last executing test programs: 7m54.053596488s ago: executing program 0 (id=2565): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x4) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x33, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/is_otg\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xe0800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCEXCL2(r3, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 7m52.971337196s ago: executing program 0 (id=2566): madvise$auto_MADV_POPULATE_READ(0xc, 0x9, 0x16) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x80401, 0x0) 7m52.696557893s ago: executing program 0 (id=2569): r0 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) pread64$auto(r0, &(0x7f0000000000)='\x00_)1\xf0[ \x1e\x89Eg\x8d\"/\x8b\xe5\xcef/,eGA\a)\xe3\xb1\xf0o\t\xa1\xaa\x93\x81\x947\xce7\xb4\x89k@p\xb2\x98\x86\xf2fh9\x8b\xec\xd4\xe0K)\xe2\x99\x1a\x16\xe8\x1f|;!\xda(\xb2\xfdG:_[y\xe9\xb0\xf6\xae\xb1\xaa\xea\xbc\x8eV', 0x800, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x0, 0x0) socket(0x2, 0xa, 0xa) (async) socket(0x2, 0xa, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) gettid() (async) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x5, &(0x7f0000000000)={@siginfo_0_0={0x5, 0x9, 0x8, @_rt={r1, 0x0, @sival_int=0x80000000}}}) unshare$auto(0x7fffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) clone3$auto(0x0, 0x9) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) (async) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(0x0, 0x0, 0xe6) getdents64$auto(r2, 0x0, 0x400) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) vmsplice$auto(r3, &(0x7f0000000180)={&(0x7f0000000140)="3325fce5fbabbac518ae3bb3364f5c97fdcb16eefe00ff0a7c6b8c7a3999a95a61338eeffdf7c2d57a49d40066b2733b7a", 0x6}, 0xb6f7, 0x2) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bcb53b3b8fd58f8c357e63f5d3ea9b09074794d2e4ee66cb39adddecb163530c5953b3dae1027dd158ad8e43cb5eb5c475dfe25ceb530b1e73c89426d48a09", @ANYRES16=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bcb53b3b8fd58f8c357e63f5d3ea9b09074794d2e4ee66cb39adddecb163530c5953b3dae1027dd158ad8e43cb5eb5c475dfe25ceb530b1e73c89426d48a09", @ANYRES16=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 7m51.550702367s ago: executing program 0 (id=2573): mmap$auto(0x2, 0x2, 0x0, 0xeb1, 0x401, 0xa000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0/mldv1_unsolicited_report_interval\x00', 0x101c41, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x503b42, 0x0) close_range$auto(0x2, r0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x7, 0x0, 0xffffff01) socket(0xa, 0x801, 0x2) r1 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0xb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x3, 0x0, 0x0) recvfrom$auto(r1, 0x0, 0x400000000008, 0xe658, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10004}, 0x400000000000005, 0x6, 0xfffffffffffffffa, 0x1008000, 0x0, 0x80000080000004, 0x3, 0xffffffffffff628e, 0xa747, 0xdeb5, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1d94c2, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, 0x0, &(0x7f0000000200)=0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto(0x4000009, 0xffffffbb, &(0x7f0000000180)={{0x80000001, 0xffffffffffffffff, 0x0, 0xfffffa9b, 0x2, 0x100003e9, 0x4}, 0x0, 0x0, 0x8000, 0x3, 0x4, 0x2acb, 0x1, 0x4, 0xa, 0x4, @raw=0xfffffff8}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 7m47.988753899s ago: executing program 0 (id=2579): mmap$auto(0x0, 0x402f, 0x80000002, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) poll$auto(&(0x7f0000000080)={r0, 0x0, 0x5}, 0x5, 0x49) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) sendfile$auto(r1, r1, 0x0, 0x71) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r2, 0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='5', 0x1) tkill$auto(0x1, 0x7) msgrcv$auto(0xff, 0x0, 0x2400000000, 0x6, 0x6bc2cc7d) ioctl$auto_TIOCMBIC2(0xffffffffffffffff, 0x5417, &(0x7f0000000100)) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x2f5, 0x48eafc79) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x161201, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xaea2, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, 0x0) 7m47.0523947s ago: executing program 0 (id=2584): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$auto(r0, 0x7f, 0x9a6a, &(0x7f0000000040)='-.%\x00', &(0x7f0000000080)=0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="12915fb9d5") recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setfsuid$auto(0xee00) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3222b14561ab0a8b}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) unshare$auto(0x40000080) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f00000002c0)='./cgroup\x00', 0x6) socket(0x2, 0x1, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 7m46.02389028s ago: executing program 32 (id=2584): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$auto(r0, 0x7f, 0x9a6a, &(0x7f0000000040)='-.%\x00', &(0x7f0000000080)=0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="12915fb9d5") recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setfsuid$auto(0xee00) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3222b14561ab0a8b}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) unshare$auto(0x40000080) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f00000002c0)='./cgroup\x00', 0x6) socket(0x2, 0x1, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 1m56.719291348s ago: executing program 2 (id=3503): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) prlimit64$auto(0x0, 0x7, 0x0, &(0x7f0000000080)={0x3ff}) (async) r0 = socket(0x2, 0x3, 0x100) (async) lsm_set_self_attr$auto(0xacaa, 0x0, 0x40000080, 0xfffffffc) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x1fb, 0x2, 0x8000) r1 = socket(0x37, 0x4, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, 0x0) fstat$auto(r2, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="b55d0453eb14aa7b6049af981928cf6cb83639d5a6d4f2d4575a50f3747bb35dc16670db50712050d7feef5d7ab604bcdd747c5700f1f3e29a2d57c419f8a784be6241e4037cb6d2a953bca04aeb9440bb7c4a6e4713e53a2119ddaaa25e549a0f41fa58321aec3fd083ce6005f37d6357eb0e47f202d0d4e32ede65d3be8f6a1307b54d32647dd72cd9eaea5155bcc0cb967d2175046768fdbb55ec4b1b7450822070d7b62af6fd95ed832248d330e747046437b6f4cd8237ba3fad3a226129eb4b5521809ce0766f041ecc5cc4be5c892be7fb2d66", @ANYRESOCT, @ANYRES16, @ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x20004849) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fsconfig$auto(r0, 0x2, &(0x7f00000003c0)='\x00\x10X\xe3r\x82\x81e\xaal\x8f\xcf\xed~9\x8c\x00\x00|\xffB\xf1\xc0?@\x16\xed\x8a\xfbm\xbf\x00\x99\xb1\xd4:s]\xccs\xc5\xe6\x8c\x9b\x85\xdc\xd2\tIP\x90L\x9bo\xe1}u\t\xe1.C\f\xe5\x1cb\xd0|\x8f\xb1LB\xfa\xcf>N\xac\xe9\xf6\x9e\x83p\xff\xe8\x8d\xbf\xe6>\xd5sG\x8c\xdb\xe6J@\x93?z\xb36\xb8H\xd2\xc7J\x8d\x9d5\xdc\x03xS\xe5\x1a,V$\xb3a\xbe\x8d1\x9cu\xcdt\xe9\x7f\r\tX$\x94\xb5\xb0\x17\nT\x15\xd8\x15\xe2\xda,B\xe5)\xd4\x99e\xac\x1d\xf9\x84m{\xea_Y\x1d\xedD\a\xea\xe2?\f0\x82\xfb\x9f\xae\xd3', &(0x7f0000000300)="2f636bb839dfb2bc1754f56388d7ae566d58a9a5636f04ee38b8c57ba544b73ac78be5e50103eedf6ca0018f335e27e948728d982687278757de2c5dfc4f136d9761832454728002b15cda7168dfa924be300f3d0da101952d7873c0f565dad0a4af27f841791d1c415380bd18dc1b73c00e0d0401e41cbd782fc580080667ee7b21bef66615f839e7634802f0ce601eb2", 0x0) (async) read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000200)=""/34, 0x22) (async) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0x7ff) (async) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x1e) (async) mmap$auto(0x1, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x1000000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) preadv$auto(r4, &(0x7f0000000140)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x205) mmap$auto(0x0, 0x2020009, 0x3, 0x800000008000e31, r2, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m55.214619598s ago: executing program 2 (id=3508): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x9) r1 = inotify_init1$auto(0xfffffff5) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f00000001c0)={0x800, 0xff, 0x3, [0x7, 0x81, 0x5]}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/pcm0c/sub0/info\x00', 0x42800, 0x0) r2 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010030da9d4206502981000002dcdf25000009ff0800180001800c00084400e000", @ANYRES32=0x0, @ANYBLOB="5976b5bc5f3cac69a0abf11a70aa36f4a666ff141c4a45cef74f9b67440082a330672e0659cc3a4aae323f54341f1286a62f47d7df2f1ce4eea1c37aaead58d8f8f4b386a0cce5e70a316ddee83b6878c686474a042480228335fa9efa23f4e8801b2a38ca345a7b39cb2229a82d177b2d6044815e86d5bf83b0de8c2d2706579276e877000000"], 0x30}, 0x1, 0x0, 0x0, 0x200400e1}, 0x800) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x1, 0x4, 0x7ff, 0xe) tkill$auto(r2, 0x7) 1m54.826173344s ago: executing program 2 (id=3511): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) socket(0xa, 0x2, 0x88) socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/igmp6\x00', 0x101d41, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x240803, 0x0) read$auto_ptdump_curusr_fops_(r3, &(0x7f0000000100)=""/25, 0x19) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) pread64$auto(r3, &(0x7f0000000140)='\xcb\x91\x00', 0x8f2, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x1003f, 0x1c, 0x0) 1m53.779971343s ago: executing program 2 (id=3512): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7ff) ptrace$auto_PTRACE_SYSEMU(0x1f, r4, 0x7fffffff, 0x7) tkill$auto(0x0, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0xc) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r8, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}}, 0x2008040) sendmsg$auto_NL80211_CMD_DEL_STATION(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="37abb4993f9f227408811c596821391a0b9fd88ef6a50f575131a6005ef5842f68516b6afb20e75ff8c45cb4ef6033840b97f6f67ce64f40", @ANYRES32=r8, @ANYBLOB="05002dbd7000fcdbdf251400000008000300e98ac43404c4639c3ef872f4c11500c35a8a2bd28c1cbf9833b8ed2f840c71225c23c463573a1642793e6d25f740e0f6df742e938f293d9ced6e4bb4e6514a353602288dd39071882ba2eea293ba411624fda82aef973789b50efe105fdefd6d143295b38cb34de3ac219b797d4d8ed61619e6657a08f21baad06b177092ab31b2df0c01e9ef5f895e713dce369113b64d216ce9f12660b6311301fa789838d7224fdc9915122056a2a8455a", @ANYRES32=r5, @ANYBLOB="0800050000000800f2db0c00000000000001", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4008012}, 0x40004) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r6) 1m52.787359714s ago: executing program 2 (id=3518): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x48002, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x3, 0x1, 0x40}) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x4, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xfffffffffffffffd, 0x3, 0x99) flock$auto(r1, 0x2) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendfile$auto(r0, r0, &(0x7f0000000100)=0x1000000080008000, 0x4000010000000005) 1m50.132755745s ago: executing program 2 (id=3524): mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getrandom$auto(0x0, 0x6000000, 0x3) (fail_nth: 9) 1m49.487177122s ago: executing program 33 (id=3524): mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getrandom$auto(0x0, 0x6000000, 0x3) (fail_nth: 9) 36.714724574s ago: executing program 4 (id=3705): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bpq4/threaded\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r4 = memfd_create$auto(0x0, 0x8) read$auto(r4, 0x0, 0xef) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000001200)={0x1030, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x9}, @NL80211_ATTR_PID={0x8}]}, 0x1030}, 0x1, 0x0, 0x0, 0x1}, 0xc000) socket(0x2, 0x1, 0x106) r6 = socket(0x1e, 0x1, 0x0) connect$auto(r6, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0xf5}}, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a43f000000", @ANYRES16=r8, @ANYBLOB="10002dbd7000fddbdf2504000000040008007900028088be82f25952f70709b8ae358f95a9daca0eabd7ed267b6a69bee7573def880bcbfdde92d0fb2c6e89a5e03cde9aa734c57ded8a160466b6ab36f124fa7b3e20e9a79116f4ead5cf4ba52ed9473a342d4411f2955a8eff984aca8b3d40b33003f61605024c013d1d998f10bec659cc9e9f24853b87000000040006000400080008000a00ff070000"], 0xa4}, 0x1, 0x0, 0x0, 0x41}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r10 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x402, 0x0) pread64$auto(r10, 0x0, 0x4, 0x2aa00b6f) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 36.157008662s ago: executing program 4 (id=3706): r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210) mmap$auto(0x0, 0x4020009, 0x6, 0x10000eb1, 0x401, 0xffffffffffffffff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptywb\x00', 0x200, 0x0) ioctl$auto(r1, 0x5459, r1) (async) ioctl$auto(r1, 0x5459, r1) 35.92729479s ago: executing program 4 (id=3709): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) socket(0xa, 0x2, 0x88) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) close_range$auto(0x2, 0x8, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/igmp6\x00', 0x101d41, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x240803, 0x0) read$auto_ptdump_curusr_fops_(r3, &(0x7f0000000100)=""/25, 0x19) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) pread64$auto(r3, &(0x7f0000000140)='\xcb\x91\x00', 0x8f2, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x1003f, 0x1c, 0x0) 35.601398241s ago: executing program 4 (id=3711): setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x4) bind$auto(0x3, 0x0, 0x6a) unshare$auto(0x40000080) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dvmrp0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r1, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 34.32924632s ago: executing program 4 (id=3716): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/enabled\x00', 0x480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/156, 0x9c) r1 = prctl$auto_PR_SET_MM_START_DATA(0x2, 0x3, 0x0, 0xd, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/max_integrity_segments\x00', 0x103800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0xa, 0x5, 0x0) setsockopt$auto(r5, 0x10000000084, 0x12, 0x0, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/65, 0x41) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000080)=""/58, 0x3a) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddb2c242611000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4080) r9 = gettid() process_vm_writev$auto(r9, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x400, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"3f991ef2d6d111a7391972a0ff2feb6612c667bbc1fb7f703640416164a8b748", 0xfffc, 0x9, 0xc, 0x9, 0x8000000000000000, 0x0}) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x23c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x195, 0x5e, 0x0, 0x1, [@nested={0x117, 0x61, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="84feac6825ca7bd8ffc885b90e2d79fef87d87c9d53dc0577c471d925a671ff9cad39c7bb021f8233f1c04d0c9dc372ad4904fc239ad3a888247146132b11298b1c659e9be0719b1c8ab270689c690c4f59cddc2e3405da6f978ee64c0fe325a5b283142bb5bc2ef3627a0e58ecc05da5e7cb1442ede23f37d438c7d13696d1733742c515b746f04c74776c4b9899717e53ac88e2dc0a3ad89fbe137bd325223ed8d", @generic="14", @typed={0x6c, 0xa5, 0x0, 0x0, @binary="356ea9cbf5a79dd1235a5891e3fbc393b1a8e1efc66c0390bc3530171a4b5443f52a2111a0b2e165561d69e74d24d6d2a4fc77650fa1c1852622c485224591a7ba2cd67d1a37d67265308036a1390f13abcd09152b595fb77365e39e18e71e3e982e87a06327128e"}]}, @typed={0x8, 0x5a, 0x0, 0x0, @pid=r9}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r10}, @generic="beb48af28a3ac2412574052a55b5095b49476b54e07700a50dbf89fd81cc002a5d3de699a46b32cf7c60f766396c611e9c9565a8bfd2c79a66a15a2cd543dff3f38aaf5dee32cbc10a409fb50e830efc053e7c2d5a61e14c2945d346545f1cbf54a39d4eb76397167d"]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_PREV_BSSID={0x85, 0x4f, "88396191244362e37bf28717ef0ba6360d7f45d3414bdbcbbc3b17602185ad649d8d5328bfec18f81b7ba17eee497b438d071eea5e1900c4086baf09d244b6cf2c0ea4d8509fa38666c7addf2f52db58b4096bb1708992e1c17168e94140ea3aefc255f2273ee435710fea5f7c46440a3ea386e3b6dba352b290eb40844a2f5141"}]}, 0x23c}}, 0x8040) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x202, 0x0) 33.623658318s ago: executing program 4 (id=3719): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x549443, 0x14) fcntl$auto(r1, 0x409, 0x40003f) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x9, @raw=0x7fff}}) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)=0x1000005) sendfile$auto(r5, r5, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0) 18.468440546s ago: executing program 34 (id=3719): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x549443, 0x14) fcntl$auto(r1, 0x409, 0x40003f) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x9, @raw=0x7fff}}) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)=0x1000005) sendfile$auto(r5, r5, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0) 11.671183601s ago: executing program 3 (id=3755): r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000200), 0xc0980, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440), 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) (async) accept$auto(r0, &(0x7f0000000240)=@l2={0x1f, 0x6, @any, 0x401}, &(0x7f0000000280)=0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) connect$auto(r2, &(0x7f00000001c0)=@in={0x2, 0x4e22, @empty}, 0x3ff) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x180881, 0x0) ioctl$auto_XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000100)={{0xb, 0x8001, 0x7, 0x2, 0x9, [0x2c5b25e5, 0xc3ea, 0x100000001, 0xc, 0x4]}, [{0x8, 0xa8e, 0x9, 0x2f}, {0x2, 0x5, 0x0, 0x4}, {0x9c, 0x9, 0x10, 0x5}]}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 32) mmap$auto(0x0, 0xffffffffffffffff, 0x7ff, 0x12, r3, 0x4) (rerun: 32) 11.640331425s ago: executing program 5 (id=3756): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) fcntl$auto_F_DUPFD_QUERY(r0, 0x403, 0x0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x80) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyva\x00', 0x8000, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x81, 0x3, 0x20000002, 0xd, 0x3, 0x2, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) mmap$auto(0x4, 0x10000, 0x4000000000e3, 0x11, 0xffffffffffffffff, 0x10008001) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000e284173287b1e375f3660a0a72b405004072bf911f6e4310885bdcace0691d6e803bb51d89487cd08c3370016095f71e24", @ANYRES16=r4, @ANYBLOB="050727bd7000fbdbdf256700000005002a01400000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) ioctl$auto(r2, 0x5607, 0xffffffffffffffff) (async) read$auto(r1, 0x0, 0xe8) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x5) (async) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40000000008000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 11.054618863s ago: executing program 3 (id=3759): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x1, 0x8, 