters missing [ 612.424000][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 612.589783][T15848] FAULT_INJECTION: forcing a failure. [ 612.589783][T15848] name failslab, interval 1, probability 0, space 0, times 0 [ 612.682532][T15848] CPU: 1 UID: 0 PID: 15848 Comm: syz.2.1971 Not tainted syzkaller #0 PREEMPT(full) [ 612.682571][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.682585][T15848] Call Trace: [ 612.682591][T15848] [ 612.682599][T15848] dump_stack_lvl+0x16c/0x1f0 [ 612.682631][T15848] should_fail_ex+0x512/0x640 [ 612.682665][T15848] ? kernfs_fop_write_iter+0x237/0x510 [ 612.682686][T15848] should_failslab+0xc2/0x120 [ 612.682717][T15848] __kmalloc_noprof+0xd2/0x510 [ 612.682742][T15848] ? rcu_is_watching+0x12/0xc0 [ 612.682767][T15848] kernfs_fop_write_iter+0x237/0x510 [ 612.682790][T15848] vfs_write+0x7d0/0x11d0 [ 612.682815][T15848] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 612.682838][T15848] ? __pfx_vfs_write+0x10/0x10 [ 612.682864][T15848] ? lock_release+0x201/0x2f0 [ 612.682899][T15848] __x64_sys_pwrite64+0x1eb/0x250 [ 612.682927][T15848] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 612.682959][T15848] do_syscall_64+0xcd/0x490 [ 612.682989][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.683011][T15848] RIP: 0033:0x7fdc2618ebe9 [ 612.683027][T15848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.683050][T15848] RSP: 002b:00007fdc270c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 612.683072][T15848] RAX: ffffffffffffffda RBX: 00007fdc263b5fa0 RCX: 00007fdc2618ebe9 [ 612.683087][T15848] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 612.683101][T15848] RBP: 00007fdc270c0090 R08: 0000000000000000 R09: 0000000000000000 [ 612.683115][T15848] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 612.683129][T15848] R13: 00007fdc263b6038 R14: 00007fdc263b5fa0 R15: 00007fffe69184d8 [ 612.683151][T15848] [ 613.169795][T15854] rnbd_client L213: map_device: Parameters missing [ 613.489570][T15857] netlink: 'syz.2.1974': attribute type 11 has an invalid length. [ 614.107236][T15878] rnbd_client L213: map_device: Parameters missing [ 614.316658][T15883] FAULT_INJECTION: forcing a failure. [ 614.316658][T15883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.402091][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.1.1982 Not tainted syzkaller #0 PREEMPT(full) [ 614.402124][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.402139][T15883] Call Trace: [ 614.402146][T15883] [ 614.402154][T15883] dump_stack_lvl+0x16c/0x1f0 [ 614.402188][T15883] should_fail_ex+0x512/0x640 [ 614.402223][T15883] _copy_from_iter+0x29f/0x16f0 [ 614.402263][T15883] ? __pfx__copy_from_iter+0x10/0x10 [ 614.402301][T15883] ? rcu_is_watching+0x12/0xc0 [ 614.402327][T15883] ? trace_kmalloc+0x2b/0xd0 [ 614.402360][T15883] ? __kmalloc_noprof+0x242/0x510 [ 614.402387][T15883] ? rcu_watching_snap_stopped_since+0x101/0x110 [ 614.402414][T15883] kernfs_fop_write_iter+0x19a/0x510 [ 614.402439][T15883] vfs_write+0x7d0/0x11d0 [ 614.402465][T15883] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 614.402489][T15883] ? __pfx_vfs_write+0x10/0x10 [ 614.402516][T15883] ? lock_release+0x201/0x2f0 [ 614.402552][T15883] __x64_sys_pwrite64+0x1eb/0x250 [ 614.402588][T15883] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 614.402622][T15883] do_syscall_64+0xcd/0x490 [ 614.402653][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.402677][T15883] RIP: 0033:0x7f5803d8ebe9 [ 614.402693][T15883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.402716][T15883] RSP: 002b:00007f5804c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 614.402737][T15883] RAX: ffffffffffffffda RBX: 00007f5803fb5fa0 RCX: 00007f5803d8ebe9 [ 614.402753][T15883] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 614.402767][T15883] RBP: 00007f5804c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 614.402781][T15883] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 614.402795][T15883] R13: 00007f5803fb6038 R14: 00007f5803fb5fa0 R15: 00007ffe9fa75278 [ 614.402816][T15883] [ 614.697022][T15890] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 614.768738][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 614.779080][T15888] bridge_slave_1: left allmulticast mode [ 614.784737][T15888] bridge_slave_1: left promiscuous mode [ 614.790631][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.893135][T15888] bridge_slave_0: left allmulticast mode [ 614.904484][T15888] bridge_slave_0: left promiscuous mode [ 614.911348][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.965733][T15898] netlink: 'syz.1.1987': attribute type 11 has an invalid length. [ 615.386454][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 615.399148][T15912] rnbd_client L213: map_device: Parameters missing [ 615.722571][T15924] FAULT_INJECTION: forcing a failure. [ 615.722571][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 615.868725][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.0.1993 Not tainted syzkaller #0 PREEMPT(full) [ 615.868755][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.868768][T15924] Call Trace: [ 615.868776][T15924] [ 615.868784][T15924] dump_stack_lvl+0x16c/0x1f0 [ 615.868816][T15924] should_fail_ex+0x512/0x640 [ 615.868850][T15924] should_failslab+0xc2/0x120 [ 615.868881][T15924] __kmalloc_cache_noprof+0x6a/0x3e0 [ 615.868904][T15924] ? __pfx___might_resched+0x10/0x10 [ 615.868928][T15924] ? rnbd_clt_map_device_store+0x171/0x12e0 [ 615.868965][T15924] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 