last executing test programs: 1m16.061239871s ago: executing program 2 (id=450): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001200)={0x12d0, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x90}, @NBD_ATTR_SOCKETS={0x1280, 0x7, 0x0, 0x1, [@nested={0x1254, 0x29, 0x0, 0x1, [@nested={0x10d6, 0xbe, 0x0, 0x1, [@generic="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", @nested={0x4, 0x112}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}, @generic="76640dd63e1e443c", @generic="1471280a0727148f0194b43c9091bbd038e7741fa371bd669b6025811de7e5f017b3f07437ec9fcab332479d9dade021737c78539bbf913f2748311c4c5d214e7c6740e98877838833cba4099535758dfbe244d825e104fcec4f139ba19a2c21d7d1bb66b9d5e672bae006503e6dd1d8b114439c8016fca5f744ddfda2974d415f2cef3f4419e0ea28e55acf50bd89542dff72645eec4eb689e0062a82079a20688dcf84bd58d36318b43a4fbab4ee461ef84ed8e2412f9bdbe912e22a5d"]}, @generic="2b0d8c83dee7fcc0d583b3de262b45b443c1f49e50558effa2524d4230edea69242724231e456224f778211cca650e387f4d202d16154bbeb2634d82d98a11cd3454fd442c2ba7f21844de184afe6eafb3ecb75ea4ef674c8ef9777b2b521553180ce4b211b9e159e48611f162c4732b756a6c8d8a51e21f48962f65bda67b5e96c086312ed3367767701be32d2fbd40e05399a0dc69", @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@loopback}, @generic="3d6c75ca78f087", @nested={0x38, 0x10, 0x0, 0x1, [@nested={0x34, 0x5f, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @fd=r0}, @nested={0x28, 0x15b, 0x0, 0x1, [@typed={0x8, 0x15b, 0x0, 0x0, @pid}, @typed={0x5, 0x119, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x138}, @nested={0x4, 0x21}, @nested={0x4, 0xcf}, @typed={0x8, 0x57, 0x0, 0x0, @pid}]}]}]}, @generic="3591a615d9cf873dc38ea200f27ed5f48fb76a7dc649cefd5708ee4bdba6adf0d130db192af045110296b2909de0f6f5b32b350b2f036b0a011b0bab85b4d4d94ce7e2e455152d16ee33e0b8dd2b26ae68ffcf2dec3869ff835ca0a9d4a920fbe0e41c613599e134eb026665458f29104824d9df9a430851f1a8a5a28e4a0fd367de0f9c8d260c4ef0f9f4589c8a9ccb378965ab367ca7f9286df4"]}, @typed={0x8, 0x35, 0x0, 0x0, @pid}, @nested={0x4, 0x101}, @typed={0x8, 0x64, 0x0, 0x0, @pid}, @nested={0x4, 0x6a}, @typed={0xd, 0x4b, 0x0, 0x0, @str='/dev/kvm\x00'}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xdc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x12d0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8927, &(0x7f00000002c0)={'vcan0\x00'}) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf1740000}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000500)={0x5, r2}) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x440, 0x0) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44110}, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r4 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000100)={{&(0x7f0000000140)="7b1e3022f0e54c23f5b0d9ab0fe0e935f04be981bb730cb2db2f0bf62c8c0e538935f367ba0f7210e1266a0274ca2ef73e0fcea939101aac7578b884dac84d41156f0c9ebba86b38e5613271b6b24267aff834134c08c635291d212aa12e70a9c9733f46bdcd5bd9c77472cc5bbdecc48d0544b3d681b33a4f8b6eab4ea9e472173a921290ef67714356bef78c1ee3faf8", 0x10, &(0x7f0000000000)={0x0, 0x1a000}, 0x7, 0x0, 0x1, 0x1000}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3740, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf00) connect$auto(0x3, 0x0, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(0x3, 0x0, 0x80) 1m15.027255242s ago: executing program 2 (id=455): sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) timer_create$auto(0x9, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) r0 = socket(0x29, 0x5, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x7, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x220843, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0xffffffffffffffff, 0x455, r2) rseq$auto(0x0, 0x9, 0xdf2, 0x7) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0x20000000000eb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x7) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0x1, 0xfffffffffffffff8, r0, 0x400008000) (async) recvmmsg$auto(r1, 0x0, 0x5714, 0xfffffffe, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_destroy$auto(0x8000000000000000) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x66) (async) r5 = prctl$auto(0x2f42, 0x100000001, 0x0, 0x78ea, 0x100) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) (async) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x9, 0x0) (async) mount$auto(&(0x7f0000000200), &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x80000000, 0x0) (async) ioctl$auto_RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000240)={0xfffd, 0x200, 0x4, 0x200, 0x6d8efb40, 0x1, 0x5, 0x7f, 0x4}) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async) kexec_load$auto(0x3, 0x5, &(0x7f00000001c0)={@kbuf=0x0, 0x800bfff, 0x7, 0x800c000}, 0x800000003) 1m14.697301704s ago: executing program 2 (id=457): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x23, 0x800, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/misc/cachefiles/uevent\x00', 0x80900, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x4048aec9, r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast2}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1001, 0xfffffffffffffffe) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0x4068aea3, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x803, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) (async) memfd_secret$auto(0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r5, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) 1m13.606876233s ago: executing program 2 (id=462): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) (async) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x10, 0x0, 0x1, [@generic="83090b"]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) mprotect$auto(0x0, 0x806121, 0x6) madvise$auto(0x0, 0xffffffffffff0004, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 1m13.347252744s ago: executing program 2 (id=464): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x100000001, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r0, 0x8, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x2, &(0x7f0000000040)={0x0, 0x20000000000006}) brk$auto(0x7fffffffafff) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) read$auto_tracing_fops_trace(r1, &(0x7f0000000080)=""/216, 0xd8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(r1, 0xffffffffffffffff, 0x0) 1m12.904212009s ago: executing program 2 (id=465): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) mlockall$auto(0x7) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000053b6"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x40000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x2, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000c0e8515e4c0c5c19aaf11ca53e6e1e082936ad93", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf251f00000008000c00ff0300001400040076657468305f6d616376746170000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x401000}, 0x8) getpgid(0xffffffffffffffff) 57.651253475s ago: executing program 32 (id=465): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) mlockall$auto(0x7) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000053b6"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x40000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x2, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000c0e8515e4c0c5c19aaf11ca53e6e1e082936ad93", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf251f00000008000c00ff0300001400040076657468305f6d616376746170000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x401000}, 0x8) getpgid(0xffffffffffffffff) 26.113602739s ago: executing program 0 (id=556): r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000000)={@_si_pad}, 0x1, &(0x7f0000000080)={{0x80, 0x4}, {0x730}, 0x5c, 0x5, 0x6, 0xb441, 0x7, 0x0, 0x101, 0x7, 0x1, 0x6, 0x0, 0x8, 0x5, 0xc1}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000140)="f5c684c7ef8b807df342bbbfdba664498f0268fae89f46b689a2989793075e57ab8bdaff3608d0", 0x5, &(0x7f0000000180)="48fabe216c3ad292cdb6096b085ae2a29eda48ad942be574001c0bccedf59a327a181d90611d88c73b77ca79cf0aab5d479c7522ddad525c05603407d47cc445c1cdea1d078779feacfb1de7524da974793efdfe927616e2d9f1acbb5f74d7e036b9485902a2dee8653a6b07ff9cf0be7556efd5ee87f1403433e9c6277c9f45bb0d83753ca37cb6b019cde95f0c7135f276d1eeadb2c59e6c9aa589fffd149397208b66d708f511cf7e170df1ceb0e4538e92cb946d946e9fcf810eec398503f3cd78592b9be035eec66063a2489e0edbc397ce52e94fe6cea71fa7faef983b72487903fc", 0x7, &(0x7f0000000280)="93392d95bb4418c0b1be3bc7df8814eadab1601fdeecaf21ba1581ba8aac00e45c720b96540ba9b965c75668f63ba13dcb1bba8a8f3f59442f2fea17c427fc506427f5e7791e63f36b46d90483d29323ffbcdbc5e44cae51ecab134450255b26ac50dc0bc76c0e728a86f01ab7be96346c9f09311c537d50d53748c21460338949706432f4d2e0c4306e8f40784018f577606b1d956ba87e3a2603e86314ca09917e45379e6899086e3c28e512fecffd42d70845b4d3f1", &(0x7f0000000340)=0x9}, 0xe1fb, &(0x7f0000000540)={0x100, 0xa5, &(0x7f0000000380)="69ce3a03f36c0b2633723d4b73d20ae40e9dd353426481243d05077d73ba5d3db1aca9a4ec726ccd39dd6ae07484b6e2eb575f930777d4e799d2ed54f4b7cd36b2cea66efa0e1da888d1d46c71f7857afe99b8a9f8374fda0384f85821d03ab6982751a8c4a653e31ab6ea1922e46422114892db58674f0bb3f7d9a344a5ef9320e6d08ddd67f2f6d341c2a3c9881dc697536ecd42a45addc7ab494c", &(0x7f0000000440)="7398182cc253c22a2fdfc55882e76dc8023dc782abd0f79c2ae4011dbdc3306cff773f0a97ad0cef71264df6567bf00b92c4810cc86532e1cb5be77860edc348d1dd0d428bf96b53b60ff6b527910d1bb6508f817dbef3d0f0c951425616f723b9cc244402902042a232d6c66c8280d1570f395a8daf5ae342f9ae25b3727f5c983160aee28f61c5dabdc7babbb89740a4bc4922e29b1abe611a80fe7bd67b190eb6e000eaf6b392ddacef8fe3bcd30cc4bf0562b3fafd8cdab1161c40743cf20671b4839cab777090", 0x3b, 0x9}}) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x3, 0x47, &(0x7f0000000600)='\x00', &(0x7f0000000640)=0x200) waitid$auto_P_PGID(0x2, r0, &(0x7f0000000680)={@_si_pad}, 0x1, &(0x7f0000000700)={{0x1, 0x8}, {0x9, 0x1}, 0x7, 0x8001, 0x44, 0x2, 0xd21, 0x7, 0x4, 0x8, 0x0, 0x2, 0x3, 0x3, 0x8000000000000001, 0x2}) ioctl$auto_BLKFRAGET(r1, 0x1265, 0x0) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000800), r1) sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x70c, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xf9e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x38, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xfffffffa}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x1}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xb366}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x1000}]}, @NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}]}, @NFSD_A_SERVER_PROTO_VERSION={0x8, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x18, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x800}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xc}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8005}, 0xc4) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000001280)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000b00)={0x738, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_PROBE_RESP={0x58f, 0x91, "8aa8026233d8c5e811df7837c3f11638a4eab55c873c36f86e463809086b43f5df01f3a9adff0dc52a4c2e0577a067f11d59a4a99300743ce5e05e384daa612229fd755cbec37a438447aee3e4048bd89b2247b445ae3ef9d9fa64b9f54122c3a1eaf72b134ad909b32e4bde4fe88f513bbcc41294360c8e22c2d7d4a6b0515bff36b327c8190cadf714fb015ad46a909718ddbf1757aec5ef75a226bdd04a6947b12df3d1e4408186404878a1eaf0bcd237c1f6c127b29607f47164d3b87e14451e990b128140a243c37bda12b557d0a5a999a232a9e4ce360530211463fa99977c1c783a38f3671c5e943fd49b13890e2ba72bfe259c1d7d82b7e744f9ae3b6d98f3d6b4cb4a2bca641b6c3978144698a811fff8bba00171fff6efcf103c3fa2d9009c0954f6bd8df1c1fe98e021d146788f8166b2f1e2aef4c8063fdf84a7d4e41fd5b6684a801f8d0fec77b351c82adc0b9aaf2777c08a5c5cbd6abbe39bd030f0c732a6dce07599e0ee61d062c29ccb987b615e5b1881d8a6014f8c730b4af5c0e2cafe0f282d55adce3bcb4c751f45d7362dd0ab4dea267664e1bafffd5cd67ad116f2ae754daa34ae1c1515bfbaa55bda141855e26e53e5ad02ce5442351ab6139e7e4c3c451ae57ea1881a9c173b4c92cd08c4f2cf1d661ee926e9113d063ebb5bab94348bb913809d812f1ccf551fb3fb3213a0919cad6d4567317fef36d3ecfad5acc068762fecb0483e721e7958fbee47fa0358042ee0aff59aee69ccaef15d7d07b00fd9fa50f261c9db1f1b04cca9482eccfb7304bf40e6aaa74f60625e663aaf077064e188e00a67aa8ae981ab7246bd65e4126f97076573db712c3e3f73740f889f029320ae81f38886868c7803689f4a26aea3e95aa4c542c38f75467b6f248664b0de1da1b77e9065ef9e54e23e3bf4088b8dfb799ced767395a296f9a714309599095a686c939a20a38ac08054eb8870b26429f03ed9b7a9b2d16f24ee210911ba32349692208ffefa2c4a49aa0c6fff1def8c2ff3e419d2ca6215abdab5bc07cb1fc0f353b781291bc55613097183a92de0d150e7eb77cefc48f0973bb499e1d9154e57352303b7b12c9414ac6cb3b4d9da02a52f5c8390b8856b7c2fe93dc6d4de419607c54097026fe09b424b3db640fa0fb4ecfa60583c943e059caf4b2a8fb3d95a546fb8d3f78c618402582c89284c26828e46d4427ec03676bc7287c9007ea80f1bab0c83822c37fa1376818796f26330ebc09561862295ccf9262c3ce8ac3cc97c760cbb5211dbf96d52d27a2db61dfc265e527584c454bc2dbf5a81177804aecb6418527f2f51bd70689e8cf25674154c0863ca106bbd665c34602250a1c5fa52017582422e33cd7f06a3e2b7bb82c10a9d6a84bfdcf64859d23ac4adec2a577b69035fa9008fe55728a0e27d2f007bf2511357a4ecdb48c27fbe2ededbfce766a6a61d2ad75d09ed1d22edc687181dab77591e6ec4ca1361e9b1ce9a577c8bbfcb73bedd4a53734022b95b2cf3c76780180346d6beca8b2f76d6f7cac09790e409c9b678ef8f71183d40e8d7fcf8418cd35feea6e3863631c3c0a3b815fc6ec000644e9b79af7d70c0ca8bf8e12e9eaa0a14d8327389b401c4865a82e7e4c4fac7dfb16552ccddfac621a041a7ed227323c66d1db17716a874c2375bb6972863d0e93cf62f379b7992a46df1af7f6922a6d54591bea2c6cdf808a1201204f508d48ee956896f2605a75b0fc539fb6ac095c405f788a9a2f1056b53c0d45d393f9b03592213bf35844ddbc551a865c745f2dc980140f937fa87bd39ecd7986d0e8d71b7e1646d30334bf0719207cb3bc01d5058ee9afb4b2bf72edc20fb1eaa3e3a76534ab80e741fd0e8cfbd2687706fd99e3e21f2f62d29fd2a847aece61b1e01421e0b2cd2d4fcb32003d79b117f7c5bd8c6fe6986ca25b21e1afd26532e64908b101b3bf833a3e578997dbbba2ccb44911dd406f5de66ae869f6a39"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6d, 0xcd, "8c46f0b1541a0241912cf6bdf97f367a6ed5feeb838238256f381267fd2da5f30d005ba4eb99bf9a142e2a5871c9b8b63c4e809e938343f0b69e36150bec55694c32e343bb010377e0cc501716d38216f4c47f980aded184989210871e77cfecf4decff33e5556302b"}, @NL80211_ATTR_AUTH_DATA={0x101, 0x9c, "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"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xfffffffb}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}]}, 0x738}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$auto_UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, &(0x7f00000012c0)=0x40000000) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001340), r1) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x60, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xff}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "9e6c1725c0e0c0c082391c11f8b2e35a6e2906247139786ab65396"}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'team_slave_0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000014c0), r1) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEVICE_LIST={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x15c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4104}, 0x20000880) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001600), r1) mkdir$auto(&(0x7f0000001640)='./file0\x00', 0x4) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000016c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r7 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0) write$auto_dfs_sched_itmt_fops_itmt(r1, &(0x7f0000001800)="cc9ad61c27f2d1ae00c8b9f0b936a5fd402558832f0c8c31cded0a292cf59d0385c016610e1a0a55303a11ebb8a1238faa6ebd6b5731e724c5e8cc749b7b00a6be2f04b4a36746877840a4004f80ed4af515ca78de73fdf7d72cc45292ccfdfdaf5f250f1d8d9b19c2e6cc4400433da3e58b833f64b22a7ed679ee0858f4", 0x7e) mmap$auto(0x8, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffb, r7, 0x800) mmap$auto(0x8cca, 0x4ea7, 0x2, 0xffffffffffffff91, r7, 0x13b) setsockopt$auto_SO_RESERVE_MEM(r1, 0x2c97a19e, 0x49, &(0x7f0000001880)='\x00', 0x3) r8 = ioctl$auto_SIOCSIFHWADDR2(r1, 0x8924, &(0x7f00000018c0)="b7d8d240b7d5518d8377ebef2d8ac365bf47aa0d6d303e1aa958577dd6deba6f4e0b9455ad0cf1d8ceee5c99a1a7f5089d68fdb3fc4f6eb360ae0cbea53a51caa003f037376fceb8c2a12e20453efecf01d79c8790a3c17bed8d06db13557bcc4380bb494a9dfdb8dbf20d98b3abfd60e1e9aec85a139a3b2d95f62f36e02911e7c08cad3343") io_cancel$auto(0x2800, &(0x7f0000001980)={0x6, 0x7ff, 0x100, 0xff, 0x100, r8, 0x4, 0x4df86e92, 0xb935, 0x0, 0xfffffffe, r7}, &(0x7f00000019c0)={0xfffffffffffffffc, 0x2, 0x5, 0x3}) select$auto(0x0, &(0x7f0000001a00)={[0x6, 0x7, 0x0, 0x8000000000000001, 0x4, 0x1, 0x4, 0x6, 0x77f, 0x1, 0x101, 0x7, 0x23e, 0x800, 0x2, 0x9b9]}, &(0x7f0000001a80)={[0x77, 0x1, 0x7, 0x6, 0x7ff, 0x5, 0x4, 0xfff, 0x0, 0x8001, 0xfff, 0x100, 0x10000, 0x4, 0x100000000, 0x6]}, &(0x7f0000001b00)={[0x6, 0xfffffffffb1db3e2, 0x1, 0x7, 0xd, 0xfffffffffffffff8, 0x5, 0x8f0a, 0x54631912, 0x9da7, 0x4, 0x0, 0x200, 0x4, 0x2, 0x4]}, &(0x7f0000001b80)={0x74c6, 0x87}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001c00), r8) sendmsg$auto_NFC_CMD_GET_SE(r9, &(0x7f0000002240)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f0000001c40)={0x5a8, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x9c, 0x13, 0x0, 0x1, [@nested={0x64, 0x1b, 0x0, 0x1, [@nested={0x4, 0x103}, @typed={0x47, 0xf1, 0x0, 0x0, @binary="1bff8629365110275ef4548ddd543bf4c735c39ee2e235c30a4d6a2c89378ac6ab107e26c73abadc208f8464514aadcced46f757b3fd6fd1a76cbc696a14a7882a4f23"}, @nested={0x4, 0x11a}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x11c}, @nested={0x4, 0x3c}]}, @typed={0x33, 0x11, 0x0, 0x0, @binary="42ddaaff895831456827c80fccbd3b0b3b1a0aaa2321562ad43e52a58731b0e120d136348baf7099872fc69764396c"}]}, @NFC_ATTR_LLC_SDP={0x4ed, 0x13, 0x0, 0x1, [@generic="a68beb8a6292dd221a972750e93022b4a50c3d22a180e7d19631eee4e2f8e89430cdd5caf39b4adae965856146e40accdb8cb98c5bbc04b9d3c7a4d52d6ec9403d53c3b7419ca87c7701c0a1323a75e24487014b3ea6824d4a380692d133f14a7380d32b85091740a53edd3a2b8b3da425848330f281e85a7535aabda010ae310c41d025a748d2a0aee810d852ea12288a0b1d0f166417f0a3dd134067d4b687d2e56d82331808708b56cfda5f1bdc52adb0f28e0ebbaf9da06cf40f4a10f83401981b6d4afe821c93aebc5fc2387aa35cc9556d9a81bef37330829b4056bbd106d843362f8f622ecf618dd3d35a73047392403fcd3b", @nested={0x1fe, 0x122, 0x0, 0x1, [@generic="6b749e9547739833542938bc9f0cd25d2d3f3861c956f8fc283855afe7e3658e6d6baef2de49ba2736cf71823208c7428955cda248856ec43728e9fd6eed2c584dee333a807a3782da1b26ab6ab657decae6d3be67251fe3242936f778dc2674045edfe130d625e03d0260e8261181192947abcafa9eb64f0b3adbc743826b00d0e2c8b605f4430f2ced9ad99572be75adf8de5b5e6967b57400782e2e2811355461278b75e4f86af195a2c97ebc95834f6469dc12bdf6835811e9e187622bd7bac8c997cf2c25d14559f8dce57bf9efce6bb9cf2a894f1827746ac1a4f380bf3bcb9f0cca7be77174fc330f86e6f2d84f6f903f52c22b", @typed={0xc, 0xdc, 0x0, 0x0, @u64=0x5}, @generic="40863ba79d0f3652ff9dfe7dfb8db3eba3ce2ac6c0aa5d81160cc9df512e6da17d78f7af23c979a6c9fd886ddc7d60a3b0d4d78ff9f36b769fd87c101e34d0b018c4055265c4fcc3db6d277376ed0cc01c51f6a2e1415dc4f5d9ff4c6fcc544bea9c841949158446b17862c40ac336ebf518f3e64c0cc59186b360241895ef44a8a3cf3cf85b8de68289cd98183c9ab6da17e83676b749a15bd3602a08e7af755a72b62a5d73fae374d6adeb8b3b2587ec3cfe8fc008587ca981519b31aee34f8d060be65cca3bb0240d04d7e371550829e9264c1e97173d5a7e129a276a1287934cb0118fd59fe290b0a78f28d849b2bae16b53740c", @generic="ca"]}, @typed={0x4, 0x155}, @typed={0x8, 0xaa, 0x0, 0x0, @uid}, @nested={0x50, 0x1a, 0x0, 