last executing test programs: 4m53.103306723s ago: executing program 1 (id=1760): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6_vti0/operstate\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) read$auto(r1, 0x0, 0x1) madvise$auto(0x5, 0x4, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r2, r3, 0x0, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub5/status\x00', 0x8100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) pwrite64$auto(r0, &(0x7f0000000000)='\x93)\x00', 0x4, 0x4e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 4m50.711332439s ago: executing program 1 (id=1769): mmap$auto(0x0, 0xa020009, 0xfffffffffffffffb, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x700, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x0, 0x4020009, 0xe, 0xeb1, 0x401, 0x8000) 4m49.867163371s ago: executing program 1 (id=1770): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) r1 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3ff) mmap$auto(0x5, 0x8000, 0x1, 0x58fd, r1, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) r2 = socket(0x23, 0x80805, 0x0) listen$auto(r2, 0x4) gettimeofday$auto(&(0x7f0000000040)={0x59, 0x7}, &(0x7f0000000080)={0x3, 0x9}) poll$auto(&(0x7f0000000000)={r2, 0x1963, 0x81}, 0x5, 0x10001) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x90440, 0x0) r4 = socket(0x25, 0x1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r5, 0x0, 0xf, 0xfffffff8, &(0x7f0000000000)=@in={0x2, 0x4e1b, @remote}, 0x8000) setsockopt$auto(r4, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x8, 0x4, 0xffff0054, 0x0) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8a00, 0x0) r7 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r7, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6) setsockopt$auto(r3, 0x113, 0x3, 0x0, 0x79ad226b) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r8, r8, 0x0, 0x4f64a1d5) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c) writev$auto(r9, &(0x7f0000000200)={0x0, 0x9}, 0x7) 4m48.342572027s ago: executing program 1 (id=1772): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x20000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r3, 0x300000000000) getsockopt$auto_SO_RCVTIMEO_NEW(r3, 0x8, 0x42, &(0x7f0000000000)='^{\x00', 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) r5 = userfaultfd$auto(0x1b8) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/input/event2\x00', 0x800, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000001d40)={0x9, 0x8, 0x2, 0x4, "29d18d0f82f4ce7a93da557fa6d68d8ccf8a2add675c4a9ae916dfbcaf306e81"}) syz_clone3(&(0x7f0000000240)={0x1002000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x38}, &(0x7f00000000c0)=""/40, 0x28, &(0x7f0000000100)=""/255, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r5}}, 0x58) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={"fcd30c932b76238fb656aeefab37d8c881c58d8c8d8b79770bcd84893f97075a", 0x4, 0xc, 0x80000001, 0x80000006, 0xfbfd, r7}) set_tid_address$auto(&(0x7f0000000340)=0x7) shmctl$auto_SHM_STAT_ANY(0xfffffff1, 0xf, &(0x7f0000000440)={{0x0, 0xee01, 0x0, 0xfffffffd, 0x8, 0x0, 0x6}, 0x101, 0xffffffffffffffff, 0x6, 0x7d1, @inferred, @raw, 0x8, 0x0, &(0x7f0000000380), &(0x7f00000003c0)="2775a99416dd08a53af8f53aa62d51f410934226b7275a99b872997506bcc5d7e74632529680a75753f8075fb3032d3bfc5d864abfe306b3a57d73daf887d7935eb2a78882d8b06720936bb8f7053e66ac4cb498c12cbab0c14d866207c6d427af"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop15\x00', 0x555a43, 0x0) 4m43.937819584s ago: executing program 1 (id=1781): mmap$auto(0x0, 0xa020009, 0xfffffffffffffffb, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x1f00, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x0, 0x4020009, 0xe, 0xeb1, 0x401, 0x8000) 4m43.656241507s ago: executing program 1 (id=1782): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/statm\x00', 0x100, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x0, 0x8, 0xeb1, r0, 0x10001) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen$auto(r1, 0x4) gettimeofday$auto(&(0x7f0000000040)={0x59, 0x7}, &(0x7f0000000080)={0x3, 0x9}) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0xb81f, 0x0) sendto$auto(r4, 0x0, 0xf, 0xfffffff8, &(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x7ffe) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x8, 0x4, 0xffff0054, 0x0) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8a00, 0x0) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, 0x0) setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d5) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c) writev$auto(r8, &(0x7f0000000200)={0x0, 0x9}, 0x7) 4m28.575255484s ago: executing program 32 (id=1782): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/statm\x00', 0x100, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x0, 0x8, 0xeb1, r0, 0x10001) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen$auto(r1, 0x4) gettimeofday$auto(&(0x7f0000000040)={0x59, 0x7}, &(0x7f0000000080)={0x3, 0x9}) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0xb81f, 0x0) sendto$auto(r4, 0x0, 0xf, 0xfffffff8, &(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x7ffe) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x8, 0x4, 0xffff0054, 0x0) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x8a00, 0x0) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, 0x0) setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d5) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c) writev$auto(r8, &(0x7f0000000200)={0x0, 0x9}, 0x7) 48.316638884s ago: executing program 4 (id=2404): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='\'', 0x8001, 0x9}, 0x8}, 0x1, 0x9) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram12\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) 47.801043636s ago: executing program 4 (id=2405): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) ioctl$auto(0x20000000000003, 0x50434900, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) 47.140572565s ago: executing program 4 (id=2417): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x5, 0x21ea, 0x7fff, 0x83, 0x9, 0x7, 0x202e, 0x5, 0x101}, 0x6f4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r0, 0x0, 0x7ff) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r3, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x688140, 0x0) 46.569764918s ago: executing program 4 (id=2410): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x400080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) r1 = socket(0x29, 0x3, 0x5) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x19, 0x0, 0x0, 0x0, 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) pwrite64$auto(r1, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x4000000000000001, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) 45.389252827s ago: executing program 4 (id=2416): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/stats\x00', 0xaa102, 0x0) write$auto(r1, 0x0, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f00000027c0)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8840) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 44.896663654s ago: executing program 4 (id=2419): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xd, 0x0, 0x0, 0x0, 0x440a48d5) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x1, 0xfffffffb) r0 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x410080, 0x0) mmap$auto(0x7, 0x10001, 0x4000000000e3, 0x40eb2, r0, 0x300000000000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) ioctl$auto(r1, 0x4b72, r2) 29.623297956s ago: executing program 33 (id=2419): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xd, 0x0, 0x0, 0x0, 0x440a48d5) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x1, 0xfffffffb) r0 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x410080, 0x0) mmap$auto(0x7, 0x10001, 0x4000000000e3, 0x40eb2, r0, 0x300000000000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) ioctl$auto(r1, 0x4b72, r2) 19.721166804s ago: executing program 3 (id=2472): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x40c80, 0x0) pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) write$auto(0x3, 0x0, 0xfdef) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x80000001, 0xa, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x7, 0x0) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x1040, &(0x7f00000001c0)={0x0, 0x2000000000000be}, 0x1, 0x0, 0x0, 0x9}}, 0x2, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 17.748000495s ago: executing program 3 (id=2475): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6ae, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)='4', 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) r3 = socket(0xa, 0x3, 0x3a) socket(0x5, 0x80002, 0x644707bc) ioctl$auto(r3, 0x8982, 0x1) r4 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r6, 0x125d, 0x0) io_setup$auto(0xe, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x1, 0xffffffff, 0x8, &(0x7f00000000c0)=0xff) 12.497857333s ago: executing program 2 (id=2488): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0) ioctl$auto(r1, 0x5111, 0x3) read$auto(r0, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0x7}, 0x3) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r3, 0x0, 0x803) (async) epoll_create1$auto(0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x10100000a3d9) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0xfffffffffffffffa, 0x202000b, 0x1, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 11.210367586s ago: executing program 2 (id=2492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) socket(0x11, 0x80003, 0x300) socket(0x22, 0x5, 0x2000003) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00$', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25690000000a004e014039979607aa0000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20040004) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0xa, 0x0) socket(0x1e, 0x3, 0x0) pipe$auto(0x0) socket(0xa, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000001c0), r4) sendmsg$auto_NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ae012abd7000ffdbdf25020000000807000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) sendmsg$auto_NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_VERSION={0x8, 0x3, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 10.682777143s ago: executing program 2 (id=2494): ioctl$auto(0xffffffffffffffff, 0xc0205647, 0xffffffffffffffff) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x2, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x18000000, 0x2}) 9.534620632s ago: executing program 2 (id=2496): r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(r0, &(0x7f0000000040)='wlan1\x00', 0x1) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) open(&(0x7f0000000000)='&&\x00', 0x2040, 0x15a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20000084) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', 0x0, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24000000) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) 6.074060209s ago: executing program 2 (id=2507): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x307082, 0x0) recvmmsg$auto(r3, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r4 = socket(0x2, 0x5, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)='}]\x00', 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0xffffffff, 0xd29e, 0x47, 0x1, 0x1007182, 0x2, 0x7, 0x6, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0x3, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x862, 0xe, 0x2, 0x9, 0x4, 0x83, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x71, 0x0, 0x40000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2000000000000, 0x0, 0x103, 0x0, 0xf, 0x20000004, 0x800, 0x0, 0x0, 0x4000000010001, 0x1000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000, 0x0, 0x0, 0x2, 0xcc, 0x0, 0x3, 0xfffffffffffffffc, 0x1]}, 0x7, 0x9) socket(0x10, 0x2, 0x0) 5.898775941s ago: executing program 0 (id=2508): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async, rerun: 64) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) (async, rerun: 32) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x181f82, 0x0) (rerun: 32) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x40000000001, 0xfffffffffffffffe, 0x8, 0x80000001, 0x4e3, 0xffffffff, '\x00', 0x0, 0x7d, 0x2, 0x5, 0x4, 0x5, 0x3}) (async) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0xa, 0x5, 0x84) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) (async, rerun: 64) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) (rerun: 64) 5.539993361s ago: executing program 0 (id=2510): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f00000001c0)=""/155, 0x9b) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = socket(0x23, 0x5, 0xfffffff0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x44) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) 4.984659834s ago: executing program 0 (id=2511): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x8100, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x6, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/dbroot\x00', 0x400000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x100000000, 0xb842, 0xeb1, 0x401, 0xb0) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x244083, 0x0) close_range$auto(r2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000080)="e2010a742960bb924321802b34965b7acd9057fc", 0x37) getrandom$auto(0x0, 0x3, 0x80000001) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffdfffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 3.523074644s ago: executing program 0 (id=2514): r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) (async, rerun: 64) mmap$auto(0x800, 0x6, 0x8000000000000, 0x9b72, 0xffffffffffffffff, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x6081, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xfff) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) r3 = socket(0x10, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop6/trace/pid\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) (async, rerun: 32) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) (async, rerun: 32) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1000001]}, 0x0) 3.447743758s ago: executing program 5 (id=2515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9369c5e7a9e95f34}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc76c13879356e0ef30600000000228330270b252dbecfec82b0855301e1f77d", @ANYRES16=r1, @ANYBLOB="10002dbd7000ffdbdf25270000008700e800880f0d1a7b53689e9a0b947b835de0a8b96d7763ce8f851e2e021cd3434e7a03aebcc3a8e03eaf7e66d9cfe417bc9239e0b2bc5d3ad591032bc3934fd1c3a7d14e4ab8b1f5bd8443e0a7738582501d254b7e02d86914ccaed33c89be6fa7c19d0d2ea9618889ffae6f5fb2e7ead81fd5756cb0830fc3d3da4fe0960da5607f231ddd780005000a00ee00000007004300b29d5f0030002680080001000700000023000300890452729516eacd50839841f76456d17f76ad418cf9b83842b268762e803600"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9369c5e7a9e95f34}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc76c13879356e0ef30600000000228330270b252dbecfec82b0855301e1f77d", @ANYRES16=r1, @ANYBLOB="10002dbd7000ffdbdf25270000008700e800880f0d1a7b53689e9a0b947b835de0a8b96d7763ce8f851e2e021cd3434e7a03aebcc3a8e03eaf7e66d9cfe417bc9239e0b2bc5d3ad591032bc3934fd1c3a7d14e4ab8b1f5bd8443e0a7738582501d254b7e02d86914ccaed33c89be6fa7c19d0d2ea9618889ffae6f5fb2e7ead81fd5756cb0830fc3d3da4fe0960da5607f231ddd780005000a00ee00000007004300b29d5f0030002680080001000700000023000300890452729516eacd50839841f76456d17f76ad418cf9b83842b268762e803600"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x800) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8000, 0xe9) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) socket(0x2, 0x801, 0x106) (async) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r2, 0x4, @old_prog_fd=r3}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x10006, 0x4, 0x9, 0x2, @count=0x7557, 0x0, 0x80000005, 0x13, 0xb, 0x5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250f00000008000300", @ANYRES32=r5], 0x2bc}, 0x1, 0x0, 0x0, 0x1}, 0x40800) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r4) 3.408500647s ago: executing program 3 (id=2485): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="731dc624ffb0fa53ec1171b71decf55efab40f00ebf7aca1c7abd32d4244f31bfebcfba89e16c6c51b73029f504329db12ee3545ff0863555ad2d13eb5481e8f693231e673b22363508c89ce3098172772b49c35348381ee313d460fcb0dbcb86946dbc6fcb12a0ed26815be25debf9d23c1d6455fe8369fbcf1adc39d0d75d56430ba99d2ae4e5505f9b0b706adadf32ed0cc8e774d00020000000000007bc898282b8600000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf250500000008000d000300000005000a0000000000040019000800040045000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c804}, 