615.869001][T15924] rnbd_clt_map_device_store+0x171/0x12e0 [ 615.869036][T15924] ? down_write+0x14d/0x200 [ 615.869069][T15924] ? up_write+0x1b2/0x520 [ 615.869101][T15924] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 615.869137][T15924] ? process_measurement+0x1e6/0x23e0 [ 615.869164][T15924] ? rcu_is_watching+0x12/0xc0 [ 615.869188][T15924] ? unwind_next_frame+0x3f4/0x20a0 [ 615.869214][T15924] ? is_bpf_text_address+0x8a/0x1a0 [ 615.869243][T15924] ? rcu_is_watching+0x12/0xc0 [ 615.869285][T15924] ? kernfs_fop_write_iter+0x237/0x510 [ 615.869320][T15924] ? __mutex_trylock_common+0xe9/0x250 [ 615.869352][T15924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 615.869384][T15924] ? __pfx___might_resched+0x10/0x10 [ 615.869407][T15924] ? rcu_is_watching+0x12/0xc0 [ 615.869429][T15924] ? trace_contention_end+0xdd/0x130 [ 615.869461][T15924] ? __mutex_lock+0x1c5/0x1060 [ 615.869491][T15924] ? _copy_from_iter+0x15d/0x16f0 [ 615.869528][T15924] ? rcu_is_watching+0x12/0xc0 [ 615.869550][T15924] ? rcu_is_watching+0x12/0xc0 [ 615.869574][T15924] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 615.869610][T15924] ? dev_attr_store+0x58/0x80 [ 615.869643][T15924] dev_attr_store+0x58/0x80 [ 615.869676][T15924] ? __pfx_dev_attr_store+0x10/0x10 [ 615.869710][T15924] sysfs_kf_write+0xf2/0x150 [ 615.869740][T15924] kernfs_fop_write_iter+0x354/0x510 [ 615.869761][T15924] ? __pfx_sysfs_kf_write+0x10/0x10 [ 615.869787][T15924] vfs_write+0x7d0/0x11d0 [ 615.869813][T15924] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 615.869836][T15924] ? __pfx_vfs_write+0x10/0x10 [ 615.869863][T15924] ? lock_release+0x201/0x2f0 [ 615.869898][T15924] __x64_sys_pwrite64+0x1eb/0x250 [ 615.869927][T15924] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 615.869960][T15924] do_syscall_64+0xcd/0x490 [ 615.869991][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.870015][T15924] RIP: 0033:0x7f58dcb8ebe9 [ 615.870031][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.870054][T15924] RSP: 002b:00007f58dd975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 615.870076][T15924] RAX: ffffffffffffffda RBX: 00007f58dcdb5fa0 RCX: 00007f58dcb8ebe9 [ 615.870091][T15924] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 615.870105][T15924] RBP: 00007f58dd975090 R08: 0000000000000000 R09: 0000000000000000 [ 615.870120][T15924] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 615.870134][T15924] R13: 00007f58dcdb6038 R14: 00007f58dcdb5fa0 R15: 00007ffeff6b19b8 [ 615.870156][T15924] [ 617.360110][T15942] netlink: 'syz.3.1997': attribute type 11 has an invalid length. [ 617.405323][T15942] netlink: 'syz.3.1997': attribute type 11 has an invalid length. [ 617.446054][T15942] netlink: 'syz.3.1997': attribute type 11 has an invalid length. [ 618.002783][T15960] rnbd_client L213: map_device: Parameters missing [ 618.188745][T15962] FAULT_INJECTION: forcing a failure. [ 618.188745][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 618.222000][T15964] FAULT_INJECTION: forcing a failure. [ 618.222000][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 618.258183][T15962] CPU: 1 UID: 0 PID: 15962 Comm: syz.3.2003 Not tainted syzkaller #0 PREEMPT(full) [ 618.258215][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.258229][T15962] Call Trace: [ 618.258237][T15962] [ 618.258245][T15962] dump_stack_lvl+0x16c/0x1f0 [ 618.258279][T15962] should_fail_ex+0x512/0x640 [ 618.258315][T15962] should_failslab+0xc2/0x120 [ 618.258347][T15962] __kvmalloc_node_noprof+0x137/0x620 [ 618.258374][T15962] ? bucket_table_alloc.isra.0+0x83/0x460 [ 618.258411][T15962] ? bucket_table_alloc.isra.0+0x83/0x460 [ 618.258444][T15962] bucket_table_alloc.isra.0+0x83/0x460 [ 618.258479][T15962] rhashtable_init_noprof+0x41a/0x7e0 [ 618.258514][T15962] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 618.258545][T15962] rhltable_init_noprof+0x20/0x60 [ 618.258578][T15962] mr_table_alloc+0x116/0x2e0 [ 618.258612][T15962] ? __pfx_ipmr_expire_process+0x10/0x10 [ 618.258642][T15962] ? __pfx_ip6mr_net_init+0x10/0x10 [ 618.258673][T15962] ip6mr_net_init+0x3c4/0x4e0 [ 618.258705][T15962] ? __pfx_ip6mr_net_init+0x10/0x10 [ 618.258736][T15962] ops_init+0x1df/0x5f0 [ 618.258768][T15962] setup_net+0x10f/0x380 [ 618.258798][T15962] ? lockdep_init_map_type+0x5c/0x280 [ 618.258831][T15962] ? __pfx_setup_net+0x10/0x10 [ 618.258863][T15962] ? debug_mutex_init+0x37/0x70 [ 618.258887][T15962] copy_net_ns+0x2a6/0x5f0 [ 618.258923][T15962] create_new_namespaces+0x3ea/0xa90 [ 618.258952][T15962] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 618.258981][T15962] ksys_unshare+0x45b/0xa40 [ 618.259013][T15962] ? __pfx_ksys_unshare+0x10/0x10 [ 618.259045][T15962] ? xfd_validate_state+0x61/0x180 [ 618.259093][T15962] __x64_sys_unshare+0x31/0x40 [ 618.259124][T15962] do_syscall_64+0xcd/0x490 [ 618.259157][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.259183][T15962] RIP: 0033:0x7f364138ebe9 [ 618.259200][T15962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.259224][T15962] RSP: 002b:00007f364221d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 618.259246][T15962] RAX: ffffffffffffffda RBX: 00007f36415b5fa0 RCX: 00007f364138ebe9 [ 618.259261][T15962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 618.259275][T15962] RBP: 00007f3641411e19 R08: 0000000000000000 R09: 0000000000000000 [ 618.259290][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.259304][T15962] R13: 00007f36415b6038 R14: 00007f36415b5fa0 R15: 00007fff037985e8 [ 618.259326][T15962] [ 618.555522][T15964] CPU: 