last executing test programs: 7.551630713s ago: executing program 3 (id=448): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001180)=""/187, 0xbb) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4bfa, 0x1) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000140)=0x1) write$auto(r6, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r4, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) 6.261549511s ago: executing program 3 (id=452): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x28, 0x0, 0xc) mmap$auto(0x0, 0x128011, 0x1, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0x7, 0x2) socket(0x10, 0x2, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open_by_handle_at$auto(r1, &(0x7f0000000180)={0x97, 0x6, "e84a2d7be87a72615705341d08301d88799890d3e6fe7658933bdcacc82a28a26463596d0617194f4abe151de846bf0eb6f1183acf01a07fb17d61b5cca993a87a7aed3d65bf567a6a8608b296bd91409e5abbbb8ff2079cc05058407459d070ba007d3b12cee5ae41fa11c7df60b9c7721eb28d37670d8ec4fd73fd57ce045f84835fb0a5ddb2dc267a549471b0e39fd78cbd0d4980c5"}, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x8) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000000c0), 0x9, &(0x7f0000000100)={&(0x7f00000001c0)="aa128c932cbce5980703f1440ce7d07e8bdaf65dbc2335722f808aee27b209d0810b6fb89808b5a95faff06ecbb8d531b9c0c501915a91ce2cd02eeb65d9d08dbd14c5cbccca5a929125bc2c40ea36b20ca5b34601bad245d28efbf53dda56daf43535f96179d57db201c85bc0eb29e2e78e44df43c47bbb5d5f8cb0c8d2ccdbbde0fba95aa10b010129613ea3ef580ad3875cd129be7dad50a7d6", 0x9}, 0x6, &(0x7f0000000300)="f8ef8ab22ea434792d759e4ce4151e005b776596dc73db083bf9d7036e2f79f04f3235513456a5ce68a54e88038ec82d897c0a6f4ad09903a5fdfd06ec5f5ae6206be4e3bad13fa29d4fcf18acde2de6960e965f19c9621de4dec310332ca39d1d58c0748756bfe54dea15d402aba452c3299004087f5b6801f12b8819c6fb498a0b4c59da44860ae2b77929b289f419ad5ebdd9b839e0d878e255d215192eb9c4ed09596c87cc642b7ae9cbbd1e70554c9a357701cb2bfb4ffa75cd863cc7a0b4d1c589046374d0b353ecf8bfa72919cf9bd7e6fe6a0245", 0x0, 0x9}, 0x3}, 0x7, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x902, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) clone$auto(0x8, 0xb, 0x0, 0x0, 0x2) 5.072532255s ago: executing program 2 (id=468): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0xd, 0x40009, 0x100000e0, 0x9b72, 0x7, 0x400000000028000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x5, 0x2, 0xfffff797) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4f, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x7, 0xffffff7a, 0x16b009c2, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5c, 0x400, 0x6, 0x4, 0x8000, 0x7f}}) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x181701, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) bind$auto(r0, &(0x7f00000000c0)=@can={0x1d, r2, 0xfd}, 0x6a) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYBLOB="010027b57000fbdbdf25140000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0800974100000000a05fc891442a9b5f519074ce632f1ea0005d05a1fe62d9c707996b6bce96176695e33b2d6e377664e9ba"], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x804) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0x29, 0x2, 0x0) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000100)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) fcntl$auto(r3, 0x8001, r9) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 4.10308724s ago: executing program 0 (id=458): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r0, 0x4b67, 0x1) mmap$auto(0x0, 0x10000002020009, 0x1, 0xebe, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) 4.101364289s ago: executing program 3 (id=470): clone$auto(0x8, 0xb, 0x0, 0x0, 0x2) 3.096314414s ago: executing program 0 (id=459): socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0xffffff39) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x102000, 0x2003f2, 0x15) r1 = socket(0x23, 0x2, 0x0) sendto$auto(r1, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x103001, 0x0) open(0x0, 0x22040, 0x75) socket(0xa, 0x3, 0x87) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x4, 0x4, 0x5, 0x7) 3.096188317s ago: executing program 3 (id=461): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x240000, r0}) read$auto_ftrace_event_format_fops_trace_events(r1, &(0x7f0000000200)=""/27, 0x1b) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x942, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}]}, 0x24}}, 0x20040890) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0xb}, 0x801}, 0xfffffff9, 0x10, 0x0) socket(0xa, 0x1, 0x84) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$auto_SG_GET_SCSI_ID(r7, 0x2276, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0x50040010}, 0x801) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r3) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25020000009407557c98dc73bc4cd489870b9a4f235c8195ef"], 0x14}, 0x1, 0x0, 0x0, 0x4c68aba9bfb7025e}, 0x8001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x800000bc3, 0x800, 0x3, 0x2, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.079661286s ago: executing program 1 (id=462): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) ioctl$auto(0x3, 0x40085400, 0x38) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0x6, &(0x7f0000000180)="c612ce23b2f454794662b2076da3fa3fff0c11fe50522467cc0db2524ba69db15d4aff2903b4b901264febd6708ab8d0c6e67edd08cabc2408861c1ddb3ab89378ea83dd1188d2e67e4603ca") close_range$auto(r2, r2, 0x80000002) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20c84) getdents64$auto(r3, 0x0, 0x18) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2.24919926s ago: executing program 0 (id=463): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x7352, 0x36, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x4, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x84) r1 = socket(0x2, 0x3, 0x1) connect$auto(r1, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x2) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 2.248287509s ago: executing program 2 (id=464): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x2, 0x0) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000024, 0xfffffffffffffff7, 0xffffffffffffffff}, 0x0, 0x1, 0x1) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf33") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) pread64$auto(r4, 0x0, 0x7fff, 0x3) remap_file_pages$auto(0x9, 0x2200000, 0x8, 0x80000001, 0xfffffffffffff5f3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x408, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x101}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, "7424d6"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_CSA_IES={0x347, 0xb9, 0x0, 0x1, [@typed={0x4, 0x8e}, @nested={0x202, 0x9f, 0x0, 0x1, [@nested={0x4, 0xb3}, @generic="26e1f1206c7ea8ae6d56a81610c3757e4460239b04b59b08efeca6da2a1c4bcdc3fd04249366d20d31ee7b2116ad1723a6f40f29cf515550a435b864f5b6c9983eaf545aaa99979ee278cfb634474059caff28d9", @generic="808bf27e07f82a3c8e70b63a2a41d7fdfe429c8abb33269c57ce20636c5fe7acea6b3d69737296681c4252c0ceadfceed8b1e1b7ef5e7047f268588aa6998e92ee29f8f1187a175c2edca565ebae6ef1e7d165b3bfe9348940df378249264e1ae123f2e8d215f97787291e598aad9b6ef43768c0d839995d89459e5b575f8e8269b8690af67fbe8e2a6c9cf30f72f3834ef024f454ba07152cf4094584bc252234a27c41f38ad25b4ad10ad331fb3ddff592bd2b99a955a847f220ae4d7c5ffe339307ad19f33aa10cf3cbb73525e0e4d884fa77c35b14879ef66d47cceb", @generic="99e49ede2a68a8e3c95d33f4965e5be4ad8ac7550d1fb07af992abb5ce93ab01c7533d2f5bea10c75c1259672e3719a3b7c15a5a12a510bcf01b5f55291c2abb251d4635cf5edfd8b00874c833cfeee389255e840dc53eb6f2db6801ed6f7373f89d06d67035ba1fac62532ad6bae4afaa6ded9c41f1071687110c7e7e4504713dfe39f0040d5b061431c4e261c06156681ed320c7e76f6c8c486d4f84e04c1f60dfeea8b5728beea46a497fa93dd652720bdd1c8b0bcf354707470660deae63c8b501f85a61612b"]}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r1}, @generic="823934d4f3a9c88a75df6424ea34b24f47ac4cd079f0e61d675e786b2b033747adae86e0c0ad633f84e7568fb8755d6ae5f25d2784cd9469d1b6f8fb81de0fc629dc3500a524", @generic="73d75bebb31834764118576f6a4df3d069552780ae5e1cc94008905d9b85765e73d3b9f43ff2bcfc295baaa03f5de2e78186cdc031441a891f9318428a533ad65e7d654736139a840e56ecc8533b1eb18e851ed53c1a33b53a6fa22874e5c67d7f77ccc23b4d567c44460dc8b96c16a1652a27779e24ca0dabcd94d29246b62f03b1bf4d171a4b72b9fe0018cf4d19fc64f4472f11e30e3b2bff4a63245834e839acdbacf2f67451c680c87c75eb2de3a1406342443eb3de8737eaad2ef6061ca48362a70d1e5db576709c95cce261e7fe240380429340d2b165b6da6f6fa5ac92cb145f3a752acbfb9fabd515"]}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x38, 0x23, 0x0, 0x1, [@typed={0x7, 0x2f, 0x0, 0x0, @str='#:\x00'}, @nested={0x2c, 0x95, 0x0, 0x1, [@typed={0x25, 0x66, 0x0, 0x0, @binary="f799fefc694100c12af43ec4c340487e69c58bca4be301b5c7a2766dcd1ee09798"}]}]}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x54, 0x14e, "29f8ae262e78eb98783c6a524c58f130fd82868bd7396f922b1765698038696454fd89caf67a15329c3fd1f3b8f034f2f2569f0cf4e6f68c274f048abfe6b29b07ee4082d41b10579a5ae79df3ebd56d"}]}, 0x408}, 0x1, 0x0, 0x0, 0x20000015}, 0x8051) 2.247841798s ago: executing program 1 (id=475): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0xd, 0x40009, 0x100000e0, 0x9b72, 0x7, 0x400000000028000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x5, 0x2, 0xfffff797) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4f, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x7, 0xffffff7a, 0x16b009c2, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5c, 0x400, 0x6, 0x4, 0x8000, 0x7f}}) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x181701, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) bind$auto(r0, &(0x7f00000000c0)=@can={0x1d, r2, 0xfd}, 0x6a) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYBLOB="010027b57000fbdbdf25140000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0800974100000000a05fc891442a9b5f519074ce632f1ea0005d05a1fe62d9c707996b6bce96176695e33b2d6e377664e9ba"], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x804) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0x29, 0x2, 0x0) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000100)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) fcntl$auto(r3, 0x8001, r9) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 1.684295729s ago: executing program 2 (id=466): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x28, 0x0, 0xc) mmap$auto(0x0, 0x128011, 0x1, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0x7, 0x2) socket(0x10, 0x2, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open_by_handle_at$auto(r1, &(0x7f0000000180)={0x97, 0x6, "e84a2d7be87a72615705341d08301d88799890d3e6fe7658933bdcacc82a28a26463596d0617194f4abe151de846bf0eb6f1183acf01a07fb17d61b5cca993a87a7aed3d65bf567a6a8608b296bd91409e5abbbb8ff2079cc05058407459d070ba007d3b12cee5ae41fa11c7df60b9c7721eb28d37670d8ec4fd73fd57ce045f84835fb0a5ddb2dc267a549471b0e39fd78cbd0d4980c5"}, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x8) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x61, 0x0, 0x10000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, &(0x7f0000000040)=0x7fffffff) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00 \x00'/21, 0x100000002, 0x100000001) 1.217765086s ago: executing program 1 (id=471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = memfd_create$auto(0x0, 0x4) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x640601, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty46\x00', 0x88a42, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = open(0x0, 0x222c0, 0x0) ioctl$auto(0x3, 0x541b, r1) 1.216638895s ago: executing program 0 (id=480): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/netdevsim/unlink_device\x00', 0x10b081, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x10004010) r1 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r1, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x810004, 0xffb, 0x11, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) ioprio_set$auto(0x80000000, 0x0, 0x804b34) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000001, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) close_range$auto(0x2, 0x8, 0x0) mlock$auto(0x112, 0x80006) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 849.311565ms ago: executing program 2 (id=472): clone$auto(0x8, 0xb, 0x0, 0x0, 0x2) 707.748307ms ago: executing program 1 (id=473): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={0x0}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\xf4\x97\xff*\x8a\xeb+8A\x99\x17\xfc\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r0, 0x8001) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 552.793046ms ago: executing program 0 (id=474): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000000040)='\x00', 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/syz_tun/accept_local\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x2440, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, 0x0, 0x20202, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0xb, 0x8) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x80805, 0x0) socketpair$auto(0x5, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x80047437, 0x10000000000402) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r3, 0x4144, 0x0) 522.851387ms ago: executing program 2 (id=476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x1, 0x6, 0x7, 0xff) ioctl$auto(0x4000000000000c8, 0xb19b, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x5d9f40, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='\\*]\xde`h\xfc\x01)A\t', 0x7e, 0x109, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r2 = open(0x0, 0x22240, 0x154) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0x8001, 0x2, 0x6, 0x8002, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x4000000f, 0x2df, 0x500, 0x10000, 0x501, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) io_uring_register$auto(r2, 0x24, 0x0, 0x0) mq_timedsend$auto(r1, &(0x7f0000000100)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x7, 0x9, &(0x7f0000000240)={0x8000000000009, 0x101}) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) semctl$auto_GETPID(0x40, 0xf8, 0xb, 0x8000) rt_tgsigqueueinfo$auto(0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)={@siginfo_0_0={0x6, 0x8, 0x8, @_kill={0x0, 0xee01}}}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) r3 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r3, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r4, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(&(0x7f0000000180)={0x1f, @raw, 0x80000002, 0x0, 0x8}, 0x0, 0x7ffffffff000, 0x0) 0s ago: executing program 2 (id=477): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x1102, 0x0) acct$auto(&(0x7f0000000100)='/dev/psaux\x00') mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, r3, 0x1, 0x51bd2e, 0x25dfcbfa, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder1\x00', 0x100, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)="29f215c0f148e89689e63025f7a0ea293c3ec764da6b6e807bb8a0df8e458a99d0788c5a087e898520b16a513f844f51a5c35ca5795434e739e3f6ec82b30e0300d5e594f887016ea87f3b0b2945e914e68fc7d31c87f3c6") r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r8, r9, 0x0, 0x1000200) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x18, r7, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000580)={{0x9, 0xee00, 0xee01, 0x5, 0x7, 0x2, 0x4}, 0x5, 0x7, 0x46e, 0x10001, @raw=0xf5b, @raw=0x1, 0xfff9, 0x0, &(0x7f0000000400)="d079b7007f36113dc196fa0d0dd32e5c42067cefdee63b4ea71d6f15e459e4f63a11ec3c21a99cdfef8dc32f777ffcd64d83f3f0797e2735cba941dece398a3b24a78932ca02b6fef100b5826e339fff1557030d6b6992842858c70b26861639abb499be9da3ae664958894a5c5d9eb6b4acfa51c70ea2fc", &(0x7f0000000480)="57fedc103ea07b7fa426ccec37d1f623d2862aa81bf37ec076f975136923826016706b5c0c91dd2731af453b354ef30a8ea9170b685d52a5792a6456e73fdbef2015a14dedcb68d80a9401e63b8efe184ea2983fc36821e2812618cb47ba0ee168c9d656093372871a50e3ed596fbf84756a18080bfe3bb01aee3a69eb19f6f4d279727ada7cbbfce67532ecd0d3b683978bf6acfac36311ec74ee175f6fff5af3ee5879b109eeb9d3b90dcea578f1dedd9f6c5e2aa1a2f89d18985a40736910fe7b6af7332ce0706748bfc50efb176af1573e40b1e1f0a8fcd7c7"}) r11 = setfsuid$auto(0xee00) r12 = setfsuid$auto(0xee01) setresuid$auto(r11, r12, r11) r13 = setfsuid$auto(0xee00) r14 = setfsuid$auto(0xee01) setresuid$auto(r13, r14, r13) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000037c0)=ANY=[@ANYBLOB='L0\x00\x00', @ANYRES16=r7, @ANYBLOB="080029bd7000fddbdf250c000000d505018008000d000a01010108002500", @ANYRES32=r1, @ANYBLOB="1400d600ff020000000000000000000000000001d001338014008900ff02000000000000000000000000000104002880dae3584cf90e3644e5e71bc689d9f0c5660d3b6f0b7e57776ad2fa3ac8e459bfc4810c03224b7e9febc2401726d605928aed7cd8077e63938c77f63058482259fbd9a90f8efc47435d0089664fcbbd23a4e4914dd4baf5fc14ba4e0109e0f79083371c1b8949640a9ee7c5a25ba898ef36f8cdf9db64b7d5ffbd2bcfa3265a5be27a3064a964352448b485ada3507d562367e352fcf5dda8c51d547ad20fb43ae3c3ec82b2b0ba1e28e1e3c2cd2caf1a299908004400", @ANYRES32=r1, @ANYBLOB="08001600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0800c00081000000000c00e800fc010000000000000c009f800800d8000700000000000076050380f801d2809ceb0f00df565293fa2d65a34f92b62fe59dfd7ffa0c31a17197b7bc3762b332da8276d44b0c7fe7eb4172bded98295dc1995df44a6cdedb9277cc3c1eefbe3da237bf2f567ad1bcabbe8c2b5b3997d68a2170b83b7fb4300922e455ce4b8fd4e29f47165f717757b484554d9484b86dba0c13ecf9f79de4b33e6dda54a560db529505fecf0f9693cddc3f6f0f273ad1a122300400f98083847b69b165084450920cc4fd8d5b41c5f127076f4714d494c6a643ce08839de3703d8908f2f03f7c70ecfd02d31b0d951b13dfca81c4804ded3ec39552da4425fd29f81df1e6bd59f8e748ee9a055b67b095aa2c3869010ebd03730a8acab2bc0fc4e8e317f708001500", @ANYRES32=r10, @ANYBLOB="7b66d184b253c4de6110ca6dd7bd5ec5da361da90687f309cec5dd7f076b88341e4e0dd75a5c9a51b8284c83e9465fdc7945c1a4a9c0cf373390e9c42c37e8c4ae3217630752543da0b9e172a6204387adf465fe811da4a19c423e096a019fa9bcf6d5e922d2f2666927eb39191f151e3e9a6adeb12632027c4ad4d5945980ff38426bfbd223f13e2a8cd5d184c09e778dbe3a212bdfb6c29b51cb9e56c34b21392a0400518008002900", @ANYRES32=r12, @ANYBLOB="3d000b002504c3ca547fe155b58a7da3068c8965ee597f90ab70cf37263567fda6eef5c47226c7bc7216c573a34e26dec44ff27e3763ed05561f19922f0000001400c400ff0200000000000000000000000000015002ed800800f300", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="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"], 0x304c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$auto_FIBMAP(r9, 0x1, 0x8) ioctl$auto_KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) kernel console output (not intermixed with test programs): ? kasan_save_track+0x14/0x30 [ 87.284886][ T6006] ? __kasan_kmalloc+0xaa/0xb0 [ 87.284906][ T6006] ? __kmalloc_noprof+0x301/0x850 [ 87.284926][ T6006] ? copy_splice_read+0x1a3/0xb90 [ 87.284951][ T6006] ? do_splice_read+0x285/0x370 [ 87.284978][ T6006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.285013][ T6006] alloc_pages_bulk_noprof+0x782/0x1490 [ 87.285042][ T6006] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 87.285069][ T6006] ? __kmalloc_noprof+0x320/0x850 [ 87.285093][ T6006] copy_splice_read+0x1e1/0xb90 [ 87.285111][ T6006] ? __pfx_copy_splice_read+0x10/0x10 [ 87.285127][ T6006] ? look_up_lock_class+0x55/0x120 [ 87.285150][ T6006] ? lockdep_init_map_type+0x5c/0x250 [ 87.285170][ T6006] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 87.285194][ T6006] ? __pfx_copy_splice_read+0x10/0x10 [ 87.285208][ T6006] do_splice_read+0x285/0x370 [ 87.285225][ T6006] splice_direct_to_actor+0x2a1/0xa30 [ 87.285242][ T6006] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.285259][ T6006] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 87.285279][ T6006] do_splice_direct+0x174/0x240 [ 87.285295][ T6006] ? __pfx_do_splice_direct+0x10/0x10 [ 87.285309][ T6006] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.285337][ T6006] ? rw_verify_area+0xce/0x6d0 [ 87.285359][ T6006] do_sendfile+0xadc/0xe20 [ 87.285384][ T6006] ? __pfx_do_sendfile+0x10/0x10 [ 87.285408][ T6006] ? __x64_sys_futex+0x34f/0x4d0 [ 87.285426][ T6006] ? __x64_sys_futex+0x358/0x4d0 [ 87.285449][ T6006] __x64_sys_sendfile64+0x1d8/0x220 [ 87.285466][ T6006] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 87.285488][ T6006] do_syscall_64+0x106/0xf80 [ 87.285507][ T6006] ? clear_bhb_loop+0x40/0x90 [ 87.285525][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.285539][ T6006] RIP: 0033:0x7f296659c799 [ 87.285552][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.285566][ T6006] RSP: 002b:00007f296738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.285580][ T6006] RAX: ffffffffffffffda RBX: 00007f2966815fa0 RCX: 00007f296659c799 [ 87.285591][ T6006] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 87.285599][ T6006] RBP: 00007f2966632c99 R08: 0000000000000000 R09: 0000000000000000 [ 87.285608][ T6006] R10: 0000000000004a00 R11: 0000000000000246 R12: 0000000000000000 [ 87.285616][ T6006] R13: 00007f2966816038 R14: 00007f2966815fa0 R15: 00007fffcb64af98 [ 87.285635][ T6006] [ 94.909009][ T6055] FAULT_INJECTION: forcing a failure. [ 94.909009][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 94.957628][ T6057] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 94.965724][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 94.965759][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.965775][ T6055] Call Trace: [ 94.965784][ T6055] [ 94.965794][ T6055] dump_stack_lvl+0x100/0x190 [ 94.965840][ T6055] should_fail_ex.cold+0x5/0xa [ 94.965873][ T6055] should_failslab+0xc2/0x120 [ 94.965906][ T6055] __kmalloc_cache_noprof+0x7a/0x6f0 [ 94.965942][ T6055] ? acpi_evaluate_object+0xf5/0xe00 [ 94.965969][ T6055] ? __lock_acquire+0x4a5/0x2630 [ 94.966009][ T6055] acpi_evaluate_object+0xf5/0xe00 [ 94.966037][ T6055] ? kasan_save_stack+0x30/0x50 [ 94.966075][ T6055] ? kasan_save_track+0x14/0x30 [ 94.966128][ T6055] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 94.966169][ T6055] acpi_evaluate_integer+0xdf/0x220 [ 94.966210][ T6055] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 94.966266][ T6055] ? __pfx_status_show+0x10/0x10 [ 94.966291][ T6055] status_show+0xa0/0x120 [ 94.966318][ T6055] ? __pfx_status_show+0x10/0x10 [ 94.966353][ T6055] dev_attr_show+0x52/0xa0 [ 94.966386][ T6055] ? __pfx_dev_attr_show+0x10/0x10 [ 94.966417][ T6055] sysfs_kf_seq_show+0x217/0x3a0 [ 94.966458][ T6055] seq_read_iter+0x32f/0x1270 [ 94.966514][ T6055] kernfs_fop_read_iter+0x46c/0x610 [ 94.966546][ T6055] ? rw_verify_area+0xce/0x6d0 [ 94.966583][ T6055] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 94.966615][ T6055] vfs_read+0x825/0xb30 [ 94.966661][ T6055] ? __pfx_vfs_read+0x10/0x10 [ 94.966725][ T6055] ksys_read+0x12a/0x250 [ 94.966750][ T6055] ? __pfx_ksys_read+0x10/0x10 [ 94.966787][ T6055] do_syscall_64+0x106/0xf80 [ 94.966822][ T6055] ? clear_bhb_loop+0x40/0x90 [ 94.966856][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.966883][ T6055] RIP: 0033:0x7f4241b9c799 [ 94.966906][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.966931][ T6055] RSP: 002b:00007f424297e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.966956][ T6055] RAX: ffffffffffffffda RBX: 00007f4241e15fa0 RCX: 00007f4241b9c799 [ 94.966974][ T6055] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 94.966991][ T6055] RBP: 00007f4241c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 94.967007][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.967023][ T6055] R13: 00007f4241e16038 R14: 00007f4241e15fa0 R15: 00007ffc7c12e688 [ 94.967062][ T6055] [ 95.476389][ T6061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 95.916777][ T6084] FAULT_INJECTION: forcing a failure. [ 95.916777][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 95.916816][ T6084] CPU: 1 UID: 0 PID: 6084 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 95.916849][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.916864][ T6084] Call Trace: [ 95.916873][ T6084] [ 95.916883][ T6084] dump_stack_lvl+0x100/0x190 [ 95.916927][ T6084] should_fail_ex.cold+0x5/0xa [ 95.916958][ T6084] ? copy_splice_read+0x1a3/0xb90 [ 95.916984][ T6084] should_failslab+0xc2/0x120 [ 95.917012][ T6084] __kmalloc_noprof+0xe0/0x850 [ 95.917068][ T6084] copy_splice_read+0x1a3/0xb90 [ 95.917104][ T6084] ? __pfx_copy_splice_read+0x10/0x10 [ 95.917135][ T6084] ? look_up_lock_class+0x55/0x120 [ 95.917181][ T6084] ? lockdep_init_map_type+0x5c/0x250 [ 95.917218][ T6084] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 95.917261][ T6084] ? __pfx_copy_splice_read+0x10/0x10 [ 95.917288][ T6084] do_splice_read+0x285/0x370 [ 95.917319][ T6084] splice_direct_to_actor+0x2a1/0xa30 [ 95.917350][ T6084] ? __pfx_direct_splice_actor+0x10/0x10 [ 95.917383][ T6084] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 95.917423][ T6084] do_splice_direct+0x174/0x240 [ 95.917451][ T6084] ? __pfx_do_splice_direct+0x10/0x10 [ 95.917481][ T6084] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 95.917526][ T6084] ? rw_verify_area+0xce/0x6d0 [ 95.917565][ T6084] do_sendfile+0xadc/0xe20 [ 95.917610][ T6084] ? __pfx_do_sendfile+0x10/0x10 [ 95.917656][ T6084] ? __x64_sys_futex+0x34f/0x4d0 [ 95.917689][ T6084] ? __x64_sys_futex+0x358/0x4d0 [ 95.917726][ T6084] __x64_sys_sendfile64+0x1d8/0x220 [ 95.917757][ T6084] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 95.917799][ T6084] do_syscall_64+0x106/0xf80 [ 95.917835][ T6084] ? clear_bhb_loop+0x40/0x90 [ 95.917870][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.917899][ T6084] RIP: 0033:0x7f4241b9c799 [ 95.917922][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.917948][ T6084] RSP: 002b:00007f424297e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 95.917976][ T6084] RAX: ffffffffffffffda RBX: 00007f4241e15fa0 RCX: 00007f4241b9c799 [ 95.917994][ T6084] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 95.918010][ T6084] RBP: 00007f4241c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 95.918027][ T6084] R10: 0000000000004a00 R11: 0000000000000246 R12: 0000000000000000 [ 95.918051][ T6084] R13: 00007f4241e16038 R14: 00007f4241e15fa0 R15: 00007ffc7c12e688 [ 95.918089][ T6084] [ 96.279127][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 96.683273][ T6103] mmap: syz.3.35 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.444117][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 102.333014][ T6221] zram: Added device: zram1 [ 102.636513][ T6232] zram: Added device: zram2 [ 102.876250][ T6241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.926443][ T6241] FAULT_INJECTION: forcing a failure. [ 102.926443][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 102.987989][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 102.988028][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.988044][ T6241] Call Trace: [ 102.988054][ T6241] [ 102.988065][ T6241] dump_stack_lvl+0x100/0x190 [ 102.988112][ T6241] should_fail_ex.cold+0x5/0xa [ 102.988145][ T6241] should_failslab+0xc2/0x120 [ 102.988176][ T6241] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 102.988218][ T6241] ? alloc_vfsmnt+0x23/0x6a0 [ 102.988260][ T6241] alloc_vfsmnt+0x23/0x6a0 [ 102.988295][ T6241] fc_mount+0x105/0x220 [ 102.988346][ T6241] trace_automount.cold+0x70/0x75 [ 102.988386][ T6241] __traverse_mounts+0x1b9/0x8a0 [ 102.988426][ T6241] step_into_slowpath+0xb7e/0xf90 [ 102.988463][ T6241] ? __d_lookup+0x25c/0x4a0 [ 102.988498][ T6241] ? __d_lookup+0x25c/0x4a0 [ 102.988541][ T6241] ? __pfx_step_into_slowpath+0x10/0x10 [ 102.988580][ T6241] ? __d_lookup+0x266/0x4a0 [ 102.988622][ T6241] ? lookup_fast+0x2da/0x600 [ 102.988657][ T6241] ? inode_permission+0x374/0x620 [ 102.988697][ T6241] link_path_walk+0xf28/0x1cc0 [ 102.988747][ T6241] path_openat+0x1be/0x31a0 [ 102.988775][ T6241] ? kasan_save_stack+0x3f/0x50 [ 102.988814][ T6241] ? kasan_save_stack+0x30/0x50 [ 102.988850][ T6241] ? kasan_save_track+0x14/0x30 [ 102.988890][ T6241] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 102.988940][ T6241] ? __pfx_path_openat+0x10/0x10 [ 102.988987][ T6241] do_file_open+0x20e/0x430 [ 102.989020][ T6241] ? __pfx_do_file_open+0x10/0x10 [ 102.989076][ T6241] ? alloc_fd+0x476/0x790 [ 102.989108][ T6241] ? do_getname+0x191/0x390 [ 102.989146][ T6241] do_sys_openat2+0x10d/0x1e0 [ 102.989181][ T6241] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.989219][ T6241] ? __fget_files+0x21f/0x3d0 [ 102.989253][ T6241] __x64_sys_openat+0x12d/0x210 [ 102.989291][ T6241] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.989353][ T6241] do_syscall_64+0x106/0xf80 [ 102.989394][ T6241] ? clear_bhb_loop+0x40/0x90 [ 102.989429][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.989457][ T6241] RIP: 0033:0x7f296659c799 [ 102.989481][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.989507][ T6241] RSP: 002b:00007f296738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.989536][ T6241] RAX: ffffffffffffffda RBX: 00007f2966815fa0 RCX: 00007f296659c799 [ 102.989555][ T6241] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 102.989573][ T6241] RBP: 00007f2966632c99 R08: 0000000000000000 R09: 0000000000000000 [ 102.989589][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.989606][ T6241] R13: 00007f2966816038 R14: 00007f2966815fa0 R15: 00007fffcb64af98 [ 102.989641][ T6241] [ 104.062021][ T6261] FAULT_INJECTION: forcing a failure. [ 104.062021][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 104.126476][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 104.126496][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.126504][ T6261] Call Trace: [ 104.126509][ T6261] [ 104.126514][ T6261] dump_stack_lvl+0x100/0x190 [ 104.126540][ T6261] should_fail_ex.cold+0x5/0xa [ 104.126557][ T6261] should_failslab+0xc2/0x120 [ 104.126573][ T6261] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 104.126594][ T6261] ? blk_alloc_queue+0x31/0x790 [ 104.126615][ T6261] blk_alloc_queue+0x31/0x790 [ 104.126634][ T6261] __blk_alloc_disk+0xa0/0x170 [ 104.126649][ T6261] ? __pfx___blk_alloc_disk+0x10/0x10 [ 104.126674][ T6261] ? __pfx_idr_alloc+0x10/0x10 [ 104.126692][ T6261] ? lockdep_init_map_type+0x5c/0x250 [ 104.126711][ T6261] ? __raw_spin_lock_init+0x3a/0x110 [ 104.126733][ T6261] ? __pfx_hot_add_show+0x10/0x10 [ 104.126751][ T6261] zram_add+0x1bf/0x610 [ 104.126769][ T6261] ? __pfx_zram_add+0x10/0x10 [ 104.126798][ T6261] ? find_held_lock+0x2b/0x80 [ 104.126817][ T6261] ? sysfs_file_kobj+0xe4/0x290 [ 104.126837][ T6261] ? __pfx_hot_add_show+0x10/0x10 [ 104.126854][ T6261] hot_add_show+0x21/0x80 [ 104.126872][ T6261] class_attr_show+0x72/0xa0 [ 104.126889][ T6261] ? __pfx_class_attr_show+0x10/0x10 [ 104.126903][ T6261] sysfs_kf_seq_show+0x217/0x3a0 [ 104.126923][ T6261] seq_read_iter+0x32f/0x1270 [ 104.126953][ T6261] kernfs_fop_read_iter+0x46c/0x610 [ 104.126968][ T6261] ? rw_verify_area+0xce/0x6d0 [ 104.126988][ T6261] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 104.127004][ T6261] vfs_read+0x825/0xb30 [ 104.127027][ T6261] ? __pfx_vfs_read+0x10/0x10 [ 104.127060][ T6261] ksys_read+0x12a/0x250 [ 104.127072][ T6261] ? __pfx_ksys_read+0x10/0x10 [ 104.127091][ T6261] do_syscall_64+0x106/0xf80 [ 104.127109][ T6261] ? clear_bhb_loop+0x40/0x90 [ 104.127126][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.127141][ T6261] RIP: 0033:0x7f4241b9c799 [ 104.127153][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.127166][ T6261] RSP: 002b:00007f423fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.127180][ T6261] RAX: ffffffffffffffda RBX: 00007f4241e16090 RCX: 00007f4241b9c799 [ 104.127188][ T6261] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 104.127196][ T6261] RBP: 00007f423fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.127204][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.127212][ T6261] R13: 00007f4241e16128 R14: 00007f4241e16090 R15: 00007ffc7c12e688 [ 104.127231][ T6261] [ 104.127238][ T6261] zram: Error allocating disk structure for device 3 [ 105.915504][ T6299] netlink: 'syz.1.79': attribute type 3 has an invalid length. [ 106.432159][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 107.628242][ T6330] sctp: [Deprecated]: syz.2.95 (pid 6330) Use of int in max_burst socket option. [ 107.628242][ T6330] Use struct sctp_assoc_value instead [ 107.771771][ T6333] FAULT_INJECTION: forcing a failure. [ 107.771771][ T6333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.785053][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT(full) [ 107.785078][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.785087][ T6333] Call Trace: [ 107.785092][ T6333] [ 107.785097][ T6333] dump_stack_lvl+0x100/0x190 [ 107.785122][ T6333] should_fail_ex.cold+0x5/0xa [ 107.785139][ T6333] _copy_from_user+0x2e/0xd0 [ 107.785156][ T6333] copy_msghdr_from_user+0x9f/0x4f0 [ 107.785172][ T6333] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 107.785190][ T6333] ? rcu_is_watching+0x12/0xc0 [ 107.785210][ T6333] ? ___sys_recvmsg+0x177/0x1a0 [ 107.785224][ T6333] ? kfree+0x2ec/0x6b0 [ 107.785243][ T6333] ___sys_recvmsg+0xdd/0x1a0 [ 107.785259][ T6333] ? __pfx____sys_recvmsg+0x10/0x10 [ 107.785284][ T6333] ? __pfx___might_resched+0x10/0x10 [ 107.785307][ T6333] do_recvmmsg+0x301/0x760 [ 107.785325][ T6333] ? __pfx_do_recvmmsg+0x10/0x10 [ 107.785341][ T6333] ? ksys_write+0x190/0x250 [ 107.785353][ T6333] ? ksys_write+0x190/0x250 [ 107.785368][ T6333] ? __mutex_unlock_slowpath+0x15c/0x790 [ 107.785394][ T6333] ? __fget_files+0x21f/0x3d0 [ 107.785411][ T6333] __x64_sys_recvmmsg+0x22a/0x280 [ 107.785432][ T6333] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 107.785458][ T6333] do_syscall_64+0x106/0xf80 [ 107.785478][ T6333] ? clear_bhb_loop+0x40/0x90 [ 107.785495][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.785509][ T6333] RIP: 0033:0x7f319e59c799 [ 107.785522][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.785535][ T6333] RSP: 002b:00007f319f3c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 107.785548][ T6333] RAX: ffffffffffffffda RBX: 00007f319e816090 RCX: 00007f319e59c799 [ 107.785557][ T6333] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000003 [ 107.785565][ T6333] RBP: 00007f319f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.785573][ T6333] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 107.785580][ T6333] R13: 00007f319e816128 R14: 00007f319e816090 R15: 00007ffeac076728 [ 107.785598][ T6333] [ 110.439755][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 112.004474][ T6396] FAULT_INJECTION: forcing a failure. [ 112.004474][ T6396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.057996][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 112.058016][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.058024][ T6396] Call Trace: [ 112.058029][ T6396] [ 112.058035][ T6396] dump_stack_lvl+0x100/0x190 [ 112.058060][ T6396] should_fail_ex.cold+0x5/0xa [ 112.058077][ T6396] _copy_to_iter+0x1f3/0x1720 [ 112.058097][ T6396] ? __pfx__copy_to_iter+0x10/0x10 [ 112.058113][ T6396] ? kasan_quarantine_put+0x104/0x240 [ 112.058133][ T6396] ? lockdep_hardirqs_on+0x78/0x100 [ 112.058154][ T6396] ? kfree_skbmem+0x15d/0x210 [ 112.058171][ T6396] simple_copy_to_iter+0x46/0x90 [ 112.058188][ T6396] __skb_datagram_iter+0x5c8/0x900 [ 112.058203][ T6396] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 112.058224][ T6396] skb_copy_datagram_iter+0xa1/0x270 [ 112.058242][ T6396] tcp_recvmsg_locked+0x1b36/0x28e0 [ 112.058267][ T6396] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 112.058287][ T6396] ? __local_bh_enable_ip+0x9e/0x120 [ 112.058305][ T6396] tcp_recvmsg+0x138/0x630 [ 112.058321][ T6396] ? __pfx_tcp_recvmsg+0x10/0x10 [ 112.058345][ T6396] ? __pfx_tcp_recvmsg+0x10/0x10 [ 112.058360][ T6396] inet_recvmsg+0x129/0x6a0 [ 112.058380][ T6396] ? __pfx_inet_recvmsg+0x10/0x10 [ 112.058394][ T6396] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 112.058417][ T6396] ? __pfx_inet_recvmsg+0x10/0x10 [ 112.058438][ T6396] sock_recvmsg+0x187/0x1f0 [ 112.058454][ T6396] __sys_recvfrom+0x200/0x300 [ 112.058472][ T6396] ? 