last executing test programs: 6.472212858s ago: executing program 1 (id=1719): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) getsockopt$auto(r0, 0x10001, 0x4, &(0x7f0000000040)='$^#,\x00', &(0x7f0000000080)=0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000140), 0x440c0, 0x0) read$auto(0x3, 0x0, 0x80) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000180)=@task_fd_query={0x0, r3, 0x8, 0x5, 0x7, 0x4, r4, 0x83, 0xdf}, 0x71a) sendto$auto(r2, &(0x7f0000000400)="a2dee23ddad3e4a4a7375d995c5c1c170225df7ec9184a40f227c0443856a9e36e6ce970976d94aea32b9941f1c4ff4e19c2c7829701f83bceffc5ad7a920dc41445385438ca069eeb6859414ead4c61bdd308b49ec486309f21db49da4d8dd7de6a5cc4359c52607c6fd511af9fdef0af42b2d3a2f4", 0x3, 0xffffff01, &(0x7f0000000100)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x4) read$auto_proc_mountstats_operations_mnt_namespace(r5, &(0x7f0000000300)=""/204, 0xcc) read$auto(r3, 0x0, 0x1f42) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) read$auto_bm_entry_operations_binfmt_misc(r2, 0x0, 0x0) io_uring_setup$auto(0x3, &(0x7f0000000280)={0x6, 0x7d, 0x0, 0x3843, 0x1, 0x803, r3, [0x8000000, 0xcb7, 0x6], {0x4, 0x5, 0xfffff5d3, 0x2, 0x2, 0x1, 0x7ff, 0x8, 0x80000000}, {0x8, 0x9, 0x7, 0x3, 0xe4ae, 0x95, 0x7ff, 0x1, 0x3}}) ioctl$auto(0x3, 0xae60, 0x10000000000402) 5.180495503s ago: executing program 3 (id=1721): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = socket(0x2, 0x1, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), r1) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000c00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40010) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 4.866109573s ago: executing program 2 (id=1722): sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000040), 0x10, &(0x7f00000003c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x1) close_range$auto(0x0, 0xffffeffe, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000000980)=""/4098, 0x1002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x5, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000380)={{0x0, 0x10001c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) 4.758524478s ago: executing program 1 (id=1723): socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill$auto(r1, 0x4) pidfd_open$auto(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f00000006c0)={0x0, 0xf0, &(0x7f0000000680)={&(0x7f0000000e80)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x400c080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg\x00'}) 4.690343041s ago: executing program 0 (id=1724): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy_home_node$auto(0x81c, 0xc5a, 0x2, 0xf4) r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r4 = wait4$auto(0x0, &(0x7f0000000040)=0x9, 0x6, &(0x7f00000000c0)={{0xffffffff, 0x9}, {0x0, 0x5}, 0x6529, 0x0, 0x1000, 0x7fff, 0x1, 0x5, 0x8, 0x9, 0x8, 0x1, 0x3, 0x5, 0x40, 0x6}) r5 = waitid$auto(0x4, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x6, 0x3, 0x17, @_sigsys={&(0x7f0000000180)="9c0644f8029997c1b120f4381fc9b9562b03be9a05601177e78badbb95d38bda1d2cc1d20aed0bad3070860c0e1db65e68d1dde4fea768f0d1ae33e6dcd405546b95022915348a8df9ce879173d47aa03fae7ad0d32b4d56f4b3526d99aa54f1357b527abcc387905324b7a387d2c4f383d1a5a502a1d9f94750d96ed08e480d2fbb260fcf23a91895312ba5b8d8ee53c8f280608ee56feb17", 0x3, 0x100}}}, 0x3, &(0x7f00000002c0)={{0x2, 0x8}, {0x1000, 0x5}, 0x8001, 0x8, 0x5, 0x6, 0x3ff, 0xc48, 0x9, 0x6, 0x503, 0x80000001, 0x5, 0x9, 0x1, 0x4}) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf2518000000a401068014001a0000000000000000000000000000000001dd00958008002b00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="98cdde606cc1e674287893529bba353cef8f0800", @ANYRES32=r5, @ANYBLOB="04001f00745ef7b1a60fd3864b3928968f2ac9b438ae3ce42923905bc418ef7b47c0266e83ff87d014342ca954408390f56c351df63e79ab4f7edf8d5548755442109368663ec87b6c7b993a801e1e2d73692c500d7153c153a31847d17ee9c6f7af1a000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)) r6 = socket(0x848000000015, 0x805, 0x0) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x88000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x5ad35891, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0x4) 4.598520795s ago: executing program 3 (id=1725): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xa, 0x8000000000de, 0x9b72, 0x5, 0xbd) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x5}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x7, 0x90, 0xfffffff5}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x10d47e, 0x72) socket(0x6, 0x2, 0x2) (async, rerun: 32) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (rerun: 32) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r3, 0x4611, r3) 4.276762372s ago: executing program 0 (id=1726): mmap$auto(0x0, 0x200006, 0x1, 0x40eb1, 0x602, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x4c0080, 0x0) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x9) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000100)=0x1) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x200, 0x4, 0x6, 0xfffffffffffffffd, 0x400, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x1000000003, 0x4, 0xfef, 0x6, 0x6d3f, 0x9, 0x2, 0x10000]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x2, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) close_range$auto(r2, r5, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x5, 0xfffffffd, 0x7, 0xee00, 0x6) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) 3.931566395s ago: executing program 2 (id=1727): madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x3f, 0x800, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x648902, 0x0) r2 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) write$auto_proc_timens_offsets_operations_base(r2, &(0x7f0000000300)="38675fd347658c23ffecd0d8bc1d982487a3ad5094ae47160fda3b2630d3370ca8b975057089c083c9bd2814031c19ae951929c98655d8f55cbc42208ee9cb966bf6eb2e555b9301df7e72e7d7f53dbef536f56921ce229e1c5344e237d9b7f62a6b66e774fffd83a8e0711677f72efdaa79cc9854619d920d7454de5411cc09e0af56d8d004f5031b601d8c3159ca47129002f5afde5d3f116c5d58712583b7077b170a11", 0xa5) close_range$auto(r0, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) 3.576459559s ago: executing program 3 (id=1728): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000001c0)="ccee5b7e8752852bf35a7ada871422b16c8bf27ce0172565e4666c164a04ecfa1dd2cbcff7c23454bf37486bfd9b46cc97516859fd812600c5e380f1fe2de2fa0f08575faa84ef099c0fa6414a35797ac29c647143845014ef65f1a3c2a1f5d0fe5556bfc6f3267821bbe2929911fa4cff27cde3366c31a927cadf0c883c3119dc8548560a718e792eb0a51ca45aab958b2391dfc88c2cadf5c21344a3c61d760d7868ceff28fa70680eb08d8bd3d11a2ca72830b39d9437440de15bd17c65e815f65f86a460a4db4e45badf57f463e09547f4df09138def1e2141355570100065b8c67ca4c3d6aa2235b1e96c44866b81a1f0c19463fa8d7b2fe037432c3d5cbca6e99708a95d724f4d7a559a8d5e86395803b286bf7211d997c7982a53f0ef3e4a6b998471c01811227da56097719029552426776713590eeb0f0deba9a71db41423bf0f5d4d869eab562370c88c948ae77632588e560890aa34df2e3403f8e8440e06af996cf1794c0f8ce512dc3e700ddf41dcab10145ee6dd5d390aa2748c2187851b8f0f178791607e85de7dd7a2e87d5b41420b5a40239712791a462695a100f4cee02efb5180113c546dc7bbc8f4d74596b5ebd65bb58e9faba5eae14ec2321f8614c2b6aecad905330f7fa08f55de14037db7295aa7ed2ebc79ac30e85a9a4ec80ec343121d58d39d41842f75662e8d91b21d5f143b3ef473793a9235a9abcac3bd978027d65c8a17a6f0d1167ca7595b250d923428dda9c3e4be037ac86a08ac3dabe8d7e1ec28f0caf61bdd5042197ee08a235b8944ab02aa47f68c45989476760f843b554070b44b2a5d9f647212639195cbf86894724e95ba5882e566fe85ddba49630b84bbf351e57083dac0ee1dd5ff5058e6635990d10cf9113bdcd6031100cf4ca652daf980d739c6f47b8406428fd4fa08825fac68d98de0fa4728df304ba86ae664e148f39509c2f91344781ef51e604223d3de493ec5111eb49e39bc2e0d923e4727b0a5f2ea091ca5688bb8beea808ed7624265295c26d8ace88692f7e5d9ffc39189680f3853793962dbf5bbb8062561fb9abab792a8de342eb68c23866ec5c9cac74493663a5dd95e6758f4db8e09312e077d8f05c776024cb9ff005bd8ef07359e26c4534a6fa7741c392cc90a1917429801ca5bd4a3cde7dc548bad590d73b1ef8916c9987c072cf871038ab31b8d849cf2a7e60488fc7abcc003e41972bd2e00ac1cf4b18598ecbef7ef93e12aa4af0fe44123baee73455fdded1072d58bc4f00262354e3562533e176b0ebb5cb43d84a09d8b4de9b38ae254c92d80512bf32838fc6375562d9fb63639dc529ec693154beb7e4ed0ffc2dde4106f6a70ce09e5ba88aed3f060914949d18cf36f9c8132521a7e0c90a2c1f79bcf457be10d5c40c03dcc45a433ed2b91ec380970123daccf8ea4d9546d074309f00c381762b669617680868024cbe4a2627f3bfc64746fb226e2296c7d6073290ea3a6670e653e871e1f5ba58b06c971285a02c51dc4af4a56acade4be7082df7d3fe663edb4831c3040c103315e9af9b49fe89801e72a291b4b724446cbe98ff22b6110a6a52b8dc3be63ace1579fc952380cf61c8013beb097bc1b8e442a69e0c775cd52947a05001e74fd07f226ea01499ab6808e6e38f9ef7be6cad8ca4e9ba664fccd6888affe3cefbffb171c7820c29514c47988e3917e48db54b27d717f9ce7d75abae5fabc6f580fbf1d98dd356855cec95fdaf2b399eab0c764a24a191e33464a9501098be0738815a9048770ca4efe40b9c5194d1dc68dcd131d773a571f6d515a3042d8519eec99e5263827514f5cea4000a726879e3a1e5e8713aff4bd8323141a619c2fffcfd5081831138f317dc951ca67e345f7078e1198c156025ac656a62cbe83aa26e74799653e988365485e876f3baed91ff632e8eabd802264b162c92bbe9055a94ca2ae24de6b8034923ead23bb928b3465f89b57a0242a27142cbaa7d712fa066390ab7e5732eae08d0fea954560d4c242e5e447b1975b560e6770178402916b8313c24aced94fc2f280695b2f9602c5eb3ab8d7205c3a355343c526a4d74204e1c812a96d0461c68c86699f261e765ecc541ffa85eea83ee192ba623d2702ce4c03067b0d59d47ae783cf359f94d8ca2612f8fdcdb4f01c79f168f2c17dc373f32d834956548df5e50066a61cc026219eaf77ca37a792c11e65d0fa8856fa78ffcc68a8599fa3645904556734e0a8c0a190cda4e7778f703eda0a11073328ea2bf5b9a285f95f736c040276bb635cff93ef8aa2554bd09ac7fec8e8e5bc345943c1168a4d3dbc1ec926d27b52a1bac226ac16d7328212e743f77c3442daee31bf6bc20c80fb27ef44d8db05fd84c0dfc4d4138afb96194dce419307c68521d8f3a17fddfb5180f358f5929933d074d5b24ffd523cf93a606997acf61eedf9aea642da812a58693151d45683d63b935e9325f27b8a347a2e1920006e9f44937466be7b09fbcf885fbe6f01f35b2ca3e99825ce5417b4bdd047500c7e33db8398c53e2f701e8f4a05e1f3794b8340c59fc8a5aaf5c9f33c6450a0e561628c1836e1bb4754009ffd618b7e40c2ae2140aa3f636eb2c177d3e9aeef065ef3155330d54b945414b2c58db0f8a0235e25fab5b73e1330dddc18cdc4c735444f0c0149987915c3caa69b2c8407fe700f6d5a6f78a249293a42fa3f42de40331782a089972fc448ebc2b38fb194c1e41888d1f6bfd10483638256ee46eb059988a8aaa8275e3952227ffb61ac55b1cfb59fa5170adb8c3d5e1db531552121512a8979c0786073dcbdbc2ecc9e16bb6789aa225ea742997ba6547f7d5d0b7b2e96d142f6ee3ea449ae7415073e04b645cf7406d5594a052ca1562697c72e8786f5ed9826fd5b6f9c2d6676b051b1ab3b1436a16ed27d1550cc58c49e48a6191e22c544a767da4f18f92ab9c8ebb93f0c7fd9eae58b00b5cd42a8dedff445e07deab0f08cae46df7c0c96f1bb6d7e24a5f3ccdf7a43cd49620904cf3f7e19ea61a02198ede23b886a856ad2fece2b6e5204762e9ff810444c6a5d68b992540286c60ae5593be04aa2c9dda6544497457513c042421965d3acc07a32f26abba5c9184072fceb7973897cc3f5c3f24862c1fde4a73e97b1008f9ef319c260743e968beaf9e9d92166d97a1a3c7f58279c73f2e44ba06c8f38a55ecfa471c41b4bfd4278dbe2ca694f1a76cd44c456381079b257b107ca01c9a0dfc7c2e349d20b7dcbf14dfa76d928017d214a7e8c59c8ba576ac34a75faadab9567c6df47fea8ca290de548b1adff40a8358915729e2aef5ab623d8cd5a55d94c7459d3e8eb28df50134e50a3060ab19ccb079d4ef6393caa8d9a89b17c9af631ca67380b79fc57817664a5b8733e67f1540ab033f7656ea166c060938d30515dc1cf229eb38cd1de1dac0f5a406445ec68bff337d217b1a807b425bdaa930c199dc755434af6398a66f0188daeb9e85e8608e3eb0adf04ee12f5293bfeaa51669490ba8b288db1cefe2d40b8ac74cb3639209eca5ee54e04e65a718b224ba01b755a7e5d985bb4f5936de3d031d72367125f550586006485146e9bb3ceecb29ccdbc8ab05bd198215dffd8650453ec1fdb296f39faa2c11c700857d60317861f3353a09fadaaf344d02b3caae8d66b67c33465f6026532744c6c8c8a4b28a59528b2e621eecdc0c19dad121671a3044e627c97d79f31f85457e9a79aa933ab08c262cecbd67c2f2a42b497e42118c85ca77ab9eab7b5108e22e53723cec30ac0b6f352564c168834e60d283be3a52a7b1789badcdec00cabc8023710100da6edca47b338185001629894626b9c279fa20a5835d368f0e9056ae034e6d610c3ed2dc586fdd66c80258700d865c3692fbb39935ee5f97a9227fc9e2650fdf9df299ef2b2f2cde5ab58e9409552d5c4157ec2ca9e16a30e6f7438d68748a3dd979e9a04ca11ab4f19a4f7115a14275869769290aed3121cce7dc99c968a6693f1df389e89e478912dab1659e2793cdc92a15bb3abc83c209dd78f7198cbe28e343a0c34f8814200a8aa502f36f5da659f73d9ed081f3267801872a47813df1183cb1146c56ae31cfde9a1516081c2abb1cd5240ee289491d399ed8d2a9192ccad2f2387c1b79281df1e736a96e4230e6b404acc65f1803c703e57bedb8290bdf29ed5ea71a605bd1020f919a63d1bc1aa72f56796a97254fb8efc2246de069358690a4363aecfbf71606a1098a7243e0217f7def87e62440ee7e6e894659514c6f08a5b311272cb58afd30cf966b542e548e8912984097e8db20d0ffe40e5e1ddb246170de90cdc99d565516436028b3c1da67df0d5f0af3e2b9a214c58be78bffe064c1bd661c4ebcdab0a5543ff32c92bffd668e8c9c795140587e504c4ddf807fbd9104423f11631457341c9a206f6469a613a7e82a685bc18ebe305e28d026c2f649e64f0cb89de174b0a7c67cb315ef58080c00ca4396ef2f828639849cae421f3e09cd387d5a4c529371368fd347164897ec41dc4f52b8afff5e20dc8a394f331ed54be41fd0dec69d54c26950b551b6dc211d8fd116809a1b45071c7ca6cd4c4336d26a17f3e43930667f6cef000e3c42d1a64e04e9345a233666a2ffeb90a49344594eb79f5f50f23780bbf90dd79453810d27f7621b20b1d09745c30b0909bca42d50be026476f7b9a678584e80a7beb75daf6e203b699373b46c5786ae32d7ac64171d5c52c728610c1ee34f89164311551f3ece86bd25b523cde5b681db2c936cd751f7f549bd9bac8d95cbad29aefb35293654f07ccbce5a73aa4904b6573e5ce9b4b7dcd72ff0b5e4b0394fdde38b181bf48537aaed5701059ab69fc7f65f8523a504fc8d472653f2aea2598ccbb1dbd715f65165df41aa29d3740a65d0ac0c4c56e465bc1f5cf47ac3c7d81fc5020bc3f5970b2647db55eaa601d9be1d7a52dd5e7b3ba692277fb22941cadc3edc8fef93b6ccb6d259833a4fe1387a57bbf9c43ffc1fedc875675d66f4885703bb482052ad0b3d091b435fd5e66c8ebeb3ecde39f703b594938cb1ece251826453c97d099dd488d4d812ebfef8f2c6e2aba354b564c144f405c7949dd7048dcabdd0b5058bbadc1d81c2588debf54c377a4e1a9a3c0f465381095222743f94737d3b45b282d8e52dbbf9ca68ca3d2e084fc90eb68caa06b02be71e4584b0e3c3a63950cc7e59e1acbbe841e4909e018b59a756c8df45ed0f1d4a2da84ab4065672ebfe74e56d7add836433832e5fea811df0ed4a2a4d85727972098e3d2a2e0db8c67498287313ec7d75c49196ce2206041eb451d71bbbce0e5818f09569d1ca1e34a6643d9abe2ccbbc0c507b5108e60c050d39e009603808e966715629d056a9984926f89c0f3be941f186a627973c5faf67f13163a891cb84940537ad38bfcc33cdf4ba811efa9baff958aa3e94b936bde160edd704ff4444f1ebfd3535a898e9b83df9bee47b6ab8b7802e8b97d2140c885454dcbd139e3dbb66658048dd3492357cb56cb126ead6cc5d2b7dec3890cdf95816f9c0aed4345208f961ebd555ef272ef1f64d8a64984e94e3c7889037cd56ad2f358242a8dadb816da6e122e068e6154f9c6b9222eb3fd42a25d0a9b35a4df67a3f1b067a110a0f30480ee5c63727423a971943dced2c5292f3715c6aa28b2c64ffa314926225fde164a1ad1e20034999820902df03e2cf906d50314f3", 0xfea) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) ioctl$auto_IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x80, 0x196, 0x10000}) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, 0x0, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) write$auto(r3, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x37a}, 0x9, 0x0, 0x7, 0x8}, 0x2}, 0x4, 0x4008) open(&(0x7f0000000140)='./file0\x00', 0xaa4c0, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 3.526528881s ago: executing program 1 (id=1729): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)=@token_create={0x2, r0}, 0x5) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x0, 0x1}) 3.476949234s ago: executing program 2 (id=1730): r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/sessionid\x00', 0x0, 0x0) read$auto_proc_sessionid_operations_base(r0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000048c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 3.358005795s ago: executing program 3 (id=1731): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, 0x0, 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r2, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x2b6) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r3, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r4) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) 2.989352795s ago: executing program 2 (id=1732): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x6, 0x60, [{0xffffffffffffffff, 0x0, 0x8, 0x2b89}, {0xffffffffffffffff, 0x0, 0x2, 0x6}, {0xffffffffffffffff, 0x0, 0x4, 0x401}, {0xffffffffffffffff, 0x0, 0x3, 0x6}, {0xffffffffffffffff, 0x0, 0x7, 0xe04}, {0xffffffffffffffff, 0x0, 0x400, 0x3}, {0xffffffffffffffff, 0x0, 0x1, 0xdf41}, {0xffffffffffffffff, 0x0, 0x10001, 0x3}, {0xffffffffffffffff, 0x0, 0x0, 0x3}]}) preadv2$auto(r0, &(0x7f00000001c0)={&(0x7f0000000880)="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", 0x8}, 0x7, 0x200, 0x0, 0x8) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) capget$auto(0x0, 0x0) r3 = signalfd$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9}, 0x3) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000200)={r1, 0x1}) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r4, 0x80, 0x44, &(0x7f0000000240)='/dev/sequencer2\x00', 0xa) sendmsg$auto_L2TP_CMD_SESSION_GET(r3, 0x0, 0x1000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000340)=@bpf_attr_11={0x5, 0xffffffff, 0x7fe, 0x4, 0x7, 0xf, 0xa, r2}, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, 0x0) 2.460665433s ago: executing program 0 (id=1733): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) (async) writev$auto(r3, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r1, 0x4) r4 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x18, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504"}, 0x7d) fcntl$auto_F_DUPFD(r3, 0x0, r0) (async) setsockopt$auto(r4, 0x7, 0x8, 0x0, 0x8) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 2.359918814s ago: executing program 1 (id=1734): mmap$auto(0x0, 0x200006, 0x1, 0x40eb1, 0x602, 0x2ffffffffffe) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r3) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) madvise$auto_MADV_PAGEOUT(0x8000, 0x5, 0x15) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x6, 0x6]}, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) close_range$auto(r0, r4, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) 1.952436394s ago: executing program 0 (id=1735): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy_home_node$auto(0x81c, 0xc5a, 0x2, 0xf4) r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r4 = wait4$auto(0x0, &(0x7f0000000040)=0x9, 0x6, &(0x7f00000000c0)={{0xffffffff, 0x9}, {0x0, 0x5}, 0x6529, 0x0, 0x1000, 0x7fff, 0x1, 0x5, 0x8, 0x9, 0x8, 0x1, 0x3, 0x5, 0x40, 0x6}) r5 = waitid$auto(0x4, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x6, 0x3, 0x17, @_sigsys={&(0x7f0000000180)="9c0644f8029997c1b120f4381fc9b9562b03be9a05601177e78badbb95d38bda1d2cc1d20aed0bad3070860c0e1db65e68d1dde4fea768f0d1ae33e6dcd405546b95022915348a8df9ce879173d47aa03fae7ad0d32b4d56f4b3526d99aa54f1357b527abcc387905324b7a387d2c4f383d1a5a502a1d9f94750d96ed08e480d2fbb260fcf23a91895312ba5b8d8ee53c8f280608ee56feb17", 0x3, 0x100}}}, 0x3, &(0x7f00000002c0)={{0x2, 0x8}, {0x1000, 0x5}, 0x8001, 0x8, 0x5, 