1 UID: 0 PID: 15964 Comm: syz.1.2004 Not tainted syzkaller #0 PREEMPT(full) [ 618.555555][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.555568][T15964] Call Trace: [ 618.555575][T15964] [ 618.555583][T15964] dump_stack_lvl+0x16c/0x1f0 [ 618.555616][T15964] should_fail_ex+0x512/0x640 [ 618.555651][T15964] should_failslab+0xc2/0x120 [ 618.555680][T15964] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 618.555711][T15964] ? rnbd_clt_map_device_store+0x24c/0x12e0 [ 618.555748][T15964] kstrdup+0x53/0x100 [ 618.555775][T15964] rnbd_clt_map_device_store+0x24c/0x12e0 [ 618.555810][T15964] ? down_write+0x14d/0x200 [ 618.555842][T15964] ? up_write+0x1b2/0x520 [ 618.555874][T15964] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 618.555909][T15964] ? process_measurement+0x1e6/0x23e0 [ 618.555936][T15964] ? unwind_next_frame+0x3f4/0x20a0 [ 618.555962][T15964] ? is_bpf_text_address+0x8a/0x1a0 [ 618.555990][T15964] ? rcu_is_watching+0x12/0xc0 [ 618.556024][T15964] ? kernfs_fop_write_iter+0x237/0x510 [ 618.556066][T15964] ? __mutex_trylock_common+0xe9/0x250 [ 618.556097][T15964] ? __pfx___mutex_trylock_common+0x10/0x10 [ 618.556129][T15964] ? __pfx___might_resched+0x10/0x10 [ 618.556153][T15964] ? rcu_is_watching+0x12/0xc0 [ 618.556175][T15964] ? trace_contention_end+0xdd/0x130 [ 618.556206][T15964] ? __mutex_lock+0x1c5/0x1060 [ 618.556236][T15964] ? _copy_from_iter+0x15d/0x16f0 [ 618.556273][T15964] ? rcu_is_watching+0x12/0xc0 [ 618.556295][T15964] ? rcu_is_watching+0x12/0xc0 [ 618.556320][T15964] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 618.556356][T15964] ? dev_attr_store+0x58/0x80 [ 618.556388][T15964] dev_attr_store+0x58/0x80 [ 618.556421][T15964] ? __pfx_dev_attr_store+0x10/0x10 [ 618.556455][T15964] sysfs_kf_write+0xf2/0x150 [ 618.556480][T15964] kernfs_fop_write_iter+0x354/0x510 [ 618.556501][T15964] ? __pfx_sysfs_kf_write+0x10/0x10 [ 618.556527][T15964] vfs_write+0x7d0/0x11d0 [ 618.556553][T15964] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 618.556577][T15964] ? __pfx_vfs_write+0x10/0x10 [ 618.556603][T15964] ? lock_release+0x201/0x2f0 [ 618.556639][T15964] __x64_sys_pwrite64+0x1eb/0x250 [ 618.556668][T15964] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 618.556701][T15964] do_syscall_64+0xcd/0x490 [ 618.556732][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.556755][T15964] RIP: 0033:0x7f5803d8ebe9 [ 618.556772][T15964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.556794][T15964] RSP: 002b:00007f5804c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 618.556816][T15964] RAX: ffffffffffffffda RBX: 00007f5803fb5fa0 RCX: 00007f5803d8ebe9 [ 618.556832][T15964] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 618.556846][T15964] RBP: 00007f5804c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 618.556860][T15964] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 618.556874][T15964] R13: 00007f5803fb6038 R14: 00007f5803fb5fa0 R15: 00007ffe9fa75278 [ 618.556895][T15964] [ 619.107801][T15980] netlink: 'syz.1.2009': attribute type 11 has an invalid length. [ 619.115916][T15980] netlink: 'syz.1.2009': attribute type 11 has an invalid length. [ 619.125338][T15980] netlink: 'syz.1.2009': attribute type 11 has an invalid length. [ 619.481284][T15987] ICMPv6: process `syz.2.2011' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 619.538886][T15988] random: crng reseeded on system resumption [ 619.728944][T15937] kexec: Could not allocate control_code_buffer [ 619.865058][T15999] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2012'. [ 620.059130][T15991] aoe: can't write to that file. [ 620.166101][T15994] FAULT_INJECTION: forcing a failure. [ 620.166101][T15994] name failslab, interval 1, probability 0, space 0, times 0 [ 620.250340][T15994] CPU: 1 UID: 0 PID: 15994 Comm: syz.3.2013 Not tainted syzkaller #0 PREEMPT(full) [ 620.250372][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.250387][T15994] Call Trace: [ 620.250394][T15994] [ 620.250402][T15994] dump_stack_lvl+0x16c/0x1f0 [ 620.250436][T15994] should_fail_ex+0x512/0x640 [ 620.250472][T15994] should_failslab+0xc2/0x120 [ 620.250505][T15994] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 620.250533][T15994] ? rcu_is_watching+0x12/0xc0 [ 620.250557][T15994] ? __d_alloc+0x32/0xae0 [ 620.250587][T15994] __d_alloc+0x32/0xae0 [ 620.250616][T15994] d_alloc_pseudo+0x1c/0xc0 [ 620.250651][T15994] alloc_file_pseudo+0xcf/0x230 [ 620.250688][T15994] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 620.250723][T15994] ? alloc_fd+0x471/0x7d0 [ 620.250749][T15994] sock_alloc_file+0x50/0x210 [ 620.250782][T15994] __sys_socket+0x1c0/0x260 [ 620.250803][T15994] ? __pfx___sys_socket+0x10/0x10 [ 620.250825][T15994] ? xfd_validate_state+0x61/0x180 [ 620.250860][T15994] ? __pfx_ksys_write+0x10/0x10 [ 620.250892][T15994] __x64_sys_socket+0x72/0xb0 [ 620.250914][T15994] do_syscall_64+0xcd/0x490 [ 620.250945][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.250969][T15994] RIP: 0033:0x7f364138ebe9 [ 620.250986][T15994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.251009][T15994] RSP: 002b:00007f36421fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 620.251031][T15994] RAX: ffffffffffffffda RBX: 00007f36415b6090 RCX: 00007f364138ebe9 [ 620.251053][T15994] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 620.251067][T15994] RBP: 00007f3641411e19 R08: 0000000000000000 R09: 0000000000000000 [ 620.251081][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.251100][T15994] R13: 00007f36415b6128 R14: 