last executing test programs: 2m0.832660505s ago: executing program 1 (id=1494): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub6/xrun_injection\x00', 0x41040, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x2) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) (async) r0 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x3) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = setfsgid$auto(0x0) setresgid$auto(r2, 0x0, r2) (async) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000000)={0x2d, @raw=0x7ef, @inferred=r1, 0x7d, 0x0, '\x00', {0x7fffffffffffffff, 0x3, 0x2, 0xffffffffffffffff, r2, 0x4, 0x9, 0x93, {0x1007ff, 0x6}, {0x4, 0x4}, {0x5, 0x5}, 0x2, 0xb, 0x0, 0x8, 0x0, 0x3, 0x4, 0x3, 0x100, 0x9, '\x00', 0x401, 0x0, 0xfd5c, 0xff68}}) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x1, r2, 0x2, 0x94f8}) 1m59.772296332s ago: executing program 1 (id=1497): close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000800) wait4$auto(0x0, 0x0, 0xf, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffff004, 0x2) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0xa8200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r3, 0x84, 0x1d, 0x0, 0x0) socket(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r4, r5, 0x8, 0xff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x400, 0x0) ioctl$auto(r6, 0x921064ad, 0xffffffffffffffff) 1m57.637049125s ago: executing program 1 (id=1501): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000600"/17, 0x11) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x140, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000000c0)="f9555e5b8055a9136995420fadfd7ce56c5b3e51a0945f18fda2d99bd9e48a29a86b076dcc0e5348df8fe64927d711e07d39757ac085b24bee69638eade8f23b7acd679f0ed81a3867fb6f2e44fcb71a468b", 0x52) (async) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000000c0)="f9555e5b8055a9136995420fadfd7ce56c5b3e51a0945f18fda2d99bd9e48a29a86b076dcc0e5348df8fe64927d711e07d39757ac085b24bee69638eade8f23b7acd679f0ed81a3867fb6f2e44fcb71a468b", 0x52) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x20400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/macvlan0/retrans_time_ms\x00', 0x64080, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) (async) sendmsg$auto_NFSD_CMD_THREADS_GET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r4) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r4) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="0305276ca2fc0600000070000004000180", @ANYBLOB="a31c47c49091438d47fc6854ae07cf10d91619f6958aaa31f3c5087bd7f18a5790ed1c7e1b3facc8c50f869c5222862a9fdb21ad49045815379e71dae7c6281b474ca58915cc531c1bd62f7607bba0bb72cbe6b04779181248887444f51b4a961e30b3b7de90234cf2d3f9186fc45d734648f0768ee09aa75d07f7824727530e2feeb60975d2c9ba1b67e208614f407a3ab3b0dd94dd5c2aa0be79465919d9080397af8a62c7163e797eead6b96ea664ffa4517c85b5af3ef1415a541f21dacdb2", @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1044) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) r7 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) memfd_create$auto(0x0, 0x1) (async) memfd_create$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) ioctl$auto_EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000100)={0xd, 0xba, "ffc8089bd39514ab0d816637986944084f5777599e06e1784fb1170ad31728c13f51cb40cd6e9fc8fa1748c05b7c68cd59aa5ac01c630bbc9a18c0fb1f8451f5c5084d4bc13e32009c833613991f4eda591b"}) (async) ioctl$auto_EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000100)={0xd, 0xba, "ffc8089bd39514ab0d816637986944084f5777599e06e1784fb1170ad31728c13f51cb40cd6e9fc8fa1748c05b7c68cd59aa5ac01c630bbc9a18c0fb1f8451f5c5084d4bc13e32009c833613991f4eda591b"}) socket(0xa, 0x3, 0xff) (async) socket(0xa, 0x3, 0xff) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) (async) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) prctl$auto(0x2747, 0x9, r8, 0x2, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', 0x101800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) 1m57.414794016s ago: executing program 1 (id=1502): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20000000) r0 = bpf$auto(0x0, 0x0, 0x6f4) (async, rerun: 32) r1 = socket(0x2, 0x801, 0x106) (async, rerun: 32) bpf$auto(0x4, 0x0, 0xc) (async) fstat$auto(0x2, 0x0) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) (async, rerun: 64) r2 = socketcall$auto(0xa, 0x0) (async, rerun: 64) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x1ff, r3) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) (rerun: 64) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) (async) fsopen$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0xa, 0x0) (async) r5 = socket(0x29, 0x2, 0x0) setsockopt$auto(r5, 0x95e3, 0x1, 0x0, 0x8001) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, r1, 0xffff) (async, rerun: 64) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x44018) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r2) 1m55.082498416s ago: executing program 1 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_LLC_SDP={0x10, 0x13, 0x0, 0x1, [@typed={0xb, 0x5e, 0x0, 0x0, @str='\\-[-*)\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r0) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40002400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x104, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60fe29dc}, @IPVS_CMD_ATTR_DAEMON={0xdf, 0x3, 0x0, 0x1, [@generic="e40474761af7b5d4a546f5083b8b5cebdb562f7c7929b2ca1a7caf752d282284ca40224b23323895085430a5136f4a92da6e0bf0c79f9e76bd6201fcc39547fcf0621e4cbdccbcc5e46a44549226981d0a9d7505340c24cfeeebcd745689f24f639a9d4e3fabc62211f41f01d9dc0ae90d4d78febd0f5cbaee98d63d290dacceba1a66de65c41582cf0e936f8ca33920763ebfcf30d76b59fd8613be282a1fe91a8bd61352c0c5ab5e383dabf58ffc8f573fdb2fd6a426b6416b7805c11f052565b5f9001d5d8f670c640655372cd647fcd903bd21ebb2aca5e12c"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x98ea}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r2 = timerfd_create$auto_CLOCK_TAI(0xb, 0x80000001) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000340)="e6f169f9c11d6c45bcb9d79f2913940bed306e1f31869f52a033cd12aaaf7b49b0e4c20898a3069c42468149806390ba61553501da355d3f7a0234048107d4c7038a1a0f77626d7b3280c7dd073101c98ba07c654842acd35a573b90045e585ab0be33def0fd42ef30fa96b94853534b6543969293296d6561bb8b94abaf154cb8084e6638d112a709c6251b6c4ce4690d01d197c88863e1", 0x887) madvise$auto(0x4, 0x4, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000440), r2) fstat$auto(r2, &(0x7f0000000480)={0x705, 0xfffffffffffffff8, 0xc3, 0x9, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffff7, 0x0, 0x50a1f40d, 0x9, 0x8b, 0x6, 0x1ff, 0xe47, 0x3}) syz_clone3(&(0x7f0000000700)={0x200000, &(0x7f0000000540)=0xffffffffffffffff, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, {0x39}, &(0x7f0000000600)=""/67, 0x43, &(0x7f0000000680)=""/36, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58) r8 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000780)={@siginfo_0_0={0x0, 0x6, 0x81, @_sigpoll={0x2, r0}}}, 0x80000000, &(0x7f0000000800)={{0x8a9, 0x824}, {0xfffffffffffffffe, 0x7}, 0x2, 0x100000000, 0x1, 0x9, 0x6, 0x710, 0xf795, 0x2, 0xffffffff, 0x8000, 0x8000, 0x80, 0x0, 0x7}) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f0000001600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000008c0)={0xce4, r3, 0x100, 0x70bd2b, 0x8, {}, [@TIPC_NLA_LINK={0x810, 0x4, 0x0, 0x1, [@generic="2530e80eed44cc697ac92e0aace125c222ebd8d955be9fef5744840eaea8e8ad611ba79a2bc7bc95a8d3c60f370b705b78a267103cdc2cce906177363244ac7180c80bad94ff25341ef3184d00a896fa4ef79c0daf7e65a7c91d022b3ea799ebe6cadfcc1f0dda53549b58e290f1955e3bf5f37bd7e4952a359c824e27090416fd67409e71284d830906ab800d", @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@empty}, @nested={0x287, 0xb1, 0x0, 0x1, [@generic="2c005a01510db011104d504b569bf05e65d682eb00d79039fc339aeea265fe6816922a308b24c513dfdc845573b19bf13fac7a34582f04e8a36e28e7fea790d6b80a8626a0230ac997312f05aa867faec07954a23c3911192255b47ec9", @generic="5c31e23aed5fd689f99aac0e4b73e401978c2f2628664757d7b4beb14317b5859443160e85ef86b36a08b386815d942be41a250fe02b158c429c32bf9e4013fafe17813c06596311215c91", @typed={0x14, 0x153, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="9b44b4dcb96804e5e09aa8717da43f7d81d1c7f0e65cdf794edc2d7a77e3fe58fd125fc1939d6dc95faf175a143a73352eeee0f1125c1a95b4b526c9beb249e07a5aafcd63d495acb38f5257e44e94d6685eca41af606104dc0826d5b49c2a5cc7adc41623df2cb38a1c01a01cd97899e2314e3958c051232f8fe47e75d213bb7553b5a1ccecd566c388ac7a6a2b3a00bc116b0cf292439e31d5b570c2d1e69868d7bc2d8875e594c1ef21a31f1bf3ec7c062c9b4e52bdce1b328ce7291b00aac4", @nested={0x4, 0xc7}, @nested={0x4, 0x2a}, @generic="a142115eaa37a2f81f9f51b8496a04874f8e8ac1c708a1efacc91a6c6d72e0085affd12ad39e468d799b67f6c477280ccbf02148bd13116399759a737ca9bf486aee4851592b055a241bfc8fac7c04b33f5e1438ead25ba0bf0d4f3ced622ece4196e25c0686ba3b41dc82df16467a0dad02b6cf5fb801417d870a2d330b9db2aedfcefaf0d0355eb5357ed71c03b5fc5cbe99186a13d81f4f4384a8ac4d15c836d8430aa433d6e0d981a27786dbc958ceb09db2054db4ca64a67343b42f1f0128600ba5d93fb9636ebe46c938f3ed45f03f86c7800f2131ee03c81b925ef7d09498805b9f53b6e28fe20495b1e17dee5a40f7a0c706", @typed={0x8, 0xb9, 0x0, 0x0, @uid=r4}]}, @generic="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", @generic="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", @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@loopback}, @nested={0xfe, 0x8b, 0x0, 0x1, [@generic="43c21057663b2f1775bf352e123502f83f01e93bdd19c87e638578eab00399e0891d7cc9eb93e1c43e3fada02c234db6e192640c563166f382548098824c4326d68f3dabe871482a05cc26f65ddfbcf3064d289cf547089fb5e325e2dfaf32331aca83b18e0316de1af3d8ddd33349e203ac14d70ee0fc497ca5", @generic="e370dec1f72ae9b911fd69307ca2df4f8600968d88e6f63910c87f8d6b2942aa9d69c8d6775513e955cb392ef32e1581bf1b9c0a62745ad2ff34ef1a09049e373ca261bbbc785f8ab7ec16ec33762517ef1a8253b375e4ff0fcc763687ceb6c6e1f30670b19543c62b22099c82749af0407a2cbc", @typed={0x8, 0x12e, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x3c}]}, @nested={0x139, 0x112, 0x0, 0x1, [@nested={0x4, 0x9e}, @generic="3e770d53ed7d8fdec9a3b00fc05ddc439a0c71e1d520a487190eb4578c322c6f01c5c267545d942e7ce6fae674ef6153123859239a56a296958a41039c4963b9d3dfec8c872a25894eecda488d01d69071e353eba2163684fb602d5d2fa0de8aad24b86280b228554d867bc930465fa0e5db80f2e3f5805422f616c6a8925a40c666e549e4f11a18176777f1c91d2c8db08bbca4950bfb7ad5d6", @nested={0x4, 0x140}, @generic="ff3702e3368cc489903b0ab42a45e35072b26c87ad60494b24318480ddc52a82ccd8c0ed12993e0ff7356cbce9ece63e20682861241194ecaba9a23cb7590293a77a74aeef3b12abae0f893498d23bcdd7dbf9113e01eece3a7315f8a0f9bb8c8dcb16ad316335c7a703448d8789738936f1c1f1", @nested={0x4, 0x27}, @generic="e2a4b28ee61dfc5fc864f7a9c3e039391af9ef", @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="02389ddde16e8bf30c3bcfe6cd665475319c8c50aae58170eeba7be9c974357dd6e609c80c571ceedd91c3f23b0efb4d7a1954f5839c99a769625c2c5283a7fd3efa462723fd38f6106119c0ba7325ef52b3a9175bee7628268a317e23e6d319425077c6a76b8581ba24c4c628af14cc1492bc0eaef7d6d30a27bd91a544b8eef51a6a8a7b6214864d485511b42515324f7ea9213fae9f4e2004743beb481d9dac19acea929cce68276f", @typed={0x8, 0xad, 0x0, 0x0, @pid}]}, @TIPC_NLA_MEDIA={0x28d, 0x5, 0x0, 0x1, [@typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@private2}, @generic="a26cf43c95b1a27e0c3f0cfa4da86cc84ec16d9c67f04e0dd2f29635a64acb3ef566ca21d9885e1ffa8b2ec7dcb062ab83e4e4564eb2485e3abeb125007d1ca50671ee6e84e5f31983d7548336b122cf475ea2b163d0cc7db86eaa2f2637b45d49dda590d7bc1df03ee6556d8755efe356770df6ea1842d329f98da9da644dbbd6f1", @generic="8010d8b73a78244cdfecb2304c3c21a0be1aa80c060c6a5c3b17a7bca80436c22b5965a108379c3aef71a283c05dcf556d0c34a8a7efc5110aedeb1db0a0ea083390b593bac15171be2c1292604754", @typed={0x4, 0x2d}, @nested={0x1a0, 0x14f, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xf0}, @nested={0x4, 0xe}, @generic="b7ed1b8482413e041c984995782e50fba02c0a4a9eebc5f981f3953887bac255c233310c6938eb1e0d1bd6183f77abc803d62c199aa1bb240ecc031f97c898cb12bd7280967986c6f02183eb9debc66cea920d99c5cb060f153f715373332384c74bf87c445c44e9e322102e88f52342b4ed99e4aa4a1b222b6728bedbd1babe39ab67dec7c9b52665c91307a98727ff29", @generic="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"]}]}, @TIPC_NLA_PUBL={0x20c, 0x3, 0x0, 0x1, [@nested={0xc, 0x130, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0x131, 0x0, 0x0, @fd=r2}, @nested={0x117, 0x123, 0x0, 0x1, [@generic="64ee73ae8a02271c2d30c7c8556c9c36861a49bfc063fcb09efa2346df5e6a0e1a6399c58e8665a0beb2a20d66459c7cba33a0f1747cb6c8a7cdb910262996bd9e22358793c0aa33b7eb1902da80c47ff67450d695dd", @typed={0x9, 0x30, 0x0, 0x0, @str='IPVS\x00'}, @typed={0x8, 0xd2, 0x0, 0x0, @uid=0xee00}, @generic="0ec1ca31a64ed2128e38e275c106fe649ea27a3d87fba5559fa78bc5f3908d5c2a63e4e07c2301a28aa55ee50d6bd74329fc43616f6fa0b574e8efe1e49b91e0ca0ded45a352af3b22ae34b820f488b9bd735f5914b982d64ac0674f853d7893875d01344c03cbd09a942a28b8f2e0ecb78c8c70cc9b3f6e908c270d4f237c533364565e454f31aa2fb17417596e23b0900acc007f23ca4569493bd2840cf8907d7bd1664a8ec4d1e6"]}, @generic="519a95155f8d6a7abaa290c01641bd4abed18d705a1784ce3621", @nested={0x24, 0xb5, 0x0, 0x1, [@nested={0x4, 0x114}, @typed={0x8, 0x140, 0x0, 0x0, @u32=0x1d7}, @nested={0x4, 0x90}, @typed={0x9, 0x7b, 0x0, 0x0, @str='IPVS\x00'}, @nested={0x4, 0x33}]}, @generic="5cd097ceecc9d5444ffe0f58d3881a07acda7e29fb23508f01c8c7c97b2a5fe380c270ca7e9c5fe8d9b18784b695a1e32b525db3b3c2493c070c051d21f25c9ee8040da3a6fde68daabac97b99aa2298745ba029d85bcf918ebdbf3d758d53974a611056e4ae2466c38ac74dd39b3f3fb635f8026c335d3290ce08c617db12a54e05717072011d1b66eb8ed5be9afb5cf8b49d0d8fa19044e9942e62eb10"]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @pid=r6}, @nested={0x10, 0x104, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x3e}, @nested={0x4, 0xad}]}, @typed={0x8, 0x103, 0x0, 0x0, @pid=r8}]}]}, 0xce4}, 0x1, 0x0, 0x0, 0x800}, 0x20) r10 = prctl$auto_PR_SET_MM_START_CODE(0x8, 0x1, r7, 0x10000, 0x7fffffffffffffff) r11 = pipe2$auto(&(0x7f0000001640)=r10, 0x7) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) r13 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001700), r0) sendmsg$auto_L2TP_CMD_SESSION_GET(r9, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x48, r13, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x8}, @L2TP_ATTR_NONE={0x2c, 0x0, "176325fc0ce195a17e5a1c0d7638eeb9ee745e7a6eb1aa3497edeb71ae7f81de1aadf831a2f6bdef"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001880), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'geneve0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000001c00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2c0, r14, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DATA={0x18, 0x7, "36bf3d5c183a10a64b51d295b86730c665e0f105"}, @NL80211_ATTR_BSS_SELECT={0x274, 0xe3, 0x0, 0x1, [@generic="b722761245", @generic="7dea835e0935c0777bc641949acc453264dd617f9d5d40bc51219c0e68c139a2176eb7936771f72a2e96257d75a014e7de80bd3c3b6c324a83f83444b901db86c025b2349bfe7c1371ab04e9b94edb24999b49418351d485c954de3be8b78f2e9a68bcc50ca560a1ca1866ba2ed5bcd6ff7817a3409fc7e34e798c90655cc86cc78a700bece47ef6b8248cae4a1edf7661cdfd975d7be4049314cb1f8310d7b1670e82", @typed={0x8, 0x16, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x7}, @nested={0x1b7, 0xbb, 0x0, 0x1, [@generic="43b2f2f07888bd3c4189afb247ab614af10108fa5dc8714b6d0a5bb0dfe032fbb8549011609c5bfbf55bf44c42683577ac4fe92c049ae7ed4fa6a733b62f33694a825b8970659a53b3e995bf2080ef5d4997e7ab9fb2f5deeb28ef9248a5aaf8a32d5256da59e9848804515f916643d26f2690e52a9f2388afa81d179531dbbc43d677a8943798baad0863fb568cbd40b68c1d583ba7e92bf66f67c93efa199d923872d1ec279804aee27c38e3186f5155003b372b0134374fcc7ce1af95cb9fda64be15a64248c231ea38647ad9376a0d26aec1a1e01174aa6c9dde2ce5289ffc", @generic="d8360308ac6520b5da9a3f18fd6c0e5bf23dbbbba3c18041096859aeb0c5bfea8f29edada974a0590c0c8b635d7e3f1aefe483d4bcf97a8f7b12e2be", @nested={0x4, 0xb}, @generic="0efd588bd676586c2ee22a8308c04e9a2f12b45e2c447a41694d55320bb1e7b284941f0faba1f66dce828440bb4b384774a3886a8ff8985a266c22e72def60dfba9fef7f25eb92c1194aede54365e8a42d9c1d29e0eae2c2999bf5bc87bb121c5f1a4c0b371f10fdd94f48d4a82dba6a1ec053ea5d158dc8853a5f30a06c5669d130f9a96afc1bbdbe822383911f", @nested={0x4, 0x97}]}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4c880}, 0x4008010) mmap$auto(0x12000, 0x5, 0x5896182a, 0x17, r0, 0x1000) r16 = waitid$auto_P_PID(0x1, r6, &(0x7f0000001c40)={@_si_pad}, 0x7, &(0x7f0000001cc0)={{0x0, 0x1}, {0x5, 0x7}, 0x8, 0x9, 0x1, 0x400, 0x40, 0x1, 0x7, 0x40, 0x39, 0x1, 0x8000000000000000, 0x1, 0x3, 0x7ef5}) r17 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0xe, 0x2, r16, 0x100000001, 0x93) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/cec27\x00', 0x420200, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9bd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x40}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x810) ioctl$auto_SNDCTL_SYNTH_INFO(r17, 