0x1, [@generic="7a9184297284503ae65358dcd4985e1640afd8d3a7236718cec62ffc1ab134fc466f95c4f5cb0ffcbeda63920b4e055bc79f26c960292454cf2079bf8e4cd1fc75a8220433ce021387b4c476"]}, @generic="35b81dfde03670a2da68da0b22245b407eedb296cf2789e68fc766fcc1507234634521906ec7005d8a080980f2434e311ea6ee37992a2ebb53dc144afb8e298e9c0dadfebe18b907b423764838a0a76b8aab920f720cb63e92f1b618511403d00c2e9d9ca79cf91776729cc3e5c70f27e240b5bb5de665f0fd2b5774a81281bd7b12307777efa3d9764489bfc02cea17f67683a235f7dd4f1ae1d7e0993b07f614835fa63b0f2480a1dee2f8e264e2512887d2818056bcfffa37e5f071aec077c493b05976298a56e4982e97c30d8f609c3443d81ca9a727dd02", @nested={0x10, 0xe6, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0xe3}, @nested={0x4, 0x4d}]}, @generic="680f075b7de58df58cd92adc187a40561c40592cf097b2b8e834eb86aa6a358e6f383d7ff47f9717334f085e2280e108cd6210a27d09437351e340b2010554760f05515f799126a1e40a257f993ad7d66c513696b0334e614c6b684425147b84b16a519e87e74586d21e5343b9d246fdedeeafbe9d3db36be5bb5a5fd371010560344ea644684e2f0738f7fc561fc6da5af1dbce66837d8f8991c118003fefdcb87dac5cfe3d6d86f359a73bbe"]}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x4}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) 24.930096378s ago: executing program 0 (id=559): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd0/events_poll_msecs\x00', 0x4042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)="3e1406", 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r3) r5 = fcntl$getown(r3, 0x9) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b8, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x19f, 0x2, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @pid=r5}, @typed={0x36, 0x6f, 0x0, 0x0, @str='/sys/devices/virtual/block/nbd0/events_poll_msecs\x00'}, @nested={0xa7, 0x13d, 0x0, 0x1, [@nested={0x4, 0x13f}, @nested={0x4, 0xbe}, @generic="ae5847101e6858ba779bd44d2ed0b163fe88215e74730b553fe52f1d14ebaf8db36729371526b60ce61bc1a8b7184af95a143d81a4a4c2ae5478431f44f4daebdcfb4b03a4244bff843382557b75bb60ad756d54a9f68d20aac65ed4f4505b0dd3ad6b2f65fe01fa36d2dd9674ba0146c68a7449f10fba4c13ba37aeffbb669baf1a6c696386abfd11454ab1e10e91d9dbe2b97540413e03383e37"]}, @generic="b85500446679f7f07a3544c561b8710ae6d9067e6741313474a03aed2ce93cba96b94b8ff465516f93b2ad8d22b3a9911f94c3259a6fe3ace7e04f52270218c3f9fff166b5f83b5d996196b0140c84920b6a30463e785660cd8b718bcf0073c1444b41e6bbe5b6552f5df69438b4c19fbad373b932e2ed07f5e5f83b9424299e9a3ffe37af9b82f501f092dc29011c0e287456cba2ef4e7a7f338248fc3a82f98abfcf7bb875fdba11a383bc4ab6372d43d4ad"]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r2, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}}, 0x80) 24.467773727s ago: executing program 0 (id=560): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x3f, 0x800, 0x4, 0x8, 0x1000007) r1 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6a5c90fe84f14eb7679e5bede648829c0ca5f228e60804281e95c8501374ee39658bd2fb9e50631343a1d1b7d06f6da4d853b37c405d519fb66849227bc7919c48f7400971f692e8628be4f3de91da530b8b2b040562575dd965362a0057fc94b9a7be7f4bf5356c4654d0e6f9a4689c9b3e324bb8bb41df6e90e3ec3dfaaf3510ce0850ecd81d7b6034c550aebd1d66109efce1002d7164", @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff52, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x400000000000007, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf250d00000008000300", @ANYRES32=r1, @ANYBLOB="4c00028008000300ffffff7f080003000900000008000100000000000800030003000000080001000600000008000100340a0000080003000002000008000300b30400000800010009000000"], 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) acct$auto(&(0x7f00000002c0)='u[,&*}\x00\a\x00\x00\x00\xbf\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-\t\x009(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0\t\x00\x00\x00\x00\x00\x00\x00\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x01\x93h\xe9`B@W\xc2B\x82\xf4\x90\xaf\x15\xb2\"i\a\au\xa1\x05\xdb\xe9N4\x8fX\xa1\x9b\xd2\xd6N\xf6\xa4\xa6\xb0K\x04;\xd8\xb8\xa3\x065G\xfb\x9fV0\xa4\xca\xf9\xb4\xf6kW\x97f\xa1\x19\xb6\x85\xc2\xc0\xffg\x00\xfd\xba\x8b\xa3\xc8\n\\\x13\xe5>\x84yb,p\x05\xb1\xb6X5\xac\x9fj\x825\'\xd7\xb7?c\'M\x8e\xff\xc6\xdd\xe3\vN\xc8|\x96\xa2\xeb9\xa4\x98*(\x12\xc8\xa8\x19\xab\xe8GD\xd0\xcf\x8ek\x98\xe0}&r\x04\x8b\nB\xee\x1e\x86\xb2a\xbfB\xb4\x9a\xed\xaf;RW\xd1\x9a\x98w\xb5\xab\xdf\v\xd7 \x81F\x05\xa1\x81\xa4k\xf1+\xd8\\\xd4\"(\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x897\xce.y\x16\x1e\x10\xb0\x9b\xc0\xd2g\x1b\x01\xd3G\'\xc7CU39A\x02x\x8eA\x1f\xbb>\x00'/430) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0xffffffffffffffff, 0x3, 0xdf, 0x9b72, 0x2, 0x8003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r4, 0x5414, 0x0) open(&(0x7f00000007c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0xce140, 0x10) acct$auto(&(0x7f0000000000)='-\x00') close_range$auto(0x2, r1, 0x0) 22.007611524s ago: executing program 0 (id=563): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x1, 0x1000000000001, 0x19, r0, 0x4) mmap$auto(0xffffffff, 0x0, 0x4000000000e2, 0x1eb3, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r1, &(0x7f00000002c0)={&(0x7f00000001c0)='4r', 0x5}, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev4\x00', 0x400800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010029bd700000dcdf3e0400000004001200"], 0x18}, 0x1, 0x0, 0x0, 0x2000083c}, 0x200008d0) socket(0x1a, 0x4, 0x6) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = fcntl$auto_F_DUPFD(r4, 0x0, r4) ustat$auto(0x801, 0x0) r6 = socket(0x2, 0x3, 0xa) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) write$auto_trace_options_fops_trace(r5, &(0x7f0000000200)="801d86ebe6dc2a9707aeada8f384b3932fc9c136a87944c6118998a5785fb4902e2d4bd034dbc2da6ae9ec9b22d56bc25011e9a3484b7ee779b20667e2e03877eec0042955ed2dfeb2f9a4a973c4d0c9d17a3dbe2b7ff3da5d798b513259312933e1a1387fc787443299753c99f188c0cba6df96c43093ef332f3ab33260fcca7a06fdd25b85808c6657096c75", 0x8d) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000340)=0x8) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x260000, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) close_range$auto(0x2, 0x8, 0x0) 20.845744116s ago: executing program 0 (id=566): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002500)='/dev/input/event2\x00', 0x2080, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 19.857125897s ago: executing program 0 (id=569): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x20040881) socket(0x18, 0x5, 0xfffffff9) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) r1 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) pread64$auto(r1, 0x0, 0x1, 0x401) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r0, &(0x7f0000000300)='/Eev/agdio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xd1\x948@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\xd5k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0xba, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x7fffffffffffffff, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x7fffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20242, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 19.517589973s ago: executing program 4 (id=572): mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/200, 0xc8) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x4, 0x0, 0x25) 18.659425657s ago: executing program 4 (id=574): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0xfffffffffffffff9, 0x7, 0x3, 0x7181, 0xfffffff9, 0x7, 0x3, 0xd, 0x5, 0x80003, 0x4, 0x200000000000, 0x200b4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22010, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xf7fc, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe8, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x1fe, 0xd) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x800000) (async) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioprio_get$auto(0x3, 0x2) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) (async) mmap$auto(0x0, 0xe983, 0xe0, 0xeb1, 0x401, 0x8000) ioprio_get$auto(0x3, 0x0) socket(0x1c, 0xa, 0x106) (async) bind$auto(r2, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x2}, 0x6a) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x8000000000000001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') 17.316946988s ago: executing program 4 (id=577): mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) r0 = socket(0x2, 0x1, 0x106) bind$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x1}, 0x4006b) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) semctl$auto(0xb, 0xfffffffe, 0x13, 0x2) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000680)="1f9319c707498de36a6eedfcfaa139bb5f55cf18b4c0f1006a40000000000000003a556e204dbdd72555ac0000000000", 0x30) (async) setsockopt$auto(r0, 0x1, 0x5, 0x0, 0x9) (async) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x5) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000000)={'tunl0\x00'}) (async) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r6, 0xc0045520, r4) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 15.893978454s ago: executing program 3 (id=582): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SG_SET_RESERVED_SIZE2(r1, 0x2275, &(0x7f0000000040)="50f7c182") madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 12.357524941s ago: executing program 3 (id=585): mmap$auto(0xfffffffffffffffe, 0x800000000002f, 0x4000000000df, 0x10, 0x401, 0x7ffb) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) pwrite64$auto(r2, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3) write$auto(0x3, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000280)="a68bcee4cd0530005fd085489ab8685c103551387ae73d152089046ccfd9529b7239256f60986184d0edc66617597fad1eac0d191f75379a4b35a9a04fb98536c07380c36fae6ddb3c3cca944523b01b5796041b8f8faf681097ffbe5ea90337af5646e976e25816e8c77cc4b65db6e908515098121a31d3c273e8b2647aeef60a05853207e9414bb35f024cf48d903a6d080ec8afaeb9450141afa02199300e7067c05f011214e3604f54ca321d308832d623e577ec7984ee2c10fa95f0dc0b66b2ad444d24d7ed4b8f6140c35da340c37954365d3ff8b4b328645a481ff65a7f4a8ce2419629", 0xe7) mmap$auto(0x0, 0x8000400008, 0xdf, 0x9b72, 0x2, 0x4f) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2, 0x7) read$auto_usbfs_devices_fops_usb(r4, 0x0, 0x2d) read$auto_regulator_summary_fops_(r4, 0x0, 0x0) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r5 = socket(0x28, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x12, 0x0, 0x40) 11.469377477s ago: executing program 1 (id=586): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) fcntl$getown(0xffffffffffffffff, 0x9) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = setfsgid$auto(0x0) setresgid$auto(r0, 0x0, r0) socket(0x11, 0x3, 0x9) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x401d0}, 0x4008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(r1, 0x0, 0x6) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r3, 0x311, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3da) 11.350726179s ago: executing program 4 (id=587): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) r5 = fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) setsockopt$auto(r6, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x183902, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r5, 0x8000) bpf$auto(0x24, 0x0, 0x8) sendfile$auto(r7, r1, 0x0, 0xbf4d) 11.064800256s ago: executing program 3 (id=588): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40004000000026b, 0x1f59}, {0x200000, 0xc35b}}, 0x0) init_module$auto(0x0, 0xffff9, 0x0) 10.46330447s ago: executing program 3 (id=589): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x25, 0x1, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4041) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2049a0, 0x9) connect$auto(0x3, 0x0, 0x54) fcntl$auto(r0, 0x400, 0x1) lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.2/usb3/bDeviceSubClass\x00', 0x0, 0x0) sendfile$auto(0x1, r4, 0x0, 0x748) 7.841285242s ago: executing program 4 (id=590): unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a0", 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x60423, 0x0) unshare$auto(0x40000080) ioctl$auto_SIOCGIFHWADDR(r1, 0x8927, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff4f, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0x2400c8a1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/block/nbd0/make-it-fail\x00', 0xc2681, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00@', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25020000000b0002003abf2b2c8a7d00000b0002003abf2b2c8a7d0000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x7}) mmap$auto(0x0, 0x3, 0xdb, 0xeb1, 0x401, 0x8004) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xf) ioctl$auto_TCFLSH2(r4, 0x540b, &(0x7f0000000180)="f9dfae19c6d30c47e99390d1caaea9fe4795f1bcea2211a979ef8063b1a242750e0abedb843a2feb8cd3d83a4ce9ba0fef069adb77b9e04bfd8dc64664f19ed56d04a237f352abe8eb283109a27fcb21a7cf98b7e7e427cd0ee2d0d55fb4026a13d3de7e0aee96998dc0db12bd05d06ef6f1a87d7c8350d2f5c9974819730a9348cc06607eb7f5d546aee3306b9ac9db9764bbab7a7e2b48c20850c6e2527eecf3fafe4468e98c1233b6074c8d6ccb7479e8125b4c3f20319c9f3232f603a95bba1b31") getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) 7.017170493s ago: executing program 1 (id=591): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) pread64$auto(r0, 0x0, 0x6, 0x40008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r1 = pipe$auto(&(0x7f0000000000)) getsockopt$auto_SO_TIMESTAMPNS_OLD(r1, 0x401, 0x23, &(0x7f0000000040)='!:!%%!(\x00', &(0x7f0000000080)=0x5) mlock$auto(0x10fbe8, 0x4) 6.077139663s ago: executing program 3 (id=592): mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xc, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xa1, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x400, 0x4, 0x1, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x9, 0x400000cc4, 0xfffffffffffffff8, 0x800018, 0x2, 0x5b3) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) fcntl$auto(r0, 0x8, 0x1) fcntl$auto(r0, 0x10, 0x2) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) 6.059260456s ago: executing program 1 (id=593): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0x9b72, 0x7, 0x27ffc) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x458801, 0x0) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$auto(r2, 0x10f, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000300)="dc") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x1, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x400001, 0xbf2a, 0x8000000000000000, 0x0) creat$auto(&(0x7f0000000140)='./file0\x00', 0x43) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r4, 0x0, 0x4b, 0x0, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) 3.890128456s ago: executing program 33 (id=569): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x20040881) socket(0x18, 0x5, 0xfffffff9) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) r1 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) pread64$auto(r1, 0x0, 0x1, 0x401) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r0, &(0x7f0000000300)='/Eev/agdio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xd1\x948@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\xd5k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0xba, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x7fffffffffffffff, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x7fffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20242, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 3.867845528s ago: executing program 1 (id=595): r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x789c1896ebbb4d, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0xde, 0x8, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.022257399s ago: executing program 1 (id=596): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x10000) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x10080c, 0x18007}, {0x8}}, 0x0) timer_delete$auto(0x0) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x3594, 0x0, 0x8f, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/fs/netfs/caches\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r3, 0xc0305602, r2) read$auto(r1, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r4, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r6, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/105, 0x69) 1.158391801s ago: executing program 3 (id=597): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg0\x00', 0x20ca00, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r2, 0x8000) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48814}, 0x4000000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x40, 0xffffffffffffffc0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/7:2/stable_pages_required\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), r1) sendmsg$auto_NFC_CMD_GET_DEVICE(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4841) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r9, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000002, 0x400000004) 410.990876ms ago: executing program 4 (id=598): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x141302, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)="629467a9", 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000180)={0x0, 0x80000000}, 0x6, 0x12f9, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x102020009, 0x3, 0x411, 0xffffffffffffffff, 0x8000) getdents64$auto(0xffffffffffffffff, &(0x7f0000000ac0)={0x5, 0x2, 0x5, 0x10, "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"}, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000005440)='/dev/snd/controlC1\x00', 0x2000, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x7ffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r2, 0x0, 0x18) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) 0s ago: executing program 1 (id=599): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/block/nullb0/queue/atomic_write_unit_max_bytes\x00', 0xa000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) io_uring_setup$auto(0x23, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) (async) socket(0x2, 0x2, 0x0) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x40000021, 0x400, 0x718c1257}]}) kernel console output (not intermixed with test programs): out [ 147.126529][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.208016][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.337694][ T6665] can: request_module (can-proto-0) failed. [ 147.368492][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.209154][ T6680] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 148.333306][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.213417][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.286070][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.445811][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.940156][ T29] audit: type=1800 audit(1775248456.870:8): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.161" name="dbroot" dev="configfs" ino=12182 res=0 errno=0 [ 150.262363][ T6708] random: crng reseeded on system resumption [ 150.405292][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.287991][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.366195][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.525396][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.962185][ T6732] FAULT_INJECTION: forcing a failure. [ 151.962185][ T6732] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.021738][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.3.167 