00007f36415b6090 R15: 00007fff037985e8 [ 620.251121][T15994] [ 620.854176][T16027] rnbd_client L213: map_device: Parameters missing [ 620.862569][T16028] vivid-003: ================= START STATUS ================= [ 620.913153][T16027] FAULT_INJECTION: forcing a failure. [ 620.913153][T16027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.935916][T16028] vivid-003: Radio HW Seek Mode: Bounded [ 620.946022][T16028] vivid-003: Radio Programmable HW Seek: false [ 620.988547][T16027] CPU: 1 UID: 0 PID: 16027 Comm: syz.1.2016 Not tainted syzkaller #0 PREEMPT(full) [ 620.988577][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.988591][T16027] Call Trace: [ 620.988598][T16027] [ 620.988606][T16027] dump_stack_lvl+0x16c/0x1f0 [ 620.988639][T16027] should_fail_ex+0x512/0x640 [ 620.988673][T16027] _copy_to_user+0x32/0xd0 [ 620.988694][T16027] simple_read_from_buffer+0xcb/0x170 [ 620.988716][T16027] proc_fail_nth_read+0x197/0x240 [ 620.988739][T16027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.988762][T16027] ? security_file_permission+0x71/0x210 [ 620.988799][T16027] ? rw_verify_area+0xcf/0x6c0 [ 620.988821][T16027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.988844][T16027] vfs_read+0x1e4/0xcf0 [ 620.988870][T16027] ? __pfx___mutex_lock+0x10/0x10 [ 620.988900][T16027] ? __pfx_vfs_read+0x10/0x10 [ 620.988924][T16027] ? __fget_files+0x204/0x3c0 [ 620.988947][T16027] ? rcu_is_watching+0x12/0xc0 [ 620.988973][T16027] ? __fget_files+0x20e/0x3c0 [ 620.989000][T16027] ksys_read+0x12a/0x250 [ 620.989025][T16027] ? __pfx_ksys_read+0x10/0x10 [ 620.989054][T16027] do_syscall_64+0xcd/0x490 [ 620.989085][T16027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.989108][T16027] RIP: 0033:0x7f5803d8d5fc [ 620.989126][T16027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 620.989148][T16027] RSP: 002b:00007f5804c0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.989169][T16027] RAX: ffffffffffffffda RBX: 00007f5803fb5fa0 RCX: 00007f5803d8d5fc [ 620.989185][T16027] RDX: 000000000000000f RSI: 00007f5804c0a0a0 RDI: 0000000000000004 [ 620.989199][T16027] RBP: 00007f5804c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 620.989213][T16027] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 620.989227][T16027] R13: 00007f5803fb6038 R14: 00007f5803fb5fa0 R15: 00007ffe9fa75278 [ 620.989249][T16027] [ 621.309045][T16031] rtc_cmos 00:00: Alarms can be up to one day in the future [ 621.417961][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 621.425552][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 621.497841][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 621.505932][T16040] rnbd_client L213: map_device: Parameters missing [ 621.537699][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 621.597419][ T5951] rtc rtc0: __rtc_set_alarm: err=-22 [ 621.691388][T16044] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 621.746565][T16044] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 621.778588][T16044] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 622.114366][T16028] vivid-003: RDS Rx I/O Mode: Block I/O [ 622.173073][T16028] vivid-003: Generate RBDS Instead of RDS: false [ 622.210452][T16028] vivid-003: RDS Reception: true [ 622.215437][T16028] vivid-003: RDS Program Type: 0 inactive [ 622.292079][T16028] vivid-003: RDS PS Name: inactive [ 622.309786][T16028] vivid-003: RDS Radio Text: inactive [ 622.339367][T16028] vivid-003: RDS Traffic Announcement: false inactive [ 622.373571][T16028] vivid-003: RDS Traffic Program: false inactive [ 622.405737][T16028] vivid-003: RDS Music: false inactive [ 622.458620][T16028] vivid-003: ================== END STATUS ================== [ 622.773456][T16076] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 622.964666][T16052] ptrace attach of "./syz-executor exec"[5863] was attempted by ""[16052] [ 624.417938][T16123] netlink: 'syz.1.2032': attribute type 11 has an invalid length. [ 624.425850][T16123] netlink: 'syz.1.2032': attribute type 11 has an invalid length. [ 624.554105][T16123] netlink: 'syz.1.2032': attribute type 11 has an invalid length. [ 624.639372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.651812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.664894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.677255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.689602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.701968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.714302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.726609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.739219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.751539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.647554][ C1] net_ratelimit: 19299 callbacks suppressed [ 629.647575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.665968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.678265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.690563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.702813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.715107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.727449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.739749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.752007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.764309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.267317][ C1] sched: DL replenish lagged too much [ 634.657490][ C1] net_ratelimit: 19135 callbacks suppressed [ 