last executing test programs: 1m12.759792217s ago: executing program 2 (id=497): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="024e", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x240409c0}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00fbe18d073ba65c6df9cd1c8d10ea3ad6d7ac15", @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_clone(0x84000000, &(0x7f00000000c0)="54ff9460094e1572888c05254356e02b71ec07edddaad2dff3bcba074fc95dc29a2fc65a0479", 0x26, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000340)="b54930fc101f7af7c8731733f59c6b5a881adbedcbfa65200e53ca978827f6af7c915b2b6dc514cc54dd60045d4b17df5786568f71c4a3e99c1d87599c82d46d83ee80b18fa90edbf1796d469eb963040ce3951d8a91d02afb091fb4eed98b25ba7c9a43d7a543ee2c372008a8b171d24cf0f5b502f96f3ca7e413fc74c12bc4529ff431a09d9de168600985844513fb38b9ecf405a4b5173651751b646708862119b2e5a69a0d474a7caacba467e47e5d28ea0f578e2dd48f2765e06d57f80ce04b1cef4a3892b9a40127681dad4740731963305e87c3b7d5ae00d6352f224ae699d251a8f88f1c628f3245f1957d201ec5a2e8d2e6") recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) 1m12.496854909s ago: executing program 2 (id=498): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, &(0x7f0000000180)=0x1000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r2, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x10000, 0x8000000000000000, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xb7}, 0x9, 0x8, 0x4, 0x2e) clone$auto(0x20003b4a, 0x10001, 0x0, 0x0, 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) madvise$auto(0x10800, 0xfffffffffffefffd, 0x17) 1m11.865252814s ago: executing program 1 (id=502): socket(0x2, 0x3, 0xa) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffff00, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x0, 0x40eb1, 0x401, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) read$auto_proc_mem_operations_base(r1, &(0x7f0000000340)=""/230, 0xe6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) 1m11.019582155s ago: executing program 0 (id=505): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "974c853b5c496c3e79440f1e250b"}, 0x6a) (async) connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), r2) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="efff289d7000ffdbdf2503000000050002"], 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x800) (async) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140)="48ae9d216563fda73722ccfcffffffe65bf3d9d46ffdfcac45d1aa15e1727f7ae841047258646577a870057420e795f767462e06c381ab39c7646b3784a01f2610af75bd782a4e7454187f689a6aeb3e6d11df139269506d573f7c43218065e68eb767eb72465317d2e1a68702b2cf5afcfb6b1f953e29cb091a74a9f236607d154030b1a834edc4b24317ff58fcddbc88e3971de647a181907008a0f7f9ec1c0075a08c6f572a054746a2", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0xd, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033ded73d07dadd6f419694d591eca83620000e3ff00", @raw=0x4000001}) 1m10.989145449s ago: executing program 1 (id=506): r0 = prctl$auto(0x5, 0xfffffffffffffffd, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x2, 0x400008, 0x400000000df, 0x75, 0x2, 0x8000) socket(0x15, 0x5, 0x0) arch_prctl$auto(0x3, 0x1) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) close_range$auto(0x2, 0xa, 0x0) (async) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) (async) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syslog$auto(0xffffffff, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r4 = socket(0x2, 0x80002, 0x73) bind$auto(r4, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) getpgid(0xffffffffffffffff) (async) gettid() (async) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[], 0x12e4}, 0x1, 0x0, 0x0, 0x4000054}, 0x20040801) getdents$auto(r5, 0x0, 0x3f1) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 1m10.577077474s ago: executing program 0 (id=508): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), r0) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x1, 0x50000000, 0x0, [0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) pipe$auto(0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0xfa, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) read$auto_dai_list_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m10.158019546s ago: executing program 2 (id=511): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) write$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x0, 0x100000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) r2 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x44000, 0x0) pipe$auto(&(0x7f00000000c0)=r2) (async) epoll_create$auto(0x4) (async) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async) epoll_create$auto(0x3e) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) io_uring_setup$auto(0x7, 0x0) (async) read$auto(0x3, 0x0, 0x8002) (async) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) (async) mmap$auto(0x0, 0x2000c, 0x2000000000000df, 0x8020eb1, 0x40000000000a5, 0x8000) 1m10.0948931s ago: executing program 3 (id=512): rseq$auto(&(0x7f0000000000)={0x401, 0x80000401, 0x8000000000000000, 0x6, 0xfffffffe, 0x2, "2a9dd64827c6e0c8f3a61a732c3dcc83edd6ccf75c12471234c6708465783995423542a40801c8e9e152e1c219843abda4"}, 0x4000008, 0x0, 0x6) poll$auto(0x0, 0x0, 0x9f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r0, 0xfff) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/err\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) close_range$auto(r1, r1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0xbd, 0x22020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x161a82, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xacc0, 0x0) ioctl$auto(0x3, 0x5309, 0x38) write$auto_nsim_psample_enable_fops_psample(r2, &(0x7f00000005c0)="59c91998", 0x4) sysfs$auto(0x2, 0x1e, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) fsconfig$auto_SHMEM_HUGE_ADVISE(r3, 0x2, &(0x7f00000000c0)=',%!/\xd4\t\xfa\xe932\x1fn\xcd/q\x82\x0e-%,\x00', &(0x7f0000000180)="1db7b0499831b6253140ee308fd21e717e141b67bc326b6881cd5f489ac606b81406932804d8e23723efb38df37ee4e0643d95327c484bf8fbe21c2df07989a79b4cc032402a1e866e31bbfd8f61e13d7932bf8b8d8d1a0c841efc8372a5f1f2efc130c8eabf21da2e35a48ff1d49f29fe627b49803d650c6c9d555e83845e56b347", 0x3) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0xa, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1m9.897407583s ago: executing program 1 (id=513): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8af81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x7f, "4c83486dbb68c058fe4b2e12b91064cd57afad3b00"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4008ae48, r0) 1m9.711311002s ago: executing program 1 (id=514): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getsockopt$auto(0xffffffffffffffff, 0x3a, 0x3, 0x0, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x81, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0xfffffffe, 0xa, 0x7, 0x8, 0xffffffffffffffff, [], {0x3, 0x6, 0xf, 0x29f, 0x2, 0xfffffff9, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) (async) io_uring_setup$auto(0xd360, &(0x7f0000000000)={0x7ffffffc, 0x10002, 0x7f, 0x7, 0x6, 0x5, r1, [], {0x5, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000003, 0xfff, 0x68, 0xfffffff9, 0x4, 0xfffffff7, 0xb1}}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) (async) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x832, 0x34, 0x1ff, 0x6, 0xffff, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x8, 0x8]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xd}) 1m9.517441819s ago: executing program 3 (id=515): socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x2, &(0x7f00000000c0), 0xd) (async) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r0, 0x0, @sival_ptr=0x0}}}) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) (async) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x101, &(0x7f0000000340), 0x3, 0x0, 0x0}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7f"}) (async) socket(0x2, 0x80000, 0xa) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x5, 0x0, 0x261) (async) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000300)="00000000000086b76936299793c41ecd706863efcb6f53d06906d9d521") ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) (async) write$auto(r1, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) (async) r3 = socket(0x2000000000000021, 0x4, 0x10000000000002) (async) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r3, 0x110, 0x4, 0x0, 0x4) 1m9.315346051s ago: executing program 0 (id=516): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7f, 0x800000000000009, 0x2, 0x1d2c, 0x2, 0x4, 0x8000000015f4da0e, 0x6, 0x9, 0x100000000000000b, 0x8, 0x4, 0xfca, 0x7, 0x2, 0x4000000000040e]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00+\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x22, 0x6, 0x8003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x100) setsockopt$auto(r0, 0x3, 0x2, 0x0, 0xb) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x8982, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x36d000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x4, 0x0, 0x1c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1m9.037945335s ago: executing program 2 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7f, 0x0) r2 = socket(0xa, 0x801, 0x84) r3 = socket(0xa, 0x3, 0xff) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r5, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x1ac}}, 0x40004) read$auto(0x3, 0x0, 0xf34) writev$auto(r3, &(0x7f00000011c0)={0x0, 0x4}, 0xef) getsockopt$auto(r2, 0x84, 0x7f, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1m8.834522369s ago: executing program 3 (id=518): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x55) r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x2, 0xa00009, 0x400004, 0x11, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x738, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x23, 0xa, 0xa) close_range$auto(0x2, 0xa, 0x0) 1m8.625401049s ago: executing program 1 (id=519): setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x3, 0x41, &(0x7f0000000000)='\'.\x00', 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x3, 0x41, &(0x7f0000000000)='\'.\x00', 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) 1m8.536228269s ago: executing program 2 (id=520): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0b", 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x0, 0x2) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001040), 0x82f80, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x3f5c01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x80000000000002d9) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001080)=ANY=[@ANYBLOB="a9b3fcffffffffffffff0909", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf251000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) keyctl$auto_KEYCTL_REJECT(0x13, 0x10001, 0x181, 0x7fffffffffffffff, 0x9) readv$auto(r4, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) fstat$auto(r2, &(0x7f0000001180)={0x8000000000000001, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x4, 0xcc5, 0x8000000000000001, 0x11a7, 0x6, 0x1, 0xe, 0x80, 0x1, 0xfffffffffffffff3}) 1m8.408695903s ago: executing program 3 (id=521): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = socket(0xa, 0x5, 0x84) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) (async) r2 = getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) setsockopt$auto(r0, 0x82, 0x5, 0x0, 0x9c) mmap$auto(0x100000000400, 0x9, 0x9, 0x13, 0xffffffffffffffff, 0x8001) r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/ns/cgroup\x00', 0x2000, 0x0) mmap$auto(0x800000000000, 0x400008, 0xde, 0x13, r3, 0x8000) (async) mmap$auto(0x800000000000, 0x400008, 0xde, 0x13, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r4, r4, 0x0, 0xad6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000140)=0x6) (async) ioctl$auto_IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_settime$auto(0x14, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) (async) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) madvise$auto(0x0, 0x200007, 0x8) r6 = prctl$auto_PR_SET_SECCOMP(0x16, 0xffffffffffffffff, 0x32b, 0xfffffffffffff41b, 0x5) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)="381c586d74a850e4e3") (async) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)="381c586d74a850e4e3") 1m8.289009567s ago: executing program 0 (id=522): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x40000023, 0x2, 0x6}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m8.19768847s ago: executing program 1 (id=523): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) timer_settime$auto(0x3, 0x368, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) bpf$auto(0x0, 0x0, 0xa3) sendfile$auto(r1, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r4 = open(0x0, 0x22240, 0x155) madvise$auto(0x2, 0x3, 0x10) write$auto_configfs_file_operations_configfs_internal(r4, &(0x7f0000000000)="6b78afd3aa858292657c03b991be6f897f6b84e616e29fc44c293181e2531eb84ce7e0037f1bb778276a72aa77f7dfedd216fff3467560312924322cd9bb736a4638b7de983b39b7e954cf41da3bde8a93", 0x51) 1m8.075366831s ago: executing program 3 (id=524): r0 = socket(0x10, 0x2, 0xc) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xf5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) read$auto_nst_seq_fops_netdebug(r1, &(0x7f0000000140)=""/246, 0xf6) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xd0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0xb4, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) 1m6.789580609s ago: executing program 0 (id=527): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SAR_SPEC={0x29c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0xac, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xdcf}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xbc9b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf3b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff0000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xe}, @NL80211_SAR_ATTR_SPECS={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5940}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x665}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xde0d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe0}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xcd4d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}, @NL80211_SAR_ATTR_SPECS={0x128, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf1c3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3d0}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x55c3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfbab}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x10}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0xc010}, 0x14) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910bb713aca465c9bbc23b5d40a", 0x40) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m2.643100454s ago: executing program 2 (id=528): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\a\x00\x00\x00\xc7k', 0x81) sendfile$auto(r0, r0, 0x0, 0x7ffff001) 572.582013ms ago: executing program 32 (id=527): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SAR_SPEC={0x29c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0xac, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xdcf}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xbc9b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf3b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff0000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xe}, @NL80211_SAR_ATTR_SPECS={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5940}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x665}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xde0d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe0}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xcd4d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}, @NL80211_SAR_ATTR_SPECS={0x128, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf1c3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3d0}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x55c3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfbab}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x10}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0xc010}, 