0xc08c5102, &(0x7f0000001f00)="9c3059f19a0577382e7571e1f847f97545ca7105dbb28ea9bc3b1e67724fda5b69731085f02277720a89e63503a0532e7092bb3b2137f7226a30d8d79456e0d825d0edfc7ea83c1685ffea33a817e9fc9c9130257cfe607acf3ed39fce20db75a4a3474a60823e07709c21e32bb8134a0b65157ef726fe41f3b6d18b8eb8c8b991f795d9c542d7eac3352a20cfd034e08e28b9f9c464f6e6d2dcf410e11e533d99f7424491b4db676d78b66a9ea8e121cf878479272cc406391fa736debf2afc844ce72683abe5c9546dbb9f0f7a5a8b7d9ad3bf95e844878df141ec1d3dfb818063b04c9c4495d41abef192d70a2a12e4349ce26e9ac0816406272eb0240193bbafba4e5857180df301d94d86a73e3a51b934034431f3b2786ce87d881c87427571113a027f0a759e8c251ffe706e19245fa997957756d6a4b8e1176b8b0700b1a90767bfe98f61053261a0ab5b640234bddf1cfd5e6a83a43c74296dcfc2845ced0eb66faa79324ae17e16c841d7caf20b85bd20dc20f96b215f06eb21e23162be1cbd7d803609aca864fb7c07fedf079ff519294906bd8a09f8fea4e4c89775967bd76f5c719c1e7ded8e3044a79869974c8d6389279e3a08cec6502d492876fa944d63db56f59d657ebe9341e750616469bf0251b15c7151bafab32e7056b7e5f1ca34ccc0b8ff940508d7ea1c75f04e9229ffecc4c0de992385eae46431eacce3455f099ff07808c0b84de55b6a15d85187557f5c1c06b7d5771c38108152d24146098a069da85b6cddca39a9213a256318ed8e4c4e0a3dd1b07aa27a19bb4bd3203894e30e099360b3d81d26516b35b4907fdcc624bf3ae239dbe52901338dae7922749799f8151d6c706745084ecdf3e969fe53366e6848f165a39d403d039075e0974f2b82515663a63e4f53c31dfa3ef574a2a03a847ff9525ddf23b0f59b74c2665f8cbd743da0168ee06528a5bbf7d6d0d640daf11dbbae0cba4c3bb1e2ad10a190973a5bebfa7e6478548e8b788b73621c4aab6ef10d775cfb7947f73d2e01da3c75929b728acbe70efe7e70deb62e2bb39394f4a4e6272b27b56d339324dddb5432389504c12ecc0633b96e460b71230fd9101f3f9f7778e2e0b7fdffd5333a48b18ac156e4f176c38e1b2692d72f4e12938ee947891ac5ba2a85eb72005d8362670dfccfa9bba5b55f4e582d41bbf815481530c211d8dab1e10125840de798e9b925988869e01a207aba6891f3ab15270f05e192a689f8aabb7a5f08f5697373f2c393884761d4bcc29fe79a26ed376ef3e46369c2efad3e00fccb85b92785d6a8d39c252a54b66014e08f1298d22de904c8319daa70d9123c53365c2ba2500220215907e5fd85d7ad57c16f038a319afcb99961d61b6095da12ab49f60ca96cc9f20f696d14753b03183d1067780897c67f8a9a176e947f8395f9484e129fc7d1108282d42bcfc3914dbac1f6ad04798e3b075b54ef77f57c2d4dbcaae6c819ad3f8eded2e15fc8434520bc0127e597b90345bc0a1261cc7b730df0c6a3ef06122893f21e74363aab79171471ec214341013081ba8d1fd79f2c319d8d4a5ae98d51d6e90ff63444c7b952add98c44b5ef70fa0fa4a1f19b724dfcae9b7db2b3cf6a71be5de0321ae4e0dd78f684b6c27e30944403e9dcee780d7308d2bad1457887441742e015ffaa36b15b0495eea995e3b5d501107eb793a18f09340d6ac6e21ae69d0e12b5e1600a4620c529f68670886a4a6d889bc615b0e8364f9ad95c1d4d0ffd08156ab358f80de93e6aaf4aa64d7209bccaf499ebf8b3b2d3cdd794543abc2ab0a54ff9a72951f11f1ee8e0a2c32d3e31e1e61bff423067d1983d9cb3ea2601dab867cb8307a6d92f0c0313c41b309c552edcd8103a834fbedc635b295575d088f220604aeb52c31ff257829b06cc7a19499beca8de0d3cf14d41547cd605f1af869353900e723c0fb05a34f9ac90756187d915fbc4b928e013d4f63fb1c6de011b657fb799e0d3dde98f4642b9b2fbd9229a5d9fcf52ddd579e71dcf7bff3dffa89f3c3cd03bb4c3cbcf195ba94955ef1c91f700d0babe439d7fa7cf2e6c1eb61b31f872fb3382b44a3579ccc4ad8d2606bc705bc0133c89399de9490411b1ac41455d66fc4a0e248609cd4180b7d2ecb5546ab0247dc611c441581d42739d5d722b087a7b0b4c8401b7db5d86d8679a89b88c4cde857c936f210902fbca133cb7b89372c0b133f1023239554d4cfd1c3a4e41de2f519ce6d979cc05d4859eb1cb6ae0f04e4bebc7c67429dab3ef8c3e1c71a4f64434a1d6beb929931e89a1a6e80d2d3a629f03e9f6c6d08f83325ae0277b0f81deca1d23d7c90773888a6257c1501c5a1c81bb4fc5aa8ef9856ed1f163e7e0f3c489a777cdf0a26ed5abd06f105d46d7b7e3c4caf6bd281ffffcb9cb1f803e686d6ec8ff1eb45c6a3192594c246159b1537d944a87526f17ca3e11c0a8b6a4466eaace0066fd04e43d830a6d5920a050393809c03ffb1c19de48149b882fbd6bd9051dc8f5cc81548698f9b202b4fea1617f825bff6dd73cd31874aedb2abeaa0a853f5aeec79af64324e6794f6b189793fe4ba689f691926c46389bd77dce445af700cdcb5f4f87654a541287eea63aeb188f0796241f1a78dd4268a56555d8a4001eb89f5bc96497dda0328e1619cd473553bfbf9f5becc15dba828d040c6f6ac9719b27937abbb6850c1347f3ff1728b8fa2a27eb8e23a424e09134996157dd6b3f97b220d3e46e55f6c311c432cc4688a899ce508ca83a50c51a0afc0624e4f3d5110c4b39ff24f1ac405f72104ddbaa7d795a52ad08faa7f4e026395d1e6a7b5da71f7d9220dea93f2c25286d3d264188b890ad3fbe97395c2d08b7c070a3170d83a75dcb97181c47bd3ac56b8ea78ec9e9970e272a9edb881644f9b4ce5b20c21fdba63d05a8f1ce8fdfd49dbadd8c398a8f68945ea3d04aec36c0c6d9aacf888543723f95a31ef279e135e4ca8e691b87d798a0d03e38370a66f29fcab8b22a5449ee41618d153bb593aedfd1e4f18520707ab84f3cff772aea1a62f853c3c9c3e0c8a157b7d499713b2177cc219dbb74ce60e9c807b3a2476189d12e68c49fd4a3f4f063a942d6abfb148aafa3c932060bdcfb87d4fb941334b6ba7600e75e6752f7e3ab31dcf7ae27383668c4e7ddccd8dcdbbd317ed2d3bc6ff3ef18f8ce554362c636935dfeb5314393799f26ca2352ae76178eaf9aa314061b32c7cdb856a9321b156968a86d8a4e8f785467e20440d07ccb94d2e7663d792dd9fc708ee79df47958bdf728ac789dab074cf06a4a724abe0743b9b27746831b0b65ab8da087944dd2e2ad3da40dd7110012b390c8815f8b1edeb8ba7ba89ea0bed0ac31115358ed266838ea3abf6593004a3a0e2ac2202a147a02c317df5258e956234c74e70a70fc732279c79503b1f6f79f6952b9725a0e9eef7071ef0965d1c4226b86d41de84f125cc6293508c3bd47f8cc35f8c20e6841ebab7c1051ed2fb0c282d161d4409264742d22294e8301ac53a61d07aee3a508ec5e85b234a7a03235830460539891433d911ac7bb871ca71222f540d2856a5a73ef334f929a71e4debd7d442692e56d8572ac6746d261ba6f6787a636db56662f82b3699072736c2979ee5079cfa1bc401347d94ec6098479e9e83a4bfc74ffb2d74ee5d5bb1583aa978ac8046a9db083e6d89fb3c1424dee641d4ec752e50b3fda465ccd47b417203638254cf7a43a2575f440142c484c9995c91f7a838b02f04e2f347334ef200d5ae9d1ff25d3064991a3ec7c0d367690addcdd7b6913cdbe0faf885cdc5cc57f25adc5f908fe2d916851a7d3d4f43bdfa9421e74ee27874a662d1cd5d37b70724c15243a249c7e7da03f2af023d12135e2f24c1a247c91dc9e173d8c46d7c4751787e6a8069b79a25d9aa62901c93dedaa51654a1b9f45e584f3a399eaefe146e7c5e931352fac311feb47d9423e3a17e4c95940ad66e00198a76221bdd34818d7b97f8ae10c325edeaaeba0f9375b49f651cb2b3700208e14cfb6cd3edf0153cf2d4a018190d2fe680892794e5b3b4dcdea393f1cf94c4a27fadebae5881005440d4f69ddbc4db4ac6594eb469b1cfa257708a2178b77228cb36e6eee29b8da8133bd99d340822b9dc6cddf7b80df8b57cd338f06698cb9c0d727088873e2033135702b4d4bc10b631d86995cef105648a60d5117e6b6e70c11f04791a5a06cf0fc9a0b9b575f72842592afd51db67e9c0f364e4f9e9e4195809183d97af56daacafdbd16979f0aa4341aef823d772ec8d0f940b7a48ae9144da40bfbc5eba8737e6f4d992dfc0b0fbafb675632e8ad7cdf88f89a771b57ad2f3d3509f200bce9469e99d212db0d23c1f5e6236927ef36de68632feaf991e391de93412b6dde4d57a463bc7a3eb2a8db8b3de9e5f224490fffd06bdc03c131b79b2cea3339f9ca1210cb24897fbff68e40b01ca0f7778deb432abf44eccf6716f5075eb2c596e875f1d843d4cc8a696502357772a3a1c3bb7eba0dd2f25a7a829c89f5fe2a77161fd19e2db6ed73915f8be84ad56146207ffdc310598a9b51bfeacd4e740f478e6df304f5510b2cdc4d261c8fde3e363510771d979e47aea2b899c79ff62a11686e0e5c2156e830e581fd9fb94f0aa349874566d1e356aeba2c90f74b47bd9cdb8ec9013fe535f33bbb21790037a594ea92f35d74217862392c8fcee3c7a435c3a01aac9518f4bc96d72061062a28e2af3661c21564ef7a25604e3cbde8df3e761c876ffea88c572b89bbdf5c7e181730b2a1bf030260c2a54c74752dca2cd9e932413400180d23ad7991dd6b254b1ec32352be32048a176658b0fd8365b9cf310c752537f1a2ca7a53b6ef3ebafbbbe7b4a028d96363e05a2032401478c572ce0ebcff4adfd15a630cfbeae4314cf8614f5eee977901146d6f1a71715adba65470e9db7f5d0d3600e5aa31696b6e34be96100b8f6d7398e04abb144647b9bf69f3aa4a5e1ac9e4746f9715477e8282de9bfe14c5ae0fa8080c8a86139b533cd9bab293b292eeb9cb40c6ece65b9e0542e8dfe1e7f6cc42042b02b31ea1a39691859e8fb4d394fc88ccdb65eb9a454144f9ee694b335a893d285af9dbfc98d2acacf4775ab46e93ae404fd0793416a70e6f5d3e148892a0a4d095b7a547278c969f003bedff0d707da0b4cba81677a9b9722bdbab1b6fba52eaae9acf6be1346561bc25d10d12aed95c3ed367aa54efad9a70a50f3083855b58e6f71aab9848138c185da317150cbce55d1b26069d0e82cdde28dc4ea10212fe39e61e1d2a170a721b83771738f8a3ae20371169d26891989ba81f6b2d754cf6ec09e32e0156a9af6f53df5cf7ddfee37f3286e9e97c7be7adb71d5074446711f88d1472f699a2b0392bcbb322a00893f4d45b75e173bcd77dc2ed3c2e4078b60e1561f6a22c7336edd533f322a88f2a4892915dd7d9a608a3352dfc8236b521937b5c16abadaf525510c033643f0b3bc81349e69fe159f212c55bb06328c03f389b1837d1f236d8719d234a7bce5bc64995ee4adc121e89fc745d6662479c0c6e98924c4c3b49d31ec0f4a0d80691734bb5c5f84e906bc624d289c087380f2798fcbb47e9ca0c34096e4e9c88af0f1638427632c3c8fbb44c1b5f04daba58315b8be653df8741c402de40e9714e7ca3dca40b693ced3a5d314d88022e9f5153aca49cca38037507bdd39ac235a7c803e52bc3deeae90b4ad848b7423c51fd302394ab4c") sendmsg$auto_HSR_C_GET_NODE_LIST(r11, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IF2_SEQ={0x6}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}, @HSR_A_IFINDEX={0x8, 0x2, r15}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x24) fsopen$auto(&(0x7f0000003000)='nl80211\x00', 0xffff7fff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000003040), 0x484000, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000003080), 0x200240, 0x0) 1m50.149755873s ago: executing program 1 (id=1527): mmap$auto(0x2000000, 0x400008, 0xe5, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000340)={@_si_pad}) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x1d, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto(0x3, 0x0, 0x7fffffff) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000000)=0x3) timer_delete$auto(0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m34.232333065s ago: executing program 32 (id=1527): mmap$auto(0x2000000, 0x400008, 0xe5, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000340)={@_si_pad}) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x1d, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto(0x3, 0x0, 0x7fffffff) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000000)=0x3) timer_delete$auto(0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.476100199s ago: executing program 4 (id=1902): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttye2\x00', 0x200000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, r1) mmap$auto(0x7f, 0xb9f, 0xdf, 0x59, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ppoll$auto(0x0, 0x4007f, 0x0, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa167d20b4ec6fcbd}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="08000100cc000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x7f, 0x5, "f5ffc24a6ce7b375f9376214e9ae943261ce78477223eaabe9a79669184ab4a3692b05d82492c78e23a469fa2331a08a80aaff4ff999d13c599bacb8da5f673f7c8362a41444bbcd1967122321b45d7660c38236c4e07496a908b0b079ae4759132ddefd218d8028dd89b2be8a57f94c8a20b75f2c2c06a72e3861"}]}, 0x94}, 0x1, 0x0, 0x0, 0xdb2e880d897d3034}, 0x90) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 7.085171153s ago: executing program 4 (id=1913): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x1, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, [{0x4, 0x2, 0xffffffffffffffff}]}) 5.220097642s ago: executing program 4 (id=1909): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) r0 = getpid() ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x49b3, 0xb2f7, "0200020000000000007e76a9222ce1", '\x00', '\x00', '\x00', ["f5404de9641f0000000081c1", "70d9a9a3af9f39d000000001"]}) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x00\x01\x00\x00\x00\x00\x00_\x9e\x99:R\xcc\x98\b\'\x02\xb0\x92l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x10, 0xfffffffe, 0x6, 0x7fff, 0xa, 0xffffffffffffffff, [0x0, 0x40, 0x20000], {0x6, 0x10001, 0x7, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000008}, {0xfff7fffd, 0x3407, 0x52, 0x5, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.975541486s ago: executing program 4 (id=1911): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0xf000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0x80000000, "26c788a7a5"}, 0x8000, 0x7fff, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 3.714366627s ago: executing program 2 (id=1914): bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x5, 0x21ea, 0x7fff, 0x83, 0x9, 0x7, 0x202e, 0x5, 0x101}, 0x6f4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/acache/hard_limit\x00', 0x311880, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x3, 0x9) write$auto(r1, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)="e7696e58", 0x4) write$auto(r2, &(0x7f00000001c0)='k\x00\x00\x00\xef\x00'/15, 0x1084) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/macsec0/promote_secondaries\x00', 0x40000, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x100000001) ioctl$auto(0x3, 0xff07, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) futex$auto(&(0x7f00000002c0)=0x3, 0x5, 0xfff2, 0x0, &(0x7f0000000340)=0x7, 0xffffffff) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/smaps\x00', 0x2000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000200)="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", 0x132) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, r5, 0x28000) open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) 3.079055434s ago: executing program 0 (id=1920): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) timer_create$auto(0x1, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b41, 0x7) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto_XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000300)={0x8000000000000000, 0xfffffffffffffff7, 0xf, 0xe}) ioctl$auto(r1, 0xb21064a6, 0x20000a) r2 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) bind$auto(r2, &(0x7f00000000c0)=@generic={0x27, "deb107dcf8a65262c772ebea9563"}, 0x6a) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000500), 0x28440, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, &(0x7f0000000540)={0x5}) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') lseek$auto(0x3, 0x2, 0x4) socket(0xa, 0x5, 0x84) close_range$auto(0x2, 0xa, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x5) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40, 0x0) writev$auto(r6, &(0x7f0000000240)={0x0, 0x7}, 0x3) setuid$auto(0xe) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r5) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000227bd7000fddbdf256900000006001200cb1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000140}, 0xc815) 2.987997893s ago: executing program 4 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, 0x0, 0xa041) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, 0x0, 0x20000800) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/200, 0xc8) poll$auto(0x0, 0x8, 0x1) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000c00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100df25050000004600090100000000", @ANYRES32=0x0, @ANYBLOB="0400038004000980"], 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10) mkdir$auto(&(0x7f0000001580)='macsec\x00', 0x9) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x4) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x8000) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r3 = gettid() setpgid$auto(r3, 0xe83) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40090) 2.916327676s ago: executing program 3 (id=1922): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) epoll_create$auto(0x3e) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r1, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.71621311s ago: executing program 0 (id=1923): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0xffffffff}, 0x56) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000980), 0x1000, 0x0) pread64$auto(r0, &(0x7f0000002b80)='nl80211\x00', 0x1, 0x1) (async) pread64$auto(r0, &(0x7f0000002b80)='nl80211\x00', 0x1, 0x1) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x22000, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x40}, 0x0, 0x0, 0x8) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = epoll_create$auto(0x3e) socket(0x0, 0x3, 0x14) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x22a200, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x22a200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, "74e706e8dbb339960b8b1930cd1693e3d0b68564ee2e24e1289330cf7231"}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0x440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(r3, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) fanotify_mark$auto(r1, 0x5, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') (async) fanotify_mark$auto(r1, 0x5, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) (async) r4 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000140)="d50cb67a8dacc9f8b490b74c5d76a8aa124b16f1c0254a08cbcce6deb4d41493e93fbfd4ab2c9f234a4a3c03a3eef03b98332b25e6ff793a865610d384e73d67c06aa25ab5e9488771bc7ce77aa05c810c4152ab2f6fd0dd0b14780bbc6f0439627a4688cf96547ec66ae4f88ecc59904ae66d91089e9217870988a1a904c605a840257542c940baf21e3e142fb6e8a22ed002a732807ea42f3aadd0b84adacf446e7ba63ae6dabfb7ce65c183c6e7233f9426b684bc9a3a97684d95eb92d7cfc22364", 0x0) (async) io_uring_register$auto_IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000140)="d50cb67a8dacc9f8b490b74c5d76a8aa124b16f1c0254a08cbcce6deb4d41493e93fbfd4ab2c9f234a4a3c03a3eef03b98332b25e6ff793a865610d384e73d67c06aa25ab5e9488771bc7ce77aa05c810c4152ab2f6fd0dd0b14780bbc6f0439627a4688cf96547ec66ae4f88ecc59904ae66d91089e9217870988a1a904c605a840257542c940baf21e3e142fb6e8a22ed002a732807ea42f3aadd0b84adacf446e7ba63ae6dabfb7ce65c183c6e7233f9426b684bc9a3a97684d95eb92d7cfc22364", 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/252:0/min_ratio_fine\x00', 0xc0082, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/252:0/min_ratio_fine\x00', 0xc0082, 0x0) sendfile$auto(r5, r5, 0x0, 0xef3) 2.651472309s ago: executing program 4 (id=1924): prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) r0 = prctl$auto_PR_SET_SECCOMP(0x16, 0xee14, 0x3e9900000000000, 0x61, 0x100000000) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r0, 0xc0844123, &(0x7f0000000340)={0x40000103, @status={0xa, 0x0, 0x3, 0x5, 0xfffffffa, 0x92, 0x7, 0x8001}, @control={0x6, 0x8}}) clock_nanosleep$auto(0x6, 0x7fff, &(0x7f00000000c0)={0x4, 0x5}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r2 = socket(0x11, 0x2, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r1, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x8) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) io_uring_setup$auto(0x6, 0x0) 2.651229641s ago: executing program 3 (id=1925): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000021, 0x400, 0x718c1257}]}) ioctl$auto_TIOCSWINSZ2(r1, 0x4b44, &(0x7f0000000380)) socket(0x10, 0x2, 0x0) r4 = waitid$auto_P_ALL(0x0, 0x7ad, &(0x7f0000000100)={@_si_pad}, 0x9e0, &(0x7f0000000300)={{0xb3f4, 0x733df2e4000000}, {0x6, 0x8}, 0x1, 0x40, 0xfffffffffffffff8, 0x3, 0x3ff, 0x7fff, 0x0, 0x8, 0x7, 0x8, 0x8, 0x5, 0x4}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000840)={{@inferred=r4, 0x6, 0x4, 0x772, "0120f720fe3c459779fc17cc84546e0a0bc737f8aa080d075fdc3e3a2e26c486ae26734e2307969d83579b8e", @inferred=0xffffffffffffffff}, 0x1, @integer64=@value=[0x5, 0x0, 0x9, 0x894, 0x6, 0xe, 0x8d, 0x7, 0x7fffffff, 0x10002, 0x5, 0x6, 0x9, 0x74ad, 0x10, 0x5, 0xee, 0x2e, 0x7, 0xd688, 0xffc0000000, 0xe6b, 0x8, 0x6, 0x970, 0x2, 0x6, 0x97d, 0x2, 0x2, 0x100, 0x5a, 0x5, 0xb, 0x6, 0x6, 0x1, 0x6690, 0xa, 0x4, 0x80, 0x73275aa4, 0x5, 0x40, 0x2e40, 0x8000000000000001, 0x3, 0x4f, 0x9, 0x0, 0x80, 0xfffffffffffffffa, 0x9, 0x7, 0x81, 0xe, 0x80000001, 0x5, 0x3ff, 0x40, 0x7, 0x10000, 0x9, 0x7], "aaadb300e35d02bfa2c7ce67c89cc6293e032e0ae8d897de42e27ae81bc13c0bde65155fcb604227319450178ce67001bc8aae8edb6ac3b89ebf6e179024544a777aeb784a8ca64e0650545bf6624e7ad51b8343c16219c32cea47f9b0815f2deb843d92fc0d7b112aa2cb1585252d20d025c8553e780d039f6f1773d79d00a4"}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.474682828s ago: executing program 2 (id=1926): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video5\x00', 0xc0000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/devices\x00', 0x40140, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(r0, 0xc0205649, r0) 2.304798335s ago: executing program 0 (id=1927): write$auto(0x3, 0x0, 0xfdef) 2.302605147s ago: executing program 3 (id=1928): keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r2, 0x0, 0x20008000) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x920x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000380)={0x2c, r11, 0x929, 0x70bd28, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r12}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x400}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4054) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'syzkaller1\x00'}, @BATADV_ATTR_TT_TTVN={0x5}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0xfffffffa}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004844}, 0x24000001) r13 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r14 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000400), r5) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r10, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r14, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x92d1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) ioctl$auto_dma_heap_fops_dma_heap(r13, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40086200, 0x38) 1.641143993s ago: executing program 2 (id=1932): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) fcntl$auto(r0, 0x10, 0x2) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$auto(r0, 0x8, 0x1) (async) socket(0x15, 0x5, 0x0) (async) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) (async) fcntl$auto(r0, 0x10, 0x2) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) (async) 1.601763833s ago: executing program 3 (id=1933): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x9, 0x400008, 0x3, 0x9b70, 0xffffffffffffffff, 0x100000000) (async) sysfs$auto(0x2, 0x49, 0x0) (async) r0 = fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x2e, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 32) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x80) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptyr8/uevent\x00', 0x98080, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x361800, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x2b) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0xb, 0x202000b, 0x3, 0xeb9, r3, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x16, 0x2, 0x1000000000000008) (async, rerun: 64) rename$auto(0x0, 0x0) (async, rerun: 32) madvise$auto(0x20000000000, 0x1, 0x4) (rerun: 32) getcpu$auto(0x0, &(0x7f00000000c0)=0x6, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000040)=@hci={0x1f, 0x4}, 0xffff) getsockopt$auto_SO_REUSEADDR(r0, 0x7, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) 926.230207ms ago: executing program 2 (id=1934): open(0x0, 0x22240, 0x155) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x28044004) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) (async, rerun: 32) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) r3 = open(&(0x7f0000000340)='./file0\x00', 0x22240, 0x10) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r4 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) ppoll$auto(&(0x7f0000000040)={r4, 0x7ff}, 0x7, 0x0, 0x0, 0x8) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub3/status\x00', 0x40280, 0x0) pread64$auto(r5, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) (async) socket(0xa, 0x2, 0x0) (async, rerun: 32) pidfd_open$auto(0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async, rerun: 64) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) (async, rerun: 64) uname$auto(&(0x7f0000000180)={"ad84726f530323e52242c6a93688db926cbfc1df52329ce084257b9e88f3763fb54838f1f32351e3de4dd4d19cea9a1e55f92c76b8e5978d75f9c58a45d8c81aba", "04986eda295453432af666835d32fbc12209644003d240001d1b33e1b356e48cc9f32f6f6892796a7f54c8f602e987294f980934ebbb1d75bfd4978b3f61a500", "382bf3fe479186b41938be067ef57648446f01772f5396103529adfb49d37dd17d6d185aefe183b0c681f7c034ad1c4f6173d92f2dcb73c09afeb346dca00217dc", "c0d3b0a967eef631a8130db3027d9d90680cdaae7b014c340b219e3df22244da8c5970a188bbb4ba9d3eae86fd611f522462665398b71ca368a0d910e404cf64a7", "7eaaa11f4a5f991d3d554d459ab70f3fc9947e3348afcbe228be5279d2ac905668cb3cf3504c577c3e4bc62e06777689462f3ccd49455b84526f04d5ad5fa2667a", "0740565cd2129083d9584fa321770915e771bb111720f212c38bafbec6d9d6e89f0bdd0718eb627debedadebfb69443684364970e41228e894c17c7bcb955761ae"}) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 912.827468ms ago: executing program 0 (id=1935): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x3, &(0x7f0000000080)={[0x461, 0x9, 0x8, 0x7, 0x1, 0xfffffffffffffff8, 0x8, 0x9, 0xcddf, 0x0, 0x8, 0xecc1, 0x7f, 0x1, 0x8, 0x3d]}, &(0x7f0000000100)={[0x4, 0x0, 0x2, 0x80000000, 0x483be68b, 0x0, 0x5, 0x6, 0x5, 0x21, 0x9, 0x7, 0x9, 0xc1, 0x2, 0x2]}, &(0x7f0000000240)={[0x1000, 0xa50, 0x3, 0x4, 0x49, 0x7, 0xffffffffffffff6b, 0x100000000, 0x80000001, 0x4000, 0x9, 0x3, 0x2f8, 0x7, 0x5, 0xe]}, &(0x7f0000000340)={0x3, 0x3}) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 456.394785ms ago: executing program 3 (id=1936): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) pwrite64$auto(0xc8, 0x0, 0xe, 0x103) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) writev$auto(r3, 0x0, 0x8) umount2$auto(0x0, 0x4) 454.235171ms ago: executing program 2 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x800, 0x800084) mmap$auto(0x2, 0x0, 0x5, 0x15, r0, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]}) select$auto(0x6, 0x0, &(0x7f0000000080)={[0x80000001, 0x100000001, 0x9, 0xffffffffffffffff, 0x9, 0x7, 0x2000000004816, 0x5, 0x7, 0x9, 0x2, 0x8, 0x5, 0x10000, 0x5, 0x2]}, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r6 = socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x83) accept4$auto(r6, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa507}, 0x800}, 0x7, 0x8) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) 0s ago: executing program 3 (id=1938): r0 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=@bpf_attr_1={0xffffffffffffffff, 0x8, @next_key=0x1, 0x5}, 0x0) read$auto(r0, &(0x7f0000000100)='@/\x00', 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/mpls/conf/erspan0/input\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): 000000101 [ 377.988121][T11950] RAX: ffffffffffffffda RBX: 00007f483de15fa0 RCX: 00007f483db9c819 [ 377.988132][T11950] RDX: 000000000014fa02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 377.988143][T11950] RBP: 00007f483dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 377.988154][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.988164][T11950] R13: 00007f483de16038 R14: 00007f483de15fa0 R15: 00007fffe33ebf08 [ 377.988187][T11950] [ 379.712361][T11982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 379.879630][T10787] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 380.581594][T12007] FAULT_INJECTION: forcing a failure. [ 380.581594][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 380.698051][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.2.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.698085][T12007] Tainted: [L]=SOFTLOCKUP [ 380.698092][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.698103][T12007] Call Trace: [ 380.698109][T12007] [ 380.698117][T12007] dump_stack_lvl+0x100/0x190 [ 380.698151][T12007] should_fail_ex.cold+0x5/0xa [ 380.698182][T12007] should_failslab+0xc2/0x120 [ 380.698204][T12007] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 380.698234][T12007] ? __d_alloc+0x34/0xa80 [ 380.698256][T12007] ? lockdep_init_map_type+0x5c/0x250 [ 380.698287][T12007] __d_alloc+0x34/0xa80 [ 380.698311][T12007] d_alloc_pseudo+0x1c/0xc0 [ 380.698339][T12007] alloc_file_pseudo+0xcf/0x230 [ 380.698365][T12007] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 380.698390][T12007] ? alloc_fd+0x476/0x790 [ 380.698413][T12007] sock_alloc_file+0x50/0x210 [ 380.698435][T12007] __sys_socket+0x1c0/0x260 [ 380.698458][T12007] ? exc_page_fault+0x6f/0xd0 [ 380.698477][T12007] ? __pfx___sys_socket+0x10/0x10 [ 380.698504][T12007] ? do_user_addr_fault+0x8d6/0x12f0 [ 380.698524][T12007] __x64_sys_socket+0x72/0xb0 [ 380.698549][T12007] ? lockdep_hardirqs_on+0x78/0x100 [ 380.698570][T12007] do_syscall_64+0x106/0xf80 [ 380.698589][T12007] ? clear_bhb_loop+0x40/0x90 [ 380.698611][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.698630][T12007] RIP: 0033:0x7f483db9e087 [ 380.698647][T12007] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.698665][T12007] RSP: 002b:00007f483ea43f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 380.698683][T12007] RAX: ffffffffffffffda RBX: 00007f483de16090 RCX: 00007f483db9e087 [ 380.698695][T12007] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 380.698705][T12007] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 380.698716][T12007] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 380.698726][T12007] R13: 00007f483de16128 R14: 00007f483de16090 R15: 00007fffe33ebf08 [ 380.698748][T12007] [ 381.212434][T12015] hub 1-0:1.0: USB hub found [ 381.281946][T12015] hub 1-0:1.0: 1 port detected [ 381.650563][T12029] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1322'. [ 381.900537][T10787] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.098236][ T30] audit: type=1804 audit(4295022551.280:20): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1323" name="/newroot/314/file0" dev="tmpfs" ino=1673 res=1 errno=0 [ 382.592682][T12043] binder: 12041:12043 ioctl c00c620f 2000000001c0 returned -22 [ 383.981017][T10787] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.481174][T12107] can: request_module (can-proto-5) failed. [ 384.593154][T12110] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1333'. [ 385.856290][T12139] block2mtd: error: cannot open device çinX [ 386.001883][T12141] futex_wake_op: syz.3.1337 tries to shift op by -2048; fix this program [ 386.111015][T12141] futex_wake_op: syz.3.1337 tries to shift op by -2048; fix this program [ 386.572702][T12151] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.971617][T12151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.209477][T12151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.490293][T12151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.790299][T12151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.227237][T12202] cgroup: fork rejected by pids controller in /syz1 [ 390.179924][T12264] can: request_module (can-proto-5) failed. [ 392.949220][T12403] bridge0: port 4(bond0) entered blocking state [ 393.003780][T12403] bridge0: port 4(bond0) entered disabled state [ 393.079828][T12403] bond0: entered allmulticast mode [ 393.084997][T12403] bond_slave_0: entered allmulticast mode [ 393.168127][T12403] bond0: entered promiscuous mode [ 393.193338][T12403] bond_slave_0: entered promiscuous mode [ 393.245395][T12403] bridge0: port 4(bond0) entered blocking state [ 393.251896][T12403] bridge0: port 4(bond0) entered forwarding state [ 395.099994][T12444] program syz.1.1369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.180168][T12444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 395.251647][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 395.280361][T12448] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1370'. [ 396.263504][T12488] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1379'. [ 396.791811][T12498] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 396.836422][T12498] vhci_hcd vhci_hcd.1: invalid port number 14 [ 396.878320][T12498] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 397.756758][T12522] netlink: 'syz.0.1387': attribute type 19 has an invalid length. [ 397.801912][T12522] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1387'. [ 397.999341][T10786] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 399.400714][T12553] random: crng reseeded on system resumption [ 399.452964][T12556] futex_wake_op: syz.0.1396 tries to shift op by -1; fix this program [ 399.637115][T12551] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[12551] [ 400.097205][T12552] FAULT_INJECTION: forcing a failure. [ 400.097205][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 400.379396][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.1.1388 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.379429][T12552] Tainted: [L]=SOFTLOCKUP [ 400.379436][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.379446][T12552] Call Trace: [ 400.379453][T12552] [ 400.379461][T12552] dump_stack_lvl+0x100/0x190 [ 400.379493][T12552] should_fail_ex.cold+0x5/0xa [ 400.379516][T12552] should_failslab+0xc2/0x120 [ 400.379538][T12552] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 400.379558][T12552] ? kstrdup_const+0x63/0x80 [ 400.379581][T12552] kstrdup+0x51/0xe0 [ 400.379599][T12552] kstrdup_const+0x63/0x80 [ 400.379617][T12552] alloc_vfsmnt+0xe5/0x6a0 [ 400.379643][T12552] clone_mnt+0x4b/0x930 [ 400.379670][T12552] ? _raw_spin_unlock+0x28/0x50 [ 400.379702][T12552] lock_mount_exact+0x187/0x7e0 [ 400.379725][T12552] vfs_open_tree+0xb83/0x14d0 [ 400.379752][T12552] ? __pfx_vfs_open_tree+0x10/0x10 [ 400.379772][T12552] ? alloc_fd+0x476/0x790 [ 400.379793][T12552] ? do_raw_spin_unlock+0x145/0x1e0 [ 400.379824][T12552] ? alloc_fd+0x476/0x790 [ 400.379849][T12552] ? __x64_sys_open_tree+0xa3/0x150 [ 400.379872][T12552] __x64_sys_open_tree+0xa3/0x150 [ 400.379896][T12552] do_syscall_64+0x106/0xf80 [ 400.379916][T12552] ? clear_bhb_loop+0x40/0x90 [ 400.379938][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.379965][T12552] RIP: 0033:0x7f3e65b9c819 [ 400.379983][T12552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.380000][T12552] RSP: 002b:00007f3e639f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 400.380019][T12552] RAX: ffffffffffffffda RBX: 00007f3e65e16270 RCX: 00007f3e65b9c819 [ 400.380030][T12552] RDX: 0000000000000002 RSI: 0000200000001100 RDI: ffffffffffffff9c [ 400.380041][T12552] RBP: 00007f3e65c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 400.380053][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.380063][T12552] R13: 00007f3e65e16308 R14: 00007f3e65e16270 R15: 00007fffc6fb30d8 [ 400.380087][T12552] [ 401.329689][T12568] zswap: compressor not available [ 401.416287][T12580] Invalid ELF header magic: != ELF [ 401.841085][T12566] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1397'. [ 403.963554][T12600] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1403'. [ 404.123600][T12604] netlink: 'syz.1.1405': attribute type 33 has an invalid length. [ 404.581628][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 404.622066][T12619] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 405.104776][T12622] binder: BINDER_SET_CONTEXT_MGR already set [ 405.139729][T12622] binder: 12621:12622 ioctl 4018620d 2000000027c0 returned -16 [ 405.219506][T12628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.392836][T12628] FAULT_INJECTION: forcing a failure. [ 405.392836][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 405.568984][T12628] CPU: 0 UID: 0 PID: 12628 Comm: syz.0.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.569018][T12628] Tainted: [L]=SOFTLOCKUP [ 405.569024][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.569035][T12628] Call Trace: [ 405.569041][T12628] [ 405.569054][T12628] dump_stack_lvl+0x100/0x190 [ 405.569089][T12628] should_fail_ex.cold+0x5/0xa [ 405.569112][T12628] should_failslab+0xc2/0x120 [ 405.569134][T12628] __kmalloc_cache_noprof+0x7a/0x6f0 [ 405.569160][T12628] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 405.569188][T12628] nfc_genl_rcv_nl_event+0xc1/0x300 [ 405.569214][T12628] notifier_call_chain+0x99/0x420 [ 405.569244][T12628] blocking_notifier_call_chain+0x69/0xa0 [ 405.569273][T12628] netlink_release+0x166a/0x1ff0 [ 405.569298][T12628] ? netlink_release+0x1d8/0x1ff0 [ 405.569319][T12628] ? __pfx_netlink_release+0x10/0x10 [ 405.569341][T12628] ? __pfx_locks_remove_file+0x10/0x10 [ 405.569367][T12628] __sock_release+0xb3/0x260 [ 405.569386][T12628] ? __pfx_sock_close+0x10/0x10 [ 405.569404][T12628] sock_close+0x1c/0x30 [ 405.569422][T12628] __fput+0x3ff/0xb40 [ 405.569452][T12628] task_work_run+0x150/0x240 [ 405.569481][T12628] ? __pfx_task_work_run+0x10/0x10 [ 405.569515][T12628] exit_to_user_mode_loop+0x100/0x4a0 [ 405.569543][T12628] do_syscall_64+0x668/0xf80 [ 405.569563][T12628] ? clear_bhb_loop+0x40/0x90 [ 405.569592][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.569611][T12628] RIP: 0033:0x7f57ce39c819 [ 405.569628][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.569645][T12628] RSP: 002b:00007f57cf319028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 405.569664][T12628] RAX: 0000000000000000 RBX: 00007f57ce615fa0 RCX: 00007f57ce39c819 [ 405.569676][T12628] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 405.569686][T12628] RBP: 00007f57ce432c91 R08: 0000000000000000 R09: 0000000000000000 [ 405.569697][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.569708][T12628] R13: 00007f57ce616038 R14: 00007f57ce615fa0 R15: 00007ffc6b569d98 [ 405.569732][T12628] [ 406.015444][ T30] audit: type=1800 audit(4295022574.750:21): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1408" name="dbroot" dev="configfs" ino=42380 res=0 errno=0 [ 406.198431][T12633] random: crng reseeded on system resumption [ 408.357493][T12662] FAULT_INJECTION: forcing a failure. [ 408.357493][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 408.438168][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.2.