last executing test programs: 38.139948758s ago: executing program 1 (id=954): r0 = prctl$auto_PR_SET_MM_END_CODE(0xff, 0x2, 0x0, 0x6, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x1024}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004815}, 0x8800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1"], 0x1ac}}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 37.98088072s ago: executing program 1 (id=956): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x2b, 0xa, 0xf11) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, 0x0) (async) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000400", @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090008000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0xa, 0x1, 0x84) writev$auto(0xffffffffffffffff, 0x0, 0x3) (async) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) (async) sendmmsg$auto(r3, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) 36.762371668s ago: executing program 1 (id=961): r0 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/README\x00', 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r3, 0x0, 0x1f40) (async) read$auto(r3, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x110, r4, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x10}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_BEACON_INTERVAL={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_SEC_KEY={0xd3, 0x30, 0x0, 0x1, [@generic, @generic, @nested={0x4, 0xca}, @generic, @nested={0x10, 0x10c, 0x0, 0x1, [@typed={0x4, 0x12d}, @nested={0x4, 0x86}, @nested={0x4, 0xe}]}, @generic="12a07c246de0ca6b8fdc1d20d32affca8556cae8d29241ab262eb8e9daa3a016192cfaf2ec71c29e8119728d8e1c4060f3e92e3e1c1c5b2e08e92c7637182686b419497f6cab5a957411", @typed={0x8, 0x110, 0x0, 0x0, @u32=0x7d80e6ca}, @generic="294a89507e03413de9bd01b9d731a97494a91b7203108704621fe9c9539ccd6b630f82c0208d0c4d49db3ff9d337c392cdea8efe77af54b124fbb003819169ba526a7ba1235089d00abfffae3142b8c030e63258dacf76398cbfd430a21f7c7be1e0bae79e9adce5f8"]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x40) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_BSDCOMPAT(r0, 0x5, 0xe, &(0x7f0000000200)='l2tp\x00', &(0x7f0000000380)=0xd) semget$auto(0x0, 0x13c, 0x1ff) r5 = socket(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="b92025bdfa00fddbdf2547080000"], 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendto$auto(r5, 0x0, 0x402, 0xacf8, &(0x7f0000000000)=@generic={0xa, "e2e13d0ee94e00"}, 0x1b) (async) sendto$auto(r5, 0x0, 0x402, 0xacf8, &(0x7f0000000000)=@generic={0xa, "e2e13d0ee94e00"}, 0x1b) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) 35.669161948s ago: executing program 3 (id=965): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x100000004, 0x2, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0x64, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x3, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001002e5352009b000100292424285b245b8256d53d5e2a237f63a5335bbac9d658e66f545fc4046ef8af5941dfca1979802b9bc9ddd33b9b856e083a1028ff853dbe2ad2fa0a5220b7e4a9928a117673a38eb0f5b413f66d89786cd3b6ab6652d29ceaf3bd6500c07359338ee5193fe9a2b8ced22ebc7c2246594cdfa8836c8ffc09ba1b639b42c681911f8d42ba3192ab6cf10f8a14f3e5beb5ec4000d0b08739590e761d0000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000004) r4 = bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x1, 0x4000000000e3, 0x16, r1, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r5 = gettid() rt_sigqueueinfo$auto(r5, 0x1, 0x0) msgctl$auto_IPC_STAT(0x3a9, 0x2, &(0x7f00000018c0)={{0x7e, 0x0, 0x0, 0x1, 0x0, 0x8, 0x807}, &(0x7f0000001840)=0xe, &(0x7f0000001880)=0x2, 0x3, 0x0, 0x0, 0x7, 0x6, 0x200, 0xbeaa, 0x8, @raw=0x936, @inferred=r5}) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r4, &(0x7f00000017c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20000500"], 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)='-7', 0x3a) getcwd$auto(&(0x7f0000001800)='^\\/\x00', 0x379f) init_module$auto(0x0, 0xffff9, 0x0) pidfd_open$auto(r5, 0x312) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x9, 0xd, 0x2, 0x1d8, r0, 0x1ff) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x4, 0x8, 0x3) 34.453655017s ago: executing program 3 (id=970): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x6, 0x4000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) (async) socketpair$auto(0x1, 0x803, 0x8000000000000000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) (async) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) (async) shutdown$auto(0x200000003, 0x2) r5 = geteuid() ioprio_get$auto_IOPRIO_WHO_USER(0x3, r5) (async) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f00000001c0)={{0x5, r5, 0xee00, 0x5, 0xd8, 0x9, 0x8001}, 0x1, 0x7c1d2b66, 0x3ff, 0x0, @raw=0x5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f00000000c0)="f73e12119f1b74cbe24ef12cc563d75b8a641164901fd8c84dc990f381d463565daffeac5ca134a2dd1f0f0d2ac364a59f697477c4dc9f941f91f30e03d62f4bdded95cf32882f69fa8159153fa0e4132db40a1bc74994c3cb23fa4416a2cea819988bf1b304c2889a3f5ca9636dc8d7d1ef7d5ccf474f9f1b2ef8015231b4f35248c5546c2363f45033dab29fad69fbf44950901aa4e6d176bab819845d1e494067b9f039e098e1dc5f655743a1812d2ddfab10ca44d0fba74942b06fe974c4a51acf77a098ca9c2df16b6fb0c613dc4777", &(0x7f00000004c0)="6689f39bbc7cf1c72aaff640c836f4cccede5ce3b757f6ddcb387e71f86ee5c7708d594aae2411d158f42e3a3bd1e93e6ffae42b9b1b039d64cf3f5f92fd88c84ee8df54147adb183f42468cde433d4717eaf341448a86f1d402f5a1658253bce253ec0aba3ed7fbb06d57bfde20aeaff4dc959ff54558d4dee7eebc4d32767f400b9318e5ff3a9cdd2e3a2e"}) keyctl$auto_KEY_SPEC_USER_KEYRING(0x800, r5, r5, r6, 0xfffffffffffffffc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_INFO(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="14200000", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000340)="f581d4e8cc3803a2fa92d9d2d499ead4c8fa4271ed7f157b18ad16af8bb4f9990b0f858756eafff1fc705bf7eedad9109d2fb2f42c90f56fa280db945f7eace3c1cfc7d0d74163f18310caefbb54a11fc82f967e07b1cfd5f4fd", 0x2) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000101", @ANYRES16=r8, @ANYBLOB="000229bd7000fcdbdf25040000005000018004002700ca7ff70a5cf09bd5ac49cc381d3edc1cc71a3b507c95ebb50ee168ace85e57425c48f5bf7e9efe4e4686342c30ab54d9c7ae604e87c921655af730b9651ed5264b9559d9b7523a69"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) (async) close_range$auto(0x2, 0x8, 0x0) 33.442599462s ago: executing program 0 (id=972): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x13, 0x6, 0x100}) sendmmsg$auto(r1, &(0x7f00000002c0)={{&(0x7f0000000000), 0x400005ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7400fd87127ca7a62c368600080010ec7fda19f22f55a988b8a7b17a66a0810003800c00068004000180040001d76cd69e00898771f1c19f17790185908286dd000004000280a72575bf7184e6bfe40cd5a032926a131bcf92018ebf582b087b600150b68c0afb229be3a5885d3d63acdc27a3d0e87a63d24c181326da8cd577467a238213ac153043ee55f6bf9e5d0509e96dd132a2a96503db807756d13e439e4976359ce2c4af"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x400, 0x3, 0x200, 0x15, 0xffffffffffffffff, 0x8000) mremap$auto(0x1ff002, 0xff, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff8) mremap$auto(0xfffff000, 0x4, 0x5, 0x7, 0x1f7000) mmap$auto(0x2000, 0x400008, 0xdf, 0x80000000009b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091cf, 0x4, 0x0, 0x3ff, 0x2) mmap$auto(0x0, 0x6, 0xa, 0xeb1, 0xfffffffffffffffa, 0x4) fanotify_init$auto(0x1, 0x3) inotify_init1$auto(0x3000000000000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x26, 0x4, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r6, 0x6, 0x41, &(0x7f0000000040)='*\'\x00', &(0x7f00000000c0)=0x3) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_MIDI_INFO(r7, 0xc074510c, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x753000, 0xd0, 0x8}, 0x18) 32.874623081s ago: executing program 3 (id=974): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x4, &(0x7f0000000180)={0x9, 0x3, 0x8, 0x9, 0x5, 0xfffffffd, r0, [0xc77, 0x1, 0x1], {0x9ef, 0x6, 0x1, 0x7, 0xffffffff, 0x401, 0x673, 0x1, 0x7}, {0x1, 0x1000, 0xff, 0x7ff, 0x9, 0xa0000000, 0x6, 0x5, 0x100000001}}) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, r1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) getsockopt$auto(0x3, 0x11, 0xb, 0x0, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x100000000cb}, 0x3, 0x0, 0x80000000, 0x80000000}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='\x00', 0x9, 0x7fff, &(0x7f0000000140)={0x5, 0x10, 0x9, 0x6}) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) 32.874272234s ago: executing program 1 (id=975): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mremap$auto(0x4000, 0xbb, 0x13fd4, 0x3, 0x7ffffffeb000) r1 = gettid() mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_IP6_SADDR={0x14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) mmap$auto(0x0, 0x80000002020009, 0x3, 0x410, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x8}, &(0x7f00000001c0)=0x6, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0xb, 0x0, 0x0, 0x6e2d, 0xfffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(0x3, 0x0, 0xfdef) lseek$auto(0x3, 0x2, 0x4) read$auto(r3, 0x0, 0xb4d3) tkill$auto(r1, 0x7) 32.361446658s ago: executing program 0 (id=977): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x7fffffff) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x2}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0x7fff) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x7fffffff) (async) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x2}]}) (async) 32.154486314s ago: executing program 0 (id=979): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) madvise$auto(0x0, 0x3, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, 0x0, 0x0) setsockopt$auto_SO_DEBUG(r0, 0x40, 0x1, 0x0, 0x10000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0xaf2, 0x1, 0x1) setsockopt$auto(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x101042, 0x0) write$auto(r1, &(0x7f0000000380)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1=$:`\xa9\x06H\xafjc\x9c\x88\xefq:Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\x8dm\'+\xd0I>\x8f\x00\xe5\x1c*\xed`-a\xdb?\xc8K\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) pwritev$auto(r1, &(0x7f0000000080)={&(0x7f0000000480)="6d6bbab4a82d0511db0df3081afc5ec9b3082f140d12f5249f931f5814155ed5e8e7b12c78ad0b2d2ec318f1e47e9c839d1be2c30e73d1e38fe63b4c1eb35accc8cb6f665b98b6ed67d477195e7eaea0f0964795b2deed4b994618ebddad21d0bd2e866e3741316daaf411621e8405e9a2dda800f98e8fdc9480a0f23626355e72fe64b7d5f9f488c398301b8ca1b25a927981944c23695573b50c53e95f3c427b33156a2c1ee066836c177644e6d38f6391b7db728d019672de9810626249cb7664d3", 0x7}, 0xffffffff80000001, 0x100, 0x8) 31.915449367s ago: executing program 3 (id=980): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000000)="bbf5f7c16d5de70972bd8850eede5df1f459e341aac6931db5b9b77c6828073f1fc08954d13a47b9ebfe07a6f4d4b8a5c547aa5d4ce7fd93b92d7c96feab91265ce0f2063141e05b88", 0x7) kexec_load$auto(0x5, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000000)="bbf5f7c16d5de70972bd8850eede5df1f459e341aac6931db5b9b77c6828073f1fc08954d13a47b9ebfe07a6f4d4b8a5c547aa5d4ce7fd93b92d7c96feab91265ce0f2063141e05b88", 0x7) (async) kexec_load$auto(0x5, 0x4, 0x0, 0x4) (async) 31.610785141s ago: executing program 0 (id=982): r0 = socket(0x22, 0x2, 0x2) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0xbb, &(0x7f00000002c0)={{0x8}, {0x8}, 0x9, 0x7, 0x5acf, 0x5, 0x5, 0x8, 0x800, 0x6, 0x6, 0x4, 0x30, 0x7, 0x8, 0xfffffffffffffff9}) prctl$auto_PR_SCHED_CORE_CREATE(0x3ff, 0x1, r1, 0x7, 0x33a) getrandom$auto(&(0x7f00000000c0)='\xff-@F!%,$-\x00', 0x3, 0x5) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) socket(0xa, 0x3, 0x3b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x4) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r7, 0x0, 0x400) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x2, 0x8, 0x0) 31.568587811s ago: executing program 2 (id=983): mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mlockall$auto(0x7) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x88002, 0x0) sysfs$auto(0x3, 0x7, 0x3) read$auto(r0, &(0x7f0000001200)='\x00', 0x100000004) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r1 = setfsuid$auto(0x0) setuid$auto(r1) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000080)={{0x1000, 0x0, 0x0, 0xffffffff, 0x100, 0x3, 0xffff}, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x9, 0x933, 0x3ff, 0x10000000000, 0x1, 0x8, 0x5336, 0x8, 0x468f, @inferred, @raw=0x4}) statx$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000000140)={0x1, 0x8000, 0x2, 0x1, 0xee01, 0x0, 0x5, 0x33, 0x0, 0x80, 0xffffffff, 0x8, {0xffff, 0x4}, {0x8000, 0x8}, {0x1000, 0x7fff}, {0x4}, 0x8, 0x17, 0x7, 0x100, 0x8, 0x401, 0x7f, 0x0, 0x3ff, 0x6, 0x0, 0x6, [0xe236, 0x553dc180, 0x8, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x6, 0x72]}) mremap$auto(0xe, 0x62d, 0x8, 0x8, 0x8) keyctl$auto_KEY_SPEC_SESSION_KEYRING(0x400, r1, r2, r3, 0xfffffffffffffffd) 31.382567425s ago: executing program 1 (id=984): mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = socket(0x2, 0x1, 0x0) r3 = fcntl$auto_F_GETOWN(r0, 0x9, 0x2) tkill$auto(r3, 0xdc6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, r2, 0x8}, 0x92) r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/projid_map\x00', 0x201, 0x0) socket(0x2, 0x801, 0x2) mmap$auto(0x0, 0x400000, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) ioctl$auto_FIOCLEX(r4, 0x5451, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) sysfs$auto(0x2, 0x10000000000048, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) socket(0xa, 0x5, 0x84) 31.293548569s ago: executing program 2 (id=985): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0xd2a, 0x2) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd6/hctx0/tags_bitmap\x00', 0x60000, 0x0) socket(0x10, 0x2, 0xffffffc0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xc7\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcfn\x15\xc5D\xcct\xff\x84\xd2*\xf8=\x1b\x90Z\xc0\xd72\xbc\x14R\x80\x00\x1b\xca\xbdV\xb0)\x1b\xa1\xbaC\x91\xc8\x16\xc9\x1e\xb2\xd7\xb7\x88g\x98\x7f\x95\xb2-F\xf7\xb4y\x19\x8e\xd2}uy\xfa\x1c\x82h\x01\x136\xfb\xef\x93\xdc\x1a@\x91bD\xcexS\x82C\xf9\xd2Y\xe2\x18o\xd8\xdc\xc3\xac\xb2\x1d\xebR\xa9\x98B\x19\x9c\x1e\x11\x91\x17\xce\xc0\xb47{\xc73\xeb\xdf7\x03\xf22\xdf\xa9\x90P\xfd\xaf\xed\xa3B\xec\xab\x8b\xdb\xbaP\x99;\xd6\x98x\xbbF\xb2\xd7\xc4g\xdc>\xe7>3\xd8\xbe\x8a2\xf283\xd6\xbd\x86Hs{#\x9d\x05\x05\xf8\x8d\x873W\xd9\xde\x12\x01e\x96\fVT\xefWSs\xda\xe33\xa3\xbc\xa4\x8b\xf7\\h\xaa_Q\x9a\xe3Z;\xa7\xe2Tzx\xa7]Dh5\xad(\xf8\xdb\xe6\xb6\x12\x91\xfa\xe2\xea`\x92\xce\xaf>', 0x100000a3d7) socket(0x1d, 0x2, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x8004) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x2, 0x1, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/trace_marker\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) mkdir$auto(&(0x7f0000000280)='./cgroup.net/\f\x00\x00\x00\x00', 0x0) 30.946957506s ago: executing program 1 (id=986): mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200204, 0x15) mincore$auto(0x0, 0x10007f, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, 0x0, &(0x7f0000000300)=0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000740)=ANY=[@ANYBLOB="095c9ae9e003000083d8e22c681914cba3730448f16f1355afee6615001b41d6ff592cec4179455fb1d13a723b71eda420eec05b6f14d80f1f3e0e355796d6f200b13da4169f2ca6ae544e2d35cbbc6b0085820f876a7f2bc20b2fe5627e182223fabaa6a2eba994ed259396624f9e495ed44c80865704bbb17ea5b3b58210d8c4f64ab55da0b57f098cf12b9df425", @ANYRES16=r3, @ANYBLOB="01002bbd7008fcdbdf2506000000cc0301807a0001002b02cb348f1b3b1b45aefb7a3a7cf8cd112f0f9d484277432c640a3cce76984ef9d4b56291a0233d83ffbaf0ca9bc8dfac1df710d92fce2a4327bfe140222e9bf86f3be6375c09f60b8ce30b1621f11abeef4fac55010583f1d401daf84d2da8e94c950231d6b8fc94f2cc228531d9c570cc0760b9fb000007000200402a0000100002002f6465762f6e756c6c6230001a000100a19ab74e6c615b0107d5a1aa0e533d6d645fe5f8e7660000e7000100f60338afd1346bea96e1ad56be35629048b58c6c7f919f5d2b2b5da266bacf286ea257ef04dfd38f4406749f58fbf8f5cbba9d931ee781279f9fde47440a8f2e07a085b4ce8841a24951eccb6d7e7f5831273860b76d84cf399048efa8971adf376aab401970ebbd0abdb921b11b3dadc23d58c1422dbd37ba7614ff68b6c1a8797c011ab8011a69018290adb2e051ac00342114e91f1cd96513d2d98e0a6cd7e308cf1ded582274fd4f109e5a55c39469f03c81a373f4f2d7d6b929cc7a92db96f8e1a3b85a712d0e4a378d0b350d8ff57d23bfbb174ec625ea7fda2f8d1231f1402900ba000100023524991f3f1b92bbf0e65b586fc76195dee0276424906deef62d4a54188ba2b3c39dfecb6231da5a07daf77eaeeec96448e75b5725c104ac15b131d2131ba7a7ce1453246595175a4ef27638125182ebc8e5f7937f4605651559f5efc24a072ea36fa96f170e01235391aa94f6457ea4999342810a500439adb471e76f7fd36826b1d5337380a43de2fc9bbb52c973c7f0f0543a26c7df69f2077175485bdeb5fb31b0fc0ad7a60b9d06fbed997fff1ed4825e89f70000ba00010003ff35afcf1219f712ed02f56d8910974eb4a95a45c53ba1268952b0a50b81309eed2f6fcfa4cb58dc18da1e0d3b0d07c2973fa3a7983161c1979f2f19baa6be76071962edc92bf7279deb60bf6b6cccc4cb915fe59e2d93d50677779cb1fb733f6385e952b09dd0761079917272e8014b2e10d8cf5bacea93cd940892579bcdc4a1331fa32ab8b362b8dfbc012a7a49b9bebffc8a3c4c77cda691331a70f08c2e867fb2ddedcfbb993e8e9943d37ab8dbe7a9b006270000150001003ad325c5167e8d272cfa57c8a4115306900000009e000100ab310b8c6ca55be122fb2de7db6f4a97cfe76648eb4d2ff1817dfc11eef39de8fbbcfc3f3c402b11772bc06c8f3c90e3d1ebe94101dee128d164b13b8b3bd339c5f7bebab112f2246ca1ada281830cbf6714677757ded34c9008674eaeeed6a8a584cf0c821a8591561f27f40f212c98c234544b11b36e98d4512ea3c5da4f6c2c34c6583664ff80f430dd58c5ef39c9e06f84f982576a6f67b40000"], 