0x6, 0x3ff, 0xc48, 0x9, 0x6, 0x503, 0x80000001, 0x5, 0x9, 0x1, 0x4}) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf2518000000a401068014001a0000000000000000000000000000000001dd00958008002b00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="98cdde606cc1e674287893529bba353cef8f08005a", @ANYRES32=r5, @ANYBLOB="04001f00745ef7b1a60fd3864b3928968f2ac9b438ae3ce42923905bc418ef7b47c0266e83ff87d014342ca954408390f56c351df63e79ab4f7edf8d5548755442109368663ec87b6c7b993a801e1e2d73692c500d7153c153a31847d17ee9c6f7af1a000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)) r6 = socket(0x848000000015, 0x805, 0x0) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/4/effective_affinity\x00', 0x88000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x5ad35891, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0x4) 1.146036874s ago: executing program 3 (id=1736): msync$auto(0x7f, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x450342, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pread64$auto(r1, 0x0, 0x2, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r2, 0x4000008000) mprotect$auto(0x8000, 0x8, 0x8) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) 1.10438078s ago: executing program 2 (id=1737): socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) unshare$auto(0x9) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40004) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xa2040, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, 0x0, 0x1b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x100) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000e3dbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x78, r1, 0xa2f3be9c1e18642, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x11, 0x125, "3f5fbf316f80cbfaf88caf0a10"}, @NL80211_ATTR_SSID={0x12, 0x34, "b2b2708063289a6b753ad736a5a4"}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gre0\x00'}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x70eb}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) 1.089816395s ago: executing program 1 (id=1738): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x9) r1 = socket(0x22, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x10e0, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x10c1, 0x3, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @fd=r0}, @generic="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", @generic="756360388dde23618a456d7a80973b9921939dca21b2439e331d0e9739c393c13201165c88140c85c1444058c72a99f8033c0f8d36523c1468395381ec6f9dd3ead7fe40d7510698c7defae0b1a7d57d4712809a9dd2cf8e5af49734145b32cc2a5dddbbf6f6844561c1f13d2c4ae4116e652e22189c361ce353e22c156af0945d42a043b5d3d58469d1d716190910b97b", @nested={0x24, 0x151, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0xf7}, @typed={0xb, 0x124, 0x0, 0x0, @str='macsec\x00'}, @nested={0x4, 0x14a}]}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x50}, 0x890) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) getcpu$auto(&(0x7f0000000880)=0x7ff, &(0x7f00000008c0)=0x3, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r3 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000240)=0x7388201f) socket(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x9adb, &(0x7f0000000300)={{0x2, 0x3eef}, {0x6, 0x8f}, 0xf1e, 0x8, 0x0, 0x7, 0x2, 0x1, 0x7f, 0x9, 0x1, 0x20000000, 0x400, 0x8, 0x8000, 0x7fff}) r6 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(r7, 0x114, 0x1, 0x0, 0x1b) r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r3, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x1) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c080048}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)={0x344, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x161, 0x3, 0x0, 0x1, [@generic="034ed918e7d743ea3e3e9791ed74423edb31da7ef46cf6b3847a171ecd90e6560e72f9dc4ba1dc743fdf71cf402be3b952a65a9c527042582d27b692b151c06ac3b6443c41bc010665c2348e5d828b9088325735135ff4539c29962db34ff0416ee5c00500b66a1a8a56ced7cee48376681c997a2c9a49c8b3904a5d81234b", @generic="dc754e6c5396e659e2de64d53f538558480a96797d7f33f4f48811857574da1da8edaf7fe8dcb0640df50926ee6a6ebe2501821f6879330e9822cba13159f8486f9515364246c865631d4da57de0c99931d853ab9a0a2c0f31f2967f83d4471998873a4e3611646900380bfd058dc5ba8284afd02c77a2b2e08b988cc9d0d0912942ee6f438ce2485b24e547c474d9c3d7dc2e0c70ff8405207aa63899295f56808e8cc3f48a317859cd87315e4ddde25a07fc10f38f93dd24c1942e905ac0f1c223622201b7bc8e604371d5b34ab03132c5d47c55229a038c5541a120be"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x8, 0x9, 0x0, 0x1, [@typed={0x4, 0xf1}]}, @MACSEC_ATTR_OFFLOAD={0xd5, 0x9, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @fd=r1}, @generic="5354db9e6f4ee5bc249ff9fdf69fffa5df660a924bc62c9c6da13d3a961efa2fdee146aa3a2b90651ed263a30471c9c30340db804dd4f9be8ed67baf4e3b7fccb4382f4864c9d7ba69ab03093b9ef8c53bb8befd0184c3fbc55dc8e208b5c7403c2751aa2d993607c657f855b579c0222e79716578240d17eb9981ac3bb263ad3f527017a082f1798c1efa3a59840e76f4c47e8787991d9ba1cc728aff52c167843c552dba13f8e4de2abb99b55726b9a2b1f9e4817d9f40c453e83236f322fb7283962f4c46de8270"]}, @MACSEC_ATTR_RXSC_CONFIG={0xe4, 0x2, 0x0, 0x1, [@nested={0xdd, 0x10d, 0x0, 0x1, [@typed={0x15, 0xd4, 0x0, 0x0, @str='(-#\\&*%+%.).%\'$-\x00'}, @generic="8f35e3d162315245ffbd79f15841f38c303744945aaf3fcf4a611b4ef5ed81", @typed={0x8, 0x93, 0x0, 0x0, @fd=r0}, @generic="a3b4b6ff64f7fe45453d13a670987c1976109fa9cc8165c224be55a0dd2745abde9b6017514b45f74cefa4074c0ec4a199b366ccd77399c42c86d561a8523da8331f8244007cebb8", @typed={0x8, 0x12e, 0x0, 0x0, @pid=r5}, @generic="f84956aba4f5ee0a3e7ab2fae90fb77c29a4ea8fc0b9fd6a1bb4f8e0475f72c7fd72d6e00e60f4ecc53d1ef265679994140a7aa2ae013b75648106707771bd9845586c070bdb03674c2a"]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$auto(0x3, 0x0, 0x26, 0xfffffffffffffffc, 0x70) 1.050380293s ago: executing program 0 (id=1739): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d529b", 0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4a1182, 0x0) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x10) bpf$auto(0xfffffffd, &(0x7f0000000480)=@bpf_attr_3={0x8, 0xfffffffe, 0x7, 0x7, 0x81, 0xe, 0x8c, 0xa6c9, 0x4, "41caf4b00381ce6290bdaa3c5f0415b3", 0x0, 0x6, r1, 0x81, 0x8000, 0x8001, 0x4506, 0x10002, 0x4, 0x5, @attach_btf_obj_fd=r1, 0x0, 0x5, 0x7fff, 0x2a4f, 0xb9c0, r2, r3}, 0x6f3) ioctl$auto_SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)="dc8a4c89dbd110bed8d22913645f955d085674c77d10fa4a834649b3f9a069c802ca53f6b769ac7e4af7d6d952bb0c1a478af9531e74ce77f70191536078935a343991401b607e7e4bf5bfa927840608140b5c6745aec592a8") 899.150683ms ago: executing program 0 (id=1740): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) socket(0x5, 0x800, 0x77) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) socket(0xf, 0x3, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x26, 0x6, 0x35dc) mmap$auto(0x0, 0x2020009, 0x10001, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0xc, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0xc2000000000) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x55) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 844.930719ms ago: executing program 3 (id=1741): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x1) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xb, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4c094) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x29, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/13t\x00', 0x101080, 0x0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xfffffff5, &(0x7f0000000140)={{0x4, 0xe2}, {0x10, 0x5}, 0x100000000, 0x100000001, 0x8, 0x16a, 0x401, 0x8000000000000001, 0x4, 0x3, 0x8000000000000000, 0x7, 0xda4, 0x1, 0xfffffffffffffffe, 0x1}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1a, 0x1, 0xfffffffe) 789.60508ms ago: executing program 1 (id=1742): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/mtd0\x00', 0x22801, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x6f2a, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x2080, 0x0) shmctl$auto_SHM_INFO(0x3a7, 0xe, &(0x7f0000000440)={{0x5, 0xee00, 0xee00, 0x3, 0x0, 0x9, 0x3ff}, 0x7, 0x400, 0x7e, 0x8058, @inferred, @raw, 0xd, 0x0, 0x0, &(0x7f00000001c0)="1c28ff11b9ba1d018e"}) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fb, 0x4, 0x9, 0x9, 0xffffffffffffffff, 0x20010180, 0xa}, 0x10) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) open(&(0x7f0000000140)='./file0\x00', 0x2a640, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x5, 0x1, 0x8, 0x7, 0x5, 0x7fffffff, 0x8, 0xffffffff, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x8, 0x84, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, [0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0xbb, 0x6, 0x2, 0x8, 0xfffffffffffffffd, 0x2, 0x3, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x10000000000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x2, 0x1, 0x0, 0x9], "024128b4655138607d04696fa0903d4be5ae3cfc78eec62dfea09d894e2f78f16f15d16158a8aea0a7a3e6fd380fd4e72d3cae636e6a7e0d1e8886fd4132970eea800f9061509f9b375fe2419c6c61b1ba57c7bcd3090e22c2b9b8d14cdc8c0770c83198f11924a0c7348c8d66aa9603e10f9031cfd4b960966d07148b8b8b7dfda1c267c4dc75dff514bd42a94930b7a4c1113ee3a17c86c331"}, 0x81, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) 0s ago: executing program 2 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6$auto(0xfffff905, &(0x7f0000000080)={[0x0, 0x9, 0x200, 0x5, 0x5, 0x90000000, 0x2, 0x4, 0x1, 0x650a, 0x9, 0xc, 0x0, 0x7, 0xfffffffffffffffb, 0x4]}, &(0x7f0000000100)={[0xe5a2, 0x7, 0x5129, 0x5, 0xea, 0xc, 0x4, 0x11e, 0xfffffffffffffff7, 0x550d00000, 0xdd, 0x7f, 0x2, 0x2, 0x4, 0x7]}, &(0x7f0000000180)={[0x4, 0x2, 0x9, 0xd83d, 0x4, 0x800, 0xef, 0x6, 0x7, 0x2, 0x2, 0xff, 0x4, 0x4, 0x5, 0x6]}, &(0x7f0000000000)={0x6, 0x8}, &(0x7f0000000200)="953dfead4a3f6f505722447afaf34fa5ead4d90d14ede7d01190484a79fae3a6af931ff1908972705ab832b4c8719820b00bd8130bba3ac66b3bd0d2e62b6de9437928d5c79715958e013a2a104e52344fb81b6f54f8b8c0d6b7c184ab0f8dde9dde5f36487d00a485bfd344dc69ae40b95173c0f46b96d688a020b9552cdfe862a3afb5aba93bfd6915d04763179617231324dbb495d3687fd78fd9537f06596aca3d7f7127c7cf1694") r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/netdevsim/netdevsim6/ports/1\x00', 0xc0000, 0x0) ioctl$auto_AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000300)=0x81) clock_nanosleep$auto(0xfffefffe, 0xb, &(0x7f0000000340)={0x100000000000002}, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0) ioctl$auto(r3, 0xc0045627, r3) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r1, 0x9d0da3446261172d, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x24000000}, 0x20008080) r4 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r4, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0xfffd, 0xdf, 0x13, 0xffffffffffffffff, 0x8100) kernel console output (not intermixed with test programs): b0/0x1c60 [ 507.319534][T12107] ? __pfx_nbd_genl_connect+0x10/0x10 [ 507.319569][T12107] ? __nla_parse+0x40/0x60 [ 507.319613][T12107] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 507.319655][T12107] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 507.319704][T12107] genl_family_rcv_msg_doit+0x209/0x2f0 [ 507.319745][T12107] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 507.319783][T12107] ? genl_get_cmd+0x194/0x580 [ 507.319830][T12107] ? __radix_tree_lookup+0x21f/0x2c0 [ 507.319884][T12107] genl_rcv_msg+0x55c/0x800 [ 507.319925][T12107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.319963][T12107] ? __pfx_nbd_genl_connect+0x10/0x10 [ 507.320014][T12107] netlink_rcv_skb+0x158/0x420 [ 507.320076][T12107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.320116][T12107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.320190][T12107] ? netlink_deliver_tap+0x1ae/0xd30 [ 507.320247][T12107] genl_rcv+0x28/0x40 [ 507.320275][T12107] netlink_unicast+0x5a7/0x870 [ 507.320334][T12107] ? __pfx_netlink_unicast+0x10/0x10 [ 507.320383][T12107] ? __asan_memset+0x23/0x50 [ 507.320418][T12107] ? __build_skb_around+0x278/0x3b0 [ 507.320460][T12107] ? is_vmalloc_addr+0x86/0xa0 [ 507.320505][T12107] netlink_sendmsg+0x8d1/0xdd0 [ 507.320565][T12107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.320624][T12107] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 507.320670][T12107] ____sys_sendmsg+0xa98/0xc70 [ 507.320711][T12107] ? copy_msghdr_from_user+0x10a/0x160 [ 507.320764][T12107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.320812][T12107] ? __pfx_futex_wake_mark+0x10/0x10 [ 507.320876][T12107] ___sys_sendmsg+0x134/0x1d0 [ 507.320930][T12107] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.321033][T12107] __sys_sendmsg+0x16d/0x220 [ 507.321100][T12107] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.321152][T12107] ? __x64_sys_futex+0x1e0/0x4c0 [ 507.321225][T12107] do_syscall_64+0xcd/0x4c0 [ 507.321284][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.321319][T12107] RIP: 0033:0x7fbc0018eba9 [ 507.321347][T12107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.321382][T12107] RSP: 002b:00007fbc01010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.321415][T12107] RAX: ffffffffffffffda RBX: 00007fbc003d5fa0 RCX: 00007fbc0018eba9 [ 507.321438][T12107] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 507.321461][T12107] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 507.321482][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.321504][T12107] R13: 00007fbc003d6038 R14: 00007fbc003d5fa0 R15: 00007ffcea5ef358 [ 507.321550][T12107] [ 507.882000][T12117] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150 [ 508.192698][T12107] nbd: failed to add new device [ 508.220423][T12119] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 508.601770][T12122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 509.225877][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1436'. [ 509.281343][T12125] openvswitch: HfR: Dropping previously announced user features [ 509.516508][T12118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151 [ 511.171808][ T30] audit: type=1326 audit(1757730469.708:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.0.1442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 511.272533][T12162] FAULT_INJECTION: forcing a failure. [ 511.272533][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 511.310332][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.0.1442 Not tainted syzkaller #0 PREEMPT(full) [ 511.310368][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.310383][T12162] Call Trace: [ 511.310391][T12162] [ 511.310401][T12162] dump_stack_lvl+0x16c/0x1f0 [ 511.310444][T12162] should_fail_ex+0x512/0x640 [ 511.310483][T12162] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 511.310513][T12162] should_failslab+0xc2/0x120 [ 511.310545][T12162] __kmalloc_cache_noprof+0x6a/0x3e0 [ 511.310571][T12162] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 511.310613][T12162] ? kasan_save_track+0x14/0x30 [ 511.310645][T12162] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 511.310684][T12162] ? __mutex_lock+0x1c5/0x1060 [ 511.310727][T12162] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 511.310760][T12162] ? __pfx___mutex_lock+0x10/0x10 [ 511.310805][T12162] ? __fsnotify_parent+0x24b/0xc40 [ 511.310845][T12162] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 511.310882][T12162] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 511.310911][T12162] snd_pcm_oss_sync+0x1de/0x840 [ 511.310944][T12162] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 511.310973][T12162] snd_pcm_oss_release+0x28b/0x310 [ 511.311004][T12162] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 511.311033][T12162] __fput+0x402/0xb70 [ 511.311078][T12162] task_work_run+0x14d/0x240 [ 511.311102][T12162] ? __pfx_task_work_run+0x10/0x10 [ 511.311142][T12162] ? __pfx___do_sys_close_range+0x10/0x10 [ 511.311180][T12162] exit_to_user_mode_loop+0xeb/0x110 [ 511.311219][T12162] do_syscall_64+0x41c/0x4c0 [ 511.311271][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.311296][T12162] RIP: 0033:0x7f70a598eba9 [ 511.311317][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.311343][T12162] RSP: 002b:00007f70a67d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 511.311366][T12162] RAX: 0000000000000000 RBX: 00007f70a5bd6090 RCX: 00007f70a598eba9 [ 511.311383][T12162] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 511.311399][T12162] RBP: 00007f70a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 511.311414][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.311430][T12162] R13: 00007f70a5bd6128 R14: 00007f70a5bd6090 R15: 00007fff319293d8 [ 511.311461][T12162] [ 511.570436][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.576866][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.733854][T12168] FAULT_INJECTION: forcing a failure. [ 511.733854][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 511.805952][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.2.1443 Not tainted syzkaller #0 PREEMPT(full) [ 511.805998][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.806019][T12168] Call Trace: [ 511.806031][T12168] [ 511.806044][T12168] dump_stack_lvl+0x16c/0x1f0 [ 511.806101][T12168] should_fail_ex+0x512/0x640 [ 511.806153][T12168] ? fs_reclaim_acquire+0xae/0x150 [ 511.806207][T12168] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 511.806257][T12168] should_failslab+0xc2/0x120 [ 511.806302][T12168] __kmalloc_noprof+0xd2/0x510 [ 511.806352][T12168] tomoyo_realpath_from_path+0xc2/0x6e0 [ 511.806407][T12168] ? tomoyo_profile+0x47/0x60 [ 511.806442][T12168] tomoyo_path_number_perm+0x245/0x580 [ 511.806483][T12168] ? tomoyo_path_number_perm+0x237/0x580 [ 511.806542][T12168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.806588][T12168] ? find_held_lock+0x2b/0x80 [ 511.806660][T12168] ? find_held_lock+0x2b/0x80 [ 511.806692][T12168] ? hook_file_ioctl_common+0x145/0x410 [ 511.806747][T12168] ? __fget_files+0x20e/0x3c0 [ 511.806792][T12168] security_file_ioctl+0x9b/0x240 [ 511.806839][T12168] __x64_sys_ioctl+0xb7/0x210 [ 511.806898][T12168] do_syscall_64+0xcd/0x4c0 [ 511.806954][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.806988][T12168] RIP: 0033:0x7f55dc98eba9 [ 511.807015][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.807048][T12168] RSP: 002b:00007f55dd7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.807080][T12168] RAX: ffffffffffffffda RBX: 00007f55dcbd5fa0 RCX: 00007f55dc98eba9 [ 511.807102][T12168] RDX: 0000000000000000 RSI: 0000000000006f2a RDI: 0000000000000004 [ 511.807123][T12168] RBP: 00007f55dd7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 511.807143][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.807163][T12168] R13: 00007f55dcbd6038 R14: 00007f55dcbd5fa0 R15: 00007ffe634ea798 [ 