0xc008) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x6) write$auto(0x3, 0x0, 0x100086) 3.167535208s ago: executing program 3 (id=2516): mmap$auto(0x800000000, 0x400008, 0xdf, 0x38, 0x6, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x200, 0x1) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c080}, 0x10) (async, rerun: 64) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) socket(0x11, 0x80003, 0x300) (async, rerun: 32) socket(0x11, 0x3, 0x9) (rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad}) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 32) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) (async, rerun: 32) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) (rerun: 32) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0403d11, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) 3.108376007s ago: executing program 5 (id=2517): close_range$auto(0x2, 0x8, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4, 0x3}, 0xa) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd=r2, @target_fd=r2, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000080)={0x0, "aa8c44a1", 0x6, 0x8, 0x3, 0x6e48, "9f929aabd06e2686b720bf916f3fa0df"}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x253, 0xfffffe05}]}) bind$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) remap_file_pages$auto(0x2, 0x5, 0x1, 0x51, 0x9) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r7, 0x1f, &(0x7f0000000280)="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", 0x10000) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xd4}) 2.861356171s ago: executing program 3 (id=2518): r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x80000001, 0x200, 0x0, 0x0, 0x7fff) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x84) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) madvise$auto(0x0, 0x2100000000000, 0x11) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) ioctl$auto(r1, 0x6f2d, r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bcf0ff002d2eb3386c4239ec5c76a63f53211dadd48c82f4ffe0a088bf22711e0f295996f54eb57dca991579444b3e2ebbb9d8ec702eaccc3b23fbc6d6072f73ee39f27ed7ef0050e8688545b5d3041bd25c97267efef7dc9d6e9bfeac2e34532f7cbf90706d1e7870965b6d5aef18f52baf3e937275043b3175156dd5e6c997c7f3da5dce76446b6b420d01471686555ba82e5c13697b0bfa6fbbc6a99a73cd8bdaec0b166ca78a4980f6fb4c30b02b680cf11636de44b5098e29cc6e234beb6910019ed4c4a65bf916c9bf2e4cc3", @ANYBLOB="9fb34ff6b61df7bb3d265e0fb651855799ae", @ANYBLOB="10002bbd7000ffdbdf251f000000a200d7004713cdaa16d6379d9fd3314e92d4edffe3a41cbf70614eb14638f0c0bc6284cf9eac566fe8768b6c34792781a10f335cf1fd04d459ec08906b43f870ea3fbf330e25c14393f03f46d79da5f3b7bae3133df781cb5888a8029c2c4c58ead9a199af63550407a3606aeac09dd2ee83e9d1758842ec49d8b0e8a0ff9807aa63fa7287694d84f94e54c4f9c7c10333c161f21308b1f56774ac4e235b87988b3d000004003c00ab5b50edfaf0b839b3308eebf846f27a41583bad975b8201cf72"], 0xbc}}, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r1, 0x286df572, &(0x7f00000000c0)='nl80211\x00', &(0x7f0000000100)="219aa506fdb79c5cb52a736d2fe8ea6a8f79a4c326722e99f0b82adbb1ad89b96b66abba9b8f", 0x3) setsockopt$auto_SO_SNDBUFFORCE(r0, 0x3, 0x20, &(0x7f0000000000)='[\x00', 0x7) 2.764347234s ago: executing program 5 (id=2519): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x3}}, 0x462) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x5}, 0x4}, 0xffb, 0xb07b) 2.215395616s ago: executing program 0 (id=2520): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000300)=0xf3) r1 = socket(0x10, 0x2, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000810) modify_ldt$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x102, 0x34, 0x7fff, 0x4, 0x1000000100, 0x20001, 0x100000000, 0xfb52, 0x3, 0xf, 0x2, 0x0, 0x400007ff, 0x179be0e1, 0x6}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x88}, @BATADV_ATTR_TQ={0x1, 0x19, 0x3}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x4}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x7}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1) 2.070959127s ago: executing program 5 (id=2521): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0x1003, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/5/affinity_hint\x00', 0xd00, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) getsockopt$auto(r1, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) semget$auto(0xecf, 0x0, 0x5) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) 1.872726106s ago: executing program 2 (id=2522): mmap$auto(0x3, 0x48, 0x5, 0x800000000000eb1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x71b, 0x9, 0x7) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x2000) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0xf) socket(0x10, 0x5, 0x53) mmap$auto(0xfffffffffffffff9, 0x9e, 0x2, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) close_range$auto(0x0, r2, 0x7f) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$auto_RNDADDENTROPY(r3, 0x40085203, &(0x7f00000001c0)=[0x2, 0x8]) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8080, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x282082, 0x0) 1.422407302s ago: executing program 5 (id=2523): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:320/wb_stats\x00', 0x0, 0x0) epoll_create$auto(0x8ca0d1a) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x280, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.05906751s ago: executing program 3 (id=2524): mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = mq_open$auto(&(0x7f0000000340)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\x19J,\xa4\xbethp\xaaqZ\v\xd3\xb8\x9e\x9e\xa1c\xad\x15\xb6\x8b\xb2oz\x0e\x16\xd2\xc9%\xd4MV\x98b\xdf\xdeG\xe3\xc1!\xc9O\xe2\x1dy\x01\x83X\xe7\xdb\x8azU\xf2\x1e\x845\x03U\xbab\x90\xfe0\xfce\xc1f\xb3ZX\xfa)G\xa4\xc8\x90\xb8\xc8\xd9g\xdb\\\xf2\x95J\xb3\xb1\x83\x98\xd5\x9a\x0e\xbd_o\x82\xeb\xab\x15\x82N\x99P@h\xa9u&\x12\xfd\x8b\x88\r\xc0 \"/b\x13\n>\xd8\xc3\x7fH=\x0e\xc6J*\v\x8b\xff\xa8\x1d\x01\xd2\x16n\r\xe3a\x99I\xec\x90\xd1\x9b\x0f\x03\xba\xeaj\xf2\x99,\xd0\x16\xbe\xf2f\xe5-\xf2\\@\x8d\f\x12\t\xf4\xf2\x04_w\xa1\xfa\x99^/\xbf\x01\xd9\xe1U\xc0\xaf\x11\xca\x9e6\xa0\a\x1bg\xad\xb7{\xae\xbd%\xf4Q\x1c\x034B\x1f*\"\r\x06\xcb\x8bl\x7f\xc6R\x93c', 0x62, 0xfffc, 0x0) mq_timedsend$auto(r0, 0x0, 0xfff, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000) mq_timedreceive$auto(r0, 0x0, 0x4dca, 0x0, 0x0) 184.527789ms ago: executing program 0 (id=2525): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7a, 0x9, 0x0) mmap$auto(0xfffffffffffffffe, 0x29, 0x6, 0xeb1, 0xffffffffffffffff, 0xffffffffffffffff) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r1 = socket(0x11, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(r2, 0x5760, 0x10000000000402) 0s ago: executing program 5 (id=2526): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x51c5}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0x3, 0x80000, 0x8b9b) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0000ffffff3b4000"}, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): x1d0 [ 745.630310][T14135] vfs_get_tree+0x8e/0x330 [ 745.630337][T14135] path_mount+0x7bf/0x23a0 [ 745.630359][T14135] ? rcu_is_watching+0x12/0xc0 [ 745.630396][T14135] ? __pfx_path_mount+0x10/0x10 [ 745.630419][T14135] ? kmem_cache_free+0x2d8/0x770 [ 745.630448][T14135] ? putname+0xf5/0x1a0 [ 745.630474][T14135] ? putname+0xf5/0x1a0 [ 745.630493][T14135] ? putname+0xf5/0x1a0 [ 745.630516][T14135] ? __x64_sys_mount+0x293/0x310 [ 745.630543][T14135] __x64_sys_mount+0x293/0x310 [ 745.630567][T14135] ? __pfx___x64_sys_mount+0x10/0x10 [ 745.630599][T14135] do_syscall_64+0xcd/0xf80 [ 745.630623][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.630647][T14135] RIP: 0033:0x7fdd7338f7c9 [ 745.630671][T14135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.630693][T14135] RSP: 002b:00007fdd742b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 745.630715][T14135] RAX: ffffffffffffffda RBX: 00007fdd735e5fa0 RCX: 00007fdd7338f7c9 [ 745.630731][T14135] RDX: 0000200000000580 RSI: 00002000000000c0 RDI: 0000000000000000 [ 745.630746][T14135] RBP: 00007fdd73413f91 R08: 0000000000000000 R09: 0000000000000000 [ 745.630760][T14135] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 745.630775][T14135] R13: 00007fdd735e6038 R14: 00007fdd735e5fa0 R15: 00007fff5a382738 [ 745.630806][T14135] [ 748.974271][T14177] input: f¬ as /devices/virtual/input/input88 [ 751.279486][T14203] mkiss: ax1: crc mode is auto. [ 751.576666][T14041] mkiss: ax0: crc mode is auto. [ 753.076449][T14217] FAULT_INJECTION: forcing a failure. [ 753.076449][T14217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.290194][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.0.2057 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 753.290249][T14217] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 753.290262][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.290276][T14217] Call Trace: [ 753.290285][T14217] [ 753.290294][T14217] dump_stack_lvl+0x16c/0x1f0 [ 753.290336][T14217] should_fail_ex+0x512/0x640 [ 753.290367][T14217] _copy_to_user+0x32/0xd0 [ 753.290395][T14217] do_pagemap_scan+0x4a7/0xcf0 [ 753.290436][T14217] ? __pfx_do_pagemap_scan+0x10/0x10 [ 753.290459][T14217] ? do_vfs_ioctl+0x128/0x14f0 [ 753.290507][T14217] ? __fget_files+0x20e/0x3c0 [ 753.290545][T14217] do_pagemap_cmd+0x58/0x80 [ 753.290566][T14217] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 753.290595][T14217] __x64_sys_ioctl+0x18e/0x210 [ 753.290624][T14217] do_syscall_64+0xcd/0xf80 [ 753.290646][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.290670][T14217] RIP: 0033:0x7f0213f8f7c9 [ 753.290687][T14217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.290709][T14217] RSP: 002b:00007f0214e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.290730][T14217] RAX: ffffffffffffffda RBX: 00007f02141e5fa0 RCX: 00007f0213f8f7c9 [ 753.290746][T14217] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000003 [ 753.290778][T14217] RBP: 00007f0214e59090 R08: 0000000000000000 R09: 0000000000000000 [ 753.290792][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.290806][T14217] R13: 00007f02141e6038 R14: 00007f02141e5fa0 R15: 00007ffd1a8ffeb8 [ 753.290839][T14217] [ 755.192279][T14256] input: f¬ as /devices/virtual/input/input89 [ 756.502466][T14276] vhci_hcd vhci_hcd.2: invalid port number 16 [ 756.552469][T14276] vhci_hcd vhci_hcd.2: invalid port number 16 [ 757.984957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.994225][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.297915][T14312] mkiss: ax1: crc mode is auto. [ 758.510294][T14317] netlink: 4740 bytes leftover after parsing attributes in process `syz.0.2076'. [ 760.103284][T14339] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 762.501605][T14384] input: f¬ as /devices/virtual/input/input90 [ 763.074434][T14218] mkiss: ax0: crc mode is auto. [ 765.620972][T14427] openvswitch: netlink: Flow actions attr not present in new flow. [ 765.660495][T14429] openvswitch: netlink: Flow actions attr not present in new flow. [ 766.073946][T12465] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 766.362090][T14439] input: f¬ as /devices/virtual/input/input91 [ 766.888575][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 767.370742][T14455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 768.466055][T14476] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 768.502377][T14476] netlink: 306 bytes leftover after parsing attributes in process `syz.2.2105'. [ 768.907894][T14484] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 768.951917][T14484] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2107'. [ 769.176927][T14489] vhci_hcd vhci_hcd.2: invalid port number 16 [ 769.213626][T14489] vhci_hcd vhci_hcd.2: invalid port number 16 [ 769.555868][T14495] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2110'. [ 770.113748][T14517] netlink: 672 bytes leftover after parsing attributes in process `syz.3.2114'. [ 770.971861][T14530] FAULT_INJECTION: forcing a failure. [ 770.971861][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 771.028371][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.3.2116 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 771.028422][T14530] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 771.028435][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.028449][T14530] Call Trace: [ 771.028457][T14530] [ 771.028466][T14530] dump_stack_lvl+0x16c/0x1f0 [ 771.028506][T14530] should_fail_ex+0x512/0x640 [ 771.028533][T14530] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 771.028564][T14530] should_failslab+0xc2/0x120 [ 771.028601][T14530] kmem_cache_alloc_noprof+0x83/0x770 [ 771.028630][T14530] ? skb_clone+0x190/0x3f0 [ 771.028666][T14530] ? skb_clone+0x190/0x3f0 [ 771.028695][T14530] skb_clone+0x190/0x3f0 [ 771.028727][T14530] netlink_deliver_tap+0xabd/0xd30 [ 771.028766][T14530] netlink_unicast+0x64c/0x870 [ 771.028805][T14530] ? __pfx_netlink_unicast+0x10/0x10 [ 771.028839][T14530] ? __pfx___might_resched+0x10/0x10 [ 771.028871][T14530] ? __lock_acquire+0x436/0x2890 [ 771.028900][T14530] netlink_sendmsg+0x8c8/0xdd0 [ 771.028940][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.028978][T14530] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 771.029023][T14530] ____sys_sendmsg+0xa5d/0xc30 [ 771.029046][T14530] ? copy_msghdr_from_user+0x10a/0x160 [ 771.029077][T14530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.029103][T14530] ? __pfx__kstrtoull+0x10/0x10 [ 771.029148][T14530] ___sys_sendmsg+0x134/0x1d0 [ 771.029180][T14530] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.029225][T14530] ? find_held_lock+0x2b/0x80 [ 771.029272][T14530] __sys_sendmmsg+0x200/0x420 [ 771.029306][T14530] ? __pfx___sys_sendmmsg+0x10/0x10 [ 771.029347][T14530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 771.029381][T14530] ? fput+0x70/0xf0 [ 771.029409][T14530] ? ksys_write+0x1ac/0x250 [ 771.029442][T14530] ? __pfx_ksys_write+0x10/0x10 [ 771.029480][T14530] __x64_sys_sendmmsg+0x9c/0x100 [ 771.029510][T14530] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.029546][T14530] do_syscall_64+0xcd/0xf80 [ 771.029568][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.029592][T14530] RIP: 0033:0x7fdd7338f7c9 [ 771.029609][T14530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.029632][T14530] RSP: 002b:00007fdd742b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 771.029654][T14530] RAX: ffffffffffffffda RBX: 00007fdd735e5fa0 RCX: 00007fdd7338f7c9 [ 771.029670][T14530] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 771.029684][T14530] RBP: 00007fdd742b5090 R08: 0000000000000000 R09: 0000000000000000 [ 771.029698][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.029712][T14530] R13: 00007fdd735e6038 R14: 00007fdd735e5fa0 R15: 00007fff5a382738 [ 771.029742][T14530] [ 771.399091][T14530] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 771.407648][T14530] netlink: 306 bytes leftover after parsing attributes in process `syz.3.2116'. [ 771.455478][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 771.946637][T14542] input: f¬ as /devices/virtual/input/input93 [ 772.504512][T14552] input: f¬ as /devices/virtual/input/input95 [ 772.606256][T14554] input: f¬ as /devices/virtual/input/input96 [ 774.013425][T14577] FAULT_INJECTION: forcing a failure. [ 774.013425][T14577] name failslab, interval 1, probability 0, space 0, times 0 [ 774.100640][T14577] CPU: 0 UID: 0 PID: 14577 Comm: syz.4.2127 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 774.100693][T14577] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 774.100707][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.100721][T14577] Call Trace: [ 774.100729][T14577] [ 774.100740][T14577] dump_stack_lvl+0x16c/0x1f0 [ 774.100783][T14577] should_fail_ex+0x512/0x640 [ 774.100815][T14577] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 774.100848][T14577] should_failslab+0xc2/0x120 [ 774.100885][T14577] kmem_cache_alloc_noprof+0x83/0x770 [ 774.100915][T14577] ? skb_clone+0x190/0x3f0 [ 774.100958][T14577] ? skb_clone+0x190/0x3f0 [ 774.100987][T14577] skb_clone+0x190/0x3f0 [ 774.101020][T14577] netlink_deliver_tap+0xabd/0xd30 [ 774.101061][T14577] netlink_unicast+0x64c/0x870 [ 774.101100][T14577] ? __pfx_netlink_unicast+0x10/0x10 [ 774.101135][T14577] ? __pfx___might_resched+0x10/0x10 [ 774.101169][T14577] ? __lock_acquire+0x436/0x2890 [ 774.101199][T14577] netlink_sendmsg+0x8c8/0xdd0 [ 774.101239][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.101278][T14577] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 