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.438199][T12662] Tainted: [L]=SOFTLOCKUP [ 408.438206][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.438216][T12662] Call Trace: [ 408.438223][T12662] [ 408.438230][T12662] dump_stack_lvl+0x100/0x190 [ 408.438265][T12662] should_fail_ex.cold+0x5/0xa [ 408.438288][T12662] should_failslab+0xc2/0x120 [ 408.438310][T12662] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 408.438340][T12662] ? security_inode_alloc+0x3b/0x2c0 [ 408.438362][T12662] ? lockdep_init_map_type+0x5c/0x250 [ 408.438390][T12662] security_inode_alloc+0x3b/0x2c0 [ 408.438413][T12662] inode_init_always_gfp+0xced/0x1040 [ 408.438436][T12662] alloc_inode+0x8e/0x250 [ 408.438462][T12662] new_inode+0x22/0x1c0 [ 408.438489][T12662] rpc_new_file+0xa9/0x420 [ 408.438517][T12662] ? rpc_pipe_poll+0x30/0x180 [ 408.438543][T12662] rpc_fill_super+0x386/0x4f0 [ 408.438572][T12662] ? __pfx_rpc_fill_super+0x10/0x10 [ 408.438599][T12662] get_tree_keyed+0x10e/0x1d0 [ 408.438618][T12662] vfs_get_tree+0x92/0x320 [ 408.438646][T12662] vfs_cmd_create+0xd7/0x2a0 [ 408.438672][T12662] __do_sys_fsconfig+0x55a/0xcb0 [ 408.438699][T12662] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 408.438736][T12662] do_syscall_64+0x106/0xf80 [ 408.438755][T12662] ? clear_bhb_loop+0x40/0x90 [ 408.438778][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.438797][T12662] RIP: 0033:0x7f483db9c819 [ 408.438813][T12662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.438840][T12662] RSP: 002b:00007f483ea45028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 408.438859][T12662] RAX: ffffffffffffffda RBX: 00007f483de16090 RCX: 00007f483db9c819 [ 408.438871][T12662] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 408.438881][T12662] RBP: 00007f483dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 408.438893][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.438903][T12662] R13: 00007f483de16128 R14: 00007f483de16090 R15: 00007fffe33ebf08 [ 408.438927][T12662] [ 410.941706][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'. [ 411.560927][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 411.575664][T12718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'. [ 411.901580][T12716] NFSD: Failed to start, no listeners configured. [ 412.734224][T12740] ecryptfs_miscdev_write: Error while inspecting packet size [ 414.213981][T12782] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1443'. [ 414.538427][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1446'. [ 414.656204][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.716638][T12793] bridge_slave_1 (unregistering): left allmulticast mode [ 414.771485][T12793] bridge_slave_1 (unregistering): left promiscuous mode [ 414.793106][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.912057][T10786] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 415.912087][T10786] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 416.216615][T12833] ICMPv6: process `syz.2.1453' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 417.863979][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1468'. [ 418.389255][T11939] bond0: left allmulticast mode [ 418.394415][T11939] bond_slave_0: left allmulticast mode [ 418.429333][T11939] bond0: left promiscuous mode [ 418.459127][T11939] bond_slave_0: left promiscuous mode [ 418.476582][T11939] bridge0: port 4(bond0) entered disabled state [ 418.519472][T12906] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 418.545878][T11939] batadv0: left allmulticast mode [ 418.560798][T11939] batadv0: left promiscuous mode [ 418.580798][T11939] bridge0: port 3(batadv0) entered disabled state [ 418.589588][T12906] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 418.631966][T11939] bridge_slave_1: left allmulticast mode [ 418.660686][T11939] bridge_slave_1: left promiscuous mode [ 418.666978][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.694795][T12906] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 418.769885][T11939] bridge_slave_0: left allmulticast mode [ 418.785277][T11939] bridge_slave_0: left promiscuous mode [ 418.812755][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.053123][T10787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.074375][T10787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.082654][T10787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.092741][T10787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.101238][T10787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.317354][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.350823][T11939] bond0 (unregistering): Released all slaves [ 420.203220][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 420.262456][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 420.338069][T12915] chnl_net:caif_netlink_parms(): no params data found [ 420.563930][T11939] hsr_slave_0: left promiscuous mode [ 420.603237][T11939] hsr_slave_1: left promiscuous mode [ 420.624734][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.651180][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.682469][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.707613][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.766974][T11939] veth1_macvtap: left promiscuous mode [ 420.791560][T11939] veth0_macvtap: left promiscuous mode [ 420.812631][T11939] veth1_vlan: left promiscuous mode [ 420.843706][T11939] veth0_vlan: left promiscuous mode [ 421.180219][T10787] Bluetooth: hci3: command tx timeout [ 421.191173][T10787] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 421.198889][T10787] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 421.508024][T11939] team0 (unregistering): Port device team_slave_1 removed [ 421.583203][T11939] team0 (unregistering): Port device team_slave_0 removed [ 421.843591][T12952] Process accounting resumed [ 422.223177][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.239888][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.272334][T12915] bridge_slave_0: entered allmulticast mode [ 422.288704][T12915] bridge_slave_0: entered promiscuous mode [ 422.413888][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.439217][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.459618][T12915] bridge_slave_1: entered allmulticast mode [ 422.480800][T12915] bridge_slave_1: entered promiscuous mode [ 422.641959][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.696385][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.850048][T12915] team0: Port device team_slave_0 added [ 422.869531][T12915] team0: Port device team_slave_1 added [ 422.970926][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.978027][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.079784][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.120721][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.148108][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.239330][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.263710][T10786] Bluetooth: hci3: command tx timeout [ 423.480226][T12915] hsr_slave_0: entered promiscuous mode [ 423.510579][T12915] hsr_slave_1: entered promiscuous mode [ 423.774514][T12990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'. [ 424.881312][T13006] vivid-007: ================= START STATUS ================= [ 424.935762][T13006] vivid-007: Generate PTS: true [ 424.985593][T13006] vivid-007: Generate SCR: true [ 425.006431][T13006] tpg source WxH: 320x240 (Y'CbCr) [ 425.053632][T13006] tpg field: 1 [ 425.109109][T13006] tpg crop: (0,0)/320x240 [ 425.144762][T13006] tpg compose: (0,0)/320x240 [ 425.172315][T13006] tpg colorspace: 8 [ 425.208965][T13006] tpg transfer function: 0/0 [ 425.228900][T12915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.240955][T13006] tpg Y'CbCr encoding: 0/0 [ 425.282869][T13006] tpg quantization: 0/0 [ 425.309157][T13006] tpg RGB range: 0/2 [ 425.332926][T13006] vivid-007: ================== END STATUS ================== [ 425.344614][T10786] Bluetooth: hci3: command tx timeout [ 425.369601][T12915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.400858][T12915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.453247][T12915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.938583][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.021681][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.164538][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.171737][T11940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.216040][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.223565][T11940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.540477][T12915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.216082][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.341053][T13045] vivid-007: ================= START STATUS ================= [ 427.410179][T13045] vivid-007: Generate PTS: true [ 427.420631][T10786] Bluetooth: hci3: command tx timeout [ 427.459989][T12915] veth0_vlan: entered promiscuous mode [ 427.469028][T13045] vivid-007: Generate SCR: true [ 427.496038][T13045] tpg source WxH: 320x240 (Y'CbCr) [ 427.506261][T12915] veth1_vlan: entered promiscuous mode [ 427.554668][T13045] tpg field: 1 [ 427.575719][T12915] veth0_macvtap: entered promiscuous mode [ 427.592666][T13045] tpg crop: (0,0)/320x240 [ 427.618288][T12915] veth1_macvtap: entered promiscuous mode [ 427.655907][T13045] tpg compose: (0,0)/320x240 [ 427.693841][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.734173][T13045] tpg colorspace: 8 [ 427.854967][T13045] tpg transfer function: 0/0 [ 427.909601][T13045] tpg Y'CbCr encoding: 0/0 [ 427.923131][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.940785][T13056] FAULT_INJECTION: forcing a failure. [ 427.940785][T13056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.959379][T13045] tpg quantization: 0/0 [ 427.963662][T13045] tpg RGB range: 0/2 [ 427.999910][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.1.1497 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.999941][T13056] Tainted: [L]=SOFTLOCKUP [ 427.999948][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.999959][T13056] Call Trace: [ 427.999966][T13056] [ 427.999973][T13056] dump_stack_lvl+0x100/0x190 [ 428.000007][T13056] should_fail_ex.cold+0x5/0xa [ 428.000025][T13056] ? prepare_alloc_pages+0x16d/0x5f0 [ 428.000051][T13056] should_fail_alloc_page+0xeb/0x140 [ 428.000074][T13056] prepare_alloc_pages+0x1f0/0x5f0 [ 428.000100][T13056] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 428.000132][T13056] ? __pfx_stack_trace_save+0x10/0x10 [ 428.000153][T13056] ? stack_depot_save_flags+0x27/0x9d0 [ 428.000179][T13056] ? kasan_save_stack+0x3f/0x50 [ 428.000195][T13056] ? kasan_save_stack+0x30/0x50 [ 428.000211][T13056] ? kasan_save_track+0x14/0x30 [ 428.000230][T13056] ? kasan_save_stack+0x3f/0x50 [ 428.000249][T13056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.000283][T13056] ? __lock_acquire+0x4a5/0x2630 [ 428.000313][T13056] ? lock_acquire+0x1cf/0x380 [ 428.000338][T13056] ? find_held_lock+0x2b/0x80 [ 428.000355][T13056] ? page_table_check_set+0x49a/0xa10 [ 428.000374][T13056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.000396][T13056] ? policy_nodemask+0xed/0x4f0 [ 428.000419][T13056] alloc_pages_mpol+0x1fb/0x550 [ 428.000441][T13056] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 428.000468][T13056] folio_alloc_mpol_noprof+0x36/0x340 [ 428.000503][T13056] vma_alloc_folio_noprof+0xed/0x1d0 [ 428.000528][T13056] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 428.000559][T13056] do_anonymous_page+0xb3a/0x1fb0 [ 428.000595][T13056] __handle_mm_fault+0x1d48/0x2b60 [ 428.000628][T13056] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.000656][T13056] ? pte_offset_map_lock+0x174/0x320 [ 428.000677][T13056] ? find_held_lock+0x2b/0x80 [ 428.000703][T13056] ? follow_page_pte+0x5b3/0x1400 [ 428.000729][T13056] handle_mm_fault+0x36d/0xa20 [ 428.000760][T13056] __get_user_pages+0xf9c/0x34d0 [ 428.000790][T13056] ? __pfx___get_user_pages+0x10/0x10 [ 428.000818][T13056] populate_vma_page_range+0x267/0x3f0 [ 428.000844][T13056] ? __pfx_populate_vma_page_range+0x10/0x10 [ 428.000867][T13056] ? __pfx_find_vma_intersection+0x10/0x10 [ 428.000889][T13056] ? do_mmap+0x93f/0x12f0 [ 428.000913][T13056] __mm_populate+0x107/0x3a0 [ 428.000937][T13056] ? __pfx___mm_populate+0x10/0x10 [ 428.000962][T13056] ? up_write+0x290/0x4f0 [ 428.000991][T13056] vm_mmap_pgoff+0x37f/0x470 [ 428.001016][T13056] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 428.001040][T13056] ? do_futex+0x192/0x350 [ 428.001065][T13056] ? __pfx_do_futex+0x10/0x10 [ 428.001088][T13056] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.001117][T13056] ksys_mmap_pgoff+0xe1/0x650 [ 428.001138][T13056] ? __x64_sys_futex+0x34f/0x4d0 [ 428.001162][T13056] ? __x64_sys_futex+0x358/0x4d0 [ 428.001187][T13056] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 428.001208][T13056] ? xfd_validate_state+0x129/0x190 [ 428.001240][T13056] __x64_sys_mmap+0x125/0x190 [ 428.001270][T13056] do_syscall_64+0x106/0xf80 [ 428.001289][T13056] ? clear_bhb_loop+0x40/0x90 [ 428.001312][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.001331][T13056] RIP: 0033:0x7f3e65b9c819 [ 428.001348][T13056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.001366][T13056] RSP: 002b:00007f3e669ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 428.001384][T13056] RAX: ffffffffffffffda RBX: 00007f3e65e15fa0 RCX: 00007f3e65b9c819 [ 428.001396][T13056] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 428.001406][T13056] RBP: 00007f3e65c32c91 R08: 0000000000000002 R09: 0000000000008000 [ 428.001417][T13056] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 428.001428][T13056] R13: 00007f3e65e16038 R14: 00007f3e65e15fa0 R15: 00007fffc6fb30d8 [ 428.001451][T13056] [ 428.834637][T13045] vivid-007: ================== END STATUS ================== [ 429.671494][T10711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.686617][T10711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.784097][T10711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.803732][T10711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.209030][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.218966][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.403281][T11939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.432054][T11939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.663754][T13079] FAULT_INJECTION: forcing a failure. [ 430.663754][T13079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 430.964955][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.1.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.964988][T13079] Tainted: [L]=SOFTLOCKUP [ 430.964994][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.965005][T13079] Call Trace: [ 430.965011][T13079] [ 430.965018][T13079] dump_stack_lvl+0x100/0x190 [ 430.965054][T13079] should_fail_ex.cold+0x5/0xa [ 430.965076][T13079] get_futex_key+0x1d2/0x1620 [ 430.965112][T13079] ? __pfx_get_futex_key+0x10/0x10 [ 430.965136][T13079] ? page_table_check_set+0x4a9/0xa10 [ 430.965162][T13079] futex_wait_setup+0x83/0x510 [ 430.965198][T13079] __futex_wait+0x19f/0x300 [ 430.965229][T13079] ? __pfx___futex_wait+0x10/0x10 [ 430.965263][T13079] ? __pfx_futex_wake_mark+0x10/0x10 [ 430.965296][T13079] ? futex_hash+0x2c5/0x380 [ 430.965325][T13079] futex_wait+0xed/0x380 [ 430.965355][T13079] ? __pfx_futex_wait+0x10/0x10 [ 430.965389][T13079] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.965417][T13079] ? __pfx_css_rstat_updated+0x10/0x10 [ 430.965443][T13079] do_futex+0x1ef/0x350 [ 430.965469][T13079] ? __pfx_do_futex+0x10/0x10 [ 430.965493][T13079] ? find_held_lock+0x2b/0x80 [ 430.965512][T13079] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 430.965535][T13079] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 430.965559][T13079] __x64_sys_futex+0x34f/0x4d0 [ 430.965587][T13079] ? exc_page_fault+0x6f/0xd0 [ 430.965606][T13079] ? __pfx___x64_sys_futex+0x10/0x10 [ 430.965640][T13079] do_syscall_64+0x106/0xf80 [ 430.965660][T13079] ? clear_bhb_loop+0x40/0x90 [ 430.965682][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.965708][T13079] RIP: 0033:0x7f3e65b9c819 [ 430.965725][T13079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.965743][T13079] RSP: 002b:00007f3e63df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 430.965761][T13079] RAX: ffffffffffffffda RBX: 00007f3e65e16278 RCX: 00007f3e65b9c819 [ 430.965773][T13079] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e65e16278 [ 430.965784][T13079] RBP: 00007f3e65e16270 R08: 0000000000000000 R09: 0000000000000000 [ 430.965795][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.965805][T13079] R13: 00007f3e65e16308 R14: 00007fffc6fb2ff0 R15: 00007fffc6fb30d8 [ 430.965828][T13079] [ 432.980913][T13282] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 434.212688][ T30] audit: type=1800 audit(4295022603.400:22): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1518" name="lu_gp_id" dev="configfs" ino=45574 res=0 errno=0 [ 435.272448][T13322] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 435.455670][T13323] FAULT_INJECTION: forcing a failure. [ 435.455670][T13323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.631075][T13323] CPU: 0 UID: 0 PID: 13323 Comm: syz.0.1521 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.631108][T13323] Tainted: [L]=SOFTLOCKUP [ 435.631115][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.631126][T13323] Call Trace: [ 435.631133][T13323] [ 435.631140][T13323] dump_stack_lvl+0x100/0x190 [ 435.631173][T13323] should_fail_ex.cold+0x5/0xa [ 435.631196][T13323] _copy_from_user+0x2e/0xd0 [ 435.631222][T13323] copy_mount_options+0x76/0x190 [ 435.631250][T13323] __x64_sys_mount+0x1ab/0x310 [ 435.631274][T13323] ? __pfx___x64_sys_mount+0x10/0x10 [ 435.631304][T13323] do_syscall_64+0x106/0xf80 [ 435.631331][T13323] ? clear_bhb_loop+0x40/0x90 [ 435.631353][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.631373][T13323] RIP: 0033:0x7f57ce39c819 [ 435.631389][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.631408][T13323] RSP: 002b:00007f57cf2f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 435.631427][T13323] RAX: ffffffffffffffda RBX: 00007f57ce616090 RCX: 00007f57ce39c819 [ 435.631439][T13323] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 435.631450][T13323] RBP: 00007f57ce432c91 R08: 0000200000000280 R09: 0000000000000000 [ 435.631461][T13323] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 435.631472][T13323] R13: 00007f57ce616128 R14: 00007f57ce616090 R15: 00007ffc6b569d98 [ 435.631495][T13323] [ 436.614672][T13336] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 437.029113][ T30] audit: type=1800 audit(4295022606.210:23): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1526" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 438.378654][T13364] FAULT_INJECTION: forcing a failure. [ 438.378654][T13364] name failslab, interval 1, probability 0, space 0, times 0 [ 438.423220][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.2.1529 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.423254][T13364] Tainted: [L]=SOFTLOCKUP [ 438.423261][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.423272][T13364] Call Trace: [ 438.423286][T13364] [ 438.423294][T13364] dump_stack_lvl+0x100/0x190 [ 438.423329][T13364] should_fail_ex.cold+0x5/0xa [ 438.423351][T13364] ? __list_lru_init+0xd9/0x4b0 [ 438.423378][T13364] should_failslab+0xc2/0x120 [ 438.423400][T13364] __kmalloc_noprof+0xe0/0x850 [ 438.423429][T13364] ? lockdep_init_map_type+0x5c/0x250 [ 438.423459][T13364] __list_lru_init+0xd9/0x4b0 [ 438.423489][T13364] alloc_super+0x926/0xd20 [ 438.423520][T13364] ? __pfx_proc_fill_super+0x10/0x10 [ 438.423540][T13364] sget_fc+0x117/0xc70 [ 438.423569][T13364] ? __pfx_set_anon_super_fc+0x10/0x10 [ 438.423599][T13364] ? __pfx_proc_fill_super+0x10/0x10 [ 438.423617][T13364] get_tree_nodev+0x28/0x190 [ 438.423636][T13364] vfs_get_tree+0x92/0x320 [ 438.423663][T13364] vfs_cmd_create+0xd7/0x2a0 [ 438.423692][T13364] __do_sys_fsconfig+0x55a/0xcb0 [ 438.423720][T13364] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 438.423763][T13364] do_syscall_64+0x106/0xf80 [ 438.423784][T13364] ? clear_bhb_loop+0x40/0x90 [ 438.423807][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.423826][T13364] RIP: 0033:0x7f6ec839c819 [ 438.423842][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.423861][T13364] RSP: 002b:00007f6ec91a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 438.423879][T13364] RAX: ffffffffffffffda RBX: 00007f6ec8615fa0 RCX: 00007f6ec839c819 [ 438.423891][T13364] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 438.423901][T13364] RBP: 00007f6ec8432c91 R08: 0000000000000000 R09: 0000000000000000 [ 438.423912][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.423922][T13364] R13: 00007f6ec8616038 R14: 00007f6ec8615fa0 R15: 00007ffd2b9e1558 [ 438.423945][T13364] [ 438.992539][T13369] __vm_enough_memory: pid: 13369, comm: syz.2.1529, bytes: 4398046511104 not enough memory for the allocation [ 440.305944][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.313556][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.676733][ T30] audit: type=1800 audit(2147483652.600:24): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1546" name="features" dev="configfs" ino=46227 res=0 errno=0 [ 450.182144][T13475] vivid-007: ================= START STATUS ================= [ 450.209207][T13475] vivid-007: Generate PTS: true [ 450.214227][T13475] vivid-007: Generate SCR: true [ 450.239318][T13475] tpg source WxH: 320x240 (Y'CbCr) [ 450.259281][T13475] tpg field: 1 [ 450.262689][T13475] tpg crop: (0,0)/320x240 [ 450.279276][T13475] tpg compose: (0,0)/320x240 [ 450.283929][T13475] tpg colorspace: 8 [ 450.287759][T13475] tpg transfer function: 0/0 [ 450.304402][T13475] tpg Y'CbCr encoding: 0/0 [ 450.314556][T13475] tpg quantization: 0/0 [ 450.324659][T13475] tpg RGB range: 0/2 [ 450.334770][T13475] vivid-007: ================== END STATUS ================== [ 450.881834][T13482] FAULT_INJECTION: forcing a failure. [ 450.881834][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 450.909189][T13482] CPU: 0 UID: 0 PID: 13482 Comm: syz.2.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.909227][T13482] Tainted: [L]=SOFTLOCKUP [ 450.909233][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.909245][T13482] Call Trace: [ 450.909252][T13482] [ 450.909261][T13482] dump_stack_lvl+0x100/0x190 [ 450.909294][T13482] should_fail_ex.cold+0x5/0xa [ 450.909318][T13482] should_failslab+0xc2/0x120 [ 450.909342][T13482] __kmalloc_cache_noprof+0x7a/0x6f0 [ 450.909369][T13482] ? resv_map_alloc+0x46/0x400 [ 450.909391][T13482] resv_map_alloc+0x46/0x400 [ 450.909409][T13482] hugetlbfs_get_inode+0x2fe/0x750 [ 450.909435][T13482] hugetlb_file_setup+0x15b/0x5b0 [ 450.909460][T13482] ksys_mmap_pgoff+0x232/0x650 [ 450.909489][T13482] ? __x64_sys_futex+0x358/0x4d0 [ 450.909515][T13482] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 450.909536][T13482] ? xfd_validate_state+0x129/0x190 [ 450.909569][T13482] __x64_sys_mmap+0x125/0x190 [ 450.909600][T13482] do_syscall_64+0x106/0xf80 [ 450.909620][T13482] ? clear_bhb_loop+0x40/0x90 [ 450.909643][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.909662][T13482] RIP: 0033:0x7f6ec839c819 [ 450.909678][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.909695][T13482] RSP: 002b:00007f6ec91a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 450.909714][T13482] RAX: ffffffffffffffda RBX: 00007f6ec8615fa0 RCX: 00007f6ec839c819 [ 450.909725][T13482] RDX: ffffffffffffffff RSI: 0000000000000002 RDI: 0000000000000000 [ 450.909736][T13482] RBP: 00007f6ec8432c91 R08: 0000000000000602 R09: 0000300000000000 [ 450.909747][T13482] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 450.909759][T13482] R13: 00007f6ec8616038 R14: 00007f6ec8615fa0 R15: 00007ffd2b9e1558 [ 450.909782][T13482] [ 452.083692][T13368] Process accounting paused [ 452.682669][T13082] syz.1.1502 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 452.826585][T13082] CPU: 0 UID: 0 PID: 13082 Comm: syz.1.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.826618][T13082] Tainted: [L]=SOFTLOCKUP [ 452.826624][T13082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.826636][T13082] Call Trace: [ 452.826643][T13082] [ 452.826650][T13082] dump_stack_lvl+0x100/0x190 [ 452.826684][T13082] dump_header+0xfb/0x606 [ 452.826705][T13082] oom_kill_process.cold+0xd/0x330 [ 452.826728][T13082] out_of_memory+0x340/0x14f0 [ 452.826762][T13082] ? __pfx_out_of_memory+0x10/0x10 [ 452.826799][T13082] mem_cgroup_out_of_memory+0xc6/0x130 [ 452.826827][T13082] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 452.826854][T13082] ? find_held_lock+0x2b/0x80 [ 452.826888][T13082] ? do_raw_spin_unlock+0x145/0x1e0 [ 452.826919][T13082] ? _raw_spin_unlock+0x28/0x50 [ 452.826951][T13082] try_charge_memcg+0x652/0xc90 [ 452.826977][T13082] ? __pfx_try_charge_memcg+0x10/0x10 [ 452.826999][T13082] ? find_held_lock+0x2b/0x80 [ 452.827017][T13082] ? rcu_read_unlock+0x17/0x60 [ 452.827038][T13082] ? rcu_read_unlock+0x17/0x60 [ 452.827067][T13082] charge_memcg+0xa6/0x280 [ 452.827089][T13082] __mem_cgroup_charge+0x2b/0x1e0 [ 452.827115][T13082] shmem_alloc_and_add_folio+0x451/0xd40 [ 452.827152][T13082] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 452.827184][T13082] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 452.827220][T13082] shmem_get_folio_gfp+0x6ab/0x1900 [ 452.827263][T13082] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 452.827295][T13082] ? filemap_map_pages+0xe4c/0x2010 [ 452.827329][T13082] shmem_fault+0x1f9/0xa20 [ 452.827360][T13082] ? __pfx_shmem_fault+0x10/0x10 [ 452.827395][T13082] ? __pfx_filemap_map_pages+0x10/0x10 [ 452.827431][T13082] __do_fault+0x10d/0x550 [ 452.827453][T13082] do_fault+0xabb/0x18e0 [ 452.827480][T13082] __handle_mm_fault+0x1815/0x2b60 [ 452.827512][T13082] ? reacquire_held_locks+0xce/0x1e0 [ 452.827539][T13082] ? __pfx___handle_mm_fault+0x10/0x10 [ 452.827570][T13082] ? lock_vma_under_rcu+0x17c/0x590 [ 452.827610][T13082] handle_mm_fault+0x36d/0xa20 [ 452.827641][T13082] do_user_addr_fault+0x5a3/0x12f0 [ 452.827667][T13082] exc_page_fault+0x6f/0xd0 [ 452.827688][T13082] asm_exc_page_fault+0x26/0x30 [ 452.827707][T13082] RIP: 0033:0x3d9f000 [ 452.827723][T13082] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.827742][T13082] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 452.827757][T13082] RAX: 0000000000000000 RBX: 00007f3e65e16180 RCX: 00007f3e65b9c819 [ 452.827769][T13082] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b48 [ 452.827780][T13082] RBP: 00007f3e65c32c91 R08: 0000000000000005 R09: 0000000000000000 [ 452.827791][T13082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.827801][T13082] R13: 00007f3e65e16218 R14: 00007f3e65e16180 R15: 00007fffc6fb30d8 [ 452.827825][T13082] [ 452.827832][T13082] memory: usage 307200kB, limit 307200kB, failcnt 37078 [ 453.873072][T13505] futex_wake_op: syz.2.1556 tries to shift op by -2048; fix this program [ 454.055441][T10787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.065364][T10787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.075140][T10787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.083849][T10787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.092679][T10787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 455.510460][T13507] chnl_net:caif_netlink_parms(): no params data found [ 456.139342][T10787] Bluetooth: hci4: command tx timeout [ 456.233235][T13542] ksmbd: Unknown IPC event: 11, ignore. [ 456.329119][T13082] memory+swap: usage 166756kB, limit 9007199254740988kB, failcnt 0 [ 456.510704][T13082] kmem: usage 2492kB, limit 9007199254740988kB, failcnt 0 [ 456.583864][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.601407][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.615877][T13507] bridge_slave_0: entered allmulticast mode [ 456.632705][T13507] bridge_slave_0: entered promiscuous mode [ 456.687801][T13082] Memory cgroup stats for /syz1: [ 456.688065][T13082] cache 117035008 [ 456.742958][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.755833][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.771513][T13507] bridge_slave_1: entered allmulticast mode [ 456.789782][T13096] syz.1.1502 (13096) used greatest stack depth: 19656 bytes left [ 456.799268][T13507] bridge_slave_1: entered promiscuous mode [ 456.856722][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.885411][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.897985][T13540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 456.959465][T13507] team0: Port device team_slave_0 added [ 456.977739][T13507] team0: Port device team_slave_1 added [ 456.992813][T13540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 457.009362][T13540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.026413][T13540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.032530][T13082] rss 36864 [ 457.035652][T13082] rss_huge 0 [ 457.046705][T13540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 457.058977][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.076436][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.137441][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.160258][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.167257][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.209092][T13082] shmem 117035008 [ 457.212777][T13082] mapped_file 43622400 [ 457.237389][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.284735][T13540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 457.305392][T13540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 457.356848][T13540] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 457.373790][T13082] dirty 0 [ 457.422210][T13082] writeback 0 [ 457.425542][T13082] workingset_refault_anon 3909 [ 457.473339][T13540] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 457.510676][T13082] workingset_refault_file 2731 [ 457.561647][T13095] syz.1.1502 (13095) used greatest stack depth: 19272 bytes left [ 457.616624][T13082] swap 147456 [ 457.624976][T13507] hsr_slave_0: entered promiscuous mode [ 457.657021][T13082] swapcached 210169856 [ 457.662207][T13507] hsr_slave_1: entered promiscuous mode [ 457.668495][T13507] debugfs: 'hsr0' already exists in 'hsr' [ 457.727504][T13082] pgpgin 502564 [ 457.741664][T13507] Cannot create hsr debugfs directory [ 457.749177][T13082] pgpgout 477057 [ 457.797319][T13082] pgfault 348386 [ 457.830231][T13082] pgmajfault 652 [ 457.859104][T13082] inactive_anon 112275456 [ 457.889141][T13082] active_anon 5013504 [ 457.915313][T13082] inactive_file 0 [ 457.931977][T13082] active_file 0 [ 457.953287][T13082] unevictable 0 [ 457.956810][T13082] hierarchical_memory_limit 314572800 [ 457.997418][T13082] hierarchical_memsw_limit 9223372036854771712 [ 458.041115][T13082] total_cache 117035008 [ 458.065420][T13082] total_rss 36864 [ 458.083963][T13082] total_rss_huge 0 [ 458.087767][T13082] total_shmem 117035008 [ 458.116297][T13082] total_mapped_file 43622400 [ 458.140802][T13082] total_dirty 0 [ 458.163158][T13082] total_writeback 0 [ 458.180938][T13082] total_workingset_refault_anon 3909 [ 458.214899][T13082] total_workingset_refault_file 2731 [ 458.240766][T13082] total_swap 147456 [ 458.244623][T13082] total_swapcached 210169856 [ 458.277314][T13082] total_pgpgin 502564 [ 458.307736][T13082] total_pgpgout 477057 [ 458.329093][T13082] total_pgfault 348386 [ 458.359108][T13082] total_pgmajfault 652 [ 458.383569][T13082] total_inactive_anon 112275456 [ 458.415436][T13082] total_active_anon 5013504 [ 458.451162][T13082] total_inactive_file 0 [ 458.470318][T10787] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.490129][T13082] total_active_file 0 [ 458.494273][T13082] total_unevictable 0 [ 458.498260][T13082] anon_cost 0 [ 458.556220][T13082] file_cost 0 [ 458.586551][T13082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1502,pid=13107,uid=0 [ 458.675580][T13082] Memory cgroup out of memory: OOM victim 13107 (syz.1.1502) is already exiting. Skip killing the task [ 459.005114][T13507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.020376][T10787] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.026453][T10787] Bluetooth: hci1: command 0x0c1a tx timeout [ 459.099156][T10787] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.186090][T13507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.194641][T13568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.248329][T13507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.306214][T13507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 459.341826][T10787] Bluetooth: hci4: command 0x040f tx timeout [ 459.942649][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.121899][T10711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.400386][T10711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.468097][T13588] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1572'. [ 460.494419][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.653028][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.660224][T11939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.773090][T10711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.882561][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.889763][T11939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.913762][T13592] netlink: Failed to add  helper -22 [ 461.045647][T10711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.181069][T10787] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.193729][T13507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.424049][T10787] Bluetooth: hci4: command 0x040f tx timeout [ 461.554489][T10711] bridge_slave_1: left allmulticast mode [ 461.604147][T10711] bridge_slave_1: left promiscuous mode [ 461.640471][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.717358][T10711] bridge_slave_0: left allmulticast mode [ 461.758115][T10711] bridge_slave_0: left promiscuous mode [ 461.785542][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.760973][T10711] bond0 (unregistering): Released all slaves [ 463.265377][T10786] Bluetooth: hci3: command 0x0c1a tx timeout [ 463.431765][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.500858][T10786] Bluetooth: hci4: command 0x040f tx timeout [ 464.570236][T10711] hsr_slave_0: left promiscuous mode [ 464.598764][T10711] hsr_slave_1: left promiscuous mode [ 464.647627][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.680119][T10711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.721784][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.754835][T10711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.807894][T10711] veth1_macvtap: left promiscuous mode [ 464.835808][T10711] veth0_macvtap: left promiscuous mode [ 464.866916][T10711] veth1_vlan: left promiscuous mode [ 464.894453][T10711] veth0_vlan: left promiscuous mode [ 465.012865][T10786] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 465.012893][T10786] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 465.030355][T10786] Bluetooth: hci0: Dropping invalid advertising data [ 465.037093][T10786] Bluetooth: hci0: Dropping invalid advertising data [ 465.044777][T10786] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 465.044806][T10786] Bluetooth: hci0: unknown advertising packet type: 0xa5 [ 465.052886][T10786] Bluetooth: hci0: Dropping invalid advertising data [ 465.068316][T10786] Bluetooth: hci0: Malformed LE Event: 0x02 [ 465.458705][T10711] team0 (unregistering): Port device team_slave_1 removed [ 465.493941][T10711] team0 (unregistering): Port device team_slave_0 removed [ 465.580445][T10786] Bluetooth: hci4: command 0x040f tx timeout [ 465.705457][T13670] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1581'. [ 465.983652][T13507] veth0_vlan: entered promiscuous mode [ 466.016477][T13507] veth1_vlan: entered promiscuous mode [ 466.252232][T13507] veth0_macvtap: entered promiscuous mode [ 466.298153][T13507] veth1_macvtap: entered promiscuous mode [ 466.373256][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.408166][T13681] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1583'. [ 466.448219][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.533631][T11936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.592005][T11936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.668875][T11936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.743497][T11936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.026628][T11936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.072918][T11936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.209214][T11936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.257688][T11936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.597947][T13718] FAULT_INJECTION: forcing a failure. [ 467.597947][T13718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 467.662240][T10786] Bluetooth: hci4: command 0x040f tx timeout [ 467.698423][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.4.1552 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.698457][T13718] Tainted: [L]=SOFTLOCKUP [ 467.698463][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.698474][T13718] Call Trace: [ 467.698481][T13718] [ 467.698488][T13718] dump_stack_lvl+0x100/0x190 [ 467.698523][T13718] should_fail_ex.cold+0x5/0xa [ 467.698545][T13718] get_futex_key+0x1d2/0x1620 [ 467.698572][T13718] ? __pfx_get_futex_key+0x10/0x10 [ 467.698603][T13718] futex_wait_setup+0x83/0x510 [ 467.698639][T13718] __futex_wait+0x19f/0x300 [ 467.698671][T13718] ? __pfx___futex_wait+0x10/0x10 [ 467.698705][T13718] ? __pfx_futex_wake_mark+0x10/0x10 [ 467.698737][T13718] ? futex_hash+0x2c5/0x380 [ 467.698767][T13718] futex_wait+0xed/0x380 [ 467.698797][T13718] ? __pfx_futex_wait+0x10/0x10 [ 467.698825][T13718] ? __pfx_kernel_waitid+0x10/0x10 [ 467.698860][T13718] ? ksm_add_vmas+0x292/0x3a0 [ 467.698889][T13718] do_futex+0x1ef/0x350 [ 467.698915][T13718] ? __pfx_do_futex+0x10/0x10 [ 467.698939][T13718] ? __pfx___do_sys_waitid+0x10/0x10 [ 467.698966][T13718] ? __do_sys_prctl+0x1282/0x2330 [ 467.698995][T13718] ? rcu_is_watching+0x12/0xc0 [ 467.699032][T13718] __x64_sys_futex+0x34f/0x4d0 [ 467.699062][T13718] ? __pfx___x64_sys_futex+0x10/0x10 [ 467.699096][T13718] do_syscall_64+0x106/0xf80 [ 467.699116][T13718] ? clear_bhb_loop+0x40/0x90 [ 467.699139][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.699159][T13718] RIP: 0033:0x7f0cbd79c819 [ 467.699174][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.699193][T13718] RSP: 002b:00007f0cbe6640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 467.699212][T13718] RAX: ffffffffffffffda RBX: 00007f0cbda15fa8 RCX: 00007f0cbd79c819 [ 467.699223][T13718] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0cbda15fa8 [ 467.699234][T13718] RBP: 00007f0cbda15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 467.699245][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.699256][T13718] R13: 00007f0cbda16038 R14: 00007ffc6d21d9e0 R15: 00007ffc6d21dac8 [ 467.699279][T13718] [ 468.148752][T13731] program syz.0.