0x14) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910bb713aca465c9bbc23b5d40a", 0x40) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 442.111454ms ago: executing program 33 (id=523): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) timer_settime$auto(0x3, 0x368, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) bpf$auto(0x0, 0x0, 0xa3) sendfile$auto(r1, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r4 = open(0x0, 0x22240, 0x155) madvise$auto(0x2, 0x3, 0x10) write$auto_configfs_file_operations_configfs_internal(r4, &(0x7f0000000000)="6b78afd3aa858292657c03b991be6f897f6b84e616e29fc44c293181e2531eb84ce7e0037f1bb778276a72aa77f7dfedd216fff3467560312924322cd9bb736a4638b7de983b39b7e954cf41da3bde8a93", 0x51) 282.690691ms ago: executing program 34 (id=528): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\a\x00\x00\x00\xc7k', 0x81) sendfile$auto(r0, r0, 0x0, 0x7ffff001) 0s ago: executing program 35 (id=526): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000001a40)="fb40e8", 0x3) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0x1, 0x1, 0x9687, 0xf6, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0xe, 0x6d3f, 0x7, 0x6, 0x4]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x4, 0x40, 0x3, 0x3, 0x1, 0x3, 0x3, 0x8000000000000001, 0x0, 0xfffffffffffff1f8, 0x2003, 0x2, 0x8000000000000006]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) kernel console output (not intermixed with test programs): .315857][ T6502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.343399][ T6509] netlink: 5 bytes leftover after parsing attributes in process `syz.0.119'. [ 140.611069][ T6543] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 140.713847][ T6543] netlink: 314 bytes leftover after parsing attributes in process `syz.0.124'. [ 140.783379][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.347286][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.347697][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.353645][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.905729][ T6598] netlink: 5 bytes leftover after parsing attributes in process `syz.2.135'. [ 142.966936][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 143.346984][ T6608] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 143.356941][ T6608] netlink: 314 bytes leftover after parsing attributes in process `syz.0.137'. [ 143.706253][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 144.528750][ T6635] random: crng reseeded on system resumption [ 144.782900][ T6641] zswap: compressor 000 not available [ 145.134336][ T6654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.791119][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 147.543585][ T6715] zswap: compressor not available [ 149.345444][ T6758] zswap: compressor not available [ 149.437225][ T52] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 149.445401][ T52] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 149.499876][ T6770] FAULT_INJECTION: forcing a failure. [ 149.499876][ T6770] name fail_futex, interval 1, probability 0, space 0, times 1 [ 149.514833][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) [ 149.514873][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.514891][ T6770] Call Trace: [ 149.514908][ T6770] [ 149.514919][ T6770] dump_stack_lvl+0x16c/0x1f0 [ 149.514967][ T6770] should_fail_ex+0x512/0x640 [ 149.514997][ T6770] ? unwind_get_return_address+0x59/0xa0 [ 149.515040][ T6770] get_futex_key+0x1d0/0x15f0 [ 149.515076][ T6770] ? __pfx_get_futex_key+0x10/0x10 [ 149.515108][ T6770] ? stack_trace_save+0x8e/0xc0 [ 149.515161][ T6770] ? __pfx_stack_trace_save+0x10/0x10 [ 149.515212][ T6770] futex_wait_setup+0x9d/0x570 [ 149.515263][ T6770] __futex_wait+0x193/0x2f0 [ 149.515305][ T6770] ? __pfx___futex_wait+0x10/0x10 [ 149.515351][ T6770] ? __pfx_futex_wake_mark+0x10/0x10 [ 149.515406][ T6770] ? futex_hash+0x2c5/0x380 [ 149.515440][ T6770] ? futex_private_hash_put+0x160/0x1b0 [ 149.515473][ T6770] futex_wait+0xe8/0x380 [ 149.515511][ T6770] ? __pfx_futex_wait+0x10/0x10 [ 149.515564][ T6770] ? kmem_cache_free+0x171/0x770 [ 149.515614][ T6770] do_futex+0x229/0x350 [ 149.515648][ T6770] ? __pfx_do_futex+0x10/0x10 [ 149.515682][ T6770] ? __pfx___might_resched+0x10/0x10 [ 149.515725][ T6770] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 149.515768][ T6770] __x64_sys_futex+0x1e0/0x4c0 [ 149.515804][ T6770] ? __do_sys_close_range+0x278/0x730 [ 149.515851][ T6770] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.515887][ T6770] ? syscall_user_dispatch+0x78/0x140 [ 149.515934][ T6770] do_syscall_64+0xcd/0xf80 [ 149.515980][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.516010][ T6770] RIP: 0033:0x7ff1fa18f7c9 [ 149.516034][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.516062][ T6770] RSP: 002b:00007ff1faf950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.516091][ T6770] RAX: ffffffffffffffda RBX: 00007ff1fa3e6278 RCX: 00007ff1fa18f7c9 [ 149.516109][ T6770] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1fa3e6278 [ 149.516127][ T6770] RBP: 00007ff1fa3e6270 R08: 0000000000000000 R09: 0000000000000000 [ 149.516143][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.516160][ T6770] R13: 00007ff1fa3e6308 R14: 00007ffe4b341df0 R15: 00007ffe4b341ed8 [ 149.516200][ T6770] [ 149.516442][ T5843] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 149.766752][ T5843] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 150.734868][ T6786] capability: warning: `syz.2.178' uses 32-bit capabilities (legacy support in use) [ 151.154604][ T6791] binder: 6790:6791 ioctl c018620c 0 returned -22 [ 152.837770][ T6814] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 153.254082][ T6831] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 154.068792][ T6842] netlink: 326 bytes leftover after parsing attributes in process `syz.0.190'. [ 155.384511][ T6873] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 156.331004][ T6886] vivid-003: ================= START STATUS ================= [ 156.354950][ T6886] vivid-003: Radio HW Seek Mode: Bounded [ 156.360911][ T6886] vivid-003: Radio Programmable HW Seek: false [ 156.398318][ T6886] vivid-003: RDS Rx I/O Mode: Block I/O [ 156.443987][ T6886] vivid-003: Generate RBDS Instead of RDS: false [ 156.450682][ T6886] vivid-003: RDS Reception: true [ 156.543715][ T6886] vivid-003: RDS Program Type: 0 inactive [ 156.549556][ T6886] vivid-003: RDS PS Name: inactive [ 156.643595][ T6886] vivid-003: RDS Radio Text: inactive [ 156.653824][ T6886] vivid-003: RDS Traffic Announcement: false inactive [ 156.693544][ T6886] vivid-003: RDS Traffic Program: false inactive [ 156.699958][ T6886] vivid-003: RDS Music: false inactive [ 156.746336][ T6886] vivid-003: ================== END STATUS ================== [ 157.206160][ T6898] netlink: 326 bytes leftover after parsing attributes in process `syz.2.202'. [ 157.498576][ T6930] netlink: 'syz.3.203': attribute type 11 has an invalid length. [ 157.844008][ T6935] FAULT_INJECTION: forcing a failure. [ 157.844008][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 157.883951][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.0.205 Not tainted syzkaller #0 PREEMPT(full) [ 157.883992][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.884009][ T6935] Call Trace: [ 157.884018][ T6935] [ 157.884028][ T6935] dump_stack_lvl+0x16c/0x1f0 [ 157.884076][ T6935] should_fail_ex+0x512/0x640 [ 157.884105][ T6935] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 157.884152][ T6935] should_failslab+0xc2/0x120 [ 157.884195][ T6935] kmem_cache_alloc_node_noprof+0x86/0x800 [ 157.884228][ T6935] ? __alloc_skb+0x156/0x410 [ 157.884265][ T6935] ? __alloc_skb+0x156/0x410 [ 157.884292][ T6935] __alloc_skb+0x156/0x410 [ 157.884327][ T6935] ? __alloc_skb+0x35d/0x410 [ 157.884355][ T6935] ? __pfx___alloc_skb+0x10/0x10 [ 157.884386][ T6935] ? netlink_autobind.isra.0+0x158/0x370 [ 157.884436][ T6935] netlink_alloc_large_skb+0x69/0x140 [ 157.884478][ T6935] netlink_sendmsg+0x698/0xdd0 [ 157.884524][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.884585][ T6935] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 157.884641][ T6935] ____sys_sendmsg+0xa5d/0xc30 [ 157.884690][ T6935] ? copy_msghdr_from_user+0x10a/0x160 [ 157.884727][ T6935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.884779][ T6935] ? __pfx__kstrtoull+0x10/0x10 [ 157.884829][ T6935] ___sys_sendmsg+0x134/0x1d0 [ 157.884868][ T6935] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.884925][ T6935] ? find_held_lock+0x2b/0x80 [ 157.884990][ T6935] __sys_sendmmsg+0x200/0x420 [ 157.885032][ T6935] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.885084][ T6935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.885154][ T6935] ? fput+0x70/0xf0 [ 157.885183][ T6935] ? ksys_write+0x1ac/0x250 [ 157.885223][ T6935] ? __pfx_ksys_write+0x10/0x10 [ 157.885272][ T6935] __x64_sys_sendmmsg+0x9c/0x100 [ 157.885310][ T6935] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.885354][ T6935] do_syscall_64+0xcd/0xf80 [ 157.885400][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.885430][ T6935] RIP: 0033:0x7f6ee818f7c9 [ 157.885453][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.885481][ T6935] RSP: 002b:00007f6ee8f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.885509][ T6935] RAX: ffffffffffffffda RBX: 00007f6ee83e6090 RCX: 00007f6ee818f7c9 [ 157.885528][ T6935] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 157.885544][ T6935] RBP: 00007f6ee8f73090 R08: 0000000000000000 R09: 0000000000000000 [ 157.885572][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.885589][ T6935] R13: 00007f6ee83e6128 R14: 00007f6ee83e6090 R15: 00007ffc9612a6e8 [ 157.885629][ T6935] [ 159.338178][ T6939] netlink: 326 bytes leftover after parsing attributes in process `syz.3.206'. [ 160.226283][ T6972] kvm: kvm [6971]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000000e) = 0x4 [ 160.955981][ T6978] netlink: 326 bytes leftover after parsing attributes in process `syz.1.213'. [ 161.095670][ T6988] ima: policy update failed [ 161.109387][ T30] audit: type=1802 audit(1765855361.319:3): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.217" res=0 errno=0 [ 161.416464][ T6997] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 161.458019][ T6997] netlink: 314 bytes leftover after parsing attributes in process `syz.1.220'. [ 161.773509][ T7009] FAULT_INJECTION: forcing a failure. [ 161.773509][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 161.803370][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.1.222 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.803420][ T7009] Tainted: [L]=SOFTLOCKUP [ 161.803431][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.803448][ T7009] Call Trace: [ 161.803458][ T7009] [ 161.803469][ T7009] dump_stack_lvl+0x16c/0x1f0 [ 161.803518][ T7009] should_fail_ex+0x512/0x640 [ 161.803551][ T7009] ? kmem_cache_alloc_noprof+0x62/0x770 [ 161.803592][ T7009] should_failslab+0xc2/0x120 [ 161.803638][ T7009] kmem_cache_alloc_noprof+0x83/0x770 [ 161.803677][ T7009] ? __proc_create+0x2c8/0x8d0 [ 161.803726][ T7009] ? __proc_create+0x2c8/0x8d0 [ 161.803764][ T7009] __proc_create+0x2c8/0x8d0 [ 161.803806][ T7009] ? __pfx___proc_create+0x10/0x10 [ 161.803848][ T7009] ? _raw_write_unlock+0x28/0x50 [ 161.803903][ T7009] proc_create_reg+0x7d/0x180 [ 161.803947][ T7009] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 161.803990][ T7009] proc_create_net_single+0x86/0x180 [ 161.804035][ T7009] ? __pfx_proc_create_net_single+0x10/0x10 [ 161.804089][ T7009] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 161.804130][ T7009] kcm_proc_init_net+0x52/0x120 [ 161.804171][ T7009] ops_init+0x1e2/0x5f0 [ 161.804217][ T7009] setup_net+0x11d/0x3a0 [ 161.804260][ T7009] ? __pfx_setup_net+0x10/0x10 [ 161.804298][ T7009] ? lockdep_init_map_type+0x5c/0x270 [ 161.804330][ T7009] ? mutex_init_lockep+0x110/0x150 [ 161.804377][ T7009] copy_net_ns+0x351/0x7c0 [ 161.804427][ T7009] create_new_namespaces+0x3ea/0xab0 [ 161.804480][ T7009] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 161.804529][ T7009] ksys_unshare+0x45b/0xa40 [ 161.804579][ T7009] ? __pfx_ksys_unshare+0x10/0x10 [ 161.804628][ T7009] ? xfd_validate_state+0x61/0x180 [ 161.804666][ T7009] __x64_sys_unshare+0x31/0x40 [ 161.804692][ T7009] do_syscall_64+0xcd/0xf80 [ 161.804739][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.804769][ T7009] RIP: 0033:0x7ff1fa18f7c9 [ 161.804795][ T7009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.804818][ T7009] RSP: 002b:00007ff1faff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 161.804843][ T7009] RAX: ffffffffffffffda RBX: 00007ff1fa3e5fa0 RCX: 00007ff1fa18f7c9 [ 161.804859][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 161.804873][ T7009] RBP: 00007ff1fa213f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.804887][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.804901][ T7009] R13: 00007ff1fa3e6038 R14: 00007ff1fa3e5fa0 R15: 00007ffe4b341ed8 [ 161.804934][ T7009] [ 162.789021][ T7025] FAULT_INJECTION: forcing a failure. [ 162.789021][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 162.831566][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.0.