last executing test programs: 3m29.078012231s ago: executing program 3 (id=1200): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000022, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) (fail_nth: 6) 3m27.941904749s ago: executing program 3 (id=1204): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r1, 0x9d0da3446261172d, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r2 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r2, &(0x7f0000000040)={{&(0x7f0000000140), 0xff, &(0x7f0000000280)={0x0, 0x5ee}, 0x7, 0x0, 0x0, 0x1}, 0x5}, 0x9, 0x8000) 3m27.384224124s ago: executing program 3 (id=1205): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) gettid() rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x101080, 0x0) ioctl$auto_BLKSECTGET(r0, 0x1267, 0x20000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb5, 0x2, 0x7ffc) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) unshare$auto(0x40000080) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) close_range$auto(0x2, 0xa, 0x0) 3m24.881867442s ago: executing program 3 (id=1211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x8000001e, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x3f00) 3m24.788717873s ago: executing program 3 (id=1212): mmap$auto(0x800000000, 0xe97f, 0xdf, 0xeb1, 0x401, 0x0) socketpair$auto(0x8, 0x7, 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045430, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) 3m24.726086391s ago: executing program 3 (id=1214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x1) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x9, 0x0, &(0x7f0000000040)=0x101) modify_ldt$auto(0x8fb, 0x0, 0x11) ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) 3m9.216180024s ago: executing program 32 (id=1214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x1) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x9, 0x0, &(0x7f0000000040)=0x101) modify_ldt$auto(0x8fb, 0x0, 0x11) ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) 18.640604957s ago: executing program 2 (id=1823): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(r1, &(0x7f0000003080)={0x0, 0x4}, 0x20009) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto(0x3, 0x0, 0x7fffffff) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x810c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0xfffffff7, "d01862fe819e604d4e68badb85f86d195c2182760db15e9e566832bae4a502d1", @inferred=r2}) write$auto(0x3, 0x0, 0xfffffdef) socket(0xa, 0x5, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x76dc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8004) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) 15.829275413s ago: executing program 2 (id=1833): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x7ffe) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/route/flush\x00', 0x40001, 0x0) write$auto(r2, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket(0xa, 0x3, 0x3a) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) socket(0x2e, 0x1, 0x0) (async) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) (async) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/n_programmable_pins\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000), 0x0) (async) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400) 14.990336406s ago: executing program 2 (id=1837): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/amidi2\x00', 0x440102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x8f80, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) madvise$auto(0x8, 0x6, 0xfffd6de8) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xffffffffffffffff, 0x4000000000df, 0x78, r3, 0x300000001000) setgid$auto(0x0) r4 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) sysfs$auto(0x2, 0x400000000008, 0x0) 11.314304292s ago: executing program 2 (id=1855): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x5, 0x3, 0x80, 0x5, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port5/early_stop\x00', 0x182, 0x0) write$auto(r3, &(0x7f00000000c0), 0x200000007) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xd91, 0x5992c59f, 0x6) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121100, 0x0) mmap$auto(0xfffffffffffffffe, 0x30, 0x6, 0x9b72, r4, 0x10000008000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x128009, 0x7fffffffffffffff, 0xeb1, 0x401, 0x20000007ffe) prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xffffffff, 0xdf, 0x9b72, r5, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x8000) madvise$auto(0x813, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 9.78203601s ago: executing program 1 (id=1859): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/nr15/queues/tx-0/tx_maxrate\x00', 0x10b942, 0x0) r0 = socket(0x2d, 0x800, 0x0) bind$auto(r0, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x151d82, 0x0) setsockopt$auto_SO_DONTROUTE(r1, 0xc0a, 0x5, &(0x7f0000000100)='@\x14\xe7ef9z\xbb\x00', 0x1000) openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy16/hwsim/group\x00', 0x385040, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x1, 0x0) fanotify_init$auto(0x4, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(r3, 0x0, 0x2) lseek$auto(r2, 0x400006, 0x21) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x2142, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r5 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) r6 = socket(0x2, 0x801, 0x106) getsockopt$auto(r6, 0x11c, 0x3616, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_MEMWRITEOOB(r4, 0xc0104d03, &(0x7f0000000340)={0x1ff, 0x3109, 0x0}) 9.363047716s ago: executing program 1 (id=1860): unshare$auto(0x40000080) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40, @remote}, 0x7fff) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0xc8, 0xe2, 0x200000000000000d, 0xeb1, r0, 0x8003) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="fb", 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x7, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r2, 0x400, 0x1) sync_file_range$auto(r2, 0x80, 0xffffffffffffffff, 0x10001) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getpid() ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r3, 0x0, 0x20) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r4, &(0x7f0000000200)='\x00\x00\x00\x00\xcf\x00l\xa67u\xe1\xe8@?\xdey\x94\x81\xb8\x80d\x92\a4T\xf5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1b\x1e\xde\x01\x03`\x036\v\x00\x89E@\xec\xc9\xe9<\xb1\x89\xc7\xcc\xd4kF\xed@\x95\xb0\xdd}\xf1R\x84\xbb\x92\xb86\r>\xe0\xf0\xea\xc1\xc1\x029\x04\xd4|\x95\xa7\x1eB\r\xf1+\xe1\xc6O\xf5\xa6S\x86Q\xb9\xd5\xd1*\x03ds6,\xf6q\x04r5 qq/\x88\xf8\x03\xfaw?