634.657511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.675780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.688077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.700294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.712527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.724777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.737640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.749939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.762267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.774550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.667505][ C1] net_ratelimit: 19711 callbacks suppressed [ 639.667525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.685738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.697987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.710228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.722555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.734863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.747199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.759504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.771737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.784112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.677511][ C1] net_ratelimit: 20124 callbacks suppressed [ 644.677531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.695723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.707945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.720213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.732419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.744729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.757011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.769239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.781456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.793697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.687469][ C1] net_ratelimit: 20386 callbacks suppressed [ 649.687489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.705824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.718105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.730377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.742792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.755100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.767361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.779648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.791928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.804276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.697393][ C1] net_ratelimit: 19950 callbacks suppressed [ 654.697414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.715602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.727828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.740189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.752544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.764836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.777081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.789406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.801694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.814032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.707388][ C1] net_ratelimit: 20301 callbacks suppressed [ 659.707409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.725799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.738120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.750546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.762826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.775057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.787350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.799655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.811966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.824296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.838023][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.717399][ C1] net_ratelimit: 20080 callbacks suppressed [ 664.717420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.735600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.747860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.760083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.772477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.784790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.797117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.809359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.821883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.834243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.042253][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 669.727427][ C1] net_ratelimit: 20218 callbacks suppressed [ 669.727447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.745744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.758077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.770388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.782646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.794867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.807092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.819300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.831631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.843839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.737361][ C1] net_ratelimit: 19673 callbacks suppressed [ 