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.355632][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 469.410182][T13773] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1596'. [ 470.163247][T13797] vivid-000: ================= START STATUS ================= [ 470.201549][T13797] vivid-000: Test Pattern: 75% Colorbar [ 470.262446][T13797] vivid-000: Fill Percentage of Frame: 100 [ 470.268396][T13797] vivid-000: Horizontal Movement: No Movement [ 470.328609][T13797] vivid-000: Vertical Movement: No Movement [ 470.368429][T13797] vivid-000: OSD Text Mode: All [ 470.411981][T13797] vivid-000: Show Border: false [ 470.475284][T13797] vivid-000: Show Square: false [ 470.511609][T13797] vivid-000: Sensor Flipped Horizontally: false [ 470.559264][T13797] vivid-000: Sensor Flipped Vertically: false [ 470.581185][T13797] vivid-000: Insert SAV Code in Image: false [ 470.615453][T13797] vivid-000: Insert EAV Code in Image: false [ 470.651333][T13797] vivid-000: Insert Video Guard Band: false [ 470.689168][T13797] vivid-000: Reduced Framerate: false [ 470.723645][T13797] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 470.770082][T13797] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 470.778098][T13797] vivid-000: Enable Capture Cropping: true [ 470.862238][T13797] vivid-000: Enable Capture Composing: true [ 470.893251][T13797] vivid-000: Enable Capture Scaler: true [ 470.919326][T13797] vivid-000: Timestamp Source: End of Frame [ 470.963876][T13797] vivid-000: Colorspace: SMPTE 170M [ 470.994077][T13797] vivid-000: Transfer Function: Default [ 471.012199][T13797] vivid-000: Y'CbCr Encoding: Default [ 471.054937][T13797] vivid-000: HSV Encoding: Hue 0-179 [ 471.082660][T13797] vivid-000: Quantization: Default [ 471.087857][T13797] vivid-000: Apply Alpha To Red Only: false [ 471.141120][T13797] vivid-000: Standard Aspect Ratio: 4x3 [ 471.193528][T13797] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 471.234280][T13797] vivid-000: DV Timings: 640x480p59 inactive [ 471.274712][T13797] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 471.330818][T13797] vivid-000: Maximum EDID Blocks: 2 [ 471.336091][T13797] vivid-000: Limited RGB Range (16-235): false [ 471.407449][T13797] vivid-000: Rx RGB Quantization Range: Automatic [ 471.458968][T13797] vivid-000: Power Present: 0x00000001 [ 471.489187][T13797] tpg source WxH: 720x576 (Y'CbCr) [ 471.494391][T13797] tpg field: 4 [ 471.538476][T13797] tpg crop: (0,0)/720x576 [ 471.558586][T13797] tpg compose: (0,0)/720x576 [ 471.612410][T13797] tpg colorspace: 1 [ 471.616460][T13797] tpg transfer function: 0/2 [ 471.677469][T13797] tpg Y'CbCr encoding: 0/1 [ 471.704733][T13797] tpg quantization: 0/2 [ 471.740606][T13797] tpg RGB range: 0/2 [ 471.744602][T13797] vivid-000: ================== END STATUS ================== [ 471.778613][T13834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'. [ 472.833358][T13858] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1611'. [ 473.046748][ T30] audit: type=1804 audit(2147483676.970:25): pid=13861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1612" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3158 res=1 errno=0 [ 476.289464][T13924] futex_wake_op: syz.2.1625 tries to shift op by -2048; fix this program [ 476.349373][T13924] futex_wake_op: syz.2.1625 tries to shift op by -2048; fix this program [ 476.458798][T13930] random: crng reseeded on system resumption [ 476.773616][T13921] binder: 13920:13921 ioctl c00c620f 2000000001c0 returned -22 [ 476.906693][T13941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 477.274040][T13950] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1632'. [ 479.596437][T14023] random: crng reseeded on system resumption [ 479.640981][T10786] Bluetooth: hci0: ACL packet too small [ 479.735479][T14025] Unrecognized hibernate image header format! [ 479.797773][T14025] PM: hibernation: Image mismatch: architecture specific data [ 479.918446][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 481.472945][T14073] bridge0: port 3(bond0) entered blocking state [ 481.564630][T14073] bridge0: port 3(bond0) entered disabled state [ 481.654515][T14073] bond0: entered allmulticast mode [ 481.737267][T14073] bond0: entered promiscuous mode [ 483.165963][T14118] FAULT_INJECTION: forcing a failure. [ 483.165963][T14118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 483.279602][T14118] CPU: 0 UID: 8 PID: 14118 Comm: syz.0.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.279635][T14118] Tainted: [L]=SOFTLOCKUP [ 483.279642][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.279652][T14118] Call Trace: [ 483.279659][T14118] [ 483.279666][T14118] dump_stack_lvl+0x100/0x190 [ 483.279700][T14118] should_fail_ex.cold+0x5/0xa [ 483.279720][T14118] ? prepare_alloc_pages+0x16d/0x5f0 [ 483.279745][T14118] should_fail_alloc_page+0xeb/0x140 [ 483.279771][T14118] prepare_alloc_pages+0x1f0/0x5f0 [ 483.279794][T14118] ? rcu_is_watching+0x12/0xc0 [ 483.279828][T14118] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 483.279859][T14118] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 483.279890][T14118] ? __lock_acquire+0x4a5/0x2630 [ 483.279926][T14118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 483.279956][T14118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 483.279986][T14118] ? find_held_lock+0x2b/0x80 [ 483.280007][T14118] ? bpf_ksym_find+0x124/0x1c0 [ 483.280032][T14118] ? look_up_lock_class+0x55/0x120 [ 483.280062][T14118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 483.280084][T14118] ? policy_nodemask+0xed/0x4f0 [ 483.280107][T14118] alloc_pages_mpol+0x1fb/0x550 [ 483.280140][T14118] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 483.280162][T14118] ? do_raw_spin_lock+0x128/0x260 [ 483.280190][T14118] ? find_held_lock+0x2b/0x80 [ 483.280209][T14118] ? __pud_alloc+0x4f6/0x690 [ 483.280234][T14118] alloc_pages_noprof+0x136/0x390 [ 483.280257][T14118] __pmd_alloc+0x3b/0x950 [ 483.280279][T14118] ? __pud_alloc+0x4fb/0x690 [ 483.280303][T14118] copy_page_range+0x45b6/0x6600 [ 483.280336][T14118] ? __lock_acquire+0x4a5/0x2630 [ 483.280375][T14118] ? mas_wr_store_entry+0x6d2/0x2390 [ 483.280401][T14118] ? __pfx_copy_page_range+0x10/0x10 [ 483.280433][T14118] ? mas_store+0x666/0xac0 [ 483.280457][T14118] ? __pfx_mas_store+0x10/0x10 [ 483.280486][T14118] ? __pfx___vma_start_write+0x10/0x10 [ 483.280519][T14118] dup_mmap+0xd25/0x2180 [ 483.280552][T14118] ? __pfx_dup_mmap+0x10/0x10 [ 483.280573][T14118] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 483.280610][T14118] ? __lock_acquire+0x4a5/0x2630 [ 483.280636][T14118] ? find_held_lock+0x2b/0x80 [ 483.280653][T14118] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 483.280696][T14118] copy_process+0x7523/0x7a40 [ 483.280731][T14118] ? __pfx_copy_process+0x10/0x10 [ 483.280765][T14118] kernel_clone+0xfc/0x9a0 [ 483.280786][T14118] ? __pfx_futex_wait+0x10/0x10 [ 483.280818][T14118] ? __pfx_kernel_clone+0x10/0x10 [ 483.280853][T14118] __do_sys_clone+0xd9/0x120 [ 483.280877][T14118] ? __pfx___do_sys_clone+0x10/0x10 [ 483.280919][T14118] do_syscall_64+0x106/0xf80 [ 483.280938][T14118] ? clear_bhb_loop+0x40/0x90 [ 483.280961][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.280981][T14118] RIP: 0033:0x7f57ce39c819 [ 483.280997][T14118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.281015][T14118] RSP: 002b:00007f57cf319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 483.281034][T14118] RAX: ffffffffffffffda RBX: 00007f57ce615fa0 RCX: 00007f57ce39c819 [ 483.281046][T14118] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000100000001 [ 483.281057][T14118] RBP: 00007f57ce432c91 R08: 0000000000000004 R09: 0000000000000000 [ 483.281068][T14118] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 483.281078][T14118] R13: 00007f57ce616038 R14: 00007f57ce615fa0 R15: 00007ffc6b569d98 [ 483.281102][T14118] [ 486.626660][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 487.580201][T14211] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 491.100734][T14302] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input16 [ 492.028519][T14316] blktrace: Concurrent blktraces are not allowed on loop2 [ 492.509554][T14326] bonding: no command found in bonding_masters - use +ifname or -ifname [ 492.560408][T14326] bonding: unable to delete non-existent ) [ 492.974991][T14346] FAULT_INJECTION: forcing a failure. [ 492.974991][T14346] name failslab, interval 1, probability 0, space 0, times 0 [ 493.034709][T14346] CPU: 0 UID: 0 PID: 14346 Comm: syz.4.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.034742][T14346] Tainted: [L]=SOFTLOCKUP [ 493.034749][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.034759][T14346] Call Trace: [ 493.034778][T14346] [ 493.034785][T14346] dump_stack_lvl+0x100/0x190 [ 493.034820][T14346] should_fail_ex.cold+0x5/0xa [ 493.034843][T14346] should_failslab+0xc2/0x120 [ 493.034865][T14346] __kmalloc_cache_noprof+0x7a/0x6f0 [ 493.034892][T14346] ? __vb2_init_fileio+0x18f/0x1000 [ 493.034917][T14346] ? trace_contention_end+0x140/0x180 [ 493.034947][T14346] __vb2_init_fileio+0x18f/0x1000 [ 493.034971][T14346] ? vb2_fop_read+0xe5/0x520 [ 493.034991][T14346] ? aa_file_perm+0x7f3/0x14d0 [ 493.035020][T14346] ? lockdep_hardirqs_on+0x78/0x100 [ 493.035044][T14346] __vb2_perform_fileio+0x91e/0x1380 [ 493.035075][T14346] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 493.035100][T14346] ? __pfx___might_resched+0x10/0x10 [ 493.035135][T14346] vb2_fop_read+0x211/0x520 [ 493.035163][T14346] v4l2_read+0x229/0x2c0 [ 493.035182][T14346] ? __pfx_v4l2_read+0x10/0x10 [ 493.035203][T14346] vfs_read+0x1e4/0xb30 [ 493.035226][T14346] ? __pfx_vfs_read+0x10/0x10 [ 493.035242][T14346] ? find_held_lock+0x2b/0x80 [ 493.035260][T14346] ? __fget_files+0x215/0x3d0 [ 493.035278][T14346] ? __fget_files+0x215/0x3d0 [ 493.035300][T14346] ? __fget_files+0x21f/0x3d0 [ 493.035324][T14346] ksys_read+0x12a/0x250 [ 493.035342][T14346] ? __pfx_ksys_read+0x10/0x10 [ 493.035366][T14346] do_syscall_64+0x106/0xf80 [ 493.035385][T14346] ? clear_bhb_loop+0x40/0x90 [ 493.035408][T14346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.035427][T14346] RIP: 0033:0x7f0cbd79c819 [ 493.035442][T14346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.035460][T14346] RSP: 002b:00007f0cbe664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.035478][T14346] RAX: ffffffffffffffda RBX: 00007f0cbda15fa0 RCX: 00007f0cbd79c819 [ 493.035490][T14346] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000002 [ 493.035500][T14346] RBP: 00007f0cbd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 493.035511][T14346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.035521][T14346] R13: 00007f0cbda16038 R14: 00007f0cbda15fa0 R15: 00007ffc6d21dac8 [ 493.035544][T14346] [ 493.564464][T14337] zswap: compressor û not available [ 494.542921][T14372] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1709'. [ 495.052726][T14381] netlink: 'syz.2.1712': attribute type 9 has an invalid length. [ 495.110352][T14381] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1712'. [ 495.736987][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 496.123040][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 496.783451][T14421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.824294][T14421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.860071][T14421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.896889][T14421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.311965][T14435] blktrace: Concurrent blktraces are not allowed on loop2 [ 498.373208][T14467] bond0: option slaves: interface -Âô]àæ©=,Dçon?ïI|›a CB does not exist! [ 498.761515][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 498.859694][T10786] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.865831][T10787] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.939804][T10786] Bluetooth: hci4: command 0x040f tx timeout [ 498.945997][T10787] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.710438][T14501] ima: policy update failed [ 499.745735][ T30] audit: type=1802 audit(2147483703.670:26): pid=14501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1739" res=0 errno=0 [ 501.742693][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.749188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.578846][T14589] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 503.943422][T14628] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 506.413863][T14671] openvswitch: netlink: Key type 11791 is out of range max 32 [ 506.843743][T14690] netlink: 'syz.0.1778': attribute type 2 has an invalid length. [ 507.650464][T14713] [U] 0="­/ [ 507.680422][T14713] [U] [ 507.683231][T14713] [U] EÇeÅQ‰Í@’ [ 507.754404][T14717] [U]  [ 507.766883][T14715] netlink: Unknown NAT attribute (type=262, max=9) [ 507.825557][T10786] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 509.590295][T14759] FAULT_INJECTION: forcing a failure. [ 509.590295][T14759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.768818][T14751] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1790'. [ 510.012424][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.4.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.012457][T14759] Tainted: [L]=SOFTLOCKUP [ 510.012464][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 510.012475][T14759] Call Trace: [ 510.012481][T14759] [ 510.012488][T14759] dump_stack_lvl+0x100/0x190 [ 510.012522][T14759] should_fail_ex.cold+0x5/0xa [ 510.012544][T14759] core_sys_select+0x9b9/0xbb0 [ 510.012569][T14759] ? __pfx_core_sys_select+0x10/0x10 [ 510.012608][T14759] ? ktime_get_ts64+0x2d2/0x3f0 [ 510.012630][T14759] ? read_tsc+0x9/0x20 [ 510.012650][T14759] ? ktime_get_ts64+0x256/0x3f0 [ 510.012673][T14759] kern_select+0x20c/0x270 [ 510.012692][T14759] ? __pfx_kern_select+0x10/0x10 [ 510.012718][T14759] __x64_sys_select+0xbd/0x160 [ 510.012735][T14759] ? do_syscall_64+0x95/0xf80 [ 510.012755][T14759] ? lockdep_hardirqs_on+0x78/0x100 [ 510.012774][T14759] do_syscall_64+0x106/0xf80 [ 510.012792][T14759] ? clear_bhb_loop+0x40/0x90 [ 510.012814][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.012833][T14759] RIP: 0033:0x7f0cbd79c819 [ 510.012848][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.012873][T14759] RSP: 002b:00007f0cbe643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 510.012891][T14759] RAX: ffffffffffffffda RBX: 00007f0cbda16090 RCX: 00007f0cbd79c819 [ 510.012903][T14759] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 510.012914][T14759] RBP: 00007f0cbd832c91 R08: 00002000000001c0 R09: 0000000000000000 [ 510.012924][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.012935][T14759] R13: 00007f0cbda16128 R14: 00007f0cbda16090 R15: 00007ffc6d21dac8 [ 510.012958][T14759] [ 510.557529][T14771] FAULT_INJECTION: forcing a failure. [ 510.557529][T14771] name failslab, interval 1, probability 0, space 0, times 0 [ 510.592389][T14771] CPU: 0 UID: 0 PID: 14771 Comm: syz.0.1793 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.592422][T14771] Tainted: [L]=SOFTLOCKUP [ 510.592428][T14771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 510.592439][T14771] Call Trace: [ 510.592445][T14771] [ 510.592452][T14771] dump_stack_lvl+0x100/0x190 [ 510.592486][T14771] should_fail_ex.cold+0x5/0xa [ 510.592509][T14771] should_failslab+0xc2/0x120 [ 510.592531][T14771] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 510.592561][T14771] ? sk_prot_alloc+0x60/0x2a0 [ 510.592588][T14771] sk_prot_alloc+0x60/0x2a0 [ 510.592619][T14771] sk_alloc+0x36/0xe80 [ 510.592649][T14771] tipc_sk_create+0xf9/0x2420 [ 510.592683][T14771] ? find_held_lock+0x2b/0x80 [ 510.592702][T14771] ? __sock_create+0x2f3/0x860 [ 510.592724][T14771] ? __sock_create+0x2f3/0x860 [ 510.592751][T14771] __sock_create+0x339/0x860 [ 510.592779][T14771] __sys_socket+0x14d/0x260 [ 510.592806][T14771] ? __pfx___sys_socket+0x10/0x10 [ 510.592837][T14771] __x64_sys_socket+0x72/0xb0 [ 510.592861][T14771] ? lockdep_hardirqs_on+0x78/0x100 [ 510.592882][T14771] do_syscall_64+0x106/0xf80 [ 510.592901][T14771] ? clear_bhb_loop+0x40/0x90 [ 510.592924][T14771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.592943][T14771] RIP: 0033:0x7f57ce39c819 [ 510.592959][T14771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.592977][T14771] RSP: 002b:00007f57cf2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.592995][T14771] RAX: ffffffffffffffda RBX: 00007f57ce616090 RCX: 00007f57ce39c819 [ 510.593009][T14771] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 510.593020][T14771] RBP: 00007f57ce432c91 R08: 0000000000000000 R09: 0000000000000000 [ 510.593031][T14771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.593042][T14771] R13: 00007f57ce616128 R14: 00007f57ce616090 R15: 00007ffc6b569d98 [ 510.593064][T14771] [ 511.284282][T14786] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1795'. [ 511.816520][T14797] bridge0: port 2(veth0_to_bridge) entered blocking state [ 511.824062][T14797] bridge0: port 2(veth0_to_bridge) entered disabled state [ 511.836639][T14797] veth0_to_bridge: entered allmulticast mode [ 511.856279][T14794] qrtr: Invalid version 5 [ 511.868893][T14794] qrtr: Invalid version 0 [ 511.890329][T14797] veth0_to_bridge: entered promiscuous mode [ 511.914789][T14797] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.962166][T14797] bridge0: port 2(veth0_to_bridge) entered blocking state [ 511.969470][T14797] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 513.277344][T14823] No such timeout policy "" [ 513.297849][T14823] netlink: Failed to associated timeout policy '' [ 513.312966][T14821] FAULT_INJECTION: forcing a failure. [ 513.312966][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 513.653705][T14821] CPU: 0 UID: 0 PID: 14821 Comm: syz.4.