0x7de3, @_sigfault={&(0x7f0000001500)="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", @_addr_bnd={"bf5ebccff544e092", &(0x7f0000000300)="b14640e0b63a8c37d32918065eaa659c7c49d3c555dcdc0919b5e68a9e28929a1df0a6a412959f102e76b33277f7a12265fc603e6a3a362f85387fe98da490de8a4ba6b6a6300620e93085f3656661cd55d46179a16264dd9c939d", &(0x7f0000000500)="f2781e51dc0f06a9c2534e388520a0d3d5b2aba90c80a0cb44be16c4421cac5f517e8bee8366afc278302fd82bd864820e7d8ad85969b8f0e3d4a8b1c58f41e38ed91db71721d3654b6891738ebe92fd279888396a7647481de0778e498bdddba68892c9d54ca4694ecf4129262ec4ee72419dbff7348b8e8e199784b77ef0bd2d993393416bb67d2375612ee3aba2b2d84f66ce0bd398b3bf9cfe819664a28235e0add12ee601012fa9287a9d1f7a55ebc003a9d6644ff9ca67825b17b9c9f0f2441f676f63598fcb"}}}}, 0x81, &(0x7f0000000180)={{0x2, 0x4}, {0xfffffffffffffffd}, 0x6, 0x9, 0x401, 0x200, 0x100000001, 0x51, 0x1, 0x3, 0xffff, 0x9, 0x3000000000000000, 0x400, 0x1, 0x7}) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f00000000c0)={@sival_int=0xe, @inferred=0xffffffffffffffff, 0x200, @_tid=r0}, &(0x7f0000000240)=0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/netdev_group\x00', 0xc0080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/88, 0x58) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/o2hb/live_regions\x00', 0x440400, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/smaps_rollup\x00', 0x240001, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000440)="f83126b81472cdf9fa5217fb3f038f2b87dd7daead381399f292b7acc18000c00a6415ff9f90cc272157ef45c8ef548045272fd5febc187a2d6b9a9305a7a7fa9e98d6b15790416bab926309304d611f4acee31f78afbac059d35d04935cb565073904ffbb3fec18") r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x96, 0x3, 0xffffffffffffffff, 0x8, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0xa, 0x801, 0x84) setsockopt$auto(r6, 0x10000000084, 0x14, 0x0, 0x9) mmap$auto(0x0, 0xa6e2, 0x4000020000df, 0x13, r5, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/zswap/parameters/zpool\x00', 0x69d01, 0x0) 9.577824037s ago: executing program 3 (id=3760): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) semctl$auto_GETZCNT(0x78d9, 0x8001, 0xf, 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8) prctl$auto_PR_GET_THP_DISABLE(0x2a, 0x8001, 0x0, 0xfffffffffffffffe, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) 8.691148681s ago: executing program 3 (id=3762): recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000f80)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x1, 0x80}, 0x8}, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x801, 0x100) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000180)={r1, 0x6, 0x6}, 0x6, 0x8) listen$auto(r2, 0x1004) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, 0x0, 0xffe) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x8, 0x23, 0x8) fsopen$auto(0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/25, 0x19) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f00000051c0)=""/103, 0x67) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES32=r3], 0x1354}}, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 8.688549644s ago: executing program 5 (id=3769): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/16, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) (async, rerun: 64) socket(0x25, 0x3, 0x2) (rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x502, 0x0) (rerun: 32) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) (async, rerun: 64) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4000000000000000, 0x8, 0xdf, 0xeb1, r1, 0x7ffe) (async) fsopen$auto(0x0, 0x1) (async, rerun: 64) socket(0xa, 0x5, 0x94) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) sysfs$auto(0x2, 0x100000000000007, 0x0) (async, rerun: 64) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, 0x0) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) 7.13050777s ago: executing program 5 (id=3764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09030700000000000000000000007a11471ed53c54c54e2e753a2ced5aa8020fe06bfc6a06263966f529a80f0e94df5727ae0b5a73c539c9fcba5346f7639b1fc3afbeff817cacbc304a8c2c96e8f4c6134fe0eb3eeae134c9d1ea9040f3c61448fdde31e1a90a44bd6f8c03cf9cc42a8d32523b12d53897e76bb220200d7df0d8f70a27d8605fb2c866"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x0, 0x948b, 0x1, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x3, 0x6d3c, 0x5, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x48000) unshare$auto(0x0) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000180)="855645071b014541a3f724a095131e71c76ad934ea234fe6e3eeba133f7207af3f8403960f404e229ff60f0b977e17bf64cdcaafca5f143635d3fe944155854c6722a44af7794f41", 0x5) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x7f, "4c83486dbb68c058fe4b2e12b91064cd57afad3b00", @inferred=0xffffffffffffffff}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f00000000c0)="9e8badde1bc279096492c7b21937c97bada71ed68be6889d5f88223da2dfed2375b65a23996135ceecdd0ea154eb7351ea7f1458c10a88871d524393849699aa684797505c910a46ad74931cc947930cdd48b209dcb104bce178c2fe4aa198c762e4af53cb83ed10ffabc768fcacb4d262030b7f8c45dc0a3880236a2767e9995ecffe8b3a9d2dbf23114bb7afeb71fc44faa64e2d76104f9417c4") read$auto(r6, 0x0, 0x20) madvise$auto(0x110c230000, 0x31ca, 0x9) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) 5.838684351s ago: executing program 1 (id=3766): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0) pread64$auto(r0, 0x0, 0x3f, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) open(&(0x7f0000000000)='./file0\x00', 0x163242, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0xfffffffffffffffc, 0x7, 0xffffffff, 0x2, "24229ba6405fe4fc8b79b54d7e17"}, 0x7ffd, 0xfffffff4, 0x2) (async, rerun: 32) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 32) r1 = open(0x0, 0x400, 0x10c) mmap$auto(0x0, 0x5, 0x40000033a, 0x16, r1, 0x3) (async) open(0x0, 0x1e1401, 0xe5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) (async) fsopen$auto(0x0, 0x1) (async) r2 = gettid() (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) (async) tkill$auto(r2, 0x7) (async) write$auto(0x3, 0x0, 0x100082) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) clone$auto(0x27ffe, 0x6f1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async, rerun: 64) getsockname$auto(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0xaea) (rerun: 64) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0xffffffffbfffff11, 0xffffffffffffffff, 0x300000000000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socketpair$auto(0xffffffff, 0x801, 0xfff, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) 5.283971777s ago: executing program 5 (id=3767): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0xfffffffa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0xffffffffffffffc0, 0x6, 0x0, 0x80009, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0xc, 0x5, 0x29a, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r2, 0x4, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0xc2, 0x5, r1, 0x6, 0x8) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) socket(0x2b, 0x3, 0xc6b8) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8040) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x1, 0x84) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183142, 0x0) 3.517970897s ago: executing program 5 (id=3768): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x1, 0x8, 0x7de3, @_sigfault={&(0x7f0000001500)="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", @_addr_bnd={"bf5ebccff544e092", &(0x7f0000000300)="b14640e0b63a8c37d32918065eaa659c7c49d3c555dcdc0919b5e68a9e28929a1df0a6a412959f102e76b33277f7a12265fc603e6a3a362f85387fe98da490de8a4ba6b6a6300620e93085f3656661cd55d46179a16264dd9c939d", &(0x7f0000000500)="f2781e51dc0f06a9c2534e388520a0d3d5b2aba90c80a0cb44be16c4421cac5f517e8bee8366afc278302fd82bd864820e7d8ad85969b8f0e3d4a8b1c58f41e38ed91db71721d3654b6891738ebe92fd279888396a7647481de0778e498bdddba68892c9d54ca4694ecf4129262ec4ee72419dbff7348b8e8e199784b77ef0bd2d993393416bb67d2375612ee3aba2b2d84f66ce0bd398b3bf9cfe819664a28235e0add12ee601012fa9287a9d1f7a55ebc003a9d6644ff9ca67825b17b9c9f0f2441f676f63598fcb"}}}}, 0x81, &(0x7f0000000180)={{0x2, 0x4}, {0xfffffffffffffffd}, 0x6, 0x9, 0x401, 0x200, 0x100000001, 0x51, 0x1, 0x3, 0xffff, 0x9, 0x3000000000000000, 0x400, 0x1, 0x7}) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f00000000c0)={@sival_int=0xe, @inferred=0xffffffffffffffff, 0x200, @_tid=r0}, &(0x7f0000000240)=0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/netdev_group\x00', 0xc0080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/88, 0x58) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/o2hb/live_regions\x00', 0x440400, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/smaps_rollup\x00', 0x240001, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000440)="f83126b81472cdf9fa5217fb3f038f2b87dd7daead381399f292b7acc18000c00a6415ff9f90cc272157ef45c8ef548045272fd5febc187a2d6b9a9305a7a7fa9e98d6b15790416bab926309304d611f4acee31f78afbac059d35d04935cb565073904ffbb3fec18") r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x96, 0x3, 0xffffffffffffffff, 0x8, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0xa, 0x801, 0x84) setsockopt$auto(r6, 0x10000000084, 0x14, 0x0, 0x9) mmap$auto(0x0, 0xa6e2, 0x4000020000df, 0x13, r5, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/zswap/parameters/zpool\x00', 0x69d01, 0x0) 3.511940374s ago: executing program 1 (id=3776): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x14, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x807d) r1 = accept$auto(0x3, 0x0, 0x0) setreuid$auto(0x9, 0x1) read$auto_fault_around_bytes_fops_(r1, &(0x7f0000000100)=""/4, 0x4) getpriority$auto(0x2, 0x9) socket(0x1, 0x1, 0x1) socket(0x2c, 0x80003, 0x0) mmap$auto(0x8, 0x8f, 0x7, 0x12, 0x5, 0x22000008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000940)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/errors\x00', 0x490606, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(0xffffffffffffffff, 0xc1004110, &(0x7f0000000140)={0x6, [0x2, 0x5, 0xcaa], [{0x40, 0xd, 0x1, 0x0, 0x1, 0x1}, {0x3f5b, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1000, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xffff0000, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x1, 0x1, 0x1}, {0x83ba, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x401, 0x0, 0x0, 0x1}, {0x40, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x1}, {0x7, 0x5, 0x0, 0x0, 0x1, 0x1}], 0x7, 0xfffffff2, 0xf49d, 0xffffff58, 0x7caa5717, 0x0, 0x4, "f9253b9bfb5bd2006d25c33b450a3d31f4843452718e953347fa0572c797f548b8b70a9872bdfd5988fb406f79f63d7cc919dc26fed0ad1215d2f824c8788fc1"}) 3.492060848s ago: executing program 3 (id=3777): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) semctl$auto_GETZCNT(0x78d9, 0x8001, 0xf, 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8) prctl$auto_PR_GET_THP_DISABLE(0x2a, 0x8001, 0x0, 0xfffffffffffffffe, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) 2.398207924s ago: executing program 1 (id=3770): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) semctl$auto_GETZCNT(0x78d9, 0x8001, 0xf, 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8) prctl$auto_PR_GET_THP_DISABLE(0x2a, 0x8001, 0x0, 0xfffffffffffffffe, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) 2.286919584s ago: executing program 3 (id=3771): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x8025, 0x1b, 0x0, 0x56b) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r3, 0x40085618, r3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/mm/ksm/pages_skipped\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000800)=""/184, 0xb8) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$auto_PR_GET_UNALIGN(0x5, 0xf6ec00000000000, 0x7, 0x2, 0x3) r6 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES16=0xffffffffffffffff, @ANYBLOB="00012cbd7000fcdbdf250a00000005000200000000000600010061c5000008000a000c000000060001005d00000008000a001803000006000100b438000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x0) socket(0x2b, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x1432a0091, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f0000000300)="48c9c499a9a55fc2a836723fb70537445460c9f0892a287c9eb350e6b7502695a40747d57c6d503a9321dfb65dfcdd31e011f135fea8b10f802afe673cf64aa66c9f61a38fcb31374ce2e32ab0609681ba696929e2d96bb3682b03969701b37156ff8b4721ea5f896578a106c1f2650052e1d1590d649f180185beeb9d020a557604128a5fd3fffe") ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000003c0)) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000032c0)=ANY=[@ANYBLOB="f42a0000", @ANYRES16=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="be9ce26741f0d78014aea1ba63545b193d3e759fb83cc737a74dd885919cd97315321c13b04278a4c3bf045886fa754719dcee0492bc2df6f04eff3f03f2e33ae316ed68fd1ad50be7faa180aeb77fc9456896ddfefaddc764d4fd549db495fee55aa6db8409afbe1aa3a5d2276a2e9112b31cb61a5b5078f9118fd06423f511ef41ff4fe5c155264f85c02eab40f410f49ea779b31279dc6a5715d849d7b008000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x2af4}, 0x1, 0x0, 0x0, 0x8841}, 0x4000090) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x80000000005, 0x7fff}, 0x1) read$auto(0xffffffffffffffff, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r8, &(0x7f0000000000)='\\@-,@n', 0x60) 1.525067269s ago: executing program 6 (id=3747): io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x2006, 0x6, 0x8c48, 0x29b, 0x7f, 0x7f, 0x4, 0x6}, {0x100, 0x1, 0x52, 0x8, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0xfffffffd}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYBLOB="54d10216c0a48bd669d4e8fbf7e5bd7df58a21f29456ec53730db773cab3b7be4902e0f4ebac44d4351708875712588574a367345088c2ff16262b364a0623dd2b9bb6b88b120baa4a9e2b2006732c11daced04c", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack/parameters/hashsize\x00', 0xa102, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0/accept_ra_mtu\x00', 0x385180, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd700002dcdf250200000004000800040008000808011004001080"], 0x24}, 0x1, 0x0, 0x0, 0x200008f0}, 0x800) r5 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r6 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r7 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) read$auto(r5, &(0x7f0000000200)='.}n-\x00', 0x8) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x1f, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) r8 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="320a1fdb23a090bfb2aefb28c3c63eb6673b1fc08902ce6702596f40d58ab32a4bc5e30201b8068f0dc9abbbfc35f91bce58e452b1ce4322c37ec2484952fc5e032db58e9cfd5fd4ad8d638cf4db6c4394648f2dd44dcd08e719edb6abc395d34fca338eb89a49ce89c0e7e29d2a46030574d54ea21ca2b46d063c5c7c95ea25908f142edc969be96c261374ddc2", @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="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"], 0x1250}, 0x1, 0x0, 0x0, 0x400c040}, 0x851) write$auto(r9, &(0x7f0000000340)='%]{\fZ', 0x100000000) ioctl$auto_tracing_buffers_fops_trace(r8, 0x5220, 0x0) 1.471957241s ago: executing program 5 (id=3772): io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x2006, 0x6, 0x8c48, 0x29b, 0x7f, 0x7f, 0x4, 0x6}, {0x100, 0x1, 0x52, 0x8, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0xfffffffd}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYBLOB="54d10216c0a48bd669d4e8fbf7e5bd7df58a21f29456ec53730db773cab3b7be4902e0f4ebac44d4351708875712588574a367345088c2ff16262b364a0623dd2b9bb6b88b120baa4a9e2b2006732c11daced04c", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c810) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack/parameters/hashsize\x00', 0xa102, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0/accept_ra_mtu\x00', 0x385180, 0x0) sendfile$auto(r2, r3, 0x0, 0x5b) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd700002dcdf250200000004000800040008000808011004001080"], 0x24}, 0x1, 0x0, 0x0, 0x200008f0}, 0x800) r6 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) read$auto(r6, &(0x7f0000000200)='.}n-\x00', 0x8) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x1f, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r8, &(0x7f0000000340)='%]{\fZ', 0x100000000) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x5220, 0x0) 1.347863282s ago: executing program 1 (id=3773): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x60002, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0) socket(0x2, 0x80002, 0x73) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x2, 0x0, 0x208) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$auto(r0, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) getpid() mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x400040, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x4) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) 871.357061ms ago: executing program 1 (id=3774): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) close_range$auto(0x2, 0x8, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/igmp6\x00', 0x101d41, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x240803, 0x0) read$auto_ptdump_curusr_fops_(r3, &(0x7f0000000100)=""/25, 0x19) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) pread64$auto(r3, &(0x7f0000000140)='\xcb\x91\x00', 0x8f2, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x1003f, 0x1c, 0x0) 0s ago: executing program 1 (id=3775): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x7, 0x0) r0 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r0}, &(0x7f0000000040)=0x9) r1 = set_tid_address$auto(&(0x7f0000000280)) get_robust_list$auto(r1, &(0x7f00000003c0)=&(0x7f0000000380)={{&(0x7f0000000300)={&(0x7f00000002c0)}}, 0x2, &(0x7f0000000340)}, &(0x7f0000000400)=0x40) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) waitid$auto_P_PGID(0x2, r0, &(0x7f00000000c0)={@siginfo_0_0={0xf2c, 0x5, 0xa, @_kill={r1, r2}}}, 0xb, &(0x7f0000000140)={{0xf, 0xb}, {0x9, 0x9}, 0x4, 0x0, 0xbe, 0x9, 0x9, 0x3, 0x4, 0x2, 0x5, 0x7, 0x6, 0x5, 0x5, 0xfffffffffffffffe}) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyt0\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) read$auto(0x3, 0x0, 0x80) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                             syzkaller syzkaller login: [ 990.798968][T21608] FAULT_INJECTION: forcing a failure. [ 990.798968][T21608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.868943][T21608] CPU: 0 UID: 0 PID: 21608 Comm: syz.1.3080 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 990.868984][T21608] Tainted: [U]=USER [ 990.868993][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 990.869007][T21608] Call Trace: [ 990.869015][T21608] [ 990.869025][T21608] dump_stack_lvl+0x16c/0x1f0 [ 990.869063][T21608] should_fail_ex+0x512/0x640 [ 990.869096][T21608] _copy_to_iter+0x2a4/0x15a0 [ 990.869131][T21608] ? chacha_block_generic+0x189/0x260 [ 990.869159][T21608] ? __pfx__copy_to_iter+0x10/0x10 [ 990.869195][T21608] ? lockdep_hardirqs_on+0x7c/0x110 [ 990.869227][T21608] ? crng_make_state+0x48e/0x6d0 [ 990.869259][T21608] get_random_bytes_user+0x17f/0x3c0 [ 990.869291][T21608] ? __pfx_get_random_bytes_user+0x10/0x10 [ 990.869326][T21608] ? do_futex+0x122/0x350 [ 990.869358][T21608] ? find_held_lock+0x2b/0x80 [ 990.869382][T21608] ? import_ubuf+0x1b6/0x220 [ 990.869413][T21608] __x64_sys_getrandom+0x183/0x290 [ 990.869444][T21608] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 990.869475][T21608] ? xfd_validate_state+0x5d/0x180 [ 990.869501][T21608] ? rcu_is_watching+0x12/0xc0 [ 990.869533][T21608] do_syscall_64+0xcd/0x230 [ 