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.831616][ T7025] Tainted: [L]=SOFTLOCKUP [ 162.831626][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.831643][ T7025] Call Trace: [ 162.831653][ T7025] [ 162.831664][ T7025] dump_stack_lvl+0x16c/0x1f0 [ 162.831714][ T7025] should_fail_ex+0x512/0x640 [ 162.831747][ T7025] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.831786][ T7025] should_failslab+0xc2/0x120 [ 162.831833][ T7025] kmem_cache_alloc_noprof+0x83/0x770 [ 162.831870][ T7025] ? skb_clone+0x190/0x3f0 [ 162.831916][ T7025] ? skb_clone+0x190/0x3f0 [ 162.831950][ T7025] skb_clone+0x190/0x3f0 [ 162.831989][ T7025] netlink_deliver_tap+0xabd/0xd30 [ 162.832038][ T7025] netlink_unicast+0x64c/0x870 [ 162.832087][ T7025] ? __pfx_netlink_unicast+0x10/0x10 [ 162.832145][ T7025] netlink_sendmsg+0x8c8/0xdd0 [ 162.832203][ T7025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.832254][ T7025] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 162.832311][ T7025] ____sys_sendmsg+0xa5d/0xc30 [ 162.832360][ T7025] ? copy_msghdr_from_user+0x10a/0x160 [ 162.832398][ T7025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.832453][ T7025] ? __pfx__kstrtoull+0x10/0x10 [ 162.832505][ T7025] ___sys_sendmsg+0x134/0x1d0 [ 162.832548][ T7025] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.832619][ T7025] ? find_held_lock+0x2b/0x80 [ 162.832691][ T7025] __sys_sendmmsg+0x200/0x420 [ 162.832736][ T7025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.832792][ T7025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.832879][ T7025] ? fput+0x70/0xf0 [ 162.832904][ T7025] ? ksys_write+0x1ac/0x250 [ 162.832945][ T7025] ? __pfx_ksys_write+0x10/0x10 [ 162.832988][ T7025] __x64_sys_sendmmsg+0x9c/0x100 [ 162.833018][ T7025] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.833053][ T7025] do_syscall_64+0xcd/0xf80 [ 162.833091][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.833115][ T7025] RIP: 0033:0x7f6ee818f7c9 [ 162.833136][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.833159][ T7025] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.833183][ T7025] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 162.833199][ T7025] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 162.833213][ T7025] RBP: 00007f6ee8f94090 R08: 0000000000000000 R09: 0000000000000000 [ 162.833228][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.833241][ T7025] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 162.833275][ T7025] [ 163.244619][ T7025] netlink: 326 bytes leftover after parsing attributes in process `syz.0.227'. [ 163.436374][ T7039] random: crng reseeded on system resumption [ 163.544239][ T7042] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 163.587545][ T7035] zswap: compressor not available [ 163.603697][ T7042] netlink: 314 bytes leftover after parsing attributes in process `syz.0.230'. getty: ttyS0: read error: Resource temporarily unavailable [ 164.725376][ T7073] sp0: Synchronizing with TNC è[ 164.972087][ T7078] kvm: kvm [7077]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000000e) = 0x4 [ 165.052302][ T7074] sp0: Synchronizing with TNC è[ 165.370011][ T7083] FAULT_INJECTION: forcing a failure. [ 165.370011][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 165.417568][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.417614][ T7083] Tainted: [L]=SOFTLOCKUP [ 165.417623][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.417633][ T7083] Call Trace: [ 165.417639][ T7083] [ 165.417646][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 165.417679][ T7083] should_fail_ex+0x512/0x640 [ 165.417699][ T7083] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.417722][ T7083] should_failslab+0xc2/0x120 [ 165.417751][ T7083] kmem_cache_alloc_noprof+0x83/0x770 [ 165.417773][ T7083] ? skb_clone+0x190/0x3f0 [ 165.417800][ T7083] ? skb_clone+0x190/0x3f0 [ 165.417820][ T7083] skb_clone+0x190/0x3f0 [ 165.417844][ T7083] netlink_deliver_tap+0xabd/0xd30 [ 165.417873][ T7083] netlink_unicast+0x64c/0x870 [ 165.417902][ T7083] ? __pfx_netlink_unicast+0x10/0x10 [ 165.417936][ T7083] netlink_sendmsg+0x8c8/0xdd0 [ 165.417965][ T7083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.417994][ T7083] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 165.418028][ T7083] ____sys_sendmsg+0xa5d/0xc30 [ 165.418060][ T7083] ? copy_msghdr_from_user+0x10a/0x160 [ 165.418083][ T7083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.418114][ T7083] ? __pfx__kstrtoull+0x10/0x10 [ 165.418143][ T7083] ___sys_sendmsg+0x134/0x1d0 [ 165.418167][ T7083] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.418200][ T7083] ? find_held_lock+0x2b/0x80 [ 165.418237][ T7083] __sys_sendmmsg+0x200/0x420 [ 165.418262][ T7083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.418292][ T7083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.418336][ T7083] ? fput+0x70/0xf0 [ 165.418353][ T7083] ? ksys_write+0x1ac/0x250 [ 165.418377][ T7083] ? __pfx_ksys_write+0x10/0x10 [ 165.418409][ T7083] __x64_sys_sendmmsg+0x9c/0x100 [ 165.418432][ T7083] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.418458][ T7083] do_syscall_64+0xcd/0xf80 [ 165.418486][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.418504][ T7083] RIP: 0033:0x7f6ee818f7c9 [ 165.418520][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.418538][ T7083] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.418555][ T7083] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 165.418566][ T7083] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 165.418579][ T7083] RBP: 00007f6ee8f94090 R08: 0000000000000000 R09: 0000000000000000 [ 165.418589][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.418599][ T7083] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 165.418622][ T7083] [ 165.697984][ T7083] netlink: 326 bytes leftover after parsing attributes in process `syz.0.239'. [ 165.946320][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 166.044141][ T7092] team0: Port device team_slave_1 removed [ 167.401110][ T7126] FAULT_INJECTION: forcing a failure. [ 167.401110][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.415303][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.0.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.415348][ T7126] Tainted: [L]=SOFTLOCKUP [ 167.415356][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.415372][ T7126] Call Trace: [ 167.415382][ T7126] [ 167.415392][ T7126] dump_stack_lvl+0x16c/0x1f0 [ 167.415442][ T7126] should_fail_ex+0x512/0x640 [ 167.415480][ T7126] _copy_from_user+0x2e/0xd0 [ 167.415523][ T7126] copy_msghdr_from_user+0x98/0x160 [ 167.415560][ T7126] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 167.415604][ T7126] ? __pfx__kstrtoull+0x10/0x10 [ 167.415666][ T7126] ___sys_sendmsg+0xfe/0x1d0 [ 167.415719][ T7126] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.415792][ T7126] ? __pfx___might_resched+0x10/0x10 [ 167.415842][ T7126] __sys_sendmmsg+0x200/0x420 [ 167.415898][ T7126] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.415964][ T7126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.416041][ T7126] ? fput+0x70/0xf0 [ 167.416070][ T7126] ? ksys_write+0x1ac/0x250 [ 167.416108][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 167.416160][ T7126] __x64_sys_sendmmsg+0x9c/0x100 [ 167.416194][ T7126] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.416240][ T7126] do_syscall_64+0xcd/0xf80 [ 167.416291][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.416321][ T7126] RIP: 0033:0x7f6ee818f7c9 [ 167.416346][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.416372][ T7126] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.416399][ T7126] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 167.416417][ T7126] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 167.416434][ T7126] RBP: 00007f6ee8f94090 R08: 0000000000000000 R09: 0000000000000000 [ 167.416451][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.416467][ T7126] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 167.416513][ T7126] syzkaller syzkaller login: [ 167.997604][ T7141] FAULT_INJECTION: forcing a failure. [ 167.997604][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 168.072820][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.0.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.072864][ T7141] Tainted: [L]=SOFTLOCKUP [ 168.072872][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.072886][ T7141] Call Trace: [ 168.072894][ T7141] [ 168.072904][ T7141] dump_stack_lvl+0x16c/0x1f0 [ 168.072946][ T7141] should_fail_ex+0x512/0x640 [ 168.072972][ T7141] ? kmem_cache_alloc_noprof+0x62/0x770 [ 168.073006][ T7141] should_failslab+0xc2/0x120 [ 168.073041][ T7141] kmem_cache_alloc_noprof+0x83/0x770 [ 168.073069][ T7141] ? __proc_create+0x2c8/0x8d0 [ 168.073106][ T7141] ? __proc_create+0x2c8/0x8d0 [ 168.073138][ T7141] __proc_create+0x2c8/0x8d0 [ 168.073170][ T7141] ? __pfx___proc_create+0x10/0x10 [ 168.073208][ T7141] ? proc_register+0x554/0x8b0 [ 168.073251][ T7141] ? _raw_write_unlock+0x28/0x50 [ 168.073306][ T7141] proc_create_reg+0x7d/0x180 [ 168.073352][ T7141] proc_create_data+0x86/0x110 [ 168.073394][ T7141] ? __pfx_proc_create_data+0x10/0x10 [ 168.073431][ T7141] ? cache_register_net+0x137/0x5e0 [ 168.073474][ T7141] cache_register_net+0x1e0/0x5e0 [ 168.073515][ T7141] gss_svc_init_net+0x151/0x660 [ 168.073548][ T7141] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 168.073586][ T7141] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 168.073619][ T7141] ops_init+0x1e2/0x5f0 [ 168.073655][ T7141] setup_net+0x11d/0x3a0 [ 168.073687][ T7141] ? __pfx_setup_net+0x10/0x10 [ 168.073716][ T7141] ? lockdep_init_map_type+0x5c/0x270 [ 168.073742][ T7141] ? mutex_init_lockep+0x110/0x150 [ 168.073772][ T7141] copy_net_ns+0x351/0x7c0 [ 168.073809][ T7141] create_new_namespaces+0x3ea/0xab0 [ 168.073850][ T7141] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 168.073885][ T7141] ksys_unshare+0x45b/0xa40 [ 168.073924][ T7141] ? __pfx_ksys_unshare+0x10/0x10 [ 168.073962][ T7141] ? xfd_validate_state+0x61/0x180 [ 168.073994][ T7141] __x64_sys_unshare+0x31/0x40 [ 168.074015][ T7141] do_syscall_64+0xcd/0xf80 [ 168.074052][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.074076][ T7141] RIP: 0033:0x7f6ee818f7c9 [ 168.074097][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.074119][ T7141] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.074143][ T7141] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 168.074158][ T7141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 168.074173][ T7141] RBP: 00007f6ee8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.074187][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.074201][ T7141] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 168.074233][ T7141] [ 168.538910][ T7148] syz.2.256 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 168.613088][ T7148] FAULT_INJECTION: forcing a failure. [ 168.613088][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 168.705581][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.2.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.705632][ T7148] Tainted: [L]=SOFTLOCKUP [ 168.705643][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.705662][ T7148] Call Trace: [ 168.705672][ T7148] [ 168.705683][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 168.705733][ T7148] should_fail_ex+0x512/0x640 [ 168.705766][ T7148] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 168.705809][ T7148] should_failslab+0xc2/0x120 [ 168.705857][ T7148] kmem_cache_alloc_node_noprof+0x86/0x800 [ 168.705895][ T7148] ? __alloc_skb+0x156/0x410 [ 168.705936][ T7148] ? __alloc_skb+0x156/0x410 [ 168.705967][ T7148] __alloc_skb+0x156/0x410 [ 168.705997][ T7148] ? __alloc_skb+0x35d/0x410 [ 168.706029][ T7148] ? __pfx___alloc_skb+0x10/0x10 [ 168.706069][ T7148] ? find_held_lock+0x2b/0x80 [ 168.706116][ T7148] __ip6_append_data+0x2b74/0x4740 [ 168.706159][ T7148] ? __pfx_raw6_getfrag+0x10/0x10 [ 168.706223][ T7148] ? __pfx___ip6_append_data+0x10/0x10 [ 168.706255][ T7148] ? __pfx_ip6_mtu+0x10/0x10 [ 168.706295][ T7148] ? ip6_setup_cork+0xc51/0x1530 [ 168.706331][ T7148] ip6_append_data+0x1ba/0x4c0 [ 168.706363][ T7148] ? __pfx_raw6_getfrag+0x10/0x10 [ 168.706415][ T7148] rawv6_sendmsg+0x163e/0x4860 [ 168.706462][ T7148] ? aa_label_sk_perm+0x194/0x5f0 [ 168.706500][ T7148] ? aa_profile_af_perm+0x2d0/0x390 [ 168.706543][ T7148] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 168.706589][ T7148] ? select_task_rq_fair+0x37e0/0x4670 [ 168.706672][ T7148] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 168.706722][ T7148] ? inet_sendmsg+0x11c/0x140 [ 168.706753][ T7148] inet_sendmsg+0x11c/0x140 [ 168.706789][ T7148] ____sys_sendmsg+0x973/0xc30 [ 168.706837][ T7148] ? copy_msghdr_from_user+0x10a/0x160 [ 168.706874][ T7148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.706919][ T7148] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 168.706975][ T7148] ? __pfx___schedule+0x10/0x10 [ 168.707023][ T7148] ___sys_sendmsg+0x134/0x1d0 [ 168.707063][ T7148] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.707138][ T7148] ? __pfx___might_resched+0x10/0x10 [ 168.707187][ T7148] __sys_sendmmsg+0x200/0x420 [ 168.707231][ T7148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.707287][ T7148] ? __pfx_do_futex+0x10/0x10 [ 168.707318][ T7148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.707412][ T7148] ? fput+0x70/0xf0 [ 168.707451][ T7148] ? xfd_validate_state+0x61/0x180 [ 168.707479][ T7148] ? __pfx_do_writev+0x10/0x10 [ 168.707538][ T7148] __x64_sys_sendmmsg+0x9c/0x100 [ 168.707576][ T7148] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.707619][ T7148] do_syscall_64+0xcd/0xf80 [ 168.707665][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.707697][ T7148] RIP: 0033:0x7f778578f7c9 [ 168.707722][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.707749][ T7148] RSP: 002b:00007f7786637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.707778][ T7148] RAX: ffffffffffffffda RBX: 00007f77859e5fa0 RCX: 00007f778578f7c9 [ 168.707796][ T7148] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.707812][ T7148] RBP: 00007f7785813f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.707829][ T7148] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.707846][ T7148] R13: 00007f77859e6038 R14: 00007f77859e5fa0 R15: 00007ffebd9b1a58 [ 168.707887][ T7148] [ 169.310273][ T7164] FAULT_INJECTION: forcing a failure. [ 169.310273][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 169.337349][ T7166] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[7166] [ 169.340236][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.2.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.340279][ T7164] Tainted: [L]=SOFTLOCKUP [ 169.340287][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.340302][ T7164] Call Trace: [ 169.340311][ T7164] [ 169.340320][ T7164] dump_stack_lvl+0x16c/0x1f0 [ 169.340363][ T7164] should_fail_ex+0x512/0x640 [ 169.340392][ T7164] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 169.340428][ T7164] should_failslab+0xc2/0x120 [ 169.340467][ T7164] kmem_cache_alloc_node_noprof+0x86/0x800 [ 169.340498][ T7164] ? __alloc_skb+0x156/0x410 [ 169.340534][ T7164] ? __alloc_skb+0x156/0x410 [ 169.340560][ T7164] __alloc_skb+0x156/0x410 [ 169.340587][ T7164] ? __alloc_skb+0x35d/0x410 [ 169.340614][ T7164] ? __pfx___alloc_skb+0x10/0x10 [ 169.340646][ T7164] ? __pfx___might_resched+0x10/0x10 [ 169.340682][ T7164] ? __lock_acquire+0x436/0x2890 [ 169.340712][ T7164] netlink_alloc_large_skb+0x69/0x140 [ 169.340753][ T7164] netlink_sendmsg+0x698/0xdd0 [ 169.340795][ T7164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.340836][ T7164] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 169.340884][ T7164] ____sys_sendmsg+0xa5d/0xc30 [ 169.340925][ T7164] ? copy_msghdr_from_user+0x10a/0x160 [ 169.340957][ T7164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.341002][ T7164] ? __pfx__kstrtoull+0x10/0x10 [ 169.341044][ T7164] ___sys_sendmsg+0x134/0x1d0 [ 169.341078][ T7164] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.341142][ T7164] ? __pfx___might_resched+0x10/0x10 [ 169.341183][ T7164] __sys_sendmmsg+0x200/0x420 [ 169.341228][ T7164] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.341272][ T7164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.341327][ T7164] ? fput+0x70/0xf0 [ 169.341351][ T7164] ? ksys_write+0x1ac/0x250 [ 169.341386][ T7164] ? __pfx_ksys_write+0x10/0x10 [ 169.341428][ T7164] __x64_sys_sendmmsg+0x9c/0x100 [ 169.341459][ T7164] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.341497][ T7164] do_syscall_64+0xcd/0xf80 [ 169.341536][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.341563][ T7164] RIP: 0033:0x7f778578f7c9 [ 169.341584][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.341608][ T7164] RSP: 002b:00007f7786637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.341633][ T7164] RAX: ffffffffffffffda RBX: 00007f77859e5fa0 RCX: 00007f778578f7c9 [ 169.341650][ T7164] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 169.341666][ T7164] RBP: 00007f7786637090 R08: 0000000000000000 R09: 0000000000000000 [ 169.341681][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.341696][ T7164] R13: 00007f77859e6038 R14: 00007f77859e5fa0 R15: 00007ffebd9b1a58 [ 169.341731][ T7164] [ 169.730780][ T7172] process 'syz.1.260' launched './file0' with NULL argv: empty string added [ 170.588608][ T7195] netlink: 326 bytes leftover after parsing attributes in process `syz.2.265'. [ 171.465964][ T7221] FAULT_INJECTION: forcing a failure. [ 171.465964][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 171.520009][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.2.