774.101323][T14577] ____sys_sendmsg+0xa5d/0xc30 [ 774.101347][T14577] ? copy_msghdr_from_user+0x10a/0x160 [ 774.101378][T14577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.101405][T14577] ? __pfx__kstrtoull+0x10/0x10 [ 774.101445][T14577] ___sys_sendmsg+0x134/0x1d0 [ 774.101477][T14577] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.101522][T14577] ? find_held_lock+0x2b/0x80 [ 774.101569][T14577] __sys_sendmmsg+0x200/0x420 [ 774.101604][T14577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 774.101645][T14577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 774.101680][T14577] ? fput+0x70/0xf0 [ 774.101703][T14577] ? ksys_write+0x1ac/0x250 [ 774.101736][T14577] ? __pfx_ksys_write+0x10/0x10 [ 774.101774][T14577] __x64_sys_sendmmsg+0x9c/0x100 [ 774.101805][T14577] ? lockdep_hardirqs_on+0x7c/0x110 [ 774.101842][T14577] do_syscall_64+0xcd/0xf80 [ 774.101866][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.101891][T14577] RIP: 0033:0x7fb11e18f7c9 [ 774.101909][T14577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.101941][T14577] RSP: 002b:00007fb11f02f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 774.101964][T14577] RAX: ffffffffffffffda RBX: 00007fb11e3e5fa0 RCX: 00007fb11e18f7c9 [ 774.101980][T14577] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 774.101995][T14577] RBP: 00007fb11f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 774.102009][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.102023][T14577] R13: 00007fb11e3e6038 R14: 00007fb11e3e5fa0 R15: 00007ffe55253458 [ 774.102054][T14577] [ 775.455120][T14577] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 775.504878][T14577] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2127'. [ 775.525672][T14593] bridge0: port 3(team0) entered blocking state [ 775.536959][T14593] bridge0: port 3(team0) entered disabled state [ 775.561128][T14593] team0: entered allmulticast mode [ 775.566432][T14588] mkiss: ax0: crc mode is auto. [ 775.576609][T14593] team_slave_0: entered allmulticast mode [ 775.659443][T14593] team_slave_1: entered allmulticast mode [ 775.694697][T14593] team0: entered promiscuous mode [ 775.750373][T14593] team_slave_0: entered promiscuous mode [ 775.776623][T14593] team_slave_1: entered promiscuous mode [ 775.804250][T14593] bridge0: port 3(team0) entered blocking state [ 775.811573][T14593] bridge0: port 3(team0) entered forwarding state [ 775.860631][T14605] netlink: 'syz.4.2132': attribute type 10 has an invalid length. [ 775.918182][T14410] mkiss: ax1: crc mode is auto. [ 775.923465][T14605] netlink: 230 bytes leftover after parsing attributes in process `syz.4.2132'. [ 776.083998][T14605] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 776.177782][T14602] Process accounting paused [ 779.246030][T14641] mkiss: ax0: crc mode is auto. [ 779.918540][T14659] input: f¬ as /devices/virtual/input/input97 [ 780.999503][T14678] netlink: 672 bytes leftover after parsing attributes in process `syz.2.2149'. [ 781.349209][T14681] bond0: invalid ARP target specified [ 781.998624][T14694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 782.050530][T14694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 782.098704][T14694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 782.132251][T14694] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 782.165858][T14694] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 782.190164][T14694] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 782.445206][T14699] Invalid ELF header magic: != ELF [ 782.610546][T14710] vhci_hcd vhci_hcd.2: invalid port number 16 [ 782.655184][T14710] vhci_hcd vhci_hcd.2: invalid port number 16 [ 783.028806][T14713] mkiss: ax0: crc mode is auto. [ 784.061082][ T7725] Bluetooth: hci0: command 0x0c1a tx timeout [ 784.067308][T12465] Bluetooth: hci1: command 0x0c1a tx timeout [ 784.146111][ T7725] Bluetooth: hci3: command 0x0c1a tx timeout [ 784.154702][T12465] Bluetooth: hci5: command 0x0c1a tx timeout [ 784.444137][T14739] usb usb2: usbfs: process 14739 (syz.3.2163) did not claim interface 0 before use [ 784.624780][T14738] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 784.689617][T14740] ovs_: entered promiscuous mode [ 784.710972][T14738] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 784.776268][T14738] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 784.844195][T14738] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 784.951072][T14738] page dumped because: unmovable page [ 784.956554][T14738] page_owner info is not present (never set?) [ 785.974355][T14758] input: f¬ as /devices/virtual/input/input99 [ 786.146359][T14762] vhci_hcd vhci_hcd.2: invalid port number 16 [ 786.185960][T14762] vhci_hcd vhci_hcd.2: invalid port number 16 [ 786.224874][T12465] Bluetooth: hci5: command 0x0c1a tx timeout [ 786.789857][T14773] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 787.214223][ T7725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.223400][ T7725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.234334][ T7725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.252693][ T7725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.260209][ T7725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.348138][T14619] mkiss: ax0: crc mode is auto. [ 788.294619][T14790] mkiss: ax1: crc mode is auto. [ 788.301635][ T7725] Bluetooth: hci5: command 0x0c1a tx timeout [ 788.717055][T14782] chnl_net:caif_netlink_parms(): no params data found [ 788.957295][ T7236] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.344143][T12465] Bluetooth: hci2: command tx timeout [ 789.932099][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.965697][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.996220][T14782] bridge_slave_0: entered allmulticast mode [ 790.026610][T14782] bridge_slave_0: entered promiscuous mode [ 790.094319][ T7236] team0: left allmulticast mode [ 790.109710][ T7236] team_slave_0: left allmulticast mode [ 790.129956][ T7236] team_slave_1: left allmulticast mode [ 790.150388][ T7236] team0: left promiscuous mode [ 790.166074][ T7236] team_slave_0: left promiscuous mode [ 790.191131][ T7236] team_slave_1: left promiscuous mode [ 790.211675][ T7236] bridge0: port 3(team0) entered disabled state [ 790.242495][ T7236] bridge_slave_1: left allmulticast mode [ 790.269283][ T7236] bridge_slave_1: left promiscuous mode [ 790.285676][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.343645][ T7236] bridge_slave_0: left allmulticast mode [ 790.368056][ T7236] bridge_slave_0: left promiscuous mode [ 790.385370][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.284590][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.303585][ T7236] bond0 (unregistering): Released all slaves [ 791.325256][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.349287][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.392625][T14782] bridge_slave_1: entered allmulticast mode [ 791.416657][T14782] bridge_slave_1: entered promiscuous mode [ 791.426417][T12465] Bluetooth: hci2: command tx timeout [ 791.482454][T14820] vhci_hcd vhci_hcd.2: invalid port number 16 [ 791.516771][T14820] vhci_hcd vhci_hcd.2: invalid port number 16 [ 791.777759][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.875340][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.037414][T14782] team0: Port device team_slave_0 added [ 792.069330][T14782] team0: Port device team_slave_1 added [ 792.321164][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.328198][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.501870][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.607539][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.648415][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.775202][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.502045][T12465] Bluetooth: hci2: command tx timeout [ 793.561532][T14782] hsr_slave_0: entered promiscuous mode [ 793.599208][T14782] hsr_slave_1: entered promiscuous mode [ 793.624780][T14782] debugfs: 'hsr0' already exists in 'hsr' [ 793.659012][T14782] Cannot create hsr debugfs directory [ 794.871565][ T7236] hsr_slave_1: left promiscuous mode [ 794.883091][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.912303][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.928134][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.947646][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.003594][ T7236] veth1_macvtap: left promiscuous mode [ 795.023041][ T7236] veth0_macvtap: left promiscuous mode [ 795.036038][ T7236] veth1_vlan: left promiscuous mode [ 795.041747][ T7236] veth0_vlan: left promiscuous mode [ 795.587792][T12465] Bluetooth: hci2: command tx timeout [ 796.112188][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 796.160765][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 797.449894][T14782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.496786][T14782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.593941][T14782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.652328][T14782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 798.051232][T14901] batman_adv: Routing algorithm '7' is not supported [ 798.248626][ T7207] netdevsim netdevsim511 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.536346][T14782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.546752][T14912] random: crng reseeded on system resumption [ 798.656090][T14914] input: f¬ as /devices/virtual/input/input101 [ 798.729757][T14782] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.860381][T14801] mkiss: ax0: crc mode is auto. [ 798.869347][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.876594][ T7475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.892714][T14920] futex_wake_op: syz.2.2195 tries to shift op by -2048; fix this program [ 798.915291][T14914] nbd: must specify an index to disconnect [ 799.056456][T14920] futex_wake_op: syz.2.2195 tries to shift op by -2048; fix this program [ 799.113074][T14923] 0x000000000001-0x000000020000 : "" [ 799.172178][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.179429][ T7475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.294522][T14923] ftl_cs: FTL header corrupt! [ 800.136346][T14935] mkiss: ax1: crc mode is auto. [ 800.831817][T14782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.266862][T14782] veth0_vlan: entered promiscuous mode [ 801.325269][T14782] veth1_vlan: entered promiscuous mode [ 801.588615][T14782] veth0_macvtap: entered promiscuous mode [ 801.645812][T14782] veth1_macvtap: entered promiscuous mode [ 801.755852][T14782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.887333][T14782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.990012][ T7212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.029826][ T7212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.121428][ T7212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.161110][ T7212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.457156][T14970] zswap: compressor not available [ 802.691634][ T9557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.745842][ T9557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.922889][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.959970][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.491766][T15037] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 805.499593][T15037] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2219'. [ 806.637555][T15046] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 806.876242][T15058] Process accounting resumed [ 807.460244][T15077] random: crng reseeded on system resumption [ 807.801181][T15082] futex_wake_op: syz.0.2227 tries to shift op by -2048; fix this program [ 808.000724][T15082] futex_wake_op: syz.0.2227 tries to shift op by -2048; fix this program [ 810.029443][T15119] zswap: compressor not available [ 810.333869][T14936] mkiss: ax0: crc mode is auto. [ 810.350300][T15134] vhci_hcd vhci_hcd.2: invalid port number 16 [ 810.395688][T15134] vhci_hcd vhci_hcd.2: invalid port number 16 [ 811.026404][T15143] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2236'. [ 811.069071][T15146] input: f¬ as /devices/virtual/input/input102 [ 811.258536][T15143] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2236'. [ 812.452793][ T7725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.466120][ T7725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.473954][ T7725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.486009][ T7725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.493498][ T7725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.269893][T15168] chnl_net:caif_netlink_parms(): no params data found [ 813.878928][ T7236] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.202507][ T7236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.348321][ T7236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.542420][ T7725] Bluetooth: hci1: command tx timeout [ 814.656040][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.684675][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.712718][T15168] bridge_slave_0: entered allmulticast mode [ 814.735932][T15168] bridge_slave_0: entered promiscuous mode [ 814.744442][T15195] vhci_hcd vhci_hcd.2: invalid port number 16 [ 814.750546][T15195] vhci_hcd vhci_hcd.2: invalid port number 16 [ 814.797436][ T7236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.914215][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.944785][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.963395][T15168] bridge_slave_1: entered allmulticast mode [ 814.991756][T15168] bridge_slave_1: entered promiscuous mode [ 815.183533][ T7236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.422707][T15168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.482234][T15168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.898487][T15168] team0: Port device team_slave_0 added [ 816.018243][T15168] team0: Port device team_slave_1 added [ 816.229416][T15168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.261015][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.374520][T15168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.500083][T15168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.512591][T15207] mkiss: ax1: crc mode is auto. [ 816.531308][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.618736][T15168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.634641][ T7725] Bluetooth: hci1: command tx timeout [ 816.840607][ T7236] bridge_slave_1: left allmulticast mode [ 816.860545][ T7236] bridge_slave_1: left promiscuous mode [ 816.885456][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.936338][ T7236] bridge_slave_0: left allmulticast mode [ 816.952450][ T7236] bridge_slave_0: left promiscuous mode [ 816.980945][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.864792][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.896898][ T7236] bond0 (unregistering): Released all slaves [ 818.229241][T15168] hsr_slave_0: entered promiscuous mode [ 818.257430][T15168] hsr_slave_1: entered promiscuous mode [ 818.272235][T15168] debugfs: 'hsr0' already exists in 'hsr' [ 818.298565][T15168] Cannot create hsr debugfs directory [ 818.701249][ T7725] Bluetooth: hci1: command tx timeout [ 818.979312][T15230] FAULT_INJECTION: forcing a failure. [ 818.979312][T15230] name failslab, interval 1, probability 0, space 0, times 0 [ 819.042316][T15230] CPU: 0 UID: 0 PID: 15230 Comm: syz.3.2253 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 819.042374][T15230] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 819.042389][T15230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.042405][T15230] Call Trace: [ 819.042414][T15230] [ 819.042426][T15230] dump_stack_lvl+0x16c/0x1f0 [ 819.042473][T15230] should_fail_ex+0x512/0x640 [ 819.042502][T15230] ? __kmalloc_cache_noprof+0x5f/0x800 [ 819.042535][T15230] should_failslab+0xc2/0x120 [ 819.042575][T15230] __kmalloc_cache_noprof+0x80/0x800 [ 819.042603][T15230] ? copy_time_ns+0xf6/0x7f0 [ 819.042646][T15230] ? copy_time_ns+0xf6/0x7f0 [ 819.042681][T15230] copy_time_ns+0xf6/0x7f0 [ 819.042716][T15230] ? copy_cgroup_ns+0x71/0x980 [ 819.042742][T15230] create_new_namespaces+0x48a/0xab0 [ 819.042789][T15230] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 819.042825][T15230] ksys_unshare+0x45b/0xa40 [ 819.042862][T15230] ? __pfx_ksys_unshare+0x10/0x10 [ 819.042901][T15230] ? xfd_validate_state+0x61/0x180 [ 819.042931][T15230] __x64_sys_unshare+0x31/0x40 [ 819.042952][T15230] do_syscall_64+0xcd/0xf80 [ 819.042975][T15230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.043000][T15230] RIP: 