0x3e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8001, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) 30.87614197s ago: executing program 2 (id=987): r0 = prctl$auto_PR_SET_MM_END_CODE(0xff, 0x2, 0x0, 0x6, 0x3) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="24100000", @ANYRES16=r1], 0x1024}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004815}, 0x8800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1"], 0x1ac}}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 30.565349084s ago: executing program 0 (id=988): r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') socket(0x11, 0x5, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)={0x6, 0x6, 0x7}}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4002, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ed853fd2838bc2ea3ffb20ba373e880edeeb7d10a7e757792c6f81f43fff97ef", 0xfe01, 0xb, 0x14000, 0x7, 0x7, r0}) sendfile$auto(0x3, 0x3, 0x0, 0x141f) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/16, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x305, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0xffff0000}, 0x84) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r4, 0xab09, 0xffffffffffffffff) 29.9058178s ago: executing program 3 (id=989): close_range$auto(0x2, 0xffffffffffffffff, 0xffffffff) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x10000000017, 0x28, 0x4, 0xd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) open(0x0, 0x1e1401, 0xe5) close_range$auto(0x2, 0x8, 0x0) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xcb6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="f6009e00", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25040000001400018008000200080000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 28.467544131s ago: executing program 0 (id=990): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x240008d4}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x644000, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) ioctl$auto(0x3, 0x40086203, 0x38) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000280)="e2a853a8335aebdfe4a95a71bc822eb7bfe325f51ea8fa9b83fdc7bceaf60c20d1ec22e5d8d72bddc3a41bc59a1d098c7c75ac5047fc254a1749c65004af6adcd0e57a2c8935c0f8162a560651eb8eb7") pwrite64$auto(r0, &(0x7f0000000100)='/dev/dma_heap/system\x00', 0x2, 0xbc3) read$auto(r0, &(0x7f00000000c0)='\x00', 0x2) io_uring_setup$auto(0x3, &(0x7f0000000180)={0x45b, 0x1, 0xfffffff9, 0x101, 0xfb, 0x9, r2, [0x0, 0xff, 0x7], {0xff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x6, 0xfffffffe, 0xa5a}, {0x7fff, 0xfffffff2, 0x10, 0xf58d, 0x200, 0x100, 0x0, 0xffffffff, 0xf8}}) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) 28.426891076s ago: executing program 2 (id=991): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) madvise$auto(0x0, 0x3, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, 0x0, 0x0) setsockopt$auto_SO_DEBUG(r0, 0x40, 0x1, 0x0, 0x10000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0xaf2, 0x1, 0x1) setsockopt$auto(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x101042, 0x0) write$auto(r1, &(0x7f0000000380)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1=$:`\xa9\x06H\xafjc\x9c\x88\xefq:Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\x8dm\'+\xd0I>\x8f\x00\xe5\x1c*\xed`-a\xdb?\xc8K\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) pwritev$auto(r1, &(0x7f0000000080)={&(0x7f0000000480)="6d6bbab4a82d0511db0df3081afc5ec9b3082f140d12f5249f931f5814155ed5e8e7b12c78ad0b2d2ec318f1e47e9c839d1be2c30e73d1e38fe63b4c1eb35accc8cb6f665b98b6ed67d477195e7eaea0f0964795b2deed4b994618ebddad21d0bd2e866e3741316daaf411621e8405e9a2dda800f98e8fdc9480a0f23626355e72fe64b7d5f9f488c398301b8ca1b25a927981944c23695573b50c53e95f3c427b33156a2c1ee066836c177644e6d38f6391b7db728d019672de9810626249cb7664d3", 0x7}, 0xffffffff80000001, 0x100, 0x8) 26.135480321s ago: executing program 2 (id=992): openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, 0x0, 0xa01c0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x149b01, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae41, 0x38) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r1) (async, rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (rerun: 32) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async) sendfile$auto(r0, r2, &(0x7f0000000040)=0x9, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) 25.730606431s ago: executing program 3 (id=993): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) (async) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd700008000000020000000c00078090cc6a523c03060e9a2bde5b3ed6df95907e9722a24b2ff9ea53de090abe0ebbaf2d4315a4"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) 24.904366597s ago: executing program 2 (id=994): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x3, 0xdd7e, 0x9, 0x4eda000000010, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) bpf$auto(0x40000000, &(0x7f0000000200)=@iter_create={r1, 0x81}, 0x96) (async) bpf$auto(0x40000000, &(0x7f0000000200)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f00000002c0)=@enable_stats={0x2}, 0x868) (async) bpf$auto(0x18, &(0x7f00000002c0)=@enable_stats={0x2}, 0x868) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) (async) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x26c982, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x26c982, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r4) sendmsg$auto_HANDSHAKE_CMD_DONE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x20040040) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) (async) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 0s ago: executing program 32 (id=990): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x240008d4}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x644000, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) ioctl$auto(0x3, 0x40086203, 0x38) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000280)="e2a853a8335aebdfe4a95a71bc822eb7bfe325f51ea8fa9b83fdc7bceaf60c20d1ec22e5d8d72bddc3a41bc59a1d098c7c75ac5047fc254a1749c65004af6adcd0e57a2c8935c0f8162a560651eb8eb7") pwrite64$auto(r0, &(0x7f0000000100)='/dev/dma_heap/system\x00', 0x2, 0xbc3) read$auto(r0, &(0x7f00000000c0)='\x00', 0x2) io_uring_setup$auto(0x3, &(0x7f0000000180)={0x45b, 0x1, 0xfffffff9, 0x101, 0xfb, 0x9, r2, [0x0, 0xff, 0x7], {0xff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x6, 0xfffffffe, 0xa5a}, {0x7fff, 0xfffffff2, 0x10, 0xf58d, 0x200, 0x100, 0x0, 0xffffffff, 0xf8}}) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) kernel console output (not intermixed with test programs): 0x225/0x750 [ 472.613373][ T8722] __x64_sys_futex+0x1e0/0x4c0 [ 472.613403][ T8722] ? __sys_socket+0xac/0x260 [ 472.613437][ T8722] ? __pfx___x64_sys_futex+0x10/0x10 [ 472.613466][ T8722] ? xfd_validate_state+0x61/0x180 [ 472.613496][ T8722] ? __pfx_do_writev+0x10/0x10 [ 472.613541][ T8722] do_syscall_64+0xcd/0x490 [ 472.613569][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.613595][ T8722] RIP: 0033:0x7fc246d8e9a9 [ 472.613615][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.613637][ T8722] RSP: 002b:00007fc247c710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 472.613659][ T8722] RAX: ffffffffffffffda RBX: 00007fc246fb6088 RCX: 00007fc246d8e9a9 [ 472.613676][ T8722] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc246fb608c [ 472.613690][ T8722] RBP: 00007fc246fb6080 R08: 00007fc247c93000 R09: 0000000000000000 [ 472.613705][ T8722] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc246fb608c [ 472.613720][ T8722] R13: 0000000000000000 R14: 00007ffe5f217200 R15: 00007ffe5f2172e8 [ 472.613752][ T8722] [ 472.918286][ T8732] FAULT_INJECTION: forcing a failure. [ 472.918286][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 473.067552][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.1.512 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 473.067595][ T8732] Tainted: [U]=USER [ 473.067603][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.067616][ T8732] Call Trace: [ 473.067623][ T8732] [ 473.067632][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 473.067661][ T8732] should_fail_ex+0x512/0x640 [ 473.067686][ T8732] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 473.067715][ T8732] should_failslab+0xc2/0x120 [ 473.067743][ T8732] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 473.067769][ T8732] ? getname_flags.part.0+0x4c/0x550 [ 473.067805][ T8732] getname_flags.part.0+0x4c/0x550 [ 473.067839][ T8732] getname_flags+0x93/0xf0 [ 473.067873][ T8732] do_sys_openat2+0xb8/0x1d0 [ 473.067902][ T8732] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.067946][ T8732] __x64_sys_openat+0x174/0x210 [ 473.067976][ T8732] ? __pfx___x64_sys_openat+0x10/0x10 [ 473.068020][ T8732] do_syscall_64+0xcd/0x490 [ 473.068048][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.068073][ T8732] RIP: 0033:0x7fc5ebb8e9a9 [ 473.068092][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.068114][ T8732] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.068137][ T8732] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 473.068153][ T8732] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 473.068169][ T8732] RBP: 00007fc5ebc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 473.068184][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.068198][ T8732] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 473.068231][ T8732] [ 473.656310][ T8746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 474.068690][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 474.558900][ T8762] netlink: 93 bytes leftover after parsing attributes in process `syz.1.517'. [ 474.936880][ T30] audit: type=1107 audit(4294967313.280:12): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 474.972719][ T8777] sock: sock_set_timeout: `syz.1.520' (pid 8777) tries to set negative timeout [ 475.221066][ T8756] kexec: Could not allocate control_code_buffer [ 475.881510][ T30] audit: type=1804 audit(4294967314.224:13): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.523" name="/newroot/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger" dev="tracefs" ino=19680823 res=1 errno=0 [ 475.907399][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.088506][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 477.902557][ T8845] random: crng reseeded on system resumption [ 478.910104][ T8872] openvswitch: netlink: Multiple metadata blocks provided [ 479.491401][ T30] audit: type=1800 audit(4294967321.854:14): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.539" name="dbroot" dev="configfs" ino=20526 res=0 errno=0 [ 480.231557][ T8903] vivid-003: ================= START STATUS ================= [ 480.239935][ T8903] vivid-003: Radio HW Seek Mode: Bounded [ 480.247071][ T8903] vivid-003: Radio Programmable HW Seek: false [ 480.257317][ T8903] vivid-003: RDS Rx I/O Mode: Block I/O [ 480.274958][ T8903] vivid-003: Generate RBDS Instead of RDS: false [ 480.304984][ T8903] vivid-003: RDS Reception: true [ 480.390058][ T8903] vivid-003: RDS Program Type: 0 inactive [ 480.413125][ T8903] vivid-003: RDS PS Name: inactive [ 480.461302][ T8903] vivid-003: RDS Radio Text: inactive [ 480.499027][ T30] audit: type=1800 audit(4294967322.880:15): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="discovery_nqn" dev="configfs" ino=20588 res=0 errno=0 [ 480.499214][ T8903] vivid-003: RDS Traffic Announcement: false inactive [ 480.641244][ T8903] vivid-003: RDS Traffic Program: false inactive [ 480.661413][ T8903] vivid-003: RDS Music: false inactive [ 480.697072][ T8903] vivid-003: ================== END STATUS ================== [ 481.608337][ T8949] Invalid ELF header magic: != ELF [ 481.613885][ T8950] Invalid ELF header magic: != ELF [ 484.438424][ T9023] ubi0: attaching mtd0 [ 484.521360][ T9023] ubi0: scanning is finished [ 484.562875][ T9023] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 484.951541][ T9023] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 485.488332][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 486.776402][ T9072] FAULT_INJECTION: forcing a failure. [ 486.776402][ T9072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.815583][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.1.579 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 486.815625][ T9072] Tainted: [U]=USER [ 486.815633][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.815647][ T9072] Call Trace: [ 486.815655][ T9072] [ 486.815664][ T9072] dump_stack_lvl+0x16c/0x1f0 [ 486.815698][ T9072] should_fail_ex+0x512/0x640 [ 486.815730][ T9072] should_fail_alloc_page+0xe7/0x130 [ 486.815762][ T9072] prepare_alloc_pages+0x3c2/0x610 [ 486.815799][ T9072] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 486.815841][ T9072] ? rcu_is_watching+0x12/0xc0 [ 486.815868][ T9072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.815892][ T9072] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 486.815930][ T9072] ? __lock_acquire+0x622/0x1c90 [ 486.815959][ T9072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.815995][ T9072] ? policy_nodemask+0xea/0x4e0 [ 486.816026][ T9072] alloc_pages_mpol+0x1fb/0x550 [ 486.816065][ T9072] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.816095][ T9072] ? filemap_get_entry+0x1a7/0x3b0 [ 486.816128][ T9072] folio_alloc_noprof+0x20/0x2d0 [ 486.816159][ T9072] filemap_alloc_folio_noprof+0x3a1/0x470 [ 486.816192][ T9072] ? ___kmalloc_large_node+0x183/0x1e0 [ 486.816226][ T9072] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 486.816262][ T9072] ? rcu_is_watching+0x12/0xc0 [ 486.816293][ T9072] __filemap_get_folio+0x5e1/0xc30 [ 486.816330][ T9072] ioctx_alloc+0x761/0x2120 [ 486.816383][ T9072] ? __pfx_ioctx_alloc+0x10/0x10 [ 486.816414][ T9072] ? __might_fault+0x13b/0x190 [ 486.816448][ T9072] __x64_sys_io_setup+0xc9/0x210 [ 486.816486][ T9072] do_syscall_64+0xcd/0x490 [ 486.816515][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.816541][ T9072] RIP: 0033:0x7fc5ebb8e9a9 [ 486.816561][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.816583][ T9072] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 486.816606][ T9072] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 486.816622][ T9072] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 486.816637][ T9072] RBP: 00007fc5ebc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 486.816651][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.816665][ T9072] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 486.816699][ T9072] [ 486.818053][ T9073] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 487.414562][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 488.309136][ T9104] syz.0.585(9104): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 489.070712][ T9113] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 489.125920][ T9118] random: crng reseeded on system resumption [ 489.877958][ T9133] mkiss: ax0: crc mode is auto. [ 491.259896][ T9187] FAULT_INJECTION: forcing a failure. [ 491.259896][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 491.286714][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.1.601 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 491.286761][ T9187] Tainted: [U]=USER [ 491.286770][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.286786][ T9187] Call Trace: [ 491.286795][ T9187] [ 491.286806][ T9187] dump_stack_lvl+0x16c/0x1f0 [ 491.286840][ T9187] should_fail_ex+0x512/0x640 [ 491.286869][ T9187] ? __kmalloc_noprof+0xbf/0x510 [ 491.286901][ T9187] ? ops_init+0x77/0x5f0 [ 491.286929][ T9187] should_failslab+0xc2/0x120 [ 491.286961][ T9187] __kmalloc_noprof+0xd2/0x510 [ 491.286985][ T9187] ? __pfx_genl_release+0x10/0x10 [ 491.287028][ T9187] ops_init+0x77/0x5f0 [ 491.287061][ T9187] setup_net+0x1ff/0x510 [ 491.287089][ T9187] ? lockdep_init_map_type+0x5c/0x280 [ 491.287125][ T9187] ? __pfx_setup_net+0x10/0x10 [ 491.287156][ T9187] ? debug_mutex_init+0x37/0x70 [ 491.287187][ T9187] copy_net_ns+0x2a6/0x5f0 [ 491.287222][ T9187] create_new_namespaces+0x3ea/0xa90 [ 491.287261][ T9187] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 491.287294][ T9187] ksys_unshare+0x45b/0xa40 [ 491.287328][ T9187] ? __pfx_ksys_unshare+0x10/0x10 [ 491.287362][ T9187] ? xfd_validate_state+0x61/0x180 [ 491.287417][ T9187] __x64_sys_unshare+0x31/0x40 [ 491.287453][ T9187] do_syscall_64+0xcd/0x490 [ 491.287483][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.287510][ T9187] RIP: 0033:0x7fc5ebb8e9a9 [ 491.287532][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.287556][ T9187] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 491.287581][ T9187] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 491.287599][ T9187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 491.287616][ T9187] RBP: 00007fc5ebc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 491.287632][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.287648][ T9187] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 491.287683][ T9187] [ 492.304725][ T9205] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 492.348834][ T9205] netlink: 322 bytes leftover after parsing attributes in process `syz.3.605'. [ 492.542844][ T9212] input: f as /devices/virtual/input/input15 [ 493.361736][ T9225] warning: `syz.0.608' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 495.306857][ T9281] ima: policy update failed [ 495.356691][ T30] audit: type=1802 audit(4294967337.807:16): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.615" res=0 errno=0 [ 496.139504][ T9293] random: crng reseeded on system resumption [ 496.240146][ T9291] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 496.306951][ T9291] flags: 0xfff00000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 496.337574][ T9291] raw: 00fff00000000004 0000000000000000 dead000000000122 0000000000000000 [ 496.356920][ T9291] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 496.428728][ T9291] page dumped because: unmovable page [ 496.434662][ T9291] page_owner tracks the page as allocated [ 496.474231][ T9291] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5882, tgid 5882 (syz-executor), ts 340206722768, free_ts 337459979943 [ 496.524992][ T9291] post_alloc_hook+0x1c0/0x230 [ 496.542461][ T9291] get_page_from_freelist+0x1321/0x3890 [ 496.570241][ T9291] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 496.611881][ T9291] alloc_pages_mpol+0x1fb/0x550 [ 496.655737][ T9291] alloc_pages_noprof+0x131/0x390 [ 496.672922][ T9291] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 496.699337][ T9291] vmalloc_user_noprof+0x9e/0xe0 [ 496.759021][ T9291] kcov_ioctl+0x4c/0x730 [ 496.765721][ T9291] __x64_sys_ioctl+0x18e/0x210 [ 496.863197][ T9291] do_syscall_64+0xcd/0x490 [ 496.867939][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.874589][ T9291] page last free pid 5876 tgid 5876 stack trace: [ 496.903087][ T9291] __free_frozen_pages+0x7fe/0x1180 [ 496.910875][ T9291] vfree+0x1fd/0xb50 [ 496.931581][ T9291] kcov_close+0x34/0x60 [ 496.974559][ T9291] __fput+0x402/0xb70 [ 496.978604][ T9291] fput_close_sync+0x118/0x260 [ 497.014588][ T9291] __x64_sys_close+0x8b/0x120 [ 497.019441][ T9291] do_syscall_64+0xcd/0x490 [ 497.051419][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.146086][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 497.518222][ T9320] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 497.951077][ T9338] __vm_enough_memory: pid: 9338, comm: syz.0.627, bytes: 4398046511104 not enough memory for the allocation [ 498.844213][ T9360] input: f as /devices/virtual/input/input16 [ 498.929870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078546c00: rx timeout, send abort [ 499.435711][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078546c00: abort rx timeout. Force session deactivation [ 500.707126][ T9397] FAULT_INJECTION: forcing a failure. [ 500.707126][ T9397] name failslab, interval 1, probability 0, space 0, times 0 [ 500.760054][ T9397] CPU: 1 UID: 0 PID: 9397 Comm: syz.0.636 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 500.760102][ T9397] Tainted: [U]=USER [ 500.760112][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.760128][ T9397] Call Trace: [ 500.760136][ T9397] [ 500.760147][ T9397] dump_stack_lvl+0x16c/0x1f0 [ 500.760182][ T9397] should_fail_ex+0x512/0x640 [ 500.760212][ T9397] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 500.760256][ T9397] should_failslab+0xc2/0x120 [ 500.760286][ T9397] __kmalloc_cache_noprof+0x6a/0x3e0 [ 500.760324][ T9397] ? do_eventfd+0x67/0x2c0 [ 500.760357][ T9397] do_eventfd+0x67/0x2c0 [ 500.760382][ T9397] ? rcu_is_watching+0x12/0xc0 [ 500.760409][ T9397] __x64_sys_eventfd+0x32/0x50 [ 500.760439][ T9397] do_syscall_64+0xcd/0x490 [ 500.760468][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.760502][ T9397] RIP: 0033:0x7fc246d8e9a9 [ 500.760525][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.760552][ T9397] RSP: 002b:00007fc247c92038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 500.760577][ T9397] RAX: ffffffffffffffda RBX: 00007fc246fb5fa0 RCX: 00007fc246d8e9a9 [ 500.760596][ T9397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 500.760611][ T9397] RBP: 00007fc246e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 500.760627][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.760642][ T9397] R13: 0000000000000000 R14: 00007fc246fb5fa0 R15: 00007ffe5f2172e8 [ 500.760676][ T9397] [ 501.191238][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.197622][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.285661][ T9412] FAULT_INJECTION: forcing a failure. [ 502.285661][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 502.367677][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.0.638 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 502.367720][ T9412] Tainted: [U]=USER [ 502.367728][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.367743][ T9412] Call Trace: [ 502.367751][ T9412] [ 502.367761][ T9412] dump_stack_lvl+0x16c/0x1f0 [ 502.367793][ T9412] should_fail_ex+0x512/0x640 [ 502.367817][ T9412] ? __kmalloc_noprof+0xbf/0x510 [ 502.367845][ T9412] ? load_msg+0x118/0x4a0 [ 502.367868][ T9412] should_failslab+0xc2/0x120 [ 502.367896][ T9412] __kmalloc_noprof+0xd2/0x510 [ 502.367919][ T9412] ? __pfx___might_resched+0x10/0x10 [ 502.367945][ T9412] ? load_msg+0x43/0x4a0 [ 502.367973][ T9412] load_msg+0x118/0x4a0 [ 502.368002][ T9412] do_mq_timedsend+0x3d7/0xc40 [ 502.368035][ T9412] ? __pfx_do_mq_timedsend+0x10/0x10 [ 502.368063][ T9412] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 502.368093][ T9412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.368124][ T9412] ? __fget_files+0x20e/0x3c0 [ 502.368167][ T9412] __x64_sys_mq_timedsend+0x1cd/0x260 [ 502.368197][ T9412] ? ksys_write+0x1ac/0x250 [ 502.368220][ T9412] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 502.368261][ T9412] do_syscall_64+0xcd/0x490 [ 502.368289][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.368314][ T9412] RIP: 0033:0x7fc246d8e9a9 [ 502.368334][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.368363][ T9412] RSP: 002b:00007fc247c92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 502.368386][ T9412] RAX: ffffffffffffffda RBX: 00007fc246fb5fa0 RCX: 00007fc246d8e9a9 [ 502.368403][ T9412] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 502.368415][ T9412] RBP: 00007fc247c92090 R08: 0000000000000000 R09: 0000000000000000 [ 502.368429][ T9412] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 502.368444][ T9412] R13: 0000000000000000 R14: 00007fc246fb5fa0 R15: 00007ffe5f2172e8 [ 502.368478][ T9412] [ 502.577731][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.146624][ T9420] bridge0: port 4(veth0_to_bridge) entered blocking state [ 504.165430][ T9420] bridge0: port 4(veth0_to_bridge) entered disabled state [ 504.173230][ T9420] veth0_to_bridge: entered allmulticast mode [ 504.255656][ T9420] veth0_to_bridge: entered promiscuous mode [ 504.262221][ T9420] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 504.384629][ T9420] bridge0: port 4(veth0_to_bridge) entered blocking state [ 504.391962][ T9420] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 504.551478][ T50] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 504.551521][ T50] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 504.569378][ T50] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 504.569515][ T50] Bluetooth: hci1: Malformed LE Event: 0x0d [ 505.271626][ T9441] FAULT_INJECTION: forcing a failure. [ 505.271626][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 505.287199][ T9441] CPU: 1 UID: 0 PID: 9441 Comm: syz.2.645 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 505.287246][ T9441] Tainted: [U]=USER [ 505.287254][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.287269][ T9441] Call Trace: [ 505.287277][ T9441] [ 505.287287][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 505.287328][ T9441] should_fail_ex+0x512/0x640 [ 505.287356][ T9441] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 505.287388][ T9441] should_failslab+0xc2/0x120 [ 505.287419][ T9441] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 505.287444][ T9441] ? __proc_create+0xc3/0x8c0 [ 505.287471][ T9441] ? __proc_create+0x2ce/0x8c0 [ 505.287503][ T9441] __proc_create+0x2ce/0x8c0 [ 505.287532][ T9441] ? __pfx___proc_create+0x10/0x10 [ 505.287570][ T9441] _proc_mkdir+0xb9/0x200 [ 505.287596][ T9441] ? __pfx__proc_mkdir+0x10/0x10 [ 505.287630][ T9441] ? __pfx_vlan_init_net+0x10/0x10 [ 505.287651][ T9441] vlan_proc_init+0x93/0x180 [ 505.287665][ T9441] ops_init+0x1df/0x5f0 [ 505.287685][ T9441] setup_net+0x1ff/0x510 [ 505.287699][ T9441] ? lockdep_init_map_type+0x5c/0x280 [ 505.287721][ T9441] ? __pfx_setup_net+0x10/0x10 [ 505.287739][ T9441] ? debug_mutex_init+0x37/0x70 [ 505.287756][ T9441] copy_net_ns+0x2a6/0x5f0 [ 505.287776][ T9441] create_new_namespaces+0x3ea/0xa90 [ 505.287798][ T9441] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 505.287816][ T9441] ksys_unshare+0x45b/0xa40 [ 505.287837][ T9441] ? __pfx_ksys_unshare+0x10/0x10 [ 505.287857][ T9441] ? syscall_user_dispatch+0x78/0x140 [ 505.287883][ T9441] __x64_sys_unshare+0x31/0x40 [ 505.287902][ T9441] do_syscall_64+0xcd/0x490 [ 505.287919][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.287933][ T9441] RIP: 0033:0x7f30b3b8e9a9 [ 505.287946][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.287960][ T9441] RSP: 002b:00007f30b4924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 505.287974][ T9441] RAX: ffffffffffffffda RBX: 00007f30b3db5fa0 RCX: 00007f30b3b8e9a9 [ 505.287984][ T9441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 505.287992][ T9441] RBP: 00007f30b3c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 505.288001][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.288010][ T9441] R13: 0000000000000000 R14: 00007f30b3db5fa0 R15: 00007ffede1bd398 [ 505.288029][ T9441] [ 505.288036][ T9441] 8021q: can't create entry in proc filesystem! [ 506.701276][ T9463] FAULT_INJECTION: forcing a failure. [ 506.701276][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 506.755316][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.2.649 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 506.755361][ T9463] Tainted: [U]=USER [ 506.755369][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.755383][ T9463] Call Trace: [ 506.755391][ T9463] [ 506.755401][ T9463] dump_stack_lvl+0x16c/0x1f0 [ 506.755432][ T9463] should_fail_ex+0x512/0x640 [ 506.755457][ T9463] ? __kmalloc_noprof+0xbf/0x510 [ 506.755482][ T9463] ? load_msg+0x118/0x4a0 [ 506.755504][ T9463] should_failslab+0xc2/0x120 [ 506.755531][ T9463] __kmalloc_noprof+0xd2/0x510 [ 506.755554][ T9463] ? __pfx___might_resched+0x10/0x10 [ 506.755580][ T9463] ? load_msg+0x11/0x4a0 [ 506.755609][ T9463] load_msg+0x118/0x4a0 [ 506.755638][ T9463] do_mq_timedsend+0x3d7/0xc40 [ 506.755670][ T9463] ? __pfx_do_mq_timedsend+0x10/0x10 [ 506.755696][ T9463] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 506.755726][ T9463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.755757][ T9463] ? __fget_files+0x20e/0x3c0 [ 506.755801][ T9463] __x64_sys_mq_timedsend+0x1cd/0x260 [ 506.755830][ T9463] ? ksys_write+0x1ac/0x250 [ 506.755853][ T9463] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 506.755894][ T9463] do_syscall_64+0xcd/0x490 [ 506.755921][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.755946][ T9463] RIP: 0033:0x7f30b3b8e9a9 [ 506.755966][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.755997][ T9463] RSP: 002b:00007f30b4924038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 506.756023][ T9463] RAX: ffffffffffffffda RBX: 00007f30b3db5fa0 RCX: 00007f30b3b8e9a9 [ 506.756039][ T9463] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 506.756054][ T9463] RBP: 00007f30b4924090 R08: 0000000000000000 R09: 0000000000000000 [ 506.756069][ T9463] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 506.756084][ T9463] R13: 0000000000000000 R14: 00007f30b3db5fa0 R15: 00007ffede1bd398 [ 506.756117][ T9463] [ 507.691282][ T9482] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 509.815033][ T9516] FAULT_INJECTION: forcing a failure. [ 509.815033][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 509.873961][ T9518] program syz.1.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.875841][ T9516] CPU: 1 UID: 0 PID: 9516 Comm: syz.3.659 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 509.875882][ T9516] Tainted: [U]=USER [ 509.875890][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.875911][ T9516] Call Trace: [ 509.875919][ T9516] [ 509.875928][ T9516] dump_stack_lvl+0x16c/0x1f0 [ 509.875959][ T9516] should_fail_ex+0x512/0x640 [ 509.875990][ T9516] _copy_from_user+0x2e/0xd0 [ 509.876018][ T9516] load_msg+0x19e/0x4a0 [ 509.876048][ T9516] do_mq_timedsend+0x3d7/0xc40 [ 509.876080][ T9516] ? __pfx_do_mq_timedsend+0x10/0x10 [ 509.876107][ T9516] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 509.876137][ T9516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 509.876167][ T9516] ? __fget_files+0x20e/0x3c0 [ 509.876210][ T9516] __x64_sys_mq_timedsend+0x1cd/0x260 [ 509.876239][ T9516] ? ksys_write+0x1ac/0x250 [ 509.876262][ T9516] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 509.876302][ T9516] do_syscall_64+0xcd/0x490 [ 509.876329][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.876353][ T9516] RIP: 0033:0x7fdbe618e9a9 [ 509.876372][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.876395][ T9516] RSP: 002b:00007fdbe70de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 509.876418][ T9516] RAX: ffffffffffffffda RBX: 00007fdbe63b5fa0 RCX: 00007fdbe618e9a9 [ 509.876434][ T9516] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 509.876448][ T9516] RBP: 00007fdbe70de090 R08: 0000000000000000 R09: 0000000000000000 [ 509.876462][ T9516] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 509.876476][ T9516] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 509.876509][ T9516] [ 510.194495][ T9527] random: crng reseeded on system resumption [ 510.271634][ T50] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 510.271659][ T50] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 510.287864][ T50] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 510.287923][ T50] Bluetooth: hci3: adv larger than maximum supported [ 510.295261][ T50] Bluetooth: hci3: adv larger than maximum supported [ 510.301927][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 512.145637][ T9574] random: crng reseeded on system resumption [ 512.615989][ T9593] FAULT_INJECTION: forcing a failure. [ 512.615989][ T9593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.617915][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.3.672 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 512.617955][ T9593] Tainted: [U]=USER [ 512.617964][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.617977][ T9593] Call Trace: [ 512.617996][ T9593] [ 512.618006][ T9593] dump_stack_lvl+0x16c/0x1f0 [ 512.618036][ T9593] should_fail_ex+0x512/0x640 [ 512.618067][ T9593] should_fail_alloc_page+0xe7/0x130 [ 512.618097][ T9593] prepare_alloc_pages+0x3c2/0x610 [ 512.618137][ T9593] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 512.618168][ T9593] ? __pfx___might_resched+0x10/0x10 [ 512.618196][ T9593] ? find_held_lock+0x2b/0x80 [ 512.618237][ T9593] ? process_measurement+0x4a6/0x23e0 [ 512.618261][ T9593] ? down_write+0x14d/0x200 [ 512.618288][ T9593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 512.618312][ T9593] ? __lock_acquire+0x622/0x1c90 [ 512.618362][ T9593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.618398][ T9593] ? policy_nodemask+0xea/0x4e0 [ 512.618426][ T9593] alloc_pages_mpol+0x1fb/0x550 [ 512.618455][ T9593] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 512.618489][ T9593] alloc_pages_noprof+0x131/0x390 [ 512.618518][ T9593] __pmd_alloc+0x3b/0x930 [ 512.618544][ T9593] ? find_held_lock+0x2b/0x80 [ 512.618570][ T9593] __handle_mm_fault+0xaac/0x5490 [ 512.618612][ T9593] ? __pfx___handle_mm_fault+0x10/0x10 [ 512.618642][ T9593] ? __pfx_mt_find+0x10/0x10 [ 512.618693][ T9593] ? find_vma+0xbf/0x140 [ 512.618720][ T9593] ? __pfx_find_vma+0x10/0x10 [ 512.618751][ T9593] handle_mm_fault+0x589/0xd10 [ 512.618788][ T9593] ? __pkru_allows_pkey+0x51/0xb0 [ 512.618822][ T9593] do_user_addr_fault+0x7a6/0x1370 [ 512.618856][ T9593] ? rcu_is_watching+0x12/0xc0 [ 512.618887][ T9593] exc_page_fault+0x5c/0xb0 [ 512.618908][ T9593] asm_exc_page_fault+0x26/0x30 [ 512.618928][ T9593] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 512.618960][ T9593] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 512.618982][ T9593] RSP: 0018:ffffc90003fafcc0 EFLAGS: 00050206 [ 512.619001][ T9593] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000fd0 [ 512.619016][ T9593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888037c6e030 [ 512.619031][ T9593] RBP: 0000000000000fd0 R08: 0000000000000001 R09: ffffed1006f8ddff [ 512.619046][ T9593] R10: ffff888037c6efff R11: 0000000000000000 R12: 0000000000000000 [ 512.619060][ T9593] R13: ffff888037c6e030 R14: dffffc0000000000 R15: ffff888020f19480 [ 512.619092][ T9593] _copy_from_user+0x98/0xd0 [ 512.619119][ T9593] load_msg+0x19e/0x4a0 [ 512.619149][ T9593] do_mq_timedsend+0x3d7/0xc40 [ 512.619182][ T9593] ? __pfx_do_mq_timedsend+0x10/0x10 [ 512.619207][ T9593] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 512.619234][ T9593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 512.619262][ T9593] ? __fget_files+0x20e/0x3c0 [ 512.619304][ T9593] __x64_sys_mq_timedsend+0x1cd/0x260 [ 512.619332][ T9593] ? ksys_write+0x1ac/0x250 [ 512.619352][ T9593] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 512.619392][ T9593] do_syscall_64+0xcd/0x490 [ 512.619419][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.619442][ T9593] RIP: 0033:0x7fdbe618e9a9 [ 512.619463][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.619486][ T9593] RSP: 002b:00007fdbe70de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 512.619508][ T9593] RAX: ffffffffffffffda RBX: 00007fdbe63b5fa0 RCX: 00007fdbe618e9a9 [ 512.619524][ T9593] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 512.619538][ T9593] RBP: 00007fdbe70de090 R08: 0000000000000000 R09: 0000000000000000 [ 512.619553][ T9593] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 512.619565][ T9593] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 512.619596][ T9593] [ 513.681805][ T9624] FAULT_INJECTION: forcing a failure. [ 513.681805][ T9624] name failslab, interval 1, probability 0, space 0, times 0 [ 513.683727][ T9610] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 513.685049][ T9610] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 513.687367][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.3.679 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 513.687411][ T9624] Tainted: [U]=USER [ 513.687419][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.687435][ T9624] Call Trace: [ 513.687444][ T9624] [ 513.687454][ T9624] dump_stack_lvl+0x16c/0x1f0 [ 513.687488][ T9624] should_fail_ex+0x512/0x640 [ 513.687515][ T9624] ? fs_reclaim_acquire+0xae/0x150 [ 513.687560][ T9624] should_failslab+0xc2/0x120 [ 513.687591][ T9624] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.687619][ T9624] ? security_inode_alloc+0x3b/0x2b0 [ 513.687658][ T9624] security_inode_alloc+0x3b/0x2b0 [ 513.687692][ T9624] inode_init_always_gfp+0xce4/0x1030 [ 513.687736][ T9624] alloc_inode+0x86/0x240 [ 513.687767][ T9624] sock_alloc+0x40/0x280 [ 513.687798][ T9624] __sock_create+0xc1/0x8d0 [ 513.687838][ T9624] __sys_socket+0x14d/0x260 [ 513.687873][ T9624] ? __pfx___sys_socket+0x10/0x10 [ 513.687906][ T9624] ? xfd_validate_state+0x61/0x180 [ 513.687935][ T9624] ? __pfx___do_sys_close_range+0x10/0x10 [ 513.687971][ T9624] __x64_sys_socket+0x72/0xb0 [ 513.688004][ T9624] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.688030][ T9624] do_syscall_64+0xcd/0x490 [ 513.688060][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.688087][ T9624] RIP: 0033:0x7fdbe618e9a9 [ 513.688107][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.688129][ T9624] RSP: 002b:00007fdbe70de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 513.688151][ T9624] RAX: ffffffffffffffda RBX: 00007fdbe63b5fa0 RCX: 00007fdbe618e9a9 [ 513.688167][ T9624] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 513.688180][ T9624] RBP: 00007fdbe6210d69 R08: 0000000000000000 R09: 0000000000000000 [ 513.688194][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.688209][ T9624] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 513.688243][ T9624] [ 513.688281][ T9624] socket: no more sockets [ 513.728394][ T9610] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 513.730644][ T9610] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 513.734106][ T9610] page dumped because: unmovable page [ 513.734950][ T9610] page_owner tracks the page as allocated [ 513.743005][ T9610] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5882, tgid 5882 (syz-executor), ts 340206722768, free_ts 337459979943 [ 513.764932][ T9610] post_alloc_hook+0x1c0/0x230 [ 513.774344][ T9610] get_page_from_freelist+0x1321/0x3890 [ 513.776788][ T9610] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 513.778995][ T9610] alloc_pages_mpol+0x1fb/0x550 [ 513.781219][ T9610] alloc_pages_noprof+0x131/0x390 [ 513.783432][ T9610] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 513.785628][ T9610] vmalloc_user_noprof+0x9e/0xe0 [ 513.787857][ T9610] kcov_ioctl+0x4c/0x730 [ 513.801274][ T9610] __x64_sys_ioctl+0x18e/0x210 [ 513.804666][ T9610] do_syscall_64+0xcd/0x490 [ 513.815350][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.831829][ T9610] page last free pid 5876 tgid 5876 stack trace: [ 513.833168][ T9610] __free_frozen_pages+0x7fe/0x1180 [ 513.841883][ T9610] vfree+0x1fd/0xb50 [ 513.851215][ T9610] kcov_close+0x34/0x60 [ 513.864843][ T9610] __fput+0x402/0xb70 [ 513.867070][ T9610] fput_close_sync+0x118/0x260 [ 513.875013][ T9610] __x64_sys_close+0x8b/0x120 [ 513.880396][ T9610] do_syscall_64+0xcd/0x490 [ 513.885784][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.959985][ T9614] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 513.961485][ T9614] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 513.962855][ T9614] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 513.965129][ T9614] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 513.967785][ T9614] page dumped because: unmovable page [ 514.016942][ T9614] page_owner tracks the page as allocated [ 514.020076][ T9614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5882, tgid 5882 (syz-executor), ts 340206722768, free_ts 337459979943 [ 514.023096][ T9614] post_alloc_hook+0x1c0/0x230 [ 514.023815][ T9614] get_page_from_freelist+0x1321/0x3890 [ 514.030368][ T9614] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 514.043136][ T9614] alloc_pages_mpol+0x1fb/0x550 [ 514.058055][ T9614] alloc_pages_noprof+0x131/0x390 [ 514.060787][ T9614] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 514.061690][ T9614] vmalloc_user_noprof+0x9e/0xe0 [ 514.062427][ T9614] kcov_ioctl+0x4c/0x730 [ 514.063093][ T9614] __x64_sys_ioctl+0x18e/0x210 [ 514.077590][ T9635] zram0: detected capacity change from 0 to 8 [ 514.094344][ T9614] do_syscall_64+0xcd/0x490 [ 514.095061][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.098377][ T9614] page last free pid 5876 tgid 5876 stack trace: [ 514.099323][ T9614] __free_frozen_pages+0x7fe/0x1180 [ 514.100068][ T9614] vfree+0x1fd/0xb50 [ 514.100636][ T9614] kcov_close+0x34/0x60 [ 514.101262][ T9614] __fput+0x402/0xb70 [ 514.101885][ T9614] fput_close_sync+0x118/0x260 [ 514.102574][ T9614] __x64_sys_close+0x8b/0x120 [ 514.103420][ T9614] do_syscall_64+0xcd/0x490 [ 514.124478][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.687410][ T9649] FAULT_INJECTION: forcing a failure. [ 514.687410][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 514.690730][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.3.682 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 514.690772][ T9649] Tainted: [U]=USER [ 514.690779][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.690793][ T9649] Call Trace: [ 514.690802][ T9649] [ 514.690811][ T9649] dump_stack_lvl+0x16c/0x1f0 [ 514.690842][ T9649] should_fail_ex+0x512/0x640 [ 514.690869][ T9649] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 514.690896][ T9649] should_failslab+0xc2/0x120 [ 514.690923][ T9649] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 514.690949][ T9649] ? __pmd_alloc+0xbf/0x930 [ 514.690984][ T9649] __pmd_alloc+0xbf/0x930 [ 514.691011][ T9649] ? find_held_lock+0x2b/0x80 [ 514.691040][ T9649] __handle_mm_fault+0xaac/0x5490 [ 514.691083][ T9649] ? __pfx___handle_mm_fault+0x10/0x10 [ 514.691114][ T9649] ? __pfx_mt_find+0x10/0x10 [ 514.691161][ T9649] ? find_vma+0xbf/0x140 [ 514.691188][ T9649] ? __pfx_find_vma+0x10/0x10 [ 514.691228][ T9649] handle_mm_fault+0x589/0xd10 [ 514.691264][ T9649] ? __pkru_allows_pkey+0x51/0xb0 [ 514.691299][ T9649] do_user_addr_fault+0x7a6/0x1370 [ 514.691335][ T9649] ? rcu_is_watching+0x12/0xc0 [ 514.691364][ T9649] exc_page_fault+0x5c/0xb0 [ 514.691389][ T9649] asm_exc_page_fault+0x26/0x30 [ 514.691413][ T9649] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 514.691444][ T9649] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 514.691467][ T9649] RSP: 0018:ffffc90003177cc0 EFLAGS: 00050206 [ 514.691487][ T9649] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000fd0 [ 514.691502][ T9649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807da78030 [ 514.691517][ T9649] RBP: 0000000000000fd0 R08: 0000000000000001 R09: ffffed100fb4f1ff [ 514.691532][ T9649] R10: ffff88807da78fff R11: 0000000000000000 R12: 0000000000000000 [ 514.691547][ T9649] R13: ffff88807da78030 R14: dffffc0000000000 R15: ffff88805cde8e80 [ 514.691582][ T9649] _copy_from_user+0x98/0xd0 [ 514.691611][ T9649] load_msg+0x19e/0x4a0 [ 514.691642][ T9649] do_mq_timedsend+0x3d7/0xc40 [ 514.691675][ T9649] ? __pfx_do_mq_timedsend+0x10/0x10 [ 514.691703][ T9649] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 514.691733][ T9649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.691768][ T9649] ? __fget_files+0x20e/0x3c0 [ 514.691812][ T9649] __x64_sys_mq_timedsend+0x1cd/0x260 [ 514.691841][ T9649] ? ksys_write+0x1ac/0x250 [ 514.691864][ T9649] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 514.691905][ T9649] do_syscall_64+0xcd/0x490 [ 514.691934][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.691957][ T9649] RIP: 0033:0x7fdbe618e9a9 [ 514.691977][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.692000][ T9649] RSP: 002b:00007fdbe70de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 514.692022][ T9649] RAX: ffffffffffffffda RBX: 00007fdbe63b5fa0 RCX: 00007fdbe618e9a9 [ 514.692038][ T9649] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 514.692052][ T9649] RBP: 00007fdbe70de090 R08: 0000000000000000 R09: 0000000000000000 [ 514.692067][ T9649] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 514.692081][ T9649] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 514.692116][ T9649] [ 514.749330][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.353636][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 517.517723][ T9690] netlink: 342 bytes leftover after parsing attributes in process `syz.3.688'. [ 517.532910][ T9690] netlink: 342 bytes leftover after parsing attributes in process `syz.3.688'. [ 518.074857][ T9718] FAULT_INJECTION: forcing a failure. [ 518.074857][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 518.081358][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.2.694 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 518.081386][ T9718] Tainted: [U]=USER [ 518.081391][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.081400][ T9718] Call Trace: [ 518.081406][ T9718] [ 518.081413][ T9718] dump_stack_lvl+0x16c/0x1f0 [ 518.081434][ T9718] should_fail_ex+0x512/0x640 [ 518.081450][ T9718] ? __kvmalloc_node_noprof+0x124/0x620 [ 518.081476][ T9718] should_failslab+0xc2/0x120 [ 518.081493][ T9718] __kvmalloc_node_noprof+0x137/0x620 [ 518.081518][ T9718] ? v4l2_ctrl_new+0x97d/0x2180 [ 518.081535][ T9718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.081559][ T9718] ? v4l2_ctrl_new+0x97d/0x2180 [ 518.081574][ T9718] v4l2_ctrl_new+0x97d/0x2180 [ 518.081598][ T9718] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 518.081613][ T9718] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 518.081634][ T9718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.081657][ T9718] v4l2_ctrl_new_std+0x1be/0x290 [ 518.081679][ T9718] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 518.081694][ T9718] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 518.081712][ T9718] ? rcu_is_watching+0x12/0xc0 [ 518.081728][ T9718] ? trace_kmalloc+0x2b/0xd0 [ 518.081743][ T9718] ? __kvmalloc_node_noprof+0x298/0x620 [ 518.081770][ T9718] ? media_request_object_init+0x100/0x180 [ 518.081794][ T9718] vicodec_open+0x1f7/0xf90 [ 518.081813][ T9718] v4l2_open+0x225/0x490 [ 518.081827][ T9718] ? __pfx_v4l2_open+0x10/0x10 [ 518.081839][ T9718] chrdev_open+0x231/0x6a0 [ 518.081856][ T9718] ? __pfx_apparmor_file_open+0x10/0x10 [ 518.081877][ T9718] ? __pfx_chrdev_open+0x10/0x10 [ 518.081894][ T9718] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 518.081920][ T9718] do_dentry_open+0x744/0x1c10 [ 518.081935][ T9718] ? __pfx_chrdev_open+0x10/0x10 [ 518.081954][ T9718] vfs_open+0x82/0x3f0 [ 518.081984][ T9718] path_openat+0x1de4/0x2cb0 [ 518.082006][ T9718] ? __pfx_path_openat+0x10/0x10 [ 518.082021][ T9718] ? __lock_acquire+0xb8a/0x1c90 [ 518.082043][ T9718] do_filp_open+0x20b/0x470 [ 518.082057][ T9718] ? __pfx_do_filp_open+0x10/0x10 [ 518.082084][ T9718] ? alloc_fd+0x471/0x7d0 [ 518.082111][ T9718] do_sys_openat2+0x11b/0x1d0 [ 518.082130][ T9718] ? __pfx_do_sys_openat2+0x10/0x10 [ 518.082156][ T9718] __x64_sys_openat+0x174/0x210 [ 518.082175][ T9718] ? __pfx___x64_sys_openat+0x10/0x10 [ 518.082201][ T9718] do_syscall_64+0xcd/0x490 [ 518.082221][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.082235][ T9718] RIP: 0033:0x7f30b3b8e9a9 [ 518.082249][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.082263][ T9718] RSP: 002b:00007f30b4924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.082277][ T9718] RAX: ffffffffffffffda RBX: 00007f30b3db5fa0 RCX: 00007f30b3b8e9a9 [ 518.082287][ T9718] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 518.082296][ T9718] RBP: 00007f30b3c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 518.082304][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.082313][ T9718] R13: 0000000000000000 R14: 00007f30b3db5fa0 R15: 00007ffede1bd398 [ 518.082332][ T9718] [ 518.141986][ T9718] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 522.133662][ T9820] FAULT_INJECTION: forcing a failure. [ 522.133662][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 522.135748][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.0.714 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 522.135786][ T9820] Tainted: [U]=USER [ 522.135794][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.135807][ T9820] Call Trace: [ 522.135816][ T9820] [ 522.135825][ T9820] dump_stack_lvl+0x16c/0x1f0 [ 522.135855][ T9820] should_fail_ex+0x512/0x640 [ 522.135881][ T9820] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 522.135912][ T9820] should_failslab+0xc2/0x120 [ 522.135941][ T9820] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 522.135966][ T9820] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 522.135997][ T9820] ? ptlock_alloc+0x1f/0x70 [ 522.136035][ T9820] ptlock_alloc+0x1f/0x70 [ 522.136067][ T9820] pte_alloc_one+0x82/0x3a0 [ 522.136090][ T9820] __handle_mm_fault+0x3a68/0x5490 [ 522.136132][ T9820] ? __pfx___handle_mm_fault+0x10/0x10 [ 522.136164][ T9820] ? __pfx_mt_find+0x10/0x10 [ 522.136211][ T9820] ? find_vma+0xbf/0x140 [ 522.136239][ T9820] ? __pfx_find_vma+0x10/0x10 [ 522.136271][ T9820] handle_mm_fault+0x589/0xd10 [ 522.136306][ T9820] ? __pkru_allows_pkey+0x51/0xb0 [ 522.136340][ T9820] do_user_addr_fault+0x7a6/0x1370 [ 522.136376][ T9820] ? rcu_is_watching+0x12/0xc0 [ 522.136406][ T9820] exc_page_fault+0x5c/0xb0 [ 522.136431][ T9820] asm_exc_page_fault+0x26/0x30 [ 522.136455][ T9820] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 522.136487][ T9820] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 522.136510][ T9820] RSP: 0018:ffffc9000e457cc0 EFLAGS: 00050206 [ 522.136530][ T9820] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000fd0 [ 522.136552][ T9820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803203c030 [ 522.136568][ T9820] RBP: 0000000000000fd0 R08: 0000000000000001 R09: ffffed10064079ff [ 522.136583][ T9820] R10: ffff88803203cfff R11: 0000000000000000 R12: 0000000000000000 [ 522.136599][ T9820] R13: ffff88803203c030 R14: dffffc0000000000 R15: ffff88803e41da80 [ 522.136635][ T9820] _copy_from_user+0x98/0xd0 [ 522.136664][ T9820] load_msg+0x19e/0x4a0 [ 522.136695][ T9820] do_mq_timedsend+0x3d7/0xc40 [ 522.136728][ T9820] ? __pfx_do_mq_timedsend+0x10/0x10 [ 522.136756][ T9820] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 522.136787][ T9820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 522.136818][ T9820] ? __fget_files+0x20e/0x3c0 [ 522.136862][ T9820] __x64_sys_mq_timedsend+0x1cd/0x260 [ 522.136892][ T9820] ? ksys_write+0x1ac/0x250 [ 522.136915][ T9820] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 522.136958][ T9820] do_syscall_64+0xcd/0x490 [ 522.136986][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.137009][ T9820] RIP: 0033:0x7fc246d8e9a9 [ 522.137029][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.137052][ T9820] RSP: 002b:00007fc247c92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 522.137074][ T9820] RAX: ffffffffffffffda RBX: 00007fc246fb5fa0 RCX: 00007fc246d8e9a9 [ 522.137091][ T9820] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 522.137105][ T9820] RBP: 00007fc247c92090 R08: 0000000000000000 R09: 0000000000000000 [ 522.137119][ T9820] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 522.137133][ T9820] R13: 0000000000000000 R14: 00007fc246fb5fa0 R15: 00007ffe5f2172e8 [ 522.137165][ T9820] [ 522.250004][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.275366][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.277144][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.287375][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.292391][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.299506][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.308507][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 522.341233][ T9823] netlink: 338 bytes leftover after parsing attributes in process `syz.3.715'. [ 523.659026][ T9843] usb usb36: usbfs: process 9843 (syz.0.721) did not claim interface 0 before use [ 525.081375][ T9867] netlink: 338 bytes leftover after parsing attributes in process `syz.0.726'. [ 525.090639][ T9867] netlink: 338 bytes leftover after parsing attributes in process `syz.0.726'. [ 525.590838][ T9875] FAULT_INJECTION: forcing a failure. [ 525.590838][ T9875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.592880][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.1.725 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 525.592904][ T9875] Tainted: [U]=USER [ 525.592908][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.592916][ T9875] Call Trace: [ 525.592922][ T9875] [ 525.592927][ T9875] dump_stack_lvl+0x16c/0x1f0 [ 525.592947][ T9875] should_fail_ex+0x512/0x640 [ 525.592965][ T9875] should_fail_alloc_page+0xe7/0x130 [ 525.592984][ T9875] prepare_alloc_pages+0x3c2/0x610 [ 525.593007][ T9875] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 525.593027][ T9875] ? __lock_acquire+0x622/0x1c90 [ 525.593050][ T9875] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 525.593075][ T9875] ? find_held_lock+0x2b/0x80 [ 525.593090][ T9875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.593113][ T9875] ? policy_nodemask+0xea/0x4e0 [ 525.593131][ T9875] alloc_pages_mpol+0x1fb/0x550 [ 525.593148][ T9875] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 525.593169][ T9875] folio_alloc_mpol_noprof+0x36/0x2f0 [ 525.593195][ T9875] shmem_alloc_folio+0x135/0x160 [ 525.593217][ T9875] shmem_alloc_and_add_folio+0x499/0xc20 [ 525.593244][ T9875] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 525.593268][ T9875] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 525.593285][ T9875] shmem_get_folio_gfp+0x67f/0x1600 [ 525.593303][ T9875] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 525.593318][ T9875] ? filemap_map_pages+0xf6f/0x1680 [ 525.593335][ T9875] shmem_fault+0x1fe/0xa30 [ 525.593348][ T9875] ? __lock_acquire+0x622/0x1c90 [ 525.593366][ T9875] ? __pfx_shmem_fault+0x10/0x10 [ 525.593381][ T9875] ? rcu_is_watching+0x12/0xc0 [ 525.593396][ T9875] ? __pfx_filemap_map_pages+0x10/0x10 [ 525.593416][ T9875] __do_fault+0x10d/0x490 [ 525.593433][ T9875] __handle_mm_fault+0x3c2a/0x5490 [ 525.593460][ T9875] ? __pfx___handle_mm_fault+0x10/0x10 [ 525.593479][ T9875] ? __pfx_mt_find+0x10/0x10 [ 525.593505][ T9875] ? find_vma+0xbf/0x140 [ 525.593521][ T9875] ? __pfx_find_vma+0x10/0x10 [ 525.593540][ T9875] handle_mm_fault+0x589/0xd10 [ 525.593561][ T9875] ? __pkru_allows_pkey+0x51/0xb0 [ 525.593583][ T9875] do_user_addr_fault+0x7a6/0x1370 [ 525.593604][ T9875] ? rcu_is_watching+0x12/0xc0 [ 525.593620][ T9875] exc_page_fault+0x5c/0xb0 [ 525.593634][ T9875] asm_exc_page_fault+0x26/0x30 [ 525.593648][ T9875] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 525.593672][ T9875] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 525.593686][ T9875] RSP: 0018:ffffc9001889fcc0 EFLAGS: 00050206 [ 525.593702][ T9875] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000fd0 [ 525.593714][ T9875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888059ad6030 [ 525.593726][ T9875] RBP: 0000000000000fd0 R08: 0000000000000001 R09: ffffed100b35adff [ 525.593739][ T9875] R10: ffff888059ad6fff R11: 0000000000000000 R12: 0000000000000000 [ 525.593751][ T9875] R13: ffff888059ad6030 R14: dffffc0000000000 R15: ffff88807fb77000 [ 525.593781][ T9875] _copy_from_user+0x98/0xd0 [ 525.593801][ T9875] load_msg+0x19e/0x4a0 [ 525.593818][ T9875] do_mq_timedsend+0x3d7/0xc40 [ 525.593837][ T9875] ? __pfx_do_mq_timedsend+0x10/0x10 [ 525.593854][ T9875] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 525.593871][ T9875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 525.593888][ T9875] ? __fget_files+0x20e/0x3c0 [ 525.593915][ T9875] __x64_sys_mq_timedsend+0x1cd/0x260 [ 525.593933][ T9875] ? ksys_write+0x1ac/0x250 [ 525.593946][ T9875] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 525.593970][ T9875] do_syscall_64+0xcd/0x490 [ 525.593986][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.593999][ T9875] RIP: 0033:0x7fc5ebb8e9a9 [ 525.594011][ T9875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.594024][ T9875] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 525.594036][ T9875] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 525.594045][ T9875] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 525.594053][ T9875] RBP: 00007fc5eca20090 R08: 0000000000000000 R09: 0000000000000000 [ 525.594061][ T9875] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 525.594069][ T9875] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 525.594088][ T9875] [ 527.047804][ T9901] usb usb36: usbfs: process 9901 (syz.1.732) did not claim interface 0 before use [ 528.458081][ T9924] __nla_validate_parse: 6 callbacks suppressed [ 528.458107][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.466561][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.468190][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.470867][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.472292][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.473843][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.475186][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.498911][ T9924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.736'. [ 528.556677][ T9927] random: crng reseeded on system resumption [ 528.760801][ T9931] FAULT_INJECTION: forcing a failure. [ 528.760801][ T9931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.860291][ T9931] CPU: 0 UID: 0 PID: 9931 Comm: syz.3.738 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 528.860334][ T9931] Tainted: [U]=USER [ 528.860342][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.860357][ T9931] Call Trace: [ 528.860365][ T9931] [ 528.860376][ T9931] dump_stack_lvl+0x16c/0x1f0 [ 528.860407][ T9931] should_fail_ex+0x512/0x640 [ 528.860438][ T9931] _copy_from_user+0x2e/0xd0 [ 528.860466][ T9931] load_msg+0x253/0x4a0 [ 528.860497][ T9931] do_mq_timedsend+0x3d7/0xc40 [ 528.860530][ T9931] ? __pfx_do_mq_timedsend+0x10/0x10 [ 528.860557][ T9931] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 528.860588][ T9931] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 528.860619][ T9931] ? __fget_files+0x20e/0x3c0 [ 528.860663][ T9931] __x64_sys_mq_timedsend+0x1cd/0x260 [ 528.860692][ T9931] ? ksys_write+0x1ac/0x250 [ 528.860716][ T9931] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 528.860757][ T9931] do_syscall_64+0xcd/0x490 [ 528.860785][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.860810][ T9931] RIP: 0033:0x7fdbe618e9a9 [ 528.860828][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.860851][ T9931] RSP: 002b:00007fdbe70de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 528.860873][ T9931] RAX: ffffffffffffffda RBX: 00007fdbe63b5fa0 RCX: 00007fdbe618e9a9 [ 528.860891][ T9931] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 528.860905][ T9931] RBP: 00007fdbe70de090 R08: 0000000000000000 R09: 0000000000000000 [ 528.860921][ T9931] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 528.860935][ T9931] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 528.860965][ T9931] [ 531.068899][ T9964] random: crng reseeded on system resumption [ 531.314719][ T9958] usb usb36: usbfs: process 9958 (syz.3.743) did not claim interface 0 before use [ 532.323511][ T9980] netlink: 338 bytes leftover after parsing attributes in process `syz.3.748'. [ 532.358974][ T9981] netlink: 338 bytes leftover after parsing attributes in process `syz.3.748'. [ 532.430031][ T9988] FAULT_INJECTION: forcing a failure. [ 532.430031][ T9988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.487103][ T9988] CPU: 0 UID: 0 PID: 9988 Comm: syz.1.750 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 532.487147][ T9988] Tainted: [U]=USER [ 532.487154][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.487169][ T9988] Call Trace: [ 532.487177][ T9988] [ 532.487187][ T9988] dump_stack_lvl+0x16c/0x1f0 [ 532.487220][ T9988] should_fail_ex+0x512/0x640 [ 532.487252][ T9988] should_fail_alloc_page+0xe7/0x130 [ 532.487283][ T9988] prepare_alloc_pages+0x3c2/0x610 [ 532.487316][ T9988] ? rcu_is_watching+0x12/0xc0 [ 532.487346][ T9988] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 532.487375][ T9988] ? __lock_acquire+0xb8a/0x1c90 [ 532.487420][ T9988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.487447][ T9988] ? do_raw_spin_lock+0x12c/0x2b0 [ 532.487483][ T9988] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.487517][ T9988] ? look_up_lock_class+0x6b/0x150 [ 532.487554][ T9988] ? __lock_acquire+0xb8a/0x1c90 [ 532.487585][ T9988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.487631][ T9988] ? policy_nodemask+0xea/0x4e0 [ 532.487663][ T9988] alloc_pages_mpol+0x1fb/0x550 [ 532.487693][ T9988] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 532.487728][ T9988] folio_alloc_mpol_noprof+0x36/0x2f0 [ 532.487760][ T9988] shmem_alloc_folio+0x135/0x160 [ 532.487798][ T9988] shmem_alloc_and_add_folio+0x499/0xc20 [ 532.487838][ T9988] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 532.487875][ T9988] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 532.487904][ T9988] shmem_get_folio_gfp+0x67f/0x1600 [ 532.487936][ T9988] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 532.487964][ T9988] ? filemap_map_pages+0xf6f/0x1680 [ 532.487994][ T9988] shmem_fault+0x1fe/0xa30 [ 532.488020][ T9988] ? __pfx_shmem_fault+0x10/0x10 [ 532.488050][ T9988] ? __pfx_filemap_map_pages+0x10/0x10 [ 532.488087][ T9988] __do_fault+0x10d/0x490 [ 532.488116][ T9988] __handle_mm_fault+0x3c2a/0x5490 [ 532.488161][ T9988] ? __pfx___handle_mm_fault+0x10/0x10 [ 532.488193][ T9988] ? __pfx_mt_find+0x10/0x10 [ 532.488241][ T9988] ? find_vma+0xbf/0x140 [ 532.488268][ T9988] ? __pfx_find_vma+0x10/0x10 [ 532.488299][ T9988] handle_mm_fault+0x589/0xd10 [ 532.488334][ T9988] ? __pkru_allows_pkey+0x51/0xb0 [ 532.488367][ T9988] do_user_addr_fault+0x7a6/0x1370 [ 532.488402][ T9988] ? rcu_is_watching+0x12/0xc0 [ 532.488431][ T9988] exc_page_fault+0x5c/0xb0 [ 532.488455][ T9988] asm_exc_page_fault+0x26/0x30 [ 532.488479][ T9988] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 532.488512][ T9988] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 532.488534][ T9988] RSP: 0018:ffffc90004ce7cc0 EFLAGS: 00050206 [ 532.488573][ T9988] RAX: 0000000000000001 RBX: 0000000000000fd0 RCX: 0000000000000fc8 [ 532.488588][ T9988] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff88805cb6a038 [ 532.488610][ T9988] RBP: 0000000000000ff8 R08: 0000000000000001 R09: ffffed100b96d5ff [ 532.488625][ T9988] R10: ffff88805cb6afff R11: 0000000000000000 R12: 0000000000000000 [ 532.488640][ T9988] R13: ffff88805cb6a008 R14: dffffc0000000000 R15: ffff888020b7de00 [ 532.488675][ T9988] _copy_from_user+0x98/0xd0 [ 532.488704][ T9988] load_msg+0x253/0x4a0 [ 532.488736][ T9988] do_mq_timedsend+0x3d7/0xc40 [ 532.488769][ T9988] ? __pfx_do_mq_timedsend+0x10/0x10 [ 532.488797][ T9988] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 532.488826][ T9988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.488855][ T9988] ? __fget_files+0x20e/0x3c0 [ 532.488900][ T9988] __x64_sys_mq_timedsend+0x1cd/0x260 [ 532.488929][ T9988] ? ksys_write+0x1ac/0x250 [ 532.488952][ T9988] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 532.488994][ T9988] do_syscall_64+0xcd/0x490 [ 532.489021][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.489046][ T9988] RIP: 0033:0x7fc5ebb8e9a9 [ 532.489065][ T9988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.489087][ T9988] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 532.489109][ T9988] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 532.489129][ T9988] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 532.489144][ T9988] RBP: 00007fc5eca20090 R08: 0000000000000000 R09: 0000000000000000 [ 532.489158][ T9988] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 532.489173][ T9988] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 532.489207][ T9988] [ 535.153471][T10040] __nla_validate_parse: 6 callbacks suppressed [ 535.153494][T10040] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.302745][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.353977][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.373163][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.382376][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.415148][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.424701][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 535.435931][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.761'. [ 536.117117][T10059] ptrace attach of "./syz-executor exec"[5892] was attempted by "./syz-executor exec"[10059] [ 536.189559][T10060] ptrace attach of "./syz-executor exec"[5892] was attempted by "./syz-executor exec"[10060] [ 537.434036][T10085] FAULT_INJECTION: forcing a failure. [ 537.434036][T10085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.448146][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.2.773 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 537.448176][T10085] Tainted: [U]=USER [ 537.448181][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.448189][T10085] Call Trace: [ 537.448194][T10085] [ 537.448200][T10085] dump_stack_lvl+0x16c/0x1f0 [ 537.448221][T10085] should_fail_ex+0x512/0x640 [ 537.448239][T10085] _copy_from_user+0x2e/0xd0 [ 537.448255][T10085] load_msg+0x253/0x4a0 [ 537.448273][T10085] do_mq_timedsend+0x3d7/0xc40 [ 537.448292][T10085] ? __pfx_do_mq_timedsend+0x10/0x10 [ 