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.520061][ T7221] Tainted: [L]=SOFTLOCKUP [ 171.520072][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.520090][ T7221] Call Trace: [ 171.520100][ T7221] [ 171.520111][ T7221] dump_stack_lvl+0x16c/0x1f0 [ 171.520159][ T7221] should_fail_ex+0x512/0x640 [ 171.520191][ T7221] ? kmem_cache_alloc_noprof+0x62/0x770 [ 171.520230][ T7221] should_failslab+0xc2/0x120 [ 171.520275][ T7221] kmem_cache_alloc_noprof+0x83/0x770 [ 171.520310][ T7221] ? __proc_create+0x2c8/0x8d0 [ 171.520356][ T7221] ? __proc_create+0x2c8/0x8d0 [ 171.520392][ T7221] __proc_create+0x2c8/0x8d0 [ 171.520431][ T7221] ? __pfx___proc_create+0x10/0x10 [ 171.520494][ T7221] proc_mkdir+0x81/0x170 [ 171.520534][ T7221] ? __pfx_proc_mkdir+0x10/0x10 [ 171.520577][ T7221] ? cache_register_net+0x137/0x5e0 [ 171.520637][ T7221] cache_register_net+0x18f/0x5e0 [ 171.520690][ T7221] gss_svc_init_net+0x151/0x660 [ 171.520730][ T7221] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 171.520781][ T7221] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 171.520825][ T7221] ops_init+0x1e2/0x5f0 [ 171.520872][ T7221] setup_net+0x11d/0x3a0 [ 171.520915][ T7221] ? __pfx_setup_net+0x10/0x10 [ 171.520955][ T7221] ? lockdep_init_map_type+0x5c/0x270 [ 171.520994][ T7221] ? mutex_init_lockep+0x110/0x150 [ 171.521031][ T7221] copy_net_ns+0x351/0x7c0 [ 171.521081][ T7221] create_new_namespaces+0x3ea/0xab0 [ 171.521133][ T7221] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 171.521181][ T7221] ksys_unshare+0x45b/0xa40 [ 171.521229][ T7221] ? __pfx_ksys_unshare+0x10/0x10 [ 171.521279][ T7221] ? xfd_validate_state+0x61/0x180 [ 171.521320][ T7221] __x64_sys_unshare+0x31/0x40 [ 171.521348][ T7221] do_syscall_64+0xcd/0xf80 [ 171.521396][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.521426][ T7221] RIP: 0033:0x7f778578f7c9 [ 171.521450][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.521493][ T7221] RSP: 002b:00007f7786616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.521523][ T7221] RAX: ffffffffffffffda RBX: 00007f77859e6090 RCX: 00007f778578f7c9 [ 171.521542][ T7221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 171.521559][ T7221] RBP: 00007f7785813f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.521578][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.521595][ T7221] R13: 00007f77859e6128 R14: 00007f77859e6090 R15: 00007ffebd9b1a58 [ 171.521639][ T7221] [ 172.024721][ T7225] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 172.032757][ T7225] netlink: 314 bytes leftover after parsing attributes in process `syz.0.271'. [ 173.123631][ T7256] FAULT_INJECTION: forcing a failure. [ 173.123631][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.160604][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.3.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.160635][ T7256] Tainted: [L]=SOFTLOCKUP [ 173.160641][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.160651][ T7256] Call Trace: [ 173.160657][ T7256] [ 173.160664][ T7256] dump_stack_lvl+0x16c/0x1f0 [ 173.160695][ T7256] should_fail_ex+0x512/0x640 [ 173.160719][ T7256] _copy_from_iter+0x2a4/0x16c0 [ 173.160741][ T7256] ? __alloc_skb+0x220/0x410 [ 173.160760][ T7256] ? __alloc_skb+0x35d/0x410 [ 173.160779][ T7256] ? __pfx__copy_from_iter+0x10/0x10 [ 173.160799][ T7256] ? __pfx___might_resched+0x10/0x10 [ 173.160825][ T7256] ? __lock_acquire+0x436/0x2890 [ 173.160847][ T7256] netlink_sendmsg+0x820/0xdd0 [ 173.160877][ T7256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.160905][ T7256] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 173.160939][ T7256] ____sys_sendmsg+0xa5d/0xc30 [ 173.160968][ T7256] ? copy_msghdr_from_user+0x10a/0x160 [ 173.160991][ T7256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.161022][ T7256] ? __pfx__kstrtoull+0x10/0x10 [ 173.161050][ T7256] ___sys_sendmsg+0x134/0x1d0 [ 173.161074][ T7256] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.161114][ T7256] ? __pfx___might_resched+0x10/0x10 [ 173.161143][ T7256] __sys_sendmmsg+0x200/0x420 [ 173.161168][ T7256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.161197][ T7256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.161234][ T7256] ? fput+0x70/0xf0 [ 173.161251][ T7256] ? ksys_write+0x1ac/0x250 [ 173.161283][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 173.161312][ T7256] __x64_sys_sendmmsg+0x9c/0x100 [ 173.161335][ T7256] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.161361][ T7256] do_syscall_64+0xcd/0xf80 [ 173.161389][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.161408][ T7256] RIP: 0033:0x7ff5b978f7c9 [ 173.161423][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.161445][ T7256] RSP: 002b:00007ff5b79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.161462][ T7256] RAX: ffffffffffffffda RBX: 00007ff5b99e5fa0 RCX: 00007ff5b978f7c9 [ 173.161474][ T7256] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.161484][ T7256] RBP: 00007ff5b79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.161494][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.161504][ T7256] R13: 00007ff5b99e6038 R14: 00007ff5b99e5fa0 R15: 00007ffcb7e6e328 [ 173.161529][ T7256] [ 174.789369][ T7270] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 174.823444][ T7270] netlink: 314 bytes leftover after parsing attributes in process `syz.1.283'. [ 175.789692][ T7300] FAULT_INJECTION: forcing a failure. [ 175.789692][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 175.831750][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.2.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.831798][ T7300] Tainted: [L]=SOFTLOCKUP [ 175.831808][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.831825][ T7300] Call Trace: [ 175.831834][ T7300] [ 175.831844][ T7300] dump_stack_lvl+0x16c/0x1f0 [ 175.831893][ T7300] should_fail_ex+0x512/0x640 [ 175.831924][ T7300] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 175.831972][ T7300] should_failslab+0xc2/0x120 [ 175.832017][ T7300] kmem_cache_alloc_noprof+0x83/0x770 [ 175.832053][ T7300] ? skb_clone+0x190/0x3f0 [ 175.832098][ T7300] ? skb_clone+0x190/0x3f0 [ 175.832132][ T7300] skb_clone+0x190/0x3f0 [ 175.832172][ T7300] netlink_deliver_tap+0xabd/0xd30 [ 175.832221][ T7300] netlink_unicast+0x64c/0x870 [ 175.832270][ T7300] ? __pfx_netlink_unicast+0x10/0x10 [ 175.832312][ T7300] ? __pfx___might_resched+0x10/0x10 [ 175.832353][ T7300] ? __lock_acquire+0x436/0x2890 [ 175.832402][ T7300] netlink_sendmsg+0x8c8/0xdd0 [ 175.832451][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.832506][ T7300] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 175.832563][ T7300] ____sys_sendmsg+0xa5d/0xc30 [ 175.832610][ T7300] ? copy_msghdr_from_user+0x10a/0x160 [ 175.832645][ T7300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.832692][ T7300] ? __pfx__kstrtoull+0x10/0x10 [ 175.832736][ T7300] ___sys_sendmsg+0x134/0x1d0 [ 175.832773][ T7300] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.832847][ T7300] ? __pfx___might_resched+0x10/0x10 [ 175.832897][ T7300] __sys_sendmmsg+0x200/0x420 [ 175.832941][ T7300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.832993][ T7300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.833058][ T7300] ? fput+0x70/0xf0 [ 175.833087][ T7300] ? ksys_write+0x1ac/0x250 [ 175.833129][ T7300] ? __pfx_ksys_write+0x10/0x10 [ 175.833178][ T7300] __x64_sys_sendmmsg+0x9c/0x100 [ 175.833228][ T7300] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.833269][ T7300] do_syscall_64+0xcd/0xf80 [ 175.833315][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.833347][ T7300] RIP: 0033:0x7f778578f7c9 [ 175.833372][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.833400][ T7300] RSP: 002b:00007f7786637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.833428][ T7300] RAX: ffffffffffffffda RBX: 00007f77859e5fa0 RCX: 00007f778578f7c9 [ 175.833447][ T7300] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 175.833473][ T7300] RBP: 00007f7786637090 R08: 0000000000000000 R09: 0000000000000000 [ 175.833490][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.833508][ T7300] R13: 00007f77859e6038 R14: 00007f77859e5fa0 R15: 00007ffebd9b1a58 [ 175.833549][ T7300] [ 175.854266][ T7298] FAULT_INJECTION: forcing a failure. [ 175.854266][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 176.134869][ T7300] netlink: 326 bytes leftover after parsing attributes in process `syz.2.290'. [ 176.153427][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.0.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.153474][ T7298] Tainted: [L]=SOFTLOCKUP [ 176.153484][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.153500][ T7298] Call Trace: [ 176.153509][ T7298] [ 176.153521][ T7298] dump_stack_lvl+0x16c/0x1f0 [ 176.153573][ T7298] should_fail_ex+0x512/0x640 [ 176.153608][ T7298] ? kmem_cache_alloc_noprof+0x62/0x770 [ 176.153649][ T7298] should_failslab+0xc2/0x120 [ 176.153696][ T7298] kmem_cache_alloc_noprof+0x83/0x770 [ 176.153733][ T7298] ? __anon_vma_prepare+0x344/0x5e0 [ 176.153774][ T7298] ? __anon_vma_prepare+0x344/0x5e0 [ 176.153806][ T7298] __anon_vma_prepare+0x344/0x5e0 [ 176.153837][ T7298] ? __pfx___pte_alloc+0x10/0x10 [ 176.153890][ T7298] __vmf_anon_prepare+0x11c/0x240 [ 176.153942][ T7298] do_anonymous_page+0x59b/0x2190 [ 176.153976][ T7298] ? mtree_range_walk+0x718/0xc00 [ 176.154023][ T7298] ? find_held_lock+0x2b/0x80 [ 176.154068][ T7298] __handle_mm_fault+0x1ecf/0x2bb0 [ 176.154111][ T7298] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.154179][ T7298] handle_mm_fault+0x3fe/0xad0 [ 176.154217][ T7298] __get_user_pages+0x54e/0x3590 [ 176.154290][ T7298] ? __pfx___get_user_pages+0x10/0x10 [ 176.154347][ T7298] populate_vma_page_range+0x267/0x3f0 [ 176.154395][ T7298] ? __pfx_populate_vma_page_range+0x10/0x10 [ 176.154442][ T7298] ? __pfx_find_vma_intersection+0x10/0x10 [ 176.154489][ T7298] ? do_mmap+0x69c/0x1210 [ 176.154537][ T7298] __mm_populate+0x1d8/0x380 [ 176.154586][ T7298] ? __pfx___mm_populate+0x10/0x10 [ 176.154638][ T7298] ? up_write+0x282/0x4e0 [ 176.154676][ T7298] vm_mmap_pgoff+0x37f/0x470 [ 176.154724][ T7298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.154776][ T7298] ? __x64_sys_futex+0x1e0/0x4c0 [ 176.154810][ T7298] ? __x64_sys_futex+0x1e9/0x4c0 [ 176.154851][ T7298] ksys_mmap_pgoff+0x7d/0x5c0 [ 176.154893][ T7298] ? xfd_validate_state+0x61/0x180 [ 176.154921][ T7298] ? __pfx_do_writev+0x10/0x10 [ 176.154966][ T7298] __x64_sys_mmap+0x125/0x190 [ 176.155002][ T7298] do_syscall_64+0xcd/0xf80 [ 176.155050][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.155081][ T7298] RIP: 0033:0x7f6ee818f7c9 [ 176.155108][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.155139][ T7298] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.155170][ T7298] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 176.155190][ T7298] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 176.155208][ T7298] RBP: 00007f6ee8213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 176.155228][ T7298] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 176.155248][ T7298] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 176.155301][ T7298] [ 176.738565][ T7312] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 176.785764][ T7312] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 176.813533][ T7312] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 176.836344][ T7312] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 176.877289][ T7312] page dumped because: unmovable page [ 176.887421][ T7312] page_owner info is not present (never set?) [ 177.239900][ T7329] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 177.249891][ T7329] netlink: 314 bytes leftover after parsing attributes in process `syz.2.296'. [ 178.283651][ T7347] netlink: 326 bytes leftover after parsing attributes in process `syz.0.302'. [ 178.292805][ T7347] FAULT_INJECTION: forcing a failure. [ 178.292805][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 178.307279][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.307322][ T7347] Tainted: [L]=SOFTLOCKUP [ 178.307332][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.307347][ T7347] Call Trace: [ 178.307356][ T7347] [ 178.307366][ T7347] dump_stack_lvl+0x16c/0x1f0 [ 178.307412][ T7347] should_fail_ex+0x512/0x640 [ 178.307443][ T7347] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 178.307483][ T7347] should_failslab+0xc2/0x120 [ 178.307527][ T7347] kmem_cache_alloc_node_noprof+0x86/0x800 [ 178.307565][ T7347] ? __alloc_skb+0x156/0x410 [ 178.307607][ T7347] ? __alloc_skb+0x156/0x410 [ 178.307638][ T7347] __alloc_skb+0x156/0x410 [ 178.307668][ T7347] ? __alloc_skb+0x35d/0x410 [ 178.307708][ T7347] ? __pfx___alloc_skb+0x10/0x10 [ 178.307737][ T7347] ? netlink_sendmsg+0x8c8/0xdd0 [ 178.307776][ T7347] ? ____sys_sendmsg+0xa5d/0xc30 [ 178.307825][ T7347] ? __nla_parse+0x40/0x60 [ 178.307871][ T7347] inet_rtm_getroute+0x90c/0x2710 [ 178.307925][ T7347] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 178.308034][ T7347] ? find_held_lock+0x2b/0x80 [ 178.308071][ T7347] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 178.308105][ T7347] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 178.308138][ T7347] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 178.308190][ T7347] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 178.308228][ T7347] rtnetlink_rcv_msg+0x95e/0xe90 [ 178.308272][ T7347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.308323][ T7347] ? ref_tracker_free+0x37c/0x830 [ 178.308362][ T7347] netlink_rcv_skb+0x158/0x420 [ 178.308403][ T7347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.308444][ T7347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.308500][ T7347] ? netlink_deliver_tap+0x1ae/0xd30 [ 178.308547][ T7347] netlink_unicast+0x5aa/0x870 [ 178.308593][ T7347] ? __pfx_netlink_unicast+0x10/0x10 [ 178.308633][ T7347] ? __pfx___might_resched+0x10/0x10 [ 178.308673][ T7347] ? __lock_acquire+0x436/0x2890 [ 178.308712][ T7347] netlink_sendmsg+0x8c8/0xdd0 [ 178.308759][ T7347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.308806][ T7347] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 178.308862][ T7347] ____sys_sendmsg+0xa5d/0xc30 [ 178.308911][ T7347] ? copy_msghdr_from_user+0x10a/0x160 [ 178.308949][ T7347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.309003][ T7347] ? __pfx__kstrtoull+0x10/0x10 [ 178.309053][ T7347] ___sys_sendmsg+0x134/0x1d0 [ 178.309093][ T7347] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.309165][ T7347] ? __pfx___might_resched+0x10/0x10 [ 178.309223][ T7347] __sys_sendmmsg+0x200/0x420 [ 178.309265][ T7347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 178.309315][ T7347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.309389][ T7347] ? fput+0x70/0xf0 [ 178.309418][ T7347] ? ksys_write+0x1ac/0x250 [ 178.309458][ T7347] ? __pfx_ksys_write+0x10/0x10 [ 178.309516][ T7347] __x64_sys_sendmmsg+0x9c/0x100 [ 178.309558][ T7347] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.309599][ T7347] do_syscall_64+0xcd/0xf80 [ 178.309644][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.309673][ T7347] RIP: 0033:0x7f6ee818f7c9 [ 178.309697][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.309724][ T7347] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.309751][ T7347] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 178.309770][ T7347] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 178.309787][ T7347] RBP: 00007f6ee8f94090 R08: 0000000000000000 R09: 0000000000000000 [ 178.309804][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.309820][ T7347] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 178.309860][ T7347] [ 179.173011][ T7356] netlink: 25 bytes leftover after parsing attributes in process `syz.0.304'. [ 179.837869][ T7372] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 179.853464][ T7372] netlink: 314 bytes leftover after parsing attributes in process `syz.2.308'. [ 180.228940][ T7374] vivid-003: ================= START STATUS ================= [ 180.243551][ T7374] vivid-003: Radio HW Seek Mode: Bounded [ 180.256953][ T7374] vivid-003: Radio Programmable HW Seek: false [ 180.295816][ T7374] vivid-003: RDS Rx I/O Mode: Block I/O [ 180.318705][ T7374] vivid-003: Generate RBDS Instead of RDS: false [ 180.333285][ T7374] vivid-003: RDS Reception: true [ 180.348823][ T7374] vivid-003: RDS Program Type: 0 inactive [ 180.358751][ T7374] vivid-003: RDS PS Name: inactive [ 180.373404][ T7374] vivid-003: RDS Radio Text: inactive [ 180.378961][ T7374] vivid-003: RDS Traffic Announcement: false inactive [ 180.442654][ T7374] vivid-003: RDS Traffic Program: false inactive [ 180.490532][ T7374] vivid-003: RDS Music: false inactive [ 180.515660][ T7374] vivid-003: ================== END STATUS ================== [ 181.128869][ T7392] could not allocate digest TFM handle 237 [ 181.128869][ T7392] [ 181.240594][ T7376] random: crng reseeded on system resumption [ 181.628778][ T7411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 181.707056][ T7411] FAULT_INJECTION: forcing a failure. [ 181.707056][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 181.743494][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.2.