Tainted: G U syzkaller #0 PREEMPT(full) [ 152.021775][ T6732] Tainted: [U]=USER [ 152.021782][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.021795][ T6732] Call Trace: [ 152.021802][ T6732] [ 152.021810][ T6732] dump_stack_lvl+0x100/0x190 [ 152.021850][ T6732] should_fail_ex.cold+0x5/0xa [ 152.021877][ T6732] get_futex_key+0x107c/0x1620 [ 152.021910][ T6732] ? __pfx_get_futex_key+0x10/0x10 [ 152.021936][ T6732] ? lock_acquire+0x1cf/0x380 [ 152.021976][ T6732] futex_wake+0xea/0x530 [ 152.022014][ T6732] ? __pfx_futex_wake+0x10/0x10 [ 152.022049][ T6732] ? exit_mm_release+0x19/0x30 [ 152.022093][ T6732] do_futex+0x32b/0x350 [ 152.022124][ T6732] ? __pfx_do_futex+0x10/0x10 [ 152.022153][ T6732] ? __might_fault+0xc5/0x140 [ 152.022195][ T6732] mm_release+0x24a/0x2f0 [ 152.022220][ T6732] do_exit+0x704/0x2b60 [ 152.022255][ T6732] ? __pfx_do_exit+0x10/0x10 [ 152.022286][ T6732] ? do_raw_spin_lock+0x128/0x260 [ 152.022320][ T6732] ? find_held_lock+0x2b/0x80 [ 152.022341][ T6732] ? get_signal+0x7e0/0x21e0 [ 152.022369][ T6732] do_group_exit+0xd5/0x2a0 [ 152.022403][ T6732] get_signal+0x1ec7/0x21e0 [ 152.022434][ T6732] ? ksys_read+0x190/0x250 [ 152.022461][ T6732] ? __pfx_get_signal+0x10/0x10 [ 152.022488][ T6732] ? do_futex+0x192/0x350 [ 152.022521][ T6732] arch_do_signal_or_restart+0x91/0x770 [ 152.022553][ T6732] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 152.022590][ T6732] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.022621][ T6732] ? ksys_read+0x1ac/0x250 [ 152.022648][ T6732] exit_to_user_mode_loop+0x86/0x4a0 [ 152.022682][ T6732] do_syscall_64+0x668/0xf80 [ 152.022704][ T6732] ? clear_bhb_loop+0x40/0x90 [ 152.022732][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.022755][ T6732] RIP: 0033:0x7f885f39c819 [ 152.022774][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.022795][ T6732] RSP: 002b:00007f88602420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.022817][ T6732] RAX: fffffffffffffe00 RBX: 00007f885f616368 RCX: 00007f885f39c819 [ 152.022832][ T6732] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f885f616368 [ 152.022845][ T6732] RBP: 00007f885f616360 R08: 0000000000000000 R09: 0000000000000000 [ 152.022859][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.022872][ T6732] R13: 00007f885f6163f8 R14: 00007ffee151d370 R15: 00007ffee151d458 [ 152.022901][ T6732] [ 152.688568][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.716781][ T6753] FAULT_INJECTION: forcing a failure. [ 153.716781][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 153.793064][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.0.174 Tainted: G U syzkaller #0 PREEMPT(full) [ 153.793101][ T6753] Tainted: [U]=USER [ 153.793109][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.793123][ T6753] Call Trace: [ 153.793131][ T6753] [ 153.793140][ T6753] dump_stack_lvl+0x100/0x190 [ 153.793183][ T6753] should_fail_ex.cold+0x5/0xa [ 153.793213][ T6753] should_failslab+0xc2/0x120 [ 153.793240][ T6753] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 153.793265][ T6753] ? kstrdup_const+0x63/0x80 [ 153.793286][ T6753] ? __pfx_string+0x10/0x10 [ 153.793326][ T6753] kstrdup+0x51/0xe0 [ 153.793349][ T6753] kstrdup_const+0x63/0x80 [ 153.793372][ T6753] __kernfs_new_node+0x9b/0x960 [ 153.793413][ T6753] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.793457][ T6753] ? find_held_lock+0x2b/0x80 [ 153.793481][ T6753] ? kernfs_root+0xee/0x2a0 [ 153.793516][ T6753] ? kernfs_root+0xee/0x2a0 [ 153.793558][ T6753] kernfs_new_node+0x11b/0x1a0 [ 153.793587][ T6753] __kernfs_create_file+0x53/0x350 [ 153.793620][ T6753] cgroup_addrm_files+0x4d8/0xb90 [ 153.793672][ T6753] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 153.793711][ T6753] ? __pfx___xa_store+0x10/0x10 [ 153.793748][ T6753] ? do_raw_spin_unlock+0x145/0x1e0 [ 153.793791][ T6753] css_populate_dir+0x161/0x590 [ 153.793825][ T6753] cgroup_apply_control_enable+0x40a/0xbd0 [ 153.793875][ T6753] cgroup_mkdir+0x57f/0x1330 [ 153.793902][ T6753] ? __pfx_cgroup_mkdir+0x10/0x10 [ 153.793926][ T6753] kernfs_iop_mkdir+0x111/0x190 [ 153.793948][ T6753] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 153.793995][ T6753] vfs_mkdir+0x361/0x850 [ 153.794035][ T6753] filename_mkdirat+0x48b/0x5e0 [ 153.794067][ T6753] ? __pfx_filename_mkdirat+0x10/0x10 [ 153.794098][ T6753] ? strncpy_from_user+0x19d/0x2d0 [ 153.794131][ T6753] ? do_getname+0x191/0x390 [ 153.794166][ T6753] __x64_sys_mkdir+0x6b/0x90 [ 153.794194][ T6753] do_syscall_64+0x106/0xf80 [ 153.794217][ T6753] ? clear_bhb_loop+0x40/0x90 [ 153.794246][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.794270][ T6753] RIP: 0033:0x7f0106f9c819 [ 153.794290][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.794312][ T6753] RSP: 002b:00007f0107d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 153.794334][ T6753] RAX: ffffffffffffffda RBX: 00007f0107215fa0 RCX: 00007f0106f9c819 [ 153.794350][ T6753] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 153.794365][ T6753] RBP: 00007f0107032c91 R08: 0000000000000000 R09: 0000000000000000 [ 153.794379][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.794392][ T6753] R13: 00007f0107216038 R14: 00007f0107215fa0 R15: 00007ffe062e4fb8 [ 153.794423][ T6753] [ 154.094538][ T6753] cgroup: cgroup_addrm_files: failed to add usage_in_bytes, err=-12 [ 155.335670][ T6772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.342389][ T6772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.378391][ T6772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.415381][ T6772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.688803][ T6781] netlink: 'syz.1.180': attribute type 8 has an invalid length. [ 157.177725][ T29] audit: type=1804 audit(1775248464.110:9): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.190" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=6 res=1 errno=0 [ 157.217959][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 157.369451][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.375695][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.446200][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.452358][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.963417][ T5825] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 161.023300][ T6866] FAULT_INJECTION: forcing a failure. [ 161.023300][ T6866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.064962][ T6872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'. [ 161.263529][ T6866] CPU: 0 UID: 0 PID: 6866 Comm: syz.1.201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 161.263569][ T6866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 161.263577][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.263590][ T6866] Call Trace: [ 161.263597][ T6866] [ 161.263606][ T6866] dump_stack_lvl+0x100/0x190 [ 161.263647][ T6866] should_fail_ex.cold+0x5/0xa [ 161.263671][ T6866] ? prepare_alloc_pages+0x16d/0x5f0 [ 161.263705][ T6866] should_fail_alloc_page+0xeb/0x140 [ 161.263733][ T6866] prepare_alloc_pages+0x1f0/0x5f0 [ 161.263766][ T6866] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 161.263803][ T6866] ? is_bpf_text_address+0x8a/0x1a0 [ 161.263841][ T6866] ? bpf_ksym_find+0x124/0x1c0 [ 161.263875][ T6866] ? lock_acquire+0x1cf/0x380 [ 161.263905][ T6866] ? find_held_lock+0x2b/0x80 [ 161.263927][ T6866] ? __kfree_rcu_sheaf+0x195/0x720 [ 161.263949][ T6866] ? __kfree_rcu_sheaf+0x195/0x720 [ 161.263980][ T6866] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 161.264021][ T6866] ? __kfree_rcu_sheaf+0x19a/0x720 [ 161.264044][ T6866] ? mas_ascend+0x53d/0xb30 [ 161.264073][ T6866] ? mas_next_node+0x7f8/0xf30 [ 161.264098][ T6866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.264124][ T6866] ? policy_nodemask+0xed/0x4f0 [ 161.264151][ T6866] alloc_pages_mpol+0x1fb/0x550 [ 161.264178][ T6866] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 161.264211][ T6866] folio_alloc_mpol_noprof+0x36/0x340 [ 161.264243][ T6866] shmem_alloc_folio+0x135/0x160 [ 161.264275][ T6866] shmem_alloc_and_add_folio+0x371/0xd40 [ 161.264319][ T6866] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 161.264358][ T6866] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 161.264401][ T6866] shmem_get_folio_gfp+0x6ab/0x1900 [ 161.264444][ T6866] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 161.264482][ T6866] ? filemap_map_pages+0xe69/0x2020 [ 161.264524][ T6866] shmem_fault+0x1f9/0xa20 [ 161.264559][ T6866] ? __lock_acquire+0x4a5/0x2630 [ 161.264589][ T6866] ? __pfx_shmem_fault+0x10/0x10 [ 161.264630][ T6866] ? __pfx_filemap_map_pages+0x10/0x10 [ 161.264674][ T6866] __do_fault+0x10d/0x550 [ 161.264700][ T6866] do_fault+0xabb/0x18e0 [ 161.264732][ T6866] __handle_mm_fault+0x1815/0x2b60 [ 161.264774][ T6866] ? __pfx___handle_mm_fault+0x10/0x10 [ 161.264808][ T6866] ? pte_offset_map_lock+0x174/0x320 [ 161.264833][ T6866] ? find_held_lock+0x2b/0x80 [ 161.264864][ T6866] ? follow_page_pte+0x5b3/0x1400 [ 161.264897][ T6866] handle_mm_fault+0x36d/0xa20 [ 161.264935][ T6866] __get_user_pages+0xf9c/0x34d0 [ 161.264978][ T6866] ? __pfx___get_user_pages+0x10/0x10 [ 161.265014][ T6866] populate_vma_page_range+0x267/0x3f0 [ 161.265046][ T6866] ? __pfx_populate_vma_page_range+0x10/0x10 [ 161.265075][ T6866] ? __pfx_find_vma_intersection+0x10/0x10 [ 161.265102][ T6866] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 161.265142][ T6866] __mm_populate+0x107/0x3a0 [ 161.265172][ T6866] ? __pfx___mm_populate+0x10/0x10 [ 161.265203][ T6866] ? up_write+0x290/0x4f0 [ 161.265239][ T6866] do_mlock+0x3f0/0x7f0 [ 161.265277][ T6866] ? __pfx_do_mlock+0x10/0x10 [ 161.265310][ T6866] ? __x64_sys_futex+0x34f/0x4d0 [ 161.265340][ T6866] ? __x64_sys_futex+0x358/0x4d0 [ 161.265374][ T6866] ? xfd_validate_state+0x129/0x190 [ 161.265416][ T6866] __x64_sys_mlock+0x59/0x80 [ 161.265452][ T6866] do_syscall_64+0x106/0xf80 [ 161.265474][ T6866] ? clear_bhb_loop+0x40/0x90 [ 161.265502][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.265525][ T6866] RIP: 0033:0x7fa47fd9c819 [ 161.265544][ T6866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.265566][ T6866] RSP: 002b:00007fa480b78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 161.265587][ T6866] RAX: ffffffffffffffda RBX: 00007fa480016090 RCX: 00007fa47fd9c819 [ 161.265602][ T6866] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000008a84 [ 161.265616][ T6866] RBP: 00007fa47fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 161.265629][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.265642][ T6866] R13: 00007fa480016128 R14: 00007fa480016090 R15: 00007ffee9e75288 [ 161.265671][ T6866] [ 163.722494][ T6890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 166.362599][ T6930] vcan0: tx drop: invalid da for name 0x000000000000003f [ 166.807553][ T6941] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.106735][ T6951] netlink: 326 bytes leftover after parsing attributes in process `syz.3.217'. [ 167.429957][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 168.924481][ T6982] tipc: Started in network mode [ 168.994017][ T6982] tipc: Node identity ee00, cluster identity 4711 [ 169.038878][ T6982] tipc: Node number set to 60928 [ 169.095307][ T6972] netlink: get zone limit has 4 unknown bytes [ 169.195985][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.204664][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.212873][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.223062][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.238832][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.353181][ T29] audit: type=1800 audit(1775248476.280:10): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.226" name="dbroot" dev="configfs" ino=14074 res=0 errno=0 [ 169.615484][ T6995] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 170.196492][ T6987] chnl_net:caif_netlink_parms(): no params data found [ 170.868490][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.915430][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.922753][ T6987] bridge_slave_0: entered allmulticast mode [ 170.986661][ T6987] bridge_slave_0: entered promiscuous mode [ 171.015744][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.053892][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.101257][ T6987] bridge_slave_1: entered allmulticast mode [ 171.140932][ T6987] bridge_slave_1: entered promiscuous mode [ 171.263721][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.285348][ T5825] Bluetooth: hci3: command tx timeout [ 171.337802][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.510320][ T6987] team0: Port device team_slave_0 added [ 171.574816][ T6987] team0: Port device team_slave_1 added [ 171.718520][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.745360][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.870113][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.929120][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.965298][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.077381][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.296191][ T7015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.326386][ T7015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.362051][ T6987] hsr_slave_0: entered promiscuous mode [ 172.381405][ T7015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.393993][ T6987] hsr_slave_1: entered promiscuous mode [ 172.428640][ T6987] debugfs: 'hsr0' already exists in 'hsr' [ 172.434523][ T6987] Cannot create hsr debugfs directory [ 172.455848][ T7015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.477309][ T7015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.668101][ T7015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.886016][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.196120][ T6987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.578375][ T6987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.816744][ T6987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.056703][ T6987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.325203][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.405395][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.486199][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 175.076232][ T6987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.136809][ T6987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.209909][ T7083] netlink: 'syz.0.246': attribute type 11 has an invalid length. [ 175.248801][ T6987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.424109][ T6987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.436825][ T7092] netlink: 330 bytes leftover after parsing attributes in process `syz.1.247'. [ 175.758282][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.820234][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.861999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.869237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.939836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.947067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.238577][ T7110] QAT: Stopping all acceleration devices. [ 176.565702][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 176.728314][ T7120] netlink: zone id is out of range [ 176.793080][ T7120] netlink: zone id is out of range [ 176.803803][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.851200][ T7120] netlink: zone id is out of range [ 176.901267][ T7125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.927653][ T7120] netlink: zone id is out of range [ 176.987855][ T6987] veth0_vlan: entered promiscuous mode [ 176.994631][ T7120] netlink: zone id is out of range [ 177.049848][ T6987] veth1_vlan: entered promiscuous mode [ 177.158853][ T7120] netlink: set zone limit has 8 unknown bytes [ 177.183812][ T6987] veth0_macvtap: entered promiscuous mode [ 177.237644][ T6987] veth1_macvtap: entered promiscuous mode [ 177.336536][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.383283][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.547457][ T136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.579062][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.666525][ T136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.701014][ T136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.899236][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.937771][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.129323][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.164934][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.646245][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 179.169552][ T7147] netlink: 186 bytes leftover after parsing attributes in process `syz.1.258'. [ 179.244302][ T7147] netlink: 186 bytes leftover after parsing attributes in process `syz.1.258'. [ 179.429254][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 180.639987][ T7163] delete_channel: no stack [ 180.728143][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 181.130621][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 181.154403][ T7185] can: request_module (can-proto-0) failed. [ 182.805151][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 183.115509][ T7228] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 183.167396][ T7233] usb usb13: usbfs: process 7233 (syz.3.274) did not claim interface 10 before use [ 183.178260][ T7228] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 183.210545][ T7228] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 183.335592][ T7228] page_type: f5(slab) [ 183.339649][ T7228] raw: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 183.452633][ T7228] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 183.522067][ T7228] head: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 183.592302][ T7228] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 183.642932][ T7228] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 183.702055][ T7228] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 183.761822][ T7228] page dumped because: unmovable page [ 183.870866][ T7228] page_owner tracks the page as allocated [ 183.912433][ T7228] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5196, tgid 5196 (udevd), ts 52226891539, free_ts 32676061911 [ 184.053745][ T7228] post_alloc_hook+0x153/0x170 [ 184.083434][ T7228] get_page_from_freelist+0x111d/0x3140 [ 184.119350][ T7228] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 184.153959][ T7228] new_slab+0xa6/0x6b0 [ 184.175790][ T7228] refill_objects+0x26b/0x400 [ 184.213218][ T7228] __pcs_replace_empty_main+0x1ab/0x660 [ 184.239841][ T7228] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 184.281683][ T7228] alloc_inode+0x183/0x250 [ 184.302693][ T7228] iget_locked+0x1d9/0x6d0 [ 184.328345][ T7228] kernfs_get_inode+0x46/0x470 [ 184.359103][ T7228] kernfs_iop_lookup+0x1a7/0x2d0 [ 184.393970][ T7228] __lookup_slow+0x251/0x460 [ 184.417749][ T7228] lookup_slow+0x50/0x70 [ 184.422073][ T7228] path_lookupat+0x5e8/0xc40 [ 184.473649][ T7228] filename_lookup+0x202/0x590 [ 184.498920][ T7228] vfs_statx+0xff/0x3f0 [ 184.503156][ T7228] page last free pid 1 tgid 1 stack trace: [ 184.559005][ T7228] __free_frozen_pages+0x7e1/0x10d0 [ 184.586030][ T7228] free_contig_range+0xde/0x1d0 [ 184.616848][ T7228] destroy_args+0xa8/0x7a0 [ 184.646658][ T7228] debug_vm_pgtable+0x1b66/0x34c0 [ 184.652040][ T7228] do_one_initcall+0x11d/0x760 [ 