0xffffffff81000000 [ 112.058483][ T6396] ? __pfx___sys_recvfrom+0x10/0x10 [ 112.058517][ T6396] ? ksys_write+0x1ac/0x250 [ 112.058530][ T6396] ? __pfx_ksys_write+0x10/0x10 [ 112.058545][ T6396] __x64_sys_recvfrom+0xe0/0x1c0 [ 112.058562][ T6396] ? do_syscall_64+0x95/0xf80 [ 112.058580][ T6396] ? lockdep_hardirqs_on+0x78/0x100 [ 112.058598][ T6396] do_syscall_64+0x106/0xf80 [ 112.058616][ T6396] ? clear_bhb_loop+0x40/0x90 [ 112.058633][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.058647][ T6396] RIP: 0033:0x7f319e59c799 [ 112.058658][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.058671][ T6396] RSP: 002b:00007f319f3c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 112.058684][ T6396] RAX: ffffffffffffffda RBX: 00007f319e816090 RCX: 00007f319e59c799 [ 112.058693][ T6396] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 112.058701][ T6396] RBP: 00007f319f3c7090 R08: 0000000000000000 R09: ffffffff81000000 [ 112.058710][ T6396] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 112.058717][ T6396] R13: 00007f319e816128 R14: 00007f319e816090 R15: 00007ffeac076728 [ 112.058730][ T6396] ? 0xffffffff81000000 [ 112.058745][ T6396] [ 112.811626][ T6412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.133840][ T6433] netlink: 25 bytes leftover after parsing attributes in process `syz.3.112'. [ 114.566040][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 114.756134][ T6446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 116.280541][ T6481] Zero length message leads to an empty skb [ 116.424689][ T6478] FAULT_INJECTION: forcing a failure. [ 116.424689][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.469732][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(full) [ 116.469771][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.469788][ T6478] Call Trace: [ 116.469798][ T6478] [ 116.469808][ T6478] dump_stack_lvl+0x100/0x190 [ 116.469856][ T6478] should_fail_ex.cold+0x5/0xa [ 116.469890][ T6478] strncpy_from_user+0x3b/0x2d0 [ 116.469927][ T6478] do_getname+0x78/0x390 [ 116.469967][ T6478] __x64_sys_rename+0x57/0xb0 [ 116.470002][ T6478] do_syscall_64+0x106/0xf80 [ 116.470040][ T6478] ? clear_bhb_loop+0x40/0x90 [ 116.470074][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.470102][ T6478] RIP: 0033:0x7f319e59c799 [ 116.470126][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.470153][ T6478] RSP: 002b:00007f319f3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 116.470180][ T6478] RAX: ffffffffffffffda RBX: 00007f319e815fa0 RCX: 00007f319e59c799 [ 116.470199][ T6478] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 116.470216][ T6478] RBP: 00007f319e632c99 R08: 0000000000000000 R09: 0000000000000000 [ 116.470233][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.470250][ T6478] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 116.470289][ T6478] [ 118.861928][ T6525] FAULT_INJECTION: forcing a failure. [ 118.861928][ T6525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.861970][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(full) [ 118.862003][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.862019][ T6525] Call Trace: [ 118.862029][ T6525] [ 118.862039][ T6525] dump_stack_lvl+0x100/0x190 [ 118.862084][ T6525] should_fail_ex.cold+0x5/0xa [ 118.862118][ T6525] get_futex_key+0x1d2/0x1620 [ 118.862154][ T6525] ? __pfx_get_futex_key+0x10/0x10 [ 118.862195][ T6525] ? futex_hash+0x2c5/0x380 [ 118.862239][ T6525] futex_wake+0xea/0x530 [ 118.862279][ T6525] ? __pfx___might_resched+0x10/0x10 [ 118.862319][ T6525] ? __pfx_futex_wake+0x10/0x10 [ 118.862364][ T6525] ? ksys_write+0x190/0x250 [ 118.862395][ T6525] do_futex+0x32b/0x350 [ 118.862430][ T6525] ? __pfx_do_futex+0x10/0x10 [ 118.862462][ T6525] ? do_sock_setsockopt+0x101/0x1d0 [ 118.862503][ T6525] ? rcu_is_watching+0x12/0xc0 [ 118.862542][ T6525] ? do_sock_setsockopt+0x101/0x1d0 [ 118.862581][ T6525] ? kfree+0x2ec/0x6b0 [ 118.862620][ T6525] __x64_sys_futex+0x34f/0x4d0 [ 118.862659][ T6525] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.862693][ T6525] ? __sys_setsockopt+0x139/0x190 [ 118.862740][ T6525] do_syscall_64+0x106/0xf80 [ 118.862777][ T6525] ? clear_bhb_loop+0x40/0x90 [ 118.862811][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.862838][ T6525] RIP: 0033:0x7f319e59c799 [ 118.862862][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.862888][ T6525] RSP: 002b:00007f319f3e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.862914][ T6525] RAX: ffffffffffffffda RBX: 00007f319e815fa8 RCX: 00007f319e59c799 [ 118.862932][ T6525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f319e815fac [ 118.862949][ T6525] RBP: 00007f319e815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 118.862965][ T6525] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 118.862982][ T6525] R13: 00007f319e816038 R14: 00007ffeac076640 R15: 00007ffeac076728 [ 118.863018][ T6525] [ 119.638677][ T6535] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 120.686659][ T6551] FAULT_INJECTION: forcing a failure. [ 120.686659][ T6551] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.699747][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) [ 120.699766][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.699775][ T6551] Call Trace: [ 120.699779][ T6551] [ 120.699785][ T6551] dump_stack_lvl+0x100/0x190 [ 120.699818][ T6551] should_fail_ex.cold+0x5/0xa [ 120.699835][ T6551] get_futex_key+0x1d2/0x1620 [ 120.699854][ T6551] ? __pfx_get_futex_key+0x10/0x10 [ 120.699868][ T6551] ? futex_hash+0x2c5/0x380 [ 120.699889][ T6551] futex_wake+0xea/0x530 [ 120.699909][ T6551] ? __pfx_futex_wait+0x10/0x10 [ 120.699928][ T6551] ? __pfx_futex_wake+0x10/0x10 [ 120.699950][ T6551] ? __lock_acquire+0x4a5/0x2630 [ 120.699971][ T6551] do_futex+0x32b/0x350 [ 120.699989][ T6551] ? __pfx_do_futex+0x10/0x10 [ 120.700006][ T6551] ? find_held_lock+0x2b/0x80 [ 120.700022][ T6551] __x64_sys_futex+0x34f/0x4d0 [ 120.700043][ T6551] ? __fget_files+0x21f/0x3d0 [ 120.700056][ T6551] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.700080][ T6551] do_syscall_64+0x106/0xf80 [ 120.700099][ T6551] ? clear_bhb_loop+0x40/0x90 [ 120.700116][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.700130][ T6551] RIP: 0033:0x7f1b6d39c799 [ 120.700146][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.700159][ T6551] RSP: 002b:00007f1b6e1b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.700172][ T6551] RAX: ffffffffffffffda RBX: 00007f1b6d615fa8 RCX: 00007f1b6d39c799 [ 120.700181][ T6551] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b6d615fac [ 120.700189][ T6551] RBP: 00007f1b6d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 120.700197][ T6551] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.700205][ T6551] R13: 00007f1b6d616038 R14: 00007ffe077aee30 R15: 00007ffe077aef18 [ 120.700223][ T6551] [ 128.171632][ T6658] smpboot: CPU 1 is now offline [ 128.211421][ T29] audit: type=1800 audit(1773906230.572:2): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.169" name="discovery_nqn" dev="configfs" ino=12344 res=0 errno=0 [ 129.531874][ T6693] blktrace: Concurrent blktraces are not allowed on loop2 [ 131.432642][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.441758][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.699871][ T6760] blktrace: Concurrent blktraces are not allowed on loop2 [ 134.720530][ T6777] capability: warning: `syz.1.195' uses 32-bit capabilities (legacy support in use) [ 135.758034][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 135.814081][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 135.953641][ T6808] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.858742][ T6841] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 137.188686][ T6853] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 138.233613][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 138.234135][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 138.484622][ T6878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 139.872749][ T6899] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 140.439077][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 140.472989][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 140.605141][ T6923] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.766727][ T6945] netlink: 342 bytes leftover after parsing attributes in process `syz.1.232'. [ 142.747635][ T6962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.846227][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 144.742783][ T6988] sd 0:0:1:0: PR command failed: 1026 [ 144.764699][ T6988] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 144.794196][ T6988] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 145.285942][ T29] audit: type=1800 audit(1773906247.632:3): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.248" name="discovery_nqn" dev="configfs" ino=14071 res=0 errno=0 [ 145.459493][ T7011] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78c00 [ 145.563604][ T7011] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 145.613931][ T7011] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 145.640378][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 145.664101][ T7011] page_type: f5(slab) [ 145.791175][ T7011] raw: 00fff00000000040 ffff88813fe54c80 dead000000000100 dead000000000122 [ 145.903134][ T7011] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 146.036011][ T7011] head: 00fff00000000040 ffff88813fe54c80 dead000000000100 dead000000000122 [ 146.135196][ T7011] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 146.196232][ T7011] head: 00fff00000000001 ffffea0001e30001 00000000ffffffff 00000000ffffffff [ 146.196280][ T7011] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 146.196290][ T7011] page dumped because: unmovable page [ 146.196311][ T7011] page_owner tracks the page as allocated [ 146.196333][ T7011] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5815, tgid 5815 (mkswap), ts 74143586451, free_ts 23323141092 [ 146.196365][ T7011] post_alloc_hook+0x153/0x170 [ 146.196390][ T7011] get_page_from_freelist+0x111d/0x3140 [ 146.196412][ T7011] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 146.196438][ T7011] new_slab+0xa6/0x6b0 [ 146.196455][ T7011] refill_objects+0x26b/0x400 [ 146.196474][ T7011] __prefill_sheaf_pfmemalloc+0x5f/0xb0 [ 146.196495][ T7011] kmem_cache_prefill_sheaf+0x1ba/0x4c0 [ 146.196517][ T7011] mas_alloc_nodes+0x2c3/0x390 [ 146.196535][ T7011] mas_preallocate+0x39c/0xf10 [ 146.196555][ T7011] __mmap_region+0x12b5/0x29e0 [ 146.196575][ T7011] mmap_region+0x180/0x3e0 [ 146.196595][ T7011] do_mmap+0xc63/0x12f0 [ 146.196610][ T7011] vm_mmap_pgoff+0x29e/0x470 [ 146.196626][ T7011] ksys_mmap_pgoff+0x3c8/0x650 [ 146.196640][ T7011] __x64_sys_mmap+0x125/0x190 [ 146.196661][ T7011] do_syscall_64+0x106/0xf80 [ 146.196681][ T7011] page last free pid 1 tgid 1 stack trace: [ 146.196689][ T7011] __free_frozen_pages+0x7e1/0x10d0 [ 146.196707][ T7011] free_contig_range+0xde/0x1d0 [ 146.196725][ T7011] destroy_args+0xa8/0x7a0 [ 146.196740][ T7011] debug_vm_pgtable+0x1b66/0x34c0 [ 146.196754][ T7011] do_one_initcall+0x11d/0x760 [ 146.196769][ T7011] kernel_init_freeable+0x6e5/0x7a0 [ 146.196784][ T7011] kernel_init+0x1f/0x1e0 [ 146.196799][ T7011] ret_from_fork+0x754/0xd80 [ 146.196820][ T7011] ret_from_fork_asm+0x1a/0x30 [ 146.243460][ T7018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078c00e00 pfn:0x78c00 [ 146.243485][ T7018] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.243499][ T7018] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 146.243515][ T7018] page_type: f5(slab) [ 146.243529][ T7018] raw: 00fff00000000240 ffff88813fe54c80 ffffea000080f390 ffffea0001e4a690 [ 146.243544][ T7018] raw: ffff888078c00e00 000000080010000d 00000000f5000000 0000000000000000 [ 146.243560][ T7018] head: 00fff00000000240 ffff88813fe54c80 ffffea000080f390 ffffea0001e4a690 [ 146.243574][ T7018] head: ffff888078c00e00 000000080010000d 00000000f5000000 0000000000000000 [ 146.243588][ T7018] head: 00fff00000000001 ffffea0001e30001 00000000ffffffff 00000000ffffffff [ 146.243602][ T7018] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 146.243612][ T7018] page dumped because: unmovable page [ 146.243620][ T7018] page_owner tracks the page as allocated [ 146.243626][ T7018] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5815, tgid 5815 (mkswap), ts 74143586451, free_ts 23323141092 [ 146.243653][ T7018] post_alloc_hook+0x153/0x170 [ 146.243676][ T7018] get_page_from_freelist+0x111d/0x3140 [ 146.243697][ T7018] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 146.243720][ T7018] new_slab+0xa6/0x6b0 [ 146.243738][ T7018] refill_objects+0x26b/0x400 [ 146.243757][ T7018] __prefill_sheaf_pfmemalloc+0x5f/0xb0 [ 146.243778][ T7018] kmem_cache_prefill_sheaf+0x1ba/0x4c0 [ 146.243800][ T7018] mas_alloc_nodes+0x2c3/0x390 [ 146.243818][ T7018] mas_preallocate+0x39c/0xf10 [ 146.243838][ T7018] __mmap_region+0x12b5/0x29e0 [ 146.243857][ T7018] mmap_region+0x180/0x3e0 [ 146.243877][ T7018] do_mmap+0xc63/0x12f0 [ 146.243892][ T7018] vm_mmap_pgoff+0x29e/0x470 [ 146.243909][ T7018] ksys_mmap_pgoff+0x3c8/0x650 [ 146.243923][ T7018] __x64_sys_mmap+0x125/0x190 [ 146.243944][ T7018] do_syscall_64+0x106/0xf80 [ 146.243964][ T7018] page last free pid 1 tgid 1 stack trace: [ 146.243972][ T7018] __free_frozen_pages+0x7e1/0x10d0 [ 146.243989][ T7018] free_contig_range+0xde/0x1d0 [ 146.244007][ T7018] destroy_args+0xa8/0x7a0 [ 146.244021][ T7018] debug_vm_pgtable+0x1b66/0x34c0 [ 146.244036][ T7018] do_one_initcall+0x11d/0x760 [ 146.244059][ T7018] kernel_init_freeable+0x6e5/0x7a0 [ 146.244074][ T7018] kernel_init+0x1f/0x1e0 [ 146.244089][ T7018] ret_from_fork+0x754/0xd80 [ 146.244111][ T7018] ret_from_fork_asm+0x1a/0x30 [ 147.903116][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 148.448578][ T7036] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.430318][ T7066] FAULT_INJECTION: forcing a failure. [ 149.430318][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 149.516323][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 149.516347][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.516357][ T7066] Call Trace: [ 149.516362][ T7066] [ 149.516369][ T7066] dump_stack_lvl+0x100/0x190 [ 149.516396][ T7066] should_fail_ex.cold+0x5/0xa [ 149.516414][ T7066] ? sk_prot_alloc+0x10b/0x2a0 [ 149.516428][ T7066] should_failslab+0xc2/0x120 [ 149.516443][ T7066] __kmalloc_noprof+0xe0/0x850 [ 149.516470][ T7066] sk_prot_alloc+0x10b/0x2a0 [ 149.516486][ T7066] sk_alloc+0x36/0xe80 [ 149.516506][ T7066] alg_create+0x9e/0x150 [ 149.516528][ T7066] __sock_create+0x339/0x860 [ 149.516547][ T7066] __sys_socket+0x14d/0x260 [ 149.516562][ T7066] ? __pfx___sys_socket+0x10/0x10 [ 149.516584][ T7066] __x64_sys_socket+0x72/0xb0 [ 149.516623][ T7066] ? lockdep_hardirqs_on+0x78/0x100 [ 149.516644][ T7066] do_syscall_64+0x106/0xf80 [ 149.516664][ T7066] ? clear_bhb_loop+0x40/0x90 [ 149.516682][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.516697][ T7066] RIP: 