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.743539][ T7411] Tainted: [L]=SOFTLOCKUP [ 181.743548][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.743564][ T7411] Call Trace: [ 181.743574][ T7411] [ 181.743585][ T7411] dump_stack_lvl+0x16c/0x1f0 [ 181.743633][ T7411] should_fail_ex+0x512/0x640 [ 181.743674][ T7411] ? kmem_cache_alloc_noprof+0x62/0x770 [ 181.743714][ T7411] should_failslab+0xc2/0x120 [ 181.743758][ T7411] kmem_cache_alloc_noprof+0x83/0x770 [ 181.743780][ T7411] ? __kernfs_new_node+0xd2/0x990 [ 181.743806][ T7411] ? __kernfs_new_node+0xd2/0x990 [ 181.743824][ T7411] __kernfs_new_node+0xd2/0x990 [ 181.743843][ T7411] ? find_held_lock+0x2b/0x80 [ 181.743868][ T7411] ? kernfs_add_one+0x37d/0x840 [ 181.743891][ T7411] ? __pfx___kernfs_new_node+0x10/0x10 [ 181.743918][ T7411] ? find_held_lock+0x2b/0x80 [ 181.743941][ T7411] ? kernfs_root+0xee/0x2a0 [ 181.743967][ T7411] kernfs_new_node+0x13c/0x1e0 [ 181.743995][ T7411] __kernfs_create_file+0x53/0x350 [ 181.744026][ T7411] sysfs_add_file_mode_ns+0x207/0x3c0 [ 181.744052][ T7411] sysfs_create_file_ns+0x13d/0x1d0 [ 181.744071][ T7411] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 181.744089][ T7411] ? down_read+0x13d/0x460 [ 181.744107][ T7411] ? __pfx___up_read+0x10/0x10 [ 181.744129][ T7411] ? acpi_device_notify+0x351/0x4d0 [ 181.744153][ T7411] device_create_file+0xf2/0x1e0 [ 181.744182][ T7411] device_add+0x2bf/0x1980 [ 181.744207][ T7411] ? kfree+0x27d/0x6e0 [ 181.744225][ T7411] ? __pfx_device_add+0x10/0x10 [ 181.744248][ T7411] ? kstrdup+0xb5/0x100 [ 181.744272][ T7411] ? kfree_const+0x55/0x60 [ 181.744295][ T7411] device_create_groups_vargs+0x1f8/0x270 [ 181.744324][ T7411] device_create_with_groups+0xf4/0x130 [ 181.744353][ T7411] ? __pfx_device_create_with_groups+0x10/0x10 [ 181.744402][ T7411] led_classdev_register_ext+0x4c4/0xa30 [ 181.744430][ T7411] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 181.744459][ T7411] ? __pfx_kasprintf+0x10/0x10 [ 181.744492][ T7411] input_leds_connect+0x552/0x8e0 [ 181.744519][ T7411] input_attach_handler.isra.0+0x176/0x250 [ 181.744545][ T7411] input_register_device+0xab9/0x11b0 [ 181.744568][ T7411] ? atkbd_set_device_attrs+0x7a1/0xa90 [ 181.744597][ T7411] atkbd_set_scroll+0x238/0x370 [ 181.744626][ T7411] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 181.744656][ T7411] ? mark_held_locks+0x49/0x80 [ 181.744674][ T7411] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 181.744702][ T7411] atkbd_attr_set_helper.isra.0+0x12e/0x260 [ 181.744734][ T7411] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 181.744775][ T7411] dev_attr_store+0x58/0x80 [ 181.744810][ T7411] ? __pfx_dev_attr_store+0x10/0x10 [ 181.744845][ T7411] sysfs_kf_write+0xf2/0x150 [ 181.744876][ T7411] kernfs_fop_write_iter+0x3af/0x570 [ 181.744914][ T7411] ? __pfx_sysfs_kf_write+0x10/0x10 [ 181.744946][ T7411] vfs_write+0x7d3/0x11d0 [ 181.744986][ T7411] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 181.745032][ T7411] ? __pfx_vfs_write+0x10/0x10 [ 181.745090][ T7411] ksys_write+0x12a/0x250 [ 181.745124][ T7411] ? __pfx_ksys_write+0x10/0x10 [ 181.745170][ T7411] do_syscall_64+0xcd/0xf80 [ 181.745210][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.745236][ T7411] RIP: 0033:0x7f778578f7c9 [ 181.745257][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.745299][ T7411] RSP: 002b:00007f7786637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.745325][ T7411] RAX: ffffffffffffffda RBX: 00007f77859e5fa0 RCX: 00007f778578f7c9 [ 181.745343][ T7411] RDX: 00000000000098c7 RSI: 0000200000000440 RDI: 0000000000000007 [ 181.745359][ T7411] RBP: 00007f7785813f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.745382][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.745398][ T7411] R13: 00007f77859e6038 R14: 00007f77859e5fa0 R15: 00007ffebd9b1a58 [ 181.745438][ T7411] [ 182.584528][ T7411] input input7: failed to register LED input7::capslock: -12 [ 182.775953][ T7411] input: failed to attach handler leds to device input7, error: -12 [ 183.265513][ T30] audit: type=1804 audit(1765855383.479:4): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.318" name="/newroot/94/file0" dev="tmpfs" ino=512 res=1 errno=0 [ 185.833684][ T7452] netlink: 326 bytes leftover after parsing attributes in process `syz.3.326'. [ 186.531944][ T7471] serio: Serial port pty91 [ 187.146507][ T7474] netlink: 326 bytes leftover after parsing attributes in process `syz.0.329'. [ 188.613882][ T7499] netlink: 326 bytes leftover after parsing attributes in process `syz.3.335'. [ 189.178158][ T7505] bond0: option all_slaves_active: invalid value () [ 191.119091][ T7523] zswap: compressor not available [ 191.615881][ T7543] MTRR 1 not used [ 191.712440][ T30] audit: type=1326 audit(1765855391.919:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778578f7c9 code=0x0 [ 193.050636][ T7558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 193.104429][ T7558] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 193.173958][ T7558] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 193.201523][ T7558] page_type: f5(slab) [ 193.221163][ T7558] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 193.236372][ T7558] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 193.279832][ T7558] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 193.301088][ T7558] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 193.339547][ T7558] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 193.377871][ T7558] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 193.436936][ T7558] page dumped because: unmovable page [ 193.450940][ T7558] page_owner tracks the page as allocated [ 193.469292][ T7558] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5215, tgid 5215 (udevadm), ts 41539034404, free_ts 33653243695 [ 193.533481][ T7558] post_alloc_hook+0x1af/0x220 [ 193.555564][ T7558] get_page_from_freelist+0xd0b/0x31a0 [ 193.570313][ T7558] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 193.582700][ T7558] alloc_pages_mpol+0x1fb/0x550 [ 193.634984][ T7558] new_slab+0x2c3/0x430 [ 193.639272][ T7558] ___slab_alloc+0xe18/0x1c90 [ 193.678132][ T7558] __slab_alloc.constprop.0+0x63/0x110 [ 193.704765][ T7558] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 193.710840][ T7558] alloc_inode+0xc3/0x240 [ 193.728434][ T7558] iget_locked+0x1d9/0x6d0 [ 193.733044][ T7558] kernfs_get_inode+0x46/0x470 [ 193.755860][ T7558] kernfs_iop_lookup+0x1a7/0x2d0 [ 193.762065][ T7558] __lookup_slow+0x251/0x460 [ 193.780061][ T7558] lookup_slow+0x50/0x70 [ 193.793953][ T7558] link_path_walk+0x12d8/0x1c70 [ 193.798967][ T7558] path_lookupat+0x74/0xc40 [ 193.821771][ T7558] page last free pid 1 tgid 1 stack trace: [ 193.841593][ T7558] __free_frozen_pages+0x7df/0x1170 [ 193.851809][ T7558] free_contig_range+0x183/0x4a0 [ 193.860544][ T7558] destroy_args+0xb95/0x14e0 [ 193.879738][ T7558] debug_vm_pgtable+0x2220/0x38d0 [ 193.896514][ T7558] do_one_initcall+0x123/0x680 [ 193.911958][ T7558] kernel_init_freeable+0x5c8/0x920 [ 193.923275][ T7558] kernel_init+0x1c/0x2b0 [ 193.927772][ T7558] ret_from_fork+0x983/0xb10 [ 193.932867][ T7558] ret_from_fork_asm+0x1a/0x30 [ 193.980900][ T7582] sg_write: data in/out 14745563/34138 bytes for SCSI command 0x65-- guessing data in; [ 193.980900][ T7582] program syz.3.355 not setting count and/or reply_len properly [ 194.927926][ T30] audit: type=1800 audit(1765855395.139:6): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.365" name="dbroot" dev="configfs" ino=16847 res=0 errno=0 [ 195.185674][ T7616] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 195.217447][ T7616] netlink: 314 bytes leftover after parsing attributes in process `syz.0.366'. [ 196.078977][ T7631] FAULT_INJECTION: forcing a failure. [ 196.078977][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 196.114982][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.2.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.115031][ T7631] Tainted: [L]=SOFTLOCKUP [ 196.115041][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.115059][ T7631] Call Trace: [ 196.115068][ T7631] [ 196.115080][ T7631] dump_stack_lvl+0x16c/0x1f0 [ 196.115139][ T7631] should_fail_ex+0x512/0x640 [ 196.115171][ T7631] ? fs_reclaim_acquire+0xae/0x150 [ 196.115222][ T7631] should_failslab+0xc2/0x120 [ 196.115291][ T7631] kmem_cache_alloc_noprof+0x83/0x770 [ 196.115327][ T7631] ? __pfx_map_id_range_down+0x10/0x10 [ 196.115368][ T7631] ? security_inode_alloc+0x3b/0x2b0 [ 196.115406][ T7631] ? security_inode_alloc+0x3b/0x2b0 [ 196.115435][ T7631] security_inode_alloc+0x3b/0x2b0 [ 196.115467][ T7631] inode_init_always_gfp+0xced/0x1040 [ 196.115518][ T7631] alloc_inode+0x86/0x240 [ 196.115550][ T7631] new_inode+0x22/0x1c0 [ 196.115587][ T7631] proc_pid_make_inode+0x22/0x160 [ 196.115622][ T7631] proc_pident_instantiate+0x85/0x310 [ 196.115661][ T7631] proc_pident_lookup+0x1f5/0x270 [ 196.115706][ T7631] __lookup_slow+0x251/0x460 [ 196.115741][ T7631] ? __pfx___lookup_slow+0x10/0x10 [ 196.115807][ T7631] lookup_slow+0x50/0x70 [ 196.115840][ T7631] link_path_walk+0x12d8/0x1c70 [ 196.115893][ T7631] path_openat+0x1bd/0x3140 [ 196.115934][ T7631] ? do_syscall_64+0xcd/0xf80 [ 196.115974][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.116017][ T7631] ? __pfx_path_openat+0x10/0x10 [ 196.116075][ T7631] do_filp_open+0x20b/0x470 [ 196.116127][ T7631] ? __pfx_do_filp_open+0x10/0x10 [ 196.116185][ T7631] ? __pfx_kfree_link+0x10/0x10 [ 196.116232][ T7631] ? alloc_fd+0x471/0x7d0 [ 196.116285][ T7631] do_sys_openat2+0x121/0x290 [ 196.116319][ T7631] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.116353][ T7631] ? count_memcg_events+0x122/0x290 [ 196.116404][ T7631] __x64_sys_openat+0x174/0x210 [ 196.116438][ T7631] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.116474][ T7631] ? syscall_user_dispatch+0x78/0x140 [ 196.116523][ T7631] do_syscall_64+0xcd/0xf80 [ 196.116570][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.116599][ T7631] RIP: 0033:0x7f778578e010 [ 196.116623][ T7631] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 196.116651][ T7631] RSP: 002b:00007f7786636f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 196.116680][ T7631] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f778578e010 [ 196.116699][ T7631] RDX: 0000000000000002 RSI: 00007f7786636fa0 RDI: 00000000ffffff9c [ 196.116716][ T7631] RBP: 00007f7786636fa0 R08: 0000000000000000 R09: 0000000000000000 [ 196.116734][ T7631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 196.116750][ T7631] R13: 00007f77859e6038 R14: 00007f77859e5fa0 R15: 00007ffebd9b1a58 [ 196.116791][ T7631] [ 197.142856][ T7662] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 197.153557][ T7662] netlink: 314 bytes leftover after parsing attributes in process `syz.3.377'. [ 198.026942][ T7676] zram0: detected capacity change from 0 to 8 [ 198.297003][ T7675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.879145][ T7667] kexec: Could not allocate control_code_buffer [ 199.593708][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.600659][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.880090][ T7729] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 199.944624][ T7740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 199.983971][ T7729] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 200.052535][ T7729] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 200.052597][ T7729] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 200.052610][ T7729] page dumped because: unmovable page [ 200.052622][ T7729] page_owner info is not present (never set?) [ 200.500157][ T7742] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 200.885531][ T7753] netlink: 326 bytes leftover after parsing attributes in process `syz.2.394'. [ 201.035644][ T7740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 201.044479][ T7758] ubi0: attaching mtd0 [ 201.106732][ T7758] ubi0: scanning is finished [ 201.111448][ T7758] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 201.388743][ T7758] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 202.465146][ T7787] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 202.525200][ T7787] netlink: 314 bytes leftover after parsing attributes in process `syz.0.401'. [ 202.919564][ T7807] FAULT_INJECTION: forcing a failure. [ 202.919564][ T7807] name failslab, interval 1, probability 0, space 0, times 0 [ 202.965423][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz.0.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.965476][ T7807] Tainted: [L]=SOFTLOCKUP [ 202.965487][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.965504][ T7807] Call Trace: [ 202.965515][ T7807] [ 202.965527][ T7807] dump_stack_lvl+0x16c/0x1f0 [ 202.965579][ T7807] should_fail_ex+0x512/0x640 [ 202.965613][ T7807] ? __kvmalloc_node_noprof+0x129/0xa40 [ 202.965660][ T7807] should_failslab+0xc2/0x120 [ 202.965708][ T7807] __kvmalloc_node_noprof+0x14a/0xa40 [ 202.965754][ T7807] ? seq_read_iter+0x830/0x12d0 [ 202.965803][ T7807] ? seq_read_iter+0x830/0x12d0 [ 202.965841][ T7807] seq_read_iter+0x830/0x12d0 [ 202.965901][ T7807] kernfs_fop_read_iter+0x46c/0x610 [ 202.965951][ T7807] ? rw_verify_area+0xcf/0x6c0 [ 202.965996][ T7807] vfs_read+0x8bf/0xcf0 [ 202.966047][ T7807] ? __pfx_vfs_read+0x10/0x10 [ 202.966086][ T7807] ? do_futex+0x122/0x350 [ 202.966127][ T7807] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.966171][ T7807] ? __x64_sys_futex+0x1e0/0x4c0 [ 202.966205][ T7807] ? __x64_sys_futex+0x1e9/0x4c0 [ 202.966246][ T7807] ksys_read+0x12a/0x250 [ 202.966298][ T7807] ? __pfx_ksys_read+0x10/0x10 [ 202.966357][ T7807] do_syscall_64+0xcd/0xf80 [ 202.966412][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.966443][ T7807] RIP: 0033:0x7f6ee818f7c9 [ 202.966468][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.966497][ T7807] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.966527][ T7807] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 202.966546][ T7807] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 202.966564][ T7807] RBP: 00007f6ee8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.966581][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.966599][ T7807] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 202.966642][ T7807] [ 203.672019][ T30] audit: type=1804 audit(1765855403.859:7): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.406" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 204.923404][ T30] audit: type=1800 audit(1765855405.129:8): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.413" name="features" dev="configfs" ino=18419 res=0 errno=0 [ 204.935170][ T7784] netlink: 342 bytes leftover after parsing attributes in process `syz.3.400'. [ 206.407514][ T7877] FAULT_INJECTION: forcing a failure. [ 206.407514][ T7877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.426898][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.1.