last executing test programs: 7.228822553s ago: executing program 3 (id=6338): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x6000000, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 6.109233453s ago: executing program 0 (id=6343): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000140)="27d3aff584067a") (async) mmap$auto(0x3, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/19, 0x13) (async) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x8, 0xd, "2e5710c910109d7e"}, &(0x7f0000001180), 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00', 0x0}) r3 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x101200, 0x0) (async) r4 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000001100)={0xaf, 0x2, "31443eaba9a389a0b1b7b664be0bc16fe28f8b0429fdb78d5b28a24226ed27332f6e9c8656bee2eca658562e8919d350f991e2c8269b749b734398dca257137138703b82bda8d1640a3c999c997bc3892e4ac4a3cb9b94e695df226aeb118fa615767fd8b9d1fa4d0f9d47e63c26fe848e6c118a2f0ebc396b8f262826cc67e7a0562b24ef9ab5ae119d0de88bc1bb5907fea7beff6608f62b76cc6122caee93081f0e041f119c8d71a028688c9e28"}, 0xfffffff7) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f00000011c0)=@bpf_attr_3={0x0, 0x8, 0x8, 0x1000, 0x3, 0x0, 0x400, 0x1, 0xfffffffe, "b7ab98bcc0594ddb16c0d81905553650", 0x0, 0x2cc, 0xffffffffffffffff, 0x8, 0x9, 0x1ff, 0x800, 0xa1fe, 0x5, 0x5, @attach_prog_fd, 0x8, 0x10000, 0xd, 0x6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0x2) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000001280)=@bpf_attr_0={0xd, 0x2, 0x9, 0x8, 0x6, r1, 0x4, "cce95c37639db467e5ee729742b7e440", r2, r3, 0x7, 0x2, 0x8, 0x8001, r4, r5}, 0x0) (async) setresuid$auto(0x2, 0x7, 0x8080) (async) r7 = clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) (async) r8 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r8, 0x0, 0x80000000006) (async) tkill$auto(r7, 0x9) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r9, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) socket(0x23, 0xa, 0x5) 5.894383294s ago: executing program 1 (id=6344): r0 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001700), r0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001900)={0x31c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HE_CAPABILITY={0x32, 0x10d, "4eb8a213337e217662a329a98f45007ac40c465146a8e0168c6c5c26c3d3f240500d3bc5a5edb433f90cb777b020"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_PROBE_RESP={0x2a9, 0x91, "1a5b816d17c9fc60e1602cb03b2c45e212195e56dc822ea51ed741bca8cb0736d25e72cf679599aa3befea1d99d25d9691332d85fdaca9c4249eee1668358ae6e84978e1b5f1dd6036e6169ed818eeef97f80c22579a613f1c3e81973372b5f5ccb9501653c892e3e5c32ad0e9e519de2fe7f32780f1e5a38aaa319ef42c02c0a70aeb83245b5d159a216dd0fe221c45fa796ce7328f7d38b476ce3623afbda8a1439d22de4d867070becb32d166b884b695cd2b4d68f1f477d16791555d724b1e452ce742464387ec00efc86c499d517d75e704e72aa1838875523ac3fed690f3d93ccf23c980b028b6e458d38936521c7ba07821b8d8fe5405f72d024515c9828ab9e479fc1796e52d5e7b69d2f04ab06a0701fa38a280ccd546eecf90be480c16231f2bda647c210f9a0a870c6f710539fb2535245b18e34f21df1f0f44811a39a38ac90658f7dcf815fa36522bd7f7ad8ff630f18b7944433e8ed3b7219bb42bc52d638326218f8fd36b2e4b3884a2465997704c709f9ed158300b6f91ab14efdf2f3c176e8810f2d482530ab63778834d958fb33c70f3c046510144008ee7c7466b7cb95ae09d5aa892ad9ddd8013b8dde1cc1b1639aed3da8ed00df5523e17752e3207393501cc56e7e4a6c697d9d643e0a6f874ae36bfe53b22f9039bd8480580f9ed922a3870c29260d9888ffc806b2855c80b823407c9b7bffc84cd57a71eee6f264a9b7a667dc6c71fb808eda6946c408b4aee880f053d15ce704698690d1a34795a19e26ffef07d1591390c195c7566d3ba7b098e6cc1ce5affafc11374c0cb22d98e11f006988f40b10097d09b360f24a5017894131b74a2a54632791aa7bf2d526cd970f379bb189934b41381a2af912944f8d14c7c3635810ae21415c02c09f6ab8f89eff103690622de4175dddce6db9226fe093cb7ddf09e81f1640286"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "db046392aa3a63"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4096, 0x1000) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000001140)={0x2, 0xb, 0x10001, 0x0, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 5.594879941s ago: executing program 0 (id=6347): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/102, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x2, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r1, 0x542e, r1) (async) ioctl$auto(r1, 0x542e, r1) close_range$auto(r1, 0x8, 0x4) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) (async) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0x1568, 0x6, 0x15aa, r3, 0x4, 0xf}, 0x3) (async) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0x1568, 0x6, 0x15aa, r3, 0x4, 0xf}, 0x3) dup3$auto(r5, r4, 0x176e) (async) dup3$auto(r5, r4, 0x176e) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000300)={0x401, 0x4, 0x58e7, 0x27, 0xec, "5cbbbc85932737cad706055b4719ba942d49a760beb05c834034f4500a7dbccf636fe76a0d3d06ecc6b8b4b9a6b7b09a80e1bd314d4f56ddd39f0d21"}) (async) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000300)={0x401, 0x4, 0x58e7, 0x27, 0xec, "5cbbbc85932737cad706055b4719ba942d49a760beb05c834034f4500a7dbccf636fe76a0d3d06ecc6b8b4b9a6b7b09a80e1bd314d4f56ddd39f0d21"}) statmount$auto(&(0x7f0000000040)={0xfffffc00, @inferred=r5, 0x19, 0x6, 0x8000}, &(0x7f00000000c0)={0x5a, 0x7, 0x19a78eb5, 0x3, 0x6, 0x0, 0x1, 0x1000, 0x30d, 0x54, 0x10000, 0x80, 0x40, 0x2, 0xfffffffffffffffa, 0x4, 0x81, 0x9fb, 0x4, 0xffffffff80000000, 0x2, 0x6, 0x1000, 0x8, 0x0, 0x7f, 0x6, 0xc, 0x80, 0x4, 0xfffffffd, [0x7, 0x0, 0x7, 0x1, 0x1, 0xff, 0x8, 0xaba, 0x4, 0xe18, 0x5, 0x0, 0x2, 0x9d, 0x5, 0x8000, 0x4, 0x200, 0x5, 0x0, 0x7fff, 0x2, 0x8, 0x7, 0xfffffffffffffff4, 0x40, 0x0, 0x887, 0x8000000000000001, 0x5, 0x81, 0x2, 0x5, 0x7f, 0x8, 0x1, 0x5, 0x9, 0x2, 0x6, 0x6256, 0x5e1c, 0x9], "80762d9f8af8e3d1df57c13bb545f490b302bf3080fb565b5f870f926d7f3f2e7346f31f9da63a64dd21ddf09a71fa20a29d4f45ec"}, 0x1, 0x3) (async) statmount$auto(&(0x7f0000000040)={0xfffffc00, @inferred=r5, 0x19, 0x6, 0x8000}, &(0x7f00000000c0)={0x5a, 0x7, 0x19a78eb5, 0x3, 0x6, 0x0, 0x1, 0x1000, 0x30d, 0x54, 0x10000, 0x80, 0x40, 0x2, 0xfffffffffffffffa, 0x4, 0x81, 0x9fb, 0x4, 0xffffffff80000000, 0x2, 0x6, 0x1000, 0x8, 0x0, 0x7f, 0x6, 0xc, 0x80, 0x4, 0xfffffffd, [0x7, 0x0, 0x7, 0x1, 0x1, 0xff, 0x8, 0xaba, 0x4, 0xe18, 0x5, 0x0, 0x2, 0x9d, 0x5, 0x8000, 0x4, 0x200, 0x5, 0x0, 0x7fff, 0x2, 0x8, 0x7, 0xfffffffffffffff4, 0x40, 0x0, 0x887, 0x8000000000000001, 0x5, 0x81, 0x2, 0x5, 0x7f, 0x8, 0x1, 0x5, 0x9, 0x2, 0x6, 0x6256, 0x5e1c, 0x9], "80762d9f8af8e3d1df57c13bb545f490b302bf3080fb565b5f870f926d7f3f2e7346f31f9da63a64dd21ddf09a71fa20a29d4f45ec"}, 0x1, 0x3) 5.590618559s ago: executing program 3 (id=6348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x18000000) 4.982220746s ago: executing program 3 (id=6350): sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="080000008657907b26f0f7e31866e3cd6c817ca4580ebb2d86270fa735533817a2a689882938a209854a6dc3569f5544ad2b5be91d175cf4b9f85b2e11eb6c49c007ac1af72bb71fe256176f9b0360a7fd5170fbb02f5a5d1ab7f6e6554c", @ANYRES16=0x0, @ANYBLOB="0100273d7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_SEND_32(r1, 0x40449426, &(0x7f00000005c0)={@inferred=0xffffffffffffffff, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf251700000005003d000200000006006d00730e000008002700050000000400f40005002f01a50000000100000000000000000000000000000000000000ea0d96cbd38d6514af7b726a6b08bf3a2cf919675c7a58c2ef99278483ef25da7655d9294502"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x168, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "34cd"}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x98}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x102, 0xbb, "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"}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xae}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xe}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7fff}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="080000008657907b26f0f7e31866e3cd6c817ca4580ebb2d86270fa735533817a2a689882938a209854a6dc3569f5544ad2b5be91d175cf4b9f85b2e11eb6c49c007ac1af72bb71fe256176f9b0360a7fd5170fbb02f5a5d1ab7f6e6554c", @ANYRES16=0x0, @ANYBLOB="0100273d7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$auto_BTRFS_IOC_SEND_32(r1, 0x40449426, &(0x7f00000005c0)={@inferred, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf251700000005003d000200000006006d00730e000008002700050000000400f40005002f01a50000000100000000000000000000000000000000000000ea0d96cbd38d6514af7b726a6b08bf3a2cf919675c7a58c2ef99278483ef25da7655d9294502"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x168, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "34cd"}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x98}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x102, 0xbb, "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"}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xae}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xe}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7fff}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) 4.747487911s ago: executing program 1 (id=6351): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x8000000000003, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 4.560775036s ago: executing program 3 (id=6353): socket(0x15, 0x5, 0x0) (async) r0 = bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, r0, 0x8000) keyctl$auto(0x1d, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x7, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x1000) (async) readv$auto(r1, &(0x7f0000000400)={0x0, 0x40}, 0x6) 4.479450285s ago: executing program 0 (id=6354): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007e80)='/sys/devices/virtual/net/lapb4/statistics/rx_frame_errors\x00', 0x181000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000007ec0)=""/254, 0xfe) r4 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) ioctl$auto_SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000040)="0a50684c17836868fe3dfdbbf6a174dcbdef813c1f9c1f46f1aa663b7e0f6f55fc1a4158535521263541c9d656ded87bcde0e2a09b18f765e8024e13877f40ad1dacfbae63825cf0ad17091a3793e0668531be609063ffe193f93bc975c202b9") mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r6 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r6, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) 3.320823266s ago: executing program 3 (id=6356): memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x20df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x741000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f00000006c0)='[{%\xbc::(\x00', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0x200, 0x15) prctl$auto(0x39, 0x1, 0x0, 0x8, 0x3ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) madvise$auto(0x0, 0x20000a, 0x4) unshare$auto(0x40000080) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6) socket(0xa, 0x2, 0x10) socket(0xa, 0x2, 0x3a) r5 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000200)=@link_update={r5, @new_map_fd, 0x8}, 0xa3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3d02004f", @ANYRES32=r0, @ANYRESDEC=r5, @ANYRES8=r6, @ANYRESHEX=r4], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 2.565790692s ago: executing program 2 (id=6357): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x1e010000, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 2.370078726s ago: executing program 1 (id=6358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x2c000000) 2.145888048s ago: executing program 0 (id=6359): r0 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001700), r0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001900)={0x31c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HE_CAPABILITY={0x32, 0x10d, "4eb8a213337e217662a329a98f45007ac40c465146a8e0168c6c5c26c3d3f240500d3bc5a5edb433f90cb777b020"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_PROBE_RESP={0x2a9, 0x91, "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"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "db046392aa3a63"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4096, 0x1000) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000001140)={0x2, 0xb, 0x10001, 0x0, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 2.054160726s ago: executing program 2 (id=6360): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) (async) r0 = socket(0x2, 0x801, 0x100) listen$auto(r0, 0x200005) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x40001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = bpf$auto(0x400, &(0x7f0000000280)=@link_create={@map_fd=0xffffffffffffffff, @target_fd=r0, 0x8, 0x8, @kprobe_multi={0x10cd, 0x2, 0x3, 0x5, 0x3}}, 0x6f4) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x2) (async) close_range$auto(r2, r6, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port3/power/runtime_status\x00', 0x351200, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) sendmsg$auto_NL80211_CMD_DEL_PMK(r5, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0400d700001a004e0176bf3469890194db588952aa8343b6d44579184f04c4000004004e011000b000d0708d9055775c12c8", @ANYRES32=r4, @ANYRESDEC=r1], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) madvise$auto(0x0, 0x2003ec, 0x14) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) mprotect$auto(0x0, 0xe6a, 0x6) 1.760536005s ago: executing program 2 (id=6361): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_uinput_fops_uinput(r0, 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x8000000000000001, 0x40eb1, r1, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x210, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000200df, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x12, 0x0, 0x28) connect$auto(0x3, &(0x7f00000000c0), 0x55) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/019/001\x00', 0x1, 0x0) 1.745646159s ago: executing program 1 (id=6362): mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) (async) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) 1.112119346s ago: executing program 1 (id=6363): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r1) write$auto(0x3, 0x0, 0xfdef) 840.422935ms ago: executing program 0 (id=6364): mmap$auto(0x0, 0x9, 0x10004000000000df, 0x100010ef0, 0xffffffffffffffff, 0x8003) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0xffffffffffffff67) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/4/smp_affinity\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) ioctl$auto(r0, 0x64c6, 0x1e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x210) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x24480, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r2, 0xffffffff, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x410000, 0x9, 0x8, 0x4, 0x7, 0x2, 0xfffeffff}, 0x10001) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0781, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x5, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.weight\x00', 0x400, 0x0) read$auto(r3, 0x0, 0x20) 537.033404ms ago: executing program 2 (id=6365): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0xa22c0, 0x155) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="08000200fbffffffffffffff0000f8f9571400000000"], 0x1c}}, 0x20000000) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x8000, 0xe) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/blkio.bfq.weight\x00', 0x0, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/nbd9\x00', 0x2000, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r3, 0x86, 0x8, 0x2) r4 = socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) r5 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") stat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x8001, 0xffffffffffff6134, 0x0, 0xee00, 0xee00, 0x0, 0x6, 0x2, 0x8, 0x8, 0x5, 0x10000, 0x6, 0x4a, 0x8, 0x3}) r7 = gettid() waitid$auto_P_PGID(0x2, r7, 0x0, 0x4, 0x0) r8 = clone$auto(0x6, 0x0, &(0x7f00000002c0)=0xe, &(0x7f0000000300)=0x1, 0x5) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000340)={0x1294, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_PEER={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xfffffffa}, @NL802154_ATTR_WPAN_PHY_CAPS={0x125e, 0x18, 0x0, 0x1, [@generic="313e4cec7d01c401f74d5c174b0cc8770fb0bd63371d9d854583a1268f3ebc2bff1c4284031325ae6328ac4918d2c9018bdda16361f38ae0e374dfb131e7bcc29d5108e970877679b3f9f37df0a7504164cb975a3ae0fe33317f2424f0afdfdd1c2d09c7c7e98c75e0bcac873735659f91313352867f9cd0efbc57daff79ab3904761a4633cbbd1d3733b5a7d416443a9ad3b41f041ee4bba361e98d1063e3b4cf28afc563f9c2073098bf69f220323f5a9f9d9becf43cbb45067207d3c4ec992371e898b6e14e3edff9e7c8647d3e68c0fa", @generic="6e1dfa7b2e47ffdc64f312dbd24c375f3d7f4ff3a85901997418c1999645863c15336d0dc76c069e8eb03b8ab0440cf9e98386473b0cb4b21a86e09d0d199c8092213028695c44171348a2b57c858bb6b08715fbb719753537ded6261ef55dd2e8e3eaac253a41f8c6578549be874a067b68844cea106e2ed964ac2d3ab69c40a18b97f7fc146ebab46494f76a8dcc2839ba4910", @typed={0x8, 0x12f, 0x0, 0x0, @pid=r8}, @generic="ae6f5a5a83168c8ab59a8d85f52d552698b9ca49a246ab09", @nested={0x10d2, 0x88, 0x0, 0x1, [@nested={0x4, 0x10d}, @nested={0x4, 0x9}, @nested={0x4, 0xae}, @generic="99e8a415431998bf1ab7e67e788edbd2e620f2861cff0801dd18b116dcc6a4dedb89ee6a54ad08dace17b1c91af25d103c51de2a8cdfe34d085d425aa3447f8d1f30681d8d9aae1bb7f2d0a3718e6b7edfa05464d705644175a3aabedc0c5461d64bb47674447cb4d9fdbc13745a57f4640ca06366c703fccb8740200f87812b58d338ab95ea7a27339e04a383e45414607b822c7345b4cec5eac5bf00ccb1647e295be30518d71277d69e53c17d", @typed={0x8, 0xac, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x145}, @nested={0x4, 