0033:0x7f319e59c799 [ 149.516710][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.516724][ T7066] RSP: 002b:00007f319f3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 149.516738][ T7066] RAX: ffffffffffffffda RBX: 00007f319e815fa0 RCX: 00007f319e59c799 [ 149.516748][ T7066] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 149.516756][ T7066] RBP: 00007f319e632c99 R08: 0000000000000000 R09: 0000000000000000 [ 149.516764][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.516773][ T7066] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 149.516791][ T7066] [ 150.053407][ T7085] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.524603][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 151.243800][ T7113] MTRR 1 not used [ 152.220743][ T7137] zswap: compressor not available [ 152.531005][ T7144] zswap: compressor not available [ 153.363836][ T7161] FAULT_INJECTION: forcing a failure. [ 153.363836][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 153.532972][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(full) [ 153.532996][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.533007][ T7161] Call Trace: [ 153.533013][ T7161] [ 153.533019][ T7161] dump_stack_lvl+0x100/0x190 [ 153.533045][ T7161] should_fail_ex.cold+0x5/0xa [ 153.533064][ T7161] should_failslab+0xc2/0x120 [ 153.533081][ T7161] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 153.533102][ T7161] ? __kernfs_new_node+0xd2/0x960 [ 153.533126][ T7161] __kernfs_new_node+0xd2/0x960 [ 153.533148][ T7161] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.533174][ T7161] ? find_held_lock+0x2b/0x80 [ 153.533188][ T7161] ? kernfs_root+0xee/0x2a0 [ 153.533208][ T7161] ? kernfs_root+0xee/0x2a0 [ 153.533231][ T7161] kernfs_new_node+0x11b/0x1a0 [ 153.533257][ T7161] __kernfs_create_file+0x53/0x350 [ 153.533275][ T7161] sysfs_add_file_mode_ns+0x207/0x3c0 [ 153.533299][ T7161] internal_create_group+0x593/0xf40 [ 153.533324][ T7161] ? __pfx_internal_create_group+0x10/0x10 [ 153.533347][ T7161] ? kernfs_create_link+0x1bd/0x240 [ 153.533367][ T7161] internal_create_groups+0x9d/0x150 [ 153.533389][ T7161] device_add+0x71a/0x1950 [ 153.533407][ T7161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.533431][ T7161] ? __pfx_device_add+0x10/0x10 [ 153.533447][ T7161] ? lockdep_init_map_type+0x5c/0x250 [ 153.533467][ T7161] ? __init_waitqueue_head+0xca/0x150 [ 153.533494][ T7161] netdev_register_kobject+0x1a9/0x3d0 [ 153.533520][ T7161] register_netdevice+0x12e0/0x2210 [ 153.533545][ T7161] ? __pfx_register_netdevice+0x10/0x10 [ 153.533571][ T7161] __tun_chr_ioctl+0x1ded/0x47c0 [ 153.533586][ T7161] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 153.533610][ T7161] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 153.533627][ T7161] ? hook_file_ioctl_common+0x146/0x410 [ 153.533648][ T7161] ? __fget_files+0x21f/0x3d0 [ 153.533665][ T7161] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 153.533689][ T7161] __x64_sys_ioctl+0x18e/0x210 [ 153.533711][ T7161] do_syscall_64+0x106/0xf80 [ 153.533731][ T7161] ? clear_bhb_loop+0x40/0x90 [ 153.533749][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.533765][ T7161] RIP: 0033:0x7f296659c799 [ 153.533778][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.533792][ T7161] RSP: 002b:00007f29647f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.533807][ T7161] RAX: ffffffffffffffda RBX: 00007f2966816180 RCX: 00007f296659c799 [ 153.533817][ T7161] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 153.533826][ T7161] RBP: 00007f2966632c99 R08: 0000000000000000 R09: 0000000000000000 [ 153.533834][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.533843][ T7161] R13: 00007f2966816218 R14: 00007f2966816180 R15: 00007fffcb64af98 [ 153.533863][ T7161] [ 154.801058][ T7189] MTRR 1 not used [ 154.862009][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 155.177756][ T7202] futex_wake_op: syz.2.293 tries to shift op by -2048; fix this program [ 155.207494][ T7202] futex_wake_op: syz.2.293 tries to shift op by -2048; fix this program [ 155.479584][ T7210] FAULT_INJECTION: forcing a failure. [ 155.479584][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 155.556381][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT(full) [ 155.556405][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.556414][ T7210] Call Trace: [ 155.556420][ T7210] [ 155.556426][ T7210] dump_stack_lvl+0x100/0x190 [ 155.556455][ T7210] should_fail_ex.cold+0x5/0xa [ 155.556473][ T7210] ? memcg_list_lru_alloc+0x4ec/0x740 [ 155.556496][ T7210] should_failslab+0xc2/0x120 [ 155.556512][ T7210] __kmalloc_noprof+0xe0/0x850 [ 155.556535][ T7210] ? zram_add+0x1bf/0x610 [ 155.556557][ T7210] memcg_list_lru_alloc+0x4ec/0x740 [ 155.556585][ T7210] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 155.556606][ T7210] ? rcu_read_unlock+0x17/0x60 [ 155.556628][ T7210] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 155.556656][ T7210] __memcg_slab_post_alloc_hook+0x130/0x990 [ 155.556679][ T7210] ? kasan_save_track+0x14/0x30 [ 155.556706][ T7210] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 155.556728][ T7210] ? bdev_alloc_inode+0x26/0x90 [ 155.556748][ T7210] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 155.556767][ T7210] bdev_alloc_inode+0x26/0x90 [ 155.556784][ T7210] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 155.556800][ T7210] alloc_inode+0x68/0x250 [ 155.556820][ T7210] new_inode+0x22/0x1c0 [ 155.556841][ T7210] bdev_alloc+0x2b/0x420 [ 155.556859][ T7210] ? bdi_init+0x3f4/0x5b0 [ 155.556873][ T7210] ? bdi_init+0x49f/0x5b0 [ 155.556890][ T7210] __alloc_disk_node+0x116/0x6b0 [ 155.556910][ T7210] __blk_alloc_disk+0xd2/0x170 [ 155.556925][ T7210] ? __pfx___blk_alloc_disk+0x10/0x10 [ 155.556964][ T7210] ? __pfx_idr_alloc+0x10/0x10 [ 155.556985][ T7210] ? lockdep_init_map_type+0x5c/0x250 [ 155.557006][ T7210] ? __raw_spin_lock_init+0x3a/0x110 [ 155.557030][ T7210] ? __pfx_hot_add_show+0x10/0x10 [ 155.557050][ T7210] zram_add+0x1bf/0x610 [ 155.557070][ T7210] ? __pfx_zram_add+0x10/0x10 [ 155.557102][ T7210] ? find_held_lock+0x2b/0x80 [ 155.557115][ T7210] ? sysfs_file_kobj+0xe4/0x290 [ 155.557137][ T7210] ? __pfx_hot_add_show+0x10/0x10 [ 155.557156][ T7210] hot_add_show+0x21/0x80 [ 155.557176][ T7210] class_attr_show+0x72/0xa0 [ 155.557194][ T7210] ? __pfx_class_attr_show+0x10/0x10 [ 155.557209][ T7210] sysfs_kf_seq_show+0x217/0x3a0 [ 155.557232][ T7210] seq_read_iter+0x32f/0x1270 [ 155.557264][ T7210] kernfs_fop_read_iter+0x46c/0x610 [ 155.557282][ T7210] ? rw_verify_area+0xce/0x6d0 [ 155.557303][ T7210] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 155.557321][ T7210] vfs_read+0x825/0xb30 [ 155.557347][ T7210] ? __pfx_vfs_read+0x10/0x10 [ 155.557384][ T7210] ksys_read+0x12a/0x250 [ 155.557397][ T7210] ? __pfx_ksys_read+0x10/0x10 [ 155.557417][ T7210] do_syscall_64+0x106/0xf80 [ 155.557437][ T7210] ? clear_bhb_loop+0x40/0x90 [ 155.557457][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.557473][ T7210] RIP: 0033:0x7f1b6d39c799 [ 155.557488][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.557504][ T7210] RSP: 002b:00007f1b6e1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.557520][ T7210] RAX: ffffffffffffffda RBX: 00007f1b6d615fa0 RCX: 00007f1b6d39c799 [ 155.557530][ T7210] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 155.557539][ T7210] RBP: 00007f1b6d432c99 R08: 0000000000000000 R09: 0000000000000000 [ 155.557548][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.557557][ T7210] R13: 00007f1b6d616038 R14: 00007f1b6d615fa0 R15: 00007ffe077aef18 [ 155.557577][ T7210] [ 156.063621][ T7210] zram: Error allocating disk structure for device 3 [ 157.018410][ T7231] FAULT_INJECTION: forcing a failure. [ 157.018410][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 157.037370][ T7233] FAULT_INJECTION: forcing a failure. [ 157.037370][ T7233] name failslab, interval 1, probability 0, space 0, times 0 [ 157.089106][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.3.307 Not tainted syzkaller #0 PREEMPT(full) [ 157.089126][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.089134][ T7231] Call Trace: [ 157.089139][ T7231] [ 157.089145][ T7231] dump_stack_lvl+0x100/0x190 [ 157.089169][ T7231] should_fail_ex.cold+0x5/0xa [ 157.089191][ T7231] should_failslab+0xc2/0x120 [ 157.089207][ T7231] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 157.089226][ T7231] ? security_inode_alloc+0x3b/0x2c0 [ 157.089241][ T7231] ? lockdep_init_map_type+0x5c/0x250 [ 157.089261][ T7231] security_inode_alloc+0x3b/0x2c0 [ 157.089276][ T7231] inode_init_always_gfp+0xced/0x1040 [ 157.089293][ T7231] alloc_inode+0x8e/0x250 [ 157.089310][ T7231] new_inode+0x22/0x1c0 [ 157.089329][ T7231] proc_pid_make_inode+0x22/0x160 [ 157.089349][ T7231] proc_pident_instantiate+0x85/0x310 [ 157.089370][ T7231] proc_pident_lookup+0x1e3/0x270 [ 157.089394][ T7231] __lookup_slow+0x251/0x460 [ 157.089412][ T7231] ? __pfx___lookup_slow+0x10/0x10 [ 157.089445][ T7231] lookup_slow+0x50/0x70 [ 157.089462][ T7231] link_path_walk+0x1377/0x1cc0 [ 157.089488][ T7231] path_openat+0x1be/0x31a0 [ 157.089501][ T7231] ? kasan_save_stack+0x3f/0x50 [ 157.089521][ T7231] ? kasan_save_stack+0x30/0x50 [ 157.089539][ T7231] ? kasan_save_track+0x14/0x30 [ 157.089558][ T7231] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 157.089582][ T7231] ? __pfx_path_openat+0x10/0x10 [ 157.089603][ T7231] do_file_open+0x20e/0x430 [ 157.089619][ T7231] ? __pfx_do_file_open+0x10/0x10 [ 157.089639][ T7231] ? __pfx_kfree_link+0x10/0x10 [ 157.089663][ T7231] ? alloc_fd+0x476/0x790 [ 157.089678][ T7231] ? do_getname+0x191/0x390 [ 157.089696][ T7231] do_sys_openat2+0x10d/0x1e0 [ 157.089714][ T7231] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.089730][ T7231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.089753][ T7231] ? __fget_files+0x21f/0x3d0 [ 157.089769][ T7231] __x64_sys_openat+0x12d/0x210 [ 157.089787][ T7231] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.089803][ T7231] ? ksys_write+0x1ac/0x250 [ 157.089822][ T7231] do_syscall_64+0x106/0xf80 [ 157.089847][ T7231] ? clear_bhb_loop+0x40/0x90 [ 157.089864][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.089878][ T7231] RIP: 0033:0x7f319e55cfce [ 157.089890][ T7231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.089903][ T7231] RSP: 002b:00007f319f3e7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.089916][ T7231] RAX: ffffffffffffffda RBX: 00007f319f3e86c0 RCX: 00007f319e55cfce [ 157.089925][ T7231] RDX: 0000000000000002 RSI: 00007f319f3e7f90 RDI: ffffffffffffff9c [ 157.089933][ T7231] RBP: 00007f319f3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 157.089941][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.089949][ T7231] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 157.089967][ T7231] [ 157.090481][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT(full) [ 157.090498][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.090506][ T7233] Call Trace: [ 157.090511][ T7233] [ 157.090516][ T7233] dump_stack_lvl+0x100/0x190 [ 157.090538][ T7233] should_fail_ex.cold+0x5/0xa [ 157.090555][ T7233] should_failslab+0xc2/0x120 [ 157.090570][ T7233] __kmalloc_cache_noprof+0x7a/0x6f0 [ 157.090587][ T7233] ? zram_add+0xf2/0x610 [ 157.090605][ T7233] ? trace_contention_end+0x140/0x180 [ 157.090625][ T7233] ? __pfx_hot_add_show+0x10/0x10 [ 157.090643][ T7233] zram_add+0xf2/0x610 [ 157.090660][ T7233] ? __pfx_zram_add+0x10/0x10 [ 157.090689][ T7233] ? find_held_lock+0x2b/0x80 [ 157.090701][ T7233] ? sysfs_file_kobj+0xe4/0x290 [ 157.090720][ T7233] ? __pfx_hot_add_show+0x10/0x10 [ 157.090738][ T7233] hot_add_show+0x21/0x80 [ 157.090755][ T7233] class_attr_show+0x72/0xa0 [ 157.090771][ T7233] ? __pfx_class_attr_show+0x10/0x10 [ 157.090786][ T7233] sysfs_kf_seq_show+0x217/0x3a0 [ 157.090806][ T7233] seq_read_iter+0x32f/0x1270 [ 157.090842][ T7233] kernfs_fop_read_iter+0x46c/0x610 [ 157.090858][ T7233] ? rw_verify_area+0xce/0x6d0 [ 157.090877][ T7233] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 157.090893][ T7233] vfs_read+0x825/0xb30 [ 157.090916][ T7233] ? __pfx_vfs_read+0x10/0x10 [ 157.090949][ T7233] ksys_read+0x12a/0x250 [ 157.090961][ T7233] ? __pfx_ksys_read+0x10/0x10 [ 157.090980][ T7233] do_syscall_64+0x106/0xf80 [ 157.090998][ T7233] ? clear_bhb_loop+0x40/0x90 [ 157.091015][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.091028][ T7233] RIP: 0033:0x7f1b6d39c799 [ 157.091040][ T7233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.091052][ T7233] RSP: 002b:00007f1b6e1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.091065][ T7233] RAX: ffffffffffffffda RBX: 00007f1b6d615fa0 RCX: 00007f1b6d39c799 [ 157.091074][ T7233] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 157.091082][ T7233] RBP: 00007f1b6e1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.091090][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.091098][ T7233] R13: 00007f1b6d616038 R14: 00007f1b6d615fa0 R15: 00007ffe077aef18 [ 157.091117][ T7233] [ 157.750134][ T7239] netlink: 'syz.1.305': attribute type 11 has an invalid length. [ 157.757906][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.766815][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.779326][ T7241] MTRR 1 not used [ 157.921893][ T7229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.551372][ T7257] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input10 [ 159.823606][ T7273] MTRR 1 not used [ 160.611006][ T7287] FAULT_INJECTION: forcing a failure. [ 160.611006][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 160.837723][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.0.312 Not tainted syzkaller #0 PREEMPT(full) [ 160.837747][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.837757][ T7287] Call Trace: [ 160.837762][ T7287] [ 160.837768][ T7287] dump_stack_lvl+0x100/0x190 [ 160.837795][ T7287] should_fail_ex.cold+0x5/0xa [ 160.837813][ T7287] should_failslab+0xc2/0x120 [ 160.837829][ T7287] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 160.837851][ T7287] ? __kernfs_new_node+0xd2/0x960 [ 160.837874][ T7287] __kernfs_new_node+0xd2/0x960 [ 160.837896][ T7287] ? __pfx___kernfs_new_node+0x10/0x10 [ 160.837921][ T7287] ? find_held_lock+0x2b/0x80 [ 160.837935][ T7287] ? kernfs_root+0xee/0x2a0 [ 160.837953][ T7287] ? kernfs_root+0xee/0x2a0 [ 160.837976][ T7287] kernfs_new_node+0x11b/0x1a0 [ 160.838001][ T7287] __kernfs_create_file+0x53/0x350 [ 160.838020][ T7287] sysfs_add_file_mode_ns+0x207/0x3c0 [ 160.838044][ T7287] internal_create_group+0x593/0xf40 [ 160.838069][ T7287] ? __pfx_internal_create_group+0x10/0x10 [ 160.838095][ T7287] ? kernfs_create_link+0x1bd/0x240 [ 160.838115][ T7287] internal_create_groups+0x9d/0x150 [ 160.838137][ T7287] device_add+0x71a/0x1950 [ 160.838155][ T7287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.838179][ T7287] ? __pfx_device_add+0x10/0x10 [ 160.838195][ T7287] ? lockdep_init_map_type+0x5c/0x250 [ 160.838214][ T7287] ? __init_waitqueue_head+0xca/0x150 [ 160.838240][ T7287] netdev_register_kobject+0x1a9/0x3d0 [ 160.838266][ T7287] register_netdevice+0x12e0/0x2210 [ 160.838291][ T7287] ? __pfx_register_netdevice+0x10/0x10 [ 160.838318][ T7287] __tun_chr_ioctl+0x1ded/0x47c0 [ 160.838339][ T7287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 160.838364][ T7287] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 160.838382][ T7287] ? hook_file_ioctl_common+0x146/0x410 [ 160.838405][ T7287] ? __fget_files+0x21f/0x3d0 [ 160.838422][ T7287] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 160.838444][ T7287] __x64_sys_ioctl+0x18e/0x210 [ 160.838466][ T7287] do_syscall_64+0x106/0xf80 [ 160.838487][ T7287] ? clear_bhb_loop+0x40/0x90 [ 160.838506][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.838522][ T7287] RIP: 0033:0x7f4241b9c799 [ 160.838536][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.838549][ T7287] RSP: 002b:00007f423fdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.838564][ T7287] RAX: ffffffffffffffda RBX: 00007f4241e16180 RCX: 00007f4241b9c799 [ 160.838574][ T7287] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 160.838583][ T7287] RBP: 00007f4241c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 160.838591][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.838600][ T7287] R13: 00007f4241e16218 R14: 00007f4241e16180 R15: 00007ffc7c12e688 [ 160.838619][ T7287] [ 162.226098][ T7306] sd 0:0:1:0: PR command failed: 1026 [ 162.385244][ T7306] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.518655][ T7306] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 162.577341][ T7304] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input11 [ 164.908901][ T7334] can: request_module (can-proto-3) failed. [ 166.067122][ T7367] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input12 [ 167.623541][ T7389] process 'syz.1.339' launched './file0' with NULL argv: empty string added [ 169.257973][ T7426] nvme_fcloop: unknown parameter or missing value '0' [ 171.094171][ T7470] netlink: 330 bytes leftover after parsing attributes in process `syz.0.358'. [ 171.183615][ T7470] futex_wake_op: syz.0.358 tries to shift op by -2048; fix this program [ 171.208881][ T7470] 0x000000000001-0x000000020000 : "" [ 171.237137][ T7470] ftl_cs: FTL header corrupt! [ 171.906084][ T7478] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 171.987364][ T7478] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 172.086085][ T7478] FAULT_INJECTION: forcing a failure. [ 172.086085][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 172.155614][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.3.362 Not tainted syzkaller #0 PREEMPT(full) [ 172.155637][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.155646][ T7478] Call Trace: [ 172.155652][ T7478] [ 172.155658][ T7478] dump_stack_lvl+0x100/0x190 [ 172.155687][ T7478] should_fail_ex.cold+0x5/0xa [ 172.155706][ T7478] should_failslab+0xc2/0x120 [ 172.155723][ T7478] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 172.155746][ T7478] ? alloc_vfsmnt+0x23/0x6a0 [ 172.155768][ T7478] alloc_vfsmnt+0x23/0x6a0 [ 172.155787][ T7478] fc_mount+0x105/0x220 [ 172.155808][ T7478] trace_automount.cold+0x70/0x75 [ 172.155829][ T7478] __traverse_mounts+0x1b9/0x8a0 [ 172.155854][ T7478] step_into_slowpath+0xb7e/0xf90 [ 172.155876][ T7478] ? __d_lookup+0x25c/0x4a0 [ 172.155896][ T7478] ? __d_lookup+0x25c/0x4a0 [ 172.155919][ T7478] ? __pfx_step_into_slowpath+0x10/0x10 [ 172.155940][ T7478] ? __d_lookup+0x266/0x4a0 [ 172.155962][ T7478] ? lookup_fast+0x2da/0x600 [ 172.155982][ T7478] ? inode_permission+0x374/0x620 [ 172.156020][ T7478] link_path_walk+0xf28/0x1cc0 [ 172.156051][ T7478] path_openat+0x1be/0x31a0 [ 172.156065][ T7478] ? kasan_save_stack+0x3f/0x50 [ 172.156087][ T7478] ? kasan_save_stack+0x30/0x50 [ 172.156108][ T7478] ? kasan_save_track+0x14/0x30 [ 172.156129][ T7478] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 172.156156][ T7478] ? __pfx_path_openat+0x10/0x10 [ 172.156179][ T7478] do_file_open+0x20e/0x430 [ 172.156196][ T7478] ? __pfx_do_file_open+0x10/0x10 [ 172.156226][ T7478] ? alloc_fd+0x476/0x790 [ 172.156242][ T7478] ? do_getname+0x191/0x390 [ 172.156268][ T7478] do_sys_openat2+0x10d/0x1e0 [ 172.156290][ T7478] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.156313][ T7478] ? __fget_files+0x21f/0x3d0 [ 172.156332][ T7478] __x64_sys_openat+0x12d/0x210 [ 172.156352][ T7478] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.156379][ T7478] do_syscall_64+0x106/0xf80 [ 172.156399][ T7478] ? clear_bhb_loop+0x40/0x90 [ 172.156419][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.156435][ T7478] RIP: 0033:0x7f319e59c799 [ 172.156449][ T7478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.156463][ T7478] RSP: 002b:00007f319f3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.156478][ T7478] RAX: ffffffffffffffda RBX: 00007f319e815fa0 RCX: 00007f319e59c799 [ 172.156488][ T7478] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 172.156498][ T7478] RBP: 00007f319e632c99 R08: 0000000000000000 R09: 0000000000000000 [ 172.156507][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.156516][ T7478] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 172.156536][ T7478] [ 172.900095][ T6991] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 172.950104][ T7493] bridge0: port 3(veth0_to_bridge) entered blocking state [ 173.039148][ T7493] bridge0: port 3(veth0_to_bridge) entered disabled state [ 173.054773][ T7493] veth0_to_bridge: entered allmulticast mode [ 173.074935][ T7493] veth0_to_bridge: entered promiscuous mode [ 173.081279][ T7493] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.094009][ T7493] bridge0: port 3(veth0_to_bridge) entered blocking state [ 173.101266][ T7493] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 174.042056][ T6991] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 174.042089][ T6991] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 174.057703][ T6991] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 174.057739][ T6991] Bluetooth: hci1: adv larger than maximum supported [ 174.064856][ T6991] Bluetooth: hci1: adv larger than maximum supported [ 174.077225][ T6991] Bluetooth: hci1: Malformed LE Event: 0x0d [ 174.423626][ T7529] netlink: 330 bytes leftover after parsing attributes in process `syz.1.371'. [ 174.520540][ T7529] futex_wake_op: syz.1.371 tries to shift op by -2048; fix this program [ 174.569969][ T7529] 0x000000000001-0x000000020000 : "" [ 174.605689][ T7529] ftl_cs: FTL header corrupt! [ 175.254568][ T7543] netlink: 330 bytes leftover after parsing attributes in process `syz.2.384'. [ 175.284270][ T7545] bridge0: port 3(veth0_to_bridge) entered blocking state [ 175.284351][ T7545] bridge0: port 3(veth0_to_bridge) entered disabled state [ 175.284467][ T7545] veth0_to_bridge: entered allmulticast mode [ 175.288678][ T7545] veth0_to_bridge: entered promiscuous mode [ 175.288773][ T7545] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.289098][ T7545] bridge0: port 3(veth0_to_bridge) entered blocking state [ 175.289190][ T7545] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 175.335609][ T7543] futex_wake_op: syz.2.384 tries to shift op by -2048; fix this program [ 175.338446][ T7543] 0x000000000001-0x000000020000 : "" [ 175.354737][ T7543] ftl_cs: FTL header corrupt! [ 175.914506][ T7552] FAULT_INJECTION: forcing a failure. [ 175.914506][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 175.947687][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) [ 175.947708][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.947717][ T7552] Call Trace: [ 175.947722][ T7552] [ 175.947727][ T7552] dump_stack_lvl+0x100/0x190 [ 175.947752][ T7552] should_fail_ex.cold+0x5/0xa [ 175.947769][ T7552] should_failslab+0xc2/0x120 [ 175.947784][ T7552] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 175.947805][ T7552] ? __alloc_skb+0x140/0x710 [ 175.947823][ T7552] ? find_held_lock+0x2b/0x80 [ 175.947839][ T7552] __alloc_skb+0x140/0x710 [ 175.947857][ T7552] ? __pfx___alloc_skb+0x10/0x10 [ 175.947886][ T7552] tipc_buf_acquire+0x26/0xe0 [ 175.947903][ T7552] tipc_msg_build+0x112/0x1100 [ 175.947925][ T7552] ? __pfx_tipc_msg_build+0x10/0x10 [ 175.947945][ T7552] ? register_lock_class+0x40/0x560 [ 175.947962][ T7552] ? __lock_acquire+0x4a5/0x2630 [ 175.947981][ T7552] __tipc_sendstream+0x6a7/0x1110 [ 175.948004][ T7552] ? __pfx___tipc_sendstream+0x10/0x10 [ 175.948019][ T7552] ? do_raw_spin_lock+0x128/0x260 [ 175.948038][ T7552] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 175.948057][ T7552] ? __pfx_woken_wake_function+0x10/0x10 [ 175.948081][ T7552] ? __local_bh_enable_ip+0x9e/0x120 [ 175.948099][ T7552] tipc_sendstream+0x4f/0x70 [ 175.948115][ T7552] ____sys_sendmsg+0x9e1/0xb70 [ 175.948128][ T7552] ? __pfx_tipc_sendstream+0x10/0x10 [ 175.948145][ T7552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.948162][ T7552] ? __pfx__kstrtoull+0x10/0x10 [ 175.948185][ T7552] ___sys_sendmsg+0x190/0x1e0 [ 175.948202][ T7552] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.948226][ T7552] ? find_held_lock+0x2b/0x80 [ 175.948250][ T7552] __sys_sendmmsg+0x205/0x430 [ 175.948272][ T7552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.948297][ T7552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.948325][ T7552] ? fput+0x79/0x100 [ 175.948340][ T7552] ? ksys_write+0x1ac/0x250 [ 175.948352][ T7552] ? __pfx_ksys_write+0x10/0x10 [ 175.948368][ T7552] __x64_sys_sendmmsg+0x9c/0x100 [ 175.948387][ T7552] ? lockdep_hardirqs_on+0x78/0x100 [ 175.948405][ T7552] do_syscall_64+0x106/0xf80 [ 175.948423][ T7552] ? clear_bhb_loop+0x40/0x90 [ 175.948440][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.948455][ T7552] RIP: 0033:0x7f319e59c799 [ 175.948468][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.948480][ T7552] RSP: 002b:00007f319f3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.948494][ T7552] RAX: ffffffffffffffda RBX: 00007f319e815fa0 RCX: 00007f319e59c799 [ 175.948503][ T7552] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.948510][ T7552] RBP: 00007f319f3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 175.948518][ T7552] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 175.948526][ T7552] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 175.948544][ T7552] [ 176.814151][ T6991] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 177.866526][ T6991] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 178.723407][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 178.771288][ T7605] bridge0: port 3(veth0_to_bridge) entered blocking state [ 178.818368][ T7605] bridge0: port 3(veth0_to_bridge) entered disabled state [ 178.825614][ T7605] veth0_to_bridge: entered allmulticast mode [ 178.928495][ T7605] veth0_to_bridge: entered promiscuous mode [ 178.962841][ T7605] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.013639][ T7605] bridge0: port 3(veth0_to_bridge) entered blocking state [ 179.020860][ T7605] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 179.324399][ T7620] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 179.377088][ T7620] FAULT_INJECTION: forcing a failure. [ 179.377088][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 179.377113][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(full) [ 179.377131][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.377139][ T7620] Call Trace: [ 179.377144][ T7620] [ 179.377150][ T7620] dump_stack_lvl+0x100/0x190 [ 179.377175][ T7620] should_fail_ex.cold+0x5/0xa [ 179.377193][ T7620] should_failslab+0xc2/0x120 [ 179.377209][ T7620] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 179.377229][ T7620] ? seq_open+0x55/0x170 [ 179.377249][ T7620] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 179.377268][ T7620] seq_open+0x55/0x170 [ 179.377285][ T7620] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 179.377303][ T7620] single_open+0xfc/0x1d0 [ 179.377322][ T7620] tracing_trace_options_open+0xb0/0x100 [ 179.377346][ T7620] do_dentry_open+0x6d8/0x1660 [ 179.377360][ T7620] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 179.377387][ T7620] vfs_open+0x82/0x3f0 [ 179.377406][ T7620] path_openat+0x208c/0x31a0 [ 179.377427][ T7620] ? __pfx_path_openat+0x10/0x10 [ 179.377449][ T7620] do_file_open+0x20e/0x430 [ 179.377465][ T7620] ? __pfx_do_file_open+0x10/0x10 [ 179.377492][ T7620] ? alloc_fd+0x476/0x790 [ 179.377508][ T7620] ? do_getname+0x191/0x390 [ 179.377527][ T7620] do_sys_openat2+0x10d/0x1e0 [ 179.377545][ T7620] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.377565][ T7620] ? __fget_files+0x21f/0x3d0 [ 179.377582][ T7620] __x64_sys_openat+0x12d/0x210 [ 179.377611][ T7620] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.377638][ T7620] do_syscall_64+0x106/0xf80 [ 179.377658][ T7620] ? clear_bhb_loop+0x40/0x90 [ 179.377675][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.377690][ T7620] RIP: 0033:0x7f1b6d39c799 [ 179.377703][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.377717][ T7620] RSP: 002b:00007f1b6e1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.377731][ T7620] RAX: ffffffffffffffda RBX: 00007f1b6d615fa0 RCX: 00007f1b6d39c799 [ 179.377740][ T7620] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 179.377749][ T7620] RBP: 00007f1b6d432c99 R08: 0000000000000000 R09: 0000000000000000 [ 179.377757][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.377765][ T7620] R13: 00007f1b6d616038 R14: 00007f1b6d615fa0 R15: 00007ffe077aef18 [ 179.377785][ T7620] [ 180.941406][ T7650] FAULT_INJECTION: forcing a failure. [ 180.941406][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 180.999009][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT(full) [ 180.999031][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.999045][ T7650] Call Trace: [ 180.999050][ T7650] [ 180.999056][ T7650] dump_stack_lvl+0x100/0x190 [ 180.999081][ T7650] should_fail_ex.cold+0x5/0xa [ 180.999098][ T7650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 180.999115][ T7650] should_failslab+0xc2/0x120 [ 180.999130][ T7650] __kmalloc_noprof+0xe0/0x850 [ 180.999154][ T7650] tomoyo_realpath_from_path+0xb6/0x690 [ 180.999177][ T7650] tomoyo_path_number_perm+0x23c/0x580 [ 180.999191][ T7650] ? tomoyo_path_number_perm+0x22e/0x580 [ 180.999207][ T7650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.999241][ T7650] ? find_held_lock+0x2b/0x80 [ 180.999254][ T7650] ? __fget_files+0x215/0x3d0 [ 180.999266][ T7650] ? hook_file_ioctl_common+0x146/0x410 [ 180.999286][ T7650] ? __fget_files+0x21f/0x3d0 [ 180.999302][ T7650] security_file_ioctl+0xd3/0x230 [ 180.999318][ T7650] __x64_sys_ioctl+0xb7/0x210 [ 180.999339][ T7650] do_syscall_64+0x106/0xf80 [ 180.999358][ T7650] ? clear_bhb_loop+0x40/0x90 [ 180.999380][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.999395][ T7650] RIP: 0033:0x7f319e59c799 [ 180.999407][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.999420][ T7650] RSP: 002b:00007f319f3e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.999434][ T7650] RAX: ffffffffffffffda RBX: 00007f319e815fa0 RCX: 00007f319e59c799 [ 180.999442][ T7650] RDX: 0000000000000001 RSI: 0000000000004b67 RDI: 0000000000000003 [ 180.999450][ T7650] RBP: 00007f319f3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 180.999458][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.999466][ T7650] R13: 00007f319e816038 R14: 00007f319e815fa0 R15: 00007ffeac076728 [ 180.999484][ T7650] [ 180.999503][ T7650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.753464][ T7664] FAULT_INJECTION: forcing a failure. [ 181.753464][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 181.810950][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.2.407 Not tainted syzkaller #0 PREEMPT(full) [ 181.810973][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.810982][ T7664] Call Trace: [ 181.810988][ T7664] [ 181.810994][ T7664] dump_stack_lvl+0x100/0x190 [ 181.811021][ T7664] should_fail_ex.cold+0x5/0xa [ 181.811039][ T7664] ? drm_atomic_state_init+0x190/0x490 [ 181.811056][ T7664] should_failslab+0xc2/0x120 [ 181.811073][ T7664] __kmalloc_noprof+0xe0/0x850 [ 181.811099][ T7664] drm_atomic_state_init+0x190/0x490 [ 181.811116][ T7664] ? kasan_save_track+0x14/0x30 [ 181.811140][ T7664] drm_atomic_state_alloc+0xd3/0x120 [ 181.811158][ T7664] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 181.811179][ T7664] ? trace_contention_end+0x140/0x180 [ 181.811200][ T7664] ? __mutex_lock+0x26a/0x1b90 [ 181.811221][ T7664] ? __mutex_lock+0x26a/0x1b90 [ 181.811242][ T7664] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 181.811263][ T7664] ? drm_master_internal_acquire+0x21/0x80 [ 181.811308][ T7664] drm_client_modeset_commit_locked+0x14d/0x580 [ 181.811333][ T7664] drm_client_modeset_commit+0x4f/0x80 [ 181.811354][ T7664] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 181.811378][ T7664] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 181.811400][ T7664] drm_fbdev_client_restore+0x1b/0x30 [ 181.811416][ T7664] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 181.811432][ T7664] drm_client_dev_restore+0x205/0x2a0 [ 181.811455][ T7664] drm_release+0x2c6/0x360 [ 181.811474][ T7664] ? __pfx_drm_release+0x10/0x10 [ 181.811492][ T7664] __fput+0x3ff/0xb40 [ 181.811514][ T7664] task_work_run+0x150/0x240 [ 181.811535][ T7664] ? __pfx_task_work_run+0x10/0x10 [ 181.811561][ T7664] exit_to_user_mode_loop+0x100/0x4a0 [ 181.811582][ T7664] do_syscall_64+0x668/0xf80 [ 181.811601][ T7664] ? clear_bhb_loop+0x40/0x90 [ 181.811620][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.811635][ T7664] RIP: 0033:0x7f1b6d39c799 [ 181.811648][ T7664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.811662][ T7664] RSP: 002b:00007f1b6e1b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 181.811676][ T7664] RAX: 0000000000000000 RBX: 00007f1b6d615fa0 RCX: 00007f1b6d39c799 [ 181.811685][ T7664] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 181.811693][ T7664] RBP: 00007f1b6d432c99 R08: 0000000000000000 R09: 0000000000000000 [ 181.811701][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.811709][ T7664] R13: 00007f1b6d616038 R14: 00007f1b6d615fa0 R15: 00007ffe077aef18 [ 181.811730][ T7664] [ 183.436249][ T7697] netlink: 346 bytes leftover after parsing attributes in process `syz.3.414'. [ 184.683826][ T7717] syz.0.421 uses obsolete (PF_INET,SOCK_PACKET) [ 188.518332][ T7778] binder: 7777:7778 ioctl c0306201 2000000000c0 returned -14 [ 188.716946][ T7784] FAULT_INJECTION: forcing a failure. [ 188.716946][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 188.745944][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT(full) [ 188.745967][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.745976][ T7784] Call Trace: [ 188.745981][ T7784] [ 188.745987][ T7784] dump_stack_lvl+0x100/0x190 [ 188.746016][ T7784] should_fail_ex.cold+0x5/0xa [ 188.746034][ T7784] should_failslab+0xc2/0x120 [ 188.746051][ T7784] __kmalloc_cache_noprof+0x7a/0x6f0 [ 188.746070][ T7784] ? nci_allocate_device+0x105/0x410 [ 188.746090][ T7784] nci_allocate_device+0x105/0x410 [ 188.746107][ T7784] virtual_ncidev_open+0x6f/0x220 [ 188.746128][ T7784] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 188.746147][ T7784] misc_open+0x26d/0x450 [ 188.746164][ T7784] ? __pfx_misc_open+0x10/0x10 [ 188.746180][ T7784] chrdev_open+0x234/0x6a0 [ 188.746194][ T7784] ? __pfx_apparmor_file_open+0x10/0x10 [ 188.746209][ T7784] ? __pfx_chrdev_open+0x10/0x10 [ 188.746225][ T7784] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 188.746244][ T7784] do_dentry_open+0x6d8/0x1660 [ 188.746259][ T7784] ? __pfx_chrdev_open+0x10/0x10 [ 188.746278][ T7784] vfs_open+0x82/0x3f0 [ 188.746299][ T7784] path_openat+0x208c/0x31a0 [ 188.746320][ T7784] ? __pfx_path_openat+0x10/0x10 [ 188.746342][ T7784] do_file_open+0x20e/0x430 [ 188.746358][ T7784] ? __pfx_do_file_open+0x10/0x10 [ 188.746387][ T7784] ? alloc_fd+0x476/0x790 [ 188.746403][ T7784] ? do_getname+0x191/0x390 [ 188.746422][ T7784] do_sys_openat2+0x10d/0x1e0 [ 188.746441][ T7784] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.746461][ T7784] ? __fget_files+0x21f/0x3d0 [ 188.746478][ T7784] __x64_sys_openat+0x12d/0x210 [ 188.746497][ T7784] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.746523][ T7784] do_syscall_64+0x106/0xf80 [ 188.746542][ T7784] ? clear_bhb_loop+0x40/0x90 [ 188.746568][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.746584][ T7784] RIP: 0033:0x7f296659c799 [ 188.746597][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.746611][ T7784] RSP: 002b:00007f296738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.746626][ T7784] RAX: ffffffffffffffda RBX: 00007f2966815fa0 RCX: 00007f296659c799 [ 188.746635][ T7784] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 188.746645][ T7784] RBP: 00007f2966632c99 R08: 0000000000000000 R09: 0000000000000000 [ 188.746653][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.746661][ T7784] R13: 00007f2966816038 R14: 00007f2966815fa0 R15: 00007fffcb64af98 [ 188.746680][ T7784] [ 189.546168][ T7801] FAULT_INJECTION: forcing a failure. [ 189.546168][ T7801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.576123][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(full) [ 189.576145][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.576155][ T7801] Call Trace: [ 189.576160][ T7801] [ 189.576166][ T7801] dump_stack_lvl+0x100/0x190 [ 189.576193][ T7801] should_fail_ex.cold+0x5/0xa [ 189.576209][ T7801] ? prepare_alloc_pages+0x16d/0x5f0 [ 189.576227][ T7801] should_fail_alloc_page+0xeb/0x140 [ 189.576243][ T7801] prepare_alloc_pages+0x1f0/0x5f0 [ 189.576263][ T7801] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 189.576289][ T7801] ? stack_trace_save+0x8e/0xc0 [ 189.576303][ T7801] ? __pfx_stack_trace_save+0x10/0x10 [ 189.576318][ T7801] ? stack_depot_save_flags+0x27/0x9d0 [ 189.576341][ T7801] ? is_bpf_text_address+0x8a/0x1a0 [ 189.576364][ T7801] ? is_bpf_text_address+0x8a/0x1a0 [ 189.576385][ T7801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.576407][ T7801] ? kasan_save_stack+0x3f/0x50 [ 189.576430][ T7801] ? kasan_save_track+0x14/0x30 [ 189.576451][ T7801] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 189.576472][ T7801] ? alloc_vmap_area+0x186c/0x2bd0 [ 189.576485][ T7801] ? __get_vm_area_node+0x1ca/0x330 [ 189.576500][ T7801] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 189.576525][ T7801] ? __vmalloc_node_noprof+0xad/0xf0 [ 189.576542][ T7801] ? copy_process+0x5ec/0x7a40 [ 189.576558][ T7801] ? kernel_clone+0xfc/0x9a0 [ 189.576574][ T7801] ? __do_sys_clone+0xd9/0x120 [ 189.576589][ T7801] ? do_syscall_64+0x106/0xf80 [ 189.576616][ T7801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.576640][ T7801] ? policy_nodemask+0xed/0x4f0 [ 189.576658][ T7801] alloc_pages_mpol+0x1fb/0x550 [ 189.576675][ T7801] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 189.576695][ T7801] alloc_pages_noprof+0x131/0x390 [ 189.576711][ T7801] get_free_pages_noprof+0x10/0xb0 [ 189.576726][ T7801] __kasan_populate_vmalloc+0xa0/0x210 [ 189.576751][ T7801] alloc_vmap_area+0x95d/0x2bd0 [ 189.576773][ T7801] ? __pfx_alloc_vmap_area+0x10/0x10 [ 189.576793][ T7801] __get_vm_area_node+0x1ca/0x330 [ 189.576813][ T7801] __vmalloc_node_range_noprof+0x213/0x1530 [ 189.576831][ T7801] ? kernel_clone+0xfc/0x9a0 [ 189.576846][ T7801] ? find_held_lock+0x2b/0x80 [ 189.576859][ T7801] ? local_lock_release+0x99/0x130 [ 189.576875][ T7801] ? local_lock_release+0x99/0x130 [ 189.576894][ T7801] ? kernel_clone+0xfc/0x9a0 [ 189.576910][ T7801] ? find_held_lock+0x2b/0x80 [ 189.576923][ T7801] ? rcu_read_unlock+0x17/0x60 [ 189.576938][ T7801] ? rcu_read_unlock+0x17/0x60 [ 189.576953][ T7801] ? obj_cgroup_charge_account+0x46d/0x640 [ 189.576970][ T7801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.576989][ T7801] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 189.577011][ T7801] ? rcu_is_watching+0x12/0xc0 [ 189.577032][ T7801] ? trace_kmem_cache_alloc+0xf3/0x120 [ 189.577048][ T7801] ? kernel_clone+0xfc/0x9a0 [ 189.577063][ T7801] __vmalloc_node_noprof+0xad/0xf0 [ 189.577081][ T7801] ? kernel_clone+0xfc/0x9a0 [ 189.577098][ T7801] copy_process+0x5ec/0x7a40 [ 189.577116][ T7801] ? __pfx___futex_wait+0x10/0x10 [ 189.577136][ T7801] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 189.577154][ T7801] ? lockdep_hardirqs_on+0x78/0x100 [ 189.577179][ T7801] ? __pfx_copy_process+0x10/0x10 [ 189.577195][ T7801] ? find_held_lock+0x2b/0x80 [ 189.577216][ T7801] kernel_clone+0xfc/0x9a0 [ 189.577231][ T7801] ? __pfx_futex_wait+0x10/0x10 [ 189.577253][ T7801] ? __pfx_kernel_clone+0x10/0x10 [ 189.577273][ T7801] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.577296][ T7801] __do_sys_clone+0xd9/0x120 [ 189.577318][ T7801] ? __pfx___do_sys_clone+0x10/0x10 [ 189.577335][ T7801] ? fd_install+0x24f/0x580 [ 189.577364][ T7801] do_syscall_64+0x106/0xf80 [ 189.577384][ T7801] ? clear_bhb_loop+0x40/0x90 [ 189.577402][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.577416][ T7801] RIP: 0033:0x7f4241b9c799 [ 189.577430][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.577444][ T7801] RSP: 002b:00007f423fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 189.577458][ T7801] RAX: ffffffffffffffda RBX: 00007f4241e16090 RCX: 00007f4241b9c799 [ 189.577468][ T7801] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 189.577477][ T7801] RBP: 00007f4241c32c99 R08: 0000000000000002 R09: 0000000000000000 [ 189.577485][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.577494][ T7801] R13: 00007f4241e16128 R14: 00007f4241e16090 R15: 00007ffc7c12e688 [ 189.577519][ T7801] [ 189.577746][ T7801] syz.0.440: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 190.285325][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806818bc00: rx timeout, send abort [ 190.307214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068188c00: rx timeout, send abort [ 190.316149][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806818bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 190.330750][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068188c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 190.725944][ T7811] binder: 7810:7811 ioctl c0306201 2000000000c0 returned -14 [ 190.831501][ T7814] netlink: 'syz.2.447': attribute type 4 has an invalid length. [ 191.061647][ T7801] ,cpuset=/,mems_allowed=0-1 [ 191.076901][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(full) [ 191.076921][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.076929][ T7801] Call Trace: [ 191.076934][ T7801] [ 191.076940][ T7801] dump_stack_lvl+0x100/0x190 [ 191.076965][ T7801] warn_alloc.cold+0x95/0x1c1 [ 191.076990][ T7801] ? __pfx_warn_alloc+0x10/0x10 [ 191.077010][ T7801] ? lockdep_hardirqs_on+0x78/0x100 [ 191.077032][ T7801] ? __get_vm_area_node+0x2c5/0x330 [ 191.077052][ T7801] ? __get_vm_area_node+0x208/0x330 [ 191.077072][ T7801] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 191.077089][ T7801] ? find_held_lock+0x2b/0x80 [ 191.077102][ T7801] ? local_lock_release+0x99/0x130 [ 191.077119][ T7801] ? local_lock_release+0x99/0x130 [ 191.077137][ T7801] ? kernel_clone+0xfc/0x9a0 [ 191.077155][ T7801] ? find_held_lock+0x2b/0x80 [ 191.077167][ T7801] ? rcu_read_unlock+0x17/0x60 [ 191.077182][ T7801] ? rcu_read_unlock+0x17/0x60 [ 191.077198][ T7801] ? obj_cgroup_charge_account+0x46d/0x640 [ 191.077214][ T7801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.077233][ T7801] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 191.077252][ T7801] ? rcu_is_watching+0x12/0xc0 [ 191.077273][ T7801] ? trace_kmem_cache_alloc+0xf3/0x120 [ 191.077289][ T7801] ? kernel_clone+0xfc/0x9a0 [ 191.077304][ T7801] __vmalloc_node_noprof+0xad/0xf0 [ 191.077321][ T7801] ? kernel_clone+0xfc/0x9a0 [ 191.077339][ T7801] copy_process+0x5ec/0x7a40 [ 191.077356][ T7801] ? __pfx___futex_wait+0x10/0x10 [ 191.077384][ T7801] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.077403][ T7801] ? lockdep_hardirqs_on+0x78/0x100 [ 191.077427][ T7801] ? __pfx_copy_process+0x10/0x10 [ 191.077443][ T7801] ? find_held_lock+0x2b/0x80 [ 191.077464][ T7801] kernel_clone+0xfc/0x9a0 [ 191.077479][ T7801] ? __pfx_futex_wait+0x10/0x10 [ 191.077501][ T7801] ? __pfx_kernel_clone+0x10/0x10 [ 191.077521][ T7801] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.077544][ T7801] __do_sys_clone+0xd9/0x120 [ 191.077560][ T7801] ? __pfx___do_sys_clone+0x10/0x10 [ 191.077577][ T7801] ? fd_install+0x24f/0x580 [ 191.077604][ T7801] do_syscall_64+0x106/0xf80 [ 191.077623][ T7801] ? clear_bhb_loop+0x40/0x90 [ 191.077641][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.077660][ T7801] RIP: 0033:0x7f4241b9c799 [ 191.077673][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.077686][ T7801] RSP: 002b:00007f423fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 191.077700][ T7801] RAX: ffffffffffffffda RBX: 00007f4241e16090 RCX: 00007f4241b9c799 [ 191.077709][ T7801] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 191.077718][ T7801] RBP: 00007f4241c32c99 R08: 0000000000000002 R09: 0000000000000000 [ 191.077726][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.077734][ T7801] R13: 00007f4241e16128 R14: 00007f4241e16090 R15: 00007ffc7c12e688 [ 191.077752][ T7801] [ 191.077758][ T7801] Mem-Info: [ 191.484191][ T7823] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 191.849046][ T7801] active_anon:21607 inactive_anon:0 isolated_anon:0 [ 191.849046][ T7801] active_file:10465 inactive_file:45053 isolated_file:0 [ 191.849046][ T7801] unevictable:768 dirty:295 writeback:0 [ 191.849046][ T7801] slab_reclaimable:11075 slab_unreclaimable:92542 [ 191.849046][ T7801] mapped:26251 shmem:1423 pagetables:1114 [ 191.849046][ T7801] sec_pagetables:0 bounce:0 [ 191.849046][ T7801] kernel_misc_reclaimable:0 [ 191.849046][ T7801] free:1307291 free_pcp:18895 free_cma:0 [ 192.004141][ T7801] Node 0 active_anon:87312kB inactive_anon:0kB active_file:41860kB inactive_file:180076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105940kB dirty:1180kB writeback:0kB shmem:5092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:49152kB kernel_stack:11296kB pagetables:4304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.114681][ T7801] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.239641][ T7801] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.285177][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 192.364743][ T7801] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 192.382207][ T7801] Node 0 DMA32 free:1281280kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91064kB inactive_anon:0kB active_file:41860kB inactive_file:180076kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:66772kB local_pcp:66772kB free_cma:0kB [ 192.495756][ T7801] lowmem_reserve[]: 0 0 1 1 1 [ 192.519098][ T7801] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 192.618506][ T7801] lowmem_reserve[]: 0 0 0 0 0 [ 192.643721][ T7801] Node 1 Normal free:3932444kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5068kB local_pcp:5068kB free_cma:0kB [ 192.789452][ T7801] lowmem_reserve[]: 0 0 0 0 0 [ 192.807672][ T7801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.869221][ T7801] Node 0 DMA32: 4683*4kB (UME) 2606*8kB (UM) 1230*16kB (UME) 659*32kB (UM) 453*64kB (UM) 229*128kB (UME) 102*256kB (UM) 105*512kB (UME) 42*1024kB (UM) 6*2048kB (UME) 248*4096kB (M) = 1289628kB [ 192.928572][ T7801] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 192.993033][ T7801] Node 1 Normal: 6*4kB (U) 6*8kB (U) 3*16kB (UM) 1*32kB (U) 0*64kB 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3932696kB [ 193.054938][ T7801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.079617][ T7801] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 193.128471][ T7801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.197812][ T7801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.265812][ T7801] 56901 total pagecache pages [ 193.283881][ T7801] 0 pages in swap cache [ 193.299766][ T7801] Free swap = 124996kB [ 193.315042][ T7801] Total swap = 124996kB [ 193.331533][ T7801] 2097051 pages RAM [ 193.349600][ T7801] 0 pages HighMem/MovableOnly [ 193.365234][ T7801] 430826 pages reserved [ 193.378244][ T7801] 0 pages cma reserved [ 194.076821][ T7878] FAULT_INJECTION: forcing a failure. [ 194.076821][ T7878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.076847][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.0.467 Not tainted syzkaller #0 PREEMPT(full) [ 194.076863][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.076872][ T7878] Call Trace: [ 194.076877][ T7878] [ 194.076882][ T7878] dump_stack_lvl+0x100/0x190 [ 194.076907][ T7878] should_fail_ex.cold+0x5/0xa [ 194.076922][ T7878] ? prepare_alloc_pages+0x16d/0x5f0 [ 194.076940][ T7878] should_fail_alloc_page+0xeb/0x140 [ 194.076957][ T7878] prepare_alloc_pages+0x1f0/0x5f0 [ 194.076976][ T7878] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 194.077002][ T7878] ? stack_trace_save+0x8e/0xc0 [ 194.077016][ T7878] ? __pfx_stack_trace_save+0x10/0x10 [ 194.077030][ T7878] ? stack_depot_save_flags+0x27/0x9d0 [ 194.077049][ T7878] ? is_bpf_text_address+0x8a/0x1a0 [ 194.077078][ T7878] ? is_bpf_text_address+0x8a/0x1a0 [ 194.077100][ T7878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.077122][ T7878] ? kasan_save_stack+0x3f/0x50 [ 194.077144][ T7878] ? kasan_save_track+0x14/0x30 [ 194.077166][ T7878] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 194.077187][ T7878] ? alloc_vmap_area+0x186c/0x2bd0 [ 194.077201][ T7878] ? __get_vm_area_node+0x1ca/0x330 [ 194.077215][ T7878] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 194.077232][ T7878] ? __vmalloc_node_noprof+0xad/0xf0 [ 194.077248][ T7878] ? copy_process+0x5ec/0x7a40 [ 194.077263][ T7878] ? kernel_clone+0xfc/0x9a0 [ 194.077277][ T7878] ? __do_sys_clone+0xd9/0x120 [ 194.077292][ T7878] ? do_syscall_64+0x106/0xf80 [ 194.077319][ T7878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.077343][ T7878] ? policy_nodemask+0xed/0x4f0 [ 194.077360][ T7878] alloc_pages_mpol+0x1fb/0x550 [ 194.077377][ T7878] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.077397][ T7878] alloc_pages_noprof+0x131/0x390 [ 194.077414][ T7878] get_free_pages_noprof+0x10/0xb0 [ 194.077428][ T7878] __kasan_populate_vmalloc+0xa0/0x210 [ 194.077454][ T7878] alloc_vmap_area+0x95d/0x2bd0 [ 194.077476][ T7878] ? __pfx_alloc_vmap_area+0x10/0x10 [ 194.077496][ T7878] __get_vm_area_node+0x1ca/0x330 [ 194.077515][ T7878] __vmalloc_node_range_noprof+0x213/0x1530 [ 194.077533][ T7878] ? kernel_clone+0xfc/0x9a0 [ 194.077548][ T7878] ? find_held_lock+0x2b/0x80 [ 194.077561][ T7878] ? local_lock_release+0x99/0x130 [ 194.077578][ T7878] ? local_lock_release+0x99/0x130 [ 194.077596][ T7878] ? kernel_clone+0xfc/0x9a0 [ 194.077617][ T7878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.077636][ T7878] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 194.077655][ T7878] ? rcu_is_watching+0x12/0xc0 [ 194.077679][ T7878] ? trace_kmem_cache_alloc+0xf3/0x120 [ 194.077696][ T7878] ? kernel_clone+0xfc/0x9a0 [ 194.077711][ T7878] __vmalloc_node_noprof+0xad/0xf0 [ 194.077728][ T7878] ? kernel_clone+0xfc/0x9a0 [ 194.077746][ T7878] copy_process+0x5ec/0x7a40 [ 194.077763][ T7878] ? __pfx___futex_wait+0x10/0x10 [ 194.077784][ T7878] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 194.077802][ T7878] ? lockdep_hardirqs_on+0x78/0x100 [ 194.077826][ T7878] ? __pfx_copy_process+0x10/0x10 [ 194.077842][ T7878] ? find_held_lock+0x2b/0x80 [ 194.077863][ T7878] kernel_clone+0xfc/0x9a0 [ 194.077878][ T7878] ? __pfx_futex_wait+0x10/0x10 [ 194.077899][ T7878] ? __pfx_kernel_clone+0x10/0x10 [ 194.077920][ T7878] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.077942][ T7878] __do_sys_clone+0xd9/0x120 [ 194.077959][ T7878] ? __pfx___do_sys_clone+0x10/0x10 [ 194.077975][ T7878] ? fd_install+0x24f/0x580 [ 194.078002][ T7878] do_syscall_64+0x106/0xf80 [ 194.078022][ T7878] ? clear_bhb_loop+0x40/0x90 [ 