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.426946][ T7877] Tainted: [L]=SOFTLOCKUP [ 206.426956][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.426982][ T7877] Call Trace: [ 206.426992][ T7877] [ 206.427003][ T7877] dump_stack_lvl+0x16c/0x1f0 [ 206.427053][ T7877] should_fail_ex+0x512/0x640 [ 206.427091][ T7877] get_futex_key+0x293/0x15f0 [ 206.427130][ T7877] ? __pfx_get_futex_key+0x10/0x10 [ 206.427174][ T7877] futex_wake+0xea/0x530 [ 206.427217][ T7877] ? __pfx_futex_wake+0x10/0x10 [ 206.427282][ T7877] do_futex+0x1e3/0x350 [ 206.427318][ T7877] ? __pfx_do_futex+0x10/0x10 [ 206.427348][ T7877] ? __might_fault+0xe3/0x190 [ 206.427393][ T7877] mm_release+0x24e/0x300 [ 206.427434][ T7877] do_exit+0x69e/0x2bd0 [ 206.427470][ T7877] ? __pfx_do_exit+0x10/0x10 [ 206.427499][ T7877] ? do_raw_spin_lock+0x12c/0x2b0 [ 206.427532][ T7877] ? find_held_lock+0x2b/0x80 [ 206.427576][ T7877] do_group_exit+0xd3/0x2a0 [ 206.427610][ T7877] get_signal+0x2671/0x26d0 [ 206.427665][ T7877] ? __pfx_get_signal+0x10/0x10 [ 206.427709][ T7877] ? do_futex+0x122/0x350 [ 206.427746][ T7877] arch_do_signal_or_restart+0x8f/0x7a0 [ 206.427790][ T7877] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 206.427845][ T7877] ? __pfx___x64_sys_futex+0x10/0x10 [ 206.427888][ T7877] exit_to_user_mode_loop+0x8c/0x540 [ 206.427930][ T7877] do_syscall_64+0x4ee/0xf80 [ 206.427988][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.428019][ T7877] RIP: 0033:0x7ff1fa18f7c9 [ 206.428043][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.428071][ T7877] RSP: 002b:00007ff1faff80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.428100][ T7877] RAX: fffffffffffffe00 RBX: 00007ff1fa3e5fa8 RCX: 00007ff1fa18f7c9 [ 206.428120][ T7877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1fa3e5fa8 [ 206.428137][ T7877] RBP: 00007ff1fa3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.428154][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.428171][ T7877] R13: 00007ff1fa3e6038 R14: 00007ffe4b341df0 R15: 00007ffe4b341ed8 [ 206.428211][ T7877] [ 207.197853][ T7872] zswap: compressor not available [ 207.524429][ T7890] netlink: 314 bytes leftover after parsing attributes in process `syz.1.423'. [ 210.552869][ T7935] netlink: 314 bytes leftover after parsing attributes in process `syz.0.433'. [ 210.833651][ T7941] FAULT_INJECTION: forcing a failure. [ 210.833651][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 210.852131][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.852177][ T7941] Tainted: [L]=SOFTLOCKUP [ 210.852187][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.852204][ T7941] Call Trace: [ 210.852214][ T7941] [ 210.852225][ T7941] dump_stack_lvl+0x16c/0x1f0 [ 210.852274][ T7941] should_fail_ex+0x512/0x640 [ 210.852307][ T7941] ? kmem_cache_alloc_noprof+0x62/0x770 [ 210.852345][ T7941] should_failslab+0xc2/0x120 [ 210.852389][ T7941] kmem_cache_alloc_noprof+0x83/0x770 [ 210.852424][ T7941] ? vm_area_dup+0x27/0x8d0 [ 210.852471][ T7941] ? vm_area_dup+0x27/0x8d0 [ 210.852499][ T7941] vm_area_dup+0x27/0x8d0 [ 210.852533][ T7941] dup_mmap+0x6a4/0x20e0 [ 210.852593][ T7941] ? __pfx_dup_mmap+0x10/0x10 [ 210.852664][ T7941] copy_process+0x3b9f/0x7430 [ 210.852708][ T7941] ? __pfx___futex_wait+0x10/0x10 [ 210.852745][ T7941] ? __kasan_slab_free+0x5f/0x80 [ 210.852801][ T7941] ? __pfx_copy_process+0x10/0x10 [ 210.852854][ T7941] ? futex_private_hash_put+0x160/0x1b0 [ 210.852893][ T7941] kernel_clone+0xfc/0x910 [ 210.852940][ T7941] ? __pfx_kernel_clone+0x10/0x10 [ 210.853007][ T7941] ? lockdep_hardirqs_on+0x7c/0x110 [ 210.853066][ T7941] __do_sys_clone+0xce/0x120 [ 210.853112][ T7941] ? __pfx___do_sys_clone+0x10/0x10 [ 210.853184][ T7941] ? xfd_validate_state+0x61/0x180 [ 210.853226][ T7941] do_syscall_64+0xcd/0xf80 [ 210.853269][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.853296][ T7941] RIP: 0033:0x7f6ee818f7c9 [ 210.853322][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.853351][ T7941] RSP: 002b:00007f6ee8f93fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 210.853381][ T7941] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 210.853401][ T7941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010008000 [ 210.853419][ T7941] RBP: 00007f6ee8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.853436][ T7941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.853453][ T7941] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 210.853495][ T7941] [ 211.092445][ T7944] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 211.426218][ T7948] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 212.276587][ T7971] futex_wake_op: syz.3.437 tries to shift op by -2048; fix this program [ 212.436185][ T7971] futex_wake_op: syz.3.437 tries to shift op by -2048; fix this program [ 214.623861][ T7989] netlink: 326 bytes leftover after parsing attributes in process `syz.1.442'. [ 215.402791][ T8010] random: crng reseeded on system resumption [ 219.570868][ T8077] FAULT_INJECTION: forcing a failure. [ 219.570868][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.613309][ T8077] CPU: 0 UID: 0 PID: 8077 Comm: syz.3.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.613343][ T8077] Tainted: [L]=SOFTLOCKUP [ 219.613349][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.613359][ T8077] Call Trace: [ 219.613366][ T8077] [ 219.613374][ T8077] dump_stack_lvl+0x16c/0x1f0 [ 219.613407][ T8077] should_fail_ex+0x512/0x640 [ 219.613431][ T8077] _copy_from_user+0x2e/0xd0 [ 219.613452][ T8077] copy_msghdr_from_user+0x98/0x160 [ 219.613477][ T8077] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 219.613505][ T8077] ? __pfx___schedule+0x10/0x10 [ 219.613533][ T8077] ___sys_sendmsg+0xfe/0x1d0 [ 219.613558][ T8077] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.613599][ T8077] ? __pfx___might_resched+0x10/0x10 [ 219.613629][ T8077] __sys_sendmmsg+0x200/0x420 [ 219.613655][ T8077] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.613684][ T8077] ? __pfx_do_futex+0x10/0x10 [ 219.613712][ T8077] ? fput+0x70/0xf0 [ 219.613731][ T8077] ? xfd_validate_state+0x61/0x180 [ 219.613747][ T8077] ? __pfx_do_writev+0x10/0x10 [ 219.613775][ T8077] __x64_sys_sendmmsg+0x9c/0x100 [ 219.613797][ T8077] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.613823][ T8077] do_syscall_64+0xcd/0xf80 [ 219.613860][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.613879][ T8077] RIP: 0033:0x7ff5b978f7c9 [ 219.613895][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.613913][ T8077] RSP: 002b:00007ff5b79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.613931][ T8077] RAX: ffffffffffffffda RBX: 00007ff5b99e5fa0 RCX: 00007ff5b978f7c9 [ 219.613943][ T8077] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 219.613953][ T8077] RBP: 00007ff5b9813f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.613964][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.613975][ T8077] R13: 00007ff5b99e6038 R14: 00007ff5b99e5fa0 R15: 00007ffcb7e6e328 [ 219.613998][ T8077] [ 220.389263][ T30] audit: type=1800 audit(1765855420.599:9): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.463" name="dbroot" dev="configfs" ino=19820 res=0 errno=0 [ 221.973654][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 221.973693][ T5843] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 221.994040][ T5843] Bluetooth: hci2: Dropping invalid advertising data [ 222.005783][ T5843] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 222.005822][ T5843] Bluetooth: hci2: unknown advertising packet type: 0xbd [ 222.016510][ T5843] Bluetooth: hci2: Dropping invalid advertising data [ 222.033127][ T5843] Bluetooth: hci2: Dropping invalid advertising data [ 222.040919][ T5843] Bluetooth: hci2: Malformed LE Event: 0x02 [ 222.126512][ T8117] sd 0:0:1:0: PR command failed: 1026 [ 222.215442][ T8117] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 222.270025][ T8117] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.771379][ T8131] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 223.044208][ T8135] FAULT_INJECTION: forcing a failure. [ 223.044208][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 223.103572][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.1.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.103619][ T8135] Tainted: [L]=SOFTLOCKUP [ 223.103629][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.103640][ T8135] Call Trace: [ 223.103646][ T8135] [ 223.103654][ T8135] dump_stack_lvl+0x16c/0x1f0 [ 223.103686][ T8135] should_fail_ex+0x512/0x640 [ 223.103706][ T8135] ? kmem_cache_alloc_noprof+0x62/0x770 [ 223.103730][ T8135] should_failslab+0xc2/0x120 [ 223.103758][ T8135] kmem_cache_alloc_noprof+0x83/0x770 [ 223.103779][ T8135] ? __pmd_alloc+0xbf/0x9c0 [ 223.103811][ T8135] ? __pmd_alloc+0xbf/0x9c0 [ 223.103837][ T8135] __pmd_alloc+0xbf/0x9c0 [ 223.103866][ T8135] __handle_mm_fault+0xbeb/0x2bb0 [ 223.103890][ T8135] ? __pfx___handle_mm_fault+0x10/0x10 [ 223.103925][ T8135] ? find_vma+0xbf/0x140 [ 223.103954][ T8135] ? __pfx_find_vma+0x10/0x10 [ 223.103990][ T8135] handle_mm_fault+0x3fe/0xad0 [ 223.104021][ T8135] do_user_addr_fault+0x7a6/0x1370 [ 223.104046][ T8135] ? rcu_is_watching+0x12/0xc0 [ 223.104074][ T8135] exc_page_fault+0x64/0xc0 [ 223.104101][ T8135] asm_exc_page_fault+0x26/0x30 [ 223.104118][ T8135] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 223.104139][ T8135] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 223.104156][ T8135] RSP: 0018:ffffc9000d047e48 EFLAGS: 00050202 [ 223.104171][ T8135] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 223.104182][ T8135] RDX: fffff52001a08fd5 RSI: 0000000000000000 RDI: ffffc9000d047ea0 [ 223.104201][ T8135] RBP: 000000000000000c R08: 0000000000000001 R09: fffff52001a08fd5 [ 223.104211][ T8135] R10: 0000000000000003 R11: ffff88807aee8b30 R12: 0000000000000000 [ 223.104222][ T8135] R13: ffffc9000d047ea0 R14: 0000000000000001 R15: 0000000000000004 [ 223.104244][ T8135] _copy_from_user+0x98/0xd0 [ 223.104266][ T8135] __x64_sys_epoll_ctl+0x131/0x1e0 [ 223.104296][ T8135] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 223.104332][ T8135] do_syscall_64+0xcd/0xf80 [ 223.104360][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.104378][ T8135] RIP: 0033:0x7ff1fa18f7c9 [ 223.104392][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.104409][ T8135] RSP: 002b:00007ff1faff8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 223.104425][ T8135] RAX: ffffffffffffffda RBX: 00007ff1fa3e5fa0 RCX: 00007ff1fa18f7c9 [ 223.104436][ T8135] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 223.104446][ T8135] RBP: 00007ff1faff8090 R08: 0000000000000000 R09: 0000000000000000 [ 223.104457][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.104467][ T8135] R13: 00007ff1fa3e6038 R14: 00007ff1fa3e5fa0 R15: 00007ffe4b341ed8 [ 223.104490][ T8135] [ 223.833640][ T8141] batman_adv: Routing algorithm '7' is not supported [ 223.906932][ T8143] block2mtd: error: cannot open device /sys/module/blocs/block2mtd [ 224.382855][ T8158] FAULT_INJECTION: forcing a failure. [ 224.382855][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 224.397840][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.0.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.397892][ T8158] Tainted: [L]=SOFTLOCKUP [ 224.397903][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.397922][ T8158] Call Trace: [ 224.397933][ T8158] [ 224.397945][ T8158] dump_stack_lvl+0x16c/0x1f0 [ 224.397996][ T8158] should_fail_ex+0x512/0x640 [ 224.398029][ T8158] ? __kvmalloc_node_noprof+0x129/0xa40 [ 224.398078][ T8158] should_failslab+0xc2/0x120 [ 224.398135][ T8158] __kvmalloc_node_noprof+0x14a/0xa40 [ 224.398176][ T8158] ? security_capable+0x7e/0x260 [ 224.398226][ T8158] ? proc_sys_call_handler+0x2d6/0x5b0 [ 224.398261][ T8158] ? ns_capable_noaudit+0xda/0x110 [ 224.398308][ T8158] ? proc_sys_call_handler+0x2d6/0x5b0 [ 224.398346][ T8158] proc_sys_call_handler+0x2d6/0x5b0 [ 224.398389][ T8158] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 224.398429][ T8158] ? copy_splice_read+0x1a8/0xc20 [ 224.398480][ T8158] copy_splice_read+0x618/0xc20 [ 224.398530][ T8158] ? __pfx_copy_splice_read+0x10/0x10 [ 224.398567][ T8158] ? look_up_lock_class+0x59/0x130 [ 224.398608][ T8158] ? lockdep_init_map_type+0x5c/0x270 [ 224.398634][ T8158] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 224.398670][ T8158] ? __pfx_copy_splice_read+0x10/0x10 [ 224.398704][ T8158] do_splice_read+0x285/0x370 [ 224.398741][ T8158] splice_direct_to_actor+0x2a1/0xa30 [ 224.398778][ T8158] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.398819][ T8158] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 224.398865][ T8158] do_splice_direct+0x174/0x240 [ 224.398900][ T8158] ? __pfx_do_splice_direct+0x10/0x10 [ 224.398935][ T8158] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.398975][ T8158] ? rw_verify_area+0xcf/0x6c0 [ 224.399008][ T8158] do_sendfile+0xb06/0xe50 [ 224.399045][ T8158] ? __pfx_do_sendfile+0x10/0x10 [ 224.399081][ T8158] ? __x64_sys_futex+0x1e0/0x4c0 [ 224.399117][ T8158] ? __x64_sys_futex+0x1e9/0x4c0 [ 224.399147][ T8158] __x64_sys_sendfile64+0x1d8/0x220 [ 224.399171][ T8158] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 224.399203][ T8158] do_syscall_64+0xcd/0xf80 [ 224.399240][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.399266][ T8158] RIP: 0033:0x7f6ee818f7c9 [ 224.399287][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.399311][ T8158] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.399336][ T8158] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 224.399352][ T8158] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 224.399367][ T8158] RBP: 00007f6ee8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.399381][ T8158] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 224.399396][ T8158] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 224.399428][ T8158] [ 224.964660][ T8158] FAULT_INJECTION: forcing a failure. [ 224.964660][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 225.053786][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.0.