0x1f}, @generic="59ca39ef6e92f68ae66b65eee0a1fcfd59167950fe021b04325a288aecb1e6efb7fd88a259f5d09c4dab6c03e7763f1bcacfc64f8183af2ddfaf17cdb7c3389ca121da7868e24a04a75545aecd65d6dab84775850ed1fcbc2dc5f44aa3c6c2536d0f206565e3003d774dfdc87c03eaab81399d2c48f19c6fd0dd87dfc9b0260fcb1fa0d56b5b4493663fa9519ca1b323fab1856655fb4a64750f0a8a03f1ee3129203bc65d93f3bcdbed170c10f6b50bc6684a9435de72591848a30417a8c5bf34ccec40982c74c324e1efca3f847571dbbab7e52699b607310a230e34e460b988ffe6b7bdf2749827bf2a790b3430c8e4ecc9c51c3c4a34c7a49a2cc44ed5277e895e7dbc93282172c383f3f20869c79d690728da0c4bfc877bf8d9b25a46595128c70ebfd776fb1951247bf7c270e12f8659c78ab7a993c16dd02f18588eee8a242a4a650e0e64c86c350cfa0dead1566c6b7cbe13eb983b8d6e1ec03f480d985cbe3f6bad63c4b284601fb2f6add01fb78e17bc56f7a63260ee413cd9b0823f1a144bc53096b2b3ea7547f98096a48759fa72bc8b4ecaaf6548aa2eb452c9ffc1566441dfe9b5b82218e5581aa3b84b1c7d4c02ae711d49bbd164146d3910ae0be7d8b366468fe7b2f7bfbb09786931c2376b203981d89a29463140e32f344ee70f19bb724d2c7b7686d8e832a0732ee357db1bc993d7ffeec22745937451d86b6ef51df074f5c9b21ec160625278aa63dd73de37155595b77852b8dcce28c86a1b6ba604682f019f530a5188f89a1acea4c1bc017aec680b115230572210bfe43467385ad31ff33795de62b4402050f47303be22ecda7d2e92153c0761439b8f5bd90fb59ed203a17c4fc0bc3ca12411acbd4287b2961fda0e4cd098e665cea85ae80c8df345519f64d6b77cf57a52056a96cf745d7562cab72d0b311d38c661d163540690f520f4141510058f0a11754765353d9b177aad6dbbab1a6d10c76c81e23003ece96a47844d68ff19bb494b382fc950d5176d6f92c070e1194388d198a3c664cde818437be2d2f4062ae6d44d641406d6c33c860189c9d763c99369aab56e0e866ec416fbd31efa9e3bb92300a4d38f4a8c3e6db636692522874496a4769f53fb3a378482b8d62e4ea9e37f4f41045c0b9a3924ae87efb142819a008661b4309aa1ab92851c87612006fd88aa51a3828e9ac38d63592c37dbbea9af723096e6445e9e0122841ea6cfffaca2b736e65bb1254dfc7b2ea907158ec9eb206c95b883cbe74456060f407916eb2870e59fb620b4b221ce7c2f466a809f7c4fcfa4ddd925e297d7b23af50273a432de9077409fcc838f13d55458132766cfb5b31298024e9bdacc20b259eb8dc856833e3927a91f495988c127188158d55d97fd605f038801e3b78b410686a19d8343552e142f7d4d60eeaa9724be06ec3c388f44febb8fe6546b59a36d8fafe611b5ad63df2cd02a957b1041580b4c47a1fcb40b1a1f323f362c723fe28e534a7c02c4b0202b96647db6c29b06629d90f2990bb452888711c0fc96b98f257064f1dca22b470799906eb9caaffcb3f8726b7ec7421778584de24ec4bc7fb0852187225067ac3cd9151653db61ecce9769c70e5d3a4f8ab2c5a007cdb7a1a1305d6dacdc6d0fa4ebd7f896875d315139fb208fa84073d513ec470031316f66ba74127f0df290b8575474ad14b99c399d03000bee461613a36dffded49191fa3739128df73ac42e2129aa279cb898beba35223e90cb2d6dfbbeae303f3d1c93d35e40f36772bdd56553b910c2bc5f3f4c036fe7985cbf0a50726276feb0262fcf7b33a16dcce016353c54101774117d571b67f3e5b050c89617afe3e30f5a1354987fd1c504e0318ca1d1f79c5459261725e31fc8297d0843dadf6089b7a2304871de57ad118a15c50e124ac56d1d59b9da0ea74ab1b2b6ccb08b41d8c54e386d1c731051578da3b6c60418b8e9de07f51cc5fec2a363e6735e98ce2a09b096b117b90913ba46e9c4d67328f67ffa233b31e3cf610c08b1507d5c151ee87d384ec2a572322bcf0e99a050a12d690c2e1069e64215f437ef565976f9ccba899ce640ba37f249f73b619fe92e87dba71fc323597f23afbe9015657fb036dd32aea9e3a508de46ece2201d8c2b6086a79c3250ae1098444ce3b7fc2b6b4bb8bed2e47fe1ff5ed9fb8b8ddf8637cb57c34e959e31e7b406cf2eb2100974c271609e45ae9fa62d0d596f12f09f700afc91b3e9b2307c31250769336f595c38a3dafac39a68384edc59fa56a4c98af7ad75a81d85a96d9caccc1afc197a6cee33fdcc3fca90bb0a2add82e0612b9c8230d09a7f0e19271b6b76bfe2ecf276589b783252721e8aaee3cff94af0145a6a316c4d26a4b0c4bd6542cefa84d30ae285a46b882d0d85faa814a141be3727c51a9c76abba406cb449a3275b7cef145dad199150988c36aac13110056dac515bb9882005ad4e187241d3aa0102a6b6e5297cd77c31d035ec3254a9680efc060d682e6ca9c9724e48511c00ce681dbe5ccfed621045d0bb0229fda3372caa3f25e7f15cd5e48bcf4675ec9ff88dbe5ac95c51fb87a82c28227934f1575c37a62d5a2f1bd368ec2f725a7b542dc121dfad268f651129a697efeffb6cbdec801c1997e227fe328101940de7a96db91ac73a1edd44245026163a7cc20257502992e1ffb055e7a7be766b5bf2749990450eabdd432533fedfde2cfc9d0361b4e38fcbb1c18f573592e7b42cec13d42a519d120c62b5be05fb5dd5487b08dc0cce9877ffde5d4596d45737ac5ee052cd000fec135209931eca92c341ed5aee5f95a8fe3cb40fae16974eda0da8a46e9d3cd75b0b4f3a37beb762d2b82b9781752a9d35df4db80960003142f5e3a527c4241bef8ba17d2e4f3ba579175fb6a01e094a2768fdfeccf787e6b0391854fcae2676f9ae83d79d901c7d193db14d3fe1bb4536707c151ee0274fd8e0094a56d70d6e836009d9fe7970cb765e3c9b71baec816555c3c2b5bf393fdc3bd3b269e857cbd4d76ac7a7e032e0db90997489f3f0e51ffe6c72e35537da1c0aab751260c5ec03429df603874deb84c5ca056439004f0b3d912cd7637b11043366d073ba101c32a6ac8429c06ee0c40d2743b79db4484b87b57f3a6873980aa26277225679bccc75cb1e28d652df82142e3f427d6a8340bdaed218ac45e6fd3a01d047e0d6ed43766f0781cca04631a907f29583f8a708c75975dfe78375c71586251c547f0c22d94bd5e516e6fbd9579725645febe9368b014c376fbbf0ef1c3fbb32903266f840fa4d96582d32a8e14a1ec1a9ff812f82ce8985eca98ebfece8b24fe698a16fb348f947ee1614822d89715953dd1bd6b2ccb3a371c7b91c935e0b038f78495053b8d307857b3c68d9de0bdf14287cb3c63440ab32b07855c7309202474eb94270faf31b0f7e595451fb03d14906f346335d715fefb7bf46ff1af8c68618ae769ba2a2557efa6b00ffa023bcf3d629b415ceaab7aac203eeabb794fcd165ef6728cbdacf617ead14cda4b9c84ce95abc7ccab3c5e74cbe3a7588c8cf878c156183e2e2d1f88b71e29b3d62842a70a29f0506c63c13b454721dbddb1de6210ab46b7d177bdb4558be431e6332ebedf70c0137906cba6e1da73837e9f3646fd8fd8895946b02017f32dc762d1bc73931a3ad50a8632ea7083f5086b9bbfe805a8d7ebd06483d4e7c46eb8469277a83cd81bc6b5159481f590966d2b1367d6ecca6772ffb02df1640d07c49ff290cdaa0b24e5185ca8f6c2c76812ddbb9058b222b379ed1d1c8afc9b606156f73bd8d842abe8618d4425f563a5d9c51dadfb78a53500c5cead0bb2d1e839a8bb3b3077e04395d58628fbdd6a6d4b20a0b14bfab011fdc758ae98a9d9488204088ecb784eed39bae30073c9bb7c042b71a8e38ec9c5973cd3a13d2d084057aed01d0d79752f2b0ba454d098fa5486bb11d9547a2484b893087abf478629a607479d22f6d9169eab77fee734ffb20bb40baaca7b96cd71f6066be99f031d67779665ee8af95ac5bad40b1e8ffb933acbd0ef1b57da712b4d1750474d9b247431b3db3a58922e6f49cedcbb21591cd11a0bda687a5a7cc9151674043f9b0a08c36102267a458a8c4666bbecf055d0f377c905c73d2e1ac9ce8ddf8c1140ec09fef84b987bba4f9c124bd7a566fb59eb865550b5efd3772b8cd07eb57e183c4cff5a4b8fb8e3c2004b0cdb289d7c07d8e9e1a2cfc58d1bd0d65dedecb26b085df911f34917371365f88a73a62e065c41a2288d6a6f9f5e8c7b6beae6190ecb2c3140120817f1ff9cbd2bdf1d219d09efe41731a7f4d32f595063940b80a8f466b28a4f4befcb816f640db4aaee323192f5d46dec196965d44ba19fe9b881da0da848ca3066435368be547b37dd465ba9e4701f2734932788e2ca5cb23ca9bf69630e87e945482aed9f1e52959e7f66f2360025ebe59f49ffe707833247159af31438caa9e93a7de5dfd0bd65deb31e88a809b7ffa652ded3c2f686c3d02e2d43d5244ca8d167f315500168501016494795aee0514143a620009610cf69d5a3a08e0dfd8d9e0b9a3c4111626456147557506731384a2056c1b078fe3f259540a7db8aaf4ccaea72242d8f44a0a41a7dd609997aa56bcaa10073051570318e67a338ee0155ad1b87b019cf91e059bee88049ef3b8abd4cf2c55b5a2781ff19c6a29b1f47b988487904df795f6165edf4251773c649fc01b958b802a66e7436b4459b74afe62b06a310c74c1559953485f57f412c48fa2bda903c5f81a8401d9e0a8a018d88ac63be232d379af5bc91206a7b4c53021dca00bde619cd9a1bb8157e49c3231cc50c3de577e5eeb83209114f0ebef34630a6bc63fc3bca5c68fc1a962f0de832e9011889a7de1506cf6368e924b44f94735293303cb058a5eb348a8b0b70e938e36fb2fffeed51422886b6bdbc587667e80ac4bf42c525920f602d48c8528dbb7dc4acad386c55fe950698b870d151ec7ad5b430a20d0b55e180246cde5521e66fbb66b34c5aba7c7b9b79fdf889a3e1292437049088851ff885fbe7ea956ef47e8f4d4dc23672c50e06e2b0944def1d3694194f52bd5611cc6e4bed370abced711f67a1e33ba8c464c078566e18df0f8589832e8ca2223e686060c7358159443af9c887bc1b7cb33549fd7211cba9826bcbcd0e96c1331baea0f7e2f4ca9842cdaf3964cbaab4bbdc5d4b1b42a7bf4c862ad0799707cfa73a0c06b987c8ff6989940f6ab86773a7a2c4a60f163e352cd61089fb54048041b07edcdbf7bc9d84ec9e40224e8f45e7255236c09b216cced83d6f99f7721fa857b389caf677025fa255f09490002b04552de8c5427042240e4ca86fa3bf30261cb24a6decbd8a23546dfb14421a5d2b7c3ac7ca1bbea6633a05db67595d1a14522f3bf7fbf61731fcc3508825f2fcdb247ded5c4f2bcdb914d5410db6c075a85a4eaece3b439aaa07b8c846cea75e0a3c3a445576b1b018a8222feab6f8abea42dc73a1346f7e8c1b0d399cfe1e827bfd50f0aab6711c06813dcf23e1e39d6bcd0bfc9891597521cad4d09c87e622a90992c61f66cb14845476f7f167620938e290a2d68ff29dea43394b97c5bc6164ebcff1860ab411f99564244bca3a0fb3b530cf200093c6d1808443b732eefa4cd2e0e958185abebb4eed5c363c1c29619f3ad07093ce4e21cb1622d77fe63a41a178f28889f9bd42f65ec9ecd06a6c94007fb407c32ab33b2526d6403db8c", @nested={0x4, 0x147}]}]}]}, 0x1294}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) 271.205906ms ago: executing program 1 (id=6366): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) close$auto(r0) read$auto(r0, 0x0, 0x20) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r3 = socket(0x28, 0x6, 0x0) sendmmsg$auto(r3, 0x0, 0x3, 0x0) (async) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) eventfd2$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) pipe$auto(0x0) (async) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r4 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x80044943, 0x0) 267.551085ms ago: executing program 2 (id=6367): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0xa) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x8}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x40) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 162.649788ms ago: executing program 2 (id=6368): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x8000000000003, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20fdffff", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 104.145246ms ago: executing program 3 (id=6369): alarm$auto(0x5) alarm$auto(0x970) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)="ef9b298011498cc578cb857f04ade1a450f4aa3378735ef9f2fde370f5f341d8db73b1795b52cc07bc324aeb03bd8eb4fee983f4408e9ec9b5fa89c78910c6ab5db5f940523a936a839d3334cd133d2ed94b453d0e04c3179445d80fa25862296f175226faea1bcb423e3905f02c7a8c46e0eb350d8443669d0b") r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x509042, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="7d00c41849efaaf99caef398c93dded8ff90a36a0df2076cbd9ac586ac21778692b774590d5f6b6ac40e6cb9f6a29b44e98154d6f2d3f76f2e430417e5efcad12064cb9bd31b0ffbf4541b96c70dac507c37906fb90f989170af8021c9654344bfd51aaf24567d4692f8d4e6288f9e510ba48177531e23681b66931ca2ef2e56357aff864523dd0115a13f1b50d3cac163a482063577de436a6b60ac56f7cd8c31acc9324befa6012591537e1e007537a6740604941279eb6023ff64740192a28ff326042d6346abd486739d8b5f59203cb8126d2a10a5d7017263d4c60af225772c58e8b4c3") openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0) r1 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000200)={@inferred=r0, 0x6, 0x5e, @unused, @subvolid=0x81}) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000001200)="9587cb3aaba74ffb492f7895fb27b594403c7ed141b667ef7c1e294c6720151d42f5fa1ef8062fd6bb4b45f30c141ac392520cbbc1b8186ba1e22890ce22a277aacd336d7c8d4acf84f82f8e1dd9b23cf8fb0871f26ac97e1f23d45789e41e", 0x5f) alarm$auto(0x2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000012c0), r1) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001300)={0x1b0, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xb395}, @NL80211_ATTR_FILS_ERP_REALM={0xf5, 0xfa, "fad2967d5c3c9132ac5446068357515cc52fdc823d3c107beae79cb3ad29ee159fa3030dd0095db1a7adccc0e767cb37c0bde47694f257a4652d6e969dc8c5991ecf6c2d20fceb65699d6b58c51d01e8577dbc52bdc03b97c9d921cdac25e0b4d43fb0cc834b3273752941b544a91bbd326427b51e69f1079a5bbccebd029f4d8cae5c792b700dd8330d82fd06586facb034dfc001905ec60d859dd5a02a1752d07ba66fb621d54d0c4a5766723501d68374c1be19410a39f42f3a9a4cd7cfba686c318b1b3c15daca0b09b265368d412602a6c3693d79a286060ed9c90852151f45335d10bfee8792dff95ba4173f156f"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x47, 0x17, "0291221ae62b857f6d921e684aa6613fc0e01338e1cb2449eec3b1091c27aa0f6fe8d9ad35d742b4d2bb4194bda47845767d63b53bbf45ac478aca9c35be761923e57e"}, @NL80211_ATTR_FILS_KEK={0x23, 0xf2, "3936a92fc54e5db4fdd394ad102fc79064bc1d88af7734ed947f7d9dc8c681"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "abe21993d95baf40292f4537255be5d8f5bbe14857ad3f56"}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x160, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_REG_ALPHA2={0x3b, 0x21, "918be0f04c543a7c565653229a1875c27be9712b808ee76a4e0fe1be3493b38c3a3cb8d8058c56312da21a8e414f58980a5231c90fbc4f"}, @NL80211_ATTR_BEACON_TAIL={0xfa, 0xf, "6367a350d72d11791963c8dfed3f7f23e726c37c52a37d8b945c8af45b72e7a6c4326e62e8a3ce34bf6ee718b9f757c5238c8d3bb786855111e8a521c0490ccd268b02df906051199a31688023569498a0c5eb88afd77c1c304af1b497d58af139e638c05c89c65f9a43170b61f0021b9cefd7309a200eb6ed4b071be13a7b0e51aa7d3f55ebe58574816bd9db1c4f5a136f26313ff6977d62fcfd61fc4e514ccc77879d514d93d0fe0dd2c4e6cf557a57bc781741f18338b8e75c33a09354d22cdd95a5078ae6ef1a1d1de3c9ff2dc2c82cc7f051ed76e92adaa76da8239d41872ce450377d75d7f55aa04fe66432f651cdcd4576ad"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x40}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x40080) alarm$auto(0x6) alarm$auto(0xfff) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/config/nullb/features\x00', 0x880, 0x0) write$auto_configfs_file_operations_configfs_internal(r5, &(0x7f0000001800)="b22f664be3f2c8421c3de41f2b322d72bb43af34d3625c0d535fe51cadf62b922e697e5cb62412c586a4478ba1d6fd26c191b512bdae43b39f6b2fbd565418e3aad3a008313d28809296a348fb3d973ad7098ba413c5bf733445297d3347ea7a677c2f2369b6e426ef803e3602091ef5b0602fb233f8894930770f2f78df42b8df5381cd17ed22a6a13df211e3b567c0e028bfd5", 0x94) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x108, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEVICE_LIST={0x9e, 0x9, 0x0, 0x1, [@generic="19ecdee2d1f244cb2bfc95d658860e3fb26e9ca939bf3d8f25fb76fbe157de84736ae2344854873e5e04a8915984e1075e7489034e527e5a975f6b28b9c1e96d8ebc1e95365306f7a9f71ad2b6231104415c8006c30c6ab25059e2072b8777e0e7a1afe9da771fded25761d8e14559f24684f58c6045992dc3494d1ff1ca443494c48811517e9f60e60a36d67f98928f411bc3fe246c51d230da"]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/dsp\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/fb1\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ec9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/dsp\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x8051) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x40, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r2, 0x5509, 0x0) r6 = open_tree_attr$auto(r2, &(0x7f0000001b40)='./file0\x00', 0x1ff, &(0x7f0000001b80)={0xfa, 0x1, 0x7fffffffffffffff, @raw=0x80}, 0x4) alarm$auto(0x4) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001c00), r4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c40)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c80)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'syzkaller0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x44, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r10}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x80) prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff9, 0x10001) 0s ago: executing program 0 (id=6370): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(r2, 0xa84, 0x80000001, 0xfff, 0x0, 0x49) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0xbb) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) mmap$auto(0x0, 0x80000000e983, 0xdd, 0xeb1, 0x401, 0x7ffc) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x1, 0xee, 0x9b72, 0xffffffffffffffff, 0x8000) kernel console output (not intermixed with test programs): s+0x10/0x10 [ 2102.200794][T31610] ? queue_pages_range+0x11e/0x180 [ 2102.200830][T31610] ? __pfx___up_read+0x10/0x10 [ 2102.200869][T31610] ? do_migrate_pages+0x458/0x750 [ 2102.200909][T31610] do_migrate_pages+0x48e/0x750 [ 2102.200978][T31610] ? __pfx_do_migrate_pages+0x10/0x10 [ 2102.201016][T31610] ? rcu_is_watching+0x12/0xc0 [ 2102.201048][T31610] ? cap_capable+0xb3/0x250 [ 2102.201082][T31610] ? get_task_mm+0xc2/0xf0 [ 2102.201110][T31610] ? security_capable+0x250/0x260 [ 2102.201149][T31610] kernel_migrate_pages+0x55b/0x700 [ 2102.201185][T31610] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 2102.201222][T31610] ? __pfx_do_writev+0x10/0x10 [ 2102.201253][T31610] __x64_sys_migrate_pages+0x96/0x100 [ 2102.201289][T31610] ? lockdep_hardirqs_on+0x7c/0x110 [ 2102.201320][T31610] do_syscall_64+0xcd/0xfa0 [ 2102.201354][T31610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2102.201380][T31610] RIP: 0033:0x7fd33db8f749 [ 2102.201400][T31610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2102.201426][T31610] RSP: 002b:00007fd33ea6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 2102.201449][T31610] RAX: ffffffffffffffda RBX: 00007fd33dde5fa0 RCX: 00007fd33db8f749 [ 2102.201466][T31610] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 2102.201482][T31610] RBP: 00007fd33dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2102.201498][T31610] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 2102.201514][T31610] R13: 00007fd33dde6038 R14: 00007fd33dde5fa0 R15: 00007ffeb5c90988 [ 2102.201547][T31610] [ 2102.523685][ C0] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 2103.720992][T31630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5716'. [ 2103.969660][T31635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5717'. [ 2104.324927][T31637] zswap: compressor not available [ 2104.608063][T31648] can: request_module (can-proto-5) failed. [ 2104.805296][T31658] FAULT_INJECTION: forcing a failure. [ 2104.805296][T31658] name failslab, interval 1, probability 393216, space 0, times 0 [ 2104.828866][T31658] CPU: 0 UID: 0 PID: 31658 Comm: syz.2.5726 Not tainted syzkaller #0 PREEMPT(full) [ 2104.828903][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2104.828919][T31658] Call Trace: [ 2104.828928][T31658] [ 2104.828938][T31658] dump_stack_lvl+0x16c/0x1f0 [ 2104.828975][T31658] should_fail_ex+0x512/0x640 [ 2104.829014][T31658] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2104.829043][T31658] ? __pfx_stats_fop_open+0x10/0x10 [ 2104.829075][T31658] should_failslab+0xc2/0x120 [ 2104.829109][T31658] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2104.829134][T31658] ? seq_open+0x55/0x170 [ 2104.829172][T31658] ? __pfx_stats_fop_open+0x10/0x10 [ 2104.829203][T31658] ? seq_open+0x55/0x170 [ 2104.829234][T31658] seq_open+0x55/0x170 [ 2104.829269][T31658] __seq_open_private+0x3e/0xd0 [ 2104.829307][T31658] sc_common_open+0x6b/0x200 [ 2104.829340][T31658] full_proxy_open_regular+0x1b9/0x360 [ 2104.829382][T31658] do_dentry_open+0x982/0x1530 [ 2104.829412][T31658] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2104.829456][T31658] vfs_open+0x82/0x3f0 [ 2104.829496][T31658] path_openat+0x1de4/0x2cb0 [ 2104.829534][T31658] ? __pfx_path_openat+0x10/0x10 [ 2104.829563][T31658] ? __lock_acquire+0xb8a/0x1c90 [ 2104.829601][T31658] do_filp_open+0x20b/0x470 [ 2104.829630][T31658] ? __pfx_do_filp_open+0x10/0x10 [ 2104.829679][T31658] ? alloc_fd+0x471/0x7d0 [ 2104.829712][T31658] do_sys_openat2+0x11b/0x1d0 [ 2104.829749][T31658] ? __pfx_do_sys_openat2+0x10/0x10 [ 2104.829798][T31658] __x64_sys_openat+0x174/0x210 [ 2104.829847][T31658] ? __pfx___x64_sys_openat+0x10/0x10 [ 2104.829898][T31658] do_syscall_64+0xcd/0xfa0 [ 2104.829931][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2104.829957][T31658] RIP: 0033:0x7fc17298f749 [ 2104.829976][T31658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2104.830001][T31658] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2104.830025][T31658] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2104.830042][T31658] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2104.830058][T31658] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2104.830074][T31658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2104.830089][T31658] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2104.830122][T31658] [ 2105.068995][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.446801][T31661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5724'. [ 2106.418483][T31661] team0: Port device team_slave_1 removed [ 2106.878025][T31674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5730'. [ 2107.470793][T31678] zswap: compressor not available [ 2107.749648][T31653] kexec: Could not allocate control_code_buffer [ 2109.267694][T31716] zswap: compressor not available [ 2109.515195][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.521792][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.566492][T31701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2109.664880][T31701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2109.783862][T31701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2109.866696][T31701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2110.388715][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2110.562063][T31749] FAULT_INJECTION: forcing a failure. [ 2110.562063][T31749] name failslab, interval 1, probability 393216, space 0, times 0 [ 2110.700374][T31749] CPU: 0 UID: 0 PID: 31749 Comm: syz.0.5751 Not tainted syzkaller #0 PREEMPT(full) [ 2110.700410][T31749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2110.700426][T31749] Call Trace: [ 2110.700434][T31749] [ 2110.700449][T31749] dump_stack_lvl+0x16c/0x1f0 [ 