194.078039][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.078054][ T7878] RIP: 0033:0x7f4241b9c799 [ 194.078073][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.078088][ T7878] RSP: 002b:00007f423fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 194.078102][ T7878] RAX: ffffffffffffffda RBX: 00007f4241e16090 RCX: 00007f4241b9c799 [ 194.078112][ T7878] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 194.078120][ T7878] RBP: 00007f4241c32c99 R08: 0000000000000002 R09: 0000000000000000 [ 194.078130][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.078138][ T7878] R13: 00007f4241e16128 R14: 00007f4241e16090 R15: 00007ffc7c12e688 [ 194.078157][ T7878] [ 194.229870][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229929][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.817089][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068071800: rx timeout, send abort [ 194.817205][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068073400: rx timeout, send abort [ 194.817445][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068071800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.818304][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068073400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.851949][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 199.234968][ T7963] netlink: set zone limit has 8 unknown bytes [ 199.353668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.366165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 199.378583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.390761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 199.402962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.415140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 199.427344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.439578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 199.451763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.236046][ C0] net_ratelimit: 21686 callbacks suppressed [ 204.236062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 204.254183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.266401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 204.278608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.290790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 204.302990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.315219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 204.327409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.339583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 204.351786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.615879][ C0] sched: DL replenish lagged too much [ 209.245854][ C0] net_ratelimit: 21865 callbacks suppressed [ 209.245871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.263982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 209.276180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.288344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.300535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.312861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 209.325137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.337353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.349548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.361739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 214.255861][ C0] net_ratelimit: 17330 callbacks suppressed [ 214.255878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.273967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.286207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 214.298905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.311062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.323320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 214.335585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.347814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.360067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.372206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.266063][ C0] net_ratelimit: 17121 callbacks suppressed [ 219.266080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.284363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 219.296584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.308768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.320970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.333175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.345362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.357600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 219.370350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.382535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.276010][ C0] net_ratelimit: 18699 callbacks suppressed [ 224.276026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.294239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 224.306722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.318909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 224.331389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.343570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.355788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 224.367971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.380153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.392320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.285904][ C0] net_ratelimit: 16823 callbacks suppressed [ 229.285921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.304005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.316270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.329002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 229.341444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.353653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 229.366168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.378325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.390543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 229.402739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.296021][ C0] net_ratelimit: 14784 callbacks suppressed [ 234.296038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.314149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.326388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.338592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.350802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.363508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 234.376042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.388256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 234.400720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.413500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.306406][ C0] net_ratelimit: 14527 callbacks suppressed [ 239.306429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 239.324853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.337057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 239.349529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.362248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.374488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 239.386706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.398887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.411091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.423256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.315864][ C0] net_ratelimit: 14499 callbacks suppressed [ 244.315884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.334016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 244.346502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.359184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.371393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 244.383584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.395756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.407932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.420080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.432277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.326157][ C0] net_ratelimit: 14453 callbacks suppressed [ 249.326175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.344324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 249.356509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.368681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.380838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.392955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.405170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.417346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.430150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 249.442683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.336076][ C0] net_ratelimit: 14473 callbacks suppressed [ 254.336092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.355205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.367416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 254.379582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.391828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.404080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.416213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.428394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.440582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.453367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 255.776492][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789863][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.346079][ C0] net_ratelimit: 14483 callbacks suppressed [ 259.346098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 259.364545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.376761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 259.389255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.401967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.414211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 259.426430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.438693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.450962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.463200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.355821][ C0] net_ratelimit: 14428 callbacks suppressed [ 264.355838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 264.374210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.386889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.399131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 264.411298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.423529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.435686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.447799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.459967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.472137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.366197][ C0] net_ratelimit: 14500 callbacks suppressed [ 269.366214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.384364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 269.396544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.408705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.420940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.433074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.445232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.457416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.470109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 269.482536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.375985][ C0] net_ratelimit: 14564 callbacks suppressed [ 274.376004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.394149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.406906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 274.419388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.431577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 274.444040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.456832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.469044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 274.481254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.493407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.385884][ C0] net_ratelimit: 14748 callbacks suppressed [ 279.385902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.403933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.416096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.428259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.441053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 279.453525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.465700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 279.478142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.490817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.503035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 284.396272][ C0] net_ratelimit: 14754 callbacks suppressed [ 284.396289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 284.414608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.426792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 284.439266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.451951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.464137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 284.476304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.488448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.500598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.512698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.405963][ C0] net_ratelimit: 14605 callbacks suppressed [ 289.405981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.424587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 289.437020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.449209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 289.461654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.474400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.486596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 289.498748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.510888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.523047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.416266][ C0] net_ratelimit: 14527 callbacks suppressed [ 294.416282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.434575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 294.446738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.458917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.471107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.483210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.495360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.507514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.520194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 294.532657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.425842][ C0] net_ratelimit: 14700 callbacks suppressed [ 299.425860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 299.444269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.456998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.469218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 299.481417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.493616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.505873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.518006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.530196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.542445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.436417][ C0] net_ratelimit: 14776 callbacks suppressed [ 304.436438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.454584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 304.466755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.478911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.491063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.503193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.515356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.527511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.540205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 304.552617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.446334][ C0] net_ratelimit: 14614 callbacks suppressed [ 309.446351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 309.464727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.476905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 309.489345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.502059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.514299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 309.526460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.538606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.550772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.562872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.456515][ C0] net_ratelimit: 14478 callbacks suppressed [ 