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.053838][ T8158] Tainted: [L]=SOFTLOCKUP [ 225.053849][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.053865][ T8158] Call Trace: [ 225.053875][ T8158] [ 225.053886][ T8158] dump_stack_lvl+0x16c/0x1f0 [ 225.053938][ T8158] should_fail_ex+0x512/0x640 [ 225.053972][ T8158] ? kmem_cache_alloc_noprof+0x62/0x770 [ 225.054015][ T8158] should_failslab+0xc2/0x120 [ 225.054064][ T8158] kmem_cache_alloc_noprof+0x83/0x770 [ 225.054101][ T8158] ? __kernfs_new_node+0xd2/0x990 [ 225.054185][ T8158] ? __kernfs_new_node+0xd2/0x990 [ 225.054220][ T8158] __kernfs_new_node+0xd2/0x990 [ 225.054264][ T8158] ? __pfx___kernfs_new_node+0x10/0x10 [ 225.054313][ T8158] ? find_held_lock+0x2b/0x80 [ 225.054357][ T8158] ? kernfs_root+0xee/0x2a0 [ 225.054403][ T8158] kernfs_new_node+0x13c/0x1e0 [ 225.054454][ T8158] __kernfs_create_file+0x53/0x350 [ 225.054510][ T8158] sysfs_add_file_mode_ns+0x207/0x3c0 [ 225.054557][ T8158] sysfs_merge_group+0x1aa/0x340 [ 225.054599][ T8158] ? __pfx_sysfs_merge_group+0x10/0x10 [ 225.054643][ T8158] ? __pfx_dev_add_physical_location+0x10/0x10 [ 225.054688][ T8158] ? bus_to_subsys+0x131/0x160 [ 225.054742][ T8158] dpm_sysfs_add+0x237/0x280 [ 225.054785][ T8158] device_add+0x9cc/0x1980 [ 225.054834][ T8158] ? __pfx_device_add+0x10/0x10 [ 225.054873][ T8158] ? lockdep_init_map_type+0x5c/0x270 [ 225.054907][ T8158] ? __init_waitqueue_head+0xca/0x150 [ 225.054955][ T8158] rfkill_register+0x1ad/0xb40 [ 225.055000][ T8158] nfc_register_device+0x11f/0x410 [ 225.055051][ T8158] nci_register_device+0x7f1/0xb80 [ 225.055090][ T8158] ? __pfx_nci_register_device+0x10/0x10 [ 225.055143][ T8158] ? lockdep_init_map_type+0x5c/0x270 [ 225.055184][ T8158] virtual_ncidev_open+0x141/0x220 [ 225.055236][ T8158] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 225.055287][ T8158] misc_open+0x26d/0x450 [ 225.055323][ T8158] ? __pfx_misc_open+0x10/0x10 [ 225.055359][ T8158] chrdev_open+0x234/0x6a0 [ 225.055406][ T8158] ? __pfx_apparmor_file_open+0x10/0x10 [ 225.055439][ T8158] ? __pfx_chrdev_open+0x10/0x10 [ 225.055489][ T8158] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 225.055549][ T8158] do_dentry_open+0x748/0x1590 [ 225.055594][ T8158] ? __pfx_chrdev_open+0x10/0x10 [ 225.055653][ T8158] vfs_open+0x82/0x3f0 [ 225.055693][ T8158] path_openat+0x2078/0x3140 [ 225.055749][ T8158] ? trace_sched_exit_tp+0xd1/0x110 [ 225.055796][ T8158] ? __schedule+0x10b9/0x6150 [ 225.055838][ T8158] ? __pfx_path_openat+0x10/0x10 [ 225.055901][ T8158] do_filp_open+0x20b/0x470 [ 225.055951][ T8158] ? __pfx_do_filp_open+0x10/0x10 [ 225.055995][ T8158] ? __pfx___schedule+0x10/0x10 [ 225.056068][ T8158] ? alloc_fd+0x471/0x7d0 [ 225.056139][ T8158] do_sys_openat2+0x121/0x290 [ 225.056174][ T8158] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.056227][ T8158] __x64_sys_openat+0x174/0x210 [ 225.056264][ T8158] ? __pfx___x64_sys_openat+0x10/0x10 [ 225.056317][ T8158] do_syscall_64+0xcd/0xf80 [ 225.056368][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.056402][ T8158] RIP: 0033:0x7f6ee818f7c9 [ 225.056428][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.056460][ T8158] RSP: 002b:00007f6ee8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.056492][ T8158] RAX: ffffffffffffffda RBX: 00007f6ee83e5fa0 RCX: 00007f6ee818f7c9 [ 225.056512][ T8158] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 225.056532][ T8158] RBP: 00007f6ee8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 225.056551][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.056569][ T8158] R13: 00007f6ee83e6038 R14: 00007f6ee83e5fa0 R15: 00007ffc9612a6e8 [ 225.056612][ T8158] [ 226.683128][ T8195] futex_wake_op: syz.0.488 tries to shift op by -2048; fix this program [ 228.104484][ T8224] FAULT_INJECTION: forcing a failure. [ 228.104484][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 228.140693][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.1.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.140745][ T8224] Tainted: [L]=SOFTLOCKUP [ 228.140757][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.140783][ T8224] Call Trace: [ 228.140792][ T8224] [ 228.140804][ T8224] dump_stack_lvl+0x16c/0x1f0 [ 228.140855][ T8224] should_fail_ex+0x512/0x640 [ 228.140885][ T8224] ? __kvmalloc_node_noprof+0x129/0xa40 [ 228.140930][ T8224] should_failslab+0xc2/0x120 [ 228.140977][ T8224] __kvmalloc_node_noprof+0x14a/0xa40 [ 228.141017][ T8224] ? security_capable+0x7e/0x260 [ 228.141066][ T8224] ? proc_sys_call_handler+0x2d6/0x5b0 [ 228.141102][ T8224] ? ns_capable_noaudit+0xda/0x110 [ 228.141156][ T8224] ? proc_sys_call_handler+0x2d6/0x5b0 [ 228.141195][ T8224] proc_sys_call_handler+0x2d6/0x5b0 [ 228.141238][ T8224] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 228.141278][ T8224] ? copy_splice_read+0x1a8/0xc20 [ 228.141335][ T8224] copy_splice_read+0x618/0xc20 [ 228.141390][ T8224] ? __pfx_copy_splice_read+0x10/0x10 [ 228.141438][ T8224] ? look_up_lock_class+0x59/0x130 [ 228.141490][ T8224] ? lockdep_init_map_type+0x5c/0x270 [ 228.141524][ T8224] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 228.141568][ T8224] ? __pfx_copy_splice_read+0x10/0x10 [ 228.141617][ T8224] do_splice_read+0x285/0x370 [ 228.141671][ T8224] splice_direct_to_actor+0x2a1/0xa30 [ 228.141737][ T8224] ? __pfx_direct_splice_actor+0x10/0x10 [ 228.141797][ T8224] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 228.141854][ T8224] do_splice_direct+0x174/0x240 [ 228.141899][ T8224] ? __pfx_do_splice_direct+0x10/0x10 [ 228.141945][ T8224] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 228.141997][ T8224] ? rw_verify_area+0xcf/0x6c0 [ 228.142038][ T8224] do_sendfile+0xb06/0xe50 [ 228.142087][ T8224] ? __pfx_do_sendfile+0x10/0x10 [ 228.142146][ T8224] ? __x64_sys_futex+0x1e0/0x4c0 [ 228.142181][ T8224] ? __x64_sys_futex+0x1e9/0x4c0 [ 228.142221][ T8224] __x64_sys_sendfile64+0x1d8/0x220 [ 228.142254][ T8224] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 228.142295][ T8224] do_syscall_64+0xcd/0xf80 [ 228.142347][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.142380][ T8224] RIP: 0033:0x7ff1fa18f7c9 [ 228.142406][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.142437][ T8224] RSP: 002b:00007ff1faff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 228.142467][ T8224] RAX: ffffffffffffffda RBX: 00007ff1fa3e5fa0 RCX: 00007ff1fa18f7c9 [ 228.142487][ T8224] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 228.142505][ T8224] RBP: 00007ff1fa213f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.142523][ T8224] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 228.142540][ T8224] R13: 00007ff1fa3e6038 R14: 00007ff1fa3e5fa0 R15: 00007ffe4b341ed8 [ 228.142579][ T8224] [ 228.733091][ T8233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.430888][ T8232] netlink: 62 bytes leftover after parsing attributes in process `syz.3.496'. [ 229.791853][ T8260] futex_wake_op: syz.3.499 tries to shift op by -2048; fix this program [ 229.807465][ T8260] futex_wake_op: syz.3.499 tries to shift op by -2048; fix this program [ 230.147035][ T8267] futex_wake_op: syz.0.500 tries to shift op by -2048; fix this program [ 230.174268][ T8267] futex_wake_op: syz.0.500 tries to shift op by -2048; fix this program [ 230.205251][ T8267] 0x000000000001-0x000000020000 : "" [ 230.219829][ T8267] ftl_cs: FTL header corrupt! [ 230.927164][ T8276] netlink: 186 bytes leftover after parsing attributes in process `syz.3.504'. [ 230.972169][ T8276] netlink: 186 bytes leftover after parsing attributes in process `syz.3.504'. [ 231.633437][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 231.652384][ T8304] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 231.671652][ T8304] netlink: 13 bytes leftover after parsing attributes in process `syz.3.509'. [ 231.828210][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 231.857403][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.878774][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.902300][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.914245][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.495340][ T8358] bridge0: port 3(veth0_to_bridge) entered blocking state [ 233.524039][ T8358] bridge0: port 3(veth0_to_bridge) entered disabled state [ 233.543539][ T8358] veth0_to_bridge: entered allmulticast mode [ 233.574743][ T8358] veth0_to_bridge: entered promiscuous mode [ 233.624282][ T8358] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.682867][ T8358] bridge0: port 3(veth0_to_bridge) entered blocking state [ 233.690769][ T8358] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 234.086264][ T8384] FAULT_INJECTION: forcing a failure. [ 234.086264][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 234.236379][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.3.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.236430][ T8384] Tainted: [L]=SOFTLOCKUP [ 234.236440][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.236458][ T8384] Call Trace: [ 234.236469][ T8384] [ 234.236480][ T8384] dump_stack_lvl+0x16c/0x1f0 [ 234.236531][ T8384] should_fail_ex+0x512/0x640 [ 234.236565][ T8384] ? kmem_cache_alloc_noprof+0x62/0x770 [ 234.236605][ T8384] should_failslab+0xc2/0x120 [ 234.236649][ T8384] kmem_cache_alloc_noprof+0x83/0x770 [ 234.236684][ T8384] ? key_alloc+0x3e0/0x1330 [ 234.236726][ T8384] ? key_alloc+0x3e0/0x1330 [ 234.236760][ T8384] key_alloc+0x3e0/0x1330 [ 234.236811][ T8384] ? __pfx_key_alloc+0x10/0x10 [ 234.236861][ T8384] ? apparmor_cred_prepare+0x173/0x370 [ 234.236896][ T8384] keyring_alloc+0x44/0xc0 [ 234.236939][ T8384] lookup_user_key+0xc51/0x1300 [ 234.236974][ T8384] ? __pfx_lookup_user_key+0x10/0x10 [ 234.237016][ T8384] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 234.237066][ T8384] keyctl_setperm_key+0x9d/0x3a0 [ 234.237094][ T8384] ? __pfx_keyctl_setperm_key+0x10/0x10 [ 234.237120][ T8384] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.237151][ T8384] ? ksys_mmap_pgoff+0x85/0x5c0 [ 234.237190][ T8384] ? __pfx_ksys_write+0x10/0x10 [ 234.237235][ T8384] __do_sys_keyctl+0x29a/0x590 [ 234.237265][ T8384] do_syscall_64+0xcd/0xf80 [ 234.237307][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.237334][ T8384] RIP: 0033:0x7ff5b978f7c9 [ 234.237375][ T8384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.237404][ T8384] RSP: 002b:00007ff5b79f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 234.237433][ T8384] RAX: ffffffffffffffda RBX: 00007ff5b99e5fa0 RCX: 00007ff5b978f7c9 [ 234.237455][ T8384] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0000000000000005 [ 234.237473][ T8384] RBP: 00007ff5b9813f91 R08: 0000000000000008 R09: 0000000000000000 [ 234.237492][ T8384] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 234.237509][ T8384] R13: 00007ff5b99e6038 R14: 00007ff5b99e5fa0 R15: 00007ffcb7e6e328 [ 234.237546][ T8384] [ 234.889801][ T8392] : Can't lookup blockdev [ 234.930229][ T8394] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 235.134975][ T8395] : Can't lookup blockdev [ 240.923218][ C0] sched: DL replenish lagged too much [ 261.032671][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.039135][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.905335][ T8453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.946527][ T8454] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.692425][ T8452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.876899][ T8455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.926175][ T8452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.026685][ T8454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.194542][ T8454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.118972][ T8340] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 311.139795][ T8454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.180330][ T8454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.198324][ T8450] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 311.220982][ T8449] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 311.277237][ T8452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.442854][ T8455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.535578][ T8455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.559473][ T8455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.646815][ T8459] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.846509][ T8452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.984855][ T8452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.012757][ T8452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.852138][ T8448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.870466][ T8452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.942351][ T8449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.020498][ T8452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.072544][ T8448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.096755][ T8455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.288106][ T8449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.355447][ T8455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.590417][ T8455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.165435][ T8455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.373941][ T8452] Bluetooth: hci5: command tx timeout [ 315.680698][ T8452] Bluetooth: hci7: command tx timeout [ 316.162135][ T8452] Bluetooth: hci4: command tx timeout [ 317.448224][ T8452] Bluetooth: hci5: command tx timeout [ 318.594572][ T8455] Bluetooth: hci6: command tx timeout [ 318.632675][ T8449] Bluetooth: hci7: command tx timeout [ 320.223967][ T8455] Bluetooth: hci4: command tx timeout [ 322.468495][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.474929][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.526519][ T8448] Bluetooth: hci4: command tx timeout [ 322.545202][ T8449] Bluetooth: hci5: command tx timeout [ 322.550806][ T8455] Bluetooth: hci7: command tx timeout [ 322.567840][ T8452] Bluetooth: hci6: command tx timeout [ 324.634378][ T8448] Bluetooth: hci4: command tx timeout [ 324.651215][ T8452] Bluetooth: hci6: command tx timeout [ 324.674966][ T8449] Bluetooth: hci5: command tx timeout [ 324.680555][ T8455] Bluetooth: hci7: command tx timeout [ 326.721615][ T8455] Bluetooth: hci6: command tx timeout [ 353.187648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.200876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.213536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.226198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.238812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.251633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.264231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.276772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.289461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 353.302114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.193400][ C1] net_ratelimit: 10124 callbacks suppressed [ 358.193430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.211939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.224816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.237364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.249921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.262428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.274929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.287541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.300138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 358.312723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.203243][ C1] net_ratelimit: 12450 callbacks suppressed [ 363.203271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.204640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.210196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.223503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.234318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.247637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.258359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.271844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.282647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 363.295956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.213497][ C1] net_ratelimit: 11582 callbacks suppressed [ 368.213527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 368.214527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.219950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 368.233395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.244601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 368.258029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.269072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 