990.869570][T21608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.869594][T21608] RIP: 0033:0x7f209658e169 [ 990.869613][T21608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.869636][T21608] RSP: 002b:00007f20973a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 990.869658][T21608] RAX: ffffffffffffffda RBX: 00007f20967b5fa0 RCX: 00007f209658e169 [ 990.869675][T21608] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 990.869689][T21608] RBP: 00007f2096610a68 R08: 0000000000000000 R09: 0000000000000000 [ 990.869704][T21608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.869718][T21608] R13: 0000000000000000 R14: 00007f20967b5fa0 R15: 00007ffc40879bf8 [ 990.869747][T21608] [ 991.076671][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.126642][T21636] ubi: mtd0 is already attached to ubi0 [ 994.495974][T21648] FAULT_INJECTION: forcing a failure. [ 994.495974][T21648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.591937][T21648] CPU: 0 UID: 0 PID: 21648 Comm: syz.2.3091 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 994.591980][T21648] Tainted: [U]=USER [ 994.591988][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 994.592003][T21648] Call Trace: [ 994.592012][T21648] [ 994.592021][T21648] dump_stack_lvl+0x16c/0x1f0 [ 994.592062][T21648] should_fail_ex+0x512/0x640 [ 994.592095][T21648] _copy_to_iter+0x2a4/0x15a0 [ 994.592130][T21648] ? chacha_block_generic+0x189/0x260 [ 994.592158][T21648] ? __pfx__copy_to_iter+0x10/0x10 [ 994.592193][T21648] ? lockdep_hardirqs_on+0x7c/0x110 [ 994.592226][T21648] ? crng_make_state+0x48e/0x6d0 [ 994.592258][T21648] get_random_bytes_user+0x17f/0x3c0 [ 994.592288][T21648] ? __pfx_get_random_bytes_user+0x10/0x10 [ 994.592324][T21648] ? do_futex+0x122/0x350 [ 994.592355][T21648] ? fd_install+0x225/0x750 [ 994.592378][T21648] ? import_ubuf+0x1b6/0x220 [ 994.592408][T21648] __x64_sys_getrandom+0x183/0x290 [ 994.592452][T21648] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 994.592484][T21648] ? xfd_validate_state+0x5d/0x180 [ 994.592511][T21648] ? rcu_is_watching+0x12/0xc0 [ 994.592543][T21648] do_syscall_64+0xcd/0x230 [ 994.592580][T21648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.592604][T21648] RIP: 0033:0x7f4eb538e169 [ 994.592623][T21648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.592647][T21648] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 994.592669][T21648] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 994.592685][T21648] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 994.592699][T21648] RBP: 00007f4eb5410a68 R08: 0000000000000000 R09: 0000000000000000 [ 994.592714][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.592728][T21648] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 994.592757][T21648] [ 996.733858][T21683] FAULT_INJECTION: forcing a failure. [ 996.733858][T21683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.761689][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 996.834672][T21683] CPU: 0 UID: 0 PID: 21683 Comm: syz.4.3102 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 996.834713][T21683] Tainted: [U]=USER [ 996.834721][T21683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 996.834736][T21683] Call Trace: [ 996.834744][T21683] [ 996.834754][T21683] dump_stack_lvl+0x16c/0x1f0 [ 996.834793][T21683] should_fail_ex+0x512/0x640 [ 996.834826][T21683] _copy_to_iter+0x2a4/0x15a0 [ 996.834861][T21683] ? chacha_block_generic+0x189/0x260 [ 996.834889][T21683] ? __pfx__copy_to_iter+0x10/0x10 [ 996.834925][T21683] ? __pfx___might_resched+0x10/0x10 [ 996.834952][T21683] ? crng_make_state+0x48e/0x6d0 [ 996.834984][T21683] get_random_bytes_user+0x17f/0x3c0 [ 996.835015][T21683] ? __pfx_get_random_bytes_user+0x10/0x10 [ 996.835052][T21683] ? do_futex+0x122/0x350 [ 996.835083][T21683] ? fd_install+0x225/0x750 [ 996.835106][T21683] ? import_ubuf+0x1b6/0x220 [ 996.835137][T21683] __x64_sys_getrandom+0x183/0x290 [ 996.835169][T21683] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 996.835209][T21683] ? xfd_validate_state+0x5d/0x180 [ 996.835236][T21683] ? rcu_is_watching+0x12/0xc0 [ 996.835268][T21683] do_syscall_64+0xcd/0x230 [ 996.835306][T21683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.835330][T21683] RIP: 0033:0x7f676f58e169 [ 996.835349][T21683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.835373][T21683] RSP: 002b:00007f67703eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 996.835396][T21683] RAX: ffffffffffffffda RBX: 00007f676f7b5fa0 RCX: 00007f676f58e169 [ 996.835412][T21683] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 996.835427][T21683] RBP: 00007f676f610a68 R08: 0000000000000000 R09: 0000000000000000 [ 996.835442][T21683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.835457][T21683] R13: 0000000000000000 R14: 00007f676f7b5fa0 R15: 00007ffe9623ae68 [ 996.835486][T21683] [ 997.036204][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.089056][T21686] Invalid ELF header magic: != ELF [ 997.348939][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 998.175483][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.182018][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.729926][T21703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 998.771869][T21703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 998.822973][T21703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 998.881168][T21703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1000.217303][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 1000.323241][T21743] FAULT_INJECTION: forcing a failure. [ 1000.323241][T21743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.336572][T20807] Bluetooth: hci4: command 0x0406 tx timeout [ 1000.414562][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.4.3111 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1000.414604][T21743] Tainted: [U]=USER [ 1000.414612][T21743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1000.414626][T21743] Call Trace: [ 1000.414634][T21743] [ 1000.414645][T21743] dump_stack_lvl+0x16c/0x1f0 [ 1000.414684][T21743] should_fail_ex+0x512/0x640 [ 1000.414717][T21743] _copy_to_iter+0x2a4/0x15a0 [ 1000.414759][T21743] ? chacha_block_generic+0x189/0x260 [ 1000.414787][T21743] ? __pfx__copy_to_iter+0x10/0x10 [ 1000.414824][T21743] ? __pfx___might_resched+0x10/0x10 [ 1000.414852][T21743] ? crng_make_state+0x48e/0x6d0 [ 1000.414883][T21743] get_random_bytes_user+0x17f/0x3c0 [ 1000.414915][T21743] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1000.414950][T21743] ? do_futex+0x122/0x350 [ 1000.414980][T21743] ? fd_install+0x225/0x750 [ 1000.415003][T21743] ? import_ubuf+0x1b6/0x220 [ 1000.415034][T21743] __x64_sys_getrandom+0x183/0x290 [ 1000.415065][T21743] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1000.415097][T21743] ? xfd_validate_state+0x5d/0x180 [ 1000.415123][T21743] ? rcu_is_watching+0x12/0xc0 [ 1000.415156][T21743] do_syscall_64+0xcd/0x230 [ 1000.415193][T21743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.415217][T21743] RIP: 0033:0x7f676f58e169 [ 1000.415236][T21743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.415260][T21743] RSP: 002b:00007f67703eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1000.415282][T21743] RAX: ffffffffffffffda RBX: 00007f676f7b5fa0 RCX: 00007f676f58e169 [ 1000.415299][T21743] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1000.415314][T21743] RBP: 00007f676f610a68 R08: 0000000000000000 R09: 0000000000000000 [ 1000.415328][T21743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.415343][T21743] R13: 0000000000000000 R14: 00007f676f7b5fa0 R15: 00007ffe9623ae68 [ 1000.415372][T21743] [ 1000.616325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.919467][T20807] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.925745][T20807] Bluetooth: hci0: command 0x0406 tx timeout [ 1000.984245][T20804] Bluetooth: hci1: command 0x0406 tx timeout [ 1003.854346][T21796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 1005.357578][ T30] audit: type=1804 audit(4294968913.081:26): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3130" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1005.381650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.700128][T21843] FAULT_INJECTION: forcing a failure. [ 1006.700128][T21843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.766147][T21843] CPU: 0 UID: 0 PID: 21843 Comm: syz.1.3134 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1006.766189][T21843] Tainted: [U]=USER [ 1006.766198][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1006.766213][T21843] Call Trace: [ 1006.766221][T21843] [ 1006.766230][T21843] dump_stack_lvl+0x16c/0x1f0 [ 1006.766276][T21843] should_fail_ex+0x512/0x640 [ 1006.766309][T21843] _copy_to_iter+0x2a4/0x15a0 [ 1006.766345][T21843] ? chacha_block_generic+0x189/0x260 [ 1006.766373][T21843] ? __pfx__copy_to_iter+0x10/0x10 [ 1006.766410][T21843] ? __pfx___might_resched+0x10/0x10 [ 1006.766437][T21843] ? crng_make_state+0x48e/0x6d0 [ 1006.766470][T21843] get_random_bytes_user+0x17f/0x3c0 [ 1006.766501][T21843] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1006.766528][T21843] ? do_writev+0x218/0x330 [ 1006.766556][T21843] ? do_futex+0x122/0x350 [ 1006.766591][T21843] ? import_ubuf+0x1b6/0x220 [ 1006.766621][T21843] __x64_sys_getrandom+0x183/0x290 [ 1006.766653][T21843] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1006.766684][T21843] ? xfd_validate_state+0x5d/0x180 [ 1006.766711][T21843] ? rcu_is_watching+0x12/0xc0 [ 1006.766743][T21843] do_syscall_64+0xcd/0x230 [ 1006.766779][T21843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.766803][T21843] RIP: 0033:0x7f209658e169 [ 1006.766822][T21843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.766845][T21843] RSP: 002b:00007f20973a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1006.766868][T21843] RAX: ffffffffffffffda RBX: 00007f20967b5fa0 RCX: 00007f209658e169 [ 1006.766884][T21843] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1006.766899][T21843] RBP: 00007f2096610a68 R08: 0000000000000000 R09: 0000000000000000 [ 1006.766913][T21843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.766927][T21843] R13: 0000000000000000 R14: 00007f20967b5fa0 R15: 00007ffc40879bf8 [ 1006.766956][T21843] [ 1006.966638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.461552][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1008.095710][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1008.732537][T21873] bond0: (slave bond_slave_1): Releasing backup interface [ 1009.221112][ T30] audit: type=1800 audit(4294968924.946:27): pid=21884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3144" name="version" dev="configfs" ino=80557 res=0 errno=0 [ 1010.420907][T21881] kexec: Could not allocate control_code_buffer syzkaller syzkaller login: [ 1011.290853][T21916] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1012.132072][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'. [ 1014.515889][T21972] delete_channel: no stack [ 1014.859719][T21986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1014.870837][T21983] netlink: 'syz.1.3168': attribute type 11 has an invalid length. [ 1014.912262][T21983] netlink: 'syz.1.3168': attribute type 11 has an invalid length. [ 1014.957907][T21983] netlink: 'syz.1.3168': attribute type 11 has an invalid length. [ 1016.411764][T22005] CIFS mount error: No usable UNC path provided in device string! [ 1016.411764][T22005] [ 1016.623317][T22005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1020.183630][T22046] program syz.1.3181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1022.361509][T22088] sd 0:0:1:0: PR command failed: 1026 [ 1022.399596][T22088] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1022.444160][T22088] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1025.088016][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1025.133302][T22119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.374127][T22119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.217476][T22140] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1028.906513][T22164] misc userio: No port type given on /dev/userio [ 1029.003320][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 1034.827405][T22220] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 1035.071659][T22223] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1035.171897][T22222] Invalid ELF header magic: != ELF [ 1036.196769][T22239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3223'. [ 1038.615323][T22273] FAULT_INJECTION: forcing a failure. [ 1038.615323][T22273] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.709239][T22273] CPU: 0 UID: 0 PID: 22273 Comm: syz.1.3232 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1038.709302][T22273] Tainted: [U]=USER [ 1038.709311][T22273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1038.709326][T22273] Call Trace: [ 1038.709334][T22273] [ 1038.709343][T22273] dump_stack_lvl+0x16c/0x1f0 [ 1038.709382][T22273] should_fail_ex+0x512/0x640 [ 1038.709411][T22273] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1038.709444][T22273] should_failslab+0xc2/0x120 [ 1038.709476][T22273] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1038.709506][T22273] ? __d_alloc+0x31/0xaa0 [ 1038.709536][T22273] __d_alloc+0x31/0xaa0 [ 1038.709561][T22273] ? security_inode_alloc+0x3b/0x2b0 [ 1038.709591][T22273] d_alloc_pseudo+0x1c/0xc0 [ 1038.709624][T22273] alloc_file_pseudo+0xcf/0x230 [ 1038.709659][T22273] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1038.709700][T22273] __anon_inode_getfile+0xf7/0x370 [ 1038.709729][T22273] io_uring_setup+0x14cf/0x1ff0 [ 1038.709757][T22273] ? __pfx_io_uring_setup+0x10/0x10 [ 1038.709789][T22273] ? find_held_lock+0x2b/0x80 [ 1038.709826][T22273] ? rcu_is_watching+0x12/0xc0 [ 1038.709855][T22273] __x64_sys_io_uring_setup+0xc2/0x170 [ 1038.709883][T22273] do_syscall_64+0xcd/0x230 [ 1038.709919][T22273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.709944][T22273] RIP: 0033:0x7f209658e169 [ 1038.709963][T22273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.709988][T22273] RSP: 002b:00007f2097386038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1038.710011][T22273] RAX: ffffffffffffffda RBX: 00007f20967b6080 RCX: 00007f209658e169 [ 1038.710027][T22273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1038.710042][T22273] RBP: 00007f2096610a68 R08: 0000000000000000 R09: 0000000000000000 [ 1038.710057][T22273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.710071][T22273] R13: 0000000000000000 R14: 00007f20967b6080 R15: 00007ffc40879bf8 [ 1038.710100][T22273] [ 1040.111326][T22279] FAULT_INJECTION: forcing a failure. [ 1040.111326][T22279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1040.170654][T22279] CPU: 0 UID: 0 PID: 22279 Comm: syz.4.3233 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1040.170695][T22279] Tainted: [U]=USER [ 1040.170704][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1040.170719][T22279] Call Trace: [ 1040.170727][T22279] [ 1040.170736][T22279] dump_stack_lvl+0x16c/0x1f0 [ 1040.170775][T22279] should_fail_ex+0x512/0x640 [ 1040.170809][T22279] should_fail_alloc_page+0xe7/0x130 [ 1040.170844][T22279] prepare_alloc_pages+0x3c2/0x610 [ 1040.170883][T22279] ? __mod_memcg_lruvec_state+0x533/0x760 [ 1040.170910][T22279] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1040.170946][T22279] ? folio_remove_rmap_ptes+0x138/0x970 [ 1040.170972][T22279] ? noop_dirty_folio+0x96/0xb0 [ 1040.171012][T22279] ? try_to_migrate_one+0x13d8/0x3380 [ 1040.171039][T22279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1040.171086][T22279] ? __up_read+0x1f8/0x750 [ 1040.171120][T22279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1040.171157][T22279] ? policy_nodemask+0xea/0x4e0 [ 1040.171191][T22279] alloc_pages_mpol+0x1fb/0x550 [ 1040.171231][T22279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1040.171261][T22279] ? rmap_walk_anon+0x503/0x710 [ 1040.171291][T22279] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1040.171329][T22279] alloc_migration_target_by_mpol+0x246/0x490 [ 1040.171368][T22279] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1040.171405][T22279] ? __pfx_invalid_migration_vma+0x10/0x10 [ 1040.171442][T22279] ? __pfx___might_resched+0x10/0x10 [ 1040.171471][T22279] ? folio_get_anon_vma+0xdd/0x760 [ 1040.171501][T22279] migrate_pages_batch+0x3bc/0x31a0 [ 1040.171542][T22279] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1040.171589][T22279] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1040.171630][T22279] ? __pfx_walk_pgd_range+0x10/0x10 [ 1040.171664][T22279] migrate_pages_sync+0x12d/0x8a0 [ 1040.171701][T22279] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1040.171743][T22279] ? queue_pages_test_walk+0x279/0x410 [ 1040.171776][T22279] ? __pfx_find_vma+0x10/0x10 [ 1040.171810][T22279] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1040.171846][T22279] ? walk_page_test+0x9b/0x180 [ 1040.171878][T22279] ? walk_page_range_mm+0x269/0x8a0 [ 1040.171915][T22279] migrate_pages+0x1b28/0x2350 [ 1040.171953][T22279] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1040.171998][T22279] ? __pfx_migrate_pages+0x10/0x10 [ 1040.172037][T22279] ? find_held_lock+0x2b/0x80 [ 1040.172069][T22279] ? up_write+0x1b2/0x520 [ 1040.172106][T22279] do_mbind+0x6f0/0xf30 [ 1040.172150][T22279] ? __pfx_do_mbind+0x10/0x10 [ 1040.172184][T22279] ? lock_vma_under_rcu+0x47d/0x970 [ 1040.172231][T22279] ? lock_vma_under_rcu+0x47d/0x970 [ 1040.172282][T22279] ? __pfx_get_nodes+0x10/0x10 [ 1040.172317][T22279] kernel_mbind+0x1e3/0x1f0 [ 1040.172356][T22279] ? __pfx_kernel_mbind+0x10/0x10 [ 1040.172391][T22279] ? rcu_is_watching+0x12/0xc0 [ 1040.172422][T22279] do_syscall_64+0xcd/0x230 [ 1040.172459][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.172484][T22279] RIP: 0033:0x7f676f58e169 [ 1040.172502][T22279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.172526][T22279] RSP: 002b:00007f67703ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1040.172549][T22279] RAX: ffffffffffffffda RBX: 00007f676f7b6080 RCX: 00007f676f58e169 [ 1040.172565][T22279] RDX: 0000000100000000 RSI: 0000000100000004 RDI: 0000000000000000 [ 1040.172580][T22279] RBP: 00007f676f610a68 R08: 0000000000000006 R09: 0000000000000002 [ 1040.172595][T22279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.172610][T22279] R13: 0000000000000000 R14: 00007f676f7b6080 R15: 00007ffe9623ae68 [ 1040.172640][T22279] [ 1044.006650][T22323] FAULT_INJECTION: forcing a failure. [ 1044.006650][T22323] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.055917][T22323] CPU: 0 UID: 0 PID: 22323 Comm: syz.2.3244 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1044.055958][T22323] Tainted: [U]=USER [ 1044.055967][T22323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1044.055982][T22323] Call Trace: [ 1044.055990][T22323] [ 1044.055999][T22323] dump_stack_lvl+0x16c/0x1f0 [ 1044.056042][T22323] should_fail_ex+0x512/0x640 [ 1044.056071][T22323] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1044.056104][T22323] should_failslab+0xc2/0x120 [ 1044.056136][T22323] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1044.056163][T22323] ? __proc_create+0xc3/0x8c0 [ 1044.056191][T22323] ? __proc_create+0x2ce/0x8c0 [ 1044.056223][T22323] __proc_create+0x2ce/0x8c0 [ 1044.056252][T22323] ? __pfx___proc_create+0x10/0x10 [ 1044.056285][T22323] ? _raw_write_unlock+0x28/0x50 [ 1044.056316][T22323] ? proc_register+0x314/0x5f0 [ 1044.056347][T22323] proc_create_reg+0x7d/0x180 [ 1044.056378][T22323] ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10 [ 1044.056411][T22323] proc_create_net_single+0x86/0x170 [ 1044.056441][T22323] ? __pfx_proc_create_net_single+0x10/0x10 [ 1044.056481][T22323] can_init_proc+0x319/0x4d0 [ 1044.056511][T22323] can_pernet_init+0x1e4/0x370 [ 1044.056540][T22323] ? __pfx_can_pernet_init+0x10/0x10 [ 1044.056567][T22323] ops_init+0x1df/0x5f0 [ 1044.056604][T22323] setup_net+0x21e/0x850 [ 1044.056640][T22323] ? __pfx_setup_net+0x10/0x10 [ 1044.056678][T22323] ? lockdep_init_map_type+0x5c/0x280 [ 1044.056715][T22323] ? __pfx_down_read_killable+0x10/0x10 [ 1044.056742][T22323] ? debug_mutex_init+0x37/0x70 [ 1044.056769][T22323] copy_net_ns+0x2a6/0x5f0 [ 1044.056809][T22323] create_new_namespaces+0x3ea/0xad0 [ 1044.056845][T22323] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1044.056877][T22323] ksys_unshare+0x45b/0xa40 [ 1044.056912][T22323] ? __pfx_ksys_unshare+0x10/0x10 [ 1044.056944][T22323] ? xfd_validate_state+0x5d/0x180 [ 1044.056970][T22323] ? syscall_user_dispatch+0x78/0x140 [ 1044.057015][T22323] __x64_sys_unshare+0x31/0x40 [ 1044.057048][T22323] do_syscall_64+0xcd/0x230 [ 1044.057085][T22323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.057109][T22323] RIP: 0033:0x7f4eb538e169 [ 1044.057128][T22323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.057151][T22323] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1044.057174][T22323] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 1044.057190][T22323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1044.057205][T22323] RBP: 00007f4eb5410a68 R08: 0000000000000000 R09: 0000000000000000 [ 1044.057220][T22323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.057234][T22323] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 1044.057264][T22323] [ 1044.335945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.748015][T22328] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3245'. [ 1045.228204][T22345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 1048.270642][T22385] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1049.477267][T20807] Bluetooth: hci4: Unable to find connection for big 0xd2 [ 1051.344683][ T30] audit: type=1326 audit(4294968967.066:28): auid=4294967295 uid=0 gid=2048 ses=4294967295 subj=unconfined pid=22430 comm="syz.4.3265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f676f58e169 code=0x0 [ 1051.647274][ T30] audit: type=1326 audit(4294968967.366:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.4.3265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f676f58e169 code=0x0 [ 1053.740414][T22463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1055.163469][T22479] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3276'. [ 1059.038363][T20807] Bluetooth: hci2: unexpected subevent 0x19 length: 252 > 28 [ 1059.045836][T20807] Bluetooth: hci2: Unable to find connection with handle 0xc3d2 [ 1059.614545][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.621019][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.016415][T22537] Invalid ELF header magic: != ELF [ 1063.008622][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1063.267945][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1065.830400][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 1074.279844][T22689] HfR: entered promiscuous mode [ 1074.351590][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1074.366932][T22678] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 1074.441148][T22691] device-mapper: ioctl: Unable to rename non-existent device,  to [ 1074.591303][T22689] HfR: left promiscuous mode [ 1079.283702][T22743] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3333'. [ 1079.359278][T22743] veth1_macvtap: left promiscuous mode [ 1083.588080][T22775] FAULT_INJECTION: forcing a failure. [ 1083.588080][T22775] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.657290][T22775] CPU: 0 UID: 0 PID: 22775 Comm: syz.2.3340 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1083.657333][T22775] Tainted: [U]=USER [ 1083.657341][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1083.657356][T22775] Call Trace: [ 1083.657364][T22775] [ 1083.657374][T22775] dump_stack_lvl+0x16c/0x1f0 [ 1083.657414][T22775] should_fail_ex+0x512/0x640 [ 1083.657442][T22775] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1083.657475][T22775] should_failslab+0xc2/0x120 [ 1083.657507][T22775] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1083.657537][T22775] ? security_file_alloc+0x34/0x2b0 [ 1083.657575][T22775] security_file_alloc+0x34/0x2b0 [ 1083.657607][T22775] init_file+0x93/0x4c0 [ 1083.657639][T22775] alloc_empty_file+0x73/0x1e0 [ 1083.657672][T22775] path_openat+0xe0/0x2d40 [ 1083.657695][T22775] ? __x64_sys_openat+0x174/0x210 [ 1083.657728][T22775] ? do_syscall_64+0xcd/0x230 [ 1083.657761][T22775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.657795][T22775] ? __pfx_path_openat+0x10/0x10 [ 1083.657828][T22775] do_filp_open+0x20b/0x470 [ 1083.657853][T22775] ? __pfx_do_filp_open+0x10/0x10 [ 1083.657899][T22775] ? alloc_fd+0x471/0x7d0 [ 1083.657929][T22775] do_sys_openat2+0x11b/0x1d0 [ 1083.657962][T22775] ? __pfx_do_sys_openat2+0x10/0x10 [ 1083.657996][T22775] ? find_held_lock+0x2b/0x80 [ 1083.658029][T22775] __x64_sys_openat+0x174/0x210 [ 1083.658072][T22775] ? __pfx___x64_sys_openat+0x10/0x10 [ 1083.658109][T22775] ? rcu_is_watching+0x12/0xc0 [ 1083.658141][T22775] do_syscall_64+0xcd/0x230 [ 1083.658178][T22775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.658202][T22775] RIP: 0033:0x7f4eb538e169 [ 1083.658221][T22775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.658245][T22775] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1083.658268][T22775] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 1083.658284][T22775] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1083.658299][T22775] RBP: 00007f4eb5410a68 R08: 0000000000000000 R09: 0000000000000000 [ 1083.658318][T22775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.658333][T22775] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 1083.658361][T22775] [ 1085.639120][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1085.843231][T22810] delete_channel: no stack [ 1086.713098][T22834] FAULT_INJECTION: forcing a failure. [ 1086.713098][T22834] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.862851][T22837] FAULT_INJECTION: forcing a failure. [ 1086.862851][T22837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.943804][T22837] CPU: 0 UID: 0 PID: 22837 Comm: syz.1.3353 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1086.943845][T22837] Tainted: [U]=USER [ 1086.943853][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1086.943867][T22837] Call Trace: [ 1086.943875][T22837] [ 1086.943884][T22837] dump_stack_lvl+0x16c/0x1f0 [ 1086.943922][T22837] should_fail_ex+0x512/0x640 [ 1086.943954][T22837] _copy_from_user+0x2e/0xd0 [ 1086.943986][T22837] move_addr_to_kernel+0x65/0x170 [ 1086.944013][T22837] __sys_sendto+0x1be/0x510 [ 1086.944042][T22837] ? __pfx___sys_sendto+0x10/0x10 [ 1086.944093][T22837] ? ksys_write+0x1b9/0x240 [ 1086.944118][T22837] ? __pfx_ksys_write+0x10/0x10 [ 1086.944140][T22837] ? rcu_is_watching+0x12/0xc0 [ 1086.944168][T22837] __x64_sys_sendto+0xe0/0x1c0 [ 1086.944194][T22837] ? do_syscall_64+0x91/0x230 [ 1086.944228][T22837] ? lockdep_hardirqs_on+0x7c/0x110 [ 1086.944260][T22837] do_syscall_64+0xcd/0x230 [ 1086.944295][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.944320][T22837] RIP: 0033:0x7f209658e169 [ 1086.944337][T22837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.944360][T22837] RSP: 002b:00007f20973a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1086.944382][T22837] RAX: ffffffffffffffda RBX: 00007f20967b5fa0 RCX: 00007f209658e169 [ 1086.944398][T22837] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000003 [ 1086.944412][T22837] RBP: 00007f20973a7090 R08: 0000200000000440 R09: 0000000000000022 [ 1086.944427][T22837] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 1086.944441][T22837] R13: 0000000000000000 R14: 00007f20967b5fa0 R15: 00007ffc40879bf8 [ 1086.944470][T22837] [ 1087.317569][T22834] CPU: 0 UID: 0 PID: 22834 Comm: syz.2.3349 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1087.317612][T22834] Tainted: [U]=USER [ 1087.317621][T22834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1087.317635][T22834] Call Trace: [ 1087.317643][T22834] [ 1087.317652][T22834] dump_stack_lvl+0x16c/0x1f0 [ 1087.317691][T22834] should_fail_ex+0x512/0x640 [ 1087.317727][T22834] ? __kmalloc_noprof+0xbf/0x510 [ 1087.317757][T22834] ? sk_prot_alloc+0x1a8/0x2a0 [ 1087.317793][T22834] should_failslab+0xc2/0x120 [ 1087.317825][T22834] __kmalloc_noprof+0xd2/0x510 [ 1087.317860][T22834] sk_prot_alloc+0x1a8/0x2a0 [ 1087.317899][T22834] sk_alloc+0x36/0xc20 [ 1087.317929][T22834] __netlink_create+0x5e/0x2c0 [ 1087.317955][T22834] ? __wake_up+0x3f/0x60 [ 1087.317986][T22834] netlink_create+0x39e/0x620 [ 1087.318019][T22834] ? __pfx_genl_bind+0x10/0x10 [ 1087.318053][T22834] ? __pfx_genl_unbind+0x10/0x10 [ 1087.318088][T22834] ? __pfx_genl_release+0x10/0x10 [ 1087.318112][T22834] __sock_create+0x335/0x8d0 [ 1087.318140][T22834] __sys_socket+0x14d/0x260 [ 1087.318164][T22834] ? __pfx___sys_socket+0x10/0x10 [ 1087.318190][T22834] ? do_user_addr_fault+0x843/0x1370 [ 1087.318221][T22834] __x64_sys_socket+0x72/0xb0 [ 1087.318244][T22834] ? lockdep_hardirqs_on+0x7c/0x110 [ 1087.318277][T22834] do_syscall_64+0xcd/0x230 [ 1087.318313][T22834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.318340][T22834] RIP: 0033:0x7f4eb5390087 [ 1087.318359][T22834] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.318383][T22834] RSP: 002b:00007f4eb6171fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1087.318405][T22834] RAX: ffffffffffffffda RBX: 00007f4eb55b6240 RCX: 00007f4eb5390087 [ 1087.318422][T22834] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1087.318437][T22834] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1087.318451][T22834] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 1087.318466][T22834] R13: 0000000000000000 R14: 00007f4eb55b6240 R15: 00007ffcfc90d5e8 [ 1087.318495][T22834] [ 1089.332229][T22851] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1089.495521][T22849] block2mtd: error: cannot open device [ 1089.550097][T22855] busy [ 1092.043649][T22883] kernel read not supported for file /set_event_notrace_pid (pid: 22883 comm: syz.4.3363) [ 1092.187322][ T30] audit: type=1800 audit(4294969007.906:30): pid=22883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3363" name="set_event_notrace_pid" dev="tracefs" ino=1074 res=0 errno=0 [ 1092.358388][T20807] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 1095.114042][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 1099.118783][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1099.731153][T22933] Invalid ELF header magic: != ELF [ 1102.368039][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 1103.554473][T22993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1103.922311][T22993] bond0: (slave bond_slave_1): Releasing backup interface [ 1104.400751][T23007] FAULT_INJECTION: forcing a failure. [ 1104.400751][T23007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.497312][T23007] CPU: 0 UID: 0 PID: 23007 Comm: syz.4.3393 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1104.497353][T23007] Tainted: [U]=USER [ 1104.497361][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1104.497376][T23007] Call Trace: [ 1104.497384][T23007] [ 1104.497394][T23007] dump_stack_lvl+0x16c/0x1f0 [ 1104.497433][T23007] should_fail_ex+0x512/0x640 [ 1104.497465][T23007] _copy_to_user+0x32/0xd0 [ 1104.497498][T23007] simple_read_from_buffer+0xcb/0x170 [ 1104.497538][T23007] proc_fail_nth_read+0x197/0x270 [ 1104.497575][T23007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1104.497612][T23007] ? rw_verify_area+0xcf/0x680 [ 1104.497647][T23007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1104.497682][T23007] vfs_read+0x1de/0xc70 [ 1104.497709][T23007] ? __pfx___mutex_lock+0x10/0x10 [ 1104.497743][T23007] ? __pfx_vfs_read+0x10/0x10 [ 1104.497774][T23007] ? __fget_files+0x20e/0x3c0 [ 1104.497805][T23007] ksys_read+0x12a/0x240 [ 1104.497828][T23007] ? __pfx_ksys_read+0x10/0x10 [ 1104.497850][T23007] ? rcu_is_watching+0x12/0xc0 [ 1104.497890][T23007] do_syscall_64+0xcd/0x230 [ 1104.497926][T23007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.497950][T23007] RIP: 0033:0x7f676f58cb7c [ 1104.497968][T23007] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1104.497991][T23007] RSP: 002b:00007f67703eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1104.498013][T23007] RAX: ffffffffffffffda RBX: 00007f676f7b5fa0 RCX: 00007f676f58cb7c [ 1104.498029][T23007] RDX: 000000000000000f RSI: 00007f67703eb0a0 RDI: 0000000000000005 [ 1104.498043][T23007] RBP: 00007f67703eb090 R08: 0000000000000000 R09: 0000000000000022 [ 1104.498057][T23007] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 1104.498072][T23007] R13: 0000000000000000 R14: 00007f676f7b5fa0 R15: 00007ffe9623ae68 [ 1104.498101][T23007] [ 1104.698900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.817811][T23008] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1105.902271][T23019] FAULT_INJECTION: forcing a failure. [ 1105.902271][T23019] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.021978][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.4.3396 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1106.022021][T23019] Tainted: [U]=USER [ 1106.022029][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1106.022044][T23019] Call Trace: [ 1106.022053][T23019] [ 1106.022063][T23019] dump_stack_lvl+0x16c/0x1f0 [ 1106.022102][T23019] should_fail_ex+0x512/0x640 [ 1106.022132][T23019] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1106.022165][T23019] should_failslab+0xc2/0x120 [ 1106.022197][T23019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1106.022225][T23019] ? __proc_create+0xc3/0x8c0 [ 1106.022253][T23019] ? __proc_create+0x2ce/0x8c0 [ 1106.022284][T23019] __proc_create+0x2ce/0x8c0 [ 1106.022313][T23019] ? __pfx___proc_create+0x10/0x10 [ 1106.022345][T23019] ? _raw_write_unlock+0x28/0x50 [ 1106.022376][T23019] ? proc_register+0x314/0x5f0 [ 1106.022408][T23019] proc_create_reg+0x7d/0x180 [ 1106.022438][T23019] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 1106.022468][T23019] proc_create_net_single+0x86/0x170 [ 1106.022499][T23019] ? __pfx_proc_create_net_single+0x10/0x10 [ 1106.022530][T23019] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1106.022573][T23019] fib_proc_init+0xa3/0x1b0 [ 1106.022603][T23019] fib_net_init+0x2af/0x3f0 [ 1106.022635][T23019] ? __pfx___register_sysctl_table+0x10/0x10 [ 1106.022665][T23019] ? __pfx_fib_net_init+0x10/0x10 [ 1106.022697][T23019] ? lockdep_init_map_type+0x5c/0x280 [ 1106.022732][T23019] ? __pfx_nl_fib_input+0x10/0x10 [ 1106.022769][T23019] ? devinet_init_net+0x5c2/0x910 [ 1106.022815][T23019] ? __pfx_fib_net_init+0x10/0x10 [ 1106.022846][T23019] ops_init+0x1df/0x5f0 [ 1106.022883][T23019] setup_net+0x21e/0x850 [ 1106.022921][T23019] ? __pfx_setup_net+0x10/0x10 [ 1106.022953][T23019] ? lockdep_init_map_type+0x5c/0x280 [ 1106.022988][T23019] ? __pfx_down_read_killable+0x10/0x10 [ 1106.023017][T23019] ? debug_mutex_init+0x37/0x70 [ 1106.023044][T23019] copy_net_ns+0x2a6/0x5f0 [ 1106.023084][T23019] create_new_namespaces+0x3ea/0xad0 [ 1106.023121][T23019] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1106.023153][T23019] ksys_unshare+0x45b/0xa40 [ 1106.023188][T23019] ? __pfx_ksys_unshare+0x10/0x10 [ 1106.023221][T23019] ? xfd_validate_state+0x5d/0x180 [ 1106.023247][T23019] ? rcu_is_watching+0x12/0xc0 [ 1106.023278][T23019] __x64_sys_unshare+0x31/0x40 [ 1106.023312][T23019] do_syscall_64+0xcd/0x230 [ 1106.023349][T23019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.023373][T23019] RIP: 0033:0x7f676f58e169 [ 1106.023392][T23019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.023416][T23019] RSP: 002b:00007f67703ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1106.023439][T23019] RAX: ffffffffffffffda RBX: 00007f676f7b6080 RCX: 00007f676f58e169 [ 1106.023455][T23019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1106.023470][T23019] RBP: 00007f676f610a68 R08: 0000000000000000 R09: 0000000000000000 [ 1106.023484][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.023499][T23019] R13: 0000000000000000 R14: 00007f676f7b6080 R15: 00007ffe9623ae68 [ 1106.023529][T23019] [ 1107.050788][T23014] Process accounting resumed [ 1109.861441][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 1110.104156][T23047] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1111.422614][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1114.698777][T23116] FAULT_INJECTION: forcing a failure. [ 1114.698777][T23116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.869673][T23116] CPU: 0 UID: 0 PID: 23116 Comm: syz.3.3417 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1114.869712][T23116] Tainted: [U]=USER [ 1114.869720][T23116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1114.869734][T23116] Call Trace: [ 1114.869742][T23116] [ 1114.869751][T23116] dump_stack_lvl+0x16c/0x1f0 [ 1114.869789][T23116] should_fail_ex+0x512/0x640 [ 1114.869821][T23116] _copy_to_iter+0x2a4/0x15a0 [ 1114.869854][T23116] ? chacha_block_generic+0x189/0x260 [ 1114.869882][T23116] ? __pfx__copy_to_iter+0x10/0x10 [ 1114.869916][T23116] ? lockdep_hardirqs_on+0x7c/0x110 [ 1114.869948][T23116] ? crng_make_state+0x48e/0x6d0 [ 1114.869979][T23116] get_random_bytes_user+0x17f/0x3c0 [ 1114.870010][T23116] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1114.870044][T23116] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1114.870087][T23116] ? import_ubuf+0x1b6/0x220 [ 1114.870117][T23116] __x64_sys_getrandom+0x183/0x290 [ 1114.870148][T23116] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1114.870177][T23116] ? fput+0x70/0xf0 [ 1114.870209][T23116] ? rcu_is_watching+0x12/0xc0 [ 1114.870241][T23116] do_syscall_64+0xcd/0x230 [ 1114.870277][T23116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.870301][T23116] RIP: 0033:0x7f31dff8e169 [ 1114.870320][T23116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.870343][T23116] RSP: 002b:00007f31e0d4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1114.870366][T23116] RAX: ffffffffffffffda RBX: 00007f31e01b5fa0 RCX: 00007f31dff8e169 [ 1114.870381][T23116] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1114.870396][T23116] RBP: 00007f31e0d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.870411][T23116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.870425][T23116] R13: 0000000000000000 R14: 00007f31e01b5fa0 R15: 00007ffc170557b8 [ 1114.870453][T23116] [ 1115.072315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.214191][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'. [ 1116.999905][T23145] bond0: option