0033:0x7fdd7338f7c9 [ 819.043019][T15230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.043043][T15230] RSP: 002b:00007fdd74294038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 819.043065][T15230] RAX: ffffffffffffffda RBX: 00007fdd735e6090 RCX: 00007fdd7338f7c9 [ 819.043081][T15230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 819.043096][T15230] RBP: 00007fdd73413f91 R08: 0000000000000000 R09: 0000000000000000 [ 819.043110][T15230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.043124][T15230] R13: 00007fdd735e6128 R14: 00007fdd735e6090 R15: 00007fff5a382738 [ 819.043155][T15230] [ 819.482772][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.490128][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.643618][T15239] mkiss: ax1: crc mode is auto. [ 820.782873][ T7725] Bluetooth: hci1: command tx timeout [ 821.456609][ T7236] hsr_slave_0: left promiscuous mode [ 821.529292][ T7236] hsr_slave_1: left promiscuous mode [ 821.562416][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.608793][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.731202][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.790495][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.815037][T15266] vhci_hcd vhci_hcd.2: invalid port number 16 [ 821.843148][T15266] vhci_hcd vhci_hcd.2: invalid port number 16 [ 821.876049][ T7236] veth1_macvtap: left promiscuous mode [ 821.922854][ T7236] veth0_macvtap: left promiscuous mode [ 823.390327][T15278] nvme_fcloop: unknown parameter or missing value '0' [ 823.610717][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 823.731679][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 824.486901][T15153] mkiss: ax0: crc mode is auto. [ 825.046135][T15168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 825.222851][T15168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 825.385413][T15168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 825.734374][T15168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 826.838536][T15168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.987725][T15168] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.054579][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.061884][ T7475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.159189][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.166524][ T7475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.367134][T15339] nvme_fcloop: unknown parameter or missing value '7' [ 828.693230][T15168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.925894][T15168] veth0_vlan: entered promiscuous mode [ 829.051586][T15168] veth1_vlan: entered promiscuous mode [ 829.257491][T15168] veth0_macvtap: entered promiscuous mode [ 829.307035][T15364] random: crng reseeded on system resumption [ 829.321764][T15168] veth1_macvtap: entered promiscuous mode [ 829.453208][T15168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.463003][T15365] hub 1-0:1.0: USB hub found [ 829.501446][T15365] hub 1-0:1.0: 1 port detected [ 829.546804][T15168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.701961][ T7213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.777183][ T7213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.858963][ T7213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.918363][ T7213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.979124][T15370] zswap: compressor not available [ 830.566198][ T7217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.617448][ T7217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.752236][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.786651][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.277164][T15395] FAULT_INJECTION: forcing a failure. [ 831.277164][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 831.367006][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.2.2240 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 831.367066][T15395] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 831.367079][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.367094][T15395] Call Trace: [ 831.367103][T15395] [ 831.367114][T15395] dump_stack_lvl+0x16c/0x1f0 [ 831.367164][T15395] should_fail_ex+0x512/0x640 [ 831.367192][T15395] ? fs_reclaim_acquire+0xae/0x150 [ 831.367232][T15395] should_failslab+0xc2/0x120 [ 831.367282][T15395] __kmalloc_noprof+0xeb/0x910 [ 831.367308][T15395] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 831.367347][T15395] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 831.367378][T15395] tomoyo_realpath_from_path+0xc2/0x6e0 [ 831.367413][T15395] ? tomoyo_profile+0x47/0x60 [ 831.367451][T15395] tomoyo_path_number_perm+0x245/0x580 [ 831.367497][T15395] ? tomoyo_path_number_perm+0x237/0x580 [ 831.367527][T15395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 831.367556][T15395] ? find_held_lock+0x2b/0x80 [ 831.367612][T15395] ? fd_install+0x242/0x570 [ 831.367645][T15395] ? hook_file_ioctl_common+0x144/0x410 [ 831.367687][T15395] security_file_ioctl+0x9b/0x240 [ 831.367717][T15395] __x64_sys_ioctl+0xb7/0x210 [ 831.367749][T15395] do_syscall_64+0xcd/0xf80 [ 831.367773][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.367797][T15395] RIP: 0033:0x7f369118f7c9 [ 831.367816][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.367839][T15395] RSP: 002b:00007f3691f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.367861][T15395] RAX: ffffffffffffffda RBX: 00007f36913e5fa0 RCX: 00007f369118f7c9 [ 831.367876][T15395] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000000 [ 831.367890][T15395] RBP: 00007f3691f55090 R08: 0000000000000000 R09: 0000000000000000 [ 831.367904][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.367918][T15395] R13: 00007f36913e6038 R14: 00007f36913e5fa0 R15: 00007ffc6078fdf8 [ 831.367948][T15395] [ 831.367959][T15395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 831.959390][T15406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104 [ 832.704233][T15422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105 [ 832.897963][ T31] audit: type=1800 audit(6063345357.945:16): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2281" name="lu_gp_id" dev="configfs" ino=87648 res=0 errno=0 [ 833.300537][T15428] FAULT_INJECTION: forcing a failure. [ 833.300537][T15428] name failslab, interval 1, probability 0, space 0, times 0 [ 833.461014][T15428] CPU: 0 UID: 0 PID: 15428 Comm: syz.3.2280 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 833.461072][T15428] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 833.461095][T15428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.461110][T15428] Call Trace: [ 833.461119][T15428] [ 833.461130][T15428] dump_stack_lvl+0x16c/0x1f0 [ 833.461176][T15428] should_fail_ex+0x512/0x640 [ 833.461204][T15428] ? __kmalloc_cache_noprof+0x5f/0x800 [ 833.461234][T15428] should_failslab+0xc2/0x120 [ 833.461272][T15428] __kmalloc_cache_noprof+0x80/0x800 [ 833.461298][T15428] ? lockdep_init_map_type+0x5c/0x270 [ 833.461324][T15428] ? rfkill_fop_open+0x1b6/0x750 [ 833.461359][T15428] ? __pfx_rfkill_fop_open+0x10/0x10 [ 833.461389][T15428] ? rfkill_fop_open+0x1b6/0x750 [ 833.461418][T15428] ? __pfx_rfkill_fop_open+0x10/0x10 [ 833.461449][T15428] rfkill_fop_open+0x1b6/0x750 [ 833.461485][T15428] ? __pfx_rfkill_fop_open+0x10/0x10 [ 833.461523][T15428] misc_open+0x26d/0x450 [ 833.461552][T15428] ? __pfx_misc_open+0x10/0x10 [ 833.461579][T15428] chrdev_open+0x234/0x6a0 [ 833.461617][T15428] ? __pfx_apparmor_file_open+0x10/0x10 [ 833.461644][T15428] ? __pfx_chrdev_open+0x10/0x10 [ 833.461683][T15428] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 833.461729][T15428] do_dentry_open+0x748/0x1590 [ 833.461763][T15428] ? __pfx_chrdev_open+0x10/0x10 [ 833.461807][T15428] vfs_open+0x82/0x3f0 [ 833.461836][T15428] path_openat+0x2078/0x3140 [ 833.461882][T15428] ? __pfx_path_openat+0x10/0x10 [ 833.461930][T15428] do_filp_open+0x20b/0x470 [ 833.461967][T15428] ? __pfx_do_filp_open+0x10/0x10 [ 833.462026][T15428] ? alloc_fd+0x471/0x7d0 [ 833.462070][T15428] do_sys_openat2+0x121/0x290 [ 833.462105][T15428] ? __pfx_do_sys_openat2+0x10/0x10 [ 833.462146][T15428] __x64_sys_openat+0x174/0x210 [ 833.462176][T15428] ? __pfx___x64_sys_openat+0x10/0x10 [ 833.462217][T15428] do_syscall_64+0xcd/0xf80 [ 833.462243][T15428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.462268][T15428] RIP: 0033:0x7fdd7338f7c9 [ 833.462289][T15428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.462315][T15428] RSP: 002b:00007fdd74273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 833.462340][T15428] RAX: ffffffffffffffda RBX: 00007fdd735e6180 RCX: 00007fdd7338f7c9 [ 833.462357][T15428] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 833.462374][T15428] RBP: 00007fdd73413f91 R08: 0000000000000000 R09: 0000000000000000 [ 833.462390][T15428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.462405][T15428] R13: 00007fdd735e6218 R14: 00007fdd735e6180 R15: 00007fff5a382738 [ 833.462439][T15428] [ 835.683715][T15457] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 835.725398][T15457] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2287'. [ 836.327439][T15295] mkiss: ax1: crc mode is auto. [ 836.332439][T15461] mkiss: ax0: crc mode is auto. [ 837.307694][T15453] Process accounting paused [ 837.472802][ T31] audit: type=1800 audit(6063345362.525:17): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2292" name="lu_gp_id" dev="configfs" ino=87912 res=0 errno=0 [ 837.984830][T15488] could not allocate digest TFM handle 0 [ 837.984830][T15488] [ 840.723690][T15530] could not allocate digest TFM handle 0 [ 840.723690][T15530] [ 841.545033][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'. [ 841.900413][T15540] bond0: (slave bond_slave_0): Releasing backup interface [ 842.017479][T15545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 842.071000][T15545] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 842.155042][T15545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 842.214993][T15545] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 842.295694][T15545] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 842.337281][T15545] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 842.381400][T15545] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 842.451707][T15545] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 844.057511][T15566] mkiss: ax0: crc mode is auto. [ 844.062755][ T7725] Bluetooth: hci3: command 0x0c1a tx timeout [ 844.140976][ T7725] Bluetooth: hci5: command 0x0c1a tx timeout [ 844.221156][ T7725] Bluetooth: hci2: command 0x0c1a tx timeout [ 844.385763][ T7725] Bluetooth: hci1: command 0x0c1a tx timeout [ 844.914307][T15578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.975793][T15578] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 845.063681][T15578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 845.176519][T15578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 846.894598][T15594] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 846.941959][T12465] Bluetooth: hci5: command 0x0c1a tx timeout [ 846.948025][T12465] Bluetooth: hci3: command 0x0c1a tx timeout [ 847.101379][ T7230] Bluetooth: hci2: command 0x0c1a tx timeout [ 847.181103][ T7230] Bluetooth: hci1: command 0x0c1a tx timeout [ 847.733315][T15609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 847.743949][T15486] mkiss: ax0: crc mode is auto. [ 847.795472][T15609] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.832233][T15609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.868271][T15609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.917894][T15615] mkiss: ax1: crc mode is auto. [ 849.544331][T15631] could not allocate digest TFM handle 0 [ 849.544331][T15631] [ 849.742150][ T7230] Bluetooth: hci3: command 0x0c1a tx timeout [ 849.820960][ T7230] Bluetooth: hci5: command 0x0c1a tx timeout [ 849.901875][T15604] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.908011][ T7230] Bluetooth: hci1: command 0x0c1a tx timeout [ 852.152394][T15668] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 853.324231][T15675] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 853.400226][T15675] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 853.472357][T15675] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 853.563300][T15675] page_type: f5(slab) [ 853.629779][T15675] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 853.708627][T15675] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 853.758738][T15675] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 853.798642][T15675] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 853.898979][T15675] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 853.970096][T15675] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 854.031755][T15675] page dumped because: unmovable page [ 854.099869][T15675] page_owner tracks the page as allocated [ 854.149056][T15675] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7475, tgid 7475 (kworker/u10:19), ts 807649672403, free_ts 787647051890 [ 854.285862][T15675] post_alloc_hook+0x1af/0x220 [ 854.285954][T15675] get_page_from_freelist+0xd0b/0x31a0 [ 854.285984][T15675] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 854.286013][T15675] alloc_pages_mpol+0x1fb/0x550 [ 854.286049][T15675] new_slab+0x2c3/0x430 [ 854.286072][T15675] ___slab_alloc+0xe18/0x1c90 [ 854.286095][T15675] __slab_alloc.constprop.0+0x63/0x110 [ 854.286121][T15675] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 854.286155][T15675] kmalloc_reserve+0xef/0x2c0 [ 854.286191][T15675] __alloc_skb+0x186/0x410 [ 854.286217][T15675] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 854.286242][T15675] process_one_work+0x9ba/0x1b20 [ 854.286268][T15675] worker_thread+0x6c8/0xf10 [ 854.286292][T15675] kthread+0x3c5/0x780 [ 854.286313][T15675] ret_from_fork+0x983/0xb10 [ 854.286336][T15675] ret_from_fork_asm+0x1a/0x30 [ 854.286378][T15675] page last free pid 14736 tgid 14736 stack trace: [ 854.286394][T15675] __free_frozen_pages+0x7df/0x1170 [ 854.286417][T15675] vfree+0x1fd/0xb50 [ 854.301628][T15675] kcov_close+0x34/0x60 [ 854.301671][T15675] __fput+0x402/0xb70 [ 854.301694][T15675] task_work_run+0x150/0x240 [ 854.301720][T15675] do_exit+0x87f/0x2bd0 [ 854.301741][T15675] do_group_exit+0xd3/0x2a0 [ 854.301763][T15675] get_signal+0x2671/0x26d0 [ 854.301794][T15675] arch_do_signal_or_restart+0x8f/0x7a0 [ 854.301827][T15675] irqentry_exit+0x38a/0x8c0 [ 854.301848][T15675] asm_exc_stack_segment+0x26/0x30 [ 854.557535][T15695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'. [ 855.550325][T15711] netlink: 'syz.4.2333': attribute type 11 has an invalid length. [ 855.654126][T15709] mkiss: ax1: crc mode is auto. [ 857.831722][T15748] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 857.869605][T15748] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 857.974374][T15748] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 858.079954][T15748] page_type: f5(slab) [ 858.103208][T15748] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 858.181870][T15748] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 858.263947][T15748] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 858.331518][T15748] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 858.380125][T15748] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 858.437449][T15748] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 858.487055][T15748] page dumped because: unmovable page [ 858.597562][T15748] page_owner tracks the page as allocated [ 858.636434][T15748] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7475, tgid 7475 (kworker/u10:19), ts 807649672403, free_ts 787647051890 [ 858.772634][T15748] post_alloc_hook+0x1af/0x220 [ 858.802997][T15748] get_page_from_freelist+0xd0b/0x31a0 [ 858.820831][T15748] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 858.826781][T15748] alloc_pages_mpol+0x1fb/0x550 [ 858.870884][T15748] new_slab+0x2c3/0x430 [ 858.875112][T15748] ___slab_alloc+0xe18/0x1c90 [ 858.910897][T15748] __slab_alloc.constprop.0+0x63/0x110 [ 858.949111][T15748] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 858.966057][T15748] kmalloc_reserve+0xef/0x2c0 [ 858.987028][T15748] __alloc_skb+0x186/0x410 [ 859.013581][T15748] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 859.041997][T15748] process_one_work+0x9ba/0x1b20 [ 859.046997][T15748] worker_thread+0x6c8/0xf10 [ 859.087766][T15748] kthread+0x3c5/0x780 [ 859.106859][T15748] ret_from_fork+0x983/0xb10 [ 859.132134][T15748] ret_from_fork_asm+0x1a/0x30 [ 859.136969][T15748] page last free pid 14736 