368.282596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.293458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 368.307074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.223452][ C1] net_ratelimit: 11451 callbacks suppressed [ 373.223482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 373.223617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.229909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 373.243177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.254222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 373.267630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.278366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 373.291551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.302496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 373.316168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.233303][ C1] net_ratelimit: 14125 callbacks suppressed [ 378.233334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 378.233698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.240010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 378.252465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.264300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 378.276166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.288357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 378.301481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.312963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 378.324915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.243563][ C1] net_ratelimit: 14409 callbacks suppressed [ 383.243572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.243590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 383.244047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 383.250363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.262306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 383.274167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.286235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 383.299269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.310233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 383.322379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.067452][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.352797][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.253479][ C1] net_ratelimit: 13127 callbacks suppressed [ 388.253509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 388.254692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.259904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 388.272052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.283981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 388.295881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.307998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 388.321792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.332191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 388.344153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.263541][ C0] net_ratelimit: 13153 callbacks suppressed [ 393.263571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.264012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 393.269916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.282074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 393.296064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.306383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 393.318445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.330406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 393.342387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.354630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.273305][ C1] net_ratelimit: 12894 callbacks suppressed [ 398.273335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.273814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.279871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.292099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.304133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.316011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.328236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.342246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.352230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 398.364356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.283160][ C1] net_ratelimit: 12683 callbacks suppressed [ 403.283177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.283187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 403.283661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 403.289617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.301739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 403.315743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.325708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 403.337893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.349904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 403.362284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.293220][ C1] net_ratelimit: 12741 callbacks suppressed [ 408.293248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 408.293867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.299673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 408.311810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.323716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 408.335688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.347694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 408.361743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.372254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 408.384442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.303416][ C1] net_ratelimit: 12845 callbacks suppressed [ 413.303446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 413.303947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.309943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 413.322115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.333997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 413.346074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.359157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 413.372693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.382810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 413.394802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.313387][ C1] net_ratelimit: 12724 callbacks suppressed [ 418.313417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 418.315244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.319770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 418.332048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.343970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 418.356016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.368200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 418.382586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.392380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 418.404588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.323150][ C0] net_ratelimit: 12862 callbacks suppressed [ 423.323180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.323470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 423.329636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.341718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 423.355832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.365795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 423.377881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.389725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 423.401838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.413909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.333365][ C1] net_ratelimit: 12786 callbacks suppressed [ 428.333393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.335418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.339812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.352450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.364404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.376443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.388595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.402620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.412580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 428.424698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.343578][ C1] net_ratelimit: 11860 callbacks suppressed [ 433.343607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 433.343907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.350198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 433.362294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.374125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 433.386034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.398313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 433.412198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.422222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 433.434321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.353297][ C1] net_ratelimit: 12560 callbacks suppressed [ 438.353327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 438.354767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.359750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 438.371863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.383762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 438.395894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.408177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 438.422714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.432106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 438.444196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.088654][ T8454] Bluetooth: hci5: command 0x0406 tx timeout [ 443.297044][ T8449] Bluetooth: hci6: command 0x0406 tx timeout [ 443.363308][ C1] net_ratelimit: 12508 callbacks suppressed [ 443.363336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 443.364618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.369818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 443.381845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.393751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 443.405619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.417723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 443.431680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.441687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 443.453695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.493773][ T8449] Bluetooth: hci7: command 0x0406 tx timeout [ 444.148038][ T8452] Bluetooth: hci4: command 0x0406 tx timeout [ 445.868873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.890199][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.373428][ C1] net_ratelimit: 13013 callbacks suppressed [ 448.373458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 448.375195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.379862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 448.392016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.403852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 448.415764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.427853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 448.442189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.451968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 448.463966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.383559][ C1] net_ratelimit: 12913 callbacks suppressed [ 453.383596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 453.383659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.390009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 453.402129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.413930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 453.425880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.437929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 453.451945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.461916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 453.474037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.179631][ T31] INFO: task syz-executor:8440 blocked for more than 143 seconds. [ 458.306526][ T31] Tainted: G L syzkaller #0 [ 458.393651][ C1] net_ratelimit: 12629 callbacks suppressed [ 458.393681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 458.394306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.400212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 458.412412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.424211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 458.436332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.448450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 458.462538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.472389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 458.484764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.639618][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.733324][ T31] task:syz-executor state:D stack:26344 pid:8440 tgid:8440 ppid:1 task_flags:0x400140 flags:0x00080002 [ 461.462950][ T31] Call Trace: [ 461.483355][ T31] [ 461.486352][ T31] ? __schedule+0x10b9/0x6150 [ 461.491089][ T31] __schedule+0x1139/0x6150 [ 462.629458][ T31] ? __pfx___schedule+0x10/0x10 [ 462.650681][ T31] ? find_held_lock+0x2b/0x80 [ 462.671891][ T31] ? schedule+0x2d7/0x3a0 [ 463.231982][ T31] schedule+0xe7/0x3a0 [ 463.252774][ T31] schedule_preempt_disabled+0x13/0x30 [ 463.274816][ T31] __mutex_lock+0xc69/0x1ca0 [ 463.279603][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 463.403171][ C0] net_ratelimit: 12395 callbacks suppressed [ 463.403197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.403490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 463.409543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.421725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 463.435834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.445716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 463.457795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.469690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 463.481672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.493777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:24:3c:67:4a:a0, vlan:0) [ 464.421640][ T31] ? __nla_validate_parse+0x600/0x2880 [ 464.662134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 464.683948][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 464.689849][ T31] ? __kernel_text_address+0xd/0x40 [ 465.851243][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 465.902052][ T31] ? rtnl_lock+0x9/0x20 [ 466.052412][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 466.074769][ T31] ? __lock_acquire+0x436/0x2890 [ 466.079872][ T31] ? stack_trace_save+0x8e/0xc0 [ 466.525354][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 466.530845][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 466.752899][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 466.775426][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 466.780898][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 466.948731][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 467.591069][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 467.613394][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.619044][ T31] ? __lock_acquire+0x436/0x2890 [ 467.835261][ T31] netlink_rcv_skb+0x158/0x420 [ 467.840424][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.099080][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10