mode: unable to set because the bond device is up [ 1117.136240][T23145] zram: Added device: zram1 [ 1117.676867][T20807] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1117.748193][T20807] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1119.593550][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. syzkaller syzkaller login: [ 1120.992777][T23201] FAULT_INJECTION: forcing a failure. [ 1120.992777][T23201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.042728][T23201] CPU: 0 UID: 0 PID: 23201 Comm: syz.2.3435 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1121.042778][T23201] Tainted: [U]=USER [ 1121.042786][T23201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1121.042801][T23201] Call Trace: [ 1121.042808][T23201] [ 1121.042817][T23201] dump_stack_lvl+0x16c/0x1f0 [ 1121.042856][T23201] should_fail_ex+0x512/0x640 [ 1121.042888][T23201] _copy_to_iter+0x2a4/0x15a0 [ 1121.042921][T23201] ? chacha_block_generic+0x189/0x260 [ 1121.042949][T23201] ? __pfx__copy_to_iter+0x10/0x10 [ 1121.042983][T23201] ? lockdep_hardirqs_on+0x7c/0x110 [ 1121.043014][T23201] ? crng_make_state+0x48e/0x6d0 [ 1121.043046][T23201] get_random_bytes_user+0x17f/0x3c0 [ 1121.043076][T23201] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1121.043110][T23201] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1121.043153][T23201] ? import_ubuf+0x1b6/0x220 [ 1121.043182][T23201] __x64_sys_getrandom+0x183/0x290 [ 1121.043213][T23201] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1121.043242][T23201] ? fput+0x70/0xf0 [ 1121.043275][T23201] ? rcu_is_watching+0x12/0xc0 [ 1121.043307][T23201] do_syscall_64+0xcd/0x230 [ 1121.043343][T23201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.043367][T23201] RIP: 0033:0x7f4eb538e169 [ 1121.043385][T23201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.043408][T23201] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1121.043431][T23201] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 1121.043446][T23201] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1121.043460][T23201] RBP: 00007f4eb61d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.043474][T23201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.043488][T23201] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 1121.043517][T23201] [ 1121.241689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.542398][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.557337][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.400746][T23247] FAULT_INJECTION: forcing a failure. [ 1123.400746][T23247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.429983][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1123.464674][T23247] CPU: 0 UID: 0 PID: 23247 Comm: syz.2.3448 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1123.464715][T23247] Tainted: [U]=USER [ 1123.464723][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1123.464738][T23247] Call Trace: [ 1123.464746][T23247] [ 1123.464755][T23247] dump_stack_lvl+0x16c/0x1f0 [ 1123.464793][T23247] should_fail_ex+0x512/0x640 [ 1123.464825][T23247] _copy_to_iter+0x2a4/0x15a0 [ 1123.464859][T23247] ? chacha_block_generic+0x189/0x260 [ 1123.464886][T23247] ? __pfx__copy_to_iter+0x10/0x10 [ 1123.464921][T23247] ? lockdep_hardirqs_on+0x7c/0x110 [ 1123.464952][T23247] ? crng_make_state+0x48e/0x6d0 [ 1123.464984][T23247] get_random_bytes_user+0x17f/0x3c0 [ 1123.465015][T23247] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1123.465049][T23247] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1123.465092][T23247] ? import_ubuf+0x1b6/0x220 [ 1123.465123][T23247] __x64_sys_getrandom+0x183/0x290 [ 1123.465153][T23247] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1123.465182][T23247] ? fput+0x70/0xf0 [ 1123.465214][T23247] ? rcu_is_watching+0x12/0xc0 [ 1123.465246][T23247] do_syscall_64+0xcd/0x230 [ 1123.465282][T23247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.465306][T23247] RIP: 0033:0x7f4eb538e169 [ 1123.465324][T23247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.465348][T23247] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1123.465370][T23247] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 1123.465386][T23247] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1123.465400][T23247] RBP: 00007f4eb61d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.465415][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.465429][T23247] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 1123.465458][T23247] [ 1123.662174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.494683][T23262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1124.537471][T23262] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1124.545020][T23262] veth0_to_bridge: entered allmulticast mode [ 1124.602452][T23262] veth0_to_bridge: entered promiscuous mode [ 1124.627063][T23262] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.689056][T23262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1124.696675][T23262] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1124.971208][T23273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1125.693032][ T5883] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1125.704842][ T5883] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1125.833980][ T5883] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1126.020748][ T5883] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1126.078755][ T5883] rtc rtc0: __rtc_set_alarm: err=-22 [ 1126.592444][T23264] FAULT_INJECTION: forcing a failure. [ 1126.592444][T23264] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.168988][T23264] CPU: 0 UID: 0 PID: 23264 Comm: syz.3.3454 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1127.169031][T23264] Tainted: [U]=USER [ 1127.169039][T23264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1127.169055][T23264] Call Trace: [ 1127.169063][T23264] [ 1127.169073][T23264] dump_stack_lvl+0x16c/0x1f0 [ 1127.169113][T23264] should_fail_ex+0x512/0x640 [ 1127.169141][T23264] ? __kmalloc_noprof+0xbf/0x510 [ 1127.169172][T23264] ? __register_sysctl_table+0xea2/0x1900 [ 1127.169201][T23264] should_failslab+0xc2/0x120 [ 1127.169239][T23264] __kmalloc_noprof+0xd2/0x510 [ 1127.169267][T23264] ? __register_sysctl_table+0xe8e/0x1900 [ 1127.169302][T23264] __register_sysctl_table+0xea2/0x1900 [ 1127.169338][T23264] ? __pfx___register_sysctl_table+0x10/0x10 [ 1127.169367][T23264] ? is_module_address+0x69/0xf0 [ 1127.169400][T23264] ? register_net_sysctl_sz+0x228/0x3e0 [ 1127.169445][T23264] __devinet_sysctl_register+0x1b9/0x360 [ 1127.169486][T23264] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1127.169520][T23264] ? trace_kmalloc+0x2b/0xd0 [ 1127.169555][T23264] ? devinet_init_net+0xeb/0x910 [ 1127.169591][T23264] ? __asan_memcpy+0x3c/0x60 [ 1127.169618][T23264] devinet_init_net+0x315/0x910 [ 1127.169655][T23264] ? __pfx_devinet_init_net+0x10/0x10 [ 1127.169690][T23264] ops_init+0x1df/0x5f0 [ 1127.169727][T23264] setup_net+0x21e/0x850 [ 1127.169763][T23264] ? __pfx_setup_net+0x10/0x10 [ 1127.169795][T23264] ? lockdep_init_map_type+0x5c/0x280 [ 1127.169830][T23264] ? __pfx_down_read_killable+0x10/0x10 [ 1127.169878][T23264] ? debug_mutex_init+0x37/0x70 [ 1127.169906][T23264] copy_net_ns+0x2a6/0x5f0 [ 1127.169947][T23264] create_new_namespaces+0x3ea/0xad0 [ 1127.169987][T23264] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1127.170019][T23264] ksys_unshare+0x45b/0xa40 [ 1127.170055][T23264] ? __pfx_ksys_unshare+0x10/0x10 [ 1127.170089][T23264] ? xfd_validate_state+0x5d/0x180 [ 1127.170115][T23264] ? rcu_is_watching+0x12/0xc0 [ 1127.170146][T23264] __x64_sys_unshare+0x31/0x40 [ 1127.170180][T23264] do_syscall_64+0xcd/0x230 [ 1127.170217][T23264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.170248][T23264] RIP: 0033:0x7f31dff8e169 [ 1127.170269][T23264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.170293][T23264] RSP: 002b:00007f31e0d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1127.170316][T23264] RAX: ffffffffffffffda RBX: 00007f31e01b5fa0 RCX: 00007f31dff8e169 [ 1127.170332][T23264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1127.170347][T23264] RBP: 00007f31e0010a68 R08: 0000000000000000 R09: 0000000000000000 [ 1127.170362][T23264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.170378][T23264] R13: 0000000000000000 R14: 00007f31e01b5fa0 R15: 00007ffc170557b8 [ 1127.170408][T23264] [ 1127.505211][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 1127.643965][T23311] FAULT_INJECTION: forcing a failure. [ 1127.643965][T23311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.658821][T23311] CPU: 0 UID: 0 PID: 23311 Comm: syz.1.3465 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1127.658858][T23311] Tainted: [U]=USER [ 1127.658866][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1127.658881][T23311] Call Trace: [ 1127.658889][T23311] [ 1127.658897][T23311] dump_stack_lvl+0x16c/0x1f0 [ 1127.658935][T23311] should_fail_ex+0x512/0x640 [ 1127.658967][T23311] _copy_to_iter+0x2a4/0x15a0 [ 1127.659001][T23311] ? chacha_block_generic+0x189/0x260 [ 1127.659028][T23311] ? __pfx__copy_to_iter+0x10/0x10 [ 1127.659063][T23311] ? lockdep_hardirqs_on+0x7c/0x110 [ 1127.659095][T23311] ? crng_make_state+0x48e/0x6d0 [ 1127.659126][T23311] get_random_bytes_user+0x17f/0x3c0 [ 1127.659157][T23311] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1127.659190][T23311] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1127.659234][T23311] ? import_ubuf+0x1b6/0x220 [ 1127.659269][T23311] __x64_sys_getrandom+0x183/0x290 [ 1127.659299][T23311] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1127.659328][T23311] ? fput+0x70/0xf0 [ 1127.659360][T23311] ? rcu_is_watching+0x12/0xc0 [ 1127.659391][T23311] do_syscall_64+0xcd/0x230 [ 1127.659427][T23311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.659450][T23311] RIP: 0033:0x7f209658e169 [ 1127.659469][T23311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.659492][T23311] RSP: 002b:00007f20973a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1127.659513][T23311] RAX: ffffffffffffffda RBX: 00007f20967b5fa0 RCX: 00007f209658e169 [ 1127.659529][T23311] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1127.659543][T23311] RBP: 00007f20973a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.659557][T23311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.659571][T23311] R13: 0000000000000000 R14: 00007f20967b5fa0 R15: 00007ffc40879bf8 [ 1127.659599][T23311] [ 1128.182391][T23324] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 1128.435446][T23264] sysctl could not get directory: /net/ipv4/conf/all -12 [ 1130.142365][T23342] could not allocate digest TFM handle [ 1130.445693][T23353] FAULT_INJECTION: forcing a failure. [ 1130.445693][T23353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.469777][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1130.512949][T23353] CPU: 0 UID: 0 PID: 23353 Comm: syz.4.3477 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1130.512989][T23353] Tainted: [U]=USER [ 1130.512997][T23353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1130.513011][T23353] Call Trace: [ 1130.513019][T23353] [ 1130.513028][T23353] dump_stack_lvl+0x16c/0x1f0 [ 1130.513067][T23353] should_fail_ex+0x512/0x640 [ 1130.513099][T23353] _copy_to_iter+0x2a4/0x15a0 [ 1130.513132][T23353] ? chacha_block_generic+0x189/0x260 [ 1130.513161][T23353] ? __pfx__copy_to_iter+0x10/0x10 [ 1130.513196][T23353] ? lockdep_hardirqs_on+0x7c/0x110 [ 1130.513228][T23353] ? crng_make_state+0x48e/0x6d0 [ 1130.513260][T23353] get_random_bytes_user+0x17f/0x3c0 [ 1130.513291][T23353] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1130.513326][T23353] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1130.513375][T23353] ? import_ubuf+0x1b6/0x220 [ 1130.513407][T23353] __x64_sys_getrandom+0x183/0x290 [ 1130.513437][T23353] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1130.513466][T23353] ? fput+0x70/0xf0 [ 1130.513498][T23353] ? rcu_is_watching+0x12/0xc0 [ 1130.513530][T23353] do_syscall_64+0xcd/0x230 [ 1130.513566][T23353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.513589][T23353] RIP: 0033:0x7f676f58e169 [ 1130.513608][T23353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.513630][T23353] RSP: 002b:00007f67703eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1130.513652][T23353] RAX: ffffffffffffffda RBX: 00007f676f7b5fa0 RCX: 00007f676f58e169 [ 1130.513668][T23353] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1130.513689][T23353] RBP: 00007f67703eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.513704][T23353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.513718][T23353] R13: 0000000000000000 R14: 00007f676f7b5fa0 R15: 00007ffe9623ae68 [ 1130.513747][T23353] [ 1130.991317][T23366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1131.133631][T23366] veth1_macvtap: left promiscuous mode [ 1133.092354][T23397] FAULT_INJECTION: forcing a failure. [ 1133.092354][T23397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.158934][T23397] CPU: 0 UID: 0 PID: 23397 Comm: syz.2.3487 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1133.158975][T23397] Tainted: [U]=USER [ 1133.158983][T23397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1133.158996][T23397] Call Trace: [ 1133.159004][T23397] [ 1133.159014][T23397] dump_stack_lvl+0x16c/0x1f0 [ 1133.159052][T23397] should_fail_ex+0x512/0x640 [ 1133.159084][T23397] _copy_to_iter+0x2a4/0x15a0 [ 1133.159119][T23397] ? chacha_block_generic+0x189/0x260 [ 1133.159146][T23397] ? __pfx__copy_to_iter+0x10/0x10 [ 1133.159181][T23397] ? lockdep_hardirqs_on+0x7c/0x110 [ 1133.159213][T23397] ? crng_make_state+0x48e/0x6d0 [ 1133.159244][T23397] get_random_bytes_user+0x17f/0x3c0 [ 1133.159282][T23397] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1133.159316][T23397] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1133.159360][T23397] ? import_ubuf+0x1b6/0x220 [ 1133.159390][T23397] __x64_sys_getrandom+0x183/0x290 [ 1133.159421][T23397] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1133.159451][T23397] ? fput+0x70/0xf0 [ 1133.159482][T23397] ? rcu_is_watching+0x12/0xc0 [ 1133.159514][T23397] do_syscall_64+0xcd/0x230 [ 1133.159550][T23397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.159575][T23397] RIP: 0033:0x7f4eb538e169 [ 1133.159593][T23397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.159616][T23397] RSP: 002b:00007f4eb61d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1133.159638][T23397] RAX: ffffffffffffffda RBX: 00007f4eb55b5fa0 RCX: 00007f4eb538e169 [ 1133.159654][T23397] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1133.159669][T23397] RBP: 00007f4eb61d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.159683][T23397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.159697][T23397] R13: 0000000000000000 R14: 00007f4eb55b5fa0 R15: 00007ffcfc90d5e8 [ 1133.159726][T23397] [ 1136.064280][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 1136.434713][T23448] FAULT_INJECTION: forcing a failure. [ 1136.434713][T23448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.503377][T23448] CPU: 0 UID: 0 PID: 23448 Comm: syz.1.3498 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1136.503418][T23448] Tainted: [U]=USER [ 1136.503426][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1136.503440][T23448] Call Trace: [ 1136.503449][T23448] [ 1136.503458][T23448] dump_stack_lvl+0x16c/0x1f0 [ 1136.503496][T23448] should_fail_ex+0x512/0x640 [ 1136.503528][T23448] _copy_to_iter+0x2a4/0x15a0 [ 1136.503562][T23448] ? chacha_block_generic+0x189/0x260 [ 1136.503589][T23448] ? __pfx__copy_to_iter+0x10/0x10 [ 1136.503624][T23448] ? lockdep_hardirqs_on+0x7c/0x110 [ 1136.503656][T23448] ? crng_make_state+0x48e/0x6d0 [ 1136.503687][T23448] get_random_bytes_user+0x17f/0x3c0 [ 1136.503718][T23448] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1136.503752][T23448] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1136.503795][T23448] ? import_ubuf+0x1b6/0x220 [ 1136.503825][T23448] __x64_sys_getrandom+0x183/0x290 [ 1136.503856][T23448] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1136.503885][T23448] ? fput+0x70/0xf0 [ 1136.503917][T23448] ? rcu_is_watching+0x12/0xc0 [ 1136.503949][T23448] do_syscall_64+0xcd/0x230 [ 1136.503986][T23448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.504010][T23448] RIP: 0033:0x7f209658e169 [ 1136.504028][T23448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.504051][T23448] RSP: 002b:00007f20973a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1136.504073][T23448] RAX: ffffffffffffffda RBX: 00007f20967b5fa0 RCX: 00007f209658e169 [ 1136.504089][T23448] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1136.504103][T23448] RBP: 00007f20973a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.504118][T23448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.504132][T23448] R13: 0000000000000000 R14: 00007f20967b5fa0 R15: 00007ffc40879bf8 [ 1136.504166][T23448] [ 1136.702697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1138.189623][T23453] Process accounting paused [ 1139.137360][T23483] bridge0: port 3(netdevsim1) entered blocking state [ 1139.194467][T23483] bridge0: port 3(netdevsim1) entered disabled state [ 1139.310996][T23483] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1139.368278][T23489] FAULT_INJECTION: forcing a failure. [ 1139.368278][T23489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.398158][T23483] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1139.418481][T23489] CPU: 0 UID: 0 PID: 23489 Comm: syz.3.3510 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1139.418521][T23489] Tainted: [U]=USER [ 1139.418528][T23489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1139.418542][T23489] Call Trace: [ 1139.418550][T23489] [ 1139.418558][T23489] dump_stack_lvl+0x16c/0x1f0 [ 1139.418625][T23489] should_fail_ex+0x512/0x640 [ 1139.418656][T23489] _copy_to_iter+0x2a4/0x15a0 [ 1139.418691][T23489] ? chacha_block_generic+0x189/0x260 [ 1139.418718][T23489] ? __pfx__copy_to_iter+0x10/0x10 [ 1139.418753][T23489] ? lockdep_hardirqs_on+0x7c/0x110 [ 1139.418785][T23489] ? crng_make_state+0x48e/0x6d0 [ 1139.418816][T23489] get_random_bytes_user+0x17f/0x3c0 [ 1139.418847][T23489] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1139.418880][T23489] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1139.418923][T23489] ? import_ubuf+0x1b6/0x220 [ 1139.418953][T23489] __x64_sys_getrandom+0x183/0x290 [ 1139.418984][T23489] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1139.419013][T23489] ? fput+0x70/0xf0 [ 1139.419045][T23489] ? rcu_is_watching+0x12/0xc0 [ 1139.419076][T23489] do_syscall_64+0xcd/0x230 [ 1139.419112][T23489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.419136][T23489] RIP: 0033:0x7f31dff8e169 [ 1139.419154][T23489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.419177][T23489] RSP: 002b:00007f31e0d4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1139.419199][T23489] RAX: ffffffffffffffda RBX: 00007f31e01b5fa0 RCX: 00007f31dff8e169 [ 1139.419215][T23489] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1139.419229][T23489] RBP: 00007f31e0d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.419243][T23489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.419257][T23489] R13: 