511.807206][T12168] [ 512.022587][T12168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.069261][ T30] audit: type=1326 audit(1757730470.573:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12167 comm="syz.2.1443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55dc98eba9 code=0x0 [ 512.091112][ T30] audit: type=1326 audit(1757730470.623:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.0.1445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 512.130691][T12168] FAULT_INJECTION: forcing a failure. [ 512.130691][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 512.143527][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.2.1443 Not tainted syzkaller #0 PREEMPT(full) [ 512.143576][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.143597][T12168] Call Trace: [ 512.143607][T12168] [ 512.143620][T12168] dump_stack_lvl+0x16c/0x1f0 [ 512.143675][T12168] should_fail_ex+0x512/0x640 [ 512.143726][T12168] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 512.143765][T12168] should_failslab+0xc2/0x120 [ 512.143810][T12168] __kmalloc_cache_noprof+0x6a/0x3e0 [ 512.143848][T12168] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 512.143891][T12168] ? kasan_save_track+0x14/0x30 [ 512.143936][T12168] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 512.143983][T12168] ? __mutex_lock+0x1c5/0x1060 [ 512.144038][T12168] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 512.144080][T12168] ? __pfx___mutex_lock+0x10/0x10 [ 512.144139][T12168] ? __fsnotify_parent+0x24b/0xc40 [ 512.144185][T12168] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 512.144226][T12168] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.144264][T12168] snd_pcm_oss_sync+0x1de/0x840 [ 512.144310][T12168] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.144349][T12168] snd_pcm_oss_release+0x28b/0x310 [ 512.144391][T12168] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.144428][T12168] __fput+0x402/0xb70 [ 512.144486][T12168] task_work_run+0x14d/0x240 [ 512.144518][T12168] ? __pfx_task_work_run+0x10/0x10 [ 512.144578][T12168] ? __pfx___do_sys_close_range+0x10/0x10 [ 512.144629][T12168] exit_to_user_mode_loop+0xeb/0x110 [ 512.144680][T12168] do_syscall_64+0x41c/0x4c0 [ 512.144735][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.144767][T12168] RIP: 0033:0x7f55dc98eba9 [ 512.144793][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.144826][T12168] RSP: 002b:00007f55dd7ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 512.144856][T12168] RAX: 0000000000000000 RBX: 00007f55dcbd5fa0 RCX: 00007f55dc98eba9 [ 512.144878][T12168] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 512.144898][T12168] RBP: 00007f55dca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 512.144918][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.144937][T12168] R13: 00007f55dcbd6038 R14: 00007f55dcbd5fa0 R15: 00007ffe634ea798 [ 512.144980][T12168] [ 513.110068][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1448'. [ 513.239115][T12188] FAULT_INJECTION: forcing a failure. [ 513.239115][T12188] name failslab, interval 1, probability 0, space 0, times 0 [ 513.275333][T12188] CPU: 1 UID: 0 PID: 12188 Comm: syz.3.1449 Not tainted syzkaller #0 PREEMPT(full) [ 513.275380][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.275403][T12188] Call Trace: [ 513.275416][T12188] [ 513.275429][T12188] dump_stack_lvl+0x16c/0x1f0 [ 513.275486][T12188] should_fail_ex+0x512/0x640 [ 513.275540][T12188] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 513.275588][T12188] should_failslab+0xc2/0x120 [ 513.275645][T12188] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.275687][T12188] ? __kernfs_new_node+0xd2/0x8e0 [ 513.275734][T12188] __kernfs_new_node+0xd2/0x8e0 [ 513.275784][T12188] ? __pfx___kernfs_new_node+0x10/0x10 [ 513.275839][T12188] ? find_held_lock+0x2b/0x80 [ 513.275874][T12188] ? kernfs_root+0xee/0x2a0 [ 513.275926][T12188] kernfs_new_node+0x13c/0x1e0 [ 513.275985][T12188] __kernfs_create_file+0x53/0x350 [ 513.276025][T12188] sysfs_add_file_mode_ns+0x207/0x3c0 [ 513.276080][T12188] internal_create_group+0x578/0xf30 [ 513.276138][T12188] ? __pfx_internal_create_group+0x10/0x10 [ 513.276199][T12188] sysfs_slab_add+0x1a3/0x1e0 [ 513.276241][T12188] do_kmem_cache_create+0x529/0x720 [ 513.276285][T12188] ? __kmem_cache_create_args+0x205/0x390 [ 513.276331][T12188] __kmem_cache_create_args+0x225/0x390 [ 513.276376][T12188] mon_text_open+0x313/0x4f0 [ 513.276419][T12188] ? __pfx_mon_text_open+0x10/0x10 [ 513.276457][T12188] ? __debugfs_file_get+0x1fe/0x840 [ 513.276511][T12188] ? __pfx_mon_text_ctor+0x10/0x10 [ 513.276555][T12188] ? __pfx_apparmor_file_open+0x10/0x10 [ 513.276590][T12188] ? lockdown_is_locked_down+0x3f/0x130 [ 513.276626][T12188] ? bpf_lsm_locked_down+0x9/0x10 [ 513.276673][T12188] ? __pfx_mon_text_open+0x10/0x10 [ 513.276715][T12188] full_proxy_open_regular+0x1b6/0x360 [ 513.276755][T12188] do_dentry_open+0x982/0x1530 [ 513.276800][T12188] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 513.276847][T12188] vfs_open+0x82/0x3f0 [ 513.276904][T12188] path_openat+0x1de4/0x2cb0 [ 513.276960][T12188] ? __pfx_path_openat+0x10/0x10 [ 513.277012][T12188] do_filp_open+0x20b/0x470 [ 513.277056][T12188] ? __pfx_do_filp_open+0x10/0x10 [ 513.277127][T12188] ? alloc_fd+0x471/0x7d0 [ 513.277176][T12188] do_sys_openat2+0x11b/0x1d0 [ 513.277229][T12188] ? __pfx_do_sys_openat2+0x10/0x10 [ 513.277281][T12188] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 513.277350][T12188] __x64_sys_openat+0x174/0x210 [ 513.277383][T12188] ? __pfx___x64_sys_openat+0x10/0x10 [ 513.277433][T12188] do_syscall_64+0xcd/0x4c0 [ 513.277491][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.277526][T12188] RIP: 0033:0x7fef1318eba9 [ 513.277553][T12188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.277587][T12188] RSP: 002b:00007fef13f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.277619][T12188] RAX: ffffffffffffffda RBX: 00007fef133d5fa0 RCX: 00007fef1318eba9 [ 513.277649][T12188] RDX: 0000000000101080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 513.277672][T12188] RBP: 00007fef13211e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.277693][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.277714][T12188] R13: 00007fef133d6038 R14: 00007fef133d5fa0 R15: 00007ffd09806e78 [ 513.277759][T12188] [ 513.278945][T12188] SLUB: Unable to add cache mon_text_ffff888045ccc800 to sysfs [ 514.106372][T12206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152 [ 514.614676][T12208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153 [ 515.605818][T12206] openvswitch: HfR: Dropping previously announced user features [ 517.340228][T12242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1460'. [ 517.703046][T12257] FAULT_INJECTION: forcing a failure. [ 517.703046][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 517.775520][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.1.1467 Not tainted syzkaller #0 PREEMPT(full) [ 517.775564][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.775585][T12257] Call Trace: [ 517.775597][T12257] [ 517.775610][T12257] dump_stack_lvl+0x16c/0x1f0 [ 517.775667][T12257] should_fail_ex+0x512/0x640 [ 517.775720][T12257] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 517.775766][T12257] should_failslab+0xc2/0x120 [ 517.775812][T12257] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 517.775854][T12257] ? alloc_empty_file+0x55/0x1e0 [ 517.775910][T12257] alloc_empty_file+0x55/0x1e0 [ 517.775962][T12257] path_openat+0xda/0x2cb0 [ 517.776000][T12257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.776049][T12257] ? __pfx_path_openat+0x10/0x10 [ 517.776093][T12257] ? __lock_acquire+0xb97/0x1ce0 [ 517.776149][T12257] do_filp_open+0x20b/0x470 [ 517.776191][T12257] ? __pfx_do_filp_open+0x10/0x10 [ 517.776262][T12257] ? _raw_spin_unlock+0x28/0x50 [ 517.776306][T12257] ? alloc_fd+0x471/0x7d0 [ 517.776354][T12257] do_sys_openat2+0x11b/0x1d0 [ 517.776408][T12257] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.776469][T12257] ? __fget_files+0x20e/0x3c0 [ 517.776512][T12257] __x64_sys_open+0x153/0x1e0 [ 517.776563][T12257] ? __pfx___x64_sys_open+0x10/0x10 [ 517.776622][T12257] ? rcu_is_watching+0x12/0xc0 [ 517.776658][T12257] do_syscall_64+0xcd/0x4c0 [ 517.776712][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.776745][T12257] RIP: 0033:0x7fbc0018eba9 [ 517.776770][T12257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.776801][T12257] RSP: 002b:00007fbc01010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 517.776832][T12257] RAX: ffffffffffffffda RBX: 00007fbc003d5fa0 RCX: 00007fbc0018eba9 [ 517.776853][T12257] RDX: 0000000000000064 RSI: 0000000000000400 RDI: 0000200000000000 [ 517.776873][T12257] RBP: 00007fbc01010090 R08: 0000000000000000 R09: 0000000000000000 [ 517.776893][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.776913][T12257] R13: 00007fbc003d6038 R14: 00007fbc003d5fa0 R15: 00007ffcea5ef358 [ 517.776956][T12257] [ 518.555604][T12279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154 [ 519.529612][T12284] openvswitch: HfR: Dropping previously announced user features [ 519.740312][T12283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155 [ 520.714397][T12303] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1473'. [ 520.751328][T12301] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1473'. [ 521.099741][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 522.724822][T12357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156 [ 523.264025][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'. [ 523.452925][T12361] openvswitch: HfR: Dropping previously announced user features [ 523.856052][T12358] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157 [ 524.483612][ T30] audit: type=1326 audit(1757748826.106:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.3.1489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef1318eba9 code=0x0 [ 524.553088][T12389] FAULT_INJECTION: forcing a failure. [ 524.553088][T12389] name failslab, interval 1, probability 0, space 0, times 0 [ 524.580592][T12391] FAULT_INJECTION: forcing a failure. [ 524.580592][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 524.593451][T12389] CPU: 1 UID: 0 PID: 12389 Comm: syz.3.1489 Not tainted syzkaller #0 PREEMPT(full) [ 524.593486][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.593502][T12389] Call Trace: [ 524.593510][T12389] [ 524.593519][T12389] dump_stack_lvl+0x16c/0x1f0 [ 524.593563][T12389] should_fail_ex+0x512/0x640 [ 524.593601][T12389] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 524.593631][T12389] should_failslab+0xc2/0x120 [ 524.593663][T12389] __kmalloc_cache_noprof+0x6a/0x3e0 [ 524.593689][T12389] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 524.593725][T12389] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 524.593759][T12389] ? trace_contention_end+0xdd/0x130 [ 524.593796][T12389] ? __mutex_lock+0x1c5/0x1060 [ 524.593858][T12389] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 524.593902][T12389] ? __pfx___mutex_lock+0x10/0x10 [ 524.593968][T12389] ? __fsnotify_parent+0x24b/0xc40 [ 524.594019][T12389] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 524.594060][T12389] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.594099][T12389] snd_pcm_oss_sync+0x1de/0x840 [ 524.594145][T12389] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.594188][T12389] snd_pcm_oss_release+0x28b/0x310 [ 524.594233][T12389] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.594276][T12389] __fput+0x402/0xb70 [ 524.594335][T12389] task_work_run+0x14d/0x240 [ 524.594382][T12389] ? __pfx_task_work_run+0x10/0x10 [ 524.594443][T12389] ? __pfx___do_sys_close_range+0x10/0x10 [ 524.594497][T12389] exit_to_user_mode_loop+0xeb/0x110 [ 524.594553][T12389] do_syscall_64+0x41c/0x4c0 [ 524.594612][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.594648][T12389] RIP: 0033:0x7fef1318eba9 [ 524.594677][T12389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.594713][T12389] RSP: 002b:00007fef113f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 524.594748][T12389] RAX: 0000000000000000 RBX: 00007fef133d6090 RCX: 00007fef1318eba9 [ 524.594772][T12389] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 524.594794][T12389] RBP: 00007fef13211e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.594816][T12389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.594836][T12389] R13: 00007fef133d6128 R14: 00007fef133d6090 R15: 00007ffd09806e78 [ 524.594882][T12389] [ 524.837588][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.1.1491 Not tainted syzkaller #0 PREEMPT(full) [ 524.837632][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.837653][T12391] Call Trace: [ 524.837665][T12391] [ 524.837677][T12391] dump_stack_lvl+0x16c/0x1f0 [ 524.837734][T12391] should_fail_ex+0x512/0x640 [ 524.837786][T12391] ? fs_reclaim_acquire+0xae/0x150 [ 524.837840][T12391] ? tomoyo_encode2+0x100/0x3e0 [ 524.837886][T12391] should_failslab+0xc2/0x120 [ 524.837931][T12391] __kmalloc_noprof+0xd2/0x510 [ 524.837970][T12391] ? d_absolute_path+0x136/0x1a0 [ 524.838025][T12391] tomoyo_encode2+0x100/0x3e0 [ 524.838080][T12391] tomoyo_encode+0x29/0x50 [ 524.838126][T12391] tomoyo_realpath_from_path+0x18f/0x6e0 [ 524.838196][T12391] tomoyo_path_number_perm+0x245/0x580 [ 524.838237][T12391] ? tomoyo_path_number_perm+0x237/0x580 [ 524.838282][T12391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 524.838328][T12391] ? find_held_lock+0x2b/0x80 [ 524.838399][T12391] ? find_held_lock+0x2b/0x80 [ 524.838431][T12391] ? hook_file_ioctl_common+0x145/0x410 [ 524.838486][T12391] ? __fget_files+0x20e/0x3c0 [ 524.838531][T12391] security_file_ioctl+0x9b/0x240 [ 524.838578][T12391] __x64_sys_ioctl+0xb7/0x210 [ 524.838636][T12391] do_syscall_64+0xcd/0x4c0 [ 524.838690][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.838724][T12391] RIP: 0033:0x7fbc0018eba9 [ 524.838750][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.838783][T12391] RSP: 002b:00007fbc01010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.838815][T12391] RAX: ffffffffffffffda RBX: 00007fbc003d5fa0 RCX: 00007fbc0018eba9 [ 524.838837][T12391] RDX: 0000000000000000 RSI: 0000000000006f2a RDI: 0000000000000004 [ 524.838858][T12391] RBP: 00007fbc01010090 R08: 0000000000000000 R09: 0000000000000000 [ 524.838879][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.838899][T12391] R13: 00007fbc003d6038 R14: 00007fbc003d5fa0 R15: 00007ffcea5ef358 [ 524.838942][T12391] [ 524.838969][T12391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 524.976006][T12396] binder: 12393:12396 ioctl c018620c 0 returned -22 [ 524.979386][ T30] audit: type=1326 audit(1757748826.457:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.1.1491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 524.998662][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.018596][T12391] FAULT_INJECTION: forcing a failure. [ 525.018596][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 525.118689][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.1.1491 Not tainted syzkaller #0 PREEMPT(full) [ 525.118732][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.118752][T12391] Call Trace: [ 525.118763][T12391] [ 525.118777][T12391] dump_stack_lvl+0x16c/0x1f0 [ 525.118831][T12391] should_fail_ex+0x512/0x640 [ 525.118881][T12391] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 525.118919][T12391] should_failslab+0xc2/0x120 [ 525.118963][T12391] __kmalloc_cache_noprof+0x6a/0x3e0 [ 525.118999][T12391] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 525.119041][T12391] ? kasan_save_track+0x14/0x30 [ 525.119078][T12391] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 525.119120][T12391] ? __mutex_lock+0x1c5/0x1060 [ 525.119171][T12391] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 525.119213][T12391] ? __pfx___mutex_lock+0x10/0x10 [ 525.119274][T12391] ? __fsnotify_parent+0x24b/0xc40 [ 525.119334][T12391] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 525.119374][T12391] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 525.119411][T12391] snd_pcm_oss_sync+0x1de/0x840 [ 525.119454][T12391] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 525.119493][T12391] snd_pcm_oss_release+0x28b/0x310 [ 525.119534][T12391] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 525.119572][T12391] __fput+0x402/0xb70 [ 525.119629][T12391] task_work_run+0x14d/0x240 [ 525.119667][T12391] ? __pfx_task_work_run+0x10/0x10 [ 525.119719][T12391] ? __pfx___do_sys_close_range+0x10/0x10 [ 525.119769][T12391] exit_to_user_mode_loop+0xeb/0x110 [ 525.119821][T12391] do_syscall_64+0x41c/0x4c0 [ 525.119875][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.119908][T12391] RIP: 0033:0x7fbc0018eba9 [ 525.119934][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.119965][T12391] RSP: 002b:00007fbc01010038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 525.119995][T12391] RAX: 0000000000000000 RBX: 00007fbc003d5fa0 RCX: 00007fbc0018eba9 [ 525.120016][T12391] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 525.120035][T12391] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.120055][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.120074][T12391] R13: 00007fbc003d6038 R14: 00007fbc003d5fa0 R15: 00007ffcea5ef358 [ 525.120115][T12391] [ 525.304918][T12404] busy [ 525.763413][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1496'. [ 527.726060][T12433] can: request_module (can-proto-3) failed. [ 527.755503][T12428] openvswitch: HfR: Dropping previously announced user features [ 528.499916][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 529.972068][T12495] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158 [ 530.202204][T12497] can: request_module (can-proto-0) failed. [ 530.452172][T12501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159 [ 531.031252][T12495] openvswitch: HfR: Dropping previously announced user features [ 531.078437][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1519'. [ 531.550141][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'. [ 531.626267][T12532] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 533.532493][T12558] openvswitch: HfR: Dropping previously announced user features [ 533.629955][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 533.828079][T12558] HfR: left promiscuous mode [ 533.953088][T12560] HfR: entered promiscuous mode [ 534.149832][T12576] FAULT_INJECTION: forcing a failure. [ 534.149832][T12576] name fail_futex, interval 1, probability 0, space 0, times 0 [ 534.197054][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.2.1530 Not tainted syzkaller #0 PREEMPT(full) [ 534.197118][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.197140][T12576] Call Trace: [ 534.197151][T12576] [ 534.197166][T12576] dump_stack_lvl+0x16c/0x1f0 [ 534.197234][T12576] should_fail_ex+0x512/0x640 [ 534.197289][T12576] ? save_trace+0x1ad/0x380 [ 534.197330][T12576] get_futex_key+0x1d0/0x1560 [ 534.197374][T12576] ? mark_lock+0x32d/0x610 [ 534.197418][T12576] ? __pfx_get_futex_key+0x10/0x10 [ 534.197476][T12576] futex_wake+0xea/0x530 [ 534.197531][T12576] ? __pfx_futex_wake+0x10/0x10 [ 534.197589][T12576] ? lock_acquire+0x179/0x350 [ 534.197635][T12576] ? find_held_lock+0x2b/0x80 [ 534.197675][T12576] do_futex+0x1e3/0x350 [ 534.197721][T12576] ? __pfx_do_futex+0x10/0x10 [ 534.197777][T12576] __x64_sys_futex+0x1e0/0x4c0 [ 534.197828][T12576] ? __pfx___x64_sys_futex+0x10/0x10 [ 534.197875][T12576] ? __pfx___do_sys_prctl+0x10/0x10 [ 534.197944][T12576] do_syscall_64+0xcd/0x4c0 [ 534.198008][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.198044][T12576] RIP: 0033:0x7f55dc98eba9 [ 534.198071][T12576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.198112][T12576] RSP: 002b:00007f55dd7ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.198145][T12576] RAX: ffffffffffffffda RBX: 00007f55dcbd5fa8 RCX: 00007f55dc98eba9 [ 534.198168][T12576] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f55dcbd5fac [ 534.198191][T12576] RBP: 00007f55dcbd5fa0 R08: 00007f55dd7ed000 R09: 0000000000000000 [ 534.198214][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.198235][T12576] R13: 00007f55dcbd6038 R14: 00007ffe634ea6b0 R15: 00007ffe634ea798 [ 534.198281][T12576] [ 534.460314][T12585] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160 [ 534.904667][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 535.639182][T12608] FAULT_INJECTION: forcing a failure. [ 535.639182][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.657440][ T30] audit: type=1326 audit(1757748837.334:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.1.