674.737382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.757768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.770021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.782286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.794524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.806766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.819109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.831525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.843792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.856136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.747828][ C1] net_ratelimit: 19798 callbacks suppressed [ 679.747849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.766093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.778361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.790634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.802896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.815183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.827623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.839931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.852190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.864447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.757460][ C1] net_ratelimit: 19723 callbacks suppressed [ 684.757481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.775709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.788004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.800262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.812614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.824951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.838381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.850675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.862938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.875190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.767444][ C1] net_ratelimit: 19452 callbacks suppressed [ 689.767464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.785639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.797999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.810311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.822747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.835179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.847498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.859844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.872093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.884321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.777388][ C1] net_ratelimit: 19547 callbacks suppressed [ 694.777408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.795671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.807954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.820389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.832677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.844980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.857237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.869495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.881735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.894085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.429135][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.443384][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.787324][ C1] net_ratelimit: 20381 callbacks suppressed [ 699.787344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.805673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.817962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.830211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.842566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.854845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.867114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.879311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.891556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.903789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.797475][ C1] net_ratelimit: 20404 callbacks suppressed [ 704.797496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.815656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.827929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.840223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.852542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.864777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.877004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.889201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.901530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.913820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.807279][ C1] net_ratelimit: 20801 callbacks suppressed [ 709.807300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.825563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.838945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.851243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.863511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.875764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.888084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.900450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.912865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.925150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.817379][ C1] net_ratelimit: 20647 callbacks suppressed [ 714.817400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.835720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.848058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.860575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.872876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.885263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.897572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.909787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.922063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.934733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.827428][ C1] net_ratelimit: 20536 callbacks suppressed [ 719.827451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.845690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.857987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.870306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.882565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.894811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.907136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.919336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.931646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.943872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.837290][ C1] net_ratelimit: 20439 callbacks suppressed [ 724.837311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.855567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.867788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.880025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.892262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.904524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.916745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.928985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.941173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.953386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.587254][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 729.594228][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16093/1:b..l [ 729.602257][ C1] rcu: (detected by 1, t=10502 jiffies, g=82933, q=2664 ncpus=1) [ 729.610151][ C1] task:syz.2.2028 state:R running task stack:25240 pid:16093 tgid:16093 ppid:11392 task_flags:0x2040004c flags:0x00004002 [ 729.623844][ C1] Call Trace: [ 729.627123][ C1] [ 729.630057][ C1] __schedule+0x1190/0x5de0 [ 729.634578][ C1] ? __kernel_text_address+0xd/0x40 [ 729.639780][ C1] ? unwind_get_return_address+0x59/0xa0 [ 729.645458][ C1] ? __pfx___schedule+0x10/0x10 [ 729.650332][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.655736][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 729.661224][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 729.667148][ C1] ? rcu_is_watching+0x12/0xc0 [ 729.671921][ C1] preempt_schedule_irq+0x51/0x90 [ 729.676957][ C1] irqentry_exit+0x36/0x90 [ 729.681400][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.687391][ C1] RIP: 0010:unwind_get_return_address+0x28/0xa0 [ 729.693641][ C1] Code: 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb 0f b6 04 02 84 c0 74 04 3c 03 7e 59 8b 03 <85> c0 75 09 31 c0 5b 5d c3 cc cc cc cc 48 b8 00 00 00 00 00 fc ff [ 729.713253][ C1] RSP: 0018:ffffc9000aedeb70 EFLAGS: 00000246 [ 729.719327][ C1] RAX: 0000000000000001 RBX: ffffc9000aedeb88 RCX: ffffc9000aee0001 [ 729.727300][ C1] RDX: 1ffff920015dbd71 RSI: ffffffff8c162c80 RDI: ffffc9000aedeb88 [ 729.735274][ C1] RBP: ffffc9000aedec18 R08: 0000000000000001 R09: 0000000000000000 [ 729.743275][ C1] R10: ffffc9000aedeb88 R11: 00000000000146fe R12: ffffffff81a67470 [ 729.751260][ C1] R13: ffffc9000aedec48 R14: 0000000000000000 R15: ffff88805bd29e00 [ 729.759257][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.765452][ C1] arch_stack_walk+0xa6/0x100 [ 729.770150][ C1] ? blkdev_writepages+0xb8/0x140 [ 729.775186][ C1] stack_trace_save+0x8e/0xc0 [ 729.779878][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.785260][ C1] ? stack_trace_save+0x8e/0xc0 [ 729.790125][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.795518][ C1] kasan_save_stack+0x33/0x60 [ 729.800231][ C1] ? kasan_save_stack+0x33/0x60 [ 729.805115][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 729.810531][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 729.816748][ C1] ? kmem_cache_free+0x16d/0x4d0 [ 729.821730][ C1] ? mempool_free+0x102/0x750 [ 729.826427][ C1] ? bio_put+0x355/0x5b0 [ 729.830701][ C1] ? bio_endio+0x70a/0x850 [ 729.835130][ C1] ? blk_update_request+0x93e/0x15f0 [ 729.840433][ C1] ? blk_mq_end_request+0x5b/0x630 [ 729.845546][ C1] ? blk_mq_complete_request+0x88/0xb0 [ 729.851021][ C1] ? null_queue_rq+0xb69/0xfd0 [ 729.855798][ C1] ? null_queue_rqs+0xe9/0x2f0 [ 729.860593][ C1] ? __blk_mq_flush_list+0x97/0xc0 [ 729.865722][ C1] ? blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 729.871970][ C1] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 729.877523][ C1] ? blk_add_rq_to_plug+0x1ca/0x540 [ 729.882730][ C1] ? blk_mq_submit_bio+0x1a1c/0x2880 [ 729.888022][ C1] ? __submit_bio+0x3cf/0x690 [ 729.892709][ C1] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 729.898543][ C1] ? submit_bio_noacct+0xb49/0x1eb0 [ 729.903745][ C1] ? __block_write_full_folio+0x735/0xe00 [ 729.909486][ C1] ? block_write_full_folio+0x341/0x400 [ 729.915087][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 729.920318][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 729.926480][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 729.932395][ C1] kmem_cache_free+0x16d/0x4d0 [ 729.937165][ C1] ? rcu_is_watching+0x12/0xc0 [ 729.941932][ C1] ? mempool_free+0x102/0x750 [ 729.946624][ C1] ? __pfx_mempool_free_slab+0x10/0x10 [ 729.952097][ C1] mempool_free+0x102/0x750 [ 729.956615][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 729.962170][ C1] bio_put+0x355/0x5b0 [ 