184.700428][ T7228] kernel_init_freeable+0x6e5/0x7a0 [ 184.729046][ T7228] kernel_init+0x1f/0x1e0 [ 184.747876][ T7228] ret_from_fork+0x754/0xd80 [ 184.752807][ T7228] ret_from_fork_asm+0x1a/0x30 [ 185.713987][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 186.283656][ T7306] FAULT_INJECTION: forcing a failure. [ 186.283656][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 186.389795][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.2.285 Tainted: G U L syzkaller #0 PREEMPT(full) [ 186.389836][ T7306] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 186.389845][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.389862][ T7306] Call Trace: [ 186.389873][ T7306] [ 186.389882][ T7306] dump_stack_lvl+0x100/0x190 [ 186.389926][ T7306] should_fail_ex.cold+0x5/0xa [ 186.389955][ T7306] should_failslab+0xc2/0x120 [ 186.389983][ T7306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 186.390022][ T7306] ? __anon_vma_prepare+0xae/0x5e0 [ 186.390063][ T7306] __anon_vma_prepare+0xae/0x5e0 [ 186.390096][ T7306] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 186.390124][ T7306] __vmf_anon_prepare+0x11f/0x250 [ 186.390155][ T7306] hugetlb_no_page+0xe28/0x1970 [ 186.390198][ T7306] hugetlb_fault+0x5df/0x1450 [ 186.390234][ T7306] ? __pfx_hugetlb_fault+0x10/0x10 [ 186.390277][ T7306] ? find_vma+0xbf/0x140 [ 186.390301][ T7306] ? __pfx_find_vma+0x10/0x10 [ 186.390329][ T7306] handle_mm_fault+0x5f1/0xa20 [ 186.390370][ T7306] do_user_addr_fault+0x74c/0x12f0 [ 186.390402][ T7306] exc_page_fault+0x6f/0xd0 [ 186.390427][ T7306] asm_exc_page_fault+0x26/0x30 [ 186.390450][ T7306] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 186.390492][ T7306] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 186.390515][ T7306] RSP: 0018:ffffc900036d7e70 EFLAGS: 00050246 [ 186.390534][ T7306] RAX: 003270756f726763 RBX: 0000000000000008 RCX: 0000000000000008 [ 186.390548][ T7306] RDX: 0000000000000001 RSI: ffffffff8bb3edc0 RDI: 0000000000000000 [ 186.390563][ T7306] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1767db8 [ 186.390581][ T7306] R10: ffffffff8bb3edc7 R11: 0000000000000000 R12: ffffffff8bb3edc0 [ 186.390596][ T7306] R13: 0000000000000008 R14: 00007ffffffff000 R15: 0000000000000000 [ 186.390625][ T7306] _copy_to_user+0xa4/0xd0 [ 186.390660][ T7306] fs_name+0x144/0x220 [ 186.390691][ T7306] __x64_sys_sysfs+0x14f/0x190 [ 186.390723][ T7306] do_syscall_64+0x106/0xf80 [ 186.390746][ T7306] ? clear_bhb_loop+0x40/0x90 [ 186.390775][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.390799][ T7306] RIP: 0033:0x7f5c11f9c819 [ 186.390818][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.390840][ T7306] RSP: 002b:00007f5c12d8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 186.390860][ T7306] RAX: ffffffffffffffda RBX: 00007f5c12216090 RCX: 00007f5c11f9c819 [ 186.390875][ T7306] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 186.390889][ T7306] RBP: 00007f5c12032c91 R08: 0000000000000000 R09: 0000000000000000 [ 186.390903][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.390916][ T7306] R13: 00007f5c12216128 R14: 00007f5c12216090 R15: 00007fff41c01098 [ 186.390946][ T7306] [ 189.778948][ T7356] < [ 189.946331][ T7350] random: crng reseeded on system resumption [ 191.810319][ T7392] FAULT_INJECTION: forcing a failure. [ 191.810319][ T7392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.860389][ T7392] CPU: 0 UID: 0 PID: 7392 Comm: syz.1.305 Tainted: G U L syzkaller #0 PREEMPT(full) [ 191.860431][ T7392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 191.860440][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.860454][ T7392] Call Trace: [ 191.860461][ T7392] [ 191.860470][ T7392] dump_stack_lvl+0x100/0x190 [ 191.860514][ T7392] should_fail_ex.cold+0x5/0xa [ 191.860543][ T7392] get_futex_key+0x1d2/0x1620 [ 191.860614][ T7392] ? __pfx_get_futex_key+0x10/0x10 [ 191.860649][ T7392] ? update_se+0x94/0x760 [ 191.860685][ T7392] futex_wait_setup+0x83/0x510 [ 191.860732][ T7392] __futex_wait+0x19f/0x300 [ 191.860773][ T7392] ? __pfx___futex_wait+0x10/0x10 [ 191.860809][ T7392] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.860849][ T7392] ? lockdep_hardirqs_on+0x78/0x100 [ 191.860875][ T7392] ? __pfx_futex_wake_mark+0x10/0x10 [ 191.860925][ T7392] ? find_held_lock+0x2b/0x80 [ 191.860948][ T7392] ? futex_wake+0x456/0x530 [ 191.860991][ T7392] futex_wait+0xed/0x380 [ 191.861030][ T7392] ? __pfx_futex_wait+0x10/0x10 [ 191.861093][ T7392] do_futex+0x1ef/0x350 [ 191.861127][ T7392] ? __pfx_do_futex+0x10/0x10 [ 191.861160][ T7392] ? __pfx___might_resched+0x10/0x10 [ 191.861197][ T7392] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 191.861242][ T7392] __x64_sys_futex+0x34f/0x4d0 [ 191.861277][ T7392] ? __pfx_task_work_run+0x10/0x10 [ 191.861313][ T7392] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.861347][ T7392] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 191.861391][ T7392] do_syscall_64+0x106/0xf80 [ 191.861414][ T7392] ? clear_bhb_loop+0x40/0x90 [ 191.861443][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.861467][ T7392] RIP: 0033:0x7fa47fd9c819 [ 191.861487][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.861510][ T7392] RSP: 002b:00007fa480b780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.861532][ T7392] RAX: ffffffffffffffda RBX: 00007fa480016098 RCX: 00007fa47fd9c819 [ 191.861547][ T7392] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa480016098 [ 191.861561][ T7392] RBP: 00007fa480016090 R08: 0000000000000000 R09: 0000000000000000 [ 191.861575][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.861589][ T7392] R13: 00007fa480016128 R14: 00007ffee9e751a0 R15: 00007ffee9e75288 [ 191.861618][ T7392] [ 193.080536][ T5825] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 193.705204][ T7403] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 194.488975][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.495405][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.082851][ T7419] random: crng reseeded on system resumption [ 197.176739][ T7467] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 197.176739][ T7467] The task syz.2.319 (7467) triggered the difference, watch for misbehavior. [ 197.634078][ T7473] netlink: 330 bytes leftover after parsing attributes in process `syz.0.318'. [ 197.691535][ T7473] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 199.338757][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.332'. [ 199.382500][ T7520] nbd: must specify a size in bytes for the device [ 199.429566][ T7520] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 199.904667][ T7527] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 201.243643][ T7554] [U] ^@ [ 201.895899][ T7572] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 201.996571][ T7572] dlm: non-version read from control device 3 [ 202.050279][ T7570] ima: policy update failed [ 202.079229][ T29] audit: type=1802 audit(1775248509.000:11): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.342" res=0 errno=0 [ 202.418192][ T7574] bond0: option packets_per_slave: invalid value () [ 202.450113][ T7574] bond0: option packets_per_slave: allowed values 0 - 65535 [ 202.750735][ T7596] sg_write: process 356 (syz.2.347) changed security contexts after opening file descriptor, this is not allowed. [ 203.358006][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 204.363861][ T7607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.390789][ T7607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.412823][ T7607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.436401][ T7607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.824208][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'. [ 205.465416][ T7637] FAULT_INJECTION: forcing a failure. [ 205.465416][ T7637] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.519088][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.2.356 Tainted: G U L syzkaller #0 PREEMPT(full) [ 205.519126][ T7637] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 205.519135][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.519148][ T7637] Call Trace: [ 205.519155][ T7637] [ 205.519163][ T7637] dump_stack_lvl+0x100/0x190 [ 205.519203][ T7637] should_fail_ex.cold+0x5/0xa [ 205.519230][ T7637] get_futex_key+0x1d2/0x1620 [ 205.519262][ T7637] ? __pfx_get_futex_key+0x10/0x10 [ 205.519288][ T7637] ? lock_acquire+0x1cf/0x380 [ 205.519328][ T7637] futex_wake+0xea/0x530 [ 205.519366][ T7637] ? __pfx_futex_wake+0x10/0x10 [ 205.519402][ T7637] ? exit_mm_release+0x19/0x30 [ 205.519443][ T7637] do_futex+0x32b/0x350 [ 205.519474][ T7637] ? __pfx_do_futex+0x10/0x10 [ 205.519503][ T7637] ? __might_fault+0xc5/0x140 [ 205.519545][ T7637] mm_release+0x24a/0x2f0 [ 205.519570][ T7637] do_exit+0x704/0x2b60 [ 205.519605][ T7637] ? __pfx_do_exit+0x10/0x10 [ 205.519636][ T7637] ? do_raw_spin_lock+0x128/0x260 [ 205.519670][ T7637] ? find_held_lock+0x2b/0x80 [ 205.519691][ T7637] ? get_signal+0x7e0/0x21e0 [ 205.519719][ T7637] do_group_exit+0xd5/0x2a0 [ 205.519753][ T7637] get_signal+0x1ec7/0x21e0 [ 205.519784][ T7637] ? ksys_write+0x190/0x250 [ 205.519808][ T7637] ? __pfx_get_signal+0x10/0x10 [ 205.519834][ T7637] ? do_futex+0x192/0x350 [ 205.519868][ T7637] arch_do_signal_or_restart+0x91/0x770 [ 205.519907][ T7637] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 205.519944][ T7637] ? __pfx___x64_sys_futex+0x10/0x10 [ 205.519982][ T7637] exit_to_user_mode_loop+0x86/0x4a0 [ 205.520017][ T7637] do_syscall_64+0x668/0xf80 [ 205.520039][ T7637] ? clear_bhb_loop+0x40/0x90 [ 205.520067][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.520090][ T7637] RIP: 0033:0x7f5c11f9c819 [ 205.520109][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.520130][ T7637] RSP: 002b:00007f5c101b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.520152][ T7637] RAX: fffffffffffffe00 RBX: 00007f5c12216368 RCX: 00007f5c11f9c819 [ 205.520167][ T7637] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c12216368 [ 205.520180][ T7637] RBP: 00007f5c12216360 R08: 0000000000000000 R09: 0000000000000000 [ 205.520194][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.520207][ T7637] R13: 00007f5c122163f8 R14: 00007fff41c00fb0 R15: 00007fff41c01098 [ 205.520236][ T7637] [ 206.125163][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.197956][ T7655] random: crng reseeded on system resumption [ 206.458248][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.505209][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 206.512036][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.945440][ T5832] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 208.996014][ T7708] Unable to find swap-space signature [ 210.083065][ T7721] hub 1-0:1.0: USB hub found [ 210.169908][ T7706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.203077][ T7721] hub 1-0:1.0: 1 port detected [ 210.233470][ T7706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.241510][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 210.280915][ T7706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 210.344711][ T7730] FAULT_INJECTION: forcing a failure. [ 210.344711][ T7730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.412044][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.3.374 Tainted: G U L syzkaller #0 PREEMPT(full) [ 210.412086][ T7730] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 210.412104][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.412122][ T7730] Call Trace: [ 210.412130][ T7730] [ 210.412139][ T7730] dump_stack_lvl+0x100/0x190 [ 210.412181][ T7730] should_fail_ex.cold+0x5/0xa [ 210.412206][ T7730] ? prepare_alloc_pages+0x16d/0x5f0 [ 210.412238][ T7730] should_fail_alloc_page+0xeb/0x140 [ 210.412267][ T7730] prepare_alloc_pages+0x1f0/0x5f0 [ 210.412298][ T7730] ? bpf_ksym_find+0x124/0x1c0 [ 210.412331][ T7730] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 210.412373][ T7730] ? __kernel_text_address+0xd/0x30 [ 210.412410][ T7730] ? unwind_get_return_address+0x59/0xa0 [ 210.412437][ T7730] ? arch_stack_walk+0xa6/0xf0 [ 210.412471][ T7730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.412510][ T7730] ? stack_trace_save+0x8e/0xc0 [ 210.412534][ T7730] ? __pfx_stack_trace_save+0x10/0x10 [ 210.412560][ T7730] ? stack_depot_save_flags+0x27/0x9d0 [ 210.412599][ T7730] ? kasan_save_stack+0x30/0x50 [ 210.412621][ T7730] ? kasan_save_track+0x14/0x30 [ 210.412641][ T7730] ? __kasan_slab_alloc+0x89/0x90 [ 210.412664][ T7730] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 210.412701][ T7730] ? __pmd_alloc+0xbf/0x950 [ 210.412729][ T7730] ? __handle_mm_fault+0xa9e/0x2b60 [ 210.412761][ T7730] ? handle_mm_fault+0x36d/0xa20 [ 210.412823][ T7730] ? __get_user_pages+0xf9c/0x34d0 [ 210.412851][ T7730] ? populate_vma_page_range+0x267/0x3f0 [ 210.412881][ T7730] ? __mm_populate+0x107/0x3a0 [ 210.412908][ T7730] ? vm_mmap_pgoff+0x37f/0x470 [ 210.412935][ T7730] ? ksys_mmap_pgoff+0xe1/0x650 [ 210.412960][ T7730] ? __x64_sys_mmap+0x125/0x190 [ 210.412995][ T7730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.413022][ T7730] ? policy_nodemask+0xed/0x4f0 [ 210.413050][ T7730] alloc_pages_mpol+0x1fb/0x550 [ 210.413079][ T7730] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 210.413119][ T7730] alloc_pages_noprof+0x136/0x390 [ 210.413148][ T7730] pte_alloc_one+0x1c/0x3d0 [ 210.413177][ T7730] __pte_alloc+0x6d/0x3e0 [ 210.413202][ T7730] ? __pfx___pte_alloc+0x10/0x10 [ 210.413230][ T7730] ? do_raw_spin_lock+0x128/0x260 [ 210.413266][ T7730] ? find_held_lock+0x2b/0x80 [ 210.413291][ T7730] do_anonymous_page+0x13cc/0x1fb0 [ 210.413333][ T7730] ? do_raw_spin_unlock+0x145/0x1e0 [ 210.413371][ T7730] ? _raw_spin_unlock+0x28/0x50 [ 210.413407][ T7730] ? __pmd_alloc+0x3fb/0x950 [ 210.413439][ T7730] __handle_mm_fault+0x1d48/0x2b60 [ 210.413491][ T7730] ? mt_find+0x45e/0x8e0 [ 210.413519][ T7730] ? __pfx___handle_mm_fault+0x10/0x10 [ 210.413563][ T7730] ? __pfx_mt_find+0x10/0x10 [ 210.413613][ T7730] handle_mm_fault+0x36d/0xa20 [ 210.413653][ T7730] __get_user_pages+0xf9c/0x34d0 [ 210.413693][ T7730] ? __pfx___get_user_pages+0x10/0x10 [ 210.413730][ T7730] populate_vma_page_range+0x267/0x3f0 [ 210.413764][ T7730] ? __pfx_populate_vma_page_range+0x10/0x10 [ 210.413794][ T7730] ? __pfx_find_vma_intersection+0x10/0x10 [ 210.413823][ T7730] ? do_mmap+0x93f/0x12f0 [ 210.413853][ T7730] __mm_populate+0x107/0x3a0 [ 210.413885][ T7730] ? __pfx___mm_populate+0x10/0x10 [ 210.413917][ T7730] ? up_write+0x290/0x4f0 [ 210.413956][ T7730] vm_mmap_pgoff+0x37f/0x470 [ 210.413988][ T7730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 210.414018][ T7730] ? do_futex+0x192/0x350 [ 210.414051][ T7730] ? __pfx_do_futex+0x10/0x10 [ 210.414089][ T7730] ksys_mmap_pgoff+0xe1/0x650 [ 210.414137][ T7730] ? __x64_sys_futex+0x34f/0x4d0 [ 210.414169][ T7730] ? __x64_sys_futex+0x358/0x4d0 [ 210.414202][ T7730] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 210.414230][ T7730] ? xfd_validate_state+0x129/0x190 [ 210.414271][ T7730] __x64_sys_mmap+0x125/0x190 [ 210.414312][ T7730] do_syscall_64+0x106/0xf80 [ 210.414335][ T7730] ? clear_bhb_loop+0x40/0x90 [ 210.414364][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.414389][ T7730] RIP: 0033:0x7fceb139c819 [ 210.414409][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.414432][ T7730] RSP: 002b:00007fceb22a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.414455][ T7730] RAX: ffffffffffffffda RBX: 00007fceb1616090 RCX: 00007fceb139c819 [ 210.414471][ T7730] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 210.414485][ T7730] RBP: 00007fceb1432c91 R08: ffffffffffffffff R09: 0000000000008000 [ 210.414499][ T7730] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 210.414513][ T7730] R13: 00007fceb1616128 R14: 00007fceb1616090 R15: 00007fff085eaaa8 [ 210.414544][ T7730] [ 211.049149][ T7706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.055236][ T7706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.768952][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.073425][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'. [ 212.250292][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.207050][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 213.213129][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.329467][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.184979][ T29] audit: type=1800 audit(1775249545.101:12): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.395" name="dbroot" dev="configfs" ino=19014 res=0 errno=0 [ 215.335133][ T7818] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 215.456409][ T7818] pci 0000:00:01.3: PCI INT A: no GSI [ 215.866857][ T5825] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 217.145225][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 217.268046][ T5832] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 218.500285][ T7885] netlink: 186 bytes leftover after parsing attributes in process `syz.0.409'. [ 219.811737][ T7903] FAULT_INJECTION: forcing a failure. [ 219.811737][ T7903] name failslab, interval 1, probability 0, space 0, times 0 [ 219.894491][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.3.413 Tainted: G U L syzkaller #0 PREEMPT(full) [ 219.894530][ T7903] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 219.894538][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.894551][ T7903] Call Trace: [ 219.894558][ T7903] [ 219.894567][ T7903] dump_stack_lvl+0x100/0x190 [ 219.894607][ T7903] should_fail_ex.cold+0x5/0xa [ 219.894635][ T7903] should_failslab+0xc2/0x120 [ 219.894661][ T7903] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 219.894754][ T7903] ? __d_alloc+0x34/0xa80 [ 219.894788][ T7903] __d_alloc+0x34/0xa80 [ 219.894818][ T7903] d_alloc_pseudo+0x1c/0xc0 [ 219.894853][ T7903] alloc_file_pseudo+0xcf/0x230 [ 219.894885][ T7903] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 219.894925][ T7903] __shmem_file_setup+0x221/0x490 [ 219.894959][ T7903] ? __pfx___shmem_file_setup+0x10/0x10 [ 219.894997][ T7903] ? vm_area_alloc+0x1f/0x160 [ 219.895033][ T7903] shmem_zero_setup+0x96/0x1b0 [ 219.895056][ T7903] __mmap_region+0x2198/0x29e0 [ 219.895097][ T7903] ? __pfx___mmap_region+0x10/0x10 [ 219.895138][ T7903] ? set_next_entity+0x11e/0x9c0 [ 219.895178][ T7903] ? __lock_acquire+0x4a5/0x2630 [ 219.895208][ T7903] ? update_cfs_rq_load_avg+0x51/0x550 [ 219.895246][ T7903] ? find_held_lock+0x2b/0x80 [ 219.895267][ T7903] ? finish_task_switch.isra.0+0x200/0xb80 [ 219.895293][ T7903] ? finish_task_switch.isra.0+0x200/0xb80 [ 219.895330][ T7903] ? trace_sched_exit_tp+0x13a/0x180 [ 219.895358][ T7903] ? __schedule+0x1000/0x6120 [ 219.895430][ T7903] ? rcu_is_watching+0x12/0xc0 [ 219.895466][ T7903] ? cap_capable+0x107/0x460 [ 219.895494][ T7903] mmap_region+0x180/0x3e0 [ 219.895535][ T7903] do_mmap+0xc63/0x12f0 [ 219.895567][ T7903] ? __pfx_do_mmap+0x10/0x10 [ 219.895594][ T7903] ? __pfx_down_write_killable+0x10/0x10 [ 219.895627][ T7903] vm_mmap_pgoff+0x29e/0x470 [ 219.895660][ T7903] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 219.895689][ T7903] ? do_futex+0x192/0x350 [ 219.895727][ T7903] ? __pfx_do_futex+0x10/0x10 [ 219.895763][ T7903] ksys_mmap_pgoff+0xe1/0x650 [ 219.895789][ T7903] ? __x64_sys_futex+0x34f/0x4d0 [ 219.895819][ T7903] ? __x64_sys_futex+0x358/0x4d0 [ 219.895851][ T7903] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 219.895877][ T7903] ? xfd_validate_state+0x129/0x190 [ 219.895920][ T7903] __x64_sys_mmap+0x125/0x190 [ 219.895958][ T7903] do_syscall_64+0x106/0xf80 [ 219.895980][ T7903] ? clear_bhb_loop+0x40/0x90 [ 219.896008][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.896031][ T7903] RIP: 0033:0x7fceb139c819 [ 219.896049][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.896070][ T7903] RSP: 002b:00007fceb22ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.896092][ T7903] RAX: ffffffffffffffda RBX: 00007fceb1615fa0 RCX: 00007fceb139c819 [ 219.896107][ T7903] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 219.896121][ T7903] RBP: 00007fceb1432c91 R08: 0000000000000401 R09: 0000000000008000 [ 219.896135][ T7903] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 219.896149][ T7903] R13: 00007fceb1616038 R14: 00007fceb1615fa0 R15: 00007fff085eaaa8 [ 219.896178][ T7903] [ 222.595100][ T7937] sp0: Synchronizing with TNC [ 222.810051][ T7922] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 223.183710][ T7944] netlink: 212 bytes leftover after parsing attributes in process `syz.1.423'. [ 224.004531][ T7961] FAULT_INJECTION: forcing a failure. [ 224.004531][ T7961] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.152805][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.1.427 Tainted: G U L syzkaller #0 PREEMPT(full) [ 224.152846][ T7961] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 224.152855][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.152869][ T7961] Call Trace: [ 224.152876][ T7961] [ 224.152885][ T7961] dump_stack_lvl+0x100/0x190 [ 224.152926][ T7961] should_fail_ex.cold+0x5/0xa [ 224.152955][ T7961] get_futex_key+0x1d2/0x1620 [ 224.152989][ T7961] ? __pfx_get_futex_key+0x10/0x10 [ 224.153041][ T7961] futex_wait_setup+0x83/0x510 [ 224.153088][ T7961] __futex_wait+0x19f/0x300 [ 224.153129][ T7961] ? __pfx___futex_wait+0x10/0x10 [ 224.153173][ T7961] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.153217][ T7961] ? find_held_lock+0x2b/0x80 [ 224.153240][ T7961] ? futex_wake+0x456/0x530 [ 224.153284][ T7961] futex_wait+0xed/0x380 [ 224.153322][ T7961] ? __pfx_futex_wait+0x10/0x10 [ 224.153376][ T7961] do_futex+0x1ef/0x350 [ 224.153409][ T7961] ? __pfx_do_futex+0x10/0x10 [ 224.153450][ T7961] ? find_held_lock+0x2b/0x80 [ 224.153472][ T7961] ? __x64_sys_close_range+0x3ce/0x5d0 [ 224.153505][ T7961] __x64_sys_futex+0x34f/0x4d0 [ 224.153542][ T7961] ? __pfx___x64_sys_futex+0x10/0x10 [ 224.153587][ T7961] do_syscall_64+0x106/0xf80 [ 224.153611][ T7961] ? clear_bhb_loop+0x40/0x90 [ 224.153640][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.153665][ T7961] RIP: 0033:0x7fa47fd9c819 [ 224.153684][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.153706][ T7961] RSP: 002b:00007fa480b780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.153728][ T7961] RAX: ffffffffffffffda RBX: 00007fa480016098 RCX: 00007fa47fd9c819 [ 224.153743][ T7961] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa480016098 [ 224.153757][ T7961] RBP: 00007fa480016090 R08: 0000000000000000 R09: 0000000000000000 [ 224.153771][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.153785][ T7961] R13: 00007fa480016128 R14: 00007ffee9e751a0 R15: 00007ffee9e75288 [ 224.153815][ T7961] [ 225.504271][ T8003] random: crng reseeded on system resumption [ 225.661450][ T7998] binder: 7986:7998 ioctl 40086602 e20 returned -22 [ 226.313141][ T8014] netlink: 342 bytes leftover after parsing attributes in process `syz.0.440'. [ 226.359925][ T8014] IPv6: Can't replace route, no match found [ 226.410052][ T8013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.440'. [ 226.456320][ T8013] IPv6: Can't replace route, no match found [ 228.416603][ T8053] ucma_write: process 216 (syz.3.447) changed security contexts after opening file descriptor, this is not allowed. [ 228.564040][ T8053] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 228.614702][ T8053] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 228.658316][ T8053] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 228.699099][ T8053] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 228.742645][ T8053] page dumped because: unmovable page [ 228.763060][ T8053] page_owner info is not present (never set?) [ 229.290507][ T8063] MTRR 1 not used [ 229.880598][ T8073] netlink: 330 bytes leftover after parsing attributes in process `syz.3.452'. [ 230.572098][ T8085] random: crng reseeded on system resumption [ 231.332675][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 231.837417][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 231.903143][ T8122] ipvlan0: entered promiscuous mode [ 231.923053][ T8122] ipvlan0: entered allmulticast mode [ 231.942349][ T8122] veth0_vlan: entered allmulticast mode [ 233.572491][ T8154] nvme_fabrics: missing parameter 'transport=%s' [ 233.615915][ T8154] nvme_fabrics: missing parameter 'nqn=%s' [ 235.571717][ T8166] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 235.878607][ T8186] FAULT_INJECTION: forcing a failure. [ 235.878607][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 235.965470][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.3.475 Tainted: G U L syzkaller #0 PREEMPT(full) [ 235.965510][ T8186] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 235.965518][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.965531][ T8186] Call Trace: [ 235.965538][ T8186] [ 235.965547][ T8186] dump_stack_lvl+0x100/0x190 [ 235.965588][ T8186] should_fail_ex.cold+0x5/0xa [ 235.965616][ T8186] should_failslab+0xc2/0x120 [ 235.965642][ T8186] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 235.965680][ T8186] ? __d_alloc+0x34/0xa80 [ 235.965713][ T8186] __d_alloc+0x34/0xa80 [ 235.965742][ T8186] d_alloc_pseudo+0x1c/0xc0 [ 235.965777][ T8186] alloc_file_pseudo+0xcf/0x230 [ 235.965809][ T8186] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 235.965848][ T8186] __shmem_file_setup+0x221/0x490 [ 235.965882][ T8186] ? __pfx___shmem_file_setup+0x10/0x10 [ 235.965920][ T8186] ? vm_area_alloc+0x1f/0x160 [ 235.965956][ T8186] shmem_zero_setup+0x96/0x1b0 [ 235.965980][ T8186] __mmap_region+0x2198/0x29e0 [ 235.966020][ T8186] ? __pfx___mmap_region+0x10/0x10 [ 235.966069][ T8186] ? set_next_entity+0x11e/0x9c0 [ 235.966110][ T8186] ? __lock_acquire+0x4a5/0x2630 [ 235.966154][ T8186] ? find_held_lock+0x2b/0x80 [ 235.966175][ T8186] ? finish_task_switch.isra.0+0x200/0xb80 [ 235.966202][ T8186] ? finish_task_switch.isra.0+0x200/0xb80 [ 235.966239][ T8186] ? trace_sched_exit_tp+0x13a/0x180 [ 235.966268][ T8186] ? __schedule+0x1000/0x6120 [ 235.966341][ T8186] ? rcu_is_watching+0x12/0xc0 [ 235.966378][ T8186] ? cap_capable+0x107/0x460 [ 235.966411][ T8186] mmap_region+0x180/0x3e0 [ 235.966453][ T8186] do_mmap+0xc63/0x12f0 [ 235.966486][ T8186] ? __pfx_do_mmap+0x10/0x10 [ 235.966513][ T8186] ? __pfx_down_write_killable+0x10/0x10 [ 235.966546][ T8186] vm_mmap_pgoff+0x29e/0x470 [ 235.966579][ T8186] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 235.966608][ T8186] ? do_futex+0x192/0x350 [ 235.966639][ T8186] ? __pfx_do_futex+0x10/0x10 [ 235.966675][ T8186] ksys_mmap_pgoff+0xe1/0x650 [ 235.966701][ T8186] ? __x64_sys_futex+0x34f/0x4d0 [ 235.966731][ T8186] ? __x64_sys_futex+0x358/0x4d0 [ 235.966762][ T8186] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 235.966788][ T8186] ? xfd_validate_state+0x129/0x190 [ 235.966828][ T8186] __x64_sys_mmap+0x125/0x190 [ 235.966866][ T8186] do_syscall_64+0x106/0xf80 [ 235.966888][ T8186] ? clear_bhb_loop+0x40/0x90 [ 235.966917][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.966940][ T8186] RIP: 0033:0x7fceb139c819 [ 235.966958][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.966979][ T8186] RSP: 002b:00007fceb22ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.967000][ T8186] RAX: ffffffffffffffda RBX: 00007fceb1615fa0 RCX: 00007fceb139c819 [ 235.967015][ T8186] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 235.967028][ T8186] RBP: 00007fceb1432c91 R08: 0000000000000401 R09: 0000000000008000 [ 235.967041][ T8186] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 235.967054][ T8186] R13: 00007fceb1616038 R14: 00007fceb1615fa0 R15: 00007fff085eaaa8 [ 235.967083][ T8186] [ 236.388950][ T8185] FAULT_INJECTION: forcing a failure. [ 236.388950][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 236.401934][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.0.474 Tainted: G U L syzkaller #0 PREEMPT(full) [ 236.401975][ T8185] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 236.401984][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.401997][ T8185] Call Trace: [ 236.402006][ T8185] [ 236.402015][ T8185] dump_stack_lvl+0x100/0x190 [ 236.402055][ T8185] should_fail_ex.cold+0x5/0xa [ 236.402083][ T8185] should_failslab+0xc2/0x120 [ 236.402109][ T8185] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 236.402146][ T8185] ? do_getname+0x35/0x390 [ 236.402176][ T8185] ? strncpy_from_user+0x19d/0x2d0 [ 236.402207][ T8185] do_getname+0x35/0x390 [ 236.402240][ T8185] user_path_at+0x26/0x60 [ 236.402263][ T8185] __x64_sys_umount+0x10a/0x1a0 [ 236.402289][ T8185] ? __pfx___x64_sys_umount+0x10/0x10 [ 236.402322][ T8185] do_syscall_64+0x106/0xf80 [ 236.402344][ T8185] ? clear_bhb_loop+0x40/0x90 [ 236.402372][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.402396][ T8185] RIP: 0033:0x7f0106f9c819 [ 236.402415][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.402437][ T8185] RSP: 002b:00007f01051d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 236.402463][ T8185] RAX: ffffffffffffffda RBX: 00007f0107216180 RCX: 00007f0106f9c819 [ 236.402478][ T8185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 236.402492][ T8185] RBP: 00007f0107032c91 R08: 0000000000000000 R09: 0000000000000000 [ 236.402505][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.402518][ T8185] R13: 00007f0107216218 R14: 00007f0107216180 R15: 00007ffe062e4fb8 [ 236.402548][ T8185] [ 237.050117][ T8197] FAULT_INJECTION: forcing a failure. [ 237.050117][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 237.138054][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.1.476 Tainted: G U L syzkaller #0 PREEMPT(full) [ 237.138095][ T8197] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 237.138103][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.138116][ T8197] Call Trace: [ 237.138124][ T8197] [ 237.138133][ T8197] dump_stack_lvl+0x100/0x190 [ 237.138176][ T8197] should_fail_ex.cold+0x5/0xa [ 237.138204][ T8197] should_failslab+0xc2/0x120 [ 237.138230][ T8197] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 237.138267][ T8197] ? security_inode_alloc+0x3b/0x2c0 [ 237.138293][ T8197] ? lockdep_init_map_type+0x5c/0x250 [ 237.138337][ T8197] security_inode_alloc+0x3b/0x2c0 [ 237.138364][ T8197] inode_init_always_gfp+0xced/0x1040 [ 237.138394][ T8197] alloc_inode+0x8e/0x250 [ 237.138426][ T8197] sock_alloc+0x44/0x280 [ 237.138448][ T8197] ? security_socket_create+0x7f/0x250 [ 237.138474][ T8197] __sock_create+0xc2/0x860 [ 237.138507][ T8197] __sys_socket+0x14d/0x260 [ 237.138536][ T8197] ? __pfx___sys_socket+0x10/0x10 [ 237.138574][ T8197] __x64_sys_socket+0x72/0xb0 [ 237.138602][ T8197] ? lockdep_hardirqs_on+0x78/0x100 [ 237.138625][ T8197] do_syscall_64+0x106/0xf80 [ 237.138647][ T8197] ? clear_bhb_loop+0x40/0x90 [ 237.138675][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.138698][ T8197] RIP: 0033:0x7fa47fd9c819 [ 237.138717][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.138739][ T8197] RSP: 002b:00007fa480b99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 237.138760][ T8197] RAX: ffffffffffffffda RBX: 00007fa480015fa0 RCX: 00007fa47fd9c819 [ 237.138775][ T8197] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 237.138788][ T8197] RBP: 00007fa47fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 237.138802][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.138815][ T8197] R13: 00007fa480016038 R14: 00007fa480015fa0 R15: 00007ffee9e75288 [ 237.138844][ T8197] [ 238.001680][ T8197] socket: no more sockets [ 238.478008][ T8212] FAULT_INJECTION: forcing a failure. [ 238.478008][ T8212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 238.602433][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.3.479 Tainted: G U L syzkaller #0 PREEMPT(full) [ 238.602472][ T8212] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 238.602480][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.602493][ T8212] Call Trace: [ 238.602500][ T8212] [ 238.602509][ T8212] dump_stack_lvl+0x100/0x190 [ 238.602549][ T8212] should_fail_ex.cold+0x5/0xa [ 238.602572][ T8212] ? rcu_is_watching+0x12/0xc0 [ 238.602612][ T8212] get_futex_key+0x107c/0x1620 [ 238.602645][ T8212] ? __pfx_get_futex_key+0x10/0x10 [ 238.602671][ T8212] ? lock_acquire+0x1cf/0x380 [ 238.602712][ T8212] futex_wake+0xea/0x530 [ 238.602750][ T8212] ? __pfx_futex_wake+0x10/0x10 [ 238.602787][ T8212] ? exit_mm_release+0x19/0x30 [ 238.602824][ T8212] do_futex+0x32b/0x350 [ 238.602856][ T8212] ? __pfx_do_futex+0x10/0x10 [ 238.602885][ T8212] ? __might_fault+0xc5/0x140 [ 238.602927][ T8212] mm_release+0x24a/0x2f0 [ 238.602952][ T8212] do_exit+0x704/0x2b60 [ 238.602987][ T8212] ? __pfx_do_exit+0x10/0x10 [ 238.603018][ T8212] ? do_raw_spin_lock+0x128/0x260 [ 238.603053][ T8212] ? find_held_lock+0x2b/0x80 [ 238.603075][ T8212] ? get_signal+0x7e0/0x21e0 [ 238.603102][ T8212] do_group_exit+0xd5/0x2a0 [ 238.603136][ T8212] get_signal+0x1ec7/0x21e0 [ 238.603166][ T8212] ? find_held_lock+0x2b/0x80 [ 238.603193][ T8212] ? __pfx_get_signal+0x10/0x10 [ 238.603219][ T8212] ? do_futex+0x192/0x350 [ 238.603260][ T8212] arch_do_signal_or_restart+0x91/0x770 [ 238.603292][ T8212] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 238.603330][ T8212] ? __pfx___x64_sys_futex+0x10/0x10 [ 238.603368][ T8212] exit_to_user_mode_loop+0x86/0x4a0 [ 238.603403][ T8212] do_syscall_64+0x668/0xf80 [ 238.603425][ T8212] ? clear_bhb_loop+0x40/0x90 [ 238.603454][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.603477][ T8212] RIP: 0033:0x7fceb139c819 [ 238.603495][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.603517][ T8212] RSP: 002b:00007fceb22ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.603539][ T8212] RAX: fffffffffffffe00 RBX: 00007fceb1615fa8 RCX: 00007fceb139c819 [ 238.603553][ T8212] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fceb1615fa8 [ 238.603567][ T8212] RBP: 00007fceb1615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 238.603581][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.603594][ T8212] R13: 00007fceb1616038 R14: 00007fff085ea9c0 R15: 00007fff085eaaa8 [ 238.603623][ T8212] [ 239.391199][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 242.484489][ T8255] Zero length message leads to an empty skb [ 242.876711][ T8257] mkiss: ax0: crc mode is auto. [ 243.301451][ T8262] syz.3.487 uses obsolete (PF_INET,SOCK_PACKET) [ 245.324208][ T8291] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 245.414427][ T8291] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.456014][ T8291] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.496854][ T8295] FAULT_INJECTION: forcing a failure. [ 245.496854][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 245.530967][ T8291] page_type: f5(slab) [ 245.554951][ T8291] raw: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 245.605790][ T8291] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 245.689044][ T8291] head: 00fff00000000040 ffff88801ce918c0 dead000000000100 dead000000000122 [ 245.723441][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.0.494 Tainted: G U L syzkaller #0 PREEMPT(full) [ 245.723481][ T8295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 245.723490][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.723504][ T8295] Call Trace: [ 245.723512][ T8295] [ 245.723521][ T8295] dump_stack_lvl+0x100/0x190 [ 245.723563][ T8295] should_fail_ex.cold+0x5/0xa [ 245.723593][ T8295] should_failslab+0xc2/0x120 [ 245.723620][ T8295] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 245.723658][ T8295] ? __kernfs_new_node+0xd2/0x960 [ 245.723709][ T8295] __kernfs_new_node+0xd2/0x960 [ 245.723749][ T8295] ? __pfx___kernfs_new_node+0x10/0x10 [ 245.723793][ T8295] ? find_held_lock+0x2b/0x80 [ 245.723816][ T8295] ? kernfs_root+0xee/0x2a0 [ 245.723851][ T8295] ? kernfs_root+0xee/0x2a0 [ 245.723893][ T8295] kernfs_new_node+0x11b/0x1a0 [ 245.723921][ T8295] __kernfs_create_file+0x53/0x350 [ 245.723954][ T8295] sysfs_add_file_mode_ns+0x207/0x3c0 [ 245.723996][ T8295] internal_create_group+0x593/0xf40 [ 245.724041][ T8295] ? __pfx_internal_create_group+0x10/0x10 [ 245.724084][ T8295] ? kernfs_create_link+0x1bd/0x240 [ 245.724118][ T8295] internal_create_groups+0x9d/0x150 [ 245.724159][ T8295] device_add+0xf5b/0x1950 [ 245.724195][ T8295] ? __pfx_device_add+0x10/0x10 [ 245.724227][ T8295] ? lockdep_init_map_type+0x5c/0x250 [ 245.724261][ T8295] ? __init_waitqueue_head+0xca/0x150 [ 245.724307][ T8295] netdev_register_kobject+0x1a9/0x3d0 [ 245.724339][ T8295] register_netdevice+0x12e0/0x2210 [ 245.724370][ T8295] ? __pfx_register_netdevice+0x10/0x10 [ 245.724401][ T8295] ? __pfx_loopback_net_init+0x10/0x10 [ 245.724431][ T8295] register_netdev+0x34/0x50 [ 245.724454][ T8295] loopback_net_init+0x7a/0x170 [ 245.724489][ T8295] ? __pfx_loopback_net_init+0x10/0x10 [ 245.724517][ T8295] ops_init+0x1e2/0x5f0 [ 245.724543][ T8295] setup_net+0x118/0x3a0 [ 245.724567][ T8295] ? __pfx_setup_net+0x10/0x10 [ 245.724588][ T8295] ? lockdep_init_map_type+0x5c/0x250 [ 245.724622][ T8295] ? mutex_init_lockep+0x110/0x150 [ 245.724662][ T8295] copy_net_ns+0x46f/0x7c0 [ 245.724696][ T8295] create_new_namespaces+0x3ea/0xac0 [ 245.724731][ T8295] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 245.724761][ T8295] ksys_unshare+0x473/0xad0 [ 245.724795][ T8295] ? __pfx_ksys_unshare+0x10/0x10 [ 245.724838][ T8295] __x64_sys_unshare+0x31/0x40 [ 245.724870][ T8295] do_syscall_64+0x106/0xf80 [ 245.724894][ T8295] ? clear_bhb_loop+0x40/0x90 [ 245.724924][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.724948][ T8295] RIP: 0033:0x7f0106f9c819 [ 245.724968][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.724991][ T8295] RSP: 002b:00007f01051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 245.725013][ T8295] RAX: ffffffffffffffda RBX: 00007f0107216090 RCX: 00007f0106f9c819 [ 245.725028][ T8295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 245.725043][ T8295] RBP: 00007f0107032c91 R08: 0000000000000000 R09: 0000000000000000 [ 245.725057][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.725070][ T8295] R13: 00007f0107216128 R14: 00007f0107216090 R15: 00007ffe062e4fb8 [ 245.725101][ T8295] [ 246.108486][ T8291] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 246.117291][ T8291] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 246.126131][ T8291] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 246.134878][ T8291] page dumped because: unmovable page [ 246.141427][ T8291] page_owner tracks the page as allocated [ 246.147769][ T8291] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5196, tgid 5196 (udevd), ts 52226891539, free_ts 32676061911 [ 246.170729][ T8291] post_alloc_hook+0x153/0x170 [ 246.175570][ T8291] get_page_from_freelist+0x111d/0x3140 [ 246.181295][ T8291] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 246.187365][ T8291] new_slab+0xa6/0x6b0 [ 246.191565][ T8291] refill_objects+0x26b/0x400 [ 246.196306][ T8291] __pcs_replace_empty_main+0x1ab/0x660 [ 246.201968][ T8291] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 246.207877][ T8291] alloc_inode+0x183/0x250 [ 246.212373][ T8291] iget_locked+0x1d9/0x6d0 [ 246.216858][ T8291] kernfs_get_inode+0x46/0x470 [ 246.221670][ T8291] kernfs_iop_lookup+0x1a7/0x2d0 [ 246.226751][ T8291] __lookup_slow+0x251/0x460 [ 246.231368][ T8291] lookup_slow+0x50/0x70 [ 246.235661][ T8291] path_lookupat+0x5e8/0xc40 [ 246.241359][ T8291] filename_lookup+0x202/0x590 [ 246.246908][ T8291] vfs_statx+0xff/0x3f0 [ 246.251108][ T8291] page last free pid 1 tgid 1 stack trace: [ 246.257082][ T8291] __free_frozen_pages+0x7e1/0x10d0 [ 246.262419][ T8291] free_contig_range+0xde/0x1d0 [ 246.267503][ T8291] destroy_args+0xa8/0x7a0 [ 246.271984][ T8291] debug_vm_pgtable+0x1b66/0x34c0 [ 246.277087][ T8291] do_one_initcall+0x11d/0x760 [ 246.281948][ T8291] kernel_init_freeable+0x6e5/0x7a0 [ 246.287222][ T8291] kernel_init+0x1f/0x1e0 [ 246.291591][ T8291] ret_from_fork+0x754/0xd80 [ 246.296332][ T8291] ret_from_fork_asm+0x1a/0x30 [ 248.625369][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.635774][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.643762][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.651886][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.673775][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.987224][ T8347] warning: `syz.1.