\xb6x\x9d\xbd\x87~\xbby\x8cy\xa6\x93m\xa6\xe7\xac\xa3\xf1\x04p\xaf\xc8}\xbc\xe9\xc0\t\xc6\"\x18U\x03\xa0\x18\xc5^\xa7\xc7\xd7\xb5\x15\xb3\xf7\xa6\xfe\x1a6', 0x81) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c01, 0x0) ioctl$auto_IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000000)={0x3, 0x6, 0x6}) close_range$auto(0x2, 0x8, 0x0) 9.015627904s ago: executing program 4 (id=1861): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x44082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 8.594724756s ago: executing program 4 (id=1862): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x400, 0xb, 0xeb1, 0xfffffffffffffffa, 0xc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/hw_sector_size\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000100)="fb", 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x5, 0x2) r2 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x800, 0xff) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000040) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) socket(0x21, 0x2, 0xa) sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x3, 0x0, 0x8, &(0x7f0000000180), 0xd8, 0xfff}, 0x2}, 0x5, 0xfe74) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) r4 = getpid() kill$auto(r4, 0x1) read$auto(r3, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) fcntl$auto_F_SETLEASE(0xffffffffffffffff, 0x400, 0xbd5a) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x20002080}, 0x2004c802) 8.257900718s ago: executing program 4 (id=1863): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7ffffffc, 0x9, 0x3000, 0x6, 0x10000007, 0x400b, 0xffffffffffffffff, [], {0x9, 0x6, 0x5, 0x29a, 0x9, 0x80, 0x8, 0x6, 0x4}, {0x300, 0xfffffffd, 0x101, 0x85, 0x1, 0x26, 0xfe000000, 0x10, 0x6}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen$auto(0x0, 0x1) mmap$auto(0x40000000, 0x2000a, 0x4000000000df, 0x2eb1, r2, 0x7ffb) bpf$auto(0x2, 0x0, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x20000000000008, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x9, 0x0, 0x3) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xca, &(0x7f0000000000)='\x04>\xff\x0f\x15\xb9\x18\xa6i\v', 0x7b) 8.058009514s ago: executing program 0 (id=1864): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0xb4d3) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, r0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x4, 0x3, 0x2, 0x200000080004) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x200000000000000, 0xfffffffffffffff8, 0x0) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) socket(0xf, 0x800, 0x4) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x400000000006) 7.067015672s ago: executing program 2 (id=1865): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000100), 0x0) mprotect$auto(0x57c8, 0x8, 0x8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d904a3836d61c9100fefbba06a6ef9368c7996e841f3f1561d4992f726bf26b36b0b2fd1678e816201cf562367fe6596824588a2c3d84ba125f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x500000}, 0x9) 5.907987843s ago: executing program 1 (id=1866): mmap$auto(0x0, 0x2, 0x6, 0x10, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) r0 = epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x21, &(0x7f0000000040)={@siginfo_0_0={0x476, 0x5, 0x3b14, @_sigchld={0x0, 0x0, 0x8, 0xd5, 0x1}}}) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x424, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_DEVICE_LIST={0x404, 0x9, 0x0, 0x1, [@nested={0x11d, 0x12d, 0x0, 0x1, [@nested={0x4, 0xbc}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x81}, @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x7d}, @generic="0a831c4db94074de3fd423a189ca4647ff9230b5d58c8e6ba96f6cd6013af66c6448f177000871cdeab7da92a5f201604ad488c751b06ae2c101e155a3ce255e564c58c2e39f0e0d4f40a7e5b3e7283f2fa43de988f9b29ffede815bb4379c26578d77e9413fb2057f60bb80e8fff35b67ac49603d96ec8454de60e5653c1209eee790df40b38a206a9faee33d70b4915a0cb035844e0fc4eeb187e208a88c3017523467deae6b53720e1d29392e7de56612cf196795b70af0643d1ca3f4333996acf3176a6642755b6447de1715050d7a791015a29181030ed606f504b98505c6017f152aa3c3fa9d", @typed={0x14, 0x98, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x8, 0xdb, 0x0, 0x0, @str='[+\\\x00'}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x10a, 0x6f, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x2b, 0x110, 0x0, 0x0, @str='/sys/devices/system/node/node1/compact\x00'}, @nested={0x4, 0x7f}, @typed={0x8, 0x10f, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @pid=r3}, @typed={0x14, 0x158, 0x0, 0x0, @ipv6=@empty}, @generic="854300337df01e274abf6fc2737b4d4fb928996935281981004245b6383fb9691a453a0066bcd50d6290aa58a7981a09a40214c501d5", @generic="fbaa0a95025241161ff62323604807ef2156f6083f5758c17ca4f6868d85f99a6bbe6b883f2c387d8827caaa4036d6aedc9023297fbdc85d6cc50d1d87800452e30d21c2651d9f59396da1c78bbc8e2ec7db1197b5ccf982372e9bd81c0d27f7d0b09f235867894a3319332c8c33fbba11c321b16964d68e"]}, @nested={0x1ae, 0x36, 0x0, 0x1, [@nested={0x4, 0x4f}, @generic="920b2fc163c8807a48b5c2d18f7058899fb4e3ccd9e356dfbdec23e395a1c7135c57332d71a1e0d076aa2d2e5b15604235ef8adedf65eac991bdb13666199bf9146f22b63257081ac9188d0605a3ce6ea4165fbc053fdc37fd3c5d178abb2e66400bd42b18784d2282c103029750abff6a74d468dab8cb9e792b1cb09fd5dd311f1646108a8013671b745116d8abca1f38bb468dc423b5553ec67e103b496a2ddb3bc99616138047e8d4cb049be9e0ed275db2", @typed={0x19, 0xfd, 0x0, 0x0, @str='\xda/:\xf1\xa7!@+\',!{\x17./(@)!-\x00'}, @typed={0x5, 0xd1, 0x0, 0x0, @str='\x00'}, @generic="6d84da1bf1ad80f6576a3da4532f2de71141a683e666445ba5350b1d7eb022239dfd69ba66afe8991b8a15", @generic="5bbc798334ed0a45586ef943279803bd798c2b37c012a8bba628b94e0b4b0709d2fd65edb5e5fdb948bcee28371af22ea75be0d3e7b4ddc8b4e84a5c3fe25b3f8f531ae935c511b2b75f39569d7283d9ff4e7a85d616527dc10657674ff1413500f68a8efb2ec2da13dcdeefa7fca629bc4aac72917308507f2dc682e93a88d9a84c709880054b15628da0901b1f999afff4d66e4f3a5afa2e5754e733650848c8a286dc"]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x8001}, 0x40003) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 5.387542898s ago: executing program 0 (id=1867): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$auto(r1, 0x0, 0x3) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) mmap$auto(0xffffffff, 0xf, 0x40a, 0x3ff, 0xffffffffffffffff, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x100102, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84L\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8\x7f\x00\x00\x00\x00\x00\x00\x00\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x1b\xab\x1b\xb6\x14\xac\xbf\xec\x93[#\xb3Z\x94\x80k\x06Aq\xbd\xc6!%M\x13\x9c\xc2\x14\x94\b\x88\xd7\ts\x93\x0fk\\\xce\x977\x8dL\xdc\x9b\xfe\f\x15?\f\x8e\x970!d\xceD\xd5>\xbf\xf0\xfc\xab\xf2\xf4\xcbGY\xa7\x15\x1d\x13Ha\x1e\xe5\xc0\xea\x9f1_\xe4H\x85\x93\xc5\xdccH\x00\xd5\xed :\x9e\xb6\xc4\xb6\'\x016\xd0TT\xb7\xac\xd5P\x1c*Q\xd92\xb8\x10\xefS\x8c\xad-z\xe2\xa2o\xac:\xedj\x17\xdc\x15\x88\xf0H\x84\xc0\x02)\xe0\xb4\x18^\x16\xf3J\xfb\xda\n\xe3\n*\xb3\xff\xabs\fc\x98g\xb5\x18A\x82\xde\xe5\x7f\xe5#\x9c\xae\xc6su\xdb\xb26]\x94\xae\x91\x93\xd0\x870\xdaX\x98Y\xd7\xe9(\f\xc6\x01)\xd3\xd6\x01Q\x14X_\x0e\xc8\x13\xefL\xc0\xcd\x82\x02\xa6\xf7', 0x800000) 4.754063102s ago: executing program 4 (id=1868): mmap$auto(0x7, 0x400008, 0x1200400000000cd, 0x400049b72, 0xffffffffffffffff, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/10, 0xa) socket(0xa, 0x80000, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x58) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000abdb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) bpf$auto(0x9, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x37}, 0xa3) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0xa1) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x6f2d, 0xffffffffffffffff) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) 4.54224846s ago: executing program 1 (id=1869): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = socket(0x23, 0x80805, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)="241267b69305f57cfcb1c0a1fba1b49a9323498f82a58d47d37ab3f940d6a938c362dd9a65b3aeacc040aba875f14b9ca7d85c9981d4100d2b12388b420184cf58eadcad727d30cdea478e0dbf5c0db65a73ed3ab75fac14d2ea06a5b4668ada48e61399f70a2b93520b02f03025690cbff6458372a82150769dff7dbb4fee6b215e6cf721e634adb9388f3f9664b00a857d18d583ef2cd1c9788dc3c9f28e5feace99686650a053090e84780aae467aba96ff3eb83ef389726329423a41dc5e7ff4109c52aaf88a5632683b20dfab123b1ae0c928bbbed19c0c60a17903dd1ca9") (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0xe2, 0x0) write$auto(r4, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) (async) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0x3, 0xc060ff0b, r0) 4.0578493s ago: executing program 1 (id=1870): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0xc80, 0x3, 0xeb7, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000340)={0x0, 0x7}, 0x4) r2 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/30s\x00', 0x0, 0x0) read$auto_mon_fops_stat_usb_mon(r2, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, &(0x7f0000000100)={0x0, 0x10}, 0x2, 0x0, 0x4000000000006, 0xa502}, 0x800}, 0x4, 0x4008) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x89f0, 0x24) setsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x2, 0x42, &(0x7f0000000180)='\x00', 0x8) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8242, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r5, 0x227b, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)="000004") select$auto(0x80000d, 0x0, &(0x7f0000000080)={[0x209c, 0xea2, 0xc, 0x1a, 0x4, 0x47, 0xc, 0x8, 0x0, 0x0, 0xfdd7, 0x1, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) write$auto(0xca, &(0x7f0000000000)='\x043\x01\x01\x00\x00\x00\x00 \x00\x96\b\'\x02\xb0\x93l\xeb\x05\xf5\x02\x00\x9d\xed\xf3\xf1\x9c\xeb\xb6,N\x8eQ9|\xd2l\x9f\xca\xac6S\xa2(Q\xcc\x7f\x14Qv\xa4\x12B\x9e\xcc\x00\x03\xdf\x9f\xb9B\xf4\xfa\xf1R\x012\f39\x9e\x8c\xdd\x97\x1fv\xb1\xd7\f\xda|\x85H \x00\xd9<\xe0C9\xb5\x8d\xe5\xf7\xbeV\x9f\x12x7\x12\x02\x00\xe4Ba\x17k\x1e\xfcEoR\xf8\xe5\x85\xc6\xc2\x80\x14\x90\"\xc0\xffZ\x103\x12\xf6a\xb4#\x93E\xd8g\xe9\xc4ij:\xed?\xc6|\xe8\x81', 0x7f) setsockopt$auto_SO_ATTACH_FILTER(0xffffffffffffffff, 0x100, 0x1a, &(0x7f0000000140)='/dev/dsp1\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.393625011s ago: executing program 0 (id=1871): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x4, 0xe983, 0xdd, 0x15, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = epoll_create$auto(0x8) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, r1, 0xfefffff9) open(0x0, 0x22240, 0x155) socket(0xa, 0x80000, 0xed) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0xa4) close_range$auto(0x0, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) ioctl$auto(r2, 0x540a, 0x1) mmap$auto(0x7, 0x2000000000400008, 0x8000df, 0x8b72, 0x2, 0xd) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x20) read$auto(0x3, 0x0, 0x8080) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x201, 0xd16) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) 3.390303151s ago: executing program 4 (id=1872): unshare$auto(0x40000080) mmap$auto(0x4, 0x7fffffff, 0x3, 0xebd, 0xffffffffffffffff, 0x434110f) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x200881, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) futex$auto(&(0x7f0000000040)=0x1, 0x6, 0x4, &(0x7f0000000080)={0x10000, 0x37f}, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, r1, 0x401) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f00000001c0)={r1, 0x641d, 0x36d4}, 0x83, 0xffff) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9) r5 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r5, 0x6a, 0x5, 0x0, 0x3) r6 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec06001a", @ANYRES16=r6, @ANYBLOB="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"], 0xaac}, 0x1, 0x0, 0x0, 0x14}, 0x20000810) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) socket(0x27, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x3, 0x8, 0xffffffffffffffff, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x9, 0xfffffffffffffbff) 2.574233089s ago: executing program 0 (id=1873): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x5452, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.372199898s ago: executing program 2 (id=1874): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x7, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) 837.325894ms ago: executing program 4 (id=1875): r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/setgroups\x00', 0x501802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x8, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xfffffffb, 0xdd, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x22, 0x1, 0x0, 0x3, 0x3fb) r2 = prctl$auto(0x2000001, 0x80000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1408000098d592a9e9ba41fac7137ca648e80c53cada8b48c0f15fa76291cab6c64b1666388ae7ffd901efff999d434e4e37e4a7ea9b33634b89cd2cd63086b530114a90e7f9d901706e494b99d1a1fb15bbdd1baf5109be66e344edfd38bcc585e728b0d40c24d800ab303dcde1c515a9bffa1baaccbe34cbaf8b0201d6f6099c513876cd1aea1976788aea844c6fcb2559bf8617d18b257e8467bae9", @ANYRES8=r0, @ANYBLOB="010031bd4d00fddbdf250c00000099d00b34d9ccb082ca60ea9de99a45359cf68910c988c33da5caa5c71aa7ea31dea05f46"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f00000001c0)='\x03W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11A\xc6\x82\xa5\x89\xb5A\x81mr\x02\xc4\r\xce\x00\x00\f', 0x100000002, 0x400100000001) ioctl$auto_FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={&(0x7f0000000240)=&(0x7f0000000200)=0x33, &(0x7f0000000540)="85200825373aa85228a08a10058450ee76408e340d5d0391ef6bd0965f468493ccb3b7b30a82a31d04faacf69722c32077e0c0306b713a5aaf6a19ff8ae533076b6ca0f60ba6b87dfc121f23ff8101161ff72d42a55efab2f485a5e0fd3e6699743d663d9bece01266a6b475d3da107fca47782c0f2e12c725a793121f51d53d331b81e674607281408a01b2640960b048595b8b754ba6425e0980f205fdffb906c2802b8c35d2ba651cc44da2ce955838e515f80322"}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x9, 0x0) mmap$auto(0x0, 0x5d2f, 0xffffffffffffffff, 0x400eb1, r2, 0x20000008000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af24, r3) 751.654375ms ago: executing program 1 (id=1876): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3012}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040084) madvise$auto(0x0, 0x200007, 0x19) setregid$auto(0x5, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, 0x0, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) 731.056238ms ago: executing program 0 (id=1877): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z\x01\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8c\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r2 = dup$auto(r1) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x81004523, r2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) setuid$auto(0xe) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x808882, 0x0) write$auto(r6, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\n\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 0s ago: executing program 0 (id=1878): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv$auto(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x9}, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) set_mempolicy$auto(0x1, &(0x7f00000000c0)=0x6, 0x21) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bind$auto(r2, &(0x7f00000001c0)=@can, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty11\x00', 0x20000, 0x0) epoll_create$auto(0x3e) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4188aea7, &(0x7f0000000140)={0xb, 0x0, [{0x8, 0x5c3, 0xfc}, {0xffff, 0x2, 0x697}, {0x7fff, 0x6, 0x16f92900}, {0x2, 0x2, 0x2}, {0x996, 0x10001, 0x21}, {0x7, 0x6, 0x100000000000}, {0x1, 0x9, 0x7c}]}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@phonet={0x23, 0x5, 0x9, 0x1}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x80000007, 0x20020000) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb1) kernel console output (not intermixed with test programs): 87.425939][T13631] ? __fget_files+0x215/0x3d0 [ 487.425957][T13631] ? hook_file_ioctl_common+0x146/0x410 [ 487.425983][T13631] ? __fget_files+0x21f/0x3d0 [ 487.426004][T13631] ? __pfx_usbdev_ioctl+0x10/0x10 [ 487.426019][T13631] __x64_sys_ioctl+0x18e/0x210 [ 487.426037][T13631] do_syscall_64+0x106/0xf80 [ 487.426051][T13631] ? clear_bhb_loop+0x40/0x90 [ 