0000000000000000 R14: 00007f31e01b5fa0 R15: 00007ffc170557b8 [ 1139.419285][T23489] [ 1139.622192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1139.718324][T23483] bridge0: port 3(netdevsim1) entered blocking state [ 1139.725186][T23483] bridge0: port 3(netdevsim1) entered forwarding state [ 1141.639514][T23540] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 1141.681942][T23536] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 1141.936390][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1144.081166][T19261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.384541][T19261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.591139][T19261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.799199][T19261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.823039][T23571] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 1144.850530][T23575] netlink: 'syz.4.3526': attribute type 15 has an invalid length. [ 1144.879674][T23575] netlink: 'syz.4.3526': attribute type 16 has an invalid length. [ 1144.923611][T23575] netlink: 'syz.4.3526': attribute type 17 has an invalid length. [ 1144.957609][T23575] netlink: 'syz.4.3526': attribute type 19 has an invalid length. [ 1144.999369][T23575] netlink: 238 bytes leftover after parsing attributes in process `syz.4.3526'. [ 1145.594512][T19261] bridge_slave_1: left allmulticast mode [ 1145.646875][T19261] bridge_slave_1: left promiscuous mode [ 1145.666519][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1145.694601][T19261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.810268][T19261] bridge_slave_0: left allmulticast mode [ 1145.815960][T19261] bridge_slave_0: left promiscuous mode [ 1145.880113][T19261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.175702][T20804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1146.196021][T20804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1146.204769][T20804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1146.223339][T20804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1146.233285][T20804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.363391][T19261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.393196][T19261] bond0 (unregistering): Released all slaves [ 1147.639542][T19261] tipc: Left network mode [ 1148.330055][T20804] Bluetooth: hci2: command tx timeout [ 1148.566661][T23597] chnl_net:caif_netlink_parms(): no params data found [ 1148.932276][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1149.172093][T19261] hsr_slave_0: left promiscuous mode [ 1149.202187][T19261] hsr_slave_1: left promiscuous mode [ 1149.233650][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.280669][T19261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.316341][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.349038][T19261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.445934][T19261] veth1_macvtap: left promiscuous mode [ 1149.480812][T19261] veth0_macvtap: left promiscuous mode [ 1149.509721][T19261] veth1_vlan: left promiscuous mode [ 1149.531868][T19261] veth0_vlan: left promiscuous mode [ 1150.412647][T20804] Bluetooth: hci2: command tx timeout [ 1150.750137][T19261] team0 (unregistering): Port device team_slave_1 removed [ 1150.860794][T19261] team0 (unregistering): Port device team_slave_0 removed [ 1150.894164][T23645] random: crng reseeded on system resumption [ 1152.020598][T23597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.032292][T23597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.040959][T23597] bridge_slave_0: entered allmulticast mode [ 1152.051922][T23597] bridge_slave_0: entered promiscuous mode [ 1152.078670][T23597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.105444][T23597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.131334][T23597] bridge_slave_1: entered allmulticast mode [ 1152.141843][T23597] bridge_slave_1: entered promiscuous mode [ 1152.433370][T23597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.471970][T23597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.487341][T20804] Bluetooth: hci2: command tx timeout [ 1152.696036][T23597] team0: Port device team_slave_0 added [ 1152.738899][T23597] team0: Port device team_slave_1 added [ 1152.996499][T23597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.040342][T23597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.141704][T23597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.190007][T23597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.238137][T23597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.371728][T23597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.691728][T23597] hsr_slave_0: entered promiscuous mode [ 1153.723679][T23597] hsr_slave_1: entered promiscuous mode [ 1153.747417][T23597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.780860][T23597] Cannot create hsr debugfs directory [ 1153.845830][T23685] Invalid ELF header magic: != ELF [ 1154.567170][T20804] Bluetooth: hci2: command tx timeout [ 1154.678547][T23597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1154.959871][T23597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1155.053339][T23597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1155.123596][T23597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1155.629071][T23597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.731544][T23597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.849698][T20352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.857001][T20352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.907339][T20352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.914481][T20352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.015220][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1156.618375][T23597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.195203][T23597] veth0_vlan: entered promiscuous mode [ 1157.246175][T23597] veth1_vlan: entered promiscuous mode [ 1157.333672][T23597] veth0_macvtap: entered promiscuous mode [ 1157.360647][T23597] veth1_macvtap: entered promiscuous mode [ 1157.411109][T23597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.439315][T23597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.469337][T23597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.497051][T23597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.521083][T23597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.540007][T23597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.552586][T23597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.596430][T23597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.622118][T23597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.633262][T23597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.649828][T23597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.699729][T23597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.736700][T23597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.752219][T23597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.764631][T23597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.780184][T23597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.966346][T19267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.004608][T19267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.068362][T19271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.106707][T19271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.445042][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1159.891144][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1159.931427][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1159.961050][T23792] program syz.1.3553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.991722][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1160.019924][T23797] program syz.1.3553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1162.329942][T23839] FAULT_INJECTION: forcing a failure. [ 1162.329942][T23839] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.419350][T23839] CPU: 0 UID: 0 PID: 23839 Comm: syz.3.3562 Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1162.419393][T23839] Tainted: [U]=USER [ 1162.419402][T23839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1162.419416][T23839] Call Trace: [ 1162.419424][T23839] [ 1162.419433][T23839] dump_stack_lvl+0x16c/0x1f0 [ 1162.419473][T23839] should_fail_ex+0x512/0x640 [ 1162.419501][T23839] ? fs_reclaim_acquire+0xae/0x150 [ 1162.419542][T23839] should_failslab+0xc2/0x120 [ 1162.419574][T23839] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1162.419605][T23839] ? security_inode_alloc+0x3b/0x2b0 [ 1162.419636][T23839] security_inode_alloc+0x3b/0x2b0 [ 1162.419665][T23839] inode_init_always_gfp+0xce4/0x1030 [ 1162.419694][T23839] alloc_inode+0x86/0x240 [ 1162.419726][T23839] path_from_stashed+0x2be/0xb00 [ 1162.419756][T23839] ? __pfx_path_from_stashed+0x10/0x10 [ 1162.419784][T23839] ? do_raw_read_unlock+0x44/0xe0 [ 1162.419811][T23839] ns_get_path+0x5f/0x80 [ 1162.419833][T23839] proc_ns_get_link+0x121/0x260 [ 1162.419857][T23839] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1162.419881][T23839] ? __pfx___might_resched+0x10/0x10 [ 1162.419913][T23839] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1162.419936][T23839] step_into+0x1b22/0x2270 [ 1162.419979][T23839] ? __pfx_step_into+0x10/0x10 [ 1162.420015][T23839] ? find_held_lock+0x2b/0x80 [ 1162.420048][T23839] path_openat+0x749/0x2d40 [ 1162.420083][T23839] ? __pfx_path_openat+0x10/0x10 [ 1162.420115][T23839] do_filp_open+0x20b/0x470 [ 1162.420148][T23839] ? __pfx_do_filp_open+0x10/0x10 [ 1162.420194][T23839] ? alloc_fd+0x471/0x7d0 [ 1162.420224][T23839] do_sys_openat2+0x11b/0x1d0 [ 1162.420258][T23839] ? __pfx_do_sys_openat2+0x10/0x10 [ 1162.420302][T23839] __x64_sys_openat+0x174/0x210 [ 1162.420337][T23839] ? __pfx___x64_sys_openat+0x10/0x10 [ 1162.420374][T23839] ? rcu_is_watching+0x12/0xc0 [ 1162.420406][T23839] do_syscall_64+0xcd/0x230 [ 1162.420442][T23839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.420466][T23839] RIP: 0033:0x7f31dff8cad0 [ 1162.420485][T23839] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1162.420509][T23839] RSP: 002b:00007f31e0d49f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1162.420532][T23839] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f31dff8cad0 [ 1162.420548][T23839] RDX: 0000000000000002 RSI: 00007f31e0d49fa0 RDI: 00000000ffffff9c [ 1162.420563][T23839] RBP: 00007f31e0d49fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.420578][T23839] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1162.420592][T23839] R13: 0000000000000000 R14: 00007f31e01b5fa0 R15: 00007ffc170557b8 [ 1162.420621][T23839] [ 1163.578707][T23857] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 1164.066641][T23845] Invalid ELF header magic: != ELF [ 1165.174168][T20804] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1165.977750][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1166.599178][T23876] netlink: 'syz.5.3566': attribute type 1 has an invalid length. [ 1168.016496][ T30] audit: type=1800 audit(4294972164.740:31): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3573" name="members" dev="configfs" ino=90178 res=0 errno=0 [ 1168.293639][T23924] Process accounting resumed [ 1169.014160][T23941] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 1171.044172][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1171.429442][T23963] Invalid ELF header magic: != ELF [ 1172.550310][T23973] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 1173.051856][T23979] Invalid ELF header magic: != ELF [ 1174.811102][T24018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1175.180998][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1175.349903][T24033] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 1176.072824][T24025] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 1178.541780][T24064] Invalid ELF header magic: != ELF [ 1182.500631][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.513116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.503509][T24184] serio: Serial port pty64 [ 1189.733341][T24186] tty tty50: ldisc open failed (-12), clearing slot 49 [ 1189.777370][T24218] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1193.065449][T24286] ubi: mtd0 is already attached to ubi0 [ 1197.441926][T24356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3637'. syzkaller syzkaller login: [ 1199.931946][T24374] Process accounting paused [ 1201.255920][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1204.473297][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. syzkaller syzkaller login: [ 1210.486472][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1210.566243][T24536] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1214.182444][T24568] ubi: mtd0 is already attached to ubi0 [ 1215.633777][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3694'. [ 1217.711740][T24643] ovs_: entered promiscuous mode [ 1219.545342][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1220.750717][T24691] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input16 [ 1223.033650][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1228.522190][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3736'. [ 1229.933656][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3738'. [ 1230.892585][T24743] Process accounting resumed [ 1231.075815][T24807] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1231.931070][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3739'. [ 1233.432505][T20804] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1233.811704][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1235.446667][T20807] Bluetooth: hci2: command tx timeout [ 1236.947329][T20804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1236.964158][T20804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1236.976689][T20804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1236.985654][T20804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1237.001463][T20804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.063711][T24851] chnl_net:caif_netlink_parms(): no params data found [ 1238.263012][T24865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 1239.050488][T20804] Bluetooth: hci3: command tx timeout [ 1239.247180][T24851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.280155][T24851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.330196][T24851] bridge_slave_0: entered allmulticast mode [ 1239.377255][T24851] bridge_slave_0: entered promiscuous mode [ 1239.421906][T24851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.482956][T24851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.529691][T24851] bridge_slave_1: entered allmulticast mode [ 1239.567302][T24851] bridge_slave_1: entered promiscuous mode [ 1240.085334][T24851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.141285][T24851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.591349][T24851] team0: Port device team_slave_0 added [ 1240.835084][T24851] team0: Port device team_slave_1 added [ 1240.945461][T24851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.969555][T24851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.036532][T24851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.082461][T24851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.119100][T24851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.170053][T20804] Bluetooth: hci3: command tx timeout [ 1241.223604][T24851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.904818][T24851] hsr_slave_0: entered promiscuous mode [ 1241.943553][T24851] hsr_slave_1: entered promiscuous mode [ 1241.977837][T24851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.010173][T24851] Cannot create hsr debugfs directory [ 1242.098338][T24893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1242.280266][T24895] serio: Serial port pty64 [ 1242.632039][T24899] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1242.640086][T24899] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1243.209916][T20804] Bluetooth: hci3: command tx timeout [ 1243.485947][T24851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1243.523999][T24851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1243.936364][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.946787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.048713][T24851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1244.290865][T24851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1244.841201][T24851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.912637][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1244.962003][T24851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.090156][T19266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.097343][T19266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.158483][T19266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.165644][T19266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.291232][T20804] Bluetooth: hci3: command tx timeout [ 1247.180847][T24851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.664272][T24851] veth0_vlan: entered promiscuous mode [ 1248.740912][T24851] veth1_vlan: entered promiscuous mode [ 1248.949215][T24851] veth0_macvtap: entered promiscuous mode [ 1249.012536][T24982] kernel read not supported for file /set_event_notrace_pid (pid: 24982 comm: syz.5.3767) [ 1249.052603][T24851] veth1_macvtap: entered promiscuous mode [ 1249.094436][ T30] audit: type=1800 audit(4294972247.822:32): pid=24982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3767" name="set_event_notrace_pid" dev="tracefs" ino=1074 res=0 errno=0 [ 1249.181745][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.262956][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.506565][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.778768][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.838639][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.946669][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.010756][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.066611][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.208133][T24851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.469412][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.526549][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.557589][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.640465][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.712076][T24851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.730231][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1250.789545][T24851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.831603][T24851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.904845][T24851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.962669][T24851] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.013588][T24851] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.061387][T24851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.730816][T20337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.794226][T20337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.941409][T20337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.993918][T20337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.841014][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3747'. [ 