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 249.196857][ T8347] futex_wake_op: syz.1.505 tries to shift op by -2048; fix this program [ 250.750021][ T5825] Bluetooth: hci4: command tx timeout [ 250.908095][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 251.762567][ T8383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.806581][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.841990][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.901273][ T8344] bridge_slave_0: entered allmulticast mode [ 251.976426][ T8344] bridge_slave_0: entered promiscuous mode [ 252.057386][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.115197][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.167561][ T8344] bridge_slave_1: entered allmulticast mode [ 252.226724][ T8344] bridge_slave_1: entered promiscuous mode [ 252.606477][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.697322][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.840637][ T5825] Bluetooth: hci4: command tx timeout [ 252.916473][ T8387] FAULT_INJECTION: forcing a failure. [ 252.916473][ T8387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.047803][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: syz.1.512 Tainted: G U L syzkaller #0 PREEMPT(full) [ 253.047843][ T8387] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 253.047851][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.047865][ T8387] Call Trace: [ 253.047872][ T8387] [ 253.047880][ T8387] dump_stack_lvl+0x100/0x190 [ 253.047922][ T8387] should_fail_ex.cold+0x5/0xa [ 253.047946][ T8387] ? prepare_alloc_pages+0x16d/0x5f0 [ 253.047977][ T8387] should_fail_alloc_page+0xeb/0x140 [ 253.048006][ T8387] prepare_alloc_pages+0x1f0/0x5f0 [ 253.048039][ T8387] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 253.048082][ T8387] ? __pfx_css_rstat_updated+0x10/0x10 [ 253.048118][ T8387] ? __lock_acquire+0x4a5/0x2630 [ 253.048158][ T8387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.048212][ T8387] ? lock_acquire+0x1cf/0x380 [ 253.048243][ T8387] ? find_held_lock+0x2b/0x80 [ 253.048266][ T8387] ? page_table_check_set+0x49a/0xa10 [ 253.048290][ T8387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.048316][ T8387] ? policy_nodemask+0xed/0x4f0 [ 253.048345][ T8387] alloc_pages_mpol+0x1fb/0x550 [ 253.048372][ T8387] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 253.048407][ T8387] folio_alloc_mpol_noprof+0x36/0x340 [ 253.048440][ T8387] vma_alloc_folio_noprof+0xed/0x1d0 [ 253.048471][ T8387] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 253.048512][ T8387] do_anonymous_page+0xb3a/0x1fb0 [ 253.048556][ T8387] __handle_mm_fault+0x1d48/0x2b60 [ 253.048599][ T8387] ? __pfx___handle_mm_fault+0x10/0x10 [ 253.048635][ T8387] ? pte_offset_map_lock+0x174/0x320 [ 253.048661][ T8387] ? find_held_lock+0x2b/0x80 [ 253.048693][ T8387] ? follow_page_pte+0x5b3/0x1400 [ 253.048727][ T8387] handle_mm_fault+0x36d/0xa20 [ 253.048767][ T8387] __get_user_pages+0xf9c/0x34d0 [ 253.048806][ T8387] ? __pfx___get_user_pages+0x10/0x10 [ 253.048842][ T8387] populate_vma_page_range+0x267/0x3f0 [ 253.048875][ T8387] ? __pfx_populate_vma_page_range+0x10/0x10 [ 253.048905][ T8387] ? __pfx_find_vma_intersection+0x10/0x10 [ 253.048939][ T8387] __mm_populate+0x107/0x3a0 [ 253.048971][ T8387] ? __pfx___mm_populate+0x10/0x10 [ 253.049003][ T8387] ? up_write+0x406/0x4f0 [ 253.049041][ T8387] vm_mmap_pgoff+0x37f/0x470 [ 253.049072][ T8387] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 253.049107][ T8387] ? do_futex+0x192/0x350 [ 253.049140][ T8387] ? __pfx_do_futex+0x10/0x10 [ 253.049172][ T8387] ? fput+0x79/0x100 [ 253.049203][ T8387] ksys_mmap_pgoff+0xe1/0x650 [ 253.049235][ T8387] ? __x64_sys_futex+0x34f/0x4d0 [ 253.049266][ T8387] ? __x64_sys_futex+0x358/0x4d0 [ 253.049298][ T8387] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 253.049325][ T8387] ? xfd_validate_state+0x129/0x190 [ 253.049365][ T8387] __x64_sys_mmap+0x125/0x190 [ 253.049405][ T8387] do_syscall_64+0x106/0xf80 [ 253.049428][ T8387] ? clear_bhb_loop+0x40/0x90 [ 253.049457][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.049480][ T8387] RIP: 0033:0x7fa47fd9c819 [ 253.049499][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.049521][ T8387] RSP: 002b:00007fa480b99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 253.049543][ T8387] RAX: ffffffffffffffda RBX: 00007fa480015fa0 RCX: 00007fa47fd9c819 [ 253.049558][ T8387] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 253.049571][ T8387] RBP: 00007fa47fe32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 253.049585][ T8387] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 253.049599][ T8387] R13: 00007fa480016038 R14: 00007fa480015fa0 R15: 00007ffee9e75288 [ 253.049628][ T8387] [ 253.812021][ T8344] team0: Port device team_slave_0 added [ 253.849735][ T8344] team0: Port device team_slave_1 added [ 253.916450][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.988841][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.105851][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.236737][ T8392] FAULT_INJECTION: forcing a failure. [ 254.236737][ T8392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.277566][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.0.513 Tainted: G U L syzkaller #0 PREEMPT(full) [ 254.277607][ T8392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 254.277615][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.277628][ T8392] Call Trace: [ 254.277636][ T8392] [ 254.277644][ T8392] dump_stack_lvl+0x100/0x190 [ 254.277685][ T8392] should_fail_ex.cold+0x5/0xa [ 254.277713][ T8392] get_futex_key+0x1d2/0x1620 [ 254.277746][ T8392] ? __pfx_get_futex_key+0x10/0x10 [ 254.277785][ T8392] futex_wait_setup+0x83/0x510 [ 254.277828][ T8392] __futex_wait+0x19f/0x300 [ 254.277873][ T8392] ? __pfx___futex_wait+0x10/0x10 [ 254.277915][ T8392] ? __pfx_futex_wake_mark+0x10/0x10 [ 254.277956][ T8392] ? __hrtimer_setup+0x178/0x280 [ 254.277991][ T8392] ? ktime_add_safe+0x60/0x70 [ 254.278025][ T8392] futex_wait+0xed/0x380 [ 254.278062][ T8392] ? __pfx_futex_wait+0x10/0x10 [ 254.278096][ T8392] ? __lock_acquire+0x4a5/0x2630 [ 254.278130][ T8392] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 254.278172][ T8392] do_futex+0x1ef/0x350 [ 254.278203][ T8392] ? __pfx_do_futex+0x10/0x10 [ 254.278234][ T8392] ? ktime_get+0x200/0x300 [ 254.278257][ T8392] ? lockdep_hardirqs_on+0x78/0x100 [ 254.278280][ T8392] ? read_tsc+0x9/0x20 [ 254.278310][ T8392] __x64_sys_futex+0x34f/0x4d0 [ 254.278346][ T8392] ? __pfx___x64_sys_futex+0x10/0x10 [ 254.278388][ T8392] do_syscall_64+0x106/0xf80 [ 254.278410][ T8392] ? clear_bhb_loop+0x40/0x90 [ 254.278438][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.278462][ T8392] RIP: 0033:0x7f0106f9c819 [ 254.278481][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.278503][ T8392] RSP: 002b:00007ffe062e5118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.278524][ T8392] RAX: ffffffffffffffda RBX: 000000000003e0cf RCX: 00007f0106f9c819 [ 254.278539][ T8392] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0107215fac [ 254.278553][ T8392] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 254.278566][ T8392] R10: 00007ffe062e5220 R11: 0000000000000246 R12: 00007ffe062e5240 [ 254.278580][ T8392] R13: 00007f0107215fac R14: 000000000003e101 R15: 00007ffe062e5220 [ 254.278616][ T8392] [ 254.925179][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.945010][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.977761][ T5825] Bluetooth: hci4: command tx timeout [ 255.017582][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.700280][ T8344] hsr_slave_0: entered promiscuous mode [ 255.762106][ T8344] hsr_slave_1: entered promiscuous mode [ 255.785331][ T8344] debugfs: 'hsr0' already exists in 'hsr' [ 255.813886][ T8344] Cannot create hsr debugfs directory [ 255.959048][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965414][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.989134][ T5825] Bluetooth: hci4: command tx timeout [ 258.095217][ T8344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.208581][ T8344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.441971][ T8344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.820245][ T8344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.546518][ T8445] process 'syz.1.519' launched './file0' with NULL argv: empty string added [ 259.648217][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.817375][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.954896][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.962184][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.085454][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.092676][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.511335][ T8344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.612110][ T8344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.115513][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.634636][ T8534] FAULT_INJECTION: forcing a failure. [ 264.634636][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 264.804564][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.3.529 Tainted: G U L syzkaller #0 PREEMPT(full) [ 264.804603][ T8534] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 264.804612][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.804627][ T8534] Call Trace: [ 264.804634][ T8534] [ 264.804643][ T8534] dump_stack_lvl+0x100/0x190 [ 264.804689][ T8534] should_fail_ex.cold+0x5/0xa [ 264.804718][ T8534] should_failslab+0xc2/0x120 [ 264.804746][ T8534] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 264.804784][ T8534] ? mas_alloc_nodes+0x280/0x390 [ 264.804826][ T8534] mas_alloc_nodes+0x280/0x390 [ 264.804866][ T8534] mas_preallocate+0x39c/0xf10 [ 264.804897][ T8534] ? __pfx_mas_preallocate+0x10/0x10 [ 264.804922][ T8534] ? find_held_lock+0x2b/0x80 [ 264.804956][ T8534] ? __pfx___might_resched+0x10/0x10 [ 264.804997][ T8534] vma_link+0x12c/0x710 [ 264.805035][ T8534] ? __pfx_vma_link+0x10/0x10 [ 264.805086][ T8534] copy_vma+0x7e6/0xac0 [ 264.805127][ T8534] ? __pfx_copy_vma+0x10/0x10 [ 264.805174][ T8534] ? __lock_acquire+0x4a5/0x2630 [ 264.805230][ T8534] ? finish_task_switch.isra.0+0x200/0xb80 [ 264.805261][ T8534] copy_vma_and_data+0x1cf/0x7c0 [ 264.805302][ T8534] ? __pfx_copy_vma_and_data+0x10/0x10 [ 264.805352][ T8534] ? __vma_start_write+0x17f/0x280 [ 264.805385][ T8534] ? __pfx___vma_start_write+0x10/0x10 [ 264.805426][ T8534] move_vma+0x51b/0x1890 [ 264.805468][ T8534] ? __pfx_move_vma+0x10/0x10 [ 264.805507][ T8534] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 264.805538][ T8534] ? cap_mmap_addr+0x4b/0x120 [ 264.805561][ T8534] ? bpf_lsm_mmap_addr+0x9/0x30 [ 264.805583][ T8534] ? security_mmap_addr+0x71/0x1e0 [ 264.805616][ T8534] ? __get_unmapped_area+0x255/0x3e0 [ 264.805647][ T8534] ? vrm_set_new_addr+0x204/0x290 [ 264.805686][ T8534] mremap_to+0x1b7/0x450 [ 264.805724][ T8534] do_mremap+0xb76/0x2130 [ 264.805773][ T8534] ? __pfx_do_mremap+0x10/0x10 [ 264.805817][ T8534] ? ksys_write+0x190/0x250 [ 264.805847][ T8534] __do_sys_mremap+0x126/0x170 [ 264.805885][ T8534] ? __pfx___do_sys_mremap+0x10/0x10 [ 264.805949][ T8534] do_syscall_64+0x106/0xf80 [ 264.805972][ T8534] ? clear_bhb_loop+0x40/0x90 [ 264.806002][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.806027][ T8534] RIP: 0033:0x7fceb139c819 [ 264.806046][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.806068][ T8534] RSP: 002b:00007fceb2267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 264.806091][ T8534] RAX: ffffffffffffffda RBX: 00007fceb1616270 RCX: 00007fceb139c819 [ 264.806106][ T8534] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 264.806120][ T8534] RBP: 00007fceb1432c91 R08: 0000000100000000 R09: 0000000000000000 [ 264.806135][ T8534] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 264.806149][ T8534] R13: 00007fceb1616308 R14: 00007fceb1616270 R15: 00007fff085eaaa8 [ 264.806179][ T8534] [ 265.729429][ T8344] veth0_vlan: entered promiscuous mode [ 265.781016][ T8344] veth1_vlan: entered promiscuous mode [ 266.572515][ T8344] veth0_macvtap: entered promiscuous mode [ 266.752330][ T8344] veth1_macvtap: entered promiscuous mode [ 266.808180][ T8550] zswap: compressor not available [ 267.217436][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.396924][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.766953][ T7594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.086859][ T7594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.151863][ T7594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.204722][ T8570] FAULT_INJECTION: forcing a failure. [ 268.204722][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 268.283238][ T7594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.484926][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.3.537 Tainted: G U L syzkaller #0 PREEMPT(full) [ 268.484967][ T8570] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 268.484976][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 268.484989][ T8570] Call Trace: [ 268.484997][ T8570] [ 268.485006][ T8570] dump_stack_lvl+0x100/0x190 [ 268.485049][ T8570] should_fail_ex.cold+0x5/0xa [ 268.485078][ T8570] should_failslab+0xc2/0x120 [ 268.485105][ T8570] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 268.485143][ T8570] ? create_new_namespaces+0x30/0xac0 [ 268.485170][ T8570] ? rcu_is_watching+0x12/0xc0 [ 268.485213][ T8570] create_new_namespaces+0x30/0xac0 [ 268.485239][ T8570] ? bpf_lsm_capable+0x9/0x10 [ 268.485266][ T8570] ? security_capable+0x80/0x260 [ 268.485294][ T8570] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 268.485324][ T8570] ksys_unshare+0x473/0xad0 [ 268.485357][ T8570] ? __pfx_ksys_unshare+0x10/0x10 [ 268.485399][ T8570] __x64_sys_unshare+0x31/0x40 [ 268.485431][ T8570] do_syscall_64+0x106/0xf80 [ 268.485454][ T8570] ? clear_bhb_loop+0x40/0x90 [ 268.485483][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.485507][ T8570] RIP: 0033:0x7fceb139c819 [ 268.485526][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.485550][ T8570] RSP: 002b:00007fceb22ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 268.485572][ T8570] RAX: ffffffffffffffda RBX: 00007fceb1615fa0 RCX: 00007fceb139c819 [ 268.485588][ T8570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 268.485602][ T8570] RBP: 00007fceb1432c91 R08: 0000000000000000 R09: 0000000000000000 [ 268.485616][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.485630][ T8570] R13: 00007fceb1616038 R14: 00007fceb1615fa0 R15: 00007fff085eaaa8 [ 268.485661][ T8570] [ 269.058291][ T8580] FAULT_INJECTION: forcing a failure. [ 269.058291][ T8580] name fail_futex, interval 1, probability 0, space 0, times 0 [ 269.155431][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.0.538 Tainted: G U L syzkaller #0 PREEMPT(full) [ 269.155473][ T8580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 269.155481][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 269.155497][ T8580] Call Trace: [ 269.155504][ T8580] [ 269.155513][ T8580] dump_stack_lvl+0x100/0x190 [ 269.155556][ T8580] should_fail_ex.cold+0x5/0xa [ 269.155586][ T8580] get_futex_key+0x1d2/0x1620 [ 269.155620][ T8580] ? __pfx_get_futex_key+0x10/0x10 [ 269.155654][ T8580] ? __fput+0x68a/0xb40 [ 269.155688][ T8580] futex_wait_setup+0x83/0x510 [ 269.155746][ T8580] __futex_wait+0x19f/0x300 [ 269.155787][ T8580] ? __pfx___futex_wait+0x10/0x10 [ 269.155831][ T8580] ? __pfx_futex_wake_mark+0x10/0x10 [ 269.155873][ T8580] ? futex_hash+0x2c5/0x380 [ 269.155911][ T8580] futex_wait+0xed/0x380 [ 269.155950][ T8580] ? __pfx_futex_wait+0x10/0x10 [ 269.156004][ T8580] do_futex+0x1ef/0x350 [ 269.156037][ T8580] ? __pfx_do_futex+0x10/0x10 [ 269.156070][ T8580] ? __pfx___might_resched+0x10/0x10 [ 269.156107][ T8580] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 269.156150][ T8580] __x64_sys_futex+0x34f/0x4d0 [ 269.156186][ T8580] ? __pfx_task_work_run+0x10/0x10 [ 269.156222][ T8580] ? __pfx___x64_sys_futex+0x10/0x10 [ 269.156256][ T8580] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 269.156297][ T8580] do_syscall_64+0x106/0xf80 [ 269.156321][ T8580] ? clear_bhb_loop+0x40/0x90 [ 269.156350][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.156375][ T8580] RIP: 0033:0x7f0106f9c819 [ 269.156395][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.156418][ T8580] RSP: 002b:00007f0107d820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.156441][ T8580] RAX: ffffffffffffffda RBX: 00007f0107215fa8 RCX: 00007f0106f9c819 [ 269.156457][ T8580] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0107215fa8 [ 269.156471][ T8580] RBP: 00007f0107215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 269.156485][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.156524][ T8580] R13: 00007f0107216038 R14: 00007ffe062e4ed0 R15: 00007ffe062e4fb8 [ 269.156557][ T8580] [ 269.808547][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.103545][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.268513][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.322682][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.427610][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.639292][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.726427][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.839485][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.890745][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 270.944819][ T8607] netlink: 25 bytes leftover after parsing attributes in process `syz.3.542'. [ 271.263575][ T8344] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 271.925009][ T12] bridge_slave_1: left allmulticast mode [ 271.997247][ T12] bridge_slave_1: left promiscuous mode [ 272.064150][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.245403][ T12] bridge_slave_0: left allmulticast mode [ 272.309279][ T12] bridge_slave_0: left promiscuous mode [ 272.347988][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.019033][ T8633] netlink: 25 bytes leftover after parsing attributes in