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 535.681267][T12588] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input161 [ 535.756970][T12610] FAULT_INJECTION: forcing a failure. [ 535.756970][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 535.774022][T12610] CPU: 1 UID: 0 PID: 12610 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(full) [ 535.774073][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.774095][T12610] Call Trace: [ 535.774108][T12610] [ 535.774122][T12610] dump_stack_lvl+0x16c/0x1f0 [ 535.774184][T12610] should_fail_ex+0x512/0x640 [ 535.774242][T12610] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 535.774286][T12610] should_failslab+0xc2/0x120 [ 535.774335][T12610] __kmalloc_cache_noprof+0x6a/0x3e0 [ 535.774383][T12610] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 535.774438][T12610] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 535.774489][T12610] ? trace_contention_end+0xdd/0x130 [ 535.774543][T12610] ? __mutex_lock+0x1c5/0x1060 [ 535.774607][T12610] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 535.774655][T12610] ? __pfx___mutex_lock+0x10/0x10 [ 535.774722][T12610] ? __fsnotify_parent+0x24b/0xc40 [ 535.774777][T12610] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 535.774823][T12610] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 535.774873][T12610] snd_pcm_oss_sync+0x1de/0x840 [ 535.774924][T12610] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 535.774968][T12610] snd_pcm_oss_release+0x28b/0x310 [ 535.775016][T12610] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 535.775057][T12610] __fput+0x402/0xb70 [ 535.775121][T12610] task_work_run+0x14d/0x240 [ 535.775157][T12610] ? __pfx_task_work_run+0x10/0x10 [ 535.775216][T12610] ? __pfx___do_sys_close_range+0x10/0x10 [ 535.775272][T12610] exit_to_user_mode_loop+0xeb/0x110 [ 535.775331][T12610] do_syscall_64+0x41c/0x4c0 [ 535.775392][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.775430][T12610] RIP: 0033:0x7fbc0018eba9 [ 535.775459][T12610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.775495][T12610] RSP: 002b:00007fbc00fef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 535.775529][T12610] RAX: 0000000000000000 RBX: 00007fbc003d6090 RCX: 00007fbc0018eba9 [ 535.775554][T12610] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 535.775578][T12610] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 535.775599][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.775622][T12610] R13: 00007fbc003d6128 R14: 00007fbc003d6090 R15: 00007ffcea5ef358 [ 535.775668][T12610] [ 536.080033][T12608] CPU: 1 UID: 0 PID: 12608 Comm: syz.0.1537 Not tainted syzkaller #0 PREEMPT(full) [ 536.080067][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.080082][T12608] Call Trace: [ 536.080090][T12608] [ 536.080107][T12608] dump_stack_lvl+0x16c/0x1f0 [ 536.080149][T12608] should_fail_ex+0x512/0x640 [ 536.080192][T12608] _copy_to_user+0x32/0xd0 [ 536.080220][T12608] simple_read_from_buffer+0xcb/0x170 [ 536.080249][T12608] proc_fail_nth_read+0x197/0x240 [ 536.080276][T12608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.080304][T12608] ? rw_verify_area+0xcf/0x6c0 [ 536.080328][T12608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.080354][T12608] vfs_read+0x1e1/0xcf0 [ 536.080385][T12608] ? __pfx___mutex_lock+0x10/0x10 [ 536.080421][T12608] ? __pfx_vfs_read+0x10/0x10 [ 536.080457][T12608] ? __fget_files+0x20e/0x3c0 [ 536.080491][T12608] ksys_read+0x12a/0x250 [ 536.080518][T12608] ? __pfx_ksys_read+0x10/0x10 [ 536.080546][T12608] ? fput+0x9b/0xd0 [ 536.080584][T12608] do_syscall_64+0xcd/0x4c0 [ 536.080623][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.080647][T12608] RIP: 0033:0x7f70a598d5bc [ 536.080665][T12608] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.080689][T12608] RSP: 002b:00007f70a67fa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.080711][T12608] RAX: ffffffffffffffda RBX: 00007f70a5bd5fa0 RCX: 00007f70a598d5bc [ 536.080727][T12608] RDX: 000000000000000f RSI: 00007f70a67fa0a0 RDI: 0000000000000005 [ 536.080741][T12608] RBP: 00007f70a67fa090 R08: 0000000000000000 R09: 0000000000000000 [ 536.080757][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.080771][T12608] R13: 00007f70a5bd6038 R14: 00007f70a5bd5fa0 R15: 00007fff319293d8 [ 536.080801][T12608] [ 536.081016][ T30] audit: type=1326 audit(1757748837.756:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.0.1537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 536.409360][T12585] openvswitch: HfR: Dropping previously announced user features [ 536.554923][T12613] ima: policy update failed [ 536.588739][ T30] audit: type=1802 audit(1757748838.258:78): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1538" res=0 errno=0 [ 536.946998][ T30] audit: type=1326 audit(1757748838.610:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 537.039674][T12626] block2mtd: illegal erase size [ 537.272893][T12631] FAULT_INJECTION: forcing a failure. [ 537.272893][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 537.350927][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(full) [ 537.350962][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.350977][T12631] Call Trace: [ 537.350987][T12631] [ 537.350996][T12631] dump_stack_lvl+0x16c/0x1f0 [ 537.351042][T12631] should_fail_ex+0x512/0x640 [ 537.351081][T12631] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 537.351114][T12631] should_failslab+0xc2/0x120 [ 537.351147][T12631] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 537.351177][T12631] ? __kernfs_new_node+0xd2/0x8e0 [ 537.351215][T12631] __kernfs_new_node+0xd2/0x8e0 [ 537.351250][T12631] ? __pfx___kernfs_new_node+0x10/0x10 [ 537.351289][T12631] ? find_held_lock+0x2b/0x80 [ 537.351315][T12631] ? kernfs_root+0xee/0x2a0 [ 537.351352][T12631] kernfs_new_node+0x13c/0x1e0 [ 537.351393][T12631] __kernfs_create_file+0x53/0x350 [ 537.351422][T12631] sysfs_add_file_mode_ns+0x207/0x3c0 [ 537.351459][T12631] internal_create_group+0x578/0xf30 [ 537.351500][T12631] ? __pfx_internal_create_group+0x10/0x10 [ 537.351538][T12631] ? kernfs_create_link+0x1bd/0x240 [ 537.351567][T12631] internal_create_groups+0x9d/0x150 [ 537.351603][T12631] device_add+0x6d1/0x1aa0 [ 537.351633][T12631] ? __pfx_device_add+0x10/0x10 [ 537.351659][T12631] ? lockdep_init_map_type+0x5c/0x280 [ 537.351693][T12631] ? __init_waitqueue_head+0xca/0x150 [ 537.351749][T12631] netdev_register_kobject+0x1a9/0x3d0 [ 537.351781][T12631] register_netdevice+0x13dc/0x2270 [ 537.351811][T12631] ? __pfx_register_netdevice+0x10/0x10 [ 537.351844][T12631] ppp_dev_configure+0xa1e/0xd40 [ 537.351888][T12631] ppp_ioctl+0x17e0/0x2670 [ 537.351928][T12631] ? find_held_lock+0x2b/0x80 [ 537.351952][T12631] ? __pfx_ppp_ioctl+0x10/0x10 [ 537.351995][T12631] ? __fget_files+0x20e/0x3c0 [ 537.352026][T12631] ? __pfx_ppp_ioctl+0x10/0x10 [ 537.352065][T12631] __x64_sys_ioctl+0x18b/0x210 [ 537.352106][T12631] do_syscall_64+0xcd/0x4c0 [ 537.352147][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.352172][T12631] RIP: 0033:0x7f70a598eba9 [ 537.352191][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.352216][T12631] RSP: 002b:00007f70a67fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.352239][T12631] RAX: ffffffffffffffda RBX: 00007f70a5bd5fa0 RCX: 00007f70a598eba9 [ 537.352256][T12631] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 537.352271][T12631] RBP: 00007f70a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 537.352286][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.352301][T12631] R13: 00007f70a5bd6038 R14: 00007f70a5bd5fa0 R15: 00007fff319293d8 [ 537.352332][T12631] [ 537.926133][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1544'. [ 538.521626][T12647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1545'. [ 538.571810][T12643] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1545'. [ 538.617700][T12643] kfence: disabled [ 538.808881][T12656] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input162 [ 539.253872][T12660] openvswitch: HfR: Dropping previously announced user features [ 539.977300][T12657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input163 [ 540.920518][T12694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1556'. [ 542.211834][T12732] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input164 [ 542.608162][T12738] random: crng reseeded on system resumption [ 543.079981][T12733] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input165 [ 543.180912][T12732] openvswitch: HfR: Dropping previously announced user features [ 543.305149][T12746] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1564'. [ 544.533323][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 544.886361][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 547.012022][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 547.141848][T12808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1576'. [ 547.555956][T12815] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input166 [ 547.696753][ T30] audit: type=1326 audit(1757748849.426:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.2.1579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55dc98eba9 code=0x0 [ 547.718501][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.775598][T12820] FAULT_INJECTION: forcing a failure. [ 547.775598][T12820] name failslab, interval 1, probability 0, space 0, times 0 [ 547.788393][T12820] CPU: 1 UID: 0 PID: 12820 Comm: syz.2.1579 Not tainted syzkaller #0 PREEMPT(full) [ 547.788439][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.788459][T12820] Call Trace: [ 547.788473][T12820] [ 547.788487][T12820] dump_stack_lvl+0x16c/0x1f0 [ 547.788548][T12820] should_fail_ex+0x512/0x640 [ 547.788603][T12820] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 547.788645][T12820] should_failslab+0xc2/0x120 [ 547.788694][T12820] __kmalloc_cache_noprof+0x6a/0x3e0 [ 547.788732][T12820] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 547.788784][T12820] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 547.788833][T12820] ? trace_contention_end+0xdd/0x130 [ 547.788890][T12820] ? __mutex_lock+0x1c5/0x1060 [ 547.788952][T12820] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 547.788998][T12820] ? __pfx___mutex_lock+0x10/0x10 [ 547.789064][T12820] ? __fsnotify_parent+0x24b/0xc40 [ 547.789117][T12820] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 547.789160][T12820] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 547.789201][T12820] snd_pcm_oss_sync+0x1de/0x840 [ 547.789248][T12820] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 547.789289][T12820] snd_pcm_oss_release+0x28b/0x310 [ 547.789334][T12820] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 547.789374][T12820] __fput+0x402/0xb70 [ 547.789435][T12820] task_work_run+0x14d/0x240 [ 547.789469][T12820] ? __pfx_task_work_run+0x10/0x10 [ 547.789526][T12820] ? __pfx___do_sys_close_range+0x10/0x10 [ 547.789580][T12820] exit_to_user_mode_loop+0xeb/0x110 [ 547.789635][T12820] do_syscall_64+0x41c/0x4c0 [ 547.789694][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.789729][T12820] RIP: 0033:0x7f55dc98eba9 [ 547.789756][T12820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.789792][T12820] RSP: 002b:00007f55dd7cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 547.789826][T12820] RAX: 0000000000000000 RBX: 00007f55dcbd6090 RCX: 00007f55dc98eba9 [ 547.789849][T12820] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 547.789871][T12820] RBP: 00007f55dca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 547.789905][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.789927][T12820] R13: 00007f55dcbd6128 R14: 00007f55dcbd6090 R15: 00007ffe634ea798 [ 547.789974][T12820] [ 548.390481][T12819] openvswitch: HfR: Dropping previously announced user features [ 548.442955][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 548.632153][T12818] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input167 [ 548.801257][ T30] audit: type=1326 audit(1757748850.542:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.2.1583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55dc98eba9 code=0x0 [ 550.165119][T12857] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 550.198034][T12857] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 550.242419][T12857] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 550.253266][T12857] page_type: f5(slab) [ 550.257343][T12857] raw: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 550.266954][T12857] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 550.277453][T12857] head: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 550.286224][T12857] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 550.367601][T12857] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 550.376375][T12857] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 550.446271][T12857] page dumped because: unmovable page [ 550.463619][T12857] page_owner tracks the page as allocated [ 550.565963][T12857] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5877, tgid 5877 (syz-executor), ts 107088196364, free_ts 107071455350 [ 550.614943][T12860] FAULT_INJECTION: forcing a failure. [ 550.614943][T12860] name fail_futex, interval 1, probability 0, space 0, times 0 [ 550.632886][T12860] CPU: 1 UID: 0 PID: 12860 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) [ 550.632936][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.632956][T12860] Call Trace: [ 550.632967][T12860] [ 550.632978][T12860] dump_stack_lvl+0x16c/0x1f0 [ 550.633029][T12860] should_fail_ex+0x512/0x640 [ 550.633080][T12860] get_futex_key+0x1d0/0x1560 [ 550.633121][T12860] ? __pfx_get_futex_key+0x10/0x10 [ 550.633169][T12860] futex_wake+0xea/0x530 [ 550.633212][T12860] ? rcu_is_watching+0x12/0xc0 [ 550.633243][T12860] ? __pfx_futex_wake+0x10/0x10 [ 550.633293][T12860] ? kmem_cache_free+0x2d1/0x4d0 [ 550.633326][T12860] ? fd_install+0x225/0x750 [ 550.633355][T12860] ? putname+0x154/0x1a0 [ 550.633401][T12860] do_futex+0x1e3/0x350 [ 550.633438][T12860] ? __pfx_do_futex+0x10/0x10 [ 550.633484][T12860] __x64_sys_futex+0x1e0/0x4c0 [ 550.633524][T12860] ? __x64_sys_openat+0x174/0x210 [ 550.633559][T12860] ? __pfx___x64_sys_futex+0x10/0x10 [ 550.633597][T12860] ? ksys_read+0x1ac/0x250 [ 550.633643][T12860] do_syscall_64+0xcd/0x4c0 [ 550.633691][T12860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.633720][T12860] RIP: 0033:0x7fef1318eba9 [ 550.633743][T12860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.633772][T12860] RSP: 002b:00007fef13f330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 550.633799][T12860] RAX: ffffffffffffffda RBX: 00007fef133d5fa8 RCX: 00007fef1318eba9 [ 550.633818][T12860] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef133d5fac [ 550.633836][T12860] RBP: 00007fef133d5fa0 R08: 00007fef13f34000 R09: 0000000000000000 [ 550.633855][T12860] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 550.633872][T12860] R13: 00007fef133d6038 R14: 00007ffd09806d90 R15: 00007ffd09806e78 [ 550.633909][T12860] [ 550.694899][T12857] post_alloc_hook+0x1c0/0x230 [ 550.835206][T12857] get_page_from_freelist+0x132b/0x38e0 [ 550.844821][T12857] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 550.850969][T12857] alloc_pages_mpol+0x1fb/0x550 [ 550.856241][T12857] new_slab+0x247/0x330 [ 550.864660][T12857] ___slab_alloc+0xcf2/0x1750 [ 550.874584][T12857] __slab_alloc.constprop.0+0x56/0xb0 [ 550.913053][T12857] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 550.919983][T12857] kmalloc_reserve+0xef/0x2c0 [ 550.929836][T12857] pskb_expand_head+0x238/0x1030 [ 550.987965][T12857] netlink_trim+0x22d/0x310 [ 550.992581][T12857] netlink_broadcast_filtered+0xf1/0xf90 [ 550.998843][T12857] nlmsg_notify+0x9e/0x220 [ 551.003348][T12857] rtmsg_ifinfo+0x174/0x1a0 [ 551.017730][T12857] __dev_notify_flags+0x24c/0x2e0 [ 551.073444][T12857] netif_change_flags+0x108/0x160 [ 551.079133][T12857] page last free pid 5870 tgid 5870 stack trace: [ 551.086276][T12857] __free_frozen_pages+0x7d5/0x10f0 [ 551.091665][T12857] __put_partials+0x165/0x1c0 [ 551.096825][T12857] qlist_free_all+0x4d/0x120 [ 551.101491][T12857] kasan_quarantine_reduce+0x195/0x1e0 [ 551.107502][T12857] __kasan_slab_alloc+0x69/0x90 [ 551.112435][T12857] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 551.119250][T12857] __alloc_skb+0x2b2/0x380 [ 551.123995][T12857] netlink_alloc_large_skb+0x69/0x130 [ 551.129649][T12857] netlink_sendmsg+0x6a1/0xdd0 [ 551.134806][T12857] __sys_sendto+0x4a3/0x520 [ 551.139393][T12857] __x64_sys_sendto+0xe0/0x1c0 [ 551.144692][T12857] do_syscall_64+0xcd/0x4c0 [ 551.149277][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.542579][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'. [ 554.564344][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'. [ 555.172216][T12925] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 