tgid 14736 stack trace: [ 859.187443][T15748] __free_frozen_pages+0x7df/0x1170 [ 859.197560][T15748] vfree+0x1fd/0xb50 [ 859.221071][T15748] kcov_close+0x34/0x60 [ 859.225295][T15748] __fput+0x402/0xb70 [ 859.254265][T15748] task_work_run+0x150/0x240 [ 859.292897][T15748] do_exit+0x87f/0x2bd0 [ 859.297122][T15748] do_group_exit+0xd3/0x2a0 [ 859.311209][T15748] get_signal+0x2671/0x26d0 [ 859.329214][T15748] arch_do_signal_or_restart+0x8f/0x7a0 [ 859.358778][T15748] irqentry_exit+0x38a/0x8c0 [ 859.378561][T15748] asm_exc_stack_segment+0x26/0x30 [ 859.507901][T15626] mkiss: ax0: crc mode is auto. [ 860.194888][T15777] mkiss: ax1: crc mode is auto. [ 861.381849][T15777] FAULT_INJECTION: forcing a failure. [ 861.381849][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 861.632556][T15777] CPU: 0 UID: 0 PID: 15777 Comm: syz.2.2340 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 861.632606][T15777] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 861.632619][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.632633][T15777] Call Trace: [ 861.632641][T15777] [ 861.632650][T15777] dump_stack_lvl+0x16c/0x1f0 [ 861.632690][T15777] should_fail_ex+0x512/0x640 [ 861.632717][T15777] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 861.632757][T15777] should_failslab+0xc2/0x120 [ 861.632793][T15777] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 861.632823][T15777] ? alloc_inode+0xc3/0x240 [ 861.632853][T15777] ? alloc_inode+0xc3/0x240 [ 861.632876][T15777] alloc_inode+0xc3/0x240 [ 861.632901][T15777] alloc_anon_inode+0x28/0x3e0 [ 861.632938][T15777] ioctx_alloc+0x4d1/0x2230 [ 861.632969][T15777] ? find_held_lock+0x2b/0x80 [ 861.632999][T15777] ? __pfx_ioctx_alloc+0x10/0x10 [ 861.633018][T15777] ? __might_fault+0x13b/0x190 [ 861.633071][T15777] __x64_sys_io_setup+0xc9/0x230 [ 861.633096][T15777] do_syscall_64+0xcd/0xf80 [ 861.633119][T15777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.633143][T15777] RIP: 0033:0x7f369118f7c9 [ 861.633162][T15777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.633185][T15777] RSP: 002b:00007f368f3d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 861.633207][T15777] RAX: ffffffffffffffda RBX: 00007f36913e6180 RCX: 00007f369118f7c9 [ 861.633224][T15777] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 861.633238][T15777] RBP: 00007f3691213f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.633252][T15777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.633266][T15777] R13: 00007f36913e6218 R14: 00007f36913e6180 R15: 00007ffc6078fdf8 [ 861.633296][T15777] [ 865.422460][T15841] mkiss: ax1: crc mode is auto. [ 866.157201][T15849] Invalid ELF header magic: != ELF [ 866.283086][T15853] mtrr: base(0x100000) is not aligned on a size(0x0000) boundary [ 867.069921][T15868] vhci_hcd vhci_hcd.2: invalid port number 16 [ 867.092074][T15868] vhci_hcd vhci_hcd.2: invalid port number 16 [ 867.717820][T15875] Process accounting resumed [ 867.748138][T15604] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 868.021199][T15878] zswap: compressor not available [ 868.131698][T15887] mkiss: ax1: crc mode is auto. [ 869.791483][T15918] zswap: compressor not available [ 871.024940][T15786] mkiss: ax0: crc mode is auto. [ 871.598790][T15946] sd 0:0:1:0: PR command failed: 1026 [ 871.644005][T15951] sd 0:0:1:0: PR command failed: 1026 [ 871.673347][T15946] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 871.710669][T15951] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 871.762564][T15946] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 871.789728][T15951] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 872.267901][ T31] audit: type=1800 audit(6063345397.315:18): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2380" name="dbroot" dev="configfs" ino=90611 res=0 errno=0 [ 873.037321][T15978] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2384'. [ 873.477951][T15976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109 [ 875.124898][T16012] vhci_hcd vhci_hcd.2: invalid port number 16 [ 875.159776][T16012] vhci_hcd vhci_hcd.2: invalid port number 16 [ 875.367998][T16018] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2395'. [ 875.494097][T16023] NFSD: Failed to start, no listeners configured. [ 876.287173][T16041] mkiss: ax1: crc mode is auto. [ 879.146186][T16073] vhci_hcd vhci_hcd.2: invalid port number 16 [ 879.160864][T16073] vhci_hcd vhci_hcd.2: invalid port number 16 [ 880.865217][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.872086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.704486][T16115] vhci_hcd vhci_hcd.2: invalid port number 16 [ 881.731539][T16115] vhci_hcd vhci_hcd.2: invalid port number 16 [ 882.503249][T15957] mkiss: ax0: crc mode is auto. [ 884.789077][T16150] binder: BINDER_SET_CONTEXT_MGR already set [ 884.840874][T16150] binder: 16149:16150 ioctl 4018620d 9 returned -16 [ 885.531567][T16161] sctp: [Deprecated]: syz.3.2428 (pid 16161) Use of int in max_burst socket option. [ 885.531567][T16161] Use struct sctp_assoc_value instead [ 886.814080][T16175] random: crng reseeded on system resumption [ 886.938705][T16175] RDS: rds_bind could not find a transport for fe80::736d:2f73:7461:626c, load rds_tcp or rds_rdma? [ 887.009269][T16175] FAULT_INJECTION: forcing a failure. [ 887.009269][T16175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.102087][T16175] CPU: 0 UID: 0 PID: 16175 Comm: syz.0.2431 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 887.102133][T16175] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 887.102146][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.102160][T16175] Call Trace: [ 887.102167][T16175] [ 887.102175][T16175] dump_stack_lvl+0x16c/0x1f0 [ 887.102213][T16175] should_fail_ex+0x512/0x640 [ 887.102242][T16175] strncpy_from_user+0x3b/0x2e0 [ 887.102268][T16175] getname_flags.part.0+0x8f/0x550 [ 887.102296][T16175] getname_flags+0x93/0xf0 [ 887.102324][T16175] do_sys_openat2+0xb9/0x290 [ 887.102348][T16175] ? __pfx_do_sys_openat2+0x10/0x10 [ 887.102382][T16175] __x64_sys_open+0x153/0x1e0 [ 887.102405][T16175] ? __pfx___x64_sys_open+0x10/0x10 [ 887.102435][T16175] ? rcu_is_watching+0x12/0xc0 [ 887.102467][T16175] do_syscall_64+0xcd/0xf80 [ 887.102488][T16175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.102509][T16175] RIP: 0033:0x7fb9e858f7c9 [ 887.102525][T16175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.102548][T16175] RSP: 002b:00007fb9e9387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 887.102567][T16175] RAX: ffffffffffffffda RBX: 00007fb9e87e5fa0 RCX: 00007fb9e858f7c9 [ 887.102582][T16175] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 887.102595][T16175] RBP: 00007fb9e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.102608][T16175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.102621][T16175] R13: 00007fb9e87e6038 R14: 00007fb9e87e5fa0 R15: 00007ffc3bf3c8d8 [ 887.102655][T16175] [ 888.994595][T16205] vhci_hcd vhci_hcd.2: invalid port number 16 [ 889.119746][T16205] vhci_hcd vhci_hcd.2: invalid port number 16 [ 889.792807][T16213] vhci_hcd vhci_hcd.2: invalid port number 16 [ 889.822521][T16213] vhci_hcd vhci_hcd.2: invalid port number 16 [ 890.444452][T16221] mkiss: ax1: crc mode is auto. [ 890.971474][T16233] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 893.386677][T16255] vhci_hcd vhci_hcd.2: invalid port number 16 [ 893.423219][T16255] vhci_hcd vhci_hcd.2: invalid port number 16 [ 893.940805][T16129] mkiss: ax0: crc mode is auto. [ 894.572435][T16272] FAULT_INJECTION: forcing a failure. [ 894.572435][T16272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.670139][T16272] CPU: 0 UID: 0 PID: 16272 Comm: syz.0.2454 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 894.670188][T16272] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 894.670201][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.670215][T16272] Call Trace: [ 894.670223][T16272] [ 894.670232][T16272] dump_stack_lvl+0x16c/0x1f0 [ 894.670272][T16272] should_fail_ex+0x512/0x640 [ 894.670303][T16272] should_fail_alloc_page+0xe7/0x130 [ 894.670341][T16272] prepare_alloc_pages+0x401/0x670 [ 894.670377][T16272] ? rcu_is_watching+0x12/0xc0 [ 894.670411][T16272] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 894.670440][T16272] ? should_fail_alloc_page+0xee/0x130 [ 894.670478][T16272] ? rcu_is_watching+0x12/0xc0 [ 894.670509][T16272] ? trace_mm_page_alloc+0x11b/0x180 [ 894.670544][T16272] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 894.670571][T16272] ? stack_trace_save+0x8e/0xc0 [ 894.670607][T16272] ? __pfx_stack_trace_save+0x10/0x10 [ 894.670643][T16272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.670671][T16272] ? find_held_lock+0x2b/0x80 [ 894.670704][T16272] ? kasan_save_stack+0x42/0x60 [ 894.670736][T16272] ? __get_vm_area_node+0x1ca/0x330 [ 894.670775][T16272] ? __vmalloc_node_noprof+0xad/0xf0 [ 894.670795][T16272] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 894.670825][T16272] ? do_alloc_pages+0x136/0x2d0 [ 894.670850][T16272] ? snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 894.670879][T16272] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 894.670906][T16272] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 894.670935][T16272] ? snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 894.670959][T16272] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 894.670984][T16272] ? do_syscall_64+0x4ee/0xf80 [ 894.671003][T16272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.671032][T16272] alloc_pages_bulk_noprof+0x77a/0x1410 [ 894.671068][T16272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.671105][T16272] ? policy_nodemask+0xea/0x4e0 [ 894.671143][T16272] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 894.671174][T16272] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 894.671221][T16272] __kasan_populate_vmalloc+0xfb/0x220 [ 894.671258][T16272] alloc_vmap_area+0x98d/0x2a50 [ 894.671303][T16272] ? __pfx_alloc_vmap_area+0x10/0x10 [ 894.671344][T16272] __get_vm_area_node+0x1ca/0x330 [ 894.671385][T16272] __vmalloc_node_range_noprof+0x247/0x16b0 [ 894.671409][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 894.671444][T16272] ? __pfx___might_resched+0x10/0x10 [ 894.671476][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 894.671507][T16272] ? trace_contention_end+0xdd/0x110 [ 894.671531][T16272] ? do_syscall_64+0x4ee/0xf80 [ 894.671551][T16272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 894.671575][T16272] ? do_alloc_pages+0xf8/0x2d0 [ 894.671606][T16272] ? __mutex_unlock_slowpath+0x161/0x790 [ 894.671632][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 894.671660][T16272] __vmalloc_node_noprof+0xad/0xf0 [ 894.671682][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 894.671710][T16272] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 894.671744][T16272] __snd_dma_alloc_pages+0x53/0x90 [ 894.671774][T16272] snd_dma_alloc_dir_pages+0x151/0x240 [ 894.671807][T16272] do_alloc_pages+0x136/0x2d0 [ 894.671838][T16272] snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 894.671873][T16272] snd_pcm_hw_params+0x1656/0x1ba0 [ 894.671906][T16272] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 894.671936][T16272] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 894.671965][T16272] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 894.671990][T16272] ? __asan_memset+0x23/0x50 [ 894.672019][T16272] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 894.672057][T16272] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 894.672095][T16272] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 894.672120][T16272] ? __pfx___mutex_lock+0x10/0x10 [ 894.672162][T16272] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 894.672188][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 894.672211][T16272] snd_pcm_oss_sync+0x1de/0x840 [ 894.672234][T16272] ? kmem_cache_free+0x171/0x770 [ 894.672265][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 894.672290][T16272] snd_pcm_oss_release+0x28b/0x310 [ 894.672315][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 894.672339][T16272] __fput+0x402/0xb70 [ 894.672368][T16272] task_work_run+0x150/0x240 [ 894.672394][T16272] ? __pfx_task_work_run+0x10/0x10 [ 894.672417][T16272] ? __do_sys_close_range+0x278/0x730 [ 894.672460][T16272] exit_to_user_mode_loop+0xfb/0x540 [ 894.672491][T16272] do_syscall_64+0x4ee/0xf80 [ 894.672513][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.672536][T16272] RIP: 0033:0x7fb9e858f7c9 [ 894.672555][T16272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.672577][T16272] RSP: 002b:00007fb9e9366038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 894.672599][T16272] RAX: 0000000000000000 RBX: 00007fb9e87e6090 RCX: 00007fb9e858f7c9 [ 894.672613][T16272] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 894.672626][T16272] RBP: 00007fb9e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 894.672641][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.672654][T16272] R13: 00007fb9e87e6128 R14: 00007fb9e87e6090 R15: 00007ffc3bf3c8d8 [ 894.672684][T16272] [ 897.118791][T16275] usb usb15: usbfs: process 16275 (syz.0.2454) did not claim interface 0 before use [ 897.206683][T16272] syz.0.2454: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 897.419989][T16272] CPU: 0 UID: 0 PID: 16272 Comm: syz.0.2454 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 897.420039][T16272] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 897.420053][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.420067][T16272] Call Trace: [ 897.420075][T16272] [ 897.420083][T16272] dump_stack_lvl+0x16c/0x1f0 [ 897.420124][T16272] warn_alloc+0x248/0x3a0 [ 897.420154][T16272] ? __pfx_warn_alloc+0x10/0x10 [ 897.420184][T16272] ? __get_vm_area_node+0x2cd/0x330 [ 897.420225][T16272] ? __get_vm_area_node+0x2cd/0x330 [ 897.420260][T16272] ? __get_vm_area_node+0x208/0x330 [ 897.420301][T16272] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 897.420331][T16272] ? __pfx___might_resched+0x10/0x10 [ 897.420363][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 897.420394][T16272] ? trace_contention_end+0xdd/0x110 [ 897.420419][T16272] ? do_syscall_64+0x4ee/0xf80 [ 897.420440][T16272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 897.420465][T16272] ? do_alloc_pages+0xf8/0x2d0 [ 897.420495][T16272] ? __mutex_unlock_slowpath+0x161/0x790 [ 897.420521][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 897.420549][T16272] __vmalloc_node_noprof+0xad/0xf0 [ 897.420571][T16272] ? __snd_dma_alloc_pages+0x53/0x90 [ 897.420600][T16272] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 897.420633][T16272] __snd_dma_alloc_pages+0x53/0x90 [ 897.420664][T16272] snd_dma_alloc_dir_pages+0x151/0x240 [ 897.420697][T16272] do_alloc_pages+0x136/0x2d0 [ 897.420728][T16272] snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 897.420767][T16272] snd_pcm_hw_params+0x1656/0x1ba0 [ 897.420801][T16272] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 897.420832][T16272] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 897.420861][T16272] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 897.420893][T16272] ? __asan_memset+0x23/0x50 [ 897.420924][T16272] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 897.420955][T16272] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 897.420994][T16272] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 897.421019][T16272] ? __pfx___mutex_lock+0x10/0x10 [ 897.421061][T16272] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 897.421086][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 897.421110][T16272] snd_pcm_oss_sync+0x1de/0x840 [ 897.421132][T16272] ? kmem_cache_free+0x171/0x770 [ 897.421163][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 897.421187][T16272] snd_pcm_oss_release+0x28b/0x310 [ 897.421213][T16272] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 897.421237][T16272] __fput+0x402/0xb70 [ 897.421266][T16272] task_work_run+0x150/0x240 [ 897.421292][T16272] ? __pfx_task_work_run+0x10/0x10 [ 897.421315][T16272] ? __do_sys_close_range+0x278/0x730 [ 897.421358][T16272] exit_to_user_mode_loop+0xfb/0x540 [ 897.421389][T16272] do_syscall_64+0x4ee/0xf80 [ 897.421411][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.421434][T16272] RIP: 0033:0x7fb9e858f7c9 [ 897.421453][T16272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.421475][T16272] RSP: 002b:00007fb9e9366038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 897.421497][T16272] RAX: 0000000000000000 RBX: 00007fb9e87e6090 RCX: 00007fb9e858f7c9 [ 897.421512][T16272] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 