314.456533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.474825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 314.487003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.499193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.511384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.523510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.535657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.547811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.560527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 314.572990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.285786][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 318.292739][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P37/1:b..l P7963/1:b..l [ 318.301856][ C0] rcu: (detected by 0, t=10502 jiffies, g=31701, q=1512 ncpus=1) [ 318.309634][ C0] task:syz.2.477 state:R running task stack:26856 pid:7963 tgid:7962 ppid:5825 task_flags:0x40054c flags:0x00080002 [ 318.323478][ C0] Call Trace: [ 318.326750][ C0] [ 318.329664][ C0] __schedule+0xfee/0x6120 [ 318.334079][ C0] ? stack_trace_save+0x8e/0xc0 [ 318.338908][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.344260][ C0] ? __pfx___schedule+0x10/0x10 [ 318.349095][ C0] ? mark_held_locks+0x40/0x70 [ 318.353841][ C0] preempt_schedule_irq+0x50/0x90 [ 318.358849][ C0] irqentry_exit+0x17b/0x670 [ 318.363423][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.369382][ C0] RIP: 0010:__orc_find+0x70/0xf0 [ 318.374303][ C0] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 318.393888][ C0] RSP: 0018:ffffc900052cf130 EFLAGS: 00000a02 [ 318.399936][ C0] RAX: ffffffff9185eb7a RBX: ffffffff90faf520 RCX: dffffc0000000000 [ 318.407884][ C0] RDX: 1ffffffff21f5ea4 RSI: 0000000000000000 RDI: ffffffff90faf520 [ 318.415835][ C0] RBP: ffffffff90faf520 R08: ffffffff9185eb80 R09: 0000000000000007 [ 318.423783][ C0] R10: 0000000000000200 R11: 000000000001655c R12: ffffffff90faf520 [ 318.431731][ C0] R13: ffffffff82655c09 R14: ffffffff90faf520 R15: ffffffff90faf520 [ 318.439681][ C0] ? free_unref_folios+0xae9/0x1790 [ 318.444873][ C0] ? free_unref_folios+0xae9/0x1790 [ 318.450054][ C0] unwind_next_frame+0x2ec/0x1ea0 [ 318.455059][ C0] ? free_unref_folios+0xaea/0x1790 [ 318.460241][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.466375][ C0] arch_stack_walk+0x94/0xf0 [ 318.470948][ C0] ? free_unref_folios+0xaea/0x1790 [ 318.476129][ C0] stack_trace_save+0x8e/0xc0 [ 318.480782][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.486134][ C0] ? __lock_acquire+0x4a5/0x2630 [ 318.491052][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.496839][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 318.502020][ C0] save_stack+0x162/0x1e0 [ 318.506337][ C0] ? __pfx_save_stack+0x10/0x10 [ 318.511170][ C0] ? free_unref_folios+0xaea/0x1790 [ 318.516358][ C0] ? page_ext_put+0x3e/0xd0 [ 318.520850][ C0] __reset_page_owner+0x84/0x190 [ 318.525765][ C0] free_unref_folios+0xaea/0x1790 [ 318.530776][ C0] ? mark_held_locks+0x40/0x70 [ 318.535522][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.541312][ C0] folios_put_refs+0x53c/0x840 [ 318.546064][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 318.551340][ C0] free_pages_and_swap_cache+0x3d9/0x480 [ 318.556960][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 318.563118][ C0] ? __pfx___might_resched+0x10/0x10 [ 318.568391][ C0] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 318.574357][ C0] tlb_finish_mmu+0x1b0/0x810 [ 318.579017][ C0] exit_mmap+0x454/0xa30 [ 318.583241][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 318.588010][ C0] __mmput+0x12a/0x410 [ 318.592059][ C0] mmput+0x67/0x80 [ 318.595757][ C0] do_exit+0x819/0x2b60 [ 318.599897][ C0] ? __pfx_do_exit+0x10/0x10 [ 318.604470][ C0] ? do_raw_spin_lock+0x128/0x260 [ 318.609475][ C0] ? find_held_lock+0x2b/0x80 [ 318.614129][ C0] ? get_signal+0x7e0/0x21e0 [ 318.618699][ C0] do_group_exit+0xd5/0x2a0 [ 318.623186][ C0] get_signal+0x1ec7/0x21e0 [ 318.627676][ C0] ? __pfx_get_signal+0x10/0x10 [ 318.632504][ C0] ? do_futex+0x192/0x350 [ 318.636819][ C0] arch_do_signal_or_restart+0x91/0x770 [ 318.642347][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.648485][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 318.653757][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 318.659025][ C0] do_syscall_64+0x668/0xf80 [ 318.663599][ C0] ? clear_bhb_loop+0x40/0x90 [ 318.668255][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.674128][ C0] RIP: 0033:0x7f1b6d39c799 [ 318.678523][ C0] RSP: 002b:00007f1b6e1b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 318.686912][ C0] RAX: fffffffffffffe00 RBX: 00007f1b6d615fa8 RCX: 00007f1b6d39c799 [ 318.694860][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1b6d615fa8 [ 318.702813][ C0] RBP: 00007f1b6d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 318.710760][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.718710][ C0] R13: 00007f1b6d616038 R14: 00007ffe077aee30 R15: 00007ffe077aef18 [ 318.726671][ C0] [ 318.729667][ C0] task:khugepaged state:R running task stack:28032 pid:37 tgid:37 ppid:2 task_flags:0x200040 flags:0x00080000 [ 318.743125][ C0] Call Trace: [ 318.746381][ C0] [ 318.749292][ C0] __schedule+0xfee/0x6120 [ 318.753692][ C0] ? folios_put_refs+0x66d/0x840 [ 318.758623][ C0] ? __pfx___schedule+0x10/0x10 [ 318.763457][ C0] ? folio_batch_move_lru+0x2da/0x460 [ 318.768810][ C0] ? __pfx_lru_add+0x10/0x10 [ 318.773386][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 318.778738][ C0] preempt_schedule_common+0x42/0xc0 [ 318.784007][ C0] preempt_schedule_thunk+0x16/0x30 [ 318.789186][ C0] ? __folio_batch_add_and_move+0x604/0xc60 [ 318.795062][ C0] ? __folio_batch_add_and_move+0x611/0xc60 [ 318.800939][ C0] __folio_batch_add_and_move+0x616/0xc60 [ 318.806642][ C0] ? __pfx_lru_add+0x10/0x10 [ 318.811217][ C0] folio_putback_lru+0x1c/0xe0 [ 318.815965][ C0] collapse_huge_page+0x2bf7/0x38c0 [ 318.821152][ C0] ? __pfx_collapse_huge_page+0x10/0x10 [ 318.826685][ C0] ? pte_offset_map_lock+0x174/0x320 [ 318.831949][ C0] ? find_held_lock+0x2b/0x80 [ 318.836603][ C0] ? hpage_collapse_scan_pmd+0xd7c/0x1670 [ 318.842299][ C0] ? hpage_collapse_scan_pmd+0xd7c/0x1670 [ 318.848002][ C0] hpage_collapse_scan_pmd+0xdb9/0x1670 [ 318.853537][ C0] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 318.859501][ C0] ? __pfx___might_resched+0x10/0x10 [ 318.864775][ C0] khugepaged+0x1229/0x16a0 [ 318.869265][ C0] ? __pfx_khugepaged+0x10/0x10 [ 318.874095][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 318.879720][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.885687][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 318.891734][ C0] ? find_held_lock+0x2b/0x80 [ 318.896388][ C0] ? __kthread_parkme+0xbb/0x230 [ 318.901316][ C0] ? __kthread_parkme+0x18c/0x230 [ 318.906322][ C0] ? kthread+0x13a/0x450 [ 318.910545][ C0] ? __pfx_khugepaged+0x10/0x10 [ 318.915372][ C0] kthread+0x370/0x450 [ 318.919421][ C0] ? __pfx_kthread+0x10/0x10 [ 318.923999][ C0] ret_from_fork+0x754/0xd80 [ 318.928589][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 318.933686][ C0] ? __switch_to+0x7b4/0x1120 [ 318.938347][ C0] ? __pfx_kthread+0x10/0x10 [ 318.942920][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.947671][ C0] [ 318.950677][ C0] rcu: rcu_preempt kthread starved for 277 jiffies! g31701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 318.961673][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.971616][ C0] rcu: RCU grace-period kthread stack dump: [ 318.977482][ C0] task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 318.990936][ C0] Call Trace: [ 318.994190][ C0] [ 318.997100][ C0] __schedule+0xfee/0x6120 [ 319.001504][ C0] ? __lock_acquire+0x4a5/0x2630 [ 319.006433][ C0] ? __pfx___schedule+0x10/0x10 [ 319.011264][ C0] ? find_held_lock+0x2b/0x80 [ 319.015919][ C0] ? schedule+0x2bf/0x390 [ 319.020233][ C0] schedule+0xdd/0x390 [ 319.024283][ C0] schedule_timeout+0x127/0x280 [ 319.029121][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 319.034473][ C0] ? __pfx_process_timeout+0x10/0x10 [ 319.039747][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.045533][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 319.050976][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 319.055720][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 319.060999][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 319.065917][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 319.071098][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.075845][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 319.081636][ C0] rcu_gp_kthread+0x179/0x230 [ 319.086310][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 319.091487][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 319.097275][ C0] ? __kthread_parkme+0x18c/0x230 [ 319.102281][ C0] ? kthread+0x13a/0x450 [ 319.106504][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 319.111682][ C0] kthread+0x370/0x450 [ 319.115746][ C0] ? __pfx_kthread+0x10/0x10 [ 319.120318][ C0] ret_from_fork+0x754/0xd80 [ 319.124894][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 319.130003][ C0] ? __switch_to+0x7b4/0x1120 [ 319.134659][ C0] ? __pfx_kthread+0x10/0x10 [ 319.139231][ C0] ret_from_fork_asm+0x1a/0x30 [ 319.143987][ C0] [ 319.146984][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 319.153300][ C0] CPU: 0 UID: 0 PID: 3410 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 319.163086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.173122][ C0] Workqueue: bat_events batadv_tt_purge [ 319.178649][ C0] RIP: 0010:lock_acquire+0x173/0x380 [ 319.183915][ C0] Code: 0d 56 95 f5 0e 85 c9 0f 84 bd 00 00 00 65 8b 05 eb 58 29 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 6b 11 29 12 8b 90 54 0b 00 00 <85> d2 0f 85 98 00 00 00 9c 8f 04 24 fa 48 c7 c7 e7 12 f7 8d e8 44 [ 319.203501][ C0] RSP: 0018:ffffc90000007168 EFLAGS: 00000246 [ 319.209544][ C0] RAX: ffff8880332a8000 RBX: 0000000000000000 RCX: 0000000000000001 [ 319.217494][ C0] RDX: 0000000000000000 RSI: ffffffff8a660f96 RDI: fffffbfff1cfce9c [ 319.225441][ C0] RBP: ffffffff8e7e74e0 R08: 0000000000000000 R09: 0000000000000000 [ 319.233387][ C0] R10: 000000000000dd86 R11: 0000000000000000 R12: 0000000000000002 [ 319.241338][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.249294][ C0] FS: 0000000000000000(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 319.258201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.264762][ C0] CR2: 00007f424297e9a0 CR3: 000000007eb2c000 CR4: 00000000003526f0 [ 319.272711][ C0] Call Trace: [ 319.275970][ C0] [ 319.278794][ C0] ? net_generic+0xea/0x2a0 [ 319.283278][ C0] ? net_generic+0xea/0x2a0 [ 319.287772][ C0] net_generic+0x36/0x2a0 [ 319.292168][ C0] ? net_generic+0x25/0x2a0 [ 319.296651][ C0] br_nf_forward+0x1bc/0x19f0 [ 319.301312][ C0] nf_hook_slow+0xbf/0x220 [ 319.305714][ C0] __br_forward+0x2f6/0x970 [ 319.310197][ C0] ? __pfx___br_forward+0x10/0x10 [ 319.315201][ C0] ? __asan_memcpy+0x3c/0x60 [ 319.319778][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 319.325216][ C0] ? __skb_clone+0x570/0x760 [ 319.329881][ C0] maybe_deliver+0xf0/0x180 [ 319.334366][ C0] br_flood+0x193/0x650 [ 319.338508][ C0] br_handle_frame_finish+0xff4/0x1f60 [ 319.343966][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 319.349846][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 319.355111][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 319.359943][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 319.365033][ C0] ? nf_hook_slow+0x167/0x220 [ 319.369706][ C0] br_nf_hook_thresh+0x30d/0x420 [ 319.374626][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 319.380508][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 319.385951][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 319.391829][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 319.397014][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.402894][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.408790][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 319.414778][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 319.420672][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 319.426036][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 319.431914][ C0] ? lock_acquire+0x1cf/0x380 [ 319.436577][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 319.443062][ C0] ? net_generic+0xea/0x2a0 [ 319.447580][ C0] br_nf_pre_routing+0x90d/0x1550 [ 319.452594][ C0] br_handle_frame+0xcdd/0x1520 [ 319.457436][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 319.462734][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 319.468614][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 319.473881][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 319.480540][ C0] ? mark_held_locks+0x40/0x70 [ 319.485292][ C0] ? kmem_cache_free+0x124/0x6a0 [ 319.490218][ C0] ? skb_release_data+0x7a0/0x9d0 [ 319.495227][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 319.502319][ C0] ? kfree_skbmem+0x19f/0x210 [ 319.506975][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 319.512157][ C0] ? ip6_mc_input+0x51a/0xf50 [ 319.516831][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 319.521838][ C0] ? __lock_acquire+0x4a5/0x2630 [ 319.526775][ C0] ? process_backlog+0x32a/0x1580 [ 319.531779][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 319.537567][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 319.543962][ C0] ? lock_acquire+0x1cf/0x380 [ 319.548622][ C0] ? process_backlog+0x32a/0x1580 [ 319.553625][ C0] ? process_backlog+0x32a/0x1580 [ 319.558629][ C0] __netif_receive_skb+0x1f/0x120 [ 319.563637][ C0] process_backlog+0x37a/0x1580 [ 319.568474][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 319.573827][ C0] net_rx_action+0xa40/0xf20 [ 319.578403][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 319.583491][ C0] ? find_held_lock+0x2b/0x80 [ 319.588146][ C0] ? try_to_wake_up+0x154/0x1a80 [ 319.593058][ C0] ? try_to_wake_up+0x154/0x1a80 [ 319.597974][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 319.603168][ C0] ? sched_clock+0x38/0x60 [ 319.607606][ C0] ? sched_clock_cpu+0x6c/0x570 [ 319.612453][ C0] ? mark_held_locks+0x40/0x70 [ 319.617211][ C0] handle_softirqs+0x1eb/0x9e0 [ 319.621967][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 319.627240][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 319.632161][ C0] do_softirq+0xac/0xe0 [ 319.636307][ C0] [ 319.639214][ C0] [ 319.642121][ C0] __local_bh_enable_ip+0xf8/0x120 [ 319.647213][ C0] batadv_tt_purge+0x25d/0xbd0 [ 319.651958][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 319.657225][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.661979][ C0] process_one_work+0xa23/0x19a0 [ 319.666910][ C0] ? __pfx_process_one_work+0x10/0x10 [ 319.672273][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 319.677542][ C0] rescuer_thread+0x905/0x14a0 [ 319.682294][ C0] ? rescuer_thread+0x240/0x14a0 [ 319.687212][ C0] ? rescuer_thread+0x118/0x14a0 [ 319.692143][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 319.697326][ C0] ? __kthread_parkme+0x18c/0x230 [ 319.702332][ C0] ? kthread+0x13a/0x450 [ 319.706557][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 319.711734][ C0] kthread+0x370/0x450 [ 319.715786][ C0] ? __pfx_kthread+0x10/0x10 [ 319.720358][ C0] ret_from_fork+0x754/0xd80 [ 319.724934][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 319.730034][ C0] ? __switch_to+0x7b4/0x1120 [ 319.734693][ C0] ? __pfx_kthread+0x10/0x10 [ 319.739269][ C0] ret_from_fork_asm+0x1a/0x30 [ 319.744020][ C0] [ 319.748122][ C0] net_ratelimit: 11074 callbacks suppressed [ 319.748135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:29:6d:4e:fd:95, vlan:0) [ 319.766534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.778717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:d0:f4:ca:38:bc, vlan:0) [ 319.797570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.810603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.822894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 319.835230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.847504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.859742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.871953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.755933][ C0] net_ratelimit: 13821 callbacks suppressed [ 324.755950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 324.774022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.786129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.798853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.811052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ef:7f:90:fe:a3, vlan:0) [ 324.823228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.835377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.847563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.859673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.871847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)