1252.862555][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3772'. [ 1253.051654][ T30] audit: type=1804 audit(4294972251.772:33): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3773" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1254.167935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.180598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.192985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.205334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.217672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.229997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.242345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.254712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.267136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1254.279598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.176679][ C0] net_ratelimit: 14676 callbacks suppressed [ 1259.176700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.195211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.207616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.219985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.232355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.244712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.257110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.269597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.282033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1259.294400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1262.286500][ C0] sched: DL replenish lagged too much [ 1264.186637][ C0] net_ratelimit: 14414 callbacks suppressed [ 1264.186658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.204946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.217307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.229662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.242089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.254833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.267263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.279723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.292164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1264.304537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.196590][ C0] net_ratelimit: 15230 callbacks suppressed [ 1269.196611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.215013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.227361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.239738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.252063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.264380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.276750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.289089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.301402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1269.313777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.206518][ C0] net_ratelimit: 14558 callbacks suppressed [ 1274.206538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.224984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.237520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.250028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.262464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.275102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.288921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.301535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.314022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1274.326424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1277.964446][T25028] Bluetooth: hci2: command tx timeout [ 1279.216494][ C0] net_ratelimit: 14709 callbacks suppressed [ 1279.216515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.234870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.247237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.259566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.271894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.284215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.296727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.309141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.321527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1279.333863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.226716][ C0] net_ratelimit: 15332 callbacks suppressed [ 1284.226737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.245041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.257548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.270013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.282425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.294945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.307434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.319982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.332461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1284.345042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.236634][ C0] net_ratelimit: 15527 callbacks suppressed [ 1289.236654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.255239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.267782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.280213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.292738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.305153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.317550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.330011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.342463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1289.354814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.246774][ C0] net_ratelimit: 15585 callbacks suppressed [ 1294.246795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.265178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.277681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.290182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.302662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.315085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.328007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.340371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.352722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1294.365077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1299.256605][ C0] net_ratelimit: 15588 callbacks suppressed [ 1299.256626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1299.274828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.287149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.299471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1299.311769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.324191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.336634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1299.348918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.361395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.373708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1304.266602][ C0] net_ratelimit: 15682 callbacks suppressed [ 1304.266629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.285181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1304.297643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.310076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.322435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1304.334837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.347137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.359525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1304.371852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.384775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.276509][ C0] net_ratelimit: 15649 callbacks suppressed [ 1309.276529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.295086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.307474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1309.319966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.332390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.345070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1309.357416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.370081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.382526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1309.395072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.286507][ C0] net_ratelimit: 15499 callbacks suppressed [ 1314.286529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1314.304885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.317218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.329581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1314.341868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.354167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.366651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1314.378996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.391570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.403962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1319.296502][ C0] net_ratelimit: 15633 callbacks suppressed [ 1319.296524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.314914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.327556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1319.339843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.352215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.364684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1319.377150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.389545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.401969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1319.414332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.306623][ C0] net_ratelimit: 15682 callbacks suppressed [ 1324.306644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1324.324863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.337168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.349608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1324.361926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.374292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.386740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1324.399622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.411928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.424259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1329.316749][ C0] net_ratelimit: 15886 callbacks suppressed [ 1329.316769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.335167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1329.347502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.359829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.372181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1329.384496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.397164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.409502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1329.421802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.434094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.326490][ C0] net_ratelimit: 15864 callbacks suppressed [ 1334.326510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1334.344761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.357092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.369435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1334.381800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.394161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.406582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1334.418956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.431328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.443769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1339.336781][ C0] net_ratelimit: 15628 callbacks suppressed [ 1339.336802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.355165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1339.367567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.379996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.392491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1339.404949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.417943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.430333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1339.442728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.455040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.346745][ C0] net_ratelimit: 15665 callbacks suppressed [ 1344.346765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.365074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1344.377497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.389878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.402242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1344.414565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.426880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.439396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1344.451688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.465009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.356667][ C0] net_ratelimit: 15895 callbacks suppressed [ 1349.356710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.375070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.387448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1349.399743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.412198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.424548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1349.436925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.449353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.461705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1349.473997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.366662][ C0] net_ratelimit: 15904 callbacks suppressed [ 1354.366683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1354.384930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.397226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.410154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1354.422473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.434771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.447092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1354.459361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.471642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.483962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1359.376708][ C0] net_ratelimit: 11615 callbacks suppressed [ 1359.376729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1359.394974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.407453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.420639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1359.432987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.445438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.458587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1359.470885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.483223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.496392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1363.746451][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1363.753464][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22900/1:b..l P24695/1:b..l P18308/1:b..l [ 1363.764396][ C0] rcu: (detected by 0, t=10502 jiffies, g=162605, q=616 ncpus=1) [ 1363.772235][ C0] task:syz-executor state:R running task stack:24312 pid:18308 tgid:18308 ppid:18292 task_flags:0x400140 flags:0x00004002 [ 1363.786713][ C0] Call Trace: [ 1363.790004][ C0] [ 1363.792963][ C0] __schedule+0x116f/0x5de0 [ 1363.797500][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1363.802884][ C0] ? stack_depot_save_flags+0x28/0xa50 [ 1363.808394][ C0] ? __pfx___schedule+0x10/0x10 [ 1363.813294][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1363.818278][ C0] ? mark_held_locks+0x49/0x80 [ 1363.823066][ C0] preempt_schedule_irq+0x51/0x90 [ 1363.828133][ C0] irqentry_exit+0x36/0x90 [ 1363.832569][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1363.838563][ C0] RIP: 0010:unwind_next_frame+0xb0/0x20a0 [ 1363.844298][ C0] Code: 04 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 24 18 00 00 49 8b 45 38 48 89 44 24 10 e8 c2 c2 36 00 31 d2 <45> 31 c9 45 31 c0 48 8d 05 00 00 00 00 50 b9 02 00 00 00 31 f6 48 [ 1363.863922][ C0] RSP: 0018:ffffc900001e7260 EFLAGS: 00000246 [ 1363.870085][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc900001e7224 [ 1363.878063][ C0] RDX: 0000000000000000 RSI: ffffffff8b6ead8d RDI: ffff888021372244 [ 1363.886040][ C0] RBP: ffffc900001e7318 R08: 0000000000000001 R09: 0000000000000000 [ 1363.894016][ C0] R10: 0000000000000004 R11: 0000000000007a6e R12: ffffffff81a689a0 [ 1363.901991][ C0] R13: ffffc900001e72d0 R14: 0000000000000000 R15: ffff888021371e00 [ 1363.909968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1363.916139][ C0] ? do_syscall_64+0xcd/0x230 [ 1363.920841][ C0] ? do_syscall_64+0xcd/0x230 [ 1363.925649][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1363.931826][ C0] arch_stack_walk+0x94/0x100 [ 1363.936615][ C0] ? do_syscall_64+0xcd/0x230 [ 1363.941325][ C0] stack_trace_save+0x8e/0xc0 [ 1363.946028][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1363.951431][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1363.956392][ C0] save_stack+0x160/0x1f0 [ 1363.960738][ C0] ? __pfx_save_stack+0x10/0x10 [ 1363.965595][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 1363.970888][ C0] ? qlist_free_all+0x4e/0x120 [ 1363.975678][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1363.981455][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1363.986609][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1363.992295][ C0] ? ptlock_alloc+0x1f/0x70 [ 1363.996816][ C0] ? pte_alloc_one+0x6d/0x380 [ 1364.001511][ C0] ? __pte_alloc+0x6d/0x3c0 [ 1364.006040][ C0] ? copy_page_range+0x3a29/0x5fe0 [ 1364.011155][ C0] ? copy_process+0x862b/0x91a0 [ 1364.016034][ C0] ? kernel_clone+0xfc/0x960 [ 1364.020638][ C0] ? __do_sys_clone+0xce/0x120 [ 1364.025417][ C0] ? do_syscall_64+0xcd/0x230 [ 1364.030119][ C0] ? page_ext_put+0x3e/0xd0 [ 1364.034677][ C0] __reset_page_owner+0x84/0x1a0 [ 1364.039630][ C0] __free_frozen_pages+0x69d/0xff0 [ 1364.044768][ C0] qlist_free_all+0x4e/0x120 [ 1364.049371][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1364.054841][ C0] __kasan_slab_alloc+0x69/0x90 [ 1364.059704][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1364.065174][ C0] ? ptlock_alloc+0x1f/0x70 [ 1364.069703][ C0] ptlock_alloc+0x1f/0x70 [ 1364.074043][ C0] pte_alloc_one+0x6d/0x380 [ 1364.078558][ C0] __pte_alloc+0x6d/0x3c0 [ 1364.082904][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 1364.087857][ C0] ? __pfx___might_resched+0x10/0x10 [ 1364.093152][ C0] ? copy_page_range+0x197d/0x5fe0 [ 1364.098272][ C0] copy_page_range+0x3a29/0x5fe0 [ 1364.103246][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1364.108575][ C0] ? __pfx___might_resched+0x10/0x10 [ 1364.113871][ C0] ? __pfx_mas_store+0x10/0x10 [ 1364.118637][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 