897.421525][T16272] RBP: 00007fb9e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.421539][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.421553][T16272] R13: 00007fb9e87e6128 R14: 00007fb9e87e6090 R15: 00007ffc3bf3c8d8 [ 897.421583][T16272] [ 897.915592][T16260] Process accounting paused [ 898.216899][T12465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.252117][T12465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.353340][T12465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.367270][T12465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.379657][T12465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.017222][T16282] chnl_net:caif_netlink_parms(): no params data found [ 899.120505][T16272] Mem-Info: [ 899.126958][T16272] active_anon:15341 inactive_anon:7 isolated_anon:0 [ 899.126958][T16272] active_file:13754 inactive_file:46053 isolated_file:0 [ 899.126958][T16272] unevictable:768 dirty:869 writeback:0 [ 899.126958][T16272] slab_reclaimable:12349 slab_unreclaimable:102293 [ 899.126958][T16272] mapped:32715 shmem:6416 pagetables:1256 [ 899.126958][T16272] sec_pagetables:0 bounce:0 [ 899.126958][T16272] kernel_misc_reclaimable:0 [ 899.126958][T16272] free:1304809 free_pcp:13915 free_cma:0 [ 899.264830][T16272] Node 0 active_anon:65108kB inactive_anon:28kB active_file:55016kB inactive_file:183900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132760kB dirty:3472kB writeback:0kB shmem:27820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12320kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 899.409850][T16272] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 899.517445][T16272] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.639548][T16272] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 899.660387][ T7475] bridge_slave_1: left allmulticast mode [ 899.666626][ T7475] bridge_slave_1: left promiscuous mode [ 899.672608][T16272] Node 0 DMA32 free:1322360kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70944kB inactive_anon:28kB active_file:55016kB inactive_file:183908kB unevictable:1536kB writepending:3572kB zspages:268kB present:3129332kB managed:2541020kB mlocked:0kB bounce:0kB free_pcp:19496kB local_pcp:19496kB free_cma:0kB [ 899.721094][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.792837][T16272] lowmem_reserve[]: 0 0 1 1 1 [ 899.801100][ T7475] bridge_slave_0: left allmulticast mode [ 899.806802][ T7475] bridge_slave_0: left promiscuous mode [ 899.822819][T16272] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 899.857043][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.910947][T16272] lowmem_reserve[]: 0 0 0 0 0 [ 899.940848][T16272] Node 1 Normal free:3870868kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:37076kB local_pcp:37076kB free_cma:0kB [ 900.100936][T16272] lowmem_reserve[]: 0 0 0 0 0 [ 900.130633][T16272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 900.197037][T16272] Node 0 DMA32: 5096*4kB (UME) 4104*8kB (UME) 3724*16kB (UME) 1313*32kB (UME) 766*64kB (UME) 601*128kB (UME) 515*256kB (UME) 315*512kB (UME) 167*1024kB (UME) 13*2048kB (UM) 133*4096kB (UM) = 1316288kB [ 900.290888][T16272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 900.340195][T16272] Node 1 Normal: 191*4kB (U) 49*8kB (UE) 29*16kB (UME) 222*32kB (UME) 80*64kB (UE) 19*128kB (UE) 3*256kB (U) 5*512kB (UE) 3*1024kB (UE) 3*2048kB (UE) 938*4096kB (UM) = 3870868kB [ 900.415754][T16272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.463325][T16272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 900.497998][T16272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.530883][T16272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 900.570867][T16272] 74892 total pagecache pages [ 900.610862][T16272] 29 pages in swap cache [ 900.622247][T15604] Bluetooth: hci0: command tx timeout [ 900.628706][T16272] Free swap = 124816kB [ 900.636984][T16272] Total swap = 124996kB [ 900.661494][T16272] 2097051 pages RAM [ 900.673562][T16272] 0 pages HighMem/MovableOnly [ 900.689696][T16272] 429770 pages reserved [ 900.710866][T16272] 0 pages cma reserved [ 900.748903][ T7475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.778929][ T7475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.811322][ T7475] bond0 (unregistering): Released all slaves [ 900.912797][T16282] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.940262][T16282] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.979483][T16282] bridge_slave_0: entered allmulticast mode [ 901.012224][T16282] bridge_slave_0: entered promiscuous mode [ 901.197178][T16282] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.211064][T16282] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.221317][T16310] mkiss: ax1: crc mode is auto. [ 901.226371][T16282] bridge_slave_1: entered allmulticast mode [ 901.241136][T16282] bridge_slave_1: entered promiscuous mode [ 901.422982][T16282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.463607][T16282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.617184][ T7475] hsr_slave_0: left promiscuous mode [ 901.637232][ T7475] hsr_slave_1: left promiscuous mode [ 901.656674][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.681008][ T7475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.704955][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.741132][ T7475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.794339][ T7475] veth1_macvtap: left promiscuous mode [ 901.815821][ T7475] veth0_macvtap: left promiscuous mode [ 901.836446][ T7475] veth1_vlan: left promiscuous mode [ 901.852209][ T7475] veth0_vlan: left promiscuous mode [ 902.268691][T16331] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 902.705294][T15604] Bluetooth: hci0: command tx timeout [ 903.156101][ T7475] team0 (unregistering): Port device team_slave_1 removed [ 903.274440][ T7475] team0 (unregistering): Port device team_slave_0 removed [ 904.106915][T16282] team0: Port device team_slave_0 added [ 904.165432][T16282] team0: Port device team_slave_1 added [ 904.184759][T16350] futex_wake_op: syz.2.2468 tries to shift op by -2048; fix this program [ 904.296969][T16350] futex_wake_op: syz.2.2468 tries to shift op by -2048; fix this program [ 904.305752][T16282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.340849][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.413181][T16351] 0x000000000001-0x000000020000 : "" [ 904.466255][T16351] ftl_cs: FTL header corrupt! [ 904.496622][T16282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.567712][T16282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.605152][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.714701][T16282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.782442][T15604] Bluetooth: hci0: command tx timeout [ 904.932054][T16282] hsr_slave_0: entered promiscuous mode [ 904.967162][T16282] hsr_slave_1: entered promiscuous mode [ 905.801100][T16360] bridge0: port 3(veth0_to_bridge) entered blocking state [ 905.849520][T16360] bridge0: port 3(veth0_to_bridge) entered disabled state [ 905.894304][T16365] FAULT_INJECTION: forcing a failure. [ 905.894304][T16365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 905.926574][T16360] veth0_to_bridge: entered allmulticast mode [ 905.940990][T16365] CPU: 0 UID: 0 PID: 16365 Comm: syz.3.2469 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 905.941035][T16365] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 905.941047][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.941060][T16365] Call Trace: [ 905.941067][T16365] [ 905.941076][T16365] dump_stack_lvl+0x16c/0x1f0 [ 905.941114][T16365] should_fail_ex+0x512/0x640 [ 905.941143][T16365] should_fail_alloc_page+0xe7/0x130 [ 905.941178][T16365] prepare_alloc_pages+0x401/0x670 [ 905.941219][T16365] ? rcu_is_watching+0x12/0xc0 [ 905.941253][T16365] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 905.941279][T16365] ? should_fail_alloc_page+0xee/0x130 [ 905.941315][T16365] ? rcu_is_watching+0x12/0xc0 [ 905.941344][T16365] ? trace_mm_page_alloc+0x11b/0x180 [ 905.941378][T16365] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 905.941404][T16365] ? stack_trace_save+0x8e/0xc0 [ 905.941438][T16365] ? __pfx_stack_trace_save+0x10/0x10 [ 905.941472][T16365] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 905.941506][T16365] ? find_held_lock+0x2b/0x80 [ 905.941555][T16365] ? kasan_save_stack+0x42/0x60 [ 905.941608][T16365] ? __get_vm_area_node+0x1ca/0x330 [ 905.941644][T16365] ? __vmalloc_node_noprof+0xad/0xf0 [ 905.941666][T16365] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 905.941697][T16365] ? do_alloc_pages+0x136/0x2d0 [ 905.941723][T16365] ? snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 905.941752][T16365] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 905.941781][T16365] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 905.941810][T16365] ? snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 905.941835][T16365] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 905.941863][T16365] ? do_syscall_64+0x4ee/0xf80 [ 905.941882][T16365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.941911][T16365] alloc_pages_bulk_noprof+0x77a/0x1410 [ 905.941939][T16365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.941976][T16365] ? policy_nodemask+0xea/0x4e0 [ 905.942015][T16365] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 905.942046][T16365] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 905.942095][T16365] __kasan_populate_vmalloc+0xfb/0x220 [ 905.942132][T16365] alloc_vmap_area+0x98d/0x2a50 [ 905.942179][T16365] ? __pfx_alloc_vmap_area+0x10/0x10 [ 905.942227][T16365] __get_vm_area_node+0x1ca/0x330 [ 905.942270][T16365] __vmalloc_node_range_noprof+0x247/0x16b0 [ 905.942295][T16365] ? __snd_dma_alloc_pages+0x53/0x90 [ 905.942332][T16365] ? __pfx___might_resched+0x10/0x10 [ 905.942365][T16365] ? __snd_dma_alloc_pages+0x53/0x90 [ 905.942398][T16365] ? trace_contention_end+0xdd/0x110 [ 905.942422][T16365] ? do_syscall_64+0x4ee/0xf80 [ 905.942443][T16365] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 905.942468][T16365] ? do_alloc_pages+0xf8/0x2d0 [ 905.942500][T16365] ? __mutex_unlock_slowpath+0x161/0x790 [ 905.942526][T16365] ? __snd_dma_alloc_pages+0x53/0x90 [ 905.942556][T16365] __vmalloc_node_noprof+0xad/0xf0 [ 905.942578][T16365] ? __snd_dma_alloc_pages+0x53/0x90 [ 905.942607][T16365] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 905.942642][T16365] __snd_dma_alloc_pages+0x53/0x90 [ 905.942672][T16365] snd_dma_alloc_dir_pages+0x151/0x240 [ 905.942707][T16365] do_alloc_pages+0x136/0x2d0 [ 905.942751][T16365] snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 905.942797][T16365] snd_pcm_hw_params+0x1656/0x1ba0 [ 905.942829][T16365] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 905.942857][T16365] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 905.942883][T16365] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 905.942907][T16365] ? __asan_memset+0x23/0x50 [ 905.942935][T16365] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 905.942964][T16365] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 905.943003][T16365] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 905.943027][T16365] ? __pfx___mutex_lock+0x10/0x10 [ 905.943103][T16365] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 905.943129][T16365] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 905.943153][T16365] snd_pcm_oss_sync+0x1de/0x840 [ 905.943177][T16365] ? kmem_cache_free+0x171/0x770 [ 905.943214][T16365] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 905.943239][T16365] snd_pcm_oss_release+0x28b/0x310 [ 905.943266][T16365] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 905.943291][T16365] __fput+0x402/0xb70 [ 905.943321][T16365] task_work_run+0x150/0x240 [ 905.943348][T16365] ? __pfx_task_work_run+0x10/0x10 [ 905.943372][T16365] ? __do_sys_close_range+0x278/0x730 [ 905.943417][T16365] exit_to_user_mode_loop+0xfb/0x540 [ 905.943450][T16365] do_syscall_64+0x4ee/0xf80 [ 905.943473][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.943497][T16365] RIP: 0033:0x7fdd7338f7c9 [ 905.943516][T16365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.943539][T16365] RSP: 002b:00007fdd74294038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 905.943561][T16365] RAX: 0000000000000000 RBX: 00007fdd735e6090 RCX: 00007fdd7338f7c9 [ 905.943576][T16365] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 905.943591][T16365] RBP: 00007fdd73413f91 R08: 0000000000000000 R09: 0000000000000000 [ 905.943605][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.943620][T16365] R13: 00007fdd735e6128 R14: 00007fdd735e6090 R15: 00007fff5a382738 [ 905.943652][T16365] [ 906.523692][T16360] veth0_to_bridge: entered promiscuous mode [ 906.529849][T16360] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 906.542946][T16360] bridge0: port 3(veth0_to_bridge) entered blocking state [ 906.550129][T16360] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 906.735857][T16282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 906.799279][T16282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 906.816036][T16274] mkiss: ax0: crc mode is auto. [ 906.860905][T15604] Bluetooth: hci0: command tx timeout [ 906.877142][T16282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 906.915276][T16282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 907.123809][T16282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.186382][T16282] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.247527][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.254719][ T8421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.299927][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.307097][ T8421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.151178][T16282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.083106][T16282] veth0_vlan: entered promiscuous mode [ 909.143111][T16282] veth1_vlan: entered promiscuous mode [ 909.262937][T16282] veth0_macvtap: entered promiscuous mode [ 909.273001][T16406] program syz.0.2474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.331017][T16282] veth1_macvtap: entered promiscuous mode [ 909.401006][T16282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.466995][T16282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.576403][ T7236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.599732][T16410] mkiss: ax1: crc mode is auto. [ 909.616902][ T7236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.699965][ T7236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.795009][ T7236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.004084][ T7223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.047713][ T7223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.343915][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.360873][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.700962][T16434] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 913.851425][T12465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 913.863784][T12465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 913.873702][T12465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 913.885555][T12465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 913.894266][T12465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.059248][T16476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 915.080207][T16455] chnl_net:caif_netlink_parms(): no params data found [ 915.533575][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.578350][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.602610][T16455] bridge_slave_0: entered allmulticast mode [ 915.639973][T16455] bridge_slave_0: entered promiscuous mode [ 915.673992][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.709435][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.738415][T16455] bridge_slave_1: entered allmulticast mode [ 915.774121][T16455] bridge_slave_1: entered promiscuous mode [ 915.802211][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 915.932333][T16455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.982313][T12465] Bluetooth: hci4: command tx timeout [ 916.037550][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.352903][T16455] team0: Port device team_slave_0 added [ 916.368933][T16501] FAULT_INJECTION: forcing a failure. [ 916.368933][T16501] name failslab, interval 1, probability 0, space 0, times 0 [ 916.395766][T16455] team0: Port device team_slave_1 added [ 916.432791][T16501] CPU: 0 UID: 0 PID: 16501 Comm: syz.5.2495 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 