process `syz.3.548'. [ 273.995790][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.032130][ T8644] FAULT_INJECTION: forcing a failure. [ 274.032130][ T8644] name fail_futex, interval 1, probability 0, space 0, times 0 [ 274.049367][ T29] audit: type=1800 audit(1775249603.951:13): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.551" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 274.103714][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.166605][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.0.550 Tainted: G U L syzkaller #0 PREEMPT(full) [ 274.166649][ T8644] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 274.166658][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.166672][ T8644] Call Trace: [ 274.166680][ T8644] [ 274.166690][ T8644] dump_stack_lvl+0x100/0x190 [ 274.166733][ T8644] should_fail_ex.cold+0x5/0xa [ 274.166762][ T8644] get_futex_key+0x1d2/0x1620 [ 274.166796][ T8644] ? __pfx_get_futex_key+0x10/0x10 [ 274.166826][ T8644] ? do_mremap+0xa96/0x2130 [ 274.166871][ T8644] futex_wake+0xea/0x530 [ 274.166920][ T8644] ? __pfx_futex_wake+0x10/0x10 [ 274.166971][ T8644] do_futex+0x32b/0x350 [ 274.167004][ T8644] ? __pfx_do_futex+0x10/0x10 [ 274.167035][ T8644] ? __pfx___do_sys_mremap+0x10/0x10 [ 274.167078][ T8644] ? __fget_files+0x21f/0x3d0 [ 274.167105][ T8644] __x64_sys_futex+0x34f/0x4d0 [ 274.167142][ T8644] ? __pfx___x64_sys_futex+0x10/0x10 [ 274.167176][ T8644] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 274.167210][ T8644] ? syscall_user_dispatch+0x76/0x130 [ 274.167249][ T8644] do_syscall_64+0x106/0xf80 [ 274.167273][ T8644] ? clear_bhb_loop+0x40/0x90 [ 274.167303][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.167327][ T8644] RIP: 0033:0x7f0106f9c819 [ 274.167348][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.167372][ T8644] RSP: 002b:00007f01051f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 274.167402][ T8644] RAX: ffffffffffffffda RBX: 00007f0107216098 RCX: 00007f0106f9c819 [ 274.167418][ T8644] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f010721609c [ 274.167433][ T8644] RBP: 00007f0107216090 R08: 0000000000000000 R09: 0000000000000000 [ 274.167448][ T8644] R10: 000000110c230000 R11: 0000000000000246 R12: 0000000000000000 [ 274.167463][ T8644] R13: 00007f0107216128 R14: 00007ffe062e4ed0 R15: 00007ffe062e4fb8 [ 274.167494][ T8644] [ 275.283368][ T12] bond0 (unregistering): Released all slaves [ 275.456144][ T8657] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 275.754438][ T8657] File: /dev/nullb0 PID: 8657 Comm: syz.4.552 [ 275.864706][ T12] tipc: Left network mode [ 277.232892][ T12] hsr_slave_0: left promiscuous mode [ 277.302717][ T12] hsr_slave_1: left promiscuous mode [ 277.329398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.398655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.478319][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.521022][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.655504][ T12] veth1_macvtap: left promiscuous mode [ 277.687669][ T12] veth0_macvtap: left promiscuous mode [ 277.723122][ T12] veth1_vlan: left promiscuous mode [ 277.769676][ T12] veth0_vlan: left promiscuous mode [ 278.690442][ T12] team0 (unregistering): Port device team_slave_1 removed [ 278.751367][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.848036][ T8695] Invalid ELF header magic: != ELF [ 281.121112][ T12] bridge_slave_1: left allmulticast mode [ 281.126823][ T12] bridge_slave_1: left promiscuous mode [ 281.213783][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.326369][ T12] bridge_slave_0: left allmulticast mode [ 281.372038][ T12] bridge_slave_0: left promiscuous mode [ 281.431449][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.852744][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.938109][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.156033][ T12] bond0 (unregistering): Released all slaves [ 284.877529][ T8749] bridge0: port 3(veth0_to_bridge) entered blocking state [ 284.968462][ T8749] bridge0: port 3(veth0_to_bridge) entered disabled state [ 285.018238][ T8749] veth0_to_bridge: entered allmulticast mode [ 285.067253][ T8749] veth0_to_bridge: entered promiscuous mode [ 285.124355][ T8749] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.216920][ T8749] bridge0: port 3(veth0_to_bridge) entered blocking state [ 285.224504][ T8749] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 285.728472][ T8760] dyndbg: expected <4096 bytes into control [ 286.113241][ T8771] UHID_CREATE from different security context by process 615 (syz.1.571), this is not allowed. [ 287.069441][ T12] hsr_slave_0: left promiscuous mode [ 287.204050][ T12] hsr_slave_1: left promiscuous mode [ 287.248129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.330980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.560051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.664342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.113360][ T12] veth1_macvtap: left promiscuous mode [ 288.165676][ T12] veth0_macvtap: left promiscuous mode [ 288.171275][ T12] veth1_vlan: left promiscuous mode [ 288.258228][ T12] veth0_vlan: left promiscuous mode [ 289.034453][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 290.055830][ T12] team0 (unregistering): Port device team_slave_1 removed [ 290.190817][ T8839] mmap: syz.3.582 (8839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.258620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.043161][ T8842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.106230][ T8842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.112312][ T8842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.361412][ T8842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.413298][ T8842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.453583][ T8842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 291.545876][ T8842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 293.090167][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.170296][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.407142][ T5825] Bluetooth: hci3: command 0x040f tx timeout [ 293.487327][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.701370][ T8886] Invalid ELF header magic: != ELF [ 295.248567][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.569236][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 297.652495][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 300.281883][ T8927] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 302.326664][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.338562][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.348580][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.358238][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.366562][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.423168][ T8945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.484526][ T8945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.535961][ T5832] Bluetooth: hci2: command tx timeout [ 304.565601][ T8950] bdi 7:2: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 304.590108][ T8945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.665073][ T8945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.762958][ T8945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.847211][ T8945] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.104481][ T8945] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.817070][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 306.133963][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.454771][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.541045][ T5832] Bluetooth: hci3: command 0x040f tx timeout [ 306.621456][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.686445][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.695113][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 306.701262][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 306.805214][ T8940] bridge_slave_0: entered allmulticast mode [ 306.863555][ T8940] bridge_slave_0: entered promiscuous mode [ 306.965182][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.025271][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.032590][ T8940] bridge_slave_1: entered allmulticast mode [ 307.181762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.194264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.206655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.219028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.231354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.243707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.256103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.268459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.280793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.293231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.410456][ T8940] bridge_slave_1: entered promiscuous mode [ 310.459409][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 311.496067][ C0] sched: DL replenish lagged too much [ 312.186701][ C0] net_ratelimit: 15483 callbacks suppressed [ 312.186723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.205071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.217485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.229827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.242209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.254588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.267046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.279427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.293056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.305522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.113486][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 315.686959][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 317.199281][ C0] net_ratelimit: 15408 callbacks suppressed [ 317.199304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.217699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.230135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.242626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.255090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.267444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.279819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.292492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.304899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.317437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.545944][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.497174][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 318.513996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.211607][ C0] net_ratelimit: 15416 callbacks suppressed [ 322.211627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.230025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.242392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.254949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.267324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.279713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.292062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.304403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.316799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.329269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.224045][ C0] net_ratelimit: 16383 callbacks suppressed [ 327.224067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.242404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.254837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.267324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.279868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.292304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.304743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.317214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.329665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.342029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.236514][ C0] net_ratelimit: 16477 callbacks suppressed [ 332.236536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.254819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.267274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.279605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.291993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.304492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.316864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.329421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.341877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.354238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.249170][ C0] net_ratelimit: 16606 callbacks suppressed [ 337.249199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.267625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.280073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.292430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.304794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.317297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.329657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.341983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.354301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.366633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.261518][ C0] net_ratelimit: 16693 callbacks suppressed [ 342.261540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.279847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.292201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.304585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.316951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.329354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.341708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.354097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.366431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.378745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.274251][ C0] net_ratelimit: 16435 callbacks suppressed [ 347.274272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.292688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.305211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.317586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.329926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.342230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.354546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.367121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.379556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.391912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.286808][ C0] net_ratelimit: 16270 callbacks suppressed [ 352.286842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.305255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.317663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.330048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.342411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.354814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.367245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.379829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.392225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.404592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.299100][ C0] net_ratelimit: 16183 callbacks suppressed [ 357.299121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.317522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.329972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.342298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.354621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.367026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.379466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.391983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.404335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.416741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.311445][ C0] net_ratelimit: 16430 callbacks suppressed [ 362.311466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.330198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.342569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.354927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.367368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.379757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.392107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.404484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.416894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.429267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.324122][ C0] net_ratelimit: 16528 callbacks suppressed [ 367.324147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.342675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.355199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.367565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.380178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.393263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.405690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.418093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.430445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.442752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.336509][ C0] net_ratelimit: 16592 callbacks suppressed [ 372.336530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.354822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.367131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.379435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.391742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.404059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.416385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.428708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.441028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.453327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.348969][ C0] net_ratelimit: 16573 callbacks suppressed [ 377.348990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.367300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.379660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.392166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.404619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.417032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.429371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.441654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.454009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.466334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.361809][ C0] net_ratelimit: 16276 callbacks suppressed [ 382.361832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.380161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.392606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.405058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.417444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.429789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.442144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.454530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.466912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.479291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.374807][ C0] net_ratelimit: 11185 callbacks suppressed [ 