487.426068][T13631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.426082][T13631] RIP: 0033:0x7f1d7c59bf79 [ 487.426094][T13631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.426107][T13631] RSP: 002b:00007f1d7d491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.426119][T13631] RAX: ffffffffffffffda RBX: 00007f1d7c815fa0 RCX: 00007f1d7c59bf79 [ 487.426128][T13631] RDX: 0000000000000003 RSI: 0000000041045508 RDI: 0000000000000003 [ 487.426136][T13631] RBP: 00007f1d7d491090 R08: 0000000000000000 R09: 0000000000000000 [ 487.426144][T13631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.426152][T13631] R13: 00007f1d7c816038 R14: 00007f1d7c815fa0 R15: 00007ffe18d92048 [ 487.426171][T13631] [ 489.880813][T11520] Bluetooth: hci4: Malformed LE Event: 0x0b [ 490.003040][T13676] FAULT_INJECTION: forcing a failure. [ 490.003040][T13676] name failslab, interval 1, probability 0, space 0, times 0 [ 490.080309][T13676] CPU: 0 UID: 0 PID: 13676 Comm: syz.2.1484 Tainted: G U L syzkaller #0 PREEMPT(full) [ 490.080336][T13676] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 490.080341][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.080349][T13676] Call Trace: [ 490.080354][T13676] [ 490.080360][T13676] dump_stack_lvl+0x100/0x190 [ 490.080385][T13676] should_fail_ex.cold+0x5/0xa [ 490.080402][T13676] should_failslab+0xc2/0x120 [ 490.080424][T13676] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 490.080441][T13676] ? __pmd_alloc+0xbf/0x9c0 [ 490.080458][T13676] __pmd_alloc+0xbf/0x9c0 [ 490.080473][T13676] __handle_mm_fault+0xa99/0x2b60 [ 490.080492][T13676] ? mt_find+0x45e/0x8e0 [ 490.080509][T13676] ? __pfx___handle_mm_fault+0x10/0x10 [ 490.080527][T13676] ? __pfx_mt_find+0x10/0x10 [ 490.080556][T13676] ? find_vma+0xbf/0x140 [ 490.080575][T13676] ? __pfx_find_vma+0x10/0x10 [ 490.080607][T13676] handle_mm_fault+0x36d/0xa20 [ 490.080627][T13676] do_user_addr_fault+0x74c/0x12f0 [ 490.080655][T13676] exc_page_fault+0x6f/0xd0 [ 490.080671][T13676] asm_exc_page_fault+0x26/0x30 [ 490.080685][T13676] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 490.080705][T13676] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 490.080718][T13676] RSP: 0018:ffffc900033c7a30 EFLAGS: 00050202 [ 490.080731][T13676] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000104 [ 490.080740][T13676] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc900033c7a98 [ 490.080748][T13676] RBP: 0000000000000104 R08: 0000000000000001 R09: fffff52000678f73 [ 490.080756][T13676] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 490.080764][T13676] R13: ffffc900033c7a98 R14: dffffc0000000000 R15: 0000000000000000 [ 490.080782][T13676] _copy_from_user+0x98/0xd0 [ 490.080798][T13676] proc_getdriver+0xae/0x280 [ 490.080819][T13676] ? __pfx_proc_getdriver+0x10/0x10 [ 490.080859][T13676] ? find_held_lock+0x2b/0x80 [ 490.080883][T13676] ? tomoyo_path_number_perm+0x28f/0x580 [ 490.080905][T13676] ? tomoyo_path_number_perm+0x28f/0x580 [ 490.080930][T13676] usbdev_ioctl+0xc65/0x3aa0 [ 490.080947][T13676] ? __pfx_usbdev_ioctl+0x10/0x10 [ 490.080964][T13676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.080987][T13676] ? do_vfs_ioctl+0x226/0x13e0 [ 490.081004][T13676] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 490.081026][T13676] ? find_held_lock+0x2b/0x80 [ 490.081046][T13676] ? __fget_files+0x215/0x3d0 [ 490.081064][T13676] ? hook_file_ioctl_common+0x146/0x410 [ 490.081091][T13676] ? __fget_files+0x21f/0x3d0 [ 490.081112][T13676] ? __pfx_usbdev_ioctl+0x10/0x10 [ 490.081127][T13676] __x64_sys_ioctl+0x18e/0x210 [ 490.081145][T13676] do_syscall_64+0x106/0xf80 [ 490.081159][T13676] ? clear_bhb_loop+0x40/0x90 [ 490.081176][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.081190][T13676] RIP: 0033:0x7f46acf9bf79 [ 490.081202][T13676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.081215][T13676] RSP: 002b:00007f46ade6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.081228][T13676] RAX: ffffffffffffffda RBX: 00007f46ad215fa0 RCX: 00007f46acf9bf79 [ 490.081237][T13676] RDX: 0000000000000003 RSI: 0000000041045508 RDI: 0000000000000003 [ 490.081245][T13676] RBP: 00007f46ade6a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.081253][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.081261][T13676] R13: 00007f46ad216038 R14: 00007f46ad215fa0 R15: 00007ffc1ad729b8 [ 490.081286][T13676] [ 492.328871][T13715] netlink: 'syz.1.1492': attribute type 33 has an invalid length. [ 492.597157][T13718] random: crng reseeded on system resumption [ 492.666755][T13720] FAULT_INJECTION: forcing a failure. [ 492.666755][T13720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.745673][T13720] CPU: 0 UID: 0 PID: 13720 Comm: syz.0.1494 Tainted: G U L syzkaller #0 PREEMPT(full) [ 492.745700][T13720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 492.745705][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.745713][T13720] Call Trace: [ 492.745718][T13720] [ 492.745724][T13720] dump_stack_lvl+0x100/0x190 [ 492.745750][T13720] should_fail_ex.cold+0x5/0xa [ 492.745764][T13720] ? prepare_alloc_pages+0x16d/0x5f0 [ 492.745788][T13720] should_fail_alloc_page+0xeb/0x140 [ 492.745811][T13720] prepare_alloc_pages+0x1f0/0x5f0 [ 492.745836][T13720] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 492.745856][T13720] ? stack_trace_save+0x8e/0xc0 [ 492.745878][T13720] ? __pfx_stack_trace_save+0x10/0x10 [ 492.745899][T13720] ? stack_depot_save_flags+0x27/0x9d0 [ 492.745919][T13720] ? kasan_save_stack+0x3f/0x50 [ 492.745936][T13720] ? kasan_save_stack+0x30/0x50 [ 492.745954][T13720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.745971][T13720] ? __pmd_alloc+0xbf/0x9c0 [ 492.745984][T13720] ? __handle_mm_fault+0xa99/0x2b60 [ 492.745998][T13720] ? handle_mm_fault+0x36d/0xa20 [ 492.746013][T13720] ? exc_page_fault+0x6f/0xd0 [ 492.746027][T13720] ? rep_movs_alternative+0x4a/0x90 [ 492.746046][T13720] ? _copy_from_user+0x98/0xd0 [ 492.746057][T13720] ? proc_getdriver+0xae/0x280 [ 492.746077][T13720] ? usbdev_ioctl+0xc65/0x3aa0 [ 492.746088][T13720] ? __x64_sys_ioctl+0x18e/0x210 [ 492.746104][T13720] ? do_syscall_64+0x106/0xf80 [ 492.746118][T13720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.746141][T13720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.746164][T13720] ? policy_nodemask+0xed/0x4f0 [ 492.746186][T13720] alloc_pages_mpol+0x1fb/0x550 [ 492.746207][T13720] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 492.746233][T13720] alloc_pages_noprof+0x131/0x390 [ 492.746255][T13720] pte_alloc_one+0x1e/0x3e0 [ 492.746271][T13720] do_fault+0x8cc/0x1a00 [ 492.746284][T13720] ? __pmd_alloc+0x6aa/0x9c0 [ 492.746299][T13720] __handle_mm_fault+0x180f/0x2b60 [ 492.746318][T13720] ? mt_find+0x45e/0x8e0 [ 492.746335][T13720] ? __pfx___handle_mm_fault+0x10/0x10 [ 492.746350][T13720] ? __pfx_mt_find+0x10/0x10 [ 492.746383][T13720] ? find_vma+0xbf/0x140 [ 492.746401][T13720] ? __pfx_find_vma+0x10/0x10 [ 492.746423][T13720] handle_mm_fault+0x36d/0xa20 [ 492.746443][T13720] do_user_addr_fault+0x74c/0x12f0 [ 492.746470][T13720] exc_page_fault+0x6f/0xd0 [ 492.746485][T13720] asm_exc_page_fault+0x26/0x30 [ 492.746499][T13720] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 492.746519][T13720] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 492.746532][T13720] RSP: 0018:ffffc90004a77a30 EFLAGS: 00050202 [ 492.746544][T13720] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000104 [ 492.746553][T13720] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90004a77a98 [ 492.746561][T13720] RBP: 0000000000000104 R08: 0000000000000001 R09: fffff5200094ef73 [ 492.746569][T13720] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 