916.432837][T16501] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 916.432850][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.432863][T16501] Call Trace: [ 916.432870][T16501] [ 916.432879][T16501] dump_stack_lvl+0x16c/0x1f0 [ 916.432917][T16501] should_fail_ex+0x512/0x640 [ 916.432942][T16501] ? kmem_cache_alloc_noprof+0x62/0x770 [ 916.432971][T16501] should_failslab+0xc2/0x120 [ 916.433008][T16501] kmem_cache_alloc_noprof+0x83/0x770 [ 916.433033][T16501] ? rcu_is_watching+0x12/0xc0 [ 916.433082][T16501] ? seq_open+0x55/0x170 [ 916.433113][T16501] ? seq_open+0x55/0x170 [ 916.433138][T16501] seq_open+0x55/0x170 [ 916.433165][T16501] __seq_open_private+0x3e/0xd0 [ 916.433196][T16501] tracing_open+0x255/0xe10 [ 916.433228][T16501] do_dentry_open+0x748/0x1590 [ 916.433262][T16501] ? __pfx_tracing_open+0x10/0x10 [ 916.433296][T16501] vfs_open+0x82/0x3f0 [ 916.433324][T16501] path_openat+0x2078/0x3140 [ 916.433377][T16501] ? __pfx_path_openat+0x10/0x10 [ 916.433424][T16501] do_filp_open+0x20b/0x470 [ 916.433461][T16501] ? __pfx_do_filp_open+0x10/0x10 [ 916.433518][T16501] ? alloc_fd+0x471/0x7d0 [ 916.433561][T16501] do_sys_openat2+0x121/0x290 [ 916.433587][T16501] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.433625][T16501] __x64_sys_openat+0x174/0x210 [ 916.433652][T16501] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.433691][T16501] do_syscall_64+0xcd/0xf80 [ 916.433715][T16501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.433739][T16501] RIP: 0033:0x7f10d6b8f7c9 [ 916.433757][T16501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.433785][T16501] RSP: 002b:00007f10d7999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.433808][T16501] RAX: ffffffffffffffda RBX: 00007f10d6de5fa0 RCX: 00007f10d6b8f7c9 [ 916.433824][T16501] RDX: 1a6b75d63882a792 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 916.433840][T16501] RBP: 00007f10d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 916.433854][T16501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.433868][T16501] R13: 00007f10d6de6038 R14: 00007f10d6de5fa0 R15: 00007fffbbb84208 [ 916.433899][T16501] [ 916.690695][T16455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.697728][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.725573][T16455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.738615][T16455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.745604][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.772166][T16455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.814614][T16455] hsr_slave_0: entered promiscuous mode [ 916.821125][T16455] hsr_slave_1: entered promiscuous mode [ 916.827189][T16455] debugfs: 'hsr0' already exists in 'hsr' [ 916.832985][T16455] Cannot create hsr debugfs directory [ 917.436127][T16455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.580500][T16512] __vm_enough_memory: pid: 16512, comm: syz.2.2496, bytes: 4398046511104 not enough memory for the allocation [ 917.739289][T16455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.797068][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 917.835851][T16518] FAULT_INJECTION: forcing a failure. [ 917.835851][T16518] name failslab, interval 1, probability 0, space 0, times 0 [ 917.897191][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.5.2499 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 917.897240][T16518] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 917.897254][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 917.897268][T16518] Call Trace: [ 917.897276][T16518] [ 917.897285][T16518] dump_stack_lvl+0x16c/0x1f0 [ 917.897327][T16518] should_fail_ex+0x512/0x640 [ 917.897353][T16518] ? __kmalloc_cache_noprof+0x5f/0x800 [ 917.897382][T16518] should_failslab+0xc2/0x120 [ 917.897418][T16518] __kmalloc_cache_noprof+0x80/0x800 [ 917.897444][T16518] ? init_srcu_struct_fields+0x97a/0xde0 [ 917.897475][T16518] ? init_srcu_struct_fields+0x97a/0xde0 [ 917.897501][T16518] init_srcu_struct_fields+0x97a/0xde0 [ 917.897528][T16518] ? lockdep_init_map_type+0x5c/0x270 [ 917.897555][T16518] kvm_dev_ioctl+0x7ac/0x1a80 [ 917.897590][T16518] ? find_held_lock+0x2b/0x80 [ 917.897618][T16518] ? hook_file_ioctl_common+0x144/0x410 [ 917.897647][T16518] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 917.897681][T16518] ? __fget_files+0x20e/0x3c0 [ 917.897717][T16518] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 917.897748][T16518] __x64_sys_ioctl+0x18e/0x210 [ 917.897778][T16518] do_syscall_64+0xcd/0xf80 [ 917.897800][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.897824][T16518] RIP: 0033:0x7f10d6b8f7c9 [ 917.897841][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.897864][T16518] RSP: 002b:00007f10d7999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.897885][T16518] RAX: ffffffffffffffda RBX: 00007f10d6de5fa0 RCX: 00007f10d6b8f7c9 [ 917.897900][T16518] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 917.897914][T16518] RBP: 00007f10d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 917.897928][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.897942][T16518] R13: 00007f10d6de6038 R14: 00007f10d6de5fa0 R15: 00007fffbbb84208 [ 917.897971][T16518] [ 918.406963][T16455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.427528][T15604] Bluetooth: hci4: command tx timeout [ 918.723886][T16455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.820126][T16391] mkiss: ax0: crc mode is auto. [ 919.043625][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 919.734704][T16455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 919.802391][T16455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 920.046294][T16455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 920.106634][T16455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 920.231641][T16546] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 920.461274][T15604] Bluetooth: hci4: command tx timeout [ 920.573363][T16560] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 920.616718][T16455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.709784][T16455] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.800188][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.807369][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.952260][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.959528][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.838641][T16455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.035007][T16455] veth0_vlan: entered promiscuous mode [ 922.099512][T16455] veth1_vlan: entered promiscuous mode [ 922.234130][T16455] veth0_macvtap: entered promiscuous mode [ 922.264508][T16455] veth1_macvtap: entered promiscuous mode [ 922.362583][T16455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.506606][T16455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.543837][T15604] Bluetooth: hci4: command tx timeout [ 922.576579][ T8421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.616916][ T8421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.673464][ T8421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.718628][ T8421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.944567][ T9557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.995656][ T9557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.121337][ T7213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.157847][ T7213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.453602][T16611] netlink: 672 bytes leftover after parsing attributes in process `syz.5.2515'. [ 924.090624][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2519'. syzkaller syzkaller login: [ 925.565782][ T31] audit: type=1804 audit(6063345450.605:19): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2522" name="/newroot/56/file0" dev="tmpfs" ino=313 res=1 errno=0 [ 925.593588][T16650] FAULT_INJECTION: forcing a failure. [ 925.593588][T16650] name failslab, interval 1, probability 0, space 0, times 0 [ 925.677243][T16647] zram0: detected capacity change from 8 to 0 [ 925.736166][T16650] CPU: 0 UID: 0 PID: 16650 Comm: syz.5.2523 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 925.736216][T16650] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 925.736229][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 925.736242][T16650] Call Trace: [ 925.736250][T16650] [ 925.736258][T16650] dump_stack_lvl+0x16c/0x1f0 [ 925.736299][T16650] should_fail_ex+0x512/0x640 [ 925.736325][T16650] ? __kmalloc_cache_noprof+0x5f/0x800 [ 925.736355][T16650] should_failslab+0xc2/0x120 [ 925.736391][T16650] __kmalloc_cache_noprof+0x80/0x800 [ 925.736417][T16650] ? pkcs7_parse_message+0x100/0x720 [ 925.736450][T16650] ? pkcs7_parse_message+0x100/0x720 [ 925.736479][T16650] pkcs7_parse_message+0x100/0x720 [ 925.736519][T16650] verify_pkcs7_signature+0x30/0xa0 [ 925.736552][T16650] valid_regdb+0x211/0x590 [ 925.736594][T16650] ? __pfx_valid_regdb+0x10/0x10 [ 925.736638][T16650] reg_reload_regdb+0x11a/0x460 [ 925.736664][T16650] ? __pfx_reg_reload_regdb+0x10/0x10 [ 925.736690][T16650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 925.736720][T16650] ? nl80211_pre_doit+0x1b0/0xb10 [ 925.736754][T16650] genl_family_rcv_msg_doit+0x209/0x2f0 [ 925.736780][T16650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 925.736804][T16650] ? genl_get_cmd+0x194/0x580 [ 925.736831][T16650] ? bpf_lsm_capable+0x9/0x10 [ 925.736862][T16650] ? security_capable+0x7e/0x260 [ 925.736904][T16650] genl_rcv_msg+0x55c/0x800 [ 925.736930][T16650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.736953][T16650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 925.736983][T16650] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 925.737005][T16650] ? __pfx_nl80211_post_doit+0x10/0x10 [ 925.737047][T16650] netlink_rcv_skb+0x158/0x420 [ 925.737082][T16650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.737106][T16650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.737163][T16650] ? netlink_deliver_tap+0x1ae/0xd30 [ 925.737197][T16650] genl_rcv+0x28/0x40 [ 925.737215][T16650] netlink_unicast+0x5aa/0x870 [ 925.737270][T16650] ? __pfx_netlink_unicast+0x10/0x10 [ 925.737315][T16650] netlink_sendmsg+0x8c8/0xdd0 [ 925.737354][T16650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.737393][T16650] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 925.737436][T16650] ____sys_sendmsg+0xa5d/0xc30 [ 925.737460][T16650] ? copy_msghdr_from_user+0x10a/0x160 [ 925.737490][T16650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.737524][T16650] ? __pfx_futex_wake_mark+0x10/0x10 [ 925.737561][T16650] ___sys_sendmsg+0x134/0x1d0 [ 925.737629][T16650] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.737660][T16650] ? futex_private_hash_put+0x160/0x1b0 [ 925.737715][T16650] __sys_sendmsg+0x16d/0x220 [ 925.737747][T16650] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.737778][T16650] ? __x64_sys_futex+0x1e0/0x4c0 [ 925.737821][T16650] do_syscall_64+0xcd/0xf80 [ 925.737844][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.737867][T16650] RIP: 0033:0x7f10d6b8f7c9 [ 925.737885][T16650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.737907][T16650] RSP: 002b:00007f10d7999038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.737929][T16650] RAX: ffffffffffffffda RBX: 00007f10d6de5fa0 RCX: 00007f10d6b8f7c9 [ 925.737945][T16650] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000005 [ 925.737959][T16650] RBP: 00007f10d6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 925.737973][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.737987][T16650] R13: 00007f10d6de6038 R14: 00007f10d6de5fa0 R15: 00007fffbbb84208 [ 925.738016][T16650] [ 926.867202][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2526'. [ 926.943771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 926.956445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.969005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 926.981386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.993831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 927.006305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.018698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 927.031037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.043504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 927.055839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.950900][ C0] net_ratelimit: 14749 callbacks suppressed [ 931.950921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.969200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 931.981486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.993799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 932.006051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.018417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 932.030667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.042925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 932.055202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.067489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 934.068265][ C0] sched: DL replenish lagged too much [ 936.960829][ C0] net_ratelimit: 14958 callbacks suppressed [ 936.960848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 936.979162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 936.991518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.003809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 937.016122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.028515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 937.040814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.053126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 937.065386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.077658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 941.970792][ C0] net_ratelimit: 14950 callbacks suppressed [ 941.970812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.989060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 942.001376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 942.013595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.026447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.038859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 942.051136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 942.063370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.075723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.088137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 946.980952][ C0] net_ratelimit: 16250 callbacks suppressed [ 946.980973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.999378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 947.011714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.023985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.036343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.048714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 947.061014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.073273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.085583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.097957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 951.992500][ C0] net_ratelimit: 9430 callbacks suppressed [ 951.992520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.010797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 952.023088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 952.035370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.048436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.060799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 952.073109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 952.085370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.098523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.110879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 957.001312][ C0] net_ratelimit: 9298 callbacks suppressed [ 957.001332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.019582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 957.031887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.044179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.057332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.069724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 957.082136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.094404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.107523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.119906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 962.010772][ C0] net_ratelimit: 9511 callbacks suppressed [ 962.010792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 962.029002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 