387.374828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.393278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.405709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.418715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.431031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.443390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.456368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.468717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.481151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.494319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.386506][ C0] net_ratelimit: 9186 callbacks suppressed [ 392.386528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.404788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.417938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.430280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.442600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.455577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.468327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.480621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.493707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.506168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.398959][ C0] net_ratelimit: 9933 callbacks suppressed [ 397.398979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.417198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 397.430212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.442611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.454922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.467243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 397.480360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.492881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.505246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.517583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 402.411738][ C0] net_ratelimit: 10123 callbacks suppressed [ 402.411761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 402.430745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.443123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.455432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.467825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 402.480918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.493247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.505585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.518219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 402.531395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.424017][ C0] net_ratelimit: 10123 callbacks suppressed [ 407.424039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.442335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.454670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.466988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 407.480275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.492690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.504987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.517292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 407.530306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.542631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.436628][ C0] net_ratelimit: 10228 callbacks suppressed [ 412.436651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.455032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 412.468089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.480593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.492919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.505404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 412.518419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.530822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.543117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.555464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 413.817130][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 413.824133][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8955/1:b..l P8948/1:b..l [ 413.833558][ C0] rcu: (detected by 0, t=10502 jiffies, g=46781, q=4602 ncpus=1) [ 413.841392][ C0] task:syz.3.597 state:R running task stack:26536 pid:8948 tgid:8948 ppid:6987 task_flags:0x40004c flags:0x00080000 [ 413.855914][ C0] Call Trace: [ 413.859216][ C0] [ 413.862158][ C0] __schedule+0xfee/0x6120 [ 413.866695][ C0] ? __lock_acquire+0x4a5/0x2630 [ 413.871691][ C0] ? __pfx___schedule+0x10/0x10 [ 413.876761][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 413.882082][ C0] ? irqentry_exit+0x180/0x670 [ 413.886899][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 413.892300][ C0] preempt_schedule_common+0x42/0xc0 [ 413.897726][ C0] preempt_schedule_thunk+0x16/0x30 [ 413.902954][ C0] _raw_spin_unlock+0x3e/0x50 [ 413.907671][ C0] unmap_page_range+0x152f/0x4840 [ 413.912739][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 413.918143][ C0] ? mas_next_slot+0x1003/0x18b0 [ 413.923128][ C0] unmap_single_vma+0x153/0x240 [ 413.928011][ C0] unmap_vmas+0x295/0x590 [ 413.932371][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 413.937270][ C0] exit_mmap+0x1ef/0xa30 [ 413.941548][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 413.946429][ C0] ? trace_contention_end+0x140/0x180 [ 413.951840][ C0] ? uprobe_clear_state+0x5f/0x360 [ 413.957002][ C0] ? uprobe_clear_state+0x5f/0x360 [ 413.962152][ C0] ? __lock_acquire+0x4a5/0x2630 [ 413.967132][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 413.972807][ C0] __mmput+0x12a/0x410 [ 413.976913][ C0] mmput+0x67/0x80 [ 413.980653][ C0] do_exit+0x819/0x2b60 [ 413.984842][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 413.990242][ C0] ? __pfx_do_exit+0x10/0x10 [ 413.994871][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 414.000271][ C0] do_group_exit+0xd5/0x2a0 [ 414.004797][ C0] __x64_sys_exit_group+0x3e/0x50 [ 414.009842][ C0] x64_sys_call+0x102c/0x1530 [ 414.014533][ C0] do_syscall_64+0x106/0xf80 [ 414.019136][ C0] ? clear_bhb_loop+0x40/0x90 [ 414.023830][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.029774][ C0] RIP: 0033:0x7fceb139c819 [ 414.034203][ C0] RSP: 002b:00007fff085eade8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 414.042657][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fceb139c819 [ 414.050639][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.058619][ C0] RBP: 00007fff085eae4c R08: 0000000000000000 R09: 00005555576429f0 [ 414.066598][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000061 [ 414.074585][ C0] R13: 00005555576429f0 R14: 0000000000049534 R15: 00007fff085eaea0 [ 414.082601][ C0] [ 414.085645][ C0] task:syz.4.598 state:R running task stack:25928 pid:8955 tgid:8954 ppid:8344 task_flags:0x400140 flags:0x00080000 [ 414.099223][ C0] Call Trace: [ 414.102544][ C0] [ 414.105580][ C0] __schedule+0xfee/0x6120 [ 414.110034][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 414.115529][ C0] ? __lock_acquire+0x4a5/0x2630 [ 414.120495][ C0] ? __pfx___schedule+0x10/0x10 [ 414.125380][ C0] ? mark_held_locks+0x40/0x70 [ 414.130166][ C0] preempt_schedule_irq+0x50/0x90 [ 414.135222][ C0] irqentry_exit+0x17b/0x670 [ 414.139846][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.146092][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 414.151340][ C0] Code: 05 3b 7d 29 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 06 85 f5 0e 0f 82 c2 02 00 00 8b 35 ce b8 f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 7c 29 12 0f 85 02 03 00 00 48 83 c4 [ 414.170974][ C0] RSP: 0018:ffffc90003937130 EFLAGS: 00000206 [ 414.177071][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 414.185061][ C0] RDX: 0000000000000000 RSI: ffffffff8de5c5d2 RDI: ffffffff8c1b1920 [ 414.193131][ C0] RBP: ffffffff8e7e7760 R08: 00000000eafd38ad R09: 0000000000000007 [ 414.201137][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 414.209139][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.217185][ C0] ? unwind_next_frame+0x3c8/0x1ea0 [ 414.222452][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.228675][ C0] unwind_next_frame+0xd1/0x1ea0 [ 414.233635][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 414.238783][ C0] ? stack_trace_save+0x8e/0xc0 [ 414.243646][ C0] ? __unwind_start+0x3d1/0x7f0 [ 414.248528][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.254711][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.260904][ C0] arch_stack_walk+0x94/0xf0 [ 414.265529][ C0] ? stack_trace_save+0x8e/0xc0 [ 414.270399][ C0] stack_trace_save+0x8e/0xc0 [ 414.275090][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 414.280477][ C0] ? stack_trace_save+0x8e/0xc0 [ 414.285341][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 414.290729][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 414.296210][ C0] kasan_save_stack+0x30/0x50 [ 414.300938][ C0] kasan_save_track+0x14/0x30 [ 414.305629][ C0] __kasan_slab_alloc+0x89/0x90 [ 414.310519][ C0] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 414.316436][ C0] ? kmalloc_reserve+0x148/0x350 [ 414.321393][ C0] ? __kasan_slab_alloc+0x60/0x90 [ 414.326432][ C0] kmalloc_reserve+0x148/0x350 [ 414.331239][ C0] __alloc_skb+0x185/0x710 [ 414.335679][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 414.340641][ C0] ? find_held_lock+0x2b/0x80 [ 414.345334][ C0] ? tipc_node_xmit+0x1f6/0xfb0 [ 414.350299][ C0] tipc_buf_acquire+0x26/0xe0 [ 414.354997][ C0] tipc_msg_build+0x112/0x1100 [ 414.359790][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 414.365039][ C0] ? __pfx_tipc_msg_build+0x10/0x10 [ 414.370279][ C0] __tipc_sendstream+0x6a7/0x1110 [ 414.375366][ C0] ? __pfx___tipc_sendstream+0x10/0x10 [ 414.380845][ C0] ? do_raw_spin_lock+0x128/0x260 [ 414.385895][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 414.391294][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 414.396974][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 414.402279][ C0] tipc_sendstream+0x4f/0x70 [ 414.406910][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 414.411704][ C0] ? __pfx_tipc_sendstream+0x10/0x10 [ 414.417014][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.422336][ C0] ? rcu_is_watching+0x12/0xc0 [ 414.427134][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 414.432003][ C0] ? kfree+0x2ec/0x6b0 [ 414.436088][ C0] ? find_held_lock+0x2b/0x80 [ 414.440798][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 414.447317][ C0] ___sys_sendmsg+0x190/0x1e0 [ 414.452030][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.457274][ C0] ? handle_mm_fault+0x3fb/0xa20 [ 414.462287][ C0] ? irqentry_exit+0x180/0x670 [ 414.467086][ C0] ? __pfx___might_resched+0x10/0x10 [ 414.472413][ C0] __sys_sendmmsg+0x205/0x430 [ 414.477128][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 414.482360][ C0] ? __pfx_do_futex+0x10/0x10 [ 414.487066][ C0] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 414.492917][ C0] ? xfd_validate_state+0x129/0x190 [ 414.498160][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 414.503107][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 414.508315][ C0] do_syscall_64+0x106/0xf80 [ 414.512914][ C0] ? clear_bhb_loop+0x40/0x90 [ 414.517626][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.523533][ C0] RIP: 0033:0x7f212df9c819 [ 414.527959][ C0] RSP: 002b:00007f212eed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.536383][ C0] RAX: ffffffffffffffda RBX: 00007f212e215fa0 RCX: 00007f212df9c819 [ 414.544364][ C0] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 414.552358][ C0] RBP: 00007f212e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 414.560337][ C0] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 414.568405][ C0] R13: 00007f212e216038 R14: 00007f212e215fa0 R15: 00007ffeeecf2928 [ 414.576419][ C0] [ 414.579481][ C0] rcu: rcu_preempt kthread starved for 9403 jiffies! g46781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 414.590620][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 414.600628][ C0] rcu: RCU grace-period kthread stack dump: [ 414.606525][ C0] task:rcu_preempt state:R running task stack:26408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 414.620065][ C0] Call Trace: [ 414.623358][ C0] [ 414.626308][ C0] __schedule+0xfee/0x6120 [ 414.630797][ C0] ? __lock_acquire+0x4a5/0x2630 [ 414.635787][ C0] ? __pfx___schedule+0x10/0x10 [ 414.640672][ C0] ? find_held_lock+0x2b/0x80 [ 414.645373][ C0] ? schedule+0x2bf/0x390 [ 414.649834][ C0] schedule+0xdd/0x390 [ 414.653943][ C0] schedule_timeout+0x127/0x280 [ 414.658870][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 414.664385][ C0] ? __pfx_process_timeout+0x10/0x10 [ 414.669729][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.675580][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 414.681101][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 414.685900][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 414.691388][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 414.696366][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 414.701591][ C0] ? rcu_is_watching+0x12/0xc0 [ 414.706479][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.712325][ C0] rcu_gp_kthread+0x179/0x230 [ 414.717031][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.722276][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.728219][ C0] ? __kthread_parkme+0x18c/0x230 [ 414.733275][ C0] ? kthread+0x13a/0x450 [ 414.737544][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.742763][ C0] kthread+0x370/0x450 [ 414.746874][ C0] ? __pfx_kthread+0x10/0x10 [ 414.751489][ C0] ret_from_fork+0x754/0xd80 [ 414.756110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 414.761263][ C0] ? __switch_to+0x7b4/0x1120 [ 414.766094][ C0] ? __pfx_kthread+0x10/0x10 [ 414.770740][ C0] ret_from_fork_asm+0x1a/0x30 [ 414.775548][ C0] [ 414.778658][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 414.785016][ C0] CPU: 0 UID: 0 PID: 3409 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 414.796345][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 414.801570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.811686][ C0] Workqueue: bat_events batadv_tt_purge [ 414.817264][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 414.823371][ C0] Code: 06 0d 5a 00 48 89 df 5b e9 1d 87 5f 00 be 03 00 00 00 5b e9 42 37 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 25 a7 05 12 48 8b 34 24 65 48 8b 15 01 a7 05 [ 414.843113][ C0] RSP: 0018:ffffc90000007990 EFLAGS: 00000202 [ 414.849222][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8960feed [ 414.857225][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888033c31e80 [ 414.865224][ C0] RBP: ffff88808ca9a140 R08: 0000000000000001 R09: 0000000000000000 [ 414.873211][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88808ca9a140 [ 414.881193][ C0] R13: ffffc90000007c18 R14: ffff88808ca9a140 R15: ffffffff8961367a [ 414.889194][ C0] FS: 0000000000000000(0000) GS:ffff888124341000(0000) knlGS:0000000000000000 [ 414.898224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.904822][ C0] CR2: 000055e559356ea1 CR3: 00000000217ba000 CR4: 00000000003526f0 [ 414.912806][ C0] Call Trace: [ 414.916097][ C0] [ 414.918970][ C0] __netif_receive_skb_core.constprop.0+0x12c/0x3550 [ 414.925677][ C0] ? mark_held_locks+0x40/0x70 [ 414.930468][ C0] ? kmem_cache_free+0x124/0x6a0 [ 414.935426][ C0] ? skb_release_data+0x7a0/0x9d0 [ 414.940477][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 414.947632][ C0] ? kfree_skbmem+0x19f/0x210 [ 414.952327][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 414.957547][ C0] ? ip6_mc_input+0x51a/0xf50 [ 414.962276][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 414.967353][ C0] ? __lock_acquire+0x4a5/0x2630 [ 414.972332][ C0] ? process_backlog+0x32a/0x1580 [ 414.977374][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 414.983206][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 414.989645][ C0] ? lock_acquire+0x1cf/0x380 [ 414.994345][ C0] ? process_backlog+0x32a/0x1580 [ 414.999396][ C0] ? process_backlog+0x32a/0x1580 [ 415.004441][ C0] __netif_receive_skb+0x1f/0x120 [ 415.009489][ C0] process_backlog+0x37a/0x1580 [ 415.014370][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 415.019774][ C0] net_rx_action+0xa40/0xf20 [ 415.024393][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 415.029618][ C0] ? mark_held_locks+0x40/0x70 [ 415.034402][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 415.039617][ C0] ? tmigr_handle_remote+0x132/0x380 [ 415.044949][ C0] ? run_timer_base+0x121/0x190 [ 415.049853][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 415.055110][ C0] handle_softirqs+0x1eb/0x9e0 [ 415.059917][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 415.065244][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 415.070203][ C0] do_softirq+0xac/0xe0 [ 415.074396][ C0] [ 415.077340][ C0] [ 415.080281][ C0] __local_bh_enable_ip+0xf8/0x120 [ 415.085428][ C0] batadv_tt_purge+0x25d/0xbd0 [ 415.090218][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 415.095526][ C0] ? rcu_is_watching+0x12/0xc0 [ 415.100321][ C0] process_one_work+0xa23/0x19a0 [ 415.105309][ C0] ? __pfx_process_one_work+0x10/0x10 [ 415.110724][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 415.116048][ C0] rescuer_thread+0x905/0x14a0 [ 415.120849][ C0] ? rescuer_thread+0x240/0x14a0 [ 415.125807][ C0] ? rescuer_thread+0x118/0x14a0 [ 415.130785][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 415.136005][ C0] ? __kthread_parkme+0x18c/0x230 [ 415.141044][ C0] ? kthread+0x13a/0x450 [ 415.145308][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 415.150547][ C0] kthread+0x370/0x450 [ 415.154657][ C0] ? __pfx_kthread+0x10/0x10 [ 415.159289][ C0] ret_from_fork+0x754/0xd80 [ 415.163903][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 415.169131][ C0] ? __switch_to+0x7b4/0x1120 [ 415.173854][ C0] ? __pfx_kthread+0x10/0x10 [ 415.178488][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.183282][ C0] [ 415.642503][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.658604][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.449252][ C0] net_ratelimit: 7144 callbacks suppressed [ 417.449274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.467511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.479983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.492377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 417.505642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.517992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.530323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.542705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 417.555826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.568223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.461590][ C0] net_ratelimit: 9447 callbacks suppressed [ 422.461611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.479827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.492182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 422.505316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.517676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.530050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.542403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:08:7f:4c:a1:bd, vlan:0) [ 422.555683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.568115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.580438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)