729.966255][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 729.971810][ C1] bio_endio+0x70a/0x850 [ 729.976086][ C1] blk_update_request+0x93e/0x15f0 [ 729.981232][ C1] blk_mq_end_request+0x5b/0x630 [ 729.986192][ C1] blk_mq_complete_request+0x88/0xb0 [ 729.991497][ C1] null_queue_rq+0xb69/0xfd0 [ 729.996109][ C1] ? lock_release+0x201/0x2f0 [ 730.000802][ C1] null_queue_rqs+0xe9/0x2f0 [ 730.005412][ C1] ? __pfx_null_queue_rqs+0x10/0x10 [ 730.010639][ C1] ? lock_acquire+0x2cd/0x350 [ 730.015348][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 730.021449][ C1] __blk_mq_flush_list+0x97/0xc0 [ 730.026412][ C1] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 730.032492][ C1] blk_mq_flush_plug_list+0x1f2/0x600 [ 730.037879][ C1] ? update_io_ticks+0x137/0x2a0 [ 730.042975][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 730.048958][ C1] ? __pfx_update_io_ticks+0x10/0x10 [ 730.054256][ C1] ? rcu_is_watching+0x12/0xc0 [ 730.059029][ C1] ? lock_release+0x201/0x2f0 [ 730.063756][ C1] blk_add_rq_to_plug+0x1ca/0x540 [ 730.068830][ C1] blk_mq_submit_bio+0x1a1c/0x2880 [ 730.073988][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 730.079475][ C1] __submit_bio+0x3cf/0x690 [ 730.083992][ C1] ? rcu_is_watching+0x12/0xc0 [ 730.088763][ C1] ? __pfx___submit_bio+0x10/0x10 [ 730.093809][ C1] ? rcu_is_watching+0x12/0xc0 [ 730.098585][ C1] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 730.104402][ C1] submit_bio_noacct_nocheck+0x660/0xd30 [ 730.110051][ C1] ? bio_init+0x3d5/0x5e0 [ 730.114390][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 730.120555][ C1] ? __pfx___might_resched+0x10/0x10 [ 730.125858][ C1] ? balance_dirty_pages+0x1501/0x1a30 [ 730.131345][ C1] ? lock_release+0x201/0x2f0 [ 730.136034][ C1] submit_bio_noacct+0xb49/0x1eb0 [ 730.141072][ C1] __block_write_full_folio+0x735/0xe00 [ 730.146717][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 730.152102][ C1] block_write_full_folio+0x341/0x400 [ 730.157494][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 730.162875][ C1] blkdev_writepages+0xb8/0x140 [ 730.167736][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 730.173210][ C1] ? rcu_is_watching+0x12/0xc0 [ 730.177980][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 730.183449][ C1] do_writepages+0x27a/0x600 [ 730.188045][ C1] ? __pfx_do_writepages+0x10/0x10 [ 730.193170][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 730.198406][ C1] ? _raw_spin_unlock+0x28/0x50 [ 730.203281][ C1] filemap_fdatawrite_wbc+0x104/0x160 [ 730.208676][ C1] __filemap_fdatawrite_range+0xb9/0x100 [ 730.214339][ C1] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 730.220620][ C1] ? locks_remove_file+0x399/0x5c0 [ 730.225749][ C1] ? rcu_is_watching+0x12/0xc0 [ 730.230526][ C1] ? lock_release+0x201/0x2f0 [ 730.235215][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 730.240440][ C1] filemap_write_and_wait_range+0xa3/0x130 [ 730.246260][ C1] bdev_release+0x4d3/0x6d0 [ 730.250774][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 730.255977][ C1] blkdev_release+0x15/0x20 [ 730.260591][ C1] __fput+0x3ff/0xb70 [ 730.264607][ C1] task_work_run+0x14d/0x240 [ 730.269224][ C1] ? __pfx_task_work_run+0x10/0x10 [ 730.274359][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 730.279643][ C1] do_exit+0x86f/0x2bf0 [ 730.283841][ C1] ? __pfx_do_exit+0x10/0x10 [ 730.288477][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 730.293885][ C1] do_group_exit+0xd3/0x2a0 [ 730.298412][ C1] __x64_sys_exit_group+0x3e/0x50 [ 730.303454][ C1] x64_sys_call+0x14fa/0x1720 [ 730.308139][ C1] do_syscall_64+0xcd/0x490 [ 730.312655][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.318558][ C1] RIP: 0033:0x7fdc2618ebe9 [ 730.322970][ C1] RSP: 002b:00007fffe6918838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 730.331413][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc2618ebe9 [ 730.339398][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.347368][ C1] RBP: 00007fffe691889c R08: 0000001ee691892f R09: 00000000000927c0 [ 730.355356][ C1] R10: 0000000000056134 R11: 0000000000000246 R12: 00000000000000f9 [ 730.363412][ C1] R13: 00000000000927c0 R14: 000000000009821d R15: 00007fffe69188f0 [ 730.371393][ C1] [ 730.374609][ C1] net_ratelimit: 19608 callbacks suppressed [ 730.374625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.392789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.405014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.417321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.429519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.441741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.453961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.466201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.478405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.490636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.377515][ C1] net_ratelimit: 19196 callbacks suppressed [ 735.377536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.395798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.408059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.420442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.432811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.445182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.457453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.469723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.482006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.494311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)