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.653742][T14821] Tainted: [L]=SOFTLOCKUP [ 513.653748][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.653759][T14821] Call Trace: [ 513.653765][T14821] [ 513.653773][T14821] dump_stack_lvl+0x100/0x190 [ 513.653807][T14821] should_fail_ex.cold+0x5/0xa [ 513.653830][T14821] should_failslab+0xc2/0x120 [ 513.653860][T14821] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 513.653890][T14821] ? __proc_create+0x2cb/0x8c0 [ 513.653914][T14821] __proc_create+0x2cb/0x8c0 [ 513.653934][T14821] ? __pfx___proc_create+0x10/0x10 [ 513.653961][T14821] proc_mkdir+0x81/0x170 [ 513.653981][T14821] ? __pfx_proc_mkdir+0x10/0x10 [ 513.653999][T14821] ? cache_register_net+0x137/0x5e0 [ 513.654020][T14821] ? cache_register_net+0x137/0x5e0 [ 513.654046][T14821] cache_register_net+0x18f/0x5e0 [ 513.654069][T14821] gss_svc_init_net+0x14e/0x640 [ 513.654086][T14821] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 513.654108][T14821] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 513.654126][T14821] ops_init+0x1e2/0x5f0 [ 513.654149][T14821] setup_net+0x118/0x3a0 [ 513.654173][T14821] ? __pfx_setup_net+0x10/0x10 [ 513.654191][T14821] ? lockdep_init_map_type+0x5c/0x250 [ 513.654217][T14821] ? mutex_init_lockep+0x110/0x150 [ 513.654247][T14821] copy_net_ns+0x46f/0x7c0 [ 513.654270][T14821] create_new_namespaces+0x3ea/0xac0 [ 513.654298][T14821] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 513.654322][T14821] ksys_unshare+0x473/0xad0 [ 513.654348][T14821] ? __pfx_ksys_unshare+0x10/0x10 [ 513.654381][T14821] __x64_sys_unshare+0x31/0x40 [ 513.654405][T14821] do_syscall_64+0x106/0xf80 [ 513.654425][T14821] ? clear_bhb_loop+0x40/0x90 [ 513.654446][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.654465][T14821] RIP: 0033:0x7f0cbd79c819 [ 513.654482][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.654499][T14821] RSP: 002b:00007f0cbe664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 513.654517][T14821] RAX: ffffffffffffffda RBX: 00007f0cbda15fa0 RCX: 00007f0cbd79c819 [ 513.654529][T14821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 513.654540][T14821] RBP: 00007f0cbd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 513.654550][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.654561][T14821] R13: 00007f0cbda16038 R14: 00007f0cbda15fa0 R15: 00007ffc6d21dac8 [ 513.654584][T14821] [ 514.232417][T14839] serio: Serial port ttyS0 [ 515.934409][T14876] openvswitch: netlink: Key type 11791 is out of range max 32 [ 517.245226][T14901] block2mtd: illegal erase size [ 517.417727][T14891] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 518.700687][T14910] binder: 14909:14910 ioctl c0306201 0 returned -14 [ 518.848320][T14910] FAULT_INJECTION: forcing a failure. [ 518.848320][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 519.269410][T14910] CPU: 0 UID: 0 PID: 14910 Comm: syz.4.1824 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.269443][T14910] Tainted: [L]=SOFTLOCKUP [ 519.269449][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.269465][T14910] Call Trace: [ 519.269472][T14910] [ 519.269480][T14910] dump_stack_lvl+0x100/0x190 [ 519.269513][T14910] should_fail_ex.cold+0x5/0xa [ 519.269535][T14910] should_failslab+0xc2/0x120 [ 519.269558][T14910] __kmalloc_cache_noprof+0x7a/0x6f0 [ 519.269592][T14910] ? wakeup_source_device_create+0x46/0x2e0 [ 519.269622][T14910] wakeup_source_device_create+0x46/0x2e0 [ 519.269649][T14910] wakeup_source_sysfs_add+0x1c/0x90 [ 519.269676][T14910] wakeup_source_register+0x154/0x3e0 [ 519.269698][T14910] ep_create_wakeup_source+0x1df/0x2e0 [ 519.269719][T14910] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 519.269742][T14910] ? do_epoll_ctl+0x1012/0x36a0 [ 519.269762][T14910] ? do_epoll_ctl+0x1012/0x36a0 [ 519.269788][T14910] do_epoll_ctl+0x1eee/0x36a0 [ 519.269818][T14910] ? __pfx_do_epoll_ctl+0x10/0x10 [ 519.269839][T14910] ? find_held_lock+0x2b/0x80 [ 519.269857][T14910] ? __might_fault+0xc5/0x140 [ 519.269884][T14910] ? __might_fault+0xc5/0x140 [ 519.269920][T14910] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 519.269939][T14910] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 519.269961][T14910] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 519.269990][T14910] do_syscall_64+0x106/0xf80 [ 519.270009][T14910] ? clear_bhb_loop+0x40/0x90 [ 519.270032][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.270051][T14910] RIP: 0033:0x7f0cbd79c819 [ 519.270067][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.270085][T14910] RSP: 002b:00007f0cbe664028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 519.270103][T14910] RAX: ffffffffffffffda RBX: 00007f0cbda15fa0 RCX: 00007f0cbd79c819 [ 519.270115][T14910] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 519.270125][T14910] RBP: 00007f0cbd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 519.270135][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.270146][T14910] R13: 00007f0cbda16038 R14: 00007f0cbda15fa0 R15: 00007ffc6d21dac8 [ 519.270170][T14910] [ 520.813689][T10786] Bluetooth: hci4: unexpected event 0x04 length: 64 > 10 [ 520.813923][T10786] Bluetooth: hci4: connection err: -111 [ 521.930011][T14947] FAULT_INJECTION: forcing a failure. [ 521.930011][T14947] name failslab, interval 1, probability 0, space 0, times 0 [ 521.996849][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.4.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.996882][T14947] Tainted: [L]=SOFTLOCKUP [ 521.996890][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.996900][T14947] Call Trace: [ 521.996907][T14947] [ 521.996914][T14947] dump_stack_lvl+0x100/0x190 [ 521.996948][T14947] should_fail_ex.cold+0x5/0xa [ 521.996972][T14947] should_failslab+0xc2/0x120 [ 521.996993][T14947] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 521.997023][T14947] ? alloc_empty_file+0x55/0x1c0 [ 521.997052][T14947] alloc_empty_file+0x55/0x1c0 [ 521.997084][T14947] dentry_open+0x46/0xd0 [ 521.997109][T14947] pidfs_alloc_file+0x18f/0x290 [ 521.997128][T14947] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 521.997152][T14947] pidfd_prepare+0x123/0x200 [ 521.997177][T14947] __x64_sys_pidfd_open+0x105/0x1a0 [ 521.997204][T14947] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 521.997237][T14947] do_syscall_64+0x106/0xf80 [ 521.997256][T14947] ? clear_bhb_loop+0x40/0x90 [ 521.997278][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.997296][T14947] RIP: 0033:0x7f0cbd79c819 [ 521.997312][T14947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.997329][T14947] RSP: 002b:00007f0cbe664028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 521.997348][T14947] RAX: ffffffffffffffda RBX: 00007f0cbda15fa0 RCX: 00007f0cbd79c819 [ 521.997359][T14947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 521.997370][T14947] RBP: 00007f0cbd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 521.997381][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.997391][T14947] R13: 00007f0cbda16038 R14: 00007f0cbda15fa0 R15: 00007ffc6d21dac8 [ 521.997413][T14947] [ 528.096090][T15093] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 528.155571][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1867'. [ 532.416872][T15156] binder: 15155:15156 ioctl c0306201 0 returned -14 [ 533.224909][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 533.528981][T15170] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 533.568686][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 533.972297][T15181] serio: Serial port ttyS0 [ 538.262258][T15249] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.4.1899: 7 [ 538.439852][T15247] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.4.1899: 7 [ 538.841368][T15257] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.3.1901: iget: checksum invalid [ 538.890951][T15257] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 538.951370][T15257] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 539.008270][T15257] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 539.290256][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 541.779898][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'. [ 542.687386][T15302] netlink: 'syz.4.1909': attribute type 19 has an invalid length. [ 542.753195][T15303] FAULT_INJECTION: forcing a failure. [ 542.753195][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 542.782937][T15302] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1909'. [ 542.873006][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.0.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.873039][T15303] Tainted: [L]=SOFTLOCKUP [ 542.873045][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.873056][T15303] Call Trace: [ 542.873062][T15303] [ 542.873070][T15303] dump_stack_lvl+0x100/0x190 [ 542.873103][T15303] should_fail_ex.cold+0x5/0xa [ 542.873124][T15303] should_failslab+0xc2/0x120 [ 542.873146][T15303] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 542.873176][T15303] ? security_file_alloc+0x34/0x2c0 [ 542.873201][T15303] ? trace_kmem_cache_alloc+0xf3/0x120 [ 542.873226][T15303] security_file_alloc+0x34/0x2c0 [ 542.873252][T15303] init_file+0x95/0x480 [ 542.873276][T15303] alloc_empty_file+0x73/0x1c0 [ 542.873301][T15303] alloc_file_pseudo+0x13a/0x230 [ 542.873327][T15303] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 542.873363][T15303] ? alloc_fd+0x476/0x790 [ 542.873386][T15303] sock_alloc_file+0x50/0x210 [ 542.873407][T15303] __sys_socket+0x1c0/0x260 [ 542.873432][T15303] ? __pfx___sys_socket+0x10/0x10 [ 542.873464][T15303] __x64_sys_socket+0x72/0xb0 [ 542.873489][T15303] ? lockdep_hardirqs_on+0x78/0x100 [ 542.873510][T15303] do_syscall_64+0x106/0xf80 [ 542.873528][T15303] ? clear_bhb_loop+0x40/0x90 [ 542.873550][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.873569][T15303] RIP: 0033:0x7f57ce39c819 [ 542.873585][T15303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.873601][T15303] RSP: 002b:00007f57cf2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 542.873620][T15303] RAX: ffffffffffffffda RBX: 00007f57ce616090 RCX: 00007f57ce39c819 [ 542.873631][T15303] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 542.873642][T15303] RBP: 00007f57ce432c91 R08: 0000000000000000 R09: 0000000000000000 [ 542.873652][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.873663][T15303] R13: 00007f57ce616128 R14: 00007f57ce616090 R15: 00007ffc6b569d98 [ 542.873686][T15303] [ 543.439691][T10786] Bluetooth: hci4: unexpected event 0x01 length: 124 > 1 [ 544.072401][T15310] random: crng reseeded on system resumption [ 544.103026][T15315] futex_wake_op: syz.2.1914 tries to shift op by -1; fix this program [ 544.421806][T15322] netlink: 246 bytes leftover after parsing attributes in process `syz.0.1915'. [ 544.814310][T15332] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1922'. [ 545.201402][T15342] serio: Serial port ttyS0 [ 546.193580][T15372] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 546.333855][T15377] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 547.822736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.835069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.847740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.860049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.872230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.884405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.896643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.909015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.921377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.933461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.829159][ C0] net_ratelimit: 34450 callbacks suppressed [ 552.829179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.847463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.859774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.871945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.884136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.896448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.908663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.920931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.933367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.945484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.549011][ C0] sched: DL replenish lagged too much [ 557.839120][ C0] net_ratelimit: 33277 callbacks suppressed [ 557.839139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.857404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.869496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.881777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.894076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.906629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.918958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.931331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.943673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.955996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.849065][ C0] net_ratelimit: 32868 callbacks suppressed [ 562.849084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.867484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.879847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.892273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.904524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.917054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.929380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.941694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.953959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.966259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.859025][ C0] net_ratelimit: 33668 callbacks suppressed [ 567.859047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.877458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.889713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.902038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.914407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.926766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.939039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.951372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.963587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.975795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.274847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.869025][ C0] net_ratelimit: 32659 callbacks suppressed [ 572.869052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.887680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.900412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.912654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.925193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.937620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.950234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.962784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.975093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.987725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.067094][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.879122][ C0] net_ratelimit: 34487 callbacks suppressed [ 577.879142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.897564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.909823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.922412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.934863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.947251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.959414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.971807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.984172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.996481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.889039][ C0] net_ratelimit: 33465 callbacks suppressed [ 582.889061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.907383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.920240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.932789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.945738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.958276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.970697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.983022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.995308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.007709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.899040][ C0] net_ratelimit: 33908 callbacks suppressed [ 587.899061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.917331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.930098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.942454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.955031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.967361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.979716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.992203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.004898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.017160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.909149][ C0] net_ratelimit: 34067 callbacks suppressed [ 