556.000841][T12965] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input169 [ 556.029256][T12963] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 557.137710][T12967] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input170 [ 558.243258][T12965] openvswitch: HfR: Dropping previously announced user features [ 558.768377][ T8456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.846850][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 558.997896][ T8456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.044782][ T6169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.054522][ T6169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.069258][ T6169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.090760][ T8456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.104536][ T6169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.121225][ T6169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.789850][ T8456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.009496][ T30] audit: type=1326 audit(1757748861.800:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.0.1620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 560.083949][T13018] FAULT_INJECTION: forcing a failure. [ 560.083949][T13018] name failslab, interval 1, probability 0, space 0, times 0 [ 560.113432][T13018] CPU: 0 UID: 0 PID: 13018 Comm: syz.0.1620 Not tainted syzkaller #0 PREEMPT(full) [ 560.113479][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 560.113501][T13018] Call Trace: [ 560.113513][T13018] [ 560.113527][T13018] dump_stack_lvl+0x16c/0x1f0 [ 560.113585][T13018] should_fail_ex+0x512/0x640 [ 560.113639][T13018] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 560.113681][T13018] should_failslab+0xc2/0x120 [ 560.113728][T13018] __kmalloc_cache_noprof+0x6a/0x3e0 [ 560.113767][T13018] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 560.113819][T13018] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 560.113868][T13018] ? trace_contention_end+0xdd/0x130 [ 560.113918][T13018] ? __mutex_lock+0x1c5/0x1060 [ 560.113979][T13018] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 560.114025][T13018] ? __pfx___mutex_lock+0x10/0x10 [ 560.114089][T13018] ? __fsnotify_parent+0x24b/0xc40 [ 560.114150][T13018] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 560.114193][T13018] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.114240][T13018] snd_pcm_oss_sync+0x1de/0x840 [ 560.114288][T13018] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.114330][T13018] snd_pcm_oss_release+0x28b/0x310 [ 560.114374][T13018] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.114420][T13018] __fput+0x402/0xb70 [ 560.114481][T13018] task_work_run+0x14d/0x240 [ 560.114515][T13018] ? __pfx_task_work_run+0x10/0x10 [ 560.114572][T13018] ? __pfx___do_sys_close_range+0x10/0x10 [ 560.114626][T13018] exit_to_user_mode_loop+0xeb/0x110 [ 560.114680][T13018] do_syscall_64+0x41c/0x4c0 [ 560.114739][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.114774][T13018] RIP: 0033:0x7f70a598eba9 [ 560.114801][T13018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.114836][T13018] RSP: 002b:00007f70a67d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 560.114870][T13018] RAX: 0000000000000000 RBX: 00007f70a5bd6090 RCX: 00007f70a598eba9 [ 560.114892][T13018] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 560.114914][T13018] RBP: 00007f70a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 560.114935][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.114957][T13018] R13: 00007f70a5bd6128 R14: 00007f70a5bd6090 R15: 00007fff319293d8 [ 560.115001][T13018] [ 560.503997][ T8456] veth0_to_bridge: left allmulticast mode [ 560.510496][ T8456] veth0_to_bridge: left promiscuous mode [ 560.518185][ T8456] bridge0: port 4(veth0_to_bridge) entered disabled state [ 560.532024][ T8456] team0: left allmulticast mode [ 560.538102][ T8456] team_slave_0: left allmulticast mode [ 560.544639][ T8456] team_slave_1: left allmulticast mode [ 560.550383][ T8456] team0: left promiscuous mode [ 560.555267][ T8456] team_slave_0: left promiscuous mode [ 560.561020][ T8456] team_slave_1: left promiscuous mode [ 560.567136][ T8456] bridge0: port 3(team0) entered disabled state [ 560.600042][ T8456] bridge_slave_1: left allmulticast mode [ 560.613895][ T8456] bridge_slave_1: left promiscuous mode [ 560.620857][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.640646][ T8456] bridge_slave_0: left allmulticast mode [ 560.662115][ T8456] bridge_slave_0: left promiscuous mode [ 560.670840][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.191003][ T6169] Bluetooth: hci4: command tx timeout [ 561.304418][T13031] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input171 [ 561.542011][ T30] audit: type=1326 audit(1757748863.348:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.2.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55dc98eba9 code=0x0 [ 561.618404][T13036] FAULT_INJECTION: forcing a failure. [ 561.618404][T13036] name failslab, interval 1, probability 0, space 0, times 0 [ 561.698241][T13036] CPU: 1 UID: 0 PID: 13036 Comm: syz.2.1624 Not tainted syzkaller #0 PREEMPT(full) [ 561.698285][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 561.698305][T13036] Call Trace: [ 561.698317][T13036] [ 561.698329][T13036] dump_stack_lvl+0x16c/0x1f0 [ 561.698389][T13036] should_fail_ex+0x512/0x640 [ 561.698445][T13036] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 561.698488][T13036] should_failslab+0xc2/0x120 [ 561.698538][T13036] __kmalloc_cache_noprof+0x6a/0x3e0 [ 561.698578][T13036] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 561.698630][T13036] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 561.698680][T13036] ? trace_contention_end+0xdd/0x130 [ 561.698729][T13036] ? __mutex_lock+0x1c5/0x1060 [ 561.698791][T13036] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 561.698840][T13036] ? __pfx___mutex_lock+0x10/0x10 [ 561.698906][T13036] ? __fsnotify_parent+0x24b/0xc40 [ 561.698961][T13036] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 561.699005][T13036] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 561.699046][T13036] snd_pcm_oss_sync+0x1de/0x840 [ 561.699101][T13036] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 561.699145][T13036] snd_pcm_oss_release+0x28b/0x310 [ 561.699187][T13036] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 561.699225][T13036] __fput+0x402/0xb70 [ 561.699283][T13036] task_work_run+0x14d/0x240 [ 561.699315][T13036] ? __pfx_task_work_run+0x10/0x10 [ 561.699373][T13036] ? __pfx___do_sys_close_range+0x10/0x10 [ 561.699427][T13036] exit_to_user_mode_loop+0xeb/0x110 [ 561.699483][T13036] do_syscall_64+0x41c/0x4c0 [ 561.699540][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.699575][T13036] RIP: 0033:0x7f55dc98eba9 [ 561.699603][T13036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.699638][T13036] RSP: 002b:00007f55dd7cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 561.699671][T13036] RAX: 0000000000000000 RBX: 00007f55dcbd6090 RCX: 00007f55dc98eba9 [ 561.699694][T13036] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 561.699716][T13036] RBP: 00007f55dca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.699737][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.699758][T13036] R13: 00007f55dcbd6128 R14: 00007f55dcbd6090 R15: 00007ffe634ea798 [ 561.699803][T13036] [ 562.161590][T13032] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input172 [ 562.714278][ T8456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.730969][ T8456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.746112][ T8456] bond0 (unregistering): Released all slaves [ 562.828951][T13035] openvswitch: HfR: Dropping previously announced user features [ 562.958011][ T8456] HfR: left promiscuous mode [ 563.261960][ T6169] Bluetooth: hci4: command tx timeout [ 563.960592][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1627'. [ 564.260530][T13073] FAULT_INJECTION: forcing a failure. [ 564.260530][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 564.296484][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz.2.1629 Not tainted syzkaller #0 PREEMPT(full) [ 564.296528][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.296551][T13073] Call Trace: [ 564.296564][T13073] [ 564.296577][T13073] dump_stack_lvl+0x16c/0x1f0 [ 564.296635][T13073] should_fail_ex+0x512/0x640 [ 564.296685][T13073] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 564.296742][T13073] should_failslab+0xc2/0x120 [ 564.296788][T13073] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 564.296833][T13073] ? __kernfs_new_node+0xd2/0x8e0 [ 564.296884][T13073] __kernfs_new_node+0xd2/0x8e0 [ 564.296935][T13073] ? __pfx___kernfs_new_node+0x10/0x10 [ 564.296992][T13073] ? find_held_lock+0x2b/0x80 [ 564.297030][T13073] ? kernfs_root+0xee/0x2a0 [ 564.297083][T13073] kernfs_new_node+0x13c/0x1e0 [ 564.297142][T13073] __kernfs_create_file+0x53/0x350 [ 564.297183][T13073] sysfs_add_file_mode_ns+0x207/0x3c0 [ 564.297236][T13073] internal_create_group+0x578/0xf30 [ 564.297295][T13073] ? __pfx_internal_create_group+0x10/0x10 [ 564.297360][T13073] sysfs_slab_add+0x1a3/0x1e0 [ 564.297402][T13073] do_kmem_cache_create+0x529/0x720 [ 564.297446][T13073] ? __kmem_cache_create_args+0x205/0x390 [ 564.297491][T13073] __kmem_cache_create_args+0x225/0x390 [ 564.297533][T13073] mon_text_open+0x313/0x4f0 [ 564.297579][T13073] ? __pfx_mon_text_open+0x10/0x10 [ 564.297621][T13073] ? __debugfs_file_get+0x1fe/0x840 [ 564.297674][T13073] ? __pfx_mon_text_ctor+0x10/0x10 [ 564.297730][T13073] ? __pfx_apparmor_file_open+0x10/0x10 [ 564.297767][T13073] ? lockdown_is_locked_down+0x3f/0x130 [ 564.297802][T13073] ? bpf_lsm_locked_down+0x9/0x10 [ 564.297841][T13073] ? __pfx_mon_text_open+0x10/0x10 [ 564.297884][T13073] full_proxy_open_regular+0x1b6/0x360 [ 564.297925][T13073] do_dentry_open+0x982/0x1530 [ 564.297970][T13073] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 564.298014][T13073] vfs_open+0x82/0x3f0 [ 564.298072][T13073] path_openat+0x1de4/0x2cb0 [ 564.298129][T13073] ? __pfx_path_openat+0x10/0x10 [ 564.298184][T13073] do_filp_open+0x20b/0x470 [ 564.298227][T13073] ? __pfx_do_filp_open+0x10/0x10 [ 564.298302][T13073] ? alloc_fd+0x471/0x7d0 [ 564.298353][T13073] do_sys_openat2+0x11b/0x1d0 [ 564.298407][T13073] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.298458][T13073] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 564.298529][T13073] __x64_sys_openat+0x174/0x210 [ 564.298560][T13073] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.298610][T13073] do_syscall_64+0xcd/0x4c0 [ 564.298667][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.298708][T13073] RIP: 0033:0x7f55dc98eba9 [ 564.298736][T13073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.298772][T13073] RSP: 002b:00007f55dd7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.298806][T13073] RAX: ffffffffffffffda RBX: 00007f55dcbd5fa0 RCX: 00007f55dc98eba9 [ 564.298830][T13073] RDX: 0000000000101080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 564.298853][T13073] RBP: 00007f55dca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.298875][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.298897][T13073] R13: 00007f55dcbd6038 R14: 00007f55dcbd5fa0 R15: 00007ffe634ea798 [ 564.298944][T13073] [ 564.300130][T13073] SLUB: Unable to add cache mon_text_ffff888032e27000 to sysfs [ 564.576409][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.799216][T13005] chnl_net:caif_netlink_parms(): no params data found [ 565.204966][T13090] usb usb36: usbfs: process 13090 (syz.2.1632) did not claim interface 0 before use [ 565.329411][ T6169] Bluetooth: hci4: command tx timeout [ 565.522921][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.543183][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.576734][T13005] bridge_slave_0: entered allmulticast mode [ 565.616719][T13005] bridge_slave_0: entered promiscuous mode [ 565.638703][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.646383][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.654295][T13005] bridge_slave_1: entered allmulticast mode [ 565.664701][T13005] bridge_slave_1: entered promiscuous mode [ 565.712630][ T8456] hsr_slave_0: left promiscuous mode [ 565.735009][ T8456] hsr_slave_1: left promiscuous mode [ 565.801725][ T8456] veth1_macvtap: left promiscuous mode [ 565.813494][ T8456] veth0_macvtap: left promiscuous mode [ 565.833976][ T8456] veth1_vlan: left promiscuous mode [ 565.840804][ T8456] veth0_vlan: left promiscuous mode [ 566.117857][T13119] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input173 [ 566.432999][T13121] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input174 [ 567.409964][ T6169] Bluetooth: hci4: command tx timeout [ 568.742799][ T8456] team0 (unregistering): Port device team_slave_1 removed [ 568.783032][ T8456] team0 (unregistering): Port device team_slave_0 removed [ 569.264688][T13122] openvswitch: HfR: Dropping previously announced user features [ 569.440126][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.456026][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.696243][T13005] team0: Port device team_slave_0 added [ 569.705990][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1639'. [ 569.731053][T13005] team0: Port device team_slave_1 added [ 569.947100][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.963225][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.037317][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.051243][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.061577][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.092636][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.561420][T13163] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input175 [ 572.129141][T13005] hsr_slave_0: entered promiscuous mode [ 572.222484][T13005] hsr_slave_1: entered promiscuous mode [ 572.230996][T13005] debugfs: 'hsr0' already exists in 'hsr' [ 572.236972][T13005] Cannot create hsr debugfs directory [ 572.576050][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.582665][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.297989][T13166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input176 [ 573.938816][T13203] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input178 [ 574.570604][T13205] openvswitch: HfR: Dropping previously announced user features [ 575.339044][T13204] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input179 [ 576.117284][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1651'. [ 576.971932][ T30] audit: type=1326 audit(1757748878.858:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13239 comm="syz.0.1654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 577.044000][T13242] FAULT_INJECTION: forcing a failure. [ 577.044000][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 577.118050][T13242] CPU: 1 UID: 0 PID: 13242 Comm: syz.0.1654 Not tainted syzkaller #0 PREEMPT(full) [ 577.118105][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.118128][T13242] Call Trace: [ 577.118140][T13242] [ 577.118154][T13242] dump_stack_lvl+0x16c/0x1f0 [ 577.118215][T13242] should_fail_ex+0x512/0x640 [ 577.118270][T13242] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 577.118313][T13242] should_failslab+0xc2/0x120 [ 577.118362][T13242] __kmalloc_cache_noprof+0x6a/0x3e0 [ 577.118400][T13242] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 577.118452][T13242] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 577.118501][T13242] ? trace_contention_end+0xdd/0x130 [ 577.118559][T13242] ? __mutex_lock+0x1c5/0x1060 [ 577.118622][T13242] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 577.118669][T13242] ? __pfx___mutex_lock+0x10/0x10 [ 577.118734][T13242] ? __fsnotify_parent+0x24b/0xc40 [ 577.118787][T13242] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 577.118831][T13242] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 577.118871][T13242] snd_pcm_oss_sync+0x1de/0x840 [ 577.118917][T13242] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 577.118959][T13242] snd_pcm_oss_release+0x28b/0x310 [ 577.119002][T13242] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 577.119050][T13242] __fput+0x402/0xb70 [ 577.119112][T13242] task_work_run+0x14d/0x240 [ 577.119145][T13242] ? __pfx_task_work_run+0x10/0x10 [ 577.119203][T13242] ? __pfx___do_sys_close_range+0x10/0x10 [ 577.119256][T13242] exit_to_user_mode_loop+0xeb/0x110 [ 577.119311][T13242] do_syscall_64+0x41c/0x4c0 [ 577.119369][T13242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.119404][T13242] RIP: 0033:0x7f70a598eba9 [ 577.119431][T13242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.119474][T13242] RSP: 002b:00007f70a67d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 577.119509][T13242] RAX: 0000000000000000 RBX: 00007f70a5bd6090 RCX: 00007f70a598eba9 [ 577.119532][T13242] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 577.119560][T13242] RBP: 00007f70a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.119581][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.119602][T13242] R13: 00007f70a5bd6128 R14: 00007f70a5bd6090 R15: 00007fff319293d8 [ 577.119648][T13242] [ 577.422092][T13005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 577.493716][T13005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 577.684650][T13005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.786715][T13005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 578.136423][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.277705][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 578.325646][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.386641][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.393901][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.427801][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.435093][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.828697][ T30] audit: type=1326 audit(1757748880.718:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.1657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 580.160604][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.831203][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1662'. [ 580.901520][T13005] veth0_vlan: entered promiscuous mode [ 580.911775][T13289] openvswitch: HfR: Dropping previously announced user features [ 580.966508][T13005] veth1_vlan: entered promiscuous mode [ 581.234134][T13005] veth0_macvtap: entered promiscuous mode [ 581.289810][T13005] veth1_macvtap: entered promiscuous mode [ 581.399452][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.519690][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.593558][T13321] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input180 [ 582.068000][ T6136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.100332][ T6136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.147304][ T6136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.325431][ T6136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.613867][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.638723][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.770186][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.813606][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.816146][T13344] vhci_hcd: invalid port number 21 [ 584.809597][ T30] audit: type=1800 audit(1757748886.719:86): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1672" name="dbroot" dev="configfs" ino=51937 res=0 errno=0 [ 585.516933][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1673'. [ 586.115636][T13408] cougar: G6 mapped to space [ 586.193693][T13402] openvswitch: HfR: Dropping previously announced user features [ 586.805374][T13432] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1678'. [ 586.944006][T13433] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input181 [ 587.112124][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 587.250862][T13437] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input182 [ 588.404383][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 588.442521][T13455] geneve1: entered promiscuous mode [ 588.458948][T13455] geneve1: entered allmulticast mode [ 588.503041][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 588.868622][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 589.567494][T13476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input183 [ 590.585207][T13480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input184 [ 592.169112][ T30] audit: type=1326 audit(1757748894.127:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13501 comm="syz.1.1692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 592.199704][T13476] openvswitch: HfR: Dropping previously announced user features [ 592.244901][T13504] FAULT_INJECTION: forcing a failure. [ 592.244901][T13504] name failslab, interval 1, probability 0, space 0, times 0 [ 592.278759][T13504] CPU: 1 UID: 0 PID: 13504 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(full) [ 592.278803][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.278823][T13504] Call Trace: [ 592.278835][T13504] [ 592.278848][T13504] dump_stack_lvl+0x16c/0x1f0 [ 592.278905][T13504] should_fail_ex+0x512/0x640 [ 592.278958][T13504] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 592.279002][T13504] should_failslab+0xc2/0x120 [ 592.279048][T13504] __kmalloc_cache_noprof+0x6a/0x3e0 [ 592.279085][T13504] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 592.279136][T13504] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 592.279184][T13504] ? trace_contention_end+0xdd/0x130 [ 592.279233][T13504] ? __mutex_lock+0x1c5/0x1060 [ 592.279292][T13504] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 592.279337][T13504] ? __pfx___mutex_lock+0x10/0x10 [ 592.279400][T13504] ? __fsnotify_parent+0x24b/0xc40 [ 592.279450][T13504] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 592.279492][T13504] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 592.279531][T13504] snd_pcm_oss_sync+0x1de/0x840 [ 592.279575][T13504] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 592.279624][T13504] snd_pcm_oss_release+0x28b/0x310 [ 592.279669][T13504] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 592.279708][T13504] __fput+0x402/0xb70 [ 592.279780][T13504] task_work_run+0x14d/0x240 [ 592.279830][T13504] ? __pfx_task_work_run+0x10/0x10 [ 592.279889][T13504] ? __pfx___do_sys_close_range+0x10/0x10 [ 592.279952][T13504] exit_to_user_mode_loop+0xeb/0x110 [ 592.280008][T13504] do_syscall_64+0x41c/0x4c0 [ 592.280077][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.280112][T13504] RIP: 0033:0x7fbc0018eba9 [ 592.280140][T13504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.280173][T13504] RSP: 002b:00007fbc00fef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.280204][T13504] RAX: 0000000000000000 RBX: 00007fbc003d6090 RCX: 00007fbc0018eba9 [ 592.280225][T13504] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 592.280265][T13504] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 592.280287][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.280308][T13504] R13: 00007fbc003d6128 R14: 00007fbc003d6090 R15: 00007ffcea5ef358 [ 592.280353][T13504] [ 592.680850][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1693'. [ 593.229986][ T30] audit: type=1326 audit(1757748895.203:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.1696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55dc98eba9 code=0x0 [ 594.265430][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045ad7c00: rx timeout, send abort [ 594.293134][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888045ad7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 594.551632][T13521] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input185 [ 595.018967][T13538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 595.181583][T13538] bridge0: port 3(veth0_to_bridge) entered blocking state [ 595.247268][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1698'. [ 595.257918][T13538] bridge0: port 3(veth0_to_bridge) entered disabled state [ 595.273884][T13538] veth0_to_bridge: entered allmulticast mode [ 595.362696][T13538] veth0_to_bridge: entered promiscuous mode [ 595.441423][T13538] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.521699][T13528] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input186 [ 595.554867][T13538] bridge0: port 3(veth0_to_bridge) entered blocking state [ 595.562246][T13538] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 595.700667][T13534] openvswitch: HfR: Dropping previously announced user features [ 595.752096][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.771686][T13545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.787931][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.817018][T13545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.275138][T13553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input187 [ 596.294070][ T30] audit: type=1326 audit(1757748898.279:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.1.1702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 596.445919][T13556] FAULT_INJECTION: forcing a failure. [ 596.445919][T13556] name failslab, interval 1, probability 0, space 0, times 0 [ 596.499755][T13556] CPU: 0 UID: 0 PID: 13556 Comm: syz.1.1702 Not tainted syzkaller #0 PREEMPT(full) [ 596.499803][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.499825][T13556] Call Trace: [ 596.499837][T13556] [ 596.499851][T13556] dump_stack_lvl+0x16c/0x1f0 [ 596.499910][T13556] should_fail_ex+0x512/0x640 [ 596.499965][T13556] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 596.500006][T13556] should_failslab+0xc2/0x120 [ 596.500053][T13556] __kmalloc_cache_noprof+0x6a/0x3e0 [ 596.500091][T13556] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 596.500155][T13556] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 596.500205][T13556] ? trace_contention_end+0xdd/0x130 [ 596.500255][T13556] ? __mutex_lock+0x1c5/0x1060 [ 596.500315][T13556] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 596.500362][T13556] ? __pfx___mutex_lock+0x10/0x10 [ 596.500425][T13556] ? __fsnotify_parent+0x24b/0xc40 [ 596.500478][T13556] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 596.500520][T13556] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 596.500560][T13556] snd_pcm_oss_sync+0x1de/0x840 [ 596.500605][T13556] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 596.500647][T13556] snd_pcm_oss_release+0x28b/0x310 [ 596.500690][T13556] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 596.500730][T13556] __fput+0x402/0xb70 [ 596.500790][T13556] task_work_run+0x14d/0x240 [ 596.500824][T13556] ? __pfx_task_work_run+0x10/0x10 [ 596.500882][T13556] ? __pfx___do_sys_close_range+0x10/0x10 [ 596.500933][T13556] exit_to_user_mode_loop+0xeb/0x110 [ 596.500999][T13556] do_syscall_64+0x41c/0x4c0 [ 596.501058][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.501094][T13556] RIP: 0033:0x7fbc0018eba9 [ 596.501129][T13556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.501164][T13556] RSP: 002b:00007fbc00fef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 596.501196][T13556] RAX: 0000000000000000 RBX: 00007fbc003d6090 RCX: 00007fbc0018eba9 [ 596.501219][T13556] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 596.501241][T13556] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 596.501262][T13556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.501282][T13556] R13: 00007fbc003d6128 R14: 00007fbc003d6090 R15: 00007ffcea5ef358 [ 596.501324][T13556] [ 597.004789][T13554] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input188 [ 597.218009][T13553] openvswitch: HfR: Dropping previously announced user features [ 597.339776][T13562] openvswitch: HfR: Dropping previously announced user features [ 597.930189][ T30] audit: type=1326 audit(1757748899.917:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13569 comm="syz.0.1705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a598eba9 code=0x0 [ 597.982127][T13575] FAULT_INJECTION: forcing a failure. [ 597.982127][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 598.030119][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.0.1705 Not tainted syzkaller #0 PREEMPT(full) [ 598.030165][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.030186][T13575] Call Trace: [ 598.030206][T13575] [ 598.030219][T13575] dump_stack_lvl+0x16c/0x1f0 [ 598.030279][T13575] should_fail_ex+0x512/0x640 [ 598.030334][T13575] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 598.030375][T13575] should_failslab+0xc2/0x120 [ 598.030422][T13575] __kmalloc_cache_noprof+0x6a/0x3e0 [ 598.030460][T13575] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 598.030506][T13575] ? kasan_save_track+0x14/0x30 [ 598.030551][T13575] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 598.030606][T13575] ? __mutex_lock+0x1c5/0x1060 [ 598.030667][T13575] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 598.030714][T13575] ? __pfx___mutex_lock+0x10/0x10 [ 598.030778][T13575] ? __fsnotify_parent+0x24b/0xc40 [ 598.030832][T13575] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 598.030876][T13575] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 598.030916][T13575] snd_pcm_oss_sync+0x1de/0x840 [ 598.030963][T13575] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 598.031006][T13575] snd_pcm_oss_release+0x28b/0x310 [ 598.031051][T13575] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 598.031091][T13575] __fput+0x402/0xb70 [ 598.031153][T13575] task_work_run+0x14d/0x240 [ 598.031187][T13575] ? __pfx_task_work_run+0x10/0x10 [ 598.031251][T13575] ? __pfx___do_sys_close_range+0x10/0x10 [ 598.031311][T13575] exit_to_user_mode_loop+0xeb/0x110 [ 598.031366][T13575] do_syscall_64+0x41c/0x4c0 [ 598.031426][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.031461][T13575] RIP: 0033:0x7f70a598eba9 [ 598.031489][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.031525][T13575] RSP: 002b:00007f70a67d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 598.031558][T13575] RAX: 0000000000000000 RBX: 00007f70a5bd6090 RCX: 00007f70a598eba9 [ 598.031580][T13575] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 598.031602][T13575] RBP: 00007f70a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 598.031622][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.031644][T13575] R13: 00007f70a5bd6128 R14: 00007f70a5bd6090 R15: 00007fff319293d8 [ 598.031688][T13575] [ 600.214025][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1713'. [ 600.499809][T13613] FAULT_INJECTION: forcing a failure. [ 600.499809][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 600.529112][T13613] CPU: 1 UID: 0 PID: 13613 Comm: syz.3.1715 Not tainted syzkaller #0 PREEMPT(full) [ 600.529156][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 600.529176][T13613] Call Trace: [ 600.529187][T13613] [ 600.529200][T13613] dump_stack_lvl+0x16c/0x1f0 [ 600.529255][T13613] should_fail_ex+0x512/0x640 [ 600.529307][T13613] ? fs_reclaim_acquire+0xae/0x150 [ 600.529361][T13613] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 600.529417][T13613] should_failslab+0xc2/0x120 [ 600.529462][T13613] __kmalloc_noprof+0xd2/0x510 [ 600.529513][T13613] tomoyo_realpath_from_path+0xc2/0x6e0 [ 600.529569][T13613] ? tomoyo_profile+0x47/0x60 [ 600.529605][T13613] tomoyo_path_number_perm+0x245/0x580 [ 600.529646][T13613] ? tomoyo_path_number_perm+0x237/0x580 [ 600.529693][T13613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.529740][T13613] ? find_held_lock+0x2b/0x80 [ 600.529813][T13613] ? find_held_lock+0x2b/0x80 [ 600.529847][T13613] ? hook_file_ioctl_common+0x145/0x410 [ 600.529903][T13613] ? __fget_files+0x20e/0x3c0 [ 600.529949][T13613] security_file_ioctl+0x9b/0x240 [ 600.530007][T13613] __x64_sys_ioctl+0xb7/0x210 [ 600.530065][T13613] do_syscall_64+0xcd/0x4c0 [ 600.530120][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.530155][T13613] RIP: 0033:0x7efee8d8eba9 [ 600.530182][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.530216][T13613] RSP: 002b:00007efee9cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.530248][T13613] RAX: ffffffffffffffda RBX: 00007efee8fd6090 RCX: 00007efee8d8eba9 [ 600.530270][T13613] RDX: 0000000000000000 RSI: 000000004040aea0 RDI: 0000000000000004 [ 600.530290][T13613] RBP: 00007efee9cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 600.530311][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.530332][T13613] R13: 00007efee8fd6128 R14: 00007efee8fd6090 R15: 00007ffe326c1c28 [ 600.530376][T13613] [ 600.531558][T13613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.975191][T13622] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input189 [ 601.315604][T13624] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input190 [ 601.335817][T13625] FAULT_INJECTION: forcing a failure. [ 601.335817][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 601.375915][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.1.1719 Not tainted syzkaller #0 PREEMPT(full) [ 601.375958][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.375978][T13625] Call Trace: [ 601.375989][T13625] [ 601.376003][T13625] dump_stack_lvl+0x16c/0x1f0 [ 601.376059][T13625] should_fail_ex+0x512/0x640 [ 601.376114][T13625] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 601.376157][T13625] should_failslab+0xc2/0x120 [ 601.376205][T13625] __kmalloc_cache_noprof+0x6a/0x3e0 [ 601.376242][T13625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.376294][T13625] ? kvm_set_irq_routing+0x24f/0x970 [ 601.376352][T13625] kvm_set_irq_routing+0x24f/0x970 [ 601.376416][T13625] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 601.376463][T13625] ? register_lock_class+0x41/0x4c0 [ 601.376511][T13625] ? find_held_lock+0x2b/0x80 [ 601.376547][T13625] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 601.376601][T13625] ? __lock_acquire+0x62e/0x1ce0 [ 601.376667][T13625] ? __lock_acquire+0x62e/0x1ce0 [ 601.376725][T13625] ? __lock_acquire+0x62e/0x1ce0 [ 601.376782][T13625] ? __lock_acquire+0x62e/0x1ce0 [ 601.376857][T13625] ? is_bpf_text_address+0x8a/0x1a0 [ 601.376903][T13625] ? bpf_ksym_find+0x124/0x1c0 [ 601.376940][T13625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.376985][T13625] ? is_bpf_text_address+0x94/0x1a0 [ 601.377030][T13625] ? kernel_text_address+0x8d/0x100 [ 601.377064][T13625] ? __kernel_text_address+0xd/0x40 [ 601.377097][T13625] ? unwind_get_return_address+0x59/0xa0 [ 601.377136][T13625] ? arch_stack_walk+0xa6/0x100 [ 601.377191][T13625] ? stack_trace_save+0x8e/0xc0 [ 601.377231][T13625] ? __pfx_stack_trace_save+0x10/0x10 [ 601.377273][T13625] ? stack_depot_save_flags+0x29/0x9c0 [ 601.377331][T13625] ? __lock_acquire+0xb97/0x1ce0 [ 601.377383][T13625] ? kasan_save_stack+0x42/0x60 [ 601.377423][T13625] ? kasan_save_stack+0x33/0x60 [ 601.377462][T13625] ? kasan_save_track+0x14/0x30 [ 601.377501][T13625] ? kasan_save_free_info+0x3b/0x60 [ 601.377532][T13625] ? __kasan_slab_free+0x60/0x70 [ 601.377574][T13625] ? kfree+0x2b4/0x4d0 [ 601.377610][T13625] kvm_vm_ioctl+0x1a91/0x4000 [ 601.377670][T13625] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 601.377734][T13625] ? kasan_quarantine_put+0x10a/0x240 [ 601.377775][T13625] ? lockdep_hardirqs_on+0x7c/0x110 [ 601.377833][T13625] ? find_held_lock+0x2b/0x80 [ 601.377868][T13625] ? tomoyo_path_number_perm+0x295/0x580 [ 601.377920][T13625] ? tomoyo_path_number_perm+0x18d/0x580 [ 601.377969][T13625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 601.378012][T13625] ? futex_wake+0x1ad/0x530 [ 601.378077][T13625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.378133][T13625] ? do_vfs_ioctl+0x128/0x14f0 [ 601.378190][T13625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 601.378259][T13625] ? find_held_lock+0x2b/0x80 [ 601.378293][T13625] ? hook_file_ioctl_common+0x145/0x410 [ 601.378350][T13625] ? __fget_files+0x20e/0x3c0 [ 601.378396][T13625] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 601.378433][T13625] __x64_sys_ioctl+0x18b/0x210 [ 601.378493][T13625] do_syscall_64+0xcd/0x4c0 [ 601.378550][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.378587][T13625] RIP: 0033:0x7fbc0018eba9 [ 601.378615][T13625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.378660][T13625] RSP: 002b:00007fbc01010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.378692][T13625] RAX: ffffffffffffffda RBX: 00007fbc003d5fa0 RCX: 00007fbc0018eba9 [ 601.378713][T13625] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 601.378733][T13625] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.378753][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.378773][T13625] R13: 00007fbc003d6038 R14: 00007fbc003d5fa0 R15: 00007ffcea5ef358 [ 601.378818][T13625] [ 601.892239][T13622] openvswitch: HfR: Dropping previously announced user features [ 602.897749][T13642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 602.919739][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 604.245585][T13679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input191 [ 605.056961][T13680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input192 [ 605.201691][T13681] HfR: entered promiscuous mode [ 605.249144][T13692] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input193 [ 605.889165][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 606.701366][ T30] audit: type=1326 audit(1757748908.743:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13725 comm="syz.1.1742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0018eba9 code=0x0 [ 