537.448308][T10085] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 537.448326][T10085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.448343][T10085] ? __fget_files+0x20e/0x3c0 [ 537.448370][T10085] __x64_sys_mq_timedsend+0x1cd/0x260 [ 537.448388][T10085] ? ksys_write+0x1ac/0x250 [ 537.448401][T10085] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 537.448424][T10085] do_syscall_64+0xcd/0x490 [ 537.448440][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.448455][T10085] RIP: 0033:0x7f30b3b8e9a9 [ 537.448467][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.448481][T10085] RSP: 002b:00007f30b4924038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 537.448494][T10085] RAX: ffffffffffffffda RBX: 00007f30b3db5fa0 RCX: 00007f30b3b8e9a9 [ 537.448503][T10085] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 537.448512][T10085] RBP: 00007f30b4924090 R08: 0000000000000000 R09: 0000000000000000 [ 537.448520][T10085] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 537.448529][T10085] R13: 0000000000000000 R14: 00007f30b3db5fa0 R15: 00007ffede1bd398 [ 537.448546][T10085] [ 537.951361][T10078] usb usb36: usbfs: process 10078 (syz.3.771) did not claim interface 0 before use [ 538.803352][T10101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.007675][T10101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.014604][T10101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.020987][T10101] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 539.131158][T10096] futex_wake_op: syz.2.774 tries to shift op by -1; fix this program [ 539.192017][T10101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.232642][T10101] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 540.176399][T10137] FAULT_INJECTION: forcing a failure. [ 540.176399][T10137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.226017][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.0.783 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 540.226061][T10137] Tainted: [U]=USER [ 540.226069][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.226083][T10137] Call Trace: [ 540.226091][T10137] [ 540.226101][T10137] dump_stack_lvl+0x16c/0x1f0 [ 540.226133][T10137] should_fail_ex+0x512/0x640 [ 540.226165][T10137] _copy_from_user+0x2e/0xd0 [ 540.226193][T10137] load_msg+0x253/0x4a0 [ 540.226224][T10137] do_mq_timedsend+0x3d7/0xc40 [ 540.226256][T10137] ? __pfx_do_mq_timedsend+0x10/0x10 [ 540.226284][T10137] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 540.226314][T10137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.226345][T10137] ? __fget_files+0x20e/0x3c0 [ 540.226389][T10137] __x64_sys_mq_timedsend+0x1cd/0x260 [ 540.226420][T10137] ? ksys_write+0x1ac/0x250 [ 540.226443][T10137] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 540.226485][T10137] do_syscall_64+0xcd/0x490 [ 540.226512][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.226539][T10137] RIP: 0033:0x7fc246d8e9a9 [ 540.226559][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.226582][T10137] RSP: 002b:00007fc247c92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 540.226606][T10137] RAX: ffffffffffffffda RBX: 00007fc246fb5fa0 RCX: 00007fc246d8e9a9 [ 540.226623][T10137] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 540.226638][T10137] RBP: 00007fc247c92090 R08: 0000000000000000 R09: 0000000000000000 [ 540.226653][T10137] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 540.226667][T10137] R13: 0000000000000000 R14: 00007fc246fb5fa0 R15: 00007ffe5f2172e8 [ 540.226700][T10137] [ 540.804955][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.847643][T10138] usb usb36: usbfs: process 10138 (syz.2.785) did not claim interface 0 before use [ 541.056935][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 541.063014][ T5888] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.220864][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.817712][T10188] FAULT_INJECTION: forcing a failure. [ 542.817712][T10188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.883754][T10188] CPU: 1 UID: 0 PID: 10188 Comm: syz.3.795 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 542.883793][T10188] Tainted: [U]=USER [ 542.883801][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.883815][T10188] Call Trace: [ 542.883822][T10188] [ 542.883831][T10188] dump_stack_lvl+0x16c/0x1f0 [ 542.883865][T10188] should_fail_ex+0x512/0x640 [ 542.883894][T10188] _copy_from_user+0x2e/0xd0 [ 542.883922][T10188] kstrtouint_from_user+0xd6/0x1d0 [ 542.883953][T10188] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 542.883982][T10188] ? __lock_acquire+0xb8a/0x1c90 [ 542.884031][T10188] proc_fail_nth_write+0x83/0x250 [ 542.884066][T10188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 542.884108][T10188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 542.884138][T10188] vfs_write+0x29d/0x1150 [ 542.884168][T10188] ? __pfx___mutex_lock+0x10/0x10 [ 542.884193][T10188] ? __pfx_vfs_write+0x10/0x10 [ 542.884227][T10188] ? __fget_files+0x20e/0x3c0 [ 542.884273][T10188] ksys_write+0x12a/0x250 [ 542.884294][T10188] ? __pfx_ksys_write+0x10/0x10 [ 542.884326][T10188] do_syscall_64+0xcd/0x490 [ 542.884352][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.884377][T10188] RIP: 0033:0x7fdbe618d45f [ 542.884397][T10188] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 542.884419][T10188] RSP: 002b:00007fdbe70de030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 542.884442][T10188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdbe618d45f [ 542.884458][T10188] RDX: 0000000000000001 RSI: 00007fdbe70de0a0 RDI: 0000000000000004 [ 542.884472][T10188] RBP: 00007fdbe70de090 R08: 0000000000000000 R09: 0000000000000000 [ 542.884486][T10188] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000002 [ 542.884501][T10188] R13: 0000000000000000 R14: 00007fdbe63b5fa0 R15: 00007ffd0932b8a8 [ 542.884535][T10188] [ 543.131382][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 543.319904][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.162006][T10208] block nbd9: NBD_DISCONNECT [ 544.379196][T10193] usb usb36: usbfs: process 10193 (syz.0.797) did not claim interface 0 before use [ 546.665906][T10259] netlink: 342 bytes leftover after parsing attributes in process `syz.3.809'. [ 547.522692][T10261] usb usb36: usbfs: process 10261 (syz.2.812) did not claim interface 0 before use [ 547.832892][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 547.852608][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 547.919991][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 547.937258][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 547.951874][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 547.976039][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 548.098243][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 548.110824][T10279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.817'. [ 548.834636][T10310] __vm_enough_memory: pid: 10310, comm: syz.2.822, bytes: 4398046511104 not enough memory for the allocation [ 549.853509][T10331] netlink: 338 bytes leftover after parsing attributes in process `syz.2.828'. [ 550.202116][T10325] usb usb36: usbfs: process 10325 (syz.1.825) did not claim interface 0 before use [ 552.417548][T10387] usb usb36: usbfs: process 10387 (syz.0.843) did not claim interface 0 before use [ 553.287821][T10414] __nla_validate_parse: 15 callbacks suppressed [ 553.288117][T10414] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.426469][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.438479][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.460792][ T50] Bluetooth: hci2: unexpected event 0x3d length: 3 < 14 [ 553.477276][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.520360][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.592760][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.640659][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 553.659831][T10424] random: crng reseeded on system resumption [ 553.790433][T10417] netlink: 338 bytes leftover after parsing attributes in process `syz.2.849'. [ 555.553026][T10448] usb usb36: usbfs: process 10448 (syz.3.856) did not claim interface 0 before use [ 556.211022][T10475] netlink: 338 bytes leftover after parsing attributes in process `syz.2.861'. [ 556.264019][T10475] netlink: 338 bytes leftover after parsing attributes in process `syz.2.861'. [ 558.405192][T10508] usb usb36: usbfs: process 10508 (syz.3.867) did not claim interface 0 before use [ 559.401059][T10546] Process accounting resumed [ 559.544025][T10554] ovs_: entered promiscuous mode [ 559.679514][T10570] __nla_validate_parse: 14 callbacks suppressed [ 559.679538][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.718618][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.758607][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.786150][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.816843][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.835890][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.845139][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 559.862322][T10570] netlink: 338 bytes leftover after parsing attributes in process `syz.3.880'. [ 560.921529][T10583] usb usb36: usbfs: process 10583 (syz.3.883) did not claim interface 0 before use [ 561.233899][T10611] netlink: 338 bytes leftover after parsing attributes in process `syz.2.889'. [ 561.407734][T10611] netlink: 338 bytes leftover after parsing attributes in process `syz.2.889'. [ 561.839767][T10625] mkiss: ax0: crc mode is auto. [ 562.302527][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.308994][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.687841][T10649] usb usb36: usbfs: process 10649 (syz.2.899) did not claim interface 0 before use [ 565.435734][T10688] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 565.548861][T10699] __nla_validate_parse: 14 callbacks suppressed [ 565.548876][T10699] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.564483][T10697] sp0: Synchronizing with TNC [ 565.638431][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.656428][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.713583][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.726782][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.736292][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.747813][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 565.812219][T10703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.911'. [ 566.909518][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 566.934908][T10720] netlink: 354 bytes leftover after parsing attributes in process `syz.0.915'. [ 567.353116][T10718] usb usb36: usbfs: process 10718 (syz.1.914) did not claim interface 0 before use [ 568.746057][T10762] ptrace attach of "./syz-executor exec"[10766] was attempted by "./syz-executor exec"[10762] [ 568.875107][T10768] svc: failed to register nfsdv3 RPC service (errno 111). [ 568.988701][T10768] svc: failed to register nfsaclv3 RPC service (errno 111). [ 571.241844][T10812] usb usb36: usbfs: process 10812 (syz.2.931) did not claim interface 0 before use [ 571.611697][T10840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 571.634830][T10839] random: crng reseeded on system resumption [ 571.746412][T10843] __nla_validate_parse: 19 callbacks suppressed [ 571.746434][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 571.975839][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.055244][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.064839][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.074468][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.083989][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.093622][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.103219][T10843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.944'. [ 572.148741][T10844] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 572.342085][T10855] GUP no longer grows the stack in syz.2.945 (10855): 14000-41000 (4000) [ 572.351759][T10855] CPU: 0 UID: 0 PID: 10855 Comm: syz.2.945 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 572.351786][T10855] Tainted: [U]=USER [ 572.351791][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.351801][T10855] Call Trace: [ 572.351807][T10855] [ 572.351814][T10855] dump_stack_lvl+0x16c/0x1f0 [ 572.351835][T10855] gup_vma_lookup+0x1d2/0x220 [ 572.351856][T10855] __get_user_pages+0x271/0x3b80 [ 572.351882][T10855] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 572.351908][T10855] ? kasan_save_stack+0x42/0x60 [ 572.351924][T10855] ? __pfx___get_user_pages+0x10/0x10 [ 572.351943][T10855] ? register_lock_class+0x41/0x4c0 [ 572.351964][T10855] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 572.351980][T10855] ? do_syscall_64+0xcd/0x490 [ 572.352000][T10855] __gup_longterm_locked+0x20d/0x1840 [ 572.352020][T10855] ? __lock_acquire+0xb8a/0x1c90 [ 572.352042][T10855] ? __pfx___gup_longterm_locked+0x10/0x10 [ 572.352070][T10855] pin_user_pages_remote+0xed/0x140 [ 572.352091][T10855] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 572.352109][T10855] ? mm_access+0x22d/0x2e0 [ 572.352134][T10855] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 572.352161][T10855] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 572.352180][T10855] ? iovec_from_user+0xbb/0x140 [ 572.352205][T10855] ? iovec_from_user+0xbb/0x140 [ 572.352223][T10855] process_vm_rw+0x216/0x2c0 [ 572.352240][T10855] ? __pfx_process_vm_rw+0x10/0x10 [ 572.352262][T10855] ? __pfx_blkdev_write_iter+0x10/0x10 [ 572.352295][T10855] ? xfd_validate_state+0x61/0x180 [ 572.352314][T10855] ? __task_pid_nr_ns+0x17c/0x500 [ 572.352336][T10855] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 572.352353][T10855] ? do_syscall_64+0x91/0x490 [ 572.352366][T10855] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.352379][T10855] do_syscall_64+0xcd/0x490 [ 572.352395][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.352409][T10855] RIP: 0033:0x7f30b3b8e9a9 [ 572.352422][T10855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.352436][T10855] RSP: 002b:00007f30b4924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 572.352450][T10855] RAX: ffffffffffffffda RBX: 00007f30b3db5fa0 RCX: 00007f30b3b8e9a9 [ 572.352459][T10855] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 00000000000003c0 [ 572.352468][T10855] RBP: 00007f30b3c10d69 R08: 0000000000000003 R09: 0000000000000000 [ 572.352476][T10855] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 572.352485][T10855] R13: 0000000000000000 R14: 00007f30b3db5fa0 R15: 00007ffede1bd398 [ 572.352504][T10855] [ 572.424901][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.626540][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.174378][T10883] ubi0: attaching mtd0 [ 574.185976][T10883] ubi0: scanning is finished [ 574.201132][T10883] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 574.505946][T10883] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 575.054073][T10892] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 575.095502][T10892] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 575.126155][T10896] netlink: 338 bytes leftover after parsing attributes in process `syz.1.954'. [ 575.142218][T10896] netlink: 338 bytes leftover after parsing attributes in process `syz.1.954'. [ 575.151459][T10892] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 575.205902][T10892] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 575.214603][T10892] page dumped because: unmovable page [ 575.263063][T10892] page_owner tracks the page as allocated [ 575.295371][T10892] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5882, tgid 5882 (syz-executor), ts 340206722768, free_ts 337459979943 [ 575.367629][T10892] post_alloc_hook+0x1c0/0x230 [ 575.372541][T10892] get_page_from_freelist+0x1321/0x3890 [ 575.514220][T10892] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 575.537911][T10899] usb usb36: usbfs: process 10899 (syz.2.952) did not claim interface 0 before use [ 575.568164][T10892] alloc_pages_mpol+0x1fb/0x550 [ 575.594108][T10892] alloc_pages_noprof+0x131/0x390 [ 575.599241][T10892] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 575.605886][T10892] vmalloc_user_noprof+0x9e/0xe0 [ 575.610910][T10892] kcov_ioctl+0x4c/0x730 [ 575.632724][T10892] __x64_sys_ioctl+0x18e/0x210 [ 575.649586][T10892] do_syscall_64+0xcd/0x490 [ 575.654744][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.661246][T10892] page last free pid 5876 tgid 5876 stack trace: [ 575.668761][T10892] __free_frozen_pages+0x7fe/0x1180 [ 