592.909168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.927681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.940165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.952465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 592.964979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.977158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.989355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.001745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 593.014160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.026936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.919069][ C0] net_ratelimit: 34263 callbacks suppressed [ 597.919090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.938166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.950823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 597.963168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.975621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.988432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.000944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 598.013169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.025382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.037600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.929020][ C0] net_ratelimit: 34601 callbacks suppressed [ 602.929042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.947454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.959668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.972058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 602.984437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.997154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.009366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.021663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 603.033941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.046059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.939009][ C0] net_ratelimit: 34994 callbacks suppressed [ 607.939030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.957080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.969428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.981695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 607.994052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.006136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.018417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.030588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 608.043003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.055429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.949125][ C0] net_ratelimit: 33988 callbacks suppressed [ 612.949147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.967590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 612.979877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.992106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.004235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.016610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 613.028948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.041377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.053769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.066181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 617.959075][ C0] net_ratelimit: 35001 callbacks suppressed [ 617.959096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.977236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.989637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 618.001970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.014273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.026831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.039154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 618.051335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.063804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.076159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.969094][ C0] net_ratelimit: 34209 callbacks suppressed [ 622.969115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.987308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.999624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.012142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 623.024384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.036510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.048803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.061206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 623.073826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.086251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.979098][ C0] net_ratelimit: 34540 callbacks suppressed [ 627.979118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.997361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 628.009761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.022013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.034277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.046727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 628.059068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.071296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.083670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.096039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 631.734965][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.989099][ C0] net_ratelimit: 33869 callbacks suppressed [ 632.989120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.007189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.019377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 633.031774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.044076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.056621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.069118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 633.081313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.093499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.105960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.999070][ C0] net_ratelimit: 35761 callbacks suppressed [ 637.999093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.017536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.029999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.042431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 638.054832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.067488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.079795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.092274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 638.104682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.117002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.543558][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.009011][ C0] net_ratelimit: 34355 callbacks suppressed [ 643.009032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.027307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.039570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 643.051901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.064079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.076476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.088704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 643.101358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.114190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.126342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.019056][ C0] net_ratelimit: 35211 callbacks suppressed [ 648.019077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.037317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 648.049649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.061968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.074198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.086488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 648.098786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.111162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.123443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.135831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 653.028976][ C0] net_ratelimit: 35580 callbacks suppressed [ 653.028994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.047324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.059595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.072169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 653.084439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.096674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.109241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.121539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 653.134155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.146554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.039085][ C0] net_ratelimit: 35057 callbacks suppressed [ 658.039105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 658.057560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.069688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.081773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.094247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 658.106769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.119259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.131565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.143777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 658.156127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.049115][ C0] net_ratelimit: 34198 callbacks suppressed [ 663.049136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 663.067567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.079867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.092144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.104706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 663.117191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.129584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.141804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.153981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 663.166237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.059562][ C0] net_ratelimit: 35139 callbacks suppressed [ 668.059583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.078167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.090466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.103009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 668.115576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.127796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.140042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.152238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 668.164492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.176800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.069086][ C0] net_ratelimit: 35134 callbacks suppressed [ 673.069107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.088006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.100236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.112628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 673.125020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.137280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.149549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.161767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 673.174411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.187140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.079085][ C0] net_ratelimit: 34734 callbacks suppressed [ 678.079106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.097296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.109507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.121841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 678.134256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.146674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.158793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.171104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 678.183486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.195815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.089030][ C0] net_ratelimit: 34840 callbacks suppressed [ 683.089050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.108374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 683.121001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.133427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.145667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.158435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 683.170904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.183206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.195459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.207738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 685.868946][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 685.875941][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15406/1:b..l [ 685.884482][ C0] rcu: (detected by 0, t=10502 jiffies, g=78413, q=1968 ncpus=1) [ 685.892387][ C0] task:syz.2.1937 state:R running task stack:27192 pid:15406 tgid:15404 ppid:12915 task_flags:0x40054c flags:0x00080002 [ 685.907119][ C0] Call Trace: [ 685.910417][ C0] [ 685.913461][ C0] __schedule+0xfee/0x6120 [ 685.917893][ C0] ? __pfx___schedule+0x10/0x10 [ 685.922870][ C0] ? mark_held_locks+0x40/0x70 [ 685.927758][ C0] preempt_schedule_irq+0x50/0x90 [ 685.932999][ C0] irqentry_exit+0x17b/0x670 [ 685.937611][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.943778][ C0] RIP: 0010:lock_acquire+0x0/0x380 [ 685.948934][ C0] Code: f6 f5 f8 0e 48 c7 c6 3f fc e6 8d 67 48 0f b9 3a e9 28 fc ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 89 f6 41 55 45 89 c5 41 54 41 89 cc 55 [ 685.968902][ C0] RSP: 0018:ffffc90005ae73f0 EFLAGS: 00000246 [ 685.975024][ C0] RAX: ffffffff81b7bd3d RBX: 0000000000000001 RCX: 0000000000000002 [ 685.983048][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e7760 [ 685.991131][ C0] RBP: ffffc90005ae7508 R08: 0000000000000000 R09: 0000000000000000 [ 685.999305][ C0] R10: 0000000000000200 R11: 000000000000b7de R12: fffff52000b5ce9a [ 686.007745][ C0] R13: ffffc90005ae74c0 R14: ffffc90005ae74c0 R15: ffffc90005ae74c8 [ 686.015978][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 686.021390][ C0] unwind_next_frame+0xd1/0x1ea0 [ 686.026458][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 686.031717][ C0] ? arch_stack_walk+0x73/0xf0 [ 686.036985][ C0] __unwind_start+0x3d1/0x7f0 [ 686.042123][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 686.048343][ C0] arch_stack_walk+0x73/0xf0 [ 686.052977][ C0] ? arch_stack_walk+0x73/0xf0 [ 686.057937][ C0] ? tear_down_vmas+0x2a5/0x600 [ 686.063083][ C0] stack_trace_save+0x8e/0xc0 [ 686.068041][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 686.073716][ C0] ? __lock_acquire+0x4a5/0x2630 [ 686.078712][ C0] ? kasan_save_stack+0x30/0x50 [ 686.083609][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 686.089122][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 686.095288][ C0] kasan_save_stack+0x30/0x50 [ 686.100088][ C0] kasan_save_track+0x14/0x30 [ 686.104950][ C0] __kasan_kmalloc+0xaa/0xb0 [ 686.109713][ C0] kmem_cache_free+0x41f/0x6a0 [ 686.114688][ C0] tear_down_vmas+0x2a5/0x600 [ 686.119419][ C0] exit_mmap+0x469/0xa30 [ 686.123804][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 686.128604][ C0] ? trace_contention_end+0x140/0x180 [ 686.134011][ C0] ? uprobe_clear_state+0x5f/0x360 [ 686.139141][ C0] ? uprobe_clear_state+0x5f/0x360 [ 686.144465][ C0] ? __lock_acquire+0x4a5/0x2630 [ 686.149717][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 686.155482][ C0] __mmput+0x12a/0x410 [ 686.159571][ C0] mmput+0x67/0x80 [ 686.163302][ C0] do_exit+0x819/0x2b60 [ 686.167466][ C0] ? __pfx_do_exit+0x10/0x10 [ 686.172176][ C0] ? do_raw_spin_lock+0x128/0x260 [ 686.177678][ C0] ? find_held_lock+0x2b/0x80 [ 686.182383][ C0] ? get_signal+0x7e0/0x21e0 [ 686.186997][ C0] do_group_exit+0xd5/0x2a0 [ 686.191919][ C0] get_signal+0x1ec7/0x21e0 [ 686.196555][ C0] ? __pfx_get_signal+0x10/0x10 [ 686.201428][ C0] ? do_futex+0x192/0x350 [ 686.205888][ C0] arch_do_signal_or_restart+0x91/0x770 [ 686.211636][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 686.217820][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 686.223387][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 686.228735][ C0] do_syscall_64+0x668/0xf80 [ 686.233361][ C0] ? clear_bhb_loop+0x40/0x90 [ 686.238074][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.243993][ C0] RIP: 0033:0x7f6ec839c819 [ 686.248528][ C0] RSP: 002b:00007f6ec91a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 686.257203][ C0] RAX: fffffffffffffe00 RBX: 00007f6ec8615fa8 RCX: 00007f6ec839c819 [ 686.265303][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ec8615fa8 [ 686.273374][ C0] RBP: 00007f6ec8615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 686.281342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.289422][ C0] R13: 00007f6ec8616038 R14: 00007ffd2b9e1470 R15: 00007ffd2b9e1558 [ 686.297585][ C0] [ 688.099072][ C0] net_ratelimit: 30841 callbacks suppressed [ 688.099093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.117972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.130297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 688.142869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.155010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.167145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.179708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 688.192210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.204445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.216659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.109073][ C0] net_ratelimit: 33309 callbacks suppressed [ 693.109094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.127495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.139790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.152035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 693.164334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.176563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.188781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.201150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:c6:57:a7:ff:32, vlan:0) [ 693.213382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.225818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)