1364.123852][ C0] ? copy_process+0x85dd/0x91a0 [ 1364.128718][ C0] ? down_write+0x14d/0x200 [ 1364.133242][ C0] ? up_write+0x1b2/0x520 [ 1364.137595][ C0] copy_process+0x862b/0x91a0 [ 1364.142308][ C0] ? __pfx_copy_process+0x10/0x10 [ 1364.147358][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1364.152400][ C0] kernel_clone+0xfc/0x960 [ 1364.156836][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1364.161899][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 1364.167197][ C0] __do_sys_clone+0xce/0x120 [ 1364.171802][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1364.177031][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1364.182345][ C0] do_syscall_64+0xcd/0x230 [ 1364.186868][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.192767][ C0] RIP: 0033:0x7f20965849d3 [ 1364.197198][ C0] RSP: 002b:00007ffc40879e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1364.205672][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20965849d3 [ 1364.213690][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1364.221690][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1364.229679][ C0] R10: 0000555572a197d0 R11: 0000000000000246 R12: 0000000000000000 [ 1364.237671][ C0] R13: 00000000000927c0 R14: 00000000001322a5 R15: 00007ffc4087a010 [ 1364.245699][ C0] [ 1364.248729][ C0] task:syz.4.3719 state:R running task stack:26696 pid:24695 tgid:24688 ppid:18927 task_flags:0x400140 flags:0x00004006 [ 1364.262262][ C0] Call Trace: [ 1364.265548][ C0] [ 1364.268489][ C0] __schedule+0x116f/0x5de0 [ 1364.273033][ C0] ? __pfx___schedule+0x10/0x10 [ 1364.277912][ C0] ? mark_held_locks+0x49/0x80 [ 1364.282696][ C0] preempt_schedule_irq+0x51/0x90 [ 1364.287756][ C0] irqentry_exit+0x36/0x90 [ 1364.292191][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1364.298181][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1364.303398][ C0] Code: 66 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 92 bd ee 0e 0f 82 74 02 00 00 8b 35 0a ed ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 66 0e 12 0f 85 c7 02 00 00 48 83 c4 [ 1364.323014][ C0] RSP: 0018:ffffc90002fe7b30 EFLAGS: 00000206 [ 1364.329088][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bf440 RCX: 000000009857470f [ 1364.337067][ C0] RDX: 0000000000000000 RSI: ffffffff8dbc437c RDI: ffffffff8bf44f80 [ 1364.345063][ C0] RBP: 0000000000000002 R08: 221910f6eea81161 R09: 0000000000000000 [ 1364.353050][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1364.361048][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.369071][ C0] ___pte_offset_map+0x48/0x540 [ 1364.373963][ C0] ? ___pte_offset_map+0x37/0x540 [ 1364.379100][ C0] __pte_offset_map_lock+0x8d/0x2f0 [ 1364.384354][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 1364.390202][ C0] folio_walk_start+0x4a3/0x1180 [ 1364.395254][ C0] ? __pfx_folio_walk_start+0x10/0x10 [ 1364.400644][ C0] ? __might_fault+0x13b/0x190 [ 1364.405444][ C0] kernel_move_pages+0x586/0x13a0 [ 1364.410501][ C0] ? __pfx_kernel_move_pages+0x10/0x10 [ 1364.416102][ C0] ? rcu_is_watching+0x12/0xc0 [ 1364.420916][ C0] __x64_sys_move_pages+0xe0/0x1c0 [ 1364.426062][ C0] ? do_syscall_64+0x91/0x230 [ 1364.430762][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1364.435980][ C0] do_syscall_64+0xcd/0x230 [ 1364.440509][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.446414][ C0] RIP: 0033:0x7f676f58e169 [ 1364.450836][ C0] RSP: 002b:00007f67703a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1364.459257][ C0] RAX: ffffffffffffffda RBX: 00007f676f7b6160 RCX: 00007f676f58e169 [ 1364.467238][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1364.475224][ C0] RBP: 00007f676f610a68 R08: 0000000000000000 R09: 0000000000000002 [ 1364.483202][ C0] R10: 0000200000001140 R11: 0000000000000246 R12: 0000000000000000 [ 1364.491180][ C0] R13: 0000000000000000 R14: 00007f676f7b6160 R15: 00007ffe9623ae68 [ 1364.499174][ C0] [ 1364.502206][ C0] task:udevd state:R running task stack:26280 pid:22900 tgid:22900 ppid:5213 task_flags:0x40014c flags:0x00000002 [ 1364.515747][ C0] Call Trace: [ 1364.519028][ C0] [ 1364.521998][ C0] __schedule+0x116f/0x5de0 [ 1364.526521][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1364.531489][ C0] ? __pfx___schedule+0x10/0x10 [ 1364.536366][ C0] ? mark_held_locks+0x49/0x80 [ 1364.541148][ C0] preempt_schedule_irq+0x51/0x90 [ 1364.546190][ C0] irqentry_exit+0x36/0x90 [ 1364.550621][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1364.556637][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 1364.561967][ C0] Code: 0f c1 05 a8 a9 0e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 fd 6b 0e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1364.581587][ C0] RSP: 0018:ffffc90003e2f710 EFLAGS: 00000206 [ 1364.587689][ C0] RAX: 06e18f98572d2200 RBX: ffffffff8e3bf440 RCX: ffffc90003e2f71c [ 1364.595667][ C0] RDX: 0000000000000001 RSI: ffffffff8dbc437c RDI: ffffffff8bf44f80 [ 1364.603646][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1364.611622][ C0] R10: 0000000000000001 R11: 0000000000010955 R12: ffffffff81699d14 [ 1364.619613][ C0] R13: 0000000000000206 R14: ffff88806777da00 R15: 0000000000000002 [ 1364.627593][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1364.632826][ C0] unwind_next_frame+0x3f9/0x20a0 [ 1364.637862][ C0] ? exit_mmap+0x511/0xb90 [ 1364.642292][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1364.648465][ C0] arch_stack_walk+0x94/0x100 [ 1364.653162][ C0] ? __mmput+0x12a/0x410 [ 1364.657443][ C0] stack_trace_save+0x8e/0xc0 [ 1364.662131][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1364.667545][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1364.672501][ C0] kasan_save_stack+0x33/0x60 [ 1364.677192][ C0] ? kasan_save_stack+0x33/0x60 [ 1364.682055][ C0] ? kasan_record_aux_stack+0xb8/0xd0 [ 1364.687446][ C0] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 1364.693533][ C0] ? kmem_cache_free+0x173/0x4d0 [ 1364.698482][ C0] ? exit_mmap+0x511/0xb90 [ 1364.702945][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1364.709110][ C0] kasan_record_aux_stack+0xb8/0xd0 [ 1364.714357][ C0] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 1364.720308][ C0] kmem_cache_free+0x173/0x4d0 [ 1364.725100][ C0] ? exit_mmap+0x511/0xb90 [ 1364.729559][ C0] exit_mmap+0x511/0xb90 [ 1364.733824][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1364.738636][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1364.743637][ C0] __mmput+0x12a/0x410 [ 1364.747728][ C0] mmput+0x62/0x70 [ 1364.751466][ C0] do_exit+0x9d1/0x2c30 [ 1364.755645][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1364.760700][ C0] ? __pfx_do_exit+0x10/0x10 [ 1364.765335][ C0] ? rcu_is_watching+0x12/0xc0 [ 1364.770123][ C0] do_group_exit+0xd3/0x2a0 [ 1364.774741][ C0] __x64_sys_exit_group+0x3e/0x50 [ 1364.779807][ C0] x64_sys_call+0x1530/0x1730 [ 1364.784514][ C0] do_syscall_64+0xcd/0x230 [ 1364.789053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.794966][ C0] RIP: 0033:0x7f24934fca90 [ 1364.799404][ C0] RSP: 002b:00007fff09a9eb88 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1364.807843][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f24934fca90 [ 1364.815842][ C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 1364.823819][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 361341ea1b9c488c [ 1364.831813][ C0] R10: 00000000ffffffff R11: 0000000000000202 R12: 0000562fdfb9cd60 [ 1364.839789][ C0] R13: 00007fff09a9ebc8 R14: 0000000000000001 R15: 0000562fdfb6f910 [ 1364.847782][ C0] [ 1364.850806][ C0] rcu: rcu_preempt kthread starved for 828 jiffies! g162605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1364.861919][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1364.871886][ C0] rcu: RCU grace-period kthread stack dump: [ 1364.877773][ C0] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1364.891302][ C0] Call Trace: [ 1364.894584][ C0] [ 1364.897525][ C0] __schedule+0x116f/0x5de0 [ 1364.902068][ C0] ? find_held_lock+0x2b/0x80 [ 1364.906778][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1364.911741][ C0] ? __pfx___schedule+0x10/0x10 [ 1364.916613][ C0] ? find_held_lock+0x2b/0x80 [ 1364.921320][ C0] ? schedule+0x2d7/0x3a0 [ 1364.925669][ C0] schedule+0xe7/0x3a0 [ 1364.929755][ C0] schedule_timeout+0x123/0x290 [ 1364.934619][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1364.940003][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1364.945309][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1364.951151][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1364.956650][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1364.961452][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1364.966760][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1364.971633][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1364.977458][ C0] rcu_gp_kthread+0x270/0x380 [ 1364.982159][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1364.987392][ C0] ? rcu_is_watching+0x12/0xc0 [ 1364.992190][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1364.997407][ C0] ? __kthread_parkme+0x19e/0x250 [ 1365.002452][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1365.007681][ C0] kthread+0x3c2/0x780 [ 1365.011813][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.016505][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.021137][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.025757][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.030376][ C0] ? rcu_is_watching+0x12/0xc0 [ 1365.035176][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.039808][ C0] ret_from_fork+0x45/0x80 [ 1365.044261][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.048909][ C0] ret_from_fork_asm+0x1a/0x30 [ 1365.053722][ C0] [ 1365.056747][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1365.063111][ C0] CPU: 0 UID: 0 PID: 3405 Comm: kworker/R-bat_e Tainted: G U 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 1365.077119][ C0] Tainted: [U]=USER [ 1365.080922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1365.091004][ C0] Workqueue: bat_events batadv_dat_purge [ 1365.096665][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x14/0x40 [ 1365.102927][ C0] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 96 61 17 05 85 c0 74 20 8b 05 20 90 17 05 <85> c0 74 16 65 48 8b 05 98 09 37 08 8b 80 ec 0a 00 00 85 c0 0f 94 [ 1365.122651][ C0] RSP: 0018:ffffc90000006c70 EFLAGS: 00000202 [ 1365.128727][ C0] RAX: 0000000000000001 RBX: ffffc90000007590 RCX: ffffc90000008001 [ 1365.136723][ C0] RDX: ffffc90000007598 RSI: ffffc90000007560 RDI: ffffc90000006cf8 [ 1365.144724][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1365.152699][ C0] R10: 0000000000000004 R11: 0000000000093e32 R12: ffffc90000006d38 [ 1365.160690][ C0] R13: ffffc90000006ce8 R14: ffffc90000007590 R15: ffffc90000006d1c [ 1365.168685][ C0] FS: 0000000000000000(0000) GS:ffff8881249bf000(0000) knlGS:0000000000000000 [ 1365.177621][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.184212][ C0] CR2: 00000000008a0000 CR3: 000000006c70a000 CR4: 00000000003526f0 [ 1365.192282][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1365.200280][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1365.208313][ C0] Call Trace: [ 1365.211613][ C0] [ 1365.214488][ C0] unwind_next_frame+0x3de/0x20a0 [ 1365.219546][ C0] ? br_handle_frame_finish+0xe8e/0x1c20 [ 1365.225205][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1365.231380][ C0] arch_stack_walk+0x94/0x100 [ 1365.236098][ C0] ? br_nf_hook_thresh+0x301/0x410 [ 1365.241227][ C0] stack_trace_save+0x8e/0xc0 [ 1365.245915][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1365.251327][ C0] ? lock_acquire+0x179/0x350 [ 1365.256023][ C0] kasan_save_stack+0x33/0x60 [ 1365.260710][ C0] ? kasan_save_stack+0x33/0x60 [ 1365.265587][ C0] ? kasan_save_track+0x14/0x30 [ 1365.270447][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1365.275482][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1365.281127][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1365.285638][ C0] ? br_nf_forward_ip.part.0+0x28/0x810 [ 1365.291197][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 1365.296061][ C0] ? nf_hook_slow+0xbb/0x200 [ 1365.300660][ C0] ? nf_hook+0x45e/0x780 [ 1365.304927][ C0] ? __br_forward+0x1be/0x5b0 [ 1365.309628][ C0] ? maybe_deliver+0xf1/0x180 [ 1365.314320][ C0] ? br_flood+0x17c/0x650 [ 1365.318663][ C0] ? br_handle_frame_finish+0xe8e/0x1c20 [ 1365.324348][ C0] kasan_save_track+0x14/0x30 [ 1365.329060][ C0] __kasan_slab_alloc+0x89/0x90 [ 1365.333928][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1365.339417][ C0] ? ebt_do_table+0x1bd9/0x21a0 [ 1365.344295][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1365.348812][ C0] skb_ext_add+0xf8/0x7a0 [ 1365.353195][ C0] ? find_held_lock+0x2b/0x80 [ 1365.357887][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 1365.363279][ C0] br_nf_forward+0xf0f/0x1be0 [ 1365.367979][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1365.373104][ C0] nf_hook_slow+0xbb/0x200 [ 1365.377626][ C0] nf_hook+0x45e/0x780 [ 1365.381706][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1365.387174][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1365.391777][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1365.397254][ C0] __br_forward+0x1be/0x5b0 [ 1365.401782][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1365.407254][ C0] maybe_deliver+0xf1/0x180 [ 1365.411786][ C0] br_flood+0x17c/0x650 [ 1365.415958][ C0] br_handle_frame_finish+0xe8e/0x1c20 [ 1365.421436][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1365.427352][ C0] ? ip6t_do_table+0xc20/0x1be0 [ 1365.432228][ C0] ? nf_hook_slow+0x132/0x200 [ 1365.436919][ C0] br_nf_hook_thresh+0x301/0x410 [ 1365.441870][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1365.447799][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1365.453301][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1365.459228][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1365.465156][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1365.471070][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1365.477065][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1365.483064][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1365.488467][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1365.494462][ C0] ? lock_acquire+0x179/0x350 [ 1365.499160][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1365.505678][ C0] ? net_generic+0xea/0x2a0 [ 1365.510197][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1365.515246][ C0] br_handle_frame+0xad5/0x14a0 [ 1365.520121][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1365.525423][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1365.531333][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1365.536628][ C0] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 1365.543320][ C0] ? kasan_quarantine_put+0x60/0x240 [ 1365.548623][ C0] ? kmem_cache_free+0x2d4/0x4d0 [ 1365.553572][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1365.560713][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1365.565399][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1365.570616][ C0] ? ip6_mc_input+0x46c/0xfd0 [ 1365.575303][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1365.580338][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1365.585301][ C0] ? process_backlog+0x3f0/0x15e0 [ 1365.590336][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1365.596174][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1365.602621][ C0] ? lock_acquire+0x179/0x350 [ 1365.607322][ C0] ? process_backlog+0x3f0/0x15e0 [ 1365.612373][ C0] __netif_receive_skb+0x1d/0x160 [ 1365.617412][ C0] process_backlog+0x442/0x15e0 [ 1365.622287][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1365.627767][ C0] net_rx_action+0xa97/0x1010 [ 1365.632469][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1365.637595][ C0] ? mark_held_locks+0x49/0x80 [ 1365.642376][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1365.647592][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1365.652891][ C0] ? run_timer_base+0x121/0x190 [ 1365.657755][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1365.662970][ C0] handle_softirqs+0x216/0x8e0 [ 1365.667753][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1365.673072][ C0] ? __batadv_dat_purge.part.0+0x279/0x3a0 [ 1365.678891][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1365.684550][ C0] do_softirq+0xb2/0xf0 [ 1365.688721][ C0] [ 1365.691655][ C0] [ 1365.694593][ C0] __local_bh_enable_ip+0x100/0x120 [ 1365.699804][ C0] __batadv_dat_purge.part.0+0x279/0x3a0 [ 1365.705453][ C0] batadv_dat_purge+0x4b/0xa0 [ 1365.710158][ C0] process_one_work+0x9cc/0x1b70 [ 1365.715117][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1365.720504][ C0] ? assign_work+0x1a0/0x250 [ 1365.725117][ C0] rescuer_thread+0x620/0xea0 [ 1365.729811][ C0] ? rcu_is_watching+0x12/0xc0 [ 1365.734582][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1365.739784][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1365.745013][ C0] ? __kthread_parkme+0x19e/0x250 [ 1365.750053][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1365.755259][ C0] kthread+0x3c2/0x780 [ 1365.759350][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.763955][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.768564][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.773183][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.777793][ C0] ? rcu_is_watching+0x12/0xc0 [ 1365.782583][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.787194][ C0] ret_from_fork+0x45/0x80 [ 1365.791619][ C0] ? __pfx_kthread+0x10/0x10 [ 1365.796228][ C0] ret_from_fork_asm+0x1a/0x30 [ 1365.801028][ C0] [ 1365.805231][ C0] net_ratelimit: 7460 callbacks suppressed [ 1365.805258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1365.823382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.835659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.848765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1365.861168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.873471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.886593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1365.898884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.911164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.926290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1370.806667][ C0] net_ratelimit: 5524 callbacks suppressed [ 1370.806689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.825686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1370.838038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1370.850307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.862659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.875794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1370.888102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1370.900469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.912867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.926011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:7a:70:a4:2d, vlan:0) [ 1371.570153][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1373.475569][ T1302] ieee802154 phy1 wpan1: encryption failed: -22