575.676269][T10892] vfree+0x1fd/0xb50 [ 575.680343][T10892] kcov_close+0x34/0x60 [ 575.685092][T10892] __fput+0x402/0xb70 [ 575.689229][T10892] fput_close_sync+0x118/0x260 [ 575.694654][T10892] __x64_sys_close+0x8b/0x120 [ 575.699560][T10892] do_syscall_64+0xcd/0x490 [ 575.709621][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.050150][T10924] FAULT_INJECTION: forcing a failure. [ 576.050150][T10924] name failslab, interval 1, probability 0, space 0, times 0 [ 576.067181][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.0.960 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 576.067210][T10924] Tainted: [U]=USER [ 576.067215][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.067224][T10924] Call Trace: [ 576.067229][T10924] [ 576.067236][T10924] dump_stack_lvl+0x16c/0x1f0 [ 576.067258][T10924] should_fail_ex+0x512/0x640 [ 576.067274][T10924] ? __kmalloc_noprof+0xbf/0x510 [ 576.067292][T10924] ? lsm_blob_alloc+0x68/0x90 [ 576.067307][T10924] should_failslab+0xc2/0x120 [ 576.067324][T10924] __kmalloc_noprof+0xd2/0x510 [ 576.067342][T10924] lsm_blob_alloc+0x68/0x90 [ 576.067357][T10924] security_sk_alloc+0x30/0x270 [ 576.067378][T10924] sk_prot_alloc+0x1c7/0x2a0 [ 576.067398][T10924] sk_alloc+0x36/0xc20 [ 576.067412][T10924] __netlink_create+0x5e/0x2c0 [ 576.067425][T10924] ? __wake_up+0x3f/0x60 [ 576.067443][T10924] netlink_create+0x39e/0x620 [ 576.067457][T10924] ? __pfx_genl_bind+0x10/0x10 [ 576.067474][T10924] ? __pfx_genl_unbind+0x10/0x10 [ 576.067490][T10924] ? __pfx_genl_release+0x10/0x10 [ 576.067510][T10924] __sock_create+0x335/0x8d0 [ 576.067539][T10924] __sys_socket+0x14d/0x260 [ 576.067560][T10924] ? __pfx___sys_socket+0x10/0x10 [ 576.067580][T10924] ? xfd_validate_state+0x61/0x180 [ 576.067600][T10924] ? __pfx___do_sys_close_range+0x10/0x10 [ 576.067619][T10924] __x64_sys_socket+0x72/0xb0 [ 576.067638][T10924] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.067652][T10924] do_syscall_64+0xcd/0x490 [ 576.067668][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.067683][T10924] RIP: 0033:0x7fc246d8e9a9 [ 576.067696][T10924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.067710][T10924] RSP: 002b:00007fc247c92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 576.067728][T10924] RAX: ffffffffffffffda RBX: 00007fc246fb5fa0 RCX: 00007fc246d8e9a9 [ 576.067738][T10924] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 576.067747][T10924] RBP: 00007fc246e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 576.067755][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.067764][T10924] R13: 0000000000000000 R14: 00007fc246fb5fa0 R15: 00007ffe5f2172e8 [ 576.067787][T10924] [ 576.299884][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.688339][T10933] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 577.388511][T10948] __nla_validate_parse: 6 callbacks suppressed [ 577.388526][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.497599][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.580438][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.589741][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.599726][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.617271][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 577.789277][T10953] Invalid ELF header magic: != ELF [ 578.039500][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 578.109761][T10948] netlink: 338 bytes leftover after parsing attributes in process `syz.0.964'. [ 578.869572][T10971] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 579.923468][T10984] FAULT_INJECTION: forcing a failure. [ 579.923468][T10984] name fail_futex, interval 1, probability 0, space 0, times 0 [ 579.961533][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.0.972 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 579.961581][T10984] Tainted: [U]=USER [ 579.961589][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.961605][T10984] Call Trace: [ 579.961614][T10984] [ 579.961624][T10984] dump_stack_lvl+0x16c/0x1f0 [ 579.961658][T10984] should_fail_ex+0x512/0x640 [ 579.961690][T10984] get_futex_key+0x1d0/0x1540 [ 579.961729][T10984] ? __pfx_get_futex_key+0x10/0x10 [ 579.961756][T10984] ? plist_check_head+0xa3/0x150 [ 579.961789][T10984] ? find_held_lock+0x2b/0x80 [ 579.961821][T10984] ? __futex_hash.constprop.0+0x1e9/0x440 [ 579.961848][T10984] futex_wake+0xe7/0x4e0 [ 579.961882][T10984] ? __pfx_futex_wake+0x10/0x10 [ 579.961920][T10984] ? __do_sys_mremap+0x5d4/0x1590 [ 579.961942][T10984] ? ksys_write+0x190/0x250 [ 579.961973][T10984] do_futex+0x1e3/0x350 [ 579.962000][T10984] ? __pfx_do_futex+0x10/0x10 [ 579.962026][T10984] ? __fget_files+0x204/0x3c0 [ 579.962064][T10984] __x64_sys_futex+0x1e0/0x4c0 [ 579.962100][T10984] ? __pfx___x64_sys_futex+0x10/0x10 [ 579.962143][T10984] do_syscall_64+0xcd/0x490 [ 579.962173][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.962209][T10984] RIP: 0033:0x7fc246d8e9a9 [ 579.962231][T10984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.962255][T10984] RSP: 002b:00007fc247c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 579.962279][T10984] RAX: ffffffffffffffda RBX: 00007fc246fb5fa8 RCX: 00007fc246d8e9a9 [ 579.962296][T10984] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc246fb5fac [ 579.962312][T10984] RBP: 00007fc246fb5fa0 R08: 00007fc247c93000 R09: 0000000000000000 [ 579.962328][T10984] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc246fb5fac [ 579.962344][T10984] R13: 0000000000000000 R14: 00007ffe5f217200 R15: 00007ffe5f2172e8 [ 579.962378][T10984] [ 580.167336][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.506957][T10992] FAULT_INJECTION: forcing a failure. [ 580.506957][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 580.536030][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.1.975 Tainted: G U 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 580.536078][T10992] Tainted: [U]=USER [ 580.536086][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.536102][T10992] Call Trace: [ 580.536111][T10992] [ 580.536121][T10992] dump_stack_lvl+0x16c/0x1f0 [ 580.536154][T10992] should_fail_ex+0x512/0x640 [ 580.536180][T10992] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 580.536212][T10992] should_failslab+0xc2/0x120 [ 580.536243][T10992] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 580.536269][T10992] ? vma_merge_new_range+0x37f/0xa00 [ 580.536292][T10992] ? vm_area_alloc+0x1f/0x160 [ 580.536332][T10992] vm_area_alloc+0x1f/0x160 [ 580.536365][T10992] __mmap_region+0xf0a/0x25e0 [ 580.536403][T10992] ? __pfx___mmap_region+0x10/0x10 [ 580.536430][T10992] ? rcu_is_watching+0x12/0xc0 [ 580.536464][T10992] ? rcu_is_watching+0x12/0xc0 [ 580.536490][T10992] ? trace_sched_exit_tp+0xde/0x130 [ 580.536520][T10992] ? __schedule+0x1181/0x5dd0 [ 580.536553][T10992] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.536583][T10992] ? __lock_acquire+0xb20/0x1c90 [ 580.536627][T10992] ? __pfx___schedule+0x10/0x10 [ 580.536701][T10992] ? trace_cap_capable+0x18d/0x200 [ 580.536744][T10992] mmap_region+0x1ab/0x3f0 [ 580.536769][T10992] ? __get_unmapped_area+0x267/0x440 [ 580.536805][T10992] do_mmap+0xa3e/0x1210 [ 580.536842][T10992] ? __pfx_do_mmap+0x10/0x10 [ 580.536874][T10992] ? __pfx_down_write_killable+0x10/0x10 [ 580.536902][T10992] ? __do_sys_mremap+0x5d4/0x1590 [ 580.536934][T10992] vm_mmap_pgoff+0x281/0x450 [ 580.536972][T10992] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 580.537010][T10992] ? __x64_sys_futex+0x1e0/0x4c0 [ 580.537038][T10992] ? __x64_sys_futex+0x1e9/0x4c0 [ 580.537073][T10992] ksys_mmap_pgoff+0x7d/0x5c0 [ 580.537102][T10992] ? xfd_validate_state+0x61/0x180 [ 580.537132][T10992] ? __task_pid_nr_ns+0x17c/0x500 [ 580.537167][T10992] __x64_sys_mmap+0x125/0x190 [ 580.537205][T10992] do_syscall_64+0xcd/0x490 [ 580.537233][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.537259][T10992] RIP: 0033:0x7fc5ebb8e9a9 [ 580.537279][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.537300][T10992] RSP: 002b:00007fc5eca20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 580.537322][T10992] RAX: ffffffffffffffda RBX: 00007fc5ebdb5fa0 RCX: 00007fc5ebb8e9a9 [ 580.537338][T10992] RDX: 00004000000000df RSI: 0000000000020007 RDI: 0000000000000000 [ 580.537354][T10992] RBP: 00007fc5ebc10d69 R08: 0000000000000401 R09: 0000000000008000 [ 580.537368][T10992] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 580.537383][T10992] R13: 0000000000000000 R14: 00007fc5ebdb5fa0 R15: 00007ffcd904b8e8 [ 580.537423][T10992] [ 580.543752][T10994] netlink: 338 bytes leftover after parsing attributes in process `syz.2.976'. [ 580.675928][T10995] netlink: 342 bytes leftover after parsing attributes in process `syz.3.974'. [ 581.525712][T11008] usb usb36: usbfs: process 11008 (syz.0.979) did not claim interface 0 before use [ 582.002229][ T50] Bluetooth: hci2: Malformed Event: 0x02 [ 582.417631][T11042] __nla_validate_parse: 8 callbacks suppressed [ 582.417654][T11042] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.461561][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.500811][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.530753][T11015] kexec: Could not allocate control_code_buffer [ 582.533952][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.602273][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.632825][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.668503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.681005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.693319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.705611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.718019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.730348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.742646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.754979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.767263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.779529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.054240][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 584.491856][T11044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.987'. [ 586.356002][T11063] usb usb36: usbfs: process 11063 (syz.2.991) did not claim interface 0 before use [ 587.651316][ C0] net_ratelimit: 12017 callbacks suppressed [ 587.651339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.670202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.682603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.694924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.707252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.719717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.732038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.744362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.756682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.769107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.635319][ C1] net_ratelimit: 16150 callbacks suppressed [ 592.635347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 592.635549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.641825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 592.653887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.665749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 592.677787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.689673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 592.701672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.713565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 592.725674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.067209][ C1] sched: DL replenish lagged too much [ 597.619374][ C0] net_ratelimit: 16717 callbacks suppressed [ 597.619402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.619712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 597.626047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.637888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 597.649943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.661884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 597.674023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.685871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 597.697940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.709811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 602.603744][ C0] net_ratelimit: 10832 callbacks suppressed [ 602.603770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.604023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 602.611671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.622697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 602.636000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.646590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 602.659909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.670531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 602.683896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.694435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.587406][ C1] net_ratelimit: 10484 callbacks suppressed [ 607.587432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.588447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.593976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.607336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.618058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.631393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.641972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.655847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.666144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 607.679459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.571849][ C1] net_ratelimit: 10808 callbacks suppressed [ 612.571874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 612.571919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.578389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 612.592071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.602319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 612.616041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.626401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 612.639961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.650366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 612.663831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.555690][ C1] net_ratelimit: 10811 callbacks suppressed [ 617.555722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 617.556510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.562839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 617.575731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.586131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 617.599584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.610162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 617.623812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.634174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 617.647575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.539692][ C1] net_ratelimit: 10966 callbacks suppressed [ 622.539719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 622.540232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.546272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 622.559556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.570483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 622.583644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.594473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 622.607672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.618413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 622.631577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.694460][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.720190][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.523852][ C1] net_ratelimit: 10656 callbacks suppressed [ 627.523877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 627.524200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.530361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 627.543967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.554428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 627.567850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.578277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 627.591729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.602207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 627.615675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.508245][ C1] net_ratelimit: 10887 callbacks suppressed [ 632.508272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 