2110.700483][T31749] should_fail_ex+0x512/0x640 [ 2110.700528][T31749] ? __kmalloc_noprof+0xca/0x880 [ 2110.700571][T31749] ? __pfx_stats_fop_open+0x10/0x10 [ 2110.700603][T31749] should_failslab+0xc2/0x120 [ 2110.700637][T31749] __kmalloc_noprof+0xdd/0x880 [ 2110.700678][T31749] ? __seq_open_private+0x22/0xd0 [ 2110.700718][T31749] ? __pfx_stats_fop_open+0x10/0x10 [ 2110.700750][T31749] ? __seq_open_private+0x22/0xd0 [ 2110.700786][T31749] ? __kasan_kmalloc+0xaa/0xb0 [ 2110.700813][T31749] __seq_open_private+0x22/0xd0 [ 2110.700851][T31749] sc_common_open+0x6b/0x200 [ 2110.700884][T31749] full_proxy_open_regular+0x1b9/0x360 [ 2110.700925][T31749] do_dentry_open+0x982/0x1530 [ 2110.700955][T31749] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2110.700999][T31749] vfs_open+0x82/0x3f0 [ 2110.701038][T31749] path_openat+0x1de4/0x2cb0 [ 2110.701076][T31749] ? __pfx_path_openat+0x10/0x10 [ 2110.701105][T31749] ? __lock_acquire+0xb8a/0x1c90 [ 2110.701144][T31749] do_filp_open+0x20b/0x470 [ 2110.701171][T31749] ? __pfx_do_filp_open+0x10/0x10 [ 2110.701221][T31749] ? alloc_fd+0x471/0x7d0 [ 2110.701254][T31749] do_sys_openat2+0x11b/0x1d0 [ 2110.701292][T31749] ? __pfx_do_sys_openat2+0x10/0x10 [ 2110.701341][T31749] __x64_sys_openat+0x174/0x210 [ 2110.701379][T31749] ? __pfx___x64_sys_openat+0x10/0x10 [ 2110.701429][T31749] do_syscall_64+0xcd/0xfa0 [ 2110.701463][T31749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.701488][T31749] RIP: 0033:0x7f9bcf18f749 [ 2110.701513][T31749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2110.701538][T31749] RSP: 002b:00007f9bcffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2110.701562][T31749] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa0 RCX: 00007f9bcf18f749 [ 2110.701579][T31749] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2110.701595][T31749] RBP: 00007f9bcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2110.701611][T31749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2110.701626][T31749] R13: 00007f9bcf3e6038 R14: 00007f9bcf3e5fa0 R15: 00007fffd3aae4a8 [ 2110.701659][T31749] [ 2111.668758][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2111.829279][T31212] Bluetooth: hci4: command 0x040f tx timeout [ 2111.875514][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'. [ 2111.910332][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2111.917778][T31753] zswap: compressor not available [ 2112.036490][T31768] bridge0: port 3(bond0) entered blocking state [ 2112.044118][T31768] bridge0: port 3(bond0) entered disabled state [ 2112.053146][T31768] bond0: entered allmulticast mode [ 2112.063576][T31768] bond_slave_0: entered allmulticast mode [ 2112.078762][T31768] bond_slave_1: entered allmulticast mode [ 2112.091012][T31768] bond0: entered promiscuous mode [ 2112.111812][T31768] bond_slave_0: entered promiscuous mode [ 2112.120111][T31768] bond_slave_1: entered promiscuous mode [ 2112.135387][T31768] bridge0: port 3(bond0) entered blocking state [ 2112.141800][T31768] bridge0: port 3(bond0) entered forwarding state [ 2112.222370][T31761] zswap: compressor not available [ 2112.744992][T31777] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.5756'. [ 2112.999797][T31785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5760'. [ 2113.317495][T31795] net_ratelimit: 30 callbacks suppressed [ 2113.317515][T31795] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2113.330180][T31795] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2113.395238][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5763'. [ 2113.570569][T31803] netlink: 326 bytes leftover after parsing attributes in process `syz.2.5764'. [ 2113.771751][T31810] nfs4: Unknown parameter '€' [ 2114.816306][T31820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5768'. [ 2114.951469][T31822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5767'. [ 2115.100763][T31827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5771'. [ 2115.111558][T31822] bridge0: port 4(bond0) entered blocking state [ 2115.117907][T31822] bridge0: port 4(bond0) entered disabled state [ 2115.173233][T31822] bond0: entered allmulticast mode [ 2115.190016][T31822] bond_slave_0: entered allmulticast mode [ 2115.220037][T31822] bond_slave_1: entered allmulticast mode [ 2115.243658][T31822] bond0: entered promiscuous mode [ 2115.277064][T31822] bond_slave_0: entered promiscuous mode [ 2115.300518][T31822] bond_slave_1: entered promiscuous mode [ 2115.323804][T31822] bridge0: port 4(bond0) entered blocking state [ 2115.330612][T31822] bridge0: port 4(bond0) entered forwarding state [ 2115.865598][T31841] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2116.107334][T31850] FAULT_INJECTION: forcing a failure. [ 2116.107334][T31850] name failslab, interval 1, probability 393216, space 0, times 0 [ 2116.212666][T31850] CPU: 0 UID: 0 PID: 31850 Comm: syz.3.5776 Not tainted syzkaller #0 PREEMPT(full) [ 2116.212702][T31850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2116.212725][T31850] Call Trace: [ 2116.212733][T31850] [ 2116.212743][T31850] dump_stack_lvl+0x16c/0x1f0 [ 2116.212778][T31850] should_fail_ex+0x512/0x640 [ 2116.212816][T31850] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 2116.212849][T31850] should_failslab+0xc2/0x120 [ 2116.212883][T31850] __kvmalloc_node_noprof+0x141/0x9c0 [ 2116.212918][T31850] ? seq_read_iter+0x830/0x12d0 [ 2116.212955][T31850] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 2116.212986][T31850] ? seq_read_iter+0x830/0x12d0 [ 2116.213021][T31850] seq_read_iter+0x830/0x12d0 [ 2116.213061][T31850] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2116.213096][T31850] kernfs_fop_read_iter+0x46c/0x610 [ 2116.213128][T31850] copy_splice_read+0x618/0xc20 [ 2116.213159][T31850] ? __pfx_copy_splice_read+0x10/0x10 [ 2116.213185][T31850] ? look_up_lock_class+0x59/0x150 [ 2116.213220][T31850] ? lockdep_init_map_type+0x5c/0x280 [ 2116.213257][T31850] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2116.213286][T31850] ? __pfx_copy_splice_read+0x10/0x10 [ 2116.213309][T31850] do_splice_read+0x285/0x370 [ 2116.213336][T31850] splice_direct_to_actor+0x2a1/0xa30 [ 2116.213362][T31850] ? __pfx_direct_splice_actor+0x10/0x10 [ 2116.213393][T31850] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2116.213416][T31850] ? get_pid_task+0xfc/0x250 [ 2116.213460][T31850] do_splice_direct+0x174/0x240 [ 2116.213488][T31850] ? __pfx_do_splice_direct+0x10/0x10 [ 2116.213513][T31850] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2116.213560][T31850] ? rw_verify_area+0xcf/0x6c0 [ 2116.213586][T31850] do_sendfile+0xb06/0xe50 [ 2116.213617][T31850] ? __pfx_do_sendfile+0x10/0x10 [ 2116.213643][T31850] ? __fget_files+0x20e/0x3c0 [ 2116.213680][T31850] __x64_sys_sendfile64+0x1d8/0x220 [ 2116.213712][T31850] ? ksys_write+0x1ac/0x250 [ 2116.213744][T31850] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2116.213786][T31850] do_syscall_64+0xcd/0xfa0 [ 2116.213821][T31850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2116.213847][T31850] RIP: 0033:0x7fd33db8f749 [ 2116.213866][T31850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2116.213889][T31850] RSP: 002b:00007fd33ea4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2116.213912][T31850] RAX: ffffffffffffffda RBX: 00007fd33dde6090 RCX: 00007fd33db8f749 [ 2116.213929][T31850] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 2116.213943][T31850] RBP: 00007fd33ea4c090 R08: 0000000000000000 R09: 0000000000000000 [ 2116.213958][T31850] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 2116.213973][T31850] R13: 00007fd33dde6128 R14: 00007fd33dde6090 R15: 00007ffeb5c90988 [ 2116.214005][T31850] [ 2116.494229][ C0] vkms_vblank_simulate: vblank timer overrun [ 2116.798638][T31845] zswap: compressor not available [ 2117.691828][T31879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5784'. [ 2118.792101][T31864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2118.834234][T31864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2118.882103][T31864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2118.926649][T31864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2119.357613][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2120.255176][T31901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2120.265261][T31901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2120.294520][T31901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2120.305008][T31901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2120.849391][T31925] usb usb13: check_ctrlrecip: process 31925 (syz.1.5794) requesting ep 01 but needs 81 [ 2120.863137][T31927] FAULT_INJECTION: forcing a failure. [ 2120.863137][T31927] name failslab, interval 1, probability 393216, space 0, times 0 [ 2120.985145][T31925] usb usb13: usbfs: process 31925 (syz.1.5794) did not claim interface 0 before use [ 2121.002858][T31927] CPU: 0 UID: 0 PID: 31927 Comm: syz.0.5795 Not tainted syzkaller #0 PREEMPT(full) [ 2121.002894][T31927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2121.002910][T31927] Call Trace: [ 2121.002919][T31927] [ 2121.002929][T31927] dump_stack_lvl+0x16c/0x1f0 [ 2121.002965][T31927] should_fail_ex+0x512/0x640 [ 2121.003003][T31927] ? __kmalloc_noprof+0xca/0x880 [ 2121.003046][T31927] ? __pfx_stats_fop_open+0x10/0x10 [ 2121.003078][T31927] should_failslab+0xc2/0x120 [ 2121.003113][T31927] __kmalloc_noprof+0xdd/0x880 [ 2121.003153][T31927] ? __seq_open_private+0x22/0xd0 [ 2121.003195][T31927] ? __pfx_stats_fop_open+0x10/0x10 [ 2121.003226][T31927] ? __seq_open_private+0x22/0xd0 [ 2121.003270][T31927] ? __kasan_kmalloc+0xaa/0xb0 [ 2121.003298][T31927] __seq_open_private+0x22/0xd0 [ 2121.003336][T31927] sc_common_open+0x6b/0x200 [ 2121.003370][T31927] full_proxy_open_regular+0x1b9/0x360 [ 2121.003411][T31927] do_dentry_open+0x982/0x1530 [ 2121.003441][T31927] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2121.003486][T31927] vfs_open+0x82/0x3f0 [ 2121.003525][T31927] path_openat+0x1de4/0x2cb0 [ 2121.003563][T31927] ? __pfx_path_openat+0x10/0x10 [ 2121.003592][T31927] ? __lock_acquire+0xb8a/0x1c90 [ 2121.003630][T31927] do_filp_open+0x20b/0x470 [ 2121.003658][T31927] ? __pfx_do_filp_open+0x10/0x10 [ 2121.003708][T31927] ? alloc_fd+0x471/0x7d0 [ 2121.003740][T31927] do_sys_openat2+0x11b/0x1d0 [ 2121.003777][T31927] ? __pfx_do_sys_openat2+0x10/0x10 [ 2121.003826][T31927] __x64_sys_openat+0x174/0x210 [ 2121.003864][T31927] ? __pfx___x64_sys_openat+0x10/0x10 [ 2121.003914][T31927] do_syscall_64+0xcd/0xfa0 [ 2121.003948][T31927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.003974][T31927] RIP: 0033:0x7f9bcf18f749 [ 2121.003994][T31927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.004019][T31927] RSP: 002b:00007f9bcffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2121.004043][T31927] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa0 RCX: 00007f9bcf18f749 [ 2121.004059][T31927] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2121.004076][T31927] RBP: 00007f9bcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2121.004092][T31927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.004107][T31927] R13: 00007f9bcf3e6038 R14: 00007f9bcf3e5fa0 R15: 00007fffd3aae4a8 [ 2121.004140][T31927] [ 2121.247146][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.224304][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2122.382293][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2122.388393][T31212] Bluetooth: hci4: command 0x040f tx timeout [ 2122.400017][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2123.717212][T31935] Process accounting paused [ 2125.791906][T31947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2125.901433][T31947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2125.994444][T31947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2126.000566][T31947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2126.158173][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2126.774661][T31981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5812'. [ 2126.971267][T31987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5811'. [ 2127.192233][T31988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5813'. [ 2127.683728][T32003] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2127.832308][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2128.084231][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2128.090306][T31212] Bluetooth: hci4: command 0x040f tx timeout [ 2128.988527][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5819'. [ 2129.601999][T32016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2129.620530][T32016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2129.635559][T32016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2129.659259][T32016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2130.128989][T32034] usb usb13: check_ctrlrecip: process 32034 (syz.2.5823) requesting ep 01 but needs 81 [ 2130.143501][T32034] usb usb13: usbfs: process 32034 (syz.2.5823) did not claim interface 0 before use [ 2130.873961][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2131.150013][T32044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5825'. [ 2131.674325][T25562] Bluetooth: hci4: command 0x040f tx timeout [ 2131.680418][T25562] Bluetooth: hci0: command 0x041b tx timeout [ 2131.686626][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2132.303774][T32079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5833'. [ 2133.406526][T32090] svc: failed to register nfsdv3 RPC service (errno 111). [ 2133.430480][T32090] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2133.767569][T32097] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 2135.992572][T32143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5851'. [ 2136.693941][T32121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2136.754780][T32121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2136.823218][T32121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2136.921310][T32121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2138.239670][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2138.313376][T32174] random: crng reseeded on system resumption [ 2138.365844][ T30] audit: type=1800 audit(4294971343.548:52): pid=32175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5859" name="trace_pipe" dev="tracefs" ino=1286 res=0 errno=0 [ 2138.614210][T32170] can: request_module (can-proto-3) failed. [ 2138.799089][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2138.893681][T31212] Bluetooth: hci4: command 0x040f tx timeout [ 2138.957903][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2139.038965][T32184] ptrace attach of "./syz-executor exec"[32185] was attempted by "./syz-executor exec"[32184] [ 2139.355136][T32191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5862'. [ 2140.287458][T32202] zswap: compressor not available [ 2140.738717][T32228] futex_wake_op: syz.2.5873 tries to shift op by -2048; fix this program [ 2140.822663][T32230] size and base must be multiples of 4 kiB [ 2140.835923][T32230] CPU: 0 UID: 0 PID: 32230 Comm: syz.2.5873 Not tainted syzkaller #0 PREEMPT(full) [ 2140.835960][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2140.835976][T32230] Call Trace: [ 2140.835984][T32230] [ 2140.835994][T32230] dump_stack_lvl+0x16c/0x1f0 [ 2140.836030][T32230] mtrr_add+0xdf/0x110 [ 2140.836066][T32230] mtrr_ioctl+0x7ef/0xcf0 [ 2140.836101][T32230] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2140.836142][T32230] ? find_held_lock+0x2b/0x80 [ 2140.836176][T32230] ? __fget_files+0x20e/0x3c0 [ 2140.836203][T32230] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2140.836237][T32230] proc_reg_unlocked_ioctl+0x229/0x320 [ 2140.836273][T32230] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2140.836312][T32230] __x64_sys_ioctl+0x18e/0x210 [ 2140.836352][T32230] do_syscall_64+0xcd/0xfa0 [ 2140.836385][T32230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.836410][T32230] RIP: 0033:0x7fc17298f749 [ 2140.836430][T32230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2140.836461][T32230] RSP: 002b:00007fc17381a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.836485][T32230] RAX: ffffffffffffffda RBX: 00007fc172be6090 RCX: 00007fc17298f749 [ 2140.836502][T32230] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 2140.836517][T32230] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2140.836533][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2140.836548][T32230] R13: 00007fc172be6128 R14: 00007fc172be6090 R15: 00007ffdb0928cd8 [ 2140.836581][T32230] [ 2141.000967][ C0] vkms_vblank_simulate: vblank timer overrun [ 2143.880991][T32252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2143.923064][T32285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5882'. [ 2143.943862][T32252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2144.006509][T32252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2144.025467][T32252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2144.640760][T31212] Bluetooth: hci1: command 0x0419 tx timeout [ 2144.775338][T32297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5885'. [ 2145.921414][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2146.085103][T31212] Bluetooth: hci2: command 0x0c1a tx timeout [ 2146.091370][T25562] Bluetooth: hci4: command 0x040f tx timeout [ 2146.538141][T32318] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5890'. [ 2147.278145][T32335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5894'. [ 2147.413235][T32337] FAULT_INJECTION: forcing a failure. [ 2147.413235][T32337] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2147.428180][T32337] CPU: 0 UID: 0 PID: 32337 Comm: syz.2.5896 Not tainted syzkaller #0 PREEMPT(full) [ 2147.428214][T32337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2147.428230][T32337] Call Trace: [ 2147.428238][T32337] [ 2147.428248][T32337] dump_stack_lvl+0x16c/0x1f0 [ 2147.428283][T32337] should_fail_ex+0x512/0x640 [ 2147.428327][T32337] get_futex_key+0x1d0/0x1560 [ 2147.428364][T32337] ? __pfx_get_futex_key+0x10/0x10 [ 2147.428397][T32337] ? stack_trace_save+0x8e/0xc0 [ 2147.428426][T32337] ? __pfx_stack_trace_save+0x10/0x10 [ 2147.428456][T32337] ? stack_depot_save_flags+0x29/0x9c0 [ 2147.428500][T32337] futex_wait_setup+0x9d/0x550 [ 2147.428532][T32337] __futex_wait+0x193/0x2f0 [ 2147.428555][T32337] ? __pfx___futex_wait+0x10/0x10 [ 2147.428583][T32337] ? __pfx_futex_wake_mark+0x10/0x10 [ 2147.428627][T32337] ? futex_hash+0x2c5/0x380 [ 2147.428662][T32337] ? futex_private_hash_put+0xd5/0x190 [ 2147.428696][T32337] futex_wait+0xe8/0x380 [ 2147.428719][T32337] ? __pfx_futex_wait+0x10/0x10 [ 2147.428747][T32337] ? kmem_cache_free+0x2d4/0x6c0 [ 2147.428774][T32337] ? putname+0x154/0x1a0 [ 2147.428812][T32337] do_futex+0x229/0x350 [ 2147.428859][T32337] ? __pfx_do_futex+0x10/0x10 [ 2147.428902][T32337] __x64_sys_futex+0x1e0/0x4c0 [ 2147.428938][T32337] ? __x64_sys_openat+0x174/0x210 [ 2147.428978][T32337] ? __pfx___x64_sys_futex+0x10/0x10 [ 2147.429025][T32337] do_syscall_64+0xcd/0xfa0 [ 2147.429059][T32337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.429085][T32337] RIP: 0033:0x7fc17298f749 [ 