606.752701][T13729] FAULT_INJECTION: forcing a failure. [ 606.752701][T13729] name failslab, interval 1, probability 0, space 0, times 0 [ 606.799648][T13729] CPU: 1 UID: 0 PID: 13729 Comm: syz.1.1742 Not tainted syzkaller #0 PREEMPT(full) [ 606.799695][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 606.799717][T13729] Call Trace: [ 606.799729][T13729] [ 606.799742][T13729] dump_stack_lvl+0x16c/0x1f0 [ 606.799799][T13729] should_fail_ex+0x512/0x640 [ 606.799852][T13729] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 606.799900][T13729] should_failslab+0xc2/0x120 [ 606.799946][T13729] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 606.799991][T13729] ? __d_alloc+0x32/0xae0 [ 606.800040][T13729] __d_alloc+0x32/0xae0 [ 606.800090][T13729] d_alloc_pseudo+0x1c/0xc0 [ 606.800143][T13729] alloc_file_pseudo+0xcf/0x230 [ 606.800199][T13729] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 606.800255][T13729] ? _raw_spin_unlock+0x28/0x50 [ 606.800309][T13729] ? alloc_fd+0x471/0x7d0 [ 606.800350][T13729] __anon_inode_getfile+0xe8/0x280 [ 606.800400][T13729] anon_inode_getfd+0x52/0xb0 [ 606.800447][T13729] map_create+0xca1/0x1f80 [ 606.800512][T13729] ? __pfx_map_create+0x10/0x10 [ 606.800557][T13729] ? __might_fault+0xe3/0x190 [ 606.800597][T13729] ? __might_fault+0xe3/0x190 [ 606.800636][T13729] ? __might_fault+0x13b/0x190 [ 606.800693][T13729] __sys_bpf+0x44d2/0x4de0 [ 606.800743][T13729] ? __pfx_futex_wake+0x10/0x10 [ 606.800800][T13729] ? __pfx___sys_bpf+0x10/0x10 [ 606.800854][T13729] ? ksys_write+0x190/0x250 [ 606.800902][T13729] ? do_futex+0x122/0x350 [ 606.800946][T13729] ? __pfx_do_futex+0x10/0x10 [ 606.801029][T13729] ? fput+0x9b/0xd0 [ 606.801080][T13729] ? xfd_validate_state+0x61/0x180 [ 606.801130][T13729] ? __pfx_ksys_write+0x10/0x10 [ 606.801179][T13729] __x64_sys_bpf+0x78/0xc0 [ 606.801208][T13729] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.801255][T13729] do_syscall_64+0xcd/0x4c0 [ 606.801321][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.801355][T13729] RIP: 0033:0x7fbc0018eba9 [ 606.801382][T13729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.801416][T13729] RSP: 002b:00007fbc00fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.801451][T13729] RAX: ffffffffffffffda RBX: 00007fbc003d6090 RCX: 00007fbc0018eba9 [ 606.801473][T13729] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 606.801494][T13729] RBP: 00007fbc00211e19 R08: 0000000000000000 R09: 0000000000000000 [ 606.801516][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.801537][T13729] R13: 00007fbc003d6128 R14: 00007fbc003d6090 R15: 00007ffcea5ef358 [ 606.801581][T13729] [ 606.963095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.969422][T13730] dyndbg: bad flag-op , at start of  [ 606.972385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.977119][T13730] dyndbg: flags parse failed [ 606.982946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.104707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.117245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.129662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.142308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.154674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.167188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.179666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.246854][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1741'. [ 611.936916][ C0] net_ratelimit: 12236 callbacks suppressed [ 611.936942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.956226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.968925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.981344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 611.993971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.007701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.020121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.032625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 612.045046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.058341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.920951][ C0] net_ratelimit: 9126 callbacks suppressed [ 616.920984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.940570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.952982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.965382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 616.977733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.991042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.003509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.015900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 617.028263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.041575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.905330][ C0] net_ratelimit: 9707 callbacks suppressed [ 621.905350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.923501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.935807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 621.948090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.961156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.973522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.985848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 621.998272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.011337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.023651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.889999][ C0] net_ratelimit: 9618 callbacks suppressed [ 626.890019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.908327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.920863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 626.933203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.946360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.959171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.971542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 626.983955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.997292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.009668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.873216][ C0] net_ratelimit: 10010 callbacks suppressed [ 631.873245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.891562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.903938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 631.916263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.929338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.941771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.954134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 631.966502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.979587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.991905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.707807][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.857263][ C0] net_ratelimit: 9984 callbacks suppressed [ 636.857292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.876392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.889316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.901712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.914229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 636.926551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.939680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.952072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.964409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.976930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 641.841650][ C0] net_ratelimit: 10062 callbacks suppressed [ 641.841671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.859926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.872358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 641.884682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.897825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.910901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.923318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.935758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 641.948138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.961352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.825614][ C0] net_ratelimit: 10626 callbacks suppressed [ 646.825636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.844402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.856834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.869654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.882868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.895521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.908698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 646.921305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 646.934022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.946798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.809544][ C0] net_ratelimit: 9479 callbacks suppressed [ 651.809571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.828093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.840558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.853384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.865700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.878073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.891224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 651.903704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 651.916042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.928706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.793858][ C0] net_ratelimit: 9656 callbacks suppressed [ 656.793880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.812508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.824915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.837262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.850540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 656.862963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 656.875277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.888125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.900590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.913457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.778580][ C0] net_ratelimit: 9538 callbacks suppressed [ 661.778602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 661.796975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 661.809421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.822151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.834565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.847490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.859845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.872170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.885235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 661.897612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 666.762786][ C0] net_ratelimit: 9337 callbacks suppressed [ 666.762808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.781003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.793756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.806096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.818441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.831662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 666.844578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 666.856974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.869789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.882202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.746456][ C0] net_ratelimit: 9670 callbacks suppressed [ 671.746477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.764693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.777729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.790135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.802455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.815668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 671.828227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 671.840621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.853387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.865764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.730838][ C0] net_ratelimit: 9296 callbacks suppressed [ 676.730861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.749096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.761421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.774622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 676.787040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 676.799366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.812101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.824542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.837299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.849764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.714486][ C0] net_ratelimit: 9425 callbacks suppressed [ 681.714507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 681.732724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 681.745072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.757980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.770439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.783595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.796026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.808351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.821573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 681.834010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 682.316447][ T7573] Bluetooth: hci4: command 0x0406 tx timeout [ 686.698180][ C0] net_ratelimit: 9367 callbacks suppressed [ 686.698202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 686.716462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.729156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.741497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.754201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.766601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.778915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.791972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 686.804388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 686.816712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.682695][ C0] net_ratelimit: 9592 callbacks suppressed [ 691.682716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.700959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.713706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.726052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.738383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.751579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 691.764102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 691.776411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.789120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.801843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.666331][ C0] net_ratelimit: 9606 callbacks suppressed [ 696.666352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.684547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.698165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 696.710840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 696.723322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.736440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.748751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.761139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.774064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.786411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.650559][ C0] net_ratelimit: 9914 callbacks suppressed [ 701.650579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.668815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.681540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.693935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.706268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.719545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 701.731948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 701.744247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.756967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.769281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.634379][ C0] net_ratelimit: 9789 callbacks suppressed [ 706.634410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.652905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 706.665211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.677516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.690218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 706.702576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.714948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 706.728096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 706.740469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 706.752770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.618534][ C0] net_ratelimit: 9900 callbacks suppressed [ 711.618561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.637558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.649900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.662271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.675039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.687391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 711.699757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.712191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.725421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 711.737870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 716.603579][ C0] net_ratelimit: 10078 callbacks suppressed [ 716.603599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 716.622122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 716.634552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.647290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 716.659624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.672139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.684974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 716.697386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 716.709907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.722393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.433033][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 718.440064][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13725/1:b..l P5882/1:b..l P13739/1:b..l [ 718.451029][ C1] rcu: (detected by 1, t=10502 jiffies, g=67421, q=1622 ncpus=2) [ 718.458881][ C1] task:syz.2.1743 state:R running task stack:26552 pid:13739 tgid:13738 ppid:5872 task_flags:0x400140 flags:0x00004002 [ 718.473776][ C1] Call Trace: [ 718.477108][ C1] [ 718.480076][ C1] __schedule+0x1190/0x5de0 [ 718.484644][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 718.489663][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 718.494675][ C1] ? __pfx___schedule+0x10/0x10 [ 718.499615][ C1] ? mark_held_locks+0x49/0x80 [ 718.504446][ C1] preempt_schedule_irq+0x51/0x90 [ 718.509539][ C1] irqentry_exit+0x36/0x90 [ 718.514039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.520078][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 718.525420][ C1] Code: 0f c1 05 78 44 3f 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d 02 3f 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 718.545089][ C1] RSP: 0018:ffffc900044cec70 EFLAGS: 00000206 [ 718.551207][ C1] RAX: 873733d766798500 RBX: ffffffff8e5c1420 RCX: ffffc900044cec7c [ 718.559226][ C1] RDX: 0000000000000001 RSI: ffffffff8de29cd5 RDI: ffffffff8c163600 [ 718.567244][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 718.575261][ C1] R10: 0000000000000001 R11: 0000000000010817 R12: ffffffff816ab8a4 [ 718.583283][ C1] R13: 0000000000000202 R14: ffff888026a9da00 R15: 0000000000000002 [ 718.591315][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 718.596609][ C1] unwind_next_frame+0x3f9/0x20a0 [ 718.601688][ C1] ? __handle_mm_fault+0x152a/0x2a50 [ 718.607048][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 718.613259][ C1] arch_stack_walk+0x94/0x100 [ 718.618018][ C1] ? handle_mm_fault+0x589/0xd10 [ 718.623024][ C1] stack_trace_save+0x8e/0xc0 [ 718.627772][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 718.633205][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 718.638203][ C1] save_stack+0x160/0x1f0 [ 718.642587][ C1] ? __pfx_save_stack+0x10/0x10 [ 718.647485][ C1] ? post_alloc_hook+0x1c0/0x230 [ 718.652480][ C1] ? get_page_from_freelist+0x132b/0x38e0 [ 718.658256][ C1] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 718.664382][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 718.669469][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 718.675086][ C1] ? shmem_alloc_folio+0x135/0x160 [ 718.680259][ C1] ? shmem_alloc_and_add_folio+0x499/0xc20 [ 718.686116][ C1] ? shmem_get_folio_gfp+0x67f/0x1600 [ 718.691538][ C1] ? shmem_fault+0x1fe/0xa30 [ 718.696196][ C1] ? __do_fault+0x10d/0x490 [ 718.700751][ C1] ? do_pte_missing+0x1a6/0x3ba0 [ 718.705837][ C1] ? __handle_mm_fault+0x152a/0x2a50 [ 718.711234][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 718.716243][ C1] __set_page_owner+0x91/0x550 [ 718.721076][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 718.726509][ C1] ? bad_range+0x261/0x4c0 [ 718.730997][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.736264][ C1] post_alloc_hook+0x1c0/0x230 [ 718.741086][ C1] get_page_from_freelist+0x132b/0x38e0 [ 718.746704][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 718.752057][ C1] ? rcu_is_watching+0x12/0xc0 [ 718.756875][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 718.762826][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 718.767841][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.774233][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 718.779329][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 718.784768][ C1] ? find_held_lock+0x2b/0x80 [ 718.789568][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 718.794593][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 718.800557][ C1] ? policy_nodemask+0xea/0x4e0 [ 718.805472][ C1] alloc_pages_mpol+0x1fb/0x550 [ 718.810400][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 718.815847][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 718.821291][ C1] shmem_alloc_folio+0x135/0x160 [ 718.826281][ C1] shmem_alloc_and_add_folio+0x499/0xc20 [ 718.831991][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 718.838210][ C1] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 718.844169][ C1] shmem_get_folio_gfp+0x67f/0x1600 [ 718.849443][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 718.855222][ C1] ? __pfx_timestamp_truncate+0x10/0x10 [ 718.860842][ C1] shmem_fault+0x1fe/0xa30 [ 718.865328][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 718.870510][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 718.875525][ C1] ? __pfx___up_read+0x10/0x10 [ 718.880375][ C1] ? inode_to_bdi+0x9e/0x160 [ 718.885047][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 718.890572][ C1] __do_fault+0x10d/0x490 [ 718.894965][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 718.900479][ C1] do_pte_missing+0x1a6/0x3ba0 [ 718.905306][ C1] ? find_held_lock+0x2b/0x80 [ 718.910034][ C1] ? __handle_mm_fault+0x14fd/0x2a50 [ 718.915378][ C1] __handle_mm_fault+0x152a/0x2a50 [ 718.920563][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 718.926074][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 718.931951][ C1] ? find_held_lock+0x2b/0x80 [ 718.936693][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 718.943272][ C1] handle_mm_fault+0x589/0xd10 [ 718.948096][ C1] __get_user_pages+0x551/0x34a0 [ 718.953109][ C1] ? down_read_killable+0x220/0x4b0 [ 718.958358][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 718.963805][ C1] faultin_page_range+0x338/0x940 [ 718.968912][ C1] madvise_do_behavior+0x34c/0x530 [ 718.974098][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 718.979800][ C1] ? down_read+0x13d/0x480 [ 718.984286][ C1] do_madvise+0x176/0x240 [ 718.988682][ C1] ? __pfx_do_madvise+0x10/0x10 [ 718.993687][ C1] ? do_futex+0x122/0x350 [ 718.998103][ C1] ? xfd_validate_state+0x61/0x180 [ 719.003287][ C1] __x64_sys_madvise+0xa9/0x110 [ 719.008200][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.013463][ C1] do_syscall_64+0xcd/0x4c0 [ 719.018044][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.023991][ C1] RIP: 0033:0x7f55dc98eba9 [ 719.028449][ C1] RSP: 002b:00007f55dd7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 719.036949][ C1] RAX: ffffffffffffffda RBX: 00007f55dcbd5fa0 RCX: 00007f55dc98eba9 [ 719.044971][ C1] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 719.052986][ C1] RBP: 00007f55dca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 719.061090][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.069230][ C1] R13: 00007f55dcbd6038 R14: 00007f55dcbd5fa0 R15: 00007ffe634ea798 [ 719.077280][ C1] [ 719.080372][ C1] task:udevd state:R running task stack:26376 pid:5882 tgid:5882 ppid:5235 task_flags:0x40014c flags:0x00004002 [ 719.093983][ C1] Call Trace: [ 719.097304][ C1] [ 719.100305][ C1] __schedule+0x1190/0x5de0 [ 719.104988][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 719.110045][ C1] ? __pfx___schedule+0x10/0x10 [ 719.114971][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 719.119987][ C1] ? mark_held_locks+0x49/0x80 [ 719.124809][ C1] preempt_schedule_irq+0x51/0x90 [ 719.129902][ C1] irqentry_exit+0x36/0x90 [ 719.134385][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 719.140431][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x20a0 [ 719.146295][ C1] Code: 89 c3 39 d0 0f 83 fb 15 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d e4 3c fe 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 719.165973][ C1] RSP: 0018:ffffc90003f6f440 EFLAGS: 00000a03 [ 719.172093][ C1] RAX: 000000000000a67a RBX: 0000000000000001 RCX: 000000000000a67a [ 719.180124][ C1] RDX: dffffc0000000000 RSI: 00000000000a9569 RDI: ffffffff9200d6cc [ 719.188139][ C1] RBP: ffffc90003f6f4f8 R08: 0000000000000000 R09: 0000000000000000 [ 719.196162][ C1] R10: 0000000000000001 R11: 000000000000a67a R12: ffffc90003f6f500 [ 719.204325][ C1] R13: ffffc90003f6f4b0 R14: ffffc90003f6f4e5 R15: ffffffff81a67a3d [ 719.212351][ C1] ? stack_trace_save+0x8d/0xc0 [ 719.217327][ C1] ? stack_trace_save+0x8e/0xc0 [ 719.222233][ C1] ? __unwind_start+0x45f/0x7f0 [ 719.227142][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 719.233352][ C1] arch_stack_walk+0x94/0x100 [ 719.238090][ C1] ? stack_trace_save+0x8e/0xc0 [ 719.243035][ C1] stack_trace_save+0x8e/0xc0 [ 719.247780][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 719.253219][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 719.258230][ C1] save_stack+0x160/0x1f0 [ 719.262618][ C1] ? __pfx_save_stack+0x10/0x10 [ 719.267541][ C1] ? page_ext_put+0x3e/0xd0 [ 719.272109][ C1] __reset_page_owner+0x84/0x1a0 [ 719.277108][ C1] free_unref_folios+0xa61/0x16b0 [ 719.282199][ C1] ? mark_held_locks+0x49/0x80 [ 719.287020][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 719.292893][ C1] folios_put_refs+0x56f/0x740 [ 719.297731][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 719.303097][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 719.308800][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 719.315078][ C1] ? __pfx___might_resched+0x10/0x10 [ 719.320438][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 719.326477][ C1] tlb_finish_mmu+0x168/0x7c0 [ 719.331216][ C1] exit_mmap+0x403/0xb90 [ 719.335531][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 719.340371][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 719.345397][ C1] __mmput+0x12a/0x410 [ 719.349537][ C1] mmput+0x62/0x70 [ 719.353342][ C1] do_exit+0x7c7/0x2bf0 [ 719.357616][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 719.362712][ C1] ? __pfx_do_exit+0x10/0x10 [ 719.367377][ C1] ? rcu_is_watching+0x12/0xc0 [ 719.372200][ C1] do_group_exit+0xd3/0x2a0 [ 719.376775][ C1] __x64_sys_exit_group+0x3e/0x50 [ 719.381871][ C1] x64_sys_call+0x14fa/0x1720 [ 719.386605][ C1] do_syscall_64+0xcd/0x4c0 [ 719.391179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.397119][ C1] RIP: 0033:0x7fda83cf16c5 [ 719.401682][ C1] RSP: 002b:00007ffdac74e468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 719.410153][ C1] RAX: ffffffffffffffda RBX: 000055b779899e20 RCX: 00007fda83cf16c5 [ 719.418181][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 719.426192][ C1] RBP: 000055b77985d910 R08: 0000000000000000 R09: 0000000000000000 [ 719.434209][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.442244][ C1] R13: 00007ffdac74e4b0 R14: 0000000000000000 R15: 0000000000000000 [ 719.450294][ C1] [ 719.453362][ C1] task:syz.1.1742 state:R running task stack:26264 pid:13725 tgid:13725 ppid:5877 task_flags:0x400040 flags:0x00004006 [ 719.466951][ C1] Call Trace: [ 719.470269][ C1] [ 719.473237][ C1] __schedule+0x1190/0x5de0 [ 719.477844][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 719.482845][ C1] ? __pfx___schedule+0x10/0x10 [ 719.487776][ C1] ? mark_held_locks+0x49/0x80 [ 719.492599][ C1] preempt_schedule_irq+0x51/0x90 [ 719.497686][ C1] irqentry_exit+0x36/0x90 [ 719.502195][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 719.507757][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 719.513276][ C1] Code: 0f c1 05 78 44 3f 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d 02 3f 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 719.533110][ C1] RSP: 0018:ffffc900045ff890 EFLAGS: 00000206 [ 719.539243][ C1] RAX: d76617dc49fd8a00 RBX: ffffffff8e5c1420 RCX: ffffc900045ff89c [ 719.547257][ C1] RDX: 0000000000000001 RSI: ffffffff8de29cd5 RDI: ffffffff8c163600 [ 719.555372][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 719.563471][ C1] R10: 0000000000000001 R11: 000000000001203f R12: ffffffff816ab8a4 [ 719.571500][ C1] R13: 0000000000000202 R14: ffff888031a45a00 R15: 0000000000000002 [ 719.579532][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 719.584994][ C1] unwind_next_frame+0x3f9/0x20a0 [ 719.590081][ C1] ? __kasan_slab_free+0x60/0x70 [ 719.595087][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 719.601410][ C1] arch_stack_walk+0x94/0x100 [ 719.606149][ C1] ? kfree+0x2b4/0x4d0 [ 719.610355][ C1] stack_trace_save+0x8e/0xc0 [ 719.615086][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 719.620536][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 719.625552][ C1] kasan_save_stack+0x33/0x60 [ 719.630291][ C1] ? kasan_save_stack+0x33/0x60 [ 719.635200][ C1] ? kasan_save_track+0x14/0x30 [ 719.640106][ C1] ? kasan_save_free_info+0x3b/0x60 [ 719.645358][ C1] ? __kasan_slab_free+0x60/0x70 [ 719.650648][ C1] kasan_save_track+0x14/0x30 [ 719.655441][ C1] kasan_save_free_info+0x3b/0x60 [ 719.660537][ C1] __kasan_slab_free+0x60/0x70 [ 719.665363][ C1] kfree+0x2b4/0x4d0 [ 719.669351][ C1] ? kfree+0x2b4/0x4d0 [ 719.673518][ C1] ? snd_pcm_plugin_free+0xb2/0xe0 [ 719.678712][ C1] snd_pcm_plugin_free+0xb2/0xe0 [ 719.683716][ C1] snd_pcm_oss_release_substream+0x11a/0x1f0 [ 719.689762][ C1] ? __pfx_snd_pcm_oss_release_substream+0x10/0x10 [ 719.696321][ C1] snd_pcm_release_substream.part.0+0x199/0x340 [ 719.702654][ C1] snd_pcm_release_substream+0x5b/0x70 [ 719.708183][ C1] snd_pcm_oss_release+0x16f/0x310 [ 719.713365][ C1] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 719.719056][ C1] __fput+0x402/0xb70 [ 719.723116][ C1] task_work_run+0x14d/0x240 [ 719.727751][ C1] ? __pfx_task_work_run+0x10/0x10 [ 719.732945][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 719.738730][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 719.744080][ C1] do_syscall_64+0x41c/0x4c0 [ 719.748831][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.754879][ C1] RIP: 0033:0x7fbc0018eba9 [ 719.759334][ C1] RSP: 002b:00007ffcea5ef4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 719.767800][ C1] RAX: 0000000000000000 RBX: 00007fbc003d7da0 RCX: 00007fbc0018eba9 [ 719.775817][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 719.783834][ C1] RBP: 00007fbc003d7da0 R08: 0000000000037874 R09: 0000001eea5ef7af [ 719.791848][ C1] R10: 00007fbc003d7cb0 R11: 0000000000000246 R12: 00000000000948ec [ 719.799862][ C1] R13: 00007fbc003d6180 R14: ffffffffffffffff R15: 00007ffcea5ef5d0 [ 719.807901][ C1] [ 719.810962][ C1] rcu: rcu_preempt kthread starved for 10278 jiffies! g67421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 719.822204][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 719.832214][ C1] rcu: RCU grace-period kthread stack dump: [ 719.838136][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 719.851729][ C1] Call Trace: [ 719.855069][ C1] [ 719.858044][ C1] __schedule+0x1190/0x5de0 [ 719.862633][ C1] ? __pfx___schedule+0x10/0x10 [ 719.867563][ C1] ? find_held_lock+0x2b/0x80 [ 719.872297][ C1] ? schedule+0x2d7/0x3a0 [ 719.876698][ C1] schedule+0xe7/0x3a0 [ 719.880825][ C1] schedule_timeout+0x123/0x290 [ 719.885727][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 719.891155][ C1] ? __pfx_process_timeout+0x10/0x10 [ 719.896508][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 719.902378][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 719.907904][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 719.912739][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 719.918090][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.923354][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 719.928361][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 719.933315][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 719.939195][ C1] rcu_gp_kthread+0x270/0x380 [ 719.944114][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.949376][ C1] ? rcu_is_watching+0x12/0xc0 [ 719.954197][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.959465][ C1] ? __kthread_parkme+0x19e/0x250 [ 719.964561][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.969914][ C1] kthread+0x3c5/0x780 [ 719.974049][ C1] ? __pfx_kthread+0x10/0x10 [ 719.978712][ C1] ? rcu_is_watching+0x12/0xc0 [ 719.983530][ C1] ? __pfx_kthread+0x10/0x10 [ 719.988182][ C1] ret_from_fork+0x56d/0x730 [ 719.992841][ C1] ? __pfx_kthread+0x10/0x10 [ 719.997503][ C1] ret_from_fork_asm+0x1a/0x30 [ 720.002340][ C1] [ 720.005388][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 720.011747][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 720.020726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 720.030824][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 720.036520][ C1] Code: 3d 64 02 e9 13 0a 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 85 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 720.056182][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 720.062297][ C1] RAX: 000000000055d2b1 RBX: 0000000000000001 RCX: ffffffff8b918b29 [ 720.070310][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f1c9 RDI: ffffffff8c163600 [ 720.078321][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 720.086557][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 720.094576][ C1] R13: ffff88801e2ada00 R14: ffffffff90aba890 R15: 0000000000000000 [ 720.102593][ C1] FS: 0000000000000000(0000) GS:ffff8881247ba000(0000) knlGS:0000000000000000 [ 720.111574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.118202][ C1] CR2: 00005555826105c8 CR3: 0000000031e38000 CR4: 00000000003526f0 [ 720.126225][ C1] Call Trace: [ 720.129546][ C1] [ 720.132516][ C1] default_idle+0x13/0x20 [ 720.136895][ C1] default_idle_call+0x6d/0xb0 [ 720.141716][ C1] do_idle+0x391/0x510 [ 720.145852][ C1] ? __pfx_do_idle+0x10/0x10 [ 720.150520][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 720.155795][ C1] cpu_startup_entry+0x4f/0x60 [ 720.160607][ C1] start_secondary+0x21d/0x2b0 [ 720.165440][ C1] ? __pfx_start_secondary+0x10/0x10 [ 720.170818][ C1] common_startup_64+0x13e/0x148 [ 720.175839][ C1] [ 721.526039][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.586929][ C0] net_ratelimit: 8129 callbacks suppressed [ 721.586957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 721.605491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.617985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.631606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 721.644193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 721.656739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.669755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.683164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.695727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.708269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.053003][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.068948][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.571223][ C0] net_ratelimit: 9517 callbacks suppressed [ 726.571244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.589461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 726.601863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.614314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.627368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 726.639808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:14:1a:05:4b:19, vlan:0) [ 726.652216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.664899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.677965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.690410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)