632.509585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.514777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 632.528161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.538683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 632.552092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.562694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 632.576036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.586609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 632.600239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.491967][ C1] net_ratelimit: 12630 callbacks suppressed [ 637.491992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 637.492305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.498734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 637.510917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.522718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 637.534517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.546730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 637.559842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.570605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 637.582548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.475944][ C1] net_ratelimit: 12623 callbacks suppressed [ 642.475971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 642.476242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.482446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 642.496304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.506662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 642.518775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.530500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 642.542465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.554517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 642.567906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.460102][ C1] net_ratelimit: 12724 callbacks suppressed [ 647.460128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 647.461744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.466609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 647.478822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.490669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 647.502676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.514751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 647.528042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.538599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 647.550736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.444508][ C1] net_ratelimit: 12911 callbacks suppressed [ 652.444534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 652.445012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.451028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 652.463148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.474951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 652.486893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.498988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 652.512172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.522949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 652.534991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.428625][ C0] net_ratelimit: 12857 callbacks suppressed [ 657.428652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.428672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 657.429199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 657.435084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.447160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 657.460455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.471210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 657.483227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.495114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 657.506921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.412332][ C0] net_ratelimit: 13059 callbacks suppressed [ 662.412359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.412635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 662.418774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.430901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 662.444071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.454829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 662.466908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.478719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 662.490700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.502700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.396872][ C1] net_ratelimit: 12909 callbacks suppressed [ 667.396900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.396973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.403450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.415530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.428310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.439394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.451481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.464708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.475401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 667.487463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.380674][ C0] net_ratelimit: 12702 callbacks suppressed [ 672.380701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.380767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 672.387341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.399181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 672.411143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.423160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 672.436403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.447120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 672.459167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.471008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.364624][ C1] net_ratelimit: 13113 callbacks suppressed [ 677.364651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.364976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.371207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.384972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.395344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.407398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.419215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.431330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.443447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 677.456834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.348880][ C0] net_ratelimit: 12744 callbacks suppressed [ 682.348907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.348968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 682.355375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.367471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 682.380832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.391298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 682.403431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.415213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 682.427252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.439221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.332785][ C1] net_ratelimit: 13224 callbacks suppressed [ 687.332812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.332886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.339335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.351323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.363296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.376752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.387284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.399577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.411423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 687.423262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.216691][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.241412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.317069][ C1] net_ratelimit: 13071 callbacks suppressed [ 692.317106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 692.318207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.323638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 692.335748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.347617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 692.359477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.371562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 692.384985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.395598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 692.407612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.530448][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 693.537450][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11039/2:b..l [ 693.545976][ C1] rcu: (detected by 1, t=10503 jiffies, g=36565, q=2961 ncpus=2) [ 693.553812][ C1] task:syz.1.986 state:R running task stack:25032 pid:11039 tgid:11039 ppid:5885 task_flags:0x20400040 flags:0x00004006 [ 693.568839][ C1] Call Trace: [ 693.572151][ C1] [ 693.575111][ C1] __schedule+0x116a/0x5dd0 [ 693.579836][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 693.584646][ C1] ? __bpf_address_lookup+0x340/0x340 [ 693.590070][ C1] ? __kernel_text_address+0xd/0x40 [ 693.595309][ C1] ? unwind_get_return_address+0x59/0xa0 [ 693.600995][ C1] ? __pfx___schedule+0x10/0x10 [ 693.605919][ C1] preempt_schedule_irq+0x51/0x90 [ 693.610976][ C1] irqentry_exit+0x36/0x90 [ 693.615440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.621468][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 693.626793][ C1] Code: 0f c1 05 e8 63 37 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 fd 21 37 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 693.646458][ C1] RSP: 0018:ffffc9000212ec20 EFLAGS: 00000206 [ 693.652559][ C1] RAX: 4bccb0ffc2732f00 RBX: ffffffff8e5c4c80 RCX: ffffc9000212ec2c [ 693.660572][ C1] RDX: 0000000000000001 RSI: ffffffff8de04ada RDI: ffffffff8c155ee0 [ 693.668595][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 693.676604][ C1] R10: 0000000000000000 R11: 0000000000011f79 R12: ffffffff816a9ac4 [ 693.684732][ C1] R13: 0000000000000206 R14: ffff88802fae8000 R15: 0000000000000002 [ 693.692764][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 693.698040][ C1] unwind_next_frame+0x3f9/0x20a0 [ 693.703116][ C1] ? kasan_save_stack+0x33/0x60 [ 693.708011][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.714215][ C1] arch_stack_walk+0x94/0x100 [ 693.718931][ C1] ? kasan_save_track+0x14/0x30 [ 693.723827][ C1] stack_trace_save+0x8e/0xc0 [ 693.728556][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 693.733974][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 693.738970][ C1] kasan_save_stack+0x33/0x60 [ 693.743832][ C1] ? kasan_save_stack+0x33/0x60 [ 693.748806][ C1] kasan_save_track+0x14/0x30 [ 693.753527][ C1] __kasan_kmalloc+0xaa/0xb0 [ 693.758160][ C1] kmem_cache_free+0x142/0x4d0 [ 693.762960][ C1] ? mempool_free+0xe7/0x3b0 [ 693.767603][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 693.773583][ C1] ? __pfx_mempool_free_slab+0x10/0x10 [ 693.779082][ C1] mempool_free+0xe7/0x3b0 [ 693.783544][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 693.789132][ C1] bio_put+0x355/0x5b0 [ 693.793248][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 693.798860][ C1] bio_endio+0x70a/0x850 [ 693.803141][ C1] ? blk_account_io_completion.part.0+0x146/0x280 [ 693.809598][ C1] blk_update_request+0x96b/0x1630 [ 693.814760][ C1] blk_mq_end_request+0x5b/0x630 [ 693.819829][ C1] blk_mq_complete_request+0x8b/0xb0 [ 693.825188][ C1] null_queue_rq+0xb69/0xfd0 [ 693.829831][ C1] null_queue_rqs+0xe9/0x2f0 [ 693.834464][ C1] ? __pfx_null_queue_rqs+0x10/0x10 [ 693.839704][ C1] __blk_mq_flush_list+0x97/0xc0 [ 693.844687][ C1] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 693.850978][ C1] blk_mq_flush_plug_list+0x1f2/0x600 [ 693.856400][ C1] ? update_io_ticks+0x137/0x2a0 [ 693.861384][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 693.867345][ C1] ? __pfx_update_io_ticks+0x10/0x10 [ 693.872791][ C1] ? blk_add_trace_bio+0xe9/0x4a0 [ 693.877862][ C1] blk_add_rq_to_plug+0x1ca/0x540 [ 693.882978][ C1] blk_mq_submit_bio+0x18d5/0x26a0 [ 693.888148][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 693.893654][ C1] ? __lock_acquire+0x622/0x1c90 [ 693.898661][ C1] ? __lock_acquire+0x622/0x1c90 [ 693.903681][ C1] __submit_bio+0x3cf/0x690 [ 693.908251][ C1] ? __pfx___submit_bio+0x10/0x10 [ 693.913427][ C1] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 693.919277][ C1] submit_bio_noacct_nocheck+0x660/0xd30 [ 693.924972][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 693.931185][ C1] ? __pfx___might_resched+0x10/0x10 [ 693.936527][ C1] ? copy_to_kernel_nofault+0x151/0x2e0 [ 693.942140][ C1] submit_bio_noacct+0x50d/0x1eb0 [ 693.947231][ C1] __block_write_full_folio+0x735/0xe00 [ 693.952841][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 693.958370][ C1] block_write_full_folio+0x341/0x400 [ 693.963905][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 693.969332][ C1] blkdev_writepages+0xb8/0x140 [ 693.974213][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 693.979893][ C1] ? do_writepages+0x4b7/0x600 [ 693.984698][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 693.990193][ C1] do_writepages+0x27a/0x600 [ 693.994831][ C1] ? __pfx_do_writepages+0x10/0x10 [ 694.000002][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 694.005337][ C1] ? _raw_spin_unlock+0x28/0x50 [ 694.010236][ C1] filemap_fdatawrite_wbc+0x104/0x160 [ 694.015999][ C1] ? kasan_save_stack+0x33/0x60 [ 694.021317][ C1] __filemap_fdatawrite_range+0xb2/0xf0 [ 694.026932][ C1] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 694.033302][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.040589][ C1] ? locks_remove_file+0x399/0x5c0 [ 694.045940][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 694.051282][ C1] filemap_write_and_wait_range+0xa3/0x130 [ 694.057231][ C1] bdev_release+0x4d3/0x6d0 [ 694.062003][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 694.067328][ C1] blkdev_release+0x15/0x20 [ 694.071878][ C1] __fput+0x402/0xb70 [ 694.075936][ C1] task_work_run+0x14d/0x240 [ 694.080573][ C1] ? __pfx_task_work_run+0x10/0x10 [ 694.086591][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 694.092533][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 694.097879][ C1] do_syscall_64+0x3f6/0x490 [ 694.102507][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.108433][ C1] RIP: 0033:0x7fc5ebb8e9a9 [ 694.112874][ C1] RSP: 002b:00007ffcd904ba48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 694.121420][ C1] RAX: 0000000000000000 RBX: 00007fc5ebdb7ba0 RCX: 00007fc5ebb8e9a9 [ 694.129514][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 694.137552][ C1] RBP: 00007fc5ebdb7ba0 R08: 0000000000056d24 R09: 0000001ed904bd3f [ 694.145641][ C1] R10: 00007fc5ebdb7ac0 R11: 0000000000000246 R12: 000000000008f26f [ 694.153645][ C1] R13: 00007ffcd904bb40 R14: ffffffffffffffff R15: 00007ffcd904bb60 [ 694.161672][ C1] [ 697.300933][ C0] net_ratelimit: 11767 callbacks suppressed [ 697.300965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.301283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 697.308641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.319436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 697.331589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.343499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 697.355364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.367601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 697.380750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.391841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.285431][ C0] net_ratelimit: 12239 callbacks suppressed [ 702.285456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.285468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.286039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.291895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.304011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.317788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.328609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.340730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.352809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:21:98:32:6d:e8, vlan:0) [ 702.364485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)