2147.429104][T32337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2147.429127][T32337] RSP: 002b:00007fc17383b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2147.429151][T32337] RAX: ffffffffffffffda RBX: 00007fc172be5fa8 RCX: 00007fc17298f749 [ 2147.429167][T32337] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc172be5fa8 [ 2147.429183][T32337] RBP: 00007fc172be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2147.429199][T32337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2147.429214][T32337] R13: 00007fc172be6038 R14: 00007ffdb0928bf0 R15: 00007ffdb0928cd8 [ 2147.429246][T32337] [ 2147.650012][ C0] vkms_vblank_simulate: vblank timer overrun [ 2149.090706][T32357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5900'. [ 2150.995842][T32381] FAULT_INJECTION: forcing a failure. [ 2150.995842][T32381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2151.063588][T32385] usb usb37: usbfs: process 32385 (syz.2.5908) did not claim interface 0 before use [ 2151.125483][T32381] CPU: 0 UID: 0 PID: 32381 Comm: syz.0.5906 Not tainted syzkaller #0 PREEMPT(full) [ 2151.125518][T32381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2151.125534][T32381] Call Trace: [ 2151.125542][T32381] [ 2151.125552][T32381] dump_stack_lvl+0x16c/0x1f0 [ 2151.125589][T32381] should_fail_ex+0x512/0x640 [ 2151.125633][T32381] get_futex_key+0x1d0/0x1560 [ 2151.125679][T32381] ? __pfx_get_futex_key+0x10/0x10 [ 2151.125711][T32381] ? stack_trace_save+0x8e/0xc0 [ 2151.125740][T32381] ? __pfx_stack_trace_save+0x10/0x10 [ 2151.125770][T32381] ? stack_depot_save_flags+0x29/0x9c0 [ 2151.125822][T32381] futex_wait_setup+0x9d/0x550 [ 2151.125854][T32381] __futex_wait+0x193/0x2f0 [ 2151.125878][T32381] ? __pfx___futex_wait+0x10/0x10 [ 2151.125907][T32381] ? __pfx_futex_wake_mark+0x10/0x10 [ 2151.125951][T32381] ? futex_hash+0x2c5/0x380 [ 2151.125986][T32381] ? futex_private_hash_put+0xd5/0x190 [ 2151.126021][T32381] futex_wait+0xe8/0x380 [ 2151.126043][T32381] ? __pfx_futex_wait+0x10/0x10 [ 2151.126072][T32381] ? kmem_cache_free+0x2d4/0x6c0 [ 2151.126098][T32381] ? putname+0x154/0x1a0 [ 2151.126137][T32381] do_futex+0x229/0x350 [ 2151.126171][T32381] ? __pfx_do_futex+0x10/0x10 [ 2151.126214][T32381] __x64_sys_futex+0x1e0/0x4c0 [ 2151.126250][T32381] ? __x64_sys_openat+0x174/0x210 [ 2151.126289][T32381] ? __pfx___x64_sys_futex+0x10/0x10 [ 2151.126336][T32381] do_syscall_64+0xcd/0xfa0 [ 2151.126369][T32381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.126395][T32381] RIP: 0033:0x7f9bcf18f749 [ 2151.126415][T32381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2151.126439][T32381] RSP: 002b:00007f9bcffaf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2151.126463][T32381] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa8 RCX: 00007f9bcf18f749 [ 2151.126479][T32381] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9bcf3e5fa8 [ 2151.126495][T32381] RBP: 00007f9bcf3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2151.126510][T32381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.126525][T32381] R13: 00007f9bcf3e6038 R14: 00007fffd3aae3c0 R15: 00007fffd3aae4a8 [ 2151.126557][T32381] [ 2151.351848][ C0] vkms_vblank_simulate: vblank timer overrun [ 2152.064253][T32396] zswap: compressor not available [ 2152.224647][T32387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2152.231266][T32387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2152.238873][T32387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2152.250087][T32387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2153.867745][T32368] Process accounting resumed [ 2154.106074][T32431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5918'. [ 2154.247384][T31212] Bluetooth: hci4: command 0x040f tx timeout [ 2154.253604][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2154.259756][T25562] Bluetooth: hci1: command 0x0419 tx timeout [ 2154.326923][T25562] Bluetooth: hci2: command 0x0c1a tx timeout [ 2154.733839][T32435] __vm_enough_memory: pid: 32435, comm: syz.2.5920, bytes: 4398046511104 not enough memory for the allocation [ 2154.802198][T32433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5919'. [ 2155.801167][T32452] zswap: compressor not available [ 2156.081423][T32445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2156.170206][T32445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2156.195045][T32445] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2156.291018][T32480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'. [ 2156.341252][T32445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2156.934233][T32484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5932'. [ 2157.051097][T25562] Bluetooth: hci1: command 0x0419 tx timeout [ 2158.174458][T25562] Bluetooth: hci0: command 0x041b tx timeout [ 2158.248150][T25562] Bluetooth: hci4: command 0x040f tx timeout [ 2158.408239][T25562] Bluetooth: hci2: command 0x0c1a tx timeout [ 2158.419906][T32517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5948'. [ 2158.492401][T32520] netlink: 'syz.2.5941': attribute type 1 has an invalid length. [ 2159.268023][T32514] zswap: compressor not available [ 2159.446260][T32523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2159.453701][T32523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2159.461381][T32523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2159.470042][T32523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2160.073353][T32548] random: crng reseeded on system resumption [ 2160.888988][T25562] Bluetooth: hci1: command 0x0419 tx timeout [ 2160.918322][T32557] FAULT_INJECTION: forcing a failure. [ 2160.918322][T32557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.939087][T32557] CPU: 0 UID: 0 PID: 32557 Comm: syz.2.5950 Not tainted syzkaller #0 PREEMPT(full) [ 2160.939124][T32557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2160.939140][T32557] Call Trace: [ 2160.939148][T32557] [ 2160.939158][T32557] dump_stack_lvl+0x16c/0x1f0 [ 2160.939193][T32557] should_fail_ex+0x512/0x640 [ 2160.939236][T32557] _copy_from_user+0x2e/0xd0 [ 2160.939277][T32557] restore_altstack+0x93/0x170 [ 2160.939313][T32557] ? __pfx_restore_altstack+0x10/0x10 [ 2160.939351][T32557] ? _raw_spin_unlock_irq+0x23/0x50 [ 2160.939378][T32557] ? lockdep_hardirqs_on+0x7c/0x110 [ 2160.939409][T32557] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2160.939436][T32557] ? set_current_blocked+0xdd/0x120 [ 2160.939462][T32557] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 2160.939495][T32557] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2160.939535][T32557] do_syscall_64+0xcd/0xfa0 [ 2160.939568][T32557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.939594][T32557] RIP: 0033:0x7fc17292b829 [ 2160.939613][T32557] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2160.939638][T32557] RSP: 002b:00007fc17383aa80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 2160.939670][T32557] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17292b829 [ 2160.939688][T32557] RDX: 00007fc17383aa80 RSI: 00007fc17383abb0 RDI: 0000000000000011 [ 2160.939704][T32557] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2160.939720][T32557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2160.939736][T32557] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2160.939768][T32557] [ 2161.107666][ C0] vkms_vblank_simulate: vblank timer overrun [ 2161.406288][T32563] FAULT_INJECTION: forcing a failure. [ 2161.406288][T32563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2161.437214][T32565] program syz.2.5950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2161.529228][T25562] Bluetooth: hci2: command 0x0c1a tx timeout [ 2161.535344][T25562] Bluetooth: hci4: command 0x040f tx timeout [ 2161.542417][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2161.592672][T32563] CPU: 0 UID: 0 PID: 32563 Comm: syz.3.5952 Not tainted syzkaller #0 PREEMPT(full) [ 2161.592706][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2161.592721][T32563] Call Trace: [ 2161.592729][T32563] [ 2161.592738][T32563] dump_stack_lvl+0x16c/0x1f0 [ 2161.592773][T32563] should_fail_ex+0x512/0x640 [ 2161.592814][T32563] strncpy_from_user+0x3b/0x2e0 [ 2161.592852][T32563] getname_flags.part.0+0x8f/0x550 [ 2161.592892][T32563] getname_flags+0x93/0xf0 [ 2161.592917][T32563] do_sys_openat2+0xb8/0x1d0 [ 2161.592953][T32563] ? __pfx_do_sys_openat2+0x10/0x10 [ 2161.592991][T32563] ? __fget_files+0x20e/0x3c0 [ 2161.593022][T32563] __x64_sys_openat+0x174/0x210 [ 2161.593060][T32563] ? __pfx___x64_sys_openat+0x10/0x10 [ 2161.593096][T32563] ? ksys_write+0x1ac/0x250 [ 2161.593134][T32563] do_syscall_64+0xcd/0xfa0 [ 2161.593167][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.593193][T32563] RIP: 0033:0x7fd33db8f749 [ 2161.593211][T32563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.593235][T32563] RSP: 002b:00007fd33ea6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2161.593258][T32563] RAX: ffffffffffffffda RBX: 00007fd33dde5fa0 RCX: 00007fd33db8f749 [ 2161.593274][T32563] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2161.593291][T32563] RBP: 00007fd33ea6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.593306][T32563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.593321][T32563] R13: 00007fd33dde6038 R14: 00007fd33dde5fa0 R15: 00007ffeb5c90988 [ 2161.593353][T32563] [ 2161.763506][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.701055][T32575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2163.787659][T32575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2163.878456][T32575] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2163.948706][T32575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2164.331938][T25562] Bluetooth: hci1: command 0x0419 tx timeout [ 2165.092656][T32609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5962'. [ 2165.855307][T25562] Bluetooth: hci0: command 0x041b tx timeout [ 2165.932186][T25562] Bluetooth: hci4: command 0x040f tx timeout [ 2166.002469][T32629] hub 1-0:1.0: USB hub found [ 2166.007231][T32629] FAULT_INJECTION: forcing a failure. [ 2166.007231][T32629] name failslab, interval 1, probability 393216, space 0, times 0 [ 2166.024325][T25562] Bluetooth: hci2: command 0x0c1a tx timeout [ 2166.045458][T32629] CPU: 0 UID: 0 PID: 32629 Comm: syz.2.5968 Not tainted syzkaller #0 PREEMPT(full) [ 2166.045494][T32629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2166.045510][T32629] Call Trace: [ 2166.045518][T32629] [ 2166.045528][T32629] dump_stack_lvl+0x16c/0x1f0 [ 2166.045564][T32629] should_fail_ex+0x512/0x640 [ 2166.045603][T32629] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2166.045631][T32629] should_failslab+0xc2/0x120 [ 2166.045665][T32629] __kmalloc_cache_noprof+0x72/0x780 [ 2166.045689][T32629] ? __pfx_hub_retry_irq_urb+0x10/0x10 [ 2166.045724][T32629] ? hub_probe+0xd98/0x3480 [ 2166.045747][T32629] ? kobject_get+0xbb/0x150 [ 2166.045782][T32629] ? hub_probe+0xd98/0x3480 [ 2166.045805][T32629] hub_probe+0xd98/0x3480 [ 2166.045834][T32629] ? do_raw_spin_lock+0x12c/0x2b0 [ 2166.045876][T32629] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2166.045916][T32629] ? __pfx_hub_probe+0x10/0x10 [ 2166.045938][T32629] ? mark_held_locks+0x49/0x80 [ 2166.045971][T32629] ? __smp_text_poke_batch_add+0x610/0x7a0 [ 2166.046008][T32629] ? mark_held_locks+0x49/0x80 [ 2166.046041][T32629] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2166.046074][T32629] usb_probe_interface+0x303/0xa40 [ 2166.046109][T32629] ? __pfx_usb_probe_interface+0x10/0x10 [ 2166.046140][T32629] really_probe+0x241/0xa90 [ 2166.046179][T32629] __driver_probe_device+0x1de/0x440 [ 2166.046217][T32629] driver_probe_device+0x4c/0x1b0 [ 2166.046253][T32629] __device_attach_driver+0x1df/0x310 [ 2166.046290][T32629] ? __pfx___device_attach_driver+0x10/0x10 [ 2166.046325][T32629] bus_for_each_drv+0x159/0x1e0 [ 2166.046354][T32629] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2166.046383][T32629] ? lockdep_hardirqs_on+0x7c/0x110 [ 2166.046426][T32629] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2166.046459][T32629] __device_attach+0x1e4/0x4b0 [ 2166.046495][T32629] ? __pfx___device_attach+0x10/0x10 [ 2166.046532][T32629] ? do_raw_spin_unlock+0x172/0x230 [ 2166.046561][T32629] bus_probe_device+0x17f/0x1c0 [ 2166.046595][T32629] device_add+0x1148/0x1aa0 [ 2166.046621][T32629] ? __pfx_device_add+0x10/0x10 [ 2166.046643][T32629] ? mark_held_locks+0x49/0x80 [ 2166.046685][T32629] usb_set_configuration+0x1187/0x1e20 [ 2166.046731][T32629] bConfigurationValue_store+0x100/0x180 [ 2166.046758][T32629] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 2166.046785][T32629] ? find_held_lock+0x2b/0x80 [ 2166.046812][T32629] ? sysfs_file_kobj+0xe4/0x290 [ 2166.046842][T32629] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 2166.046868][T32629] dev_attr_store+0x58/0x80 [ 2166.046904][T32629] ? __pfx_dev_attr_store+0x10/0x10 [ 2166.046942][T32629] sysfs_kf_write+0xf2/0x150 [ 2166.046972][T32629] kernfs_fop_write_iter+0x3af/0x570 [ 2166.046994][T32629] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2166.047026][T32629] iter_file_splice_write+0xa24/0x12e0 [ 2166.047072][T32629] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2166.047105][T32629] ? __pfx_copy_splice_read+0x10/0x10 [ 2166.047146][T32629] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2166.047175][T32629] direct_splice_actor+0x192/0x6c0 [ 2166.047204][T32629] splice_direct_to_actor+0x345/0xa30 [ 2166.047232][T32629] ? __pfx_direct_splice_actor+0x10/0x10 [ 2166.047263][T32629] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2166.047298][T32629] do_splice_direct+0x174/0x240 [ 2166.047324][T32629] ? __pfx_do_splice_direct+0x10/0x10 [ 2166.047350][T32629] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2166.047402][T32629] ? rw_verify_area+0xcf/0x6c0 [ 2166.047429][T32629] do_sendfile+0xb06/0xe50 [ 2166.047461][T32629] ? __pfx_do_sendfile+0x10/0x10 [ 2166.047492][T32629] ? __x64_sys_futex+0x1e0/0x4c0 [ 2166.047526][T32629] ? __x64_sys_futex+0x1e9/0x4c0 [ 2166.047564][T32629] __x64_sys_sendfile64+0x1d8/0x220 [ 2166.047599][T32629] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2166.047643][T32629] do_syscall_64+0xcd/0xfa0 [ 2166.047676][T32629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2166.047701][T32629] RIP: 0033:0x7fc17298f749 [ 2166.047721][T32629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2166.047746][T32629] RSP: 002b:00007fc17381a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2166.047770][T32629] RAX: ffffffffffffffda RBX: 00007fc172be6090 RCX: 00007fc17298f749 [ 2166.047787][T32629] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 2166.047802][T32629] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2166.047818][T32629] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2166.047833][T32629] R13: 00007fc172be6128 R14: 00007fc172be6090 R15: 00007ffdb0928cd8 [ 2166.047868][T32629] [ 2166.493832][ C0] vkms_vblank_simulate: vblank timer overrun [ 2167.190776][T32629] hub 1-0:1.0: config failed, out of memory (err -12) [ 2167.324052][T32625] zswap: compressor not available [ 2168.254445][T32645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2168.261511][T32645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2168.271839][T32645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2168.287562][T32645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2168.343560][T32654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5972'. [ 2168.765948][T32662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5974'. [ 2169.340654][T32674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5976'. [ 2169.613623][T25562] Bluetooth: hci1: command 0x0419 tx timeout [ 2170.312938][T32689] nbd: socks must be embedded in a SOCK_ITEM attr [ 2170.335632][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 2170.342040][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2170.348648][T31212] Bluetooth: hci0: command 0x041b tx timeout [ 2170.750653][T32700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5982'. [ 2170.980301][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.993807][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2171.812453][T32718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5986'. [ 2172.029551][T32721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5987'. [ 2172.476322][T32725] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2173.291728][T32736] Invalid ELF header magic: != ELF [ 2173.479365][T32728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2173.487291][T32728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2173.493384][T32728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2173.505289][T32728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2173.737074][T32747] block nbd0: Unsupported socket: should be TCP or UNIX. [ 2174.242380][T32762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5999'. [ 2175.120061][T32734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2175.161273][T32734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2175.284985][T32734] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2175.405594][T32734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2175.759702][ T314] nbd: socks must be embedded in a SOCK_ITEM attr [ 2176.099808][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2176.497211][ T329] netlink: 354 bytes leftover after parsing attributes in process `syz.1.6007'. [ 2176.605609][ T336] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6009'. [ 2176.766357][ T332] can: request_module (can-proto-5) failed. [ 2177.216818][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2177.296946][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2177.460294][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2177.571612][ T361] FAULT_INJECTION: forcing a failure. [ 2177.571612][ T361] name failslab, interval 1, probability 393216, space 0, times 0 [ 2177.595181][ T361] CPU: 0 UID: 0 PID: 361 Comm: syz.2.6017 Not tainted syzkaller #0 PREEMPT(full) [ 2177.595218][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2177.595234][ T361] Call Trace: [ 2177.595242][ T361] [ 2177.595252][ T361] dump_stack_lvl+0x16c/0x1f0 [ 2177.595288][ T361] should_fail_ex+0x512/0x640 [ 2177.595326][ T361] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 2177.595357][ T361] should_failslab+0xc2/0x120 [ 2177.595391][ T361] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 2177.595419][ T361] ? __d_alloc+0x32/0xae0 [ 2177.595453][ T361] ? __d_alloc+0x32/0xae0 [ 2177.595480][ T361] __d_alloc+0x32/0xae0 [ 2177.595513][ T361] d_alloc_pseudo+0x1c/0xc0 [ 2177.595549][ T361] alloc_file_pseudo+0xcf/0x230 [ 2177.595587][ T361] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2177.595624][ T361] ? alloc_fd+0x471/0x7d0 [ 2177.595654][ T361] sock_alloc_file+0x50/0x210 [ 2177.595684][ T361] __sys_socket+0x1c0/0x260 [ 2177.595719][ T361] ? __pfx___sys_socket+0x10/0x10 [ 2177.595753][ T361] ? xfd_validate_state+0x61/0x180 [ 2177.595787][ T361] ? __pfx_ksys_write+0x10/0x10 [ 2177.595821][ T361] __x64_sys_socket+0x72/0xb0 [ 2177.595854][ T361] ? lockdep_hardirqs_on+0x7c/0x110 [ 2177.595885][ T361] do_syscall_64+0xcd/0xfa0 [ 2177.595917][ T361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2177.595942][ T361] RIP: 0033:0x7fc17298f749 [ 2177.595962][ T361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2177.595987][ T361] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2177.596011][ T361] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2177.596028][ T361] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2177.596044][ T361] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2177.596059][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2177.596074][ T361] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2177.596107][ T361] [ 2178.194221][ T342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2178.201802][ T342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2178.240478][ T342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2178.292009][ T342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2179.057861][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2179.270297][ T448] FAULT_INJECTION: forcing a failure. [ 2179.270297][ T448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2179.288024][ T448] CPU: 0 UID: 0 PID: 448 Comm: syz.2.6024 Not tainted syzkaller #0 PREEMPT(full) [ 2179.288060][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2179.288075][ T448] Call Trace: [ 2179.288083][ T448] [ 2179.288093][ T448] dump_stack_lvl+0x16c/0x1f0 [ 2179.288128][ T448] should_fail_ex+0x512/0x640 [ 2179.288172][ T448] get_futex_key+0x1d0/0x1560 [ 2179.288209][ T448] ? __pfx_get_futex_key+0x10/0x10 [ 2179.288240][ T448] ? find_held_lock+0x2b/0x80 [ 2179.288275][ T448] futex_wake+0xea/0x530 [ 2179.288317][ T448] ? __pfx_futex_wake+0x10/0x10 [ 2179.288359][ T448] ? vfs_write+0xa38/0x11d0 [ 2179.288385][ T448] ? vfs_write+0x15d/0x11d0 [ 2179.288419][ T448] do_futex+0x1e3/0x350 [ 2179.288453][ T448] ? __pfx_do_futex+0x10/0x10 [ 2179.288488][ T448] ? fdget+0x187/0x210 [ 2179.288512][ T448] ? __sys_sendmsg+0x18c/0x220 [ 2179.288540][ T448] __x64_sys_futex+0x1e0/0x4c0 [ 2179.288578][ T448] ? __pfx___x64_sys_futex+0x10/0x10 [ 2179.288625][ T448] do_syscall_64+0xcd/0xfa0 [ 2179.288657][ T448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.288683][ T448] RIP: 0033:0x7fc17298f749 [ 2179.288702][ T448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.288729][ T448] RSP: 002b:00007fc17383b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2179.288753][ T448] RAX: ffffffffffffffda RBX: 00007fc172be5fa8 RCX: 00007fc17298f749 [ 2179.288771][ T448] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc172be5fac [ 2179.288788][ T448] RBP: 00007fc172be5fa0 R08: 00007fc17383c000 R09: 0000000000000000 [ 2179.288805][ T448] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2179.288822][ T448] R13: 00007fc172be6038 R14: 00007ffdb0928bf0 R15: 00007ffdb0928cd8 [ 2179.288855][ T448] [ 2179.548557][ T457] bridge0: port 3(syz_tun) entered blocking state [ 2179.555119][ T457] bridge0: port 3(syz_tun) entered disabled state [ 2179.561826][ T457] syz_tun: entered allmulticast mode [ 2179.568586][ T457] syz_tun: entered promiscuous mode [ 2179.574290][ T457] bridge0: port 3(syz_tun) entered blocking state [ 2179.580959][ T457] bridge0: port 3(syz_tun) entered forwarding state [ 2180.354975][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2180.362187][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2180.368229][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2180.470618][ T472] FAULT_INJECTION: forcing a failure. [ 2180.470618][ T472] name failslab, interval 1, probability 393216, space 0, times 0 [ 2180.484833][ T459] could not allocate digest TFM handle [ 2180.494936][ T472] CPU: 0 UID: 0 PID: 472 Comm: syz.2.6030 Not tainted syzkaller #0 PREEMPT(full) [ 2180.494974][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2180.494991][ T472] Call Trace: [ 2180.495000][ T472] [ 2180.495010][ T472] dump_stack_lvl+0x16c/0x1f0 [ 2180.495046][ T472] should_fail_ex+0x512/0x640 [ 2180.495087][ T472] ? __kmalloc_noprof+0xca/0x880 [ 2180.495130][ T472] ? __pfx_stats_fop_open+0x10/0x10 [ 2180.495163][ T472] should_failslab+0xc2/0x120 [ 2180.495197][ T472] __kmalloc_noprof+0xdd/0x880 [ 2180.495238][ T472] ? __seq_open_private+0x22/0xd0 [ 2180.495279][ T472] ? __pfx_stats_fop_open+0x10/0x10 [ 2180.495311][ T472] ? __seq_open_private+0x22/0xd0 [ 2180.495347][ T472] ? __kasan_kmalloc+0xaa/0xb0 [ 2180.495374][ T472] __seq_open_private+0x22/0xd0 [ 2180.495413][ T472] sc_common_open+0x6b/0x200 [ 2180.495446][ T472] full_proxy_open_regular+0x1b9/0x360 [ 2180.495488][ T472] do_dentry_open+0x982/0x1530 [ 2180.495518][ T472] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2180.495563][ T472] vfs_open+0x82/0x3f0 [ 2180.495603][ T472] path_openat+0x1de4/0x2cb0 [ 2180.495640][ T472] ? __pfx_path_openat+0x10/0x10 [ 2180.495670][ T472] ? __lock_acquire+0xb8a/0x1c90 [ 2180.495709][ T472] do_filp_open+0x20b/0x470 [ 2180.495737][ T472] ? __pfx_do_filp_open+0x10/0x10 [ 2180.495786][ T472] ? alloc_fd+0x471/0x7d0 [ 2180.495819][ T472] do_sys_openat2+0x11b/0x1d0 [ 2180.495865][ T472] ? __pfx_do_sys_openat2+0x10/0x10 [ 2180.495915][ T472] __x64_sys_openat+0x174/0x210 [ 2180.495953][ T472] ? __pfx___x64_sys_openat+0x10/0x10 [ 2180.496005][ T472] do_syscall_64+0xcd/0xfa0 [ 2180.496038][ T472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.496063][ T472] RIP: 0033:0x7fc17298f749 [ 2180.496083][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.496108][ T472] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2180.496132][ T472] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2180.496149][ T472] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2180.496166][ T472] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2180.496182][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2180.496198][ T472] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2180.496232][ T472] [ 2180.737768][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.126970][ T431] block nbd0: Unsupported socket: should be TCP or UNIX. [ 2181.758699][ T476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2181.799974][ T476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2181.855411][ T476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2181.929733][ T476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2183.059797][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2183.792575][ T524] zram0: detected capacity change from 8 to 0 [ 2183.862409][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2183.944902][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2184.024479][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2184.083323][ T534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6043'. [ 2184.693658][ T524] Process accounting paused [ 2186.993657][ T575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6054'. [ 2188.415135][ T597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6059'. [ 2189.088188][ T606] can: request_module (can-proto-0) failed. [ 2190.834192][ T610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2191.078776][ T610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2191.134559][ T610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2191.140712][ T610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2191.498760][ T648] zram: Added device: zram1 [ 2191.784198][T32690] Bluetooth: hci1: command 0x0419 tx timeout [ 2192.685202][ T662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6078'. [ 2193.149720][T32690] Bluetooth: hci0: command 0x041b tx timeout [ 2193.224839][T32690] Bluetooth: hci2: command 0x0c1a tx timeout [ 2193.232639][T32690] Bluetooth: hci4: command 0x040f tx timeout [ 2193.758590][ T668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2193.766222][ T668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2193.772299][ T668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2193.785441][ T668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2195.796138][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2195.802211][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2195.808609][T32690] Bluetooth: hci1: command 0x0419 tx timeout [ 2195.866208][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2197.217320][ T694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2197.223792][ T694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2197.343665][ T694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2197.398669][ T694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2197.851489][ T723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'. [ 2198.268433][ T726] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6094'. [ 2198.460519][ T737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6095'. [ 2198.702820][ T741] FAULT_INJECTION: forcing a failure. [ 2198.702820][ T741] name failslab, interval 1, probability 393216, space 0, times 0 [ 2198.782829][ T741] CPU: 0 UID: 0 PID: 741 Comm: syz.0.6096 Not tainted syzkaller #0 PREEMPT(full) [ 2198.782866][ T741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2198.782883][ T741] Call Trace: [ 2198.782891][ T741] [ 2198.782901][ T741] dump_stack_lvl+0x16c/0x1f0 [ 2198.782937][ T741] should_fail_ex+0x512/0x640 [ 2198.782977][ T741] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2198.783005][ T741] ? __pfx_stats_fop_open+0x10/0x10 [ 2198.783038][ T741] should_failslab+0xc2/0x120 [ 2198.783072][ T741] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2198.783098][ T741] ? seq_open+0x55/0x170 [ 2198.783135][ T741] ? __pfx_stats_fop_open+0x10/0x10 [ 2198.783167][ T741] ? seq_open+0x55/0x170 [ 2198.783205][ T741] seq_open+0x55/0x170 [ 2198.783239][ T741] __seq_open_private+0x3e/0xd0 [ 2198.783278][ T741] sc_common_open+0x6b/0x200 [ 2198.783312][ T741] full_proxy_open_regular+0x1b9/0x360 [ 2198.783353][ T741] do_dentry_open+0x982/0x1530 [ 2198.783383][ T741] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2198.783427][ T741] vfs_open+0x82/0x3f0 [ 2198.783466][ T741] path_openat+0x1de4/0x2cb0 [ 2198.783504][ T741] ? __pfx_path_openat+0x10/0x10 [ 2198.783534][ T741] ? __lock_acquire+0xb8a/0x1c90 [ 2198.783572][ T741] do_filp_open+0x20b/0x470 [ 2198.783600][ T741] ? __pfx_do_filp_open+0x10/0x10 [ 2198.783649][ T741] ? alloc_fd+0x471/0x7d0 [ 2198.783682][ T741] do_sys_openat2+0x11b/0x1d0 [ 2198.783719][ T741] ? __pfx_do_sys_openat2+0x10/0x10 [ 2198.783768][ T741] __x64_sys_openat+0x174/0x210 [ 2198.783810][ T741] ? __pfx___x64_sys_openat+0x10/0x10 [ 2198.783861][ T741] do_syscall_64+0xcd/0xfa0 [ 2198.783893][ T741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.783920][ T741] RIP: 0033:0x7f9bcf18f749 [ 2198.783940][ T741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.783965][ T741] RSP: 002b:00007f9bcffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2198.783988][ T741] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa0 RCX: 00007f9bcf18f749 [ 2198.784005][ T741] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2198.784021][ T741] RBP: 00007f9bcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2198.784037][ T741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2198.784052][ T741] R13: 00007f9bcf3e6038 R14: 00007f9bcf3e5fa0 R15: 00007fffd3aae4a8 [ 2198.784084][ T741] [ 2199.025607][ C0] vkms_vblank_simulate: vblank timer overrun [ 2199.259564][ T5840] Bluetooth: hci0: command 0x041b tx timeout [ 2199.266285][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 2199.388080][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2199.468548][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2200.805463][ T776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6108'. [ 2201.035032][ T779] FAULT_INJECTION: forcing a failure. [ 2201.035032][ T779] name failslab, interval 1, probability 393216, space 0, times 0 [ 2201.236048][ T779] CPU: 0 UID: 0 PID: 779 Comm: syz.3.6109 Not tainted syzkaller #0 PREEMPT(full) [ 2201.236085][ T779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2201.236101][ T779] Call Trace: [ 2201.236109][ T779] [ 2201.236119][ T779] dump_stack_lvl+0x16c/0x1f0 [ 2201.236155][ T779] should_fail_ex+0x512/0x640 [ 2201.236193][ T779] ? __kmalloc_noprof+0xca/0x880 [ 2201.236235][ T779] ? __pfx_stats_fop_open+0x10/0x10 [ 2201.236267][ T779] should_failslab+0xc2/0x120 [ 2201.236301][ T779] __kmalloc_noprof+0xdd/0x880 [ 2201.236342][ T779] ? __seq_open_private+0x22/0xd0 [ 2201.236382][ T779] ? __pfx_stats_fop_open+0x10/0x10 [ 2201.236414][ T779] ? __seq_open_private+0x22/0xd0 [ 2201.236449][ T779] ? __kasan_kmalloc+0xaa/0xb0 [ 2201.236476][ T779] __seq_open_private+0x22/0xd0 [ 2201.236515][ T779] sc_common_open+0x6b/0x200 [ 2201.236548][ T779] full_proxy_open_regular+0x1b9/0x360 [ 2201.236590][ T779] do_dentry_open+0x982/0x1530 [ 2201.236620][ T779] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 2201.236664][ T779] vfs_open+0x82/0x3f0 [ 2201.236703][ T779] path_openat+0x1de4/0x2cb0 [ 2201.236741][ T779] ? __pfx_path_openat+0x10/0x10 [ 2201.236771][ T779] ? __lock_acquire+0xb8a/0x1c90 [ 2201.236809][ T779] do_filp_open+0x20b/0x470 [ 2201.236837][ T779] ? __pfx_do_filp_open+0x10/0x10 [ 2201.236886][ T779] ? alloc_fd+0x471/0x7d0 [ 2201.236919][ T779] do_sys_openat2+0x11b/0x1d0 [ 2201.236956][ T779] ? __pfx_do_sys_openat2+0x10/0x10 [ 2201.237004][ T779] __x64_sys_openat+0x174/0x210 [ 2201.237050][ T779] ? __pfx___x64_sys_openat+0x10/0x10 [ 2201.237105][ T779] do_syscall_64+0xcd/0xfa0 [ 2201.237139][ T779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.237164][ T779] RIP: 0033:0x7fd33db8f749 [ 2201.237185][ T779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2201.237210][ T779] RSP: 002b:00007fd33ea6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2201.237234][ T779] RAX: ffffffffffffffda RBX: 00007fd33dde5fa0 RCX: 00007fd33db8f749 [ 2201.237251][ T779] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 2201.237267][ T779] RBP: 00007fd33dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2201.237283][ T779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2201.237298][ T779] R13: 00007fd33dde6038 R14: 00007fd33dde5fa0 R15: 00007ffeb5c90988 [ 2201.237332][ T779] [ 2201.478001][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.476345][ T869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6122'. [ 2206.605749][ T894] nbd: socks must be embedded in a SOCK_ITEM attr [ 2206.660575][ T894] FAULT_INJECTION: forcing a failure. [ 2206.660575][ T894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.691169][ T894] CPU: 0 UID: 0 PID: 894 Comm: syz.2.6131 Not tainted syzkaller #0 PREEMPT(full) [ 2206.691206][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2206.691221][ T894] Call Trace: [ 2206.691232][ T894] [ 2206.691248][ T894] dump_stack_lvl+0x16c/0x1f0 [ 2206.691288][ T894] should_fail_ex+0x512/0x640 [ 2206.691325][ T894] ? page_copy_sane+0xcd/0x2d0 [ 2206.691490][ T894] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2206.691556][ T894] ? fault_in_readable+0x135/0x1d0 [ 2206.691589][ T894] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2206.691615][ T894] ? fault_in_readable+0x179/0x1d0 [ 2206.691646][ T894] ? __pfx_fault_in_readable+0x10/0x10 [ 2206.691676][ T894] ? rcu_is_watching+0x12/0xc0 [ 2206.691703][ T894] ? I_BDEV+0xd/0x20 [ 2206.691738][ T894] ? inode_to_bdi+0x9e/0x160 [ 2206.691777][ T894] iomap_file_buffered_write+0x535/0xac0 [ 2206.691831][ T894] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2206.691878][ T894] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2206.691936][ T894] ? __pfx_down_read+0x10/0x10 [ 2206.691980][ T894] ? preempt_count_add+0x76/0x150 [ 2206.692022][ T894] ? mnt_put_write_access_file+0xc1/0xf0 [ 2206.692054][ T894] blkdev_write_iter+0x575/0xe00 [ 2206.692095][ T894] vfs_write+0x7d3/0x11d0 [ 2206.692126][ T894] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2206.692160][ T894] ? __pfx_vfs_write+0x10/0x10 [ 2206.692186][ T894] ? find_held_lock+0x2b/0x80 [ 2206.692232][ T894] ksys_write+0x12a/0x250 [ 2206.692261][ T894] ? __pfx_ksys_write+0x10/0x10 [ 2206.692299][ T894] do_syscall_64+0xcd/0xfa0 [ 2206.692338][ T894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.692369][ T894] RIP: 0033:0x7fc17298f749 [ 2206.692392][ T894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2206.692419][ T894] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2206.692444][ T894] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2206.692462][ T894] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2206.692479][ T894] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2206.692495][ T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2206.692518][ T894] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2206.692556][ T894] [ 2206.932335][ C0] vkms_vblank_simulate: vblank timer overrun [ 2209.905797][ T955] nbd: socks must be embedded in a SOCK_ITEM attr [ 2209.931096][ T955] FAULT_INJECTION: forcing a failure. [ 2209.931096][ T955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.973198][ T955] CPU: 0 UID: 0 PID: 955 Comm: syz.2.6141 Not tainted syzkaller #0 PREEMPT(full) [ 2209.973234][ T955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2209.973250][ T955] Call Trace: [ 2209.973259][ T955] [ 2209.973269][ T955] dump_stack_lvl+0x16c/0x1f0 [ 2209.973306][ T955] should_fail_ex+0x512/0x640 [ 2209.973350][ T955] ? page_copy_sane+0xcd/0x2d0 [ 2209.973390][ T955] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2209.973426][ T955] ? fault_in_readable+0x135/0x1d0 [ 2209.973458][ T955] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2209.973484][ T955] ? fault_in_readable+0x179/0x1d0 [ 2209.973514][ T955] ? __pfx_fault_in_readable+0x10/0x10 [ 2209.973543][ T955] ? rcu_is_watching+0x12/0xc0 [ 2209.973569][ T955] ? I_BDEV+0xd/0x20 [ 2209.973604][ T955] ? inode_to_bdi+0x9e/0x160 [ 2209.973640][ T955] iomap_file_buffered_write+0x535/0xac0 [ 2209.973694][ T955] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2209.973737][ T955] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2209.973793][ T955] ? __pfx_down_read+0x10/0x10 [ 2209.973830][ T955] ? preempt_count_add+0x76/0x150 [ 2209.973867][ T955] ? mnt_put_write_access_file+0xc1/0xf0 [ 2209.973897][ T955] blkdev_write_iter+0x575/0xe00 [ 2209.973933][ T955] vfs_write+0x7d3/0x11d0 [ 2209.973961][ T955] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2209.973993][ T955] ? __pfx_vfs_write+0x10/0x10 [ 2209.974018][ T955] ? find_held_lock+0x2b/0x80 [ 2209.974063][ T955] ksys_write+0x12a/0x250 [ 2209.974090][ T955] ? __pfx_ksys_write+0x10/0x10 [ 2209.974127][ T955] do_syscall_64+0xcd/0xfa0 [ 2209.974169][ T955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.974195][ T955] RIP: 0033:0x7fc17298f749 [ 2209.974215][ T955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2209.974240][ T955] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2209.974263][ T955] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2209.974280][ T955] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2209.974296][ T955] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2209.974311][ T955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2209.974327][ T955] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2209.974359][ T955] [ 2210.217467][ C0] vkms_vblank_simulate: vblank timer overrun [ 2212.021489][ T964] Process accounting resumed [ 2214.527626][ T1007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2214.561195][ T1007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2214.625548][ T1007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2214.652708][ T1007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2214.786695][ T1007] Process accounting resumed [ 2215.479752][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2216.600581][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2216.676673][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2216.682807][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2216.921534][ T1064] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6172'. [ 2216.979683][ T1064] binder: BINDER_SET_CONTEXT_MGR already set [ 2216.986194][ T1064] binder: 1063:1064 ioctl 4018620d 9 returned -16 [ 2218.445516][ T1093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6168'. [ 2220.104077][ T1110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2220.151120][ T1110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2220.177754][ T1110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2220.212981][ T1110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2221.603933][ T30] audit: type=1800 audit(4294971426.746:53): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6183" name="file0" dev="tmpfs" ino=2665 res=0 errno=0 [ 2221.639211][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2221.998994][ T1157] delete_channel: no stack [ 2222.199801][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2222.206034][ T5840] Bluetooth: hci0: command 0x041b tx timeout [ 2222.279637][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2222.980622][ T1181] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6192'. [ 2223.114357][ T1191] binder: BINDER_SET_CONTEXT_MGR already set [ 2223.150336][ T1191] binder: 1179:1191 ioctl 4018620d 9 returned -16 [ 2223.485526][ T1169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2223.567188][ T1169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2223.633912][ T1169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2223.776670][ T1169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2223.901479][ T30] audit: type=1800 audit(4294971429.015:54): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6196" name="file0" dev="tmpfs" ino=1766 res=0 errno=0 [ 2223.922116][ C0] vkms_vblank_simulate: vblank timer overrun [ 2224.520528][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2224.704774][ T1223] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2224.721230][ T1223] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2225.190505][ T1229] kvm_intel: kvm [1228]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x81 [ 2225.643112][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2225.649196][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2225.802057][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2226.385180][ T1247] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2226.391979][ T1247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2226.402529][ T1247] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2226.410210][ T1247] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2226.535136][ T1261] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 2227.087012][ T1266] FAULT_INJECTION: forcing a failure. [ 2227.087012][ T1266] name failslab, interval 1, probability 393216, space 0, times 0 [ 2227.100953][ T1266] CPU: 0 UID: 0 PID: 1266 Comm: syz.2.6212 Not tainted syzkaller #0 PREEMPT(full) [ 2227.100986][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2227.101002][ T1266] Call Trace: [ 2227.101011][ T1266] [ 2227.101021][ T1266] dump_stack_lvl+0x16c/0x1f0 [ 2227.101056][ T1266] should_fail_ex+0x512/0x640 [ 2227.101093][ T1266] ? __kmalloc_noprof+0xca/0x880 [ 2227.101136][ T1266] should_failslab+0xc2/0x120 [ 2227.101169][ T1266] __kmalloc_noprof+0xdd/0x880 [ 2227.101208][ T1266] ? process_preds+0x48b/0x1c50 [ 2227.101247][ T1266] ? process_preds+0x48b/0x1c50 [ 2227.101279][ T1266] process_preds+0x48b/0x1c50 [ 2227.101318][ T1266] ? create_filter_start.constprop.0+0x56/0x300 [ 2227.101357][ T1266] create_filter+0x140/0x210 [ 2227.101393][ T1266] ? __pfx_create_filter+0x10/0x10 [ 2227.101429][ T1266] ? __pfx___mutex_lock+0x10/0x10 [ 2227.101460][ T1266] ? find_held_lock+0x2b/0x80 [ 2227.101489][ T1266] apply_event_filter+0x220/0x500 [ 2227.101525][ T1266] ? __pfx_apply_event_filter+0x10/0x10 [ 2227.101570][ T1266] event_filter_write+0x16d/0x290 [ 2227.101606][ T1266] ? __pfx_event_filter_write+0x10/0x10 [ 2227.101634][ T1266] vfs_write+0x2a0/0x11d0 [ 2227.101666][ T1266] ? __pfx___mutex_lock+0x10/0x10 [ 2227.101698][ T1266] ? __pfx_vfs_write+0x10/0x10 [ 2227.101733][ T1266] ? __fget_files+0x20e/0x3c0 [ 2227.101767][ T1266] ksys_write+0x12a/0x250 [ 2227.101794][ T1266] ? __pfx_ksys_write+0x10/0x10 [ 2227.101830][ T1266] do_syscall_64+0xcd/0xfa0 [ 2227.101863][ T1266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.101888][ T1266] RIP: 0033:0x7fc17298f749 [ 2227.101907][ T1266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2227.101931][ T1266] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2227.101955][ T1266] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2227.101972][ T1266] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 2227.101987][ T1266] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2227.102002][ T1266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2227.102017][ T1266] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2227.102050][ T1266] [ 2228.273624][ T1282] nbd: socks must be embedded in a SOCK_ITEM attr [ 2228.326851][ T1282] FAULT_INJECTION: forcing a failure. [ 2228.326851][ T1282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2228.340288][ T1282] CPU: 0 UID: 0 PID: 1282 Comm: syz.2.6216 Not tainted syzkaller #0 PREEMPT(full) [ 2228.340325][ T1282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2228.340341][ T1282] Call Trace: [ 2228.340353][ T1282] [ 2228.340363][ T1282] dump_stack_lvl+0x16c/0x1f0 [ 2228.340399][ T1282] should_fail_ex+0x512/0x640 [ 2228.340438][ T1282] ? page_copy_sane+0xcd/0x2d0 [ 2228.340487][ T1282] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2228.340525][ T1282] ? fault_in_readable+0x135/0x1d0 [ 2228.340556][ T1282] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2228.340580][ T1282] ? fault_in_readable+0x179/0x1d0 [ 2228.340610][ T1282] ? __pfx_fault_in_readable+0x10/0x10 [ 2228.340638][ T1282] ? rcu_is_watching+0x12/0xc0 [ 2228.340664][ T1282] ? I_BDEV+0xd/0x20 [ 2228.340697][ T1282] ? inode_to_bdi+0x9e/0x160 [ 2228.340732][ T1282] iomap_file_buffered_write+0x535/0xac0 [ 2228.340785][ T1282] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2228.340829][ T1282] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2228.340884][ T1282] ? __pfx_down_read+0x10/0x10 [ 2228.340920][ T1282] ? preempt_count_add+0x76/0x150 [ 2228.340956][ T1282] ? mnt_put_write_access_file+0xc1/0xf0 [ 2228.340986][ T1282] blkdev_write_iter+0x575/0xe00 [ 2228.341021][ T1282] vfs_write+0x7d3/0x11d0 [ 2228.341049][ T1282] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2228.341083][ T1282] ? __pfx_vfs_write+0x10/0x10 [ 2228.341109][ T1282] ? find_held_lock+0x2b/0x80 [ 2228.341155][ T1282] ksys_write+0x12a/0x250 [ 2228.341182][ T1282] ? __pfx_ksys_write+0x10/0x10 [ 2228.341220][ T1282] do_syscall_64+0xcd/0xfa0 [ 2228.341254][ T1282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.341280][ T1282] RIP: 0033:0x7fc17298f749 [ 2228.341301][ T1282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2228.341328][ T1282] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2228.341352][ T1282] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2228.341369][ T1282] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2228.341385][ T1282] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2228.341400][ T1282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2228.341415][ T1282] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2228.341449][ T1282] [ 2228.575717][ C0] vkms_vblank_simulate: vblank timer overrun [ 2228.837403][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2228.843942][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2228.850200][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2228.856851][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2229.071714][ T1287] nbd: socks must be embedded in a SOCK_ITEM attr [ 2229.570022][ T1307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6220'. [ 2229.618353][ T1308] netlink: 334 bytes leftover after parsing attributes in process `syz.1.6221'. [ 2230.088647][ T1315] bridge0: port 4(veth0_to_bridge) entered blocking state [ 2230.161975][ T1315] bridge0: port 4(veth0_to_bridge) entered disabled state [ 2230.174997][ T1319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6223'. [ 2230.246286][ T1315] veth0_to_bridge: entered allmulticast mode [ 2230.309880][ T1315] veth0_to_bridge: entered promiscuous mode [ 2230.333520][ T1315] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2230.384552][ T1315] bridge0: port 4(veth0_to_bridge) entered blocking state [ 2230.391872][ T1315] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 2230.970764][ T1330] FAULT_INJECTION: forcing a failure. [ 2230.970764][ T1330] name failslab, interval 1, probability 393216, space 0, times 0 [ 2231.090874][ T1330] CPU: 0 UID: 0 PID: 1330 Comm: syz.0.6227 Not tainted syzkaller #0 PREEMPT(full) [ 2231.090910][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2231.090926][ T1330] Call Trace: [ 2231.090934][ T1330] [ 2231.090944][ T1330] dump_stack_lvl+0x16c/0x1f0 [ 2231.090979][ T1330] should_fail_ex+0x512/0x640 [ 2231.091018][ T1330] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2231.091047][ T1330] should_failslab+0xc2/0x120 [ 2231.091082][ T1330] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2231.091108][ T1330] ? ioctx_alloc+0x1a4/0x2120 [ 2231.091142][ T1330] ? ioctx_alloc+0x1a4/0x2120 [ 2231.091169][ T1330] ioctx_alloc+0x1a4/0x2120 [ 2231.091216][ T1330] ? find_held_lock+0x2b/0x80 [ 2231.091243][ T1330] ? __pfx_ioctx_alloc+0x10/0x10 [ 2231.091270][ T1330] ? __might_fault+0x13b/0x190 [ 2231.091304][ T1330] __x64_sys_io_setup+0xc9/0x210 [ 2231.091336][ T1330] do_syscall_64+0xcd/0xfa0 [ 2231.091370][ T1330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2231.091395][ T1330] RIP: 0033:0x7f9bcf18f749 [ 2231.091415][ T1330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2231.091439][ T1330] RSP: 002b:00007f9bcffaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2231.091463][ T1330] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa0 RCX: 00007f9bcf18f749 [ 2231.091480][ T1330] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000fff4 [ 2231.091496][ T1330] RBP: 00007f9bcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2231.091511][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2231.091526][ T1330] R13: 00007f9bcf3e6038 R14: 00007f9bcf3e5fa0 R15: 00007fffd3aae4a8 [ 2231.091558][ T1330] [ 2231.271006][ C0] vkms_vblank_simulate: vblank timer overrun [ 2231.551116][ T1334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 2232.443586][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2232.450469][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2234.782841][ T1388] FAULT_INJECTION: forcing a failure. [ 2234.782841][ T1388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2234.805915][ T1388] CPU: 0 UID: 0 PID: 1388 Comm: syz.2.6238 Not tainted syzkaller #0 PREEMPT(full) [ 2234.805950][ T1388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2234.805965][ T1388] Call Trace: [ 2234.805974][ T1388] [ 2234.805983][ T1388] dump_stack_lvl+0x16c/0x1f0 [ 2234.806019][ T1388] should_fail_ex+0x512/0x640 [ 2234.806058][ T1388] ? page_copy_sane+0xcd/0x2d0 [ 2234.806097][ T1388] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2234.806134][ T1388] ? fault_in_readable+0x135/0x1d0 [ 2234.806166][ T1388] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2234.806191][ T1388] ? fault_in_readable+0x179/0x1d0 [ 2234.806221][ T1388] ? __pfx_fault_in_readable+0x10/0x10 [ 2234.806250][ T1388] ? rcu_is_watching+0x12/0xc0 [ 2234.806278][ T1388] ? I_BDEV+0xd/0x20 [ 2234.806312][ T1388] ? inode_to_bdi+0x9e/0x160 [ 2234.806348][ T1388] iomap_file_buffered_write+0x535/0xac0 [ 2234.806402][ T1388] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2234.806446][ T1388] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2234.806502][ T1388] ? __pfx_down_read+0x10/0x10 [ 2234.806540][ T1388] ? preempt_count_add+0x76/0x150 [ 2234.806577][ T1388] ? mnt_put_write_access_file+0xc1/0xf0 [ 2234.806611][ T1388] blkdev_write_iter+0x575/0xe00 [ 2234.806647][ T1388] vfs_write+0x7d3/0x11d0 [ 2234.806676][ T1388] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2234.806709][ T1388] ? __pfx_vfs_write+0x10/0x10 [ 2234.806735][ T1388] ? find_held_lock+0x2b/0x80 [ 2234.806780][ T1388] ksys_write+0x12a/0x250 [ 2234.806807][ T1388] ? __pfx_ksys_write+0x10/0x10 [ 2234.806844][ T1388] do_syscall_64+0xcd/0xfa0 [ 2234.806885][ T1388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.806910][ T1388] RIP: 0033:0x7fc17298f749 [ 2234.806930][ T1388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2234.806955][ T1388] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2234.806978][ T1388] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2234.806995][ T1388] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2234.807011][ T1388] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2234.807026][ T1388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2234.807042][ T1388] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2234.807075][ T1388] [ 2235.041511][ C0] vkms_vblank_simulate: vblank timer overrun [ 2237.005202][ T1417] futex_wake_op: syz.3.6244 tries to shift op by -9; fix this program [ 2237.389086][ T1425] FAULT_INJECTION: forcing a failure. [ 2237.389086][ T1425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.461991][ T1425] CPU: 0 UID: 0 PID: 1425 Comm: syz.0.6247 Not tainted syzkaller #0 PREEMPT(full) [ 2237.462026][ T1425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2237.462041][ T1425] Call Trace: [ 2237.462050][ T1425] [ 2237.462060][ T1425] dump_stack_lvl+0x16c/0x1f0 [ 2237.462095][ T1425] should_fail_ex+0x512/0x640 [ 2237.462133][ T1425] ? page_copy_sane+0xcd/0x2d0 [ 2237.462172][ T1425] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2237.462209][ T1425] ? fault_in_readable+0x135/0x1d0 [ 2237.462240][ T1425] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2237.462265][ T1425] ? fault_in_readable+0x179/0x1d0 [ 2237.462295][ T1425] ? __pfx_fault_in_readable+0x10/0x10 [ 2237.462327][ T1425] ? rcu_is_watching+0x12/0xc0 [ 2237.462353][ T1425] ? I_BDEV+0xd/0x20 [ 2237.462388][ T1425] ? inode_to_bdi+0x9e/0x160 [ 2237.462424][ T1425] iomap_file_buffered_write+0x535/0xac0 [ 2237.462478][ T1425] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2237.462522][ T1425] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2237.462578][ T1425] ? __pfx_down_read+0x10/0x10 [ 2237.462615][ T1425] ? preempt_count_add+0x76/0x150 [ 2237.462660][ T1425] ? mnt_put_write_access_file+0xc1/0xf0 [ 2237.462690][ T1425] blkdev_write_iter+0x575/0xe00 [ 2237.462726][ T1425] vfs_write+0x7d3/0x11d0 [ 2237.462755][ T1425] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2237.462787][ T1425] ? __pfx_vfs_write+0x10/0x10 [ 2237.462812][ T1425] ? find_held_lock+0x2b/0x80 [ 2237.462857][ T1425] ksys_write+0x12a/0x250 [ 2237.462884][ T1425] ? __pfx_ksys_write+0x10/0x10 [ 2237.462921][ T1425] do_syscall_64+0xcd/0xfa0 [ 2237.462953][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.462979][ T1425] RIP: 0033:0x7f9bcf18f749 [ 2237.462999][ T1425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2237.463023][ T1425] RSP: 002b:00007f9bcffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2237.463046][ T1425] RAX: ffffffffffffffda RBX: 00007f9bcf3e5fa0 RCX: 00007f9bcf18f749 [ 2237.463062][ T1425] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2237.463078][ T1425] RBP: 00007f9bcf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2237.463094][ T1425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2237.463109][ T1425] R13: 00007f9bcf3e6038 R14: 00007f9bcf3e5fa0 R15: 00007fffd3aae4a8 [ 2237.463141][ T1425] [ 2238.063300][ T1437] FAULT_INJECTION: forcing a failure. [ 2238.063300][ T1437] name failslab, interval 1, probability 393216, space 0, times 0 [ 2238.094586][ T1437] CPU: 0 UID: 0 PID: 1437 Comm: syz.2.6250 Not tainted syzkaller #0 PREEMPT(full) [ 2238.094621][ T1437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2238.094636][ T1437] Call Trace: [ 2238.094649][ T1437] [ 2238.094658][ T1437] dump_stack_lvl+0x16c/0x1f0 [ 2238.094693][ T1437] should_fail_ex+0x512/0x640 [ 2238.094731][ T1437] ? fs_reclaim_acquire+0xae/0x150 [ 2238.094766][ T1437] should_failslab+0xc2/0x120 [ 2238.094800][ T1437] __kmalloc_noprof+0xdd/0x880 [ 2238.094841][ T1437] ? tomoyo_encode2+0x100/0x3e0 [ 2238.094874][ T1437] ? tomoyo_encode2+0x100/0x3e0 [ 2238.094901][ T1437] tomoyo_encode2+0x100/0x3e0 [ 2238.094938][ T1437] tomoyo_encode+0x29/0x50 [ 2238.094965][ T1437] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2238.095003][ T1437] tomoyo_path_number_perm+0x245/0x580 [ 2238.095025][ T1437] ? tomoyo_path_number_perm+0x237/0x580 [ 2238.095051][ T1437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2238.095077][ T1437] ? find_held_lock+0x2b/0x80 [ 2238.095127][ T1437] ? find_held_lock+0x2b/0x80 [ 2238.095150][ T1437] ? hook_file_ioctl_common+0x145/0x410 [ 2238.095181][ T1437] ? __fget_files+0x20e/0x3c0 [ 2238.095210][ T1437] security_file_ioctl+0x9b/0x240 [ 2238.095235][ T1437] __x64_sys_ioctl+0xb7/0x210 [ 2238.095272][ T1437] do_syscall_64+0xcd/0xfa0 [ 2238.095303][ T1437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.095327][ T1437] RIP: 0033:0x7fc17298f749 [ 2238.095345][ T1437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2238.095368][ T1437] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2238.095391][ T1437] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2238.095408][ T1437] RDX: 0000000000000000 RSI: 0000000000004161 RDI: 0000000000000003 [ 2238.095423][ T1437] RBP: 00007fc17383b090 R08: 0000000000000000 R09: 0000000000000000 [ 2238.095438][ T1437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2238.095452][ T1437] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2238.095484][ T1437] [ 2238.095505][ T1437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2240.573503][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6264'. [ 2240.587786][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6264'. [ 2241.521221][ T1479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2241.527868][ T1479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2241.537769][ T1479] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2241.555817][ T1479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2242.914579][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 2243.481573][ T1493] Process accounting paused [ 2243.554575][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 2243.560691][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2243.567291][T32690] Bluetooth: hci0: command 0x041b tx timeout [ 2244.536843][ T1546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6277'. [ 2245.303117][ T1532] Process accounting paused [ 2245.977339][ T1568] vivid-003: ================= START STATUS ================= [ 2245.986725][ T1568] vivid-003: Radio HW Seek Mode: Bounded [ 2246.008024][ T1568] vivid-003: Radio Programmable HW Seek: false [ 2246.016941][ T1568] vivid-003: RDS Rx I/O Mode: Block I/O [ 2246.022633][ T1568] vivid-003: Generate RBDS Instead of RDS: false [ 2246.052769][ T1568] vivid-003: RDS Reception: true [ 2246.057984][ T1568] vivid-003: RDS Program Type: 0 inactive [ 2246.071885][ T1568] vivid-003: RDS PS Name: inactive [ 2246.099117][ T1568] vivid-003: RDS Radio Text: inactive [ 2246.109831][ T1568] vivid-003: RDS Traffic Announcement: false inactive [ 2246.119616][ T1568] vivid-003: RDS Traffic Program: false inactive [ 2246.140845][ T1568] vivid-003: RDS Music: false inactive [ 2246.147748][ T1568] vivid-003: ================== END STATUS ================== [ 2246.984919][ T1559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2247.080201][ T1559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2247.216583][ T1559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2247.339352][ T1559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2247.792830][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 2248.642447][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6292'. [ 2249.151455][ T5840] Bluetooth: hci0: command 0x041b tx timeout [ 2249.231462][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2249.391245][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 2250.089287][ T30] audit: type=1804 audit(2147483671.859:55): pid=1638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6296" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1055 res=1 errno=0 [ 2250.115720][ T1638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6296'. [ 2250.898594][ T1647] FAULT_INJECTION: forcing a failure. [ 2250.898594][ T1647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2250.931097][ T1647] CPU: 0 UID: 0 PID: 1647 Comm: syz.2.6299 Not tainted syzkaller #0 PREEMPT(full) [ 2250.931134][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2250.931149][ T1647] Call Trace: [ 2250.931157][ T1647] [ 2250.931171][ T1647] dump_stack_lvl+0x16c/0x1f0 [ 2250.931208][ T1647] should_fail_ex+0x512/0x640 [ 2250.931247][ T1647] ? page_copy_sane+0xcd/0x2d0 [ 2250.931287][ T1647] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 2250.931324][ T1647] ? fault_in_readable+0x135/0x1d0 [ 2250.931355][ T1647] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2250.931380][ T1647] ? fault_in_readable+0x179/0x1d0 [ 2250.931411][ T1647] ? __pfx_fault_in_readable+0x10/0x10 [ 2250.931457][ T1647] ? rcu_is_watching+0x12/0xc0 [ 2250.931484][ T1647] ? I_BDEV+0xd/0x20 [ 2250.931519][ T1647] ? inode_to_bdi+0x9e/0x160 [ 2250.931556][ T1647] iomap_file_buffered_write+0x535/0xac0 [ 2250.931609][ T1647] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2250.931653][ T1647] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2250.931709][ T1647] ? __pfx_down_read+0x10/0x10 [ 2250.931752][ T1647] ? preempt_count_add+0x76/0x150 [ 2250.931790][ T1647] ? mnt_put_write_access_file+0xc1/0xf0 [ 2250.931820][ T1647] blkdev_write_iter+0x575/0xe00 [ 2250.931855][ T1647] vfs_write+0x7d3/0x11d0 [ 2250.931884][ T1647] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2250.931916][ T1647] ? __pfx_vfs_write+0x10/0x10 [ 2250.931942][ T1647] ? find_held_lock+0x2b/0x80 [ 2250.931986][ T1647] ksys_write+0x12a/0x250 [ 2250.932013][ T1647] ? __pfx_ksys_write+0x10/0x10 [ 2250.932050][ T1647] do_syscall_64+0xcd/0xfa0 [ 2250.932083][ T1647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.932108][ T1647] RIP: 0033:0x7fc17298f749 [ 2250.932128][ T1647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2250.932152][ T1647] RSP: 002b:00007fc17383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2250.932175][ T1647] RAX: ffffffffffffffda RBX: 00007fc172be5fa0 RCX: 00007fc17298f749 [ 2250.932192][ T1647] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2250.932207][ T1647] RBP: 00007fc172a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2250.932223][ T1647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2250.932238][ T1647] R13: 00007fc172be6038 R14: 00007fc172be5fa0 R15: 00007ffdb0928cd8 [ 2250.932271][ T1647] [ 2251.995958][ T1656] kexec: Could not allocate control_code_buffer [ 2252.042700][ T1671] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 2252.160149][ T1655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2252.166243][ T1655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2252.218592][ T1655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2252.303001][ T1655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2252.954421][ T1689] FAULT_INJECTION: forcing a failure. [ 2252.954421][ T1689] name failslab, interval 1, probability 393216, space 0, times 0 [ 2253.071344][ T1694] netlink: 'syz.2.6307': attribute type 2 has an invalid length. [ 2253.142161][ T1689] CPU: 0 UID: 0 PID: 1689 Comm: syz.3.6304 Not tainted syzkaller #0 PREEMPT(full) [ 2253.142198][ T1689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2253.142214][ T1689] Call Trace: [ 2253.142222][ T1689] [ 2253.142232][ T1689] dump_stack_lvl+0x16c/0x1f0 [ 2253.142268][ T1689] should_fail_ex+0x512/0x640 [ 2253.142314][ T1689] ? __kmalloc_noprof+0xca/0x880 [ 2253.142358][ T1689] should_failslab+0xc2/0x120 [ 2253.142392][ T1689] __kmalloc_noprof+0xdd/0x880 [ 2253.142433][ T1689] ? cache_create_net+0x9d/0x220 [ 2253.142467][ T1689] ? cache_create_net+0x9d/0x220 [ 2253.142494][ T1689] cache_create_net+0x9d/0x220 [ 2253.142523][ T1689] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 2253.142552][ T1689] gss_svc_init_net+0x69/0x660 [ 2253.142578][ T1689] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 2253.142614][ T1689] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 2253.142642][ T1689] ops_init+0x1e2/0x5f0 [ 2253.142672][ T1689] setup_net+0x100/0x390 [ 2253.142699][ T1689] ? __pfx_setup_net+0x10/0x10 [ 2253.142727][ T1689] ? debug_mutex_init+0x37/0x70 [ 2253.142757][ T1689] copy_net_ns+0x2f8/0x690 [ 2253.142790][ T1689] create_new_namespaces+0x3ea/0xa90 [ 2253.142825][ T1689] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2253.142857][ T1689] ksys_unshare+0x45b/0xa40 [ 2253.142891][ T1689] ? __pfx_ksys_unshare+0x10/0x10 [ 2253.142926][ T1689] ? xfd_validate_state+0x61/0x180 [ 2253.142971][ T1689] __x64_sys_unshare+0x31/0x40 [ 2253.143004][ T1689] do_syscall_64+0xcd/0xfa0 [ 2253.143037][ T1689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.143062][ T1689] RIP: 0033:0x7fd33db8f749 [ 2253.143082][ T1689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2253.143106][ T1689] RSP: 002b:00007fd33ea6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2253.143130][ T1689] RAX: ffffffffffffffda RBX: 00007fd33dde5fa0 RCX: 00007fd33db8f749 [ 2253.143152][ T1689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2253.143167][ T1689] RBP: 00007fd33dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2253.143183][ T1689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2253.143198][ T1689] R13: 00007fd33dde6038 R14: 00007fd33dde5fa0 R15: 00007ffeb5c90988 [ 2253.143231][ T1689] [ 2253.786970][ T1692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2253.823069][ T1692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2253.836483][ T1692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2253.850577][ T1692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2254.139318][ T1709] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2254.203748][ T1709] CIFS mount error: No usable UNC path provided in device string! [ 2254.203748][ T1709] [ 2254.219927][ T1709] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2254.293844][ T1721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6309'. [ 2255.327888][ T1734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2255.336422][ T1734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2255.350144][ T1734] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2255.368795][ T1734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2255.637125][ T1760] Invalid ELF header magic: != ELF [ 2256.779139][ T1785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6326'. [ 2257.387466][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2257.393645][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2257.399853][T32690] Bluetooth: hci0: command 0x041b tx timeout [ 2258.027669][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2258.034047][ T1768] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2258.874353][ T1768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2258.882979][ T1768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2258.891243][ T1768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2260.106167][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2260.584706][ T1794] kexec: Could not allocate control_code_buffer [ 2260.905819][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2260.912253][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2262.000219][ T1832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2262.068094][ T1832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2262.111054][ T1832] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2262.162775][ T1832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2263.232171][ T1881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.6347'. [ 2263.305692][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2263.392933][ T1881] bridge0: port 4(bond0) entered disabled state [ 2263.399484][ T1881] bridge0: port 3(syz_tun) entered disabled state [ 2263.406196][ T1881] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.413383][ T1881] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.775106][ T1901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6352'. [ 2263.862251][ T1902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'. [ 2264.020397][ T1901] can: request_module (can-proto-4) failed. [ 2264.104259][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2264.185059][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2264.192782][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 2265.299755][ T1907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2265.398046][ T1907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2265.502411][ T1907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2265.593591][ T1907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2265.610614][ T1912] kexec: Could not allocate control_code_buffer [ 2266.316309][ T1938] Invalid ELF header magic: != ELF [ 2266.423697][T11974] Bluetooth: hci1: command 0x0419 tx timeout [ 2267.462472][T11974] Bluetooth: hci0: command 0x041b tx timeout [ 2267.546347][T11974] Bluetooth: hci4: command 0x040f tx timeout [ 2267.607572][ T1959] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2267.622633][T11974] Bluetooth: hci2: command 0x0c1a tx timeout [ 2311.597139][ C0] sched: DL replenish lagged too much [ 2317.981661][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2323.430917][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2361.551267][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2373.106973][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2391.106120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.121318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.135009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.148780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.162428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.176214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.190272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.204682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.218276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2391.232190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.107808][ C0] net_ratelimit: 3189 callbacks suppressed [ 2396.107831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.127526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.141178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.155258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.169072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.182852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.196573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.210412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.224273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2396.237966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.115986][ C0] net_ratelimit: 3154 callbacks suppressed [ 2401.116010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.135560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.149121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.162773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.176589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.190210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.203803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.217397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.230979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2401.244730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.123935][ C0] net_ratelimit: 3149 callbacks suppressed [ 2406.123957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.143394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.156930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.170493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.184171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.197841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.211508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.225058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.238655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2406.252826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.130586][ C0] net_ratelimit: 3135 callbacks suppressed [ 2411.130608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.150474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.164236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.178020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.191676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.205309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.219085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.233770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.247542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2411.261678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.137913][ C0] net_ratelimit: 3200 callbacks suppressed [ 2416.137936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.157380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.170811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.184388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.197960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.211751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.225261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.238875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.252482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.265978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2416.833840][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2421.146333][ C0] net_ratelimit: 3302 callbacks suppressed [ 2421.146356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.165785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.179525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.193227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.206804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.220627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.234285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.248077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.262474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2421.276228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2422.300997][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2426.154038][ C0] net_ratelimit: 3415 callbacks suppressed [ 2426.154062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.173868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.187463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.201131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.214620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.228982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.243075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.256682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.270388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2426.284011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.161070][ C0] net_ratelimit: 3385 callbacks suppressed [ 2431.161093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.180712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.194404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.208137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.221843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.235460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.249193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.262998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.276681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2431.290493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.168285][ C0] net_ratelimit: 3231 callbacks suppressed [ 2436.168308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.188047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.202028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.216616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.230469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.244356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.258130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.271948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.286019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2436.299750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.176555][ C0] net_ratelimit: 3176 callbacks suppressed [ 2441.176578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.196330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.211188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.224737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.238266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.251783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.265419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.278902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.292396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2441.305877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.182829][ C0] net_ratelimit: 3275 callbacks suppressed [ 2446.182853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.202512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.216148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.229800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.243438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.257171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.270839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.284467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.298116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2446.311742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.191223][ C0] net_ratelimit: 3178 callbacks suppressed [ 2451.191245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.210854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.224491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.238243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.252184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.265879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.279525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.294499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.309473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2451.323387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.198439][ C0] net_ratelimit: 3222 callbacks suppressed [ 2456.198463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.217975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.231774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.245408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.259075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.272556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.286153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.299724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.313191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2456.326796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.205367][ C0] net_ratelimit: 3534 callbacks suppressed [ 2461.205389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.224826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.238347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.251830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.265371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.278805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.292244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.305743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.319584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2461.333381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.212760][ C0] net_ratelimit: 3276 callbacks suppressed [ 2466.212783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.232395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.246170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.260173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.274009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.287780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.301528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.315163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.328961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2466.342663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.220164][ C0] net_ratelimit: 3258 callbacks suppressed [ 2471.220187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.239603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.253163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.266739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.280279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.293768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.307589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.321297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.334813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2471.348379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.229137][ C0] net_ratelimit: 3268 callbacks suppressed [ 2476.229159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.248754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.262532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.276281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.289931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.303701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.317430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.331159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.344929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2476.358942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2478.696167][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2481.235576][ C0] net_ratelimit: 3352 callbacks suppressed [ 2481.235598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.254880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.268427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.282422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.296087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.309555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.323088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.336522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.349949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2481.363547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2485.606261][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2486.243102][ C0] net_ratelimit: 3463 callbacks suppressed [ 2486.243126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.262746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.276486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.290132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.303780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.317652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.331215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.344851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.358470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2486.372131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2488.561460][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2488.568452][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5199/1:b..l [ 2488.576955][ C0] rcu: (detected by 0, t=10502 jiffies, g=246741, q=2462 ncpus=1) [ 2488.584859][ C0] task:udevd state:R running task stack:24728 pid:5199 tgid:5199 ppid:1 task_flags:0x400140 flags:0x00080001 [ 2488.599628][ C0] Call Trace: [ 2488.602932][ C0] [ 2488.605886][ C0] __schedule+0x1190/0x5de0 [ 2488.610411][ C0] ? find_held_lock+0x2b/0x80 [ 2488.615122][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 2488.620019][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 2488.625302][ C0] ? __pfx___schedule+0x10/0x10 [ 2488.630206][ C0] ? mark_held_locks+0x49/0x80 [ 2488.635022][ C0] preempt_schedule_irq+0x51/0x90 [ 2488.640073][ C0] irqentry_exit+0x36/0x90 [ 2488.644518][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2488.650659][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 2488.656834][ C0] Code: 00 00 5b e9 c2 93 e5 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 78 d8 e4 11 <65> 8b 05 89 d8 e4 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 2488.676549][ C0] RSP: 0018:ffffc90003337750 EFLAGS: 00000202 [ 2488.682665][ C0] RAX: fffffbfff3567710 RBX: 0000000000023750 RCX: ffffffff822fc1b3 [ 2488.690686][ C0] RDX: ffff8880747b3c80 RSI: ffffffff822fc1e3 RDI: 0000000000000007 [ 2488.698700][ C0] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 2488.706722][ C0] R10: 0000000000003750 R11: 0000000000000001 R12: ffff88801c514900 [ 2488.714720][ C0] R13: ffff88801c5148fc R14: 0000000000000001 R15: dffffc0000000000 [ 2488.722749][ C0] ? __page_table_check_zero+0x2d3/0x5d0 [ 2488.728431][ C0] ? __page_table_check_zero+0x303/0x5d0 [ 2488.734126][ C0] __page_table_check_zero+0x303/0x5d0 [ 2488.739609][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 2488.745610][ C0] ? __reset_page_owner+0x137/0x1a0 [ 2488.750877][ C0] __free_frozen_pages+0x7d0/0x1160 [ 2488.756226][ C0] qlist_free_all+0x4d/0x120 [ 2488.760834][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2488.766330][ C0] __kasan_slab_alloc+0x69/0x90 [ 2488.771224][ C0] __kmalloc_noprof+0x2e8/0x880 [ 2488.776110][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 2488.781080][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 2488.785952][ C0] tomoyo_encode2+0x100/0x3e0 [ 2488.790670][ C0] tomoyo_encode+0x29/0x50 [ 2488.795154][ C0] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2488.800821][ C0] tomoyo_path_perm+0x274/0x460 [ 2488.805781][ C0] ? tomoyo_path_perm+0x260/0x460 [ 2488.810820][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2488.816236][ C0] ? find_held_lock+0x2b/0x80 [ 2488.820946][ C0] ? __might_fault+0xe3/0x190 [ 2488.825639][ C0] ? __might_fault+0xe3/0x190 [ 2488.830339][ C0] ? __might_fault+0x13b/0x190 [ 2488.835126][ C0] security_inode_getattr+0x116/0x290 [ 2488.840516][ C0] vfs_statx+0x121/0x3f0 [ 2488.844801][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 2488.849585][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 2488.855082][ C0] vfs_fstatat+0x7b/0xf0 [ 2488.859353][ C0] __do_sys_newfstatat+0x97/0x120 [ 2488.864422][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 2488.870166][ C0] ? xfd_validate_state+0x61/0x180 [ 2488.875317][ C0] do_syscall_64+0xcd/0xfa0 [ 2488.879847][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.885756][ C0] RIP: 0033:0x7f5c81d11b0a [ 2488.890288][ C0] RSP: 002b:00007ffc14efae08 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 2488.898724][ C0] RAX: ffffffffffffffda RBX: 0000560900937410 RCX: 00007f5c81d11b0a [ 2488.906710][ C0] RDX: 00007ffc14efae10 RSI: 00005609009252a8 RDI: 00000000ffffff9c [ 2488.914698][ C0] RBP: 000056091df9d148 R08: 00063478c1c69200 R09: 00007f5c82401000 [ 2488.922857][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2488.930877][ C0] R13: 00007ffc14efae10 R14: 0000000000000000 R15: 00063478c1c69200 [ 2488.938885][ C0] [ 2488.942095][ C0] rcu: rcu_preempt kthread starved for 985 jiffies! g246741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2488.953214][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2488.963266][ C0] rcu: RCU grace-period kthread stack dump: [ 2488.969157][ C0] task:rcu_preempt state:R running task stack:28392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2488.982690][ C0] Call Trace: [ 2488.985995][ C0] [ 2488.988970][ C0] __schedule+0x1190/0x5de0 [ 2488.993542][ C0] ? __lock_acquire+0x622/0x1c90 [ 2488.998515][ C0] ? __pfx___schedule+0x10/0x10 [ 2489.003387][ C0] ? find_held_lock+0x2b/0x80 [ 2489.008078][ C0] ? schedule+0x2d7/0x3a0 [ 2489.012565][ C0] schedule+0xe7/0x3a0 [ 2489.017024][ C0] schedule_timeout+0x123/0x290 [ 2489.022381][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2489.028332][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2489.033663][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2489.039506][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2489.044997][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2489.049799][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2489.055195][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.060414][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2489.065373][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2489.070248][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2489.076253][ C0] rcu_gp_kthread+0x26d/0x380 [ 2489.080955][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2489.086185][ C0] ? rcu_is_watching+0x12/0xc0 [ 2489.090995][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.096217][ C0] ? __kthread_parkme+0x19e/0x250 [ 2489.101262][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2489.106495][ C0] kthread+0x3c5/0x780 [ 2489.110615][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.115261][ C0] ? rcu_is_watching+0x12/0xc0 [ 2489.120051][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.124665][ C0] ret_from_fork+0x675/0x7d0 [ 2489.129277][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.133891][ C0] ret_from_fork_asm+0x1a/0x30 [ 2489.138694][ C0] [ 2489.141719][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2489.148157][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 2489.157715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2489.167788][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 2489.174764][ C0] RIP: 0010:unwind_next_frame+0x522/0x20a0 [ 2489.180738][ C0] Code: 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 63 15 00 00 0f b6 41 05 <83> e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c 8d 41 04 4c [ 2489.200539][ C0] RSP: 0018:ffffc90000007600 EFLAGS: 00000246 [ 2489.206625][ C0] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff91a5d314 [ 2489.214722][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff90f320f0 [ 2489.222718][ C0] RBP: ffffc900000076b8 R08: ffffffff91a5d31a R09: 0000000000000000 [ 2489.230713][ C0] R10: 0000000000000000 R11: 000000000008321e R12: ffffc900000076c0 [ 2489.238702][ C0] R13: ffffc90000007670 R14: ffffc900000076a5 R15: ffffffff91a5d319 [ 2489.246695][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 2489.255723][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2489.262340][ C0] CR2: 00007f0da49ffffc CR3: 000000003713e000 CR4: 00000000003526f0 [ 2489.270330][ C0] Call Trace: [ 2489.273616][ C0] [ 2489.276468][ C0] ? process_backlog+0x439/0x15e0 [ 2489.281521][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2489.287695][ C0] arch_stack_walk+0x94/0x100 [ 2489.292389][ C0] ? process_backlog+0x439/0x15e0 [ 2489.297439][ C0] stack_trace_save+0x8e/0xc0 [ 2489.302149][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2489.307563][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2489.312533][ C0] kasan_save_stack+0x33/0x60 [ 2489.317225][ C0] ? kasan_save_stack+0x33/0x60 [ 2489.322102][ C0] ? kasan_save_track+0x14/0x30 [ 2489.327062][ C0] ? __kasan_save_free_info+0x3b/0x60 [ 2489.332449][ C0] ? __kasan_slab_free+0x5f/0x80 [ 2489.337410][ C0] ? kmem_cache_free+0x2d4/0x6c0 [ 2489.342385][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 2489.347102][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 2489.352313][ C0] ? ip6_mc_input+0x82c/0xf60 [ 2489.357017][ C0] ? ipv6_rcv+0x497/0x650 [ 2489.361367][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 2489.367462][ C0] ? __netif_receive_skb+0x1d/0x160 [ 2489.372773][ C0] ? process_backlog+0x439/0x15e0 [ 2489.377861][ C0] kasan_save_track+0x14/0x30 [ 2489.382556][ C0] __kasan_save_free_info+0x3b/0x60 [ 2489.387770][ C0] __kasan_slab_free+0x5f/0x80 [ 2489.392641][ C0] kmem_cache_free+0x2d4/0x6c0 [ 2489.397420][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 2489.402136][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 2489.406834][ C0] kfree_skbmem+0x1a4/0x1f0 [ 2489.411363][ C0] sk_skb_reason_drop+0x136/0x1a0 [ 2489.416407][ C0] ip6_mc_input+0x82c/0xf60 [ 2489.420935][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 2489.425981][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2489.431204][ C0] ipv6_rcv+0x497/0x650 [ 2489.435474][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 2489.440182][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 2489.446650][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2489.453114][ C0] ? lock_acquire+0x179/0x350 [ 2489.457827][ C0] ? process_backlog+0x3e7/0x15e0 [ 2489.462890][ C0] __netif_receive_skb+0x1d/0x160 [ 2489.467942][ C0] process_backlog+0x439/0x15e0 [ 2489.472830][ C0] __napi_poll.constprop.0+0xba/0x550 [ 2489.478317][ C0] ? skb_defer_free_flush+0x149/0x280 [ 2489.483708][ C0] net_rx_action+0x97f/0xef0 [ 2489.488332][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2489.493468][ C0] ? mark_held_locks+0x49/0x80 [ 2489.498252][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.503475][ C0] ? tmigr_handle_remote+0x132/0x380 [ 2489.508787][ C0] ? run_timer_base+0x121/0x190 [ 2489.513659][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2489.518880][ C0] handle_softirqs+0x219/0x8e0 [ 2489.524131][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2489.529568][ C0] ? kernel_fpu_end+0x59/0x70 [ 2489.534276][ C0] do_softirq+0xb2/0xf0 [ 2489.538544][ C0] [ 2489.541482][ C0] [ 2489.544423][ C0] __local_bh_enable_ip+0x100/0x120 [ 2489.549640][ C0] kernel_fpu_end+0x5e/0x70 [ 2489.554158][ C0] blake2s_compress+0x7b/0xe0 [ 2489.558850][ C0] blake2s_update+0xef/0x360 [ 2489.563464][ C0] hmac.constprop.0+0x23f/0x420 [ 2489.568342][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 2489.573765][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.578993][ C0] ? kernel_fpu_end+0x59/0x70 [ 2489.583679][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 2489.588989][ C0] kdf.constprop.0+0x122/0x280 [ 2489.593821][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 2489.599129][ C0] ? __pfx_mix_hash+0x10/0x10 [ 2489.603838][ C0] ? __crypto_memneq+0x203/0x430 [ 2489.608808][ C0] wg_noise_handshake_create_initiation+0x406/0x610 [ 2489.615434][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 2489.622578][ C0] ? find_held_lock+0x2b/0x80 [ 2489.627272][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 2489.633379][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.638614][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 2489.644727][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 2489.651014][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 2489.657561][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 2489.664995][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 2489.670993][ C0] process_one_work+0x9cf/0x1b70 [ 2489.675965][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 2489.682668][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2489.688092][ C0] ? assign_work+0x1a0/0x250 [ 2489.692745][ C0] worker_thread+0x6c8/0xf10 [ 2489.697375][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2489.702500][ C0] kthread+0x3c5/0x780 [ 2489.706594][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.711298][ C0] ? rcu_is_watching+0x12/0xc0 [ 2489.716087][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.720786][ C0] ret_from_fork+0x675/0x7d0 [ 2489.725439][ C0] ? __pfx_kthread+0x10/0x10 [ 2489.730107][ C0] ret_from_fork_asm+0x1a/0x30 [ 2489.734909][ C0] [ 2491.250708][ C0] net_ratelimit: 2387 callbacks suppressed [ 2491.250731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.270201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.283726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.297307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.310959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.324712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.338409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.351951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.365529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2491.379021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.258878][ C0] net_ratelimit: 3246 callbacks suppressed [ 2496.258902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.278359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.291907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.305405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.318901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.332518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.346205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.359895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.373647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0) [ 2496.387244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:d3:3f:98:a3:f4, vlan:0)