962.041269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.054323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.066663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 962.078948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 962.091204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.104339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.116707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 962.128997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.020812][ C0] net_ratelimit: 9511 callbacks suppressed [ 967.020831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.039106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.052238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.064582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 967.076858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.089080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.102200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.114640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 967.126906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.139253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.031787][ C0] net_ratelimit: 9524 callbacks suppressed [ 972.031808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.050053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 972.062315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.074646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.087753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.100084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 972.112385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.124674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.138490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.150872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 977.040881][ C0] net_ratelimit: 9489 callbacks suppressed [ 977.040901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.059879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.072201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 977.084605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.096905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.110279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.122682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 977.134934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.147165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.160520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.051128][ C0] net_ratelimit: 9607 callbacks suppressed [ 982.051147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.069438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 982.081686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.093895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.106878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.119234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 982.131501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.143723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.156747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.169042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 987.060859][ C0] net_ratelimit: 9475 callbacks suppressed [ 987.060880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 987.079078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.091338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.104532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.116892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 987.129189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.141555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.154739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.167082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 987.179366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 988.257148][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.071000][ C0] net_ratelimit: 9884 callbacks suppressed [ 992.071020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.089895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.102241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 992.114528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.126807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.139842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.152268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 992.164623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.176926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.189962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.081002][ C0] net_ratelimit: 9465 callbacks suppressed [ 997.081021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.099110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.112260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.124595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 997.136852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.149124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.162269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.174614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 997.186956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.199268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1000.932377][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.090893][ C0] net_ratelimit: 9533 callbacks suppressed [ 1002.090912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1002.109223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.121532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.134650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.146957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1002.159210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.171463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.184553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.196874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1002.209132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.100980][ C0] net_ratelimit: 9532 callbacks suppressed [ 1007.101000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.119932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.132329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1007.144623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.156857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.170165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.182471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1007.194728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.206942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.219973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.673627][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1012.110790][ C0] net_ratelimit: 10012 callbacks suppressed [ 1012.110810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1012.129195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.141450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.154655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.167065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1012.179374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.191629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.204777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.217156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1012.229433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.121613][ C0] net_ratelimit: 9405 callbacks suppressed [ 1017.121632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.139842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1017.152207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.164963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.178104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.190483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1017.202753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.214939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.228143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.240477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1022.131377][ C0] net_ratelimit: 9542 callbacks suppressed [ 1022.131399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.149586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1022.161896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.174142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.187226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.199599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1022.211899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.224144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.237191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.249523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1027.142315][ C0] net_ratelimit: 9422 callbacks suppressed [ 1027.142334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.160566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1027.172990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1027.185242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.198384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.210765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1027.223047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1027.235353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.248563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.260951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1027.772168][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.750722][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1030.757709][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16455/1:b..l [ 1030.766209][ C0] rcu: (detected by 0, t=10502 jiffies, g=124709, q=2238 ncpus=1) [ 1030.774145][ C0] task:syz-executor state:R running task stack:24184 pid:16455 tgid:16455 ppid:16449 task_flags:0x400140 flags:0x00080000 [ 1030.788652][ C0] Call Trace: [ 1030.791947][ C0] [ 1030.794900][ C0] ? __schedule+0x10b9/0x6150 [ 1030.799608][ C0] __schedule+0x1139/0x6150 [ 1030.804155][ C0] ? __pfx___schedule+0x10/0x10 [ 1030.809037][ C0] ? mark_held_locks+0x49/0x80 [ 1030.813819][ C0] preempt_schedule_irq+0x51/0x90 [ 1030.818872][ C0] irqentry_exit+0x1d8/0x8c0 [ 1030.823488][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1030.829496][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1030.834720][ C0] Code: ea 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 d2 6b ef 0e 0f 82 74 02 00 00 8b 35 4a 9c ef 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 e9 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1030.854354][ C0] RSP: 0018:ffffc900047b6d48 EFLAGS: 00000206 [ 1030.860439][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9520 RCX: 000000009c20339c [ 1030.868418][ C0] RDX: 0000000000000000 RSI: ffffffff8daa50c6 RDI: ffffffff8bf2b600 [ 1030.876401][ C0] RBP: 0000000000000002 R08: 000000004ab4043f R09: 00000000f4ab4043 [ 1030.884405][ C0] R10: 0000000000000002 R11: ffff88801eeea9b0 R12: 0000000000000000 [ 1030.892398][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.900411][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1030.905643][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1030.911837][ C0] unwind_next_frame+0xd1/0x20b0 [ 1030.916796][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1030.921935][ C0] ? save_stack+0x160/0x1f0 [ 1030.926475][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1030.931697][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1030.937880][ C0] arch_stack_walk+0x94/0x100 [ 1030.942588][ C0] ? save_stack+0x160/0x1f0 [ 1030.947121][ C0] stack_trace_save+0x8e/0xc0 [ 1030.951822][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1030.957217][ C0] ? stack_trace_save+0x8e/0xc0 [ 1030.962088][ C0] save_stack+0x160/0x1f0 [ 1030.966453][ C0] ? __pfx_save_stack+0x10/0x10 [ 1030.971338][ C0] ? __lock_acquire+0x436/0x2890 [ 1030.976301][ C0] __set_page_owner+0x91/0x560 [ 1030.981114][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1030.986509][ C0] ? bad_range+0x261/0x4c0 [ 1030.990956][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1030.996191][ C0] post_alloc_hook+0x1af/0x220 [ 1031.001319][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1031.006890][ C0] ? __pfx___might_resched+0x10/0x10 [ 1031.012226][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1031.017815][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1031.023727][ C0] ? stack_trace_save+0x8e/0xc0 [ 1031.028605][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1031.034005][ C0] ? rcu_is_watching+0x12/0xc0 [ 1031.038794][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 1031.044274][ C0] ? kasan_save_stack+0x42/0x60 [ 1031.049154][ C0] ? kasan_save_stack+0x33/0x60 [ 1031.054023][ C0] ? kasan_save_track+0x14/0x30 [ 1031.058894][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1031.065241][ C0] ? copy_page_range+0x4620/0x6780 [ 1031.070363][ C0] ? copy_process+0x3b9f/0x7430 [ 1031.075234][ C0] ? __do_sys_clone+0xce/0x120 [ 1031.080013][ C0] ? do_syscall_64+0xcd/0xf80 [ 1031.084731][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.090820][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1031.096732][ C0] ? policy_nodemask+0xea/0x4e0 [ 1031.101618][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1031.106497][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1031.111900][ C0] alloc_pages_noprof+0x131/0x390 [ 1031.116949][ C0] pte_alloc_one+0x1e/0x3d0 [ 1031.121466][ C0] __pte_alloc+0x6d/0x3f0 [ 1031.125810][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 1031.130773][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1031.135647][ C0] ? __pmd_alloc+0x6aa/0x9c0 [ 1031.140268][ C0] copy_page_range+0x3f3e/0x6780 [ 1031.145315][ C0] ? __lock_acquire+0x436/0x2890 [ 1031.150286][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1031.155582][ C0] ? mas_store+0xb4b/0x12f0 [ 1031.160099][ C0] ? __vma_enter_locked+0x1dc/0x770 [ 1031.165299][ C0] ? __pfx_mas_store+0x10/0x10 [ 1031.170089][ C0] dup_mmap+0xbea/0x20e0 [ 1031.174351][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1031.179064][ C0] copy_process+0x3b9f/0x7430 [ 1031.183768][ C0] ? do_wp_page+0x1c04/0x5010 [ 1031.188477][ C0] ? __pfx_copy_process+0x10/0x10 [ 1031.193525][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1031.198578][ C0] kernel_clone+0xfc/0x910 [ 1031.203024][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1031.208091][ C0] __do_sys_clone+0xce/0x120 [ 1031.212794][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1031.218031][ C0] ? count_memcg_events+0x122/0x290 [ 1031.223258][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1031.228575][ C0] do_syscall_64+0xcd/0xf80 [ 1031.233094][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.239024][ C0] RIP: 0033:0x7fcb55d85f13 [ 1031.243443][ C0] RSP: 002b:00007ffecef0afa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1031.251868][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb55d85f13 [ 1031.259866][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1031.267844][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1031.275921][ C0] R10: 00005555687ea7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1031.283990][ C0] R13: 00000000000927c0 R14: 00000000000e1e7b R15: 00007ffecef0b140 [ 1031.292010][ C0] [ 1032.151481][ C0] net_ratelimit: 7818 callbacks suppressed [ 1032.151499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.169792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1032.182095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.194392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.207541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.219931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1032.232259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.244548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.261360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.273884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1037.161026][ C0] net_ratelimit: 8810 callbacks suppressed [ 1037.161045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.179339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1037.191713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1037.203946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.216980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.229311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0) [ 1037.241537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1037.253752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.266909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.279231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:e3:b3:43:5a:f0, vlan:0)