492.746577][T13720] R13: ffffc90004a77a98 R14: dffffc0000000000 R15: 0000000000000000 [ 492.746595][T13720] _copy_from_user+0x98/0xd0 [ 492.746610][T13720] proc_getdriver+0xae/0x280 [ 492.746630][T13720] ? __pfx_proc_getdriver+0x10/0x10 [ 492.746666][T13720] ? find_held_lock+0x2b/0x80 [ 492.746687][T13720] ? tomoyo_path_number_perm+0x28f/0x580 [ 492.746709][T13720] ? tomoyo_path_number_perm+0x28f/0x580 [ 492.746734][T13720] usbdev_ioctl+0xc65/0x3aa0 [ 492.746750][T13720] ? __pfx_usbdev_ioctl+0x10/0x10 [ 492.746767][T13720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.746789][T13720] ? do_vfs_ioctl+0x226/0x13e0 [ 492.746806][T13720] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 492.746828][T13720] ? find_held_lock+0x2b/0x80 [ 492.746848][T13720] ? __fget_files+0x215/0x3d0 [ 492.746866][T13720] ? hook_file_ioctl_common+0x146/0x410 [ 492.746892][T13720] ? __fget_files+0x21f/0x3d0 [ 492.746913][T13720] ? __pfx_usbdev_ioctl+0x10/0x10 [ 492.746927][T13720] __x64_sys_ioctl+0x18e/0x210 [ 492.746946][T13720] do_syscall_64+0x106/0xf80 [ 492.746959][T13720] ? clear_bhb_loop+0x40/0x90 [ 492.746977][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.746990][T13720] RIP: 0033:0x7f171099bf79 [ 492.747002][T13720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.747015][T13720] RSP: 002b:00007f17118c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.747027][T13720] RAX: ffffffffffffffda RBX: 00007f1710c15fa0 RCX: 00007f171099bf79 [ 492.747036][T13720] RDX: 0000000000000003 RSI: 0000000041045508 RDI: 0000000000000003 [ 492.747044][T13720] RBP: 00007f17118c7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.747052][T13720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.747060][T13720] R13: 00007f1710c16038 R14: 00007f1710c15fa0 R15: 00007ffef6007558 [ 492.747079][T13720] [ 493.811031][T13729] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 494.868449][T13764] futex_wake_op: syz.2.1499 tries to shift op by -2048; fix this program [ 495.006480][T13769] binder: 13766:13769 ioctl c018620c 0 returned -1 [ 495.029565][T13764] futex_wake_op: syz.2.1499 tries to shift op by -2048; fix this program [ 495.132969][T13772] 0x000000000001-0x000000020000 : "" [ 495.263274][T13772] ftl_cs: FTL header corrupt! [ 495.317478][T13781] FAULT_INJECTION: forcing a failure. [ 495.317478][T13781] name failslab, interval 1, probability 0, space 0, times 0 [ 495.379036][T13783] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 495.400252][T13781] CPU: 0 UID: 0 PID: 13781 Comm: syz.4.1503 Tainted: G U L syzkaller #0 PREEMPT(full) [ 495.400277][T13781] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 495.400282][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.400291][T13781] Call Trace: [ 495.400296][T13781] [ 495.400302][T13781] dump_stack_lvl+0x100/0x190 [ 495.400327][T13781] should_fail_ex.cold+0x5/0xa [ 495.400344][T13781] should_failslab+0xc2/0x120 [ 495.400365][T13781] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 495.400383][T13781] ? ptlock_alloc+0x1f/0x70 [ 495.400402][T13781] ptlock_alloc+0x1f/0x70 [ 495.400417][T13781] pte_alloc_one+0x84/0x3e0 [ 495.400433][T13781] do_fault+0x8cc/0x1a00 [ 495.400446][T13781] ? __pmd_alloc+0x6aa/0x9c0 [ 495.400461][T13781] __handle_mm_fault+0x180f/0x2b60 [ 495.400480][T13781] ? mt_find+0x45e/0x8e0 [ 495.400498][T13781] ? __pfx___handle_mm_fault+0x10/0x10 [ 495.400512][T13781] ? __pfx_mt_find+0x10/0x10 [ 495.400538][T13781] ? find_vma+0xbf/0x140 [ 495.400557][T13781] ? __pfx_find_vma+0x10/0x10 [ 495.400578][T13781] handle_mm_fault+0x36d/0xa20 [ 495.400598][T13781] do_user_addr_fault+0x74c/0x12f0 [ 495.400625][T13781] exc_page_fault+0x6f/0xd0 [ 495.400640][T13781] asm_exc_page_fault+0x26/0x30 [ 495.400654][T13781] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 495.400673][T13781] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 495.400687][T13781] RSP: 0018:ffffc900055bfa30 EFLAGS: 00050202 [ 495.400699][T13781] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000104 [ 495.400708][T13781] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc900055bfa98 [ 495.400716][T13781] RBP: 0000000000000104 R08: 0000000000000001 R09: fffff52000ab7f73 [ 495.400724][T13781] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 495.400732][T13781] R13: ffffc900055bfa98 R14: dffffc0000000000 R15: 0000000000000000 [ 495.400753][T13781] _copy_from_user+0x98/0xd0 [ 495.400768][T13781] proc_getdriver+0xae/0x280 [ 495.400790][T13781] ? __pfx_proc_getdriver+0x10/0x10 [ 495.400826][T13781] ? find_held_lock+0x2b/0x80 [ 495.400847][T13781] ? tomoyo_path_number_perm+0x28f/0x580 [ 495.400869][T13781] ? tomoyo_path_number_perm+0x28f/0x580 [ 495.400894][T13781] usbdev_ioctl+0xc65/0x3aa0 [ 495.400911][T13781] ? __pfx_usbdev_ioctl+0x10/0x10 [ 495.400928][T13781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.400950][T13781] ? do_vfs_ioctl+0x226/0x13e0 [ 495.400967][T13781] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 495.400989][T13781] ? find_held_lock+0x2b/0x80 [ 495.401009][T13781] ? __fget_files+0x215/0x3d0 [ 495.401027][T13781] ? hook_file_ioctl_common+0x146/0x410 [ 495.401053][T13781] ? __fget_files+0x21f/0x3d0 [ 495.401074][T13781] ? __pfx_usbdev_ioctl+0x10/0x10 [ 495.401088][T13781] __x64_sys_ioctl+0x18e/0x210 [ 495.401106][T13781] do_syscall_64+0x106/0xf80 [ 495.401120][T13781] ? clear_bhb_loop+0x40/0x90 [ 495.401137][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.401151][T13781] RIP: 0033:0x7f1abbf9bf79 [ 495.401163][T13781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.401176][T13781] RSP: 002b:00007f1abcdab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.401193][T13781] RAX: ffffffffffffffda RBX: 00007f1abc215fa0 RCX: 00007f1abbf9bf79 [ 495.401203][T13781] RDX: 0000000000000003 RSI: 0000000041045508 RDI: 0000000000000003 [ 495.401211][T13781] RBP: 00007f1abcdab090 R08: 0000000000000000 R09: 0000000000000000 [ 495.401219][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.401227][T13781] R13: 00007f1abc216038 R14: 00007f1abc215fa0 R15: 00007fffec149148 [ 495.401245][T13781] [ 496.135940][T13796] blktrace: Concurrent blktraces are not allowed on nbd8 [ 496.376021][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 496.393339][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 496.661320][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'. [ 501.479931][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486292][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.172220][ T5829] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 502.220722][T13959] usb usb15: usbfs: process 13959 (syz.0.1541) did not claim interface 0 before use [ 502.235626][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.235651][ T5829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.235656][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.235665][ T5829] Call Trace: [ 502.235670][ T5829] [ 502.235675][ T5829] dump_stack_lvl+0x100/0x190 [ 502.235700][ T5829] dump_header+0xfb/0x606 [ 502.235717][ T5829] oom_kill_process.cold+0xd/0x330 [ 502.235734][ T5829] out_of_memory+0x340/0x14f0 [ 502.235757][ T5829] ? __pfx_out_of_memory+0x10/0x10 [ 502.235780][ T5829] mem_cgroup_out_of_memory+0xc6/0x130 [ 502.235797][ T5829] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 502.235812][ T5829] ? find_held_lock+0x2b/0x80 [ 502.235837][ T5829] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.235857][ T5829] ? _raw_spin_unlock+0x28/0x50 [ 502.235881][ T5829] try_charge_memcg+0x652/0xc90 [ 502.235905][ T5829] ? __pfx_try_charge_memcg+0x10/0x10 [ 502.235930][ T5829] ? find_held_lock+0x2b/0x80 [ 502.235950][ T5829] ? rcu_read_unlock+0x17/0x60 [ 502.235970][ T5829] ? rcu_read_unlock+0x17/0x60 [ 502.235993][ T5829] charge_memcg+0xa6/0x280 [ 502.236013][ T5829] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 502.236030][ T5829] __swap_cache_prepare_and_add+0x528/0x9e0 [ 502.236056][ T5829] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 502.236072][ T5829] ? __pfx_swap_entry_swapped+0x10/0x10 [ 502.236097][ T5829] swap_cache_alloc_folio+0x1cb/0x300 [ 502.236116][ T5829] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 502.236134][ T5829] ? rcu_is_watching+0x12/0xc0 [ 502.236157][ T5829] swap_cluster_readahead+0x411/0x770 [ 502.236179][ T5829] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 502.236199][ T5829] ? update_cfs_rq_load_avg+0x51/0x550 [ 502.236221][ T5829] ? get_vma_policy+0x23f/0x3b0 [ 502.236244][ T5829] swapin_readahead+0x160/0x12c0 [ 502.236268][ T5829] ? __pfx_swapin_readahead+0x10/0x10 [ 502.236283][ T5829] ? find_held_lock+0x2b/0x80 [ 502.236303][ T5829] ? swap_table_get+0x103/0x2c0 [ 502.236318][ T5829] ? swap_table_get+0x103/0x2c0 [ 502.236336][ T5829] ? swap_table_get+0x10d/0x2c0 [ 502.236351][ T5829] ? swap_cache_get_folio+0x1ae/0x600 [ 502.236368][ T5829] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 502.236383][ T5829] ? __pfx_get_swap_device+0x10/0x10 [ 502.236407][ T5829] ? do_swap_page+0xb2e/0x68e0 [ 502.236422][ T5829] do_swap_page+0xb2e/0x68e0 [ 502.236448][ T5829] ? __pfx_do_swap_page+0x10/0x10 [ 502.236464][ T5829] ? __free_object+0x2a8/0x400 [ 502.236483][ T5829] ? lockdep_hardirqs_on+0x78/0x100 [ 502.236499][ T5829] ? rcu_is_watching+0x12/0xc0 [ 502.236518][ T5829] ? __pte_offset_map+0x179/0x310 [ 502.236541][ T5829] __handle_mm_fault+0x18c1/0x2b60 [ 502.236561][ T5829] ? reacquire_held_locks+0xce/0x1e0 [ 502.236578][ T5829] ? __pfx___handle_mm_fault+0x10/0x10 [ 502.236597][ T5829] ? lock_vma_under_rcu+0x17c/0x590 [ 502.236628][ T5829] handle_mm_fault+0x36d/0xa20 [ 502.236648][ T5829] do_user_addr_fault+0x5a3/0x12f0 [ 502.236676][ T5829] exc_page_fault+0x6f/0xd0 [ 502.236691][ T5829] asm_exc_page_fault+0x26/0x30 [ 502.236705][ T5829] RIP: 0033:0x7f46acf5c84e [ 502.236717][ T5829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.236731][ T5829] RSP: 002b:00007ffc1ad72c98 EFLAGS: 00010246 [ 502.236743][ T5829] RAX: 0000000000000000 RBX: 000055556b9b7500 RCX: 00007f46acf5c84e [ 502.236752][ T5829] RDX: 00007ffc1ad72cf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.236760][ T5829] RBP: 00007ffc1ad72d5c R08: 0000000000000000 R09: 0000000000000000 [ 502.236768][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 502.236777][ T5829] R13: 00000000000927c0 R14: 000000000007a68d R15: 00007ffc1ad72db0 [ 502.236796][ T5829] [ 502.236801][ T5829] memory: usage 3072kB, limit 3072kB, failcnt 132435 [ 502.988386][ T5829] memory+swap: usage 3632kB, limit 9007199254740988kB, failcnt 0 [ 503.001693][ T5829] kmem: usage 3000kB, limit 9007199254740988kB, failcnt 0 [ 503.009106][ T5829] Memory cgroup stats for /syz2: [ 503.009283][ T5829] cache 0 [ 503.032185][ T5829] rss 0 [ 503.034959][ T5829] rss_huge 0 [ 503.050703][ T5829] shmem 0 [ 503.061837][ T5829] mapped_file 0 [ 503.069721][ T5829] dirty 0 [ 503.077302][ T5829] writeback 0 [ 503.084645][ T5829] workingset_refault_anon 16944 [ 503.095336][ T5829] workingset_refault_file 30134 [ 503.106012][ T5829] swap 573440 [ 503.113329][ T5829] swapcached 638754816 [ 503.122593][ T5829] pgpgin 415723 [ 503.130132][ T5829] pgpgout 429757 [ 503.138062][ T5829] pgfault 364523 [ 503.147459][ T5829] pgmajfault 4507 [ 503.151085][ T5829] inactive_anon 73728 [ 503.171812][ T5829] active_anon 0 [ 503.180953][ T5829] inactive_file 0 [ 503.184578][ T5829] active_file 0 [ 503.196026][ T5829] unevictable 0 [ 503.203369][ T5829] hierarchical_memory_limit 3145728 [ 503.214897][ T5829] hierarchical_memsw_limit 9223372036854771712 [ 503.227844][ T5829] total_cache 0 [ 503.235405][ T5829] total_rss 0 [ 503.243430][ T5829] total_rss_huge 0 [ 503.251720][ T5829] total_shmem 0 [ 503.255165][ T5829] total_mapped_file 0 [ 503.267798][ T5829] total_dirty 0 [ 503.271244][ T5829] total_writeback 0 [ 503.287346][ T5829] total_workingset_refault_anon 16944 [ 503.292712][ T5829] total_workingset_refault_file 30134 [ 503.309725][ T5829] total_swap 573440 [ 503.313521][ T5829] total_swapcached 638754816 [ 503.327342][ T5829] total_pgpgin 415723 [ 503.336265][ T5829] total_pgpgout 429757 [ 503.340317][ T5829] total_pgfault 364523 [ 503.354549][ T5829] total_pgmajfault 4507 [ 503.362429][ T5829] total_inactive_anon 73728 [ 503.372443][ T5829] total_active_anon 0 [ 503.382453][ T5829] total_inactive_file 0 [ 503.394402][ T5829] total_active_file 0 [ 503.399222][T11520] Bluetooth: hci0: command 0x0c1a tx timeout [ 503.410515][T13935] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 503.423744][ T5829] total_unevictable 0 [ 503.432752][ T5829] anon_cost 119 [ 503.446312][ T5829] file_cost 0 [ 503.450220][ T5829] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1535,pid=13934,uid=0 [ 503.480046][ T5829] Memory cgroup out of memory: Killed process 13934 (syz.2.1535) total-vm:164708kB, anon-rss:1232kB, file-rss:21564kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 503.544801][T13935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.637769][T13935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.682641][T13935] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.799642][T13971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 503.806333][T13971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.817397][T13971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.843608][T13971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.877530][T11520] Bluetooth: hci4: command 0x0c1a tx timeout [ 505.883565][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 505.889598][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.895576][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 507.815819][T14039] vivid-007: ================= START STATUS ================= [ 507.874978][T14039] vivid-007: Enable Output Cropping: true grabbed [ 507.958988][T14039] vivid-007: Enable Output Composing: true grabbed [ 508.003222][T14039] vivid-007: Enable Output Scaler: true grabbed [ 508.081058][T14049] sd 0:0:1:0: PR command failed: 1026 [ 508.145236][T14039] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 508.181241][T14049] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 508.190429][T14021] rtc_cmos 00:00: Alarms can be up to one day in the future [ 508.220445][T14039] vivid-007: Transmit Mode: HDMI grabbed [ 508.260101][T14049] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 508.307319][T14039] vivid-007: Hotplug Present: 0x00000000 [ 508.371593][T14039] vivid-007: RxSense Present: 0x00000000 [ 508.428713][T14039] vivid-007: EDID Present: 0x00000000 [ 508.453671][T14039] vivid-007: ================== END STATUS ================== [ 508.502702][T14044] vivid-007: ================= START STATUS ================= [ 508.550207][T14044] vivid-007: Enable Output Cropping: true grabbed [ 508.583434][T14044] vivid-007: Enable Output Composing: true grabbed [ 508.650825][T14044] vivid-007: Enable Output Scaler: true grabbed [ 508.657132][T14044] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 508.730831][T14044] vivid-007: Transmit Mode: HDMI grabbed [ 508.776991][T14044] vivid-007: Hotplug Present: 0x00000000 [ 508.795239][T14044] vivid-007: RxSense Present: 0x00000000 [ 508.840340][T14044] vivid-007: EDID Present: 0x00000000 [ 508.845744][T14044] vivid-007: ================== END STATUS ================== [ 509.156133][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.186830][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.221532][ T29] audit: type=1804 audit(4294968549.634:21): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1556" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 509.255528][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.299584][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 509.349232][ T5914] rtc rtc0: __rtc_set_alarm: err=-22 [ 510.745307][T14068] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.933206][T14095] FAULT_INJECTION: forcing a failure. [ 510.933206][T14095] name failslab, interval 1, probability 0, space 0, times 0 [ 510.983352][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.4.1564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 510.983382][T14095] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 510.983388][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.983397][T14095] Call Trace: [ 510.983402][T14095] [ 510.983408][T14095] dump_stack_lvl+0x100/0x190 [ 510.983433][T14095] should_fail_ex.cold+0x5/0xa [ 510.983450][T14095] should_failslab+0xc2/0x120 [ 510.983471][T14095] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 510.983489][T14095] ? __d_alloc+0x34/0xa80 [ 510.983514][T14095] __d_alloc+0x34/0xa80 [ 510.983536][T14095] d_alloc_pseudo+0x1c/0xc0 [ 510.983553][T14095] alloc_file_pseudo+0xcf/0x230 [ 510.983569][T14095] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 510.983589][T14095] __shmem_file_setup+0x1a3/0x330 [ 510.983607][T14095] shmem_zero_setup+0x93/0x1b0 [ 510.983627][T14095] __mmap_region+0x20b5/0x2760 [ 510.983648][T14095] ? __pfx___mmap_region+0x10/0x10 [ 510.983678][T14095] ? finish_task_switch.isra.0+0x205/0xb80 [ 510.983693][T14095] ? lockdep_hardirqs_on+0x78/0x100 [ 510.983708][T14095] ? finish_task_switch.isra.0+0x205/0xb80 [ 510.983757][T14095] ? rcu_is_watching+0x12/0xc0 [ 510.983776][T14095] ? cap_capable+0x107/0x460 [ 510.983799][T14095] mmap_region+0x180/0x3e0 [ 510.983820][T14095] do_mmap+0xc63/0x12f0 [ 510.983845][T14095] ? __pfx_do_mmap+0x10/0x10 [ 510.983866][T14095] ? __pfx_down_write_killable+0x10/0x10 [ 510.983888][T14095] vm_mmap_pgoff+0x29e/0x470 [ 510.983913][T14095] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 510.983944][T14095] ? __x64_sys_futex+0x34f/0x4d0 [ 510.983960][T14095] ? __x64_sys_futex+0x358/0x4d0 [ 510.983978][T14095] ksys_mmap_pgoff+0x7d/0x5b0 [ 510.984002][T14095] __x64_sys_mmap+0x125/0x190 [ 510.984024][T14095] do_syscall_64+0x106/0xf80 [ 510.984039][T14095] ? clear_bhb_loop+0x40/0x90 [ 510.984057][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.984071][T14095] RIP: 0033:0x7f1abbf9bf79 [ 510.984083][T14095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.984097][T14095] RSP: 002b:00007f1abcdab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 510.984111][T14095] RAX: ffffffffffffffda RBX: 00007f1abc215fa0 RCX: 00007f1abbf9bf79 [ 510.984121][T14095] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 510.984129][T14095] RBP: 00007f1abc0327e0 R08: 0000000000000401 R09: 0000000000008000 [ 510.984138][T14095] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 510.984146][T14095] R13: 00007f1abc216038 R14: 00007f1abc215fa0 R15: 00007fffec149148 [ 510.984165][T14095] [ 511.466897][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.474389][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.482847][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.490314][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.497574][ T5914] rtc rtc0: __rtc_set_alarm: err=-22 [ 511.820559][T14095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.657272][T14113] Invalid ELF header magic: != ELF [ 515.421172][T14134] rtc_cmos 00:00: Alarms can be up to one day in the future [ 515.490517][T14168] FAULT_INJECTION: forcing a failure. [ 515.490517][T14168] name failslab, interval 1, probability 0, space 0, times 0 [ 515.669893][T14168] CPU: 0 UID: 0 PID: 14168 Comm: syz.4.1579 Tainted: G U L syzkaller #0 PREEMPT(full) [ 515.669919][T14168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 515.669924][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.669933][T14168] Call Trace: [ 515.669938][T14168] [ 515.669944][T14168] dump_stack_lvl+0x100/0x190 [ 515.669969][T14168] should_fail_ex.cold+0x5/0xa [ 515.669985][T14168] should_failslab+0xc2/0x120 [ 515.670007][T14168] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 515.670025][T14168] ? do_getname+0x35/0x390 [ 515.670043][T14168] do_getname+0x35/0x390 [ 515.670059][T14168] do_sys_openat2+0xc5/0x1e0 [ 515.670075][T14168] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.670091][T14168] ? find_held_lock+0x2b/0x80 [ 515.670117][T14168] __x64_sys_openat+0x12d/0x210 [ 515.670132][T14168] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.670155][T14168] do_syscall_64+0x106/0xf80 [ 515.670171][T14168] ? clear_bhb_loop+0x40/0x90 [ 515.670188][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.670202][T14168] RIP: 0033:0x7f1abbf9bf79 [ 515.670215][T14168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.670229][T14168] RSP: 002b:00007f1abcdab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.670242][T14168] RAX: ffffffffffffffda RBX: 00007f1abc215fa0 RCX: 00007f1abbf9bf79 [ 515.670252][T14168] RDX: 0000000000028082 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 515.670260][T14168] RBP: 00007f1abc0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 515.670269][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.670277][T14168] R13: 00007f1abc216038 R14: 00007f1abc215fa0 R15: 00007fffec149148 [ 515.670295][T14168] [ 516.152917][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 516.163231][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 516.197417][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 516.233431][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 516.240715][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 516.751602][T14205] FAULT_INJECTION: forcing a failure. [ 516.751602][T14205] name failslab, interval 1, probability 0, space 0, times 0 [ 516.820709][T14205] CPU: 0 UID: 0 PID: 14205 Comm: syz.0.1585 Tainted: G U L syzkaller #0 PREEMPT(full) [ 516.820738][T14205] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 516.820744][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.820753][T14205] Call Trace: [ 516.820759][T14205] [ 516.820766][T14205] dump_stack_lvl+0x100/0x190 [ 516.820793][T14205] should_fail_ex.cold+0x5/0xa [ 516.820811][T14205] should_failslab+0xc2/0x120 [ 516.820833][T14205] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 516.820852][T14205] ? __kernfs_new_node+0xd2/0x960 [ 516.820871][T14205] __kernfs_new_node+0xd2/0x960 [ 516.820888][T14205] ? __pfx___kernfs_new_node+0x10/0x10 [ 516.820908][T14205] ? find_held_lock+0x2b/0x80 [ 516.820930][T14205] ? kernfs_root+0xee/0x2a0 [ 516.820944][T14205] ? kernfs_root+0xee/0x2a0 [ 516.820963][T14205] kernfs_new_node+0x11b/0x1a0 [ 516.820984][T14205] __kernfs_create_file+0x53/0x350 [ 516.821007][T14205] sysfs_add_file_mode_ns+0x207/0x3c0 [ 516.821034][T14205] sysfs_merge_group+0x194/0x340 [ 516.821051][T14205] ? __pfx_sysfs_merge_group+0x10/0x10 [ 516.821069][T14205] ? __pfx_dev_add_physical_location+0x10/0x10 [ 516.821092][T14205] ? bus_to_subsys+0x114/0x150 [ 516.821111][T14205] dpm_sysfs_add+0x237/0x280 [ 516.821134][T14205] device_add+0x9ef/0x1950 [ 516.821151][T14205] ? __pfx_device_add+0x10/0x10 [ 516.821166][T14205] ? lockdep_init_map_type+0x5c/0x250 [ 516.821184][T14205] ? __init_waitqueue_head+0xca/0x150 [ 516.821209][T14205] netdev_register_kobject+0x1a9/0x3d0 [ 516.821231][T14205] register_netdevice+0x12e0/0x2210 [ 516.821251][T14205] ? idr_alloc+0xdd/0x130 [ 516.821266][T14205] ? __pfx_register_netdevice+0x10/0x10 [ 516.821282][T14205] ? net_generic+0xea/0x2a0 [ 516.821304][T14205] ppp_dev_configure+0x986/0xcb0 [ 516.821325][T14205] ppp_ioctl+0x985/0x2800 [ 516.821344][T14205] ? find_held_lock+0x2b/0x80 [ 516.821366][T14205] ? __pfx_ppp_ioctl+0x10/0x10 [ 516.821387][T14205] ? __fget_files+0x21f/0x3d0 [ 516.821410][T14205] ? __pfx_ppp_ioctl+0x10/0x10 [ 516.821427][T14205] __x64_sys_ioctl+0x18e/0x210 [ 516.821447][T14205] do_syscall_64+0x106/0xf80 [ 516.821462][T14205] ? clear_bhb_loop+0x40/0x90 [ 516.821489][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.821505][T14205] RIP: 0033:0x7f171099bf79 [ 516.821518][T14205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.821533][T14205] RSP: 002b:00007f1711864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.821548][T14205] RAX: ffffffffffffffda RBX: 00007f1710c16270 RCX: 00007f171099bf79 [ 516.821558][T14205] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 516.821567][T14205] RBP: 00007f1710a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 516.821577][T14205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.821586][T14205] R13: 00007f1710c16308 R14: 00007f1710c16270 R15: 00007ffef6007558 [ 516.821606][T14205] [ 517.197624][T14208] FAULT_INJECTION: forcing a failure. [ 517.197624][T14208] name fail_futex, interval 1, probability 0, space 0, times 0 [ 517.215510][T14208] CPU: 0 UID: 0 PID: 14208 Comm: syz.1.1587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.215537][T14208] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.215543][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.215552][T14208] Call Trace: [ 517.215557][T14208] [ 517.215563][T14208] dump_stack_lvl+0x100/0x190 [ 517.215589][T14208] should_fail_ex.cold+0x5/0xa [ 517.215607][T14208] get_futex_key+0x1d2/0x1620 [ 517.215625][T14208] ? __pfx_get_futex_key+0x10/0x10 [ 517.215642][T14208] ? update_se+0x94/0x760 [ 517.215663][T14208] futex_wait_setup+0x81/0x500 [ 517.215688][T14208] __futex_wait+0x19f/0x300 [ 517.215709][T14208] ? __pfx___futex_wait+0x10/0x10 [ 517.215727][T14208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 517.215750][T14208] ? lockdep_hardirqs_on+0x78/0x100 [ 517.215768][T14208] ? __pfx_futex_wake_mark+0x10/0x10 [ 517.215790][T14208] ? find_held_lock+0x2b/0x80 [ 517.215811][T14208] ? futex_wake+0x456/0x530 [ 517.215835][T14208] futex_wait+0xed/0x380 [ 517.215854][T14208] ? __pfx_futex_wait+0x10/0x10 [ 517.215878][T14208] ? putname+0xb1/0x110 [ 517.215897][T14208] ? kmem_cache_free+0x124/0x6a0 [ 517.215918][T14208] do_futex+0x1ef/0x350 [ 517.215934][T14208] ? __pfx_do_futex+0x10/0x10 [ 517.215949][T14208] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.215967][T14208] ? __fget_files+0x21f/0x3d0 [ 517.215988][T14208] __x64_sys_futex+0x34f/0x4d0 [ 517.216006][T14208] ? __x64_sys_openat+0x12d/0x210 [ 517.216022][T14208] ? __pfx___x64_sys_futex+0x10/0x10 [ 517.216046][T14208] do_syscall_64+0x106/0xf80 [ 517.216061][T14208] ? clear_bhb_loop+0x40/0x90 [ 517.216079][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.216094][T14208] RIP: 0033:0x7f1d7c59bf79 [ 517.216107][T14208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.216122][T14208] RSP: 002b:00007f1d7d4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 517.216137][T14208] RAX: ffffffffffffffda RBX: 00007f1d7c815fa8 RCX: 00007f1d7c59bf79 [ 517.216146][T14208] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d7c815fa8 [ 517.216155][T14208] RBP: 00007f1d7c815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 517.216164][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.216172][T14208] R13: 00007f1d7c816038 R14: 00007ffe18d91f60 R15: 00007ffe18d92048 [ 517.216191][T14208] [ 517.799077][T10695] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.237496][T14229] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1593'. [ 519.579456][T14255] FAULT_INJECTION: forcing a failure. [ 519.579456][T14255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 519.659752][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.4.1598 Tainted: G U L syzkaller #0 PREEMPT(full) [ 519.659781][T14255] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 519.659788][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.659797][T14255] Call Trace: [ 519.659802][T14255] [ 519.659808][T14255] dump_stack_lvl+0x100/0x190 [ 519.659835][T14255] should_fail_ex.cold+0x5/0xa [ 519.659853][T14255] get_futex_key+0x1d2/0x1620 [ 519.659871][T14255] ? __pfx_get_futex_key+0x10/0x10 [ 519.659886][T14255] ? lockdep_hardirqs_on+0x78/0x100 [ 519.659904][T14255] ? fcntl_setlk+0x4f4/0xe40 [ 519.659923][T14255] ? kmem_cache_free+0x124/0x6a0 [ 519.659943][T14255] futex_wake+0xea/0x530 [ 519.659962][T14255] ? fcntl_setlk+0x4f9/0xe40 [ 519.659982][T14255] ? __pfx_futex_wake+0x10/0x10 [ 519.660000][T14255] ? __pfx_fcntl_setlk+0x10/0x10 [ 519.660022][T14255] ? __might_fault+0xc5/0x140 [ 519.660038][T14255] ? __might_fault+0xc5/0x140 [ 519.660059][T14255] do_futex+0x32b/0x350 [ 519.660076][T14255] ? __pfx_do_futex+0x10/0x10 [ 519.660092][T14255] ? do_fcntl+0x811/0x1670 [ 519.660112][T14255] __x64_sys_futex+0x34f/0x4d0 [ 519.660131][T14255] ? __pfx___x64_sys_futex+0x10/0x10 [ 519.660148][T14255] ? tomoyo_file_fcntl+0x6c/0xc0 [ 519.660174][T14255] do_syscall_64+0x106/0xf80 [ 519.660189][T14255] ? clear_bhb_loop+0x40/0x90 [ 519.660207][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.660223][T14255] RIP: 0033:0x7f1abbf9bf79 [ 519.660244][T14255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.660260][T14255] RSP: 002b:00007f1abcd8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 519.660275][T14255] RAX: ffffffffffffffda RBX: 00007f1abc216098 RCX: 00007f1abbf9bf79 [ 519.660285][T14255] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1abc21609c [ 519.660294][T14255] RBP: 00007f1abc216090 R08: 0000000000000000 R09: 0000000000000000 [ 519.660303][T14255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.660311][T14255] R13: 00007f1abc216128 R14: 00007fffec149060 R15: 00007fffec149148 [ 519.660330][T14255] [ 524.463341][T14014] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 524.607435][T14014] block nbd0: Receive control failed (result -32) [ 528.391699][T14367] FAULT_INJECTION: forcing a failure. [ 528.391699][T14367] name failslab, interval 1, probability 0, space 0, times 0 [ 528.550763][T14367] CPU: 0 UID: 0 PID: 14367 Comm: syz.1.1620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 528.550792][T14367] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 528.550798][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.550807][T14367] Call Trace: [ 528.550813][T14367] [ 528.550819][T14367] dump_stack_lvl+0x100/0x190 [ 528.550846][T14367] should_fail_ex.cold+0x5/0xa [ 528.550865][T14367] should_failslab+0xc2/0x120 [ 528.550887][T14367] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 528.550905][T14367] ? __kernfs_new_node+0xd2/0x960 [ 528.550925][T14367] __kernfs_new_node+0xd2/0x960 [ 528.550942][T14367] ? __pfx___kernfs_new_node+0x10/0x10 [ 528.550962][T14367] ? find_held_lock+0x2b/0x80 [ 528.550984][T14367] ? kernfs_root+0xee/0x2a0 [ 528.550999][T14367] ? kernfs_root+0xee/0x2a0 [ 528.551017][T14367] kernfs_new_node+0x11b/0x1a0 [ 528.551037][T14367] __kernfs_create_file+0x53/0x350 [ 528.551060][T14367] sysfs_add_file_mode_ns+0x207/0x3c0 [ 528.551087][T14367] sysfs_merge_group+0x194/0x340 [ 528.551104][T14367] ? __pfx_sysfs_merge_group+0x10/0x10 [ 528.551122][T14367] ? __pfx_dev_add_physical_location+0x10/0x10 [ 528.551145][T14367] ? bus_to_subsys+0x114/0x150 [ 528.551163][T14367] dpm_sysfs_add+0x237/0x280 [ 528.551186][T14367] device_add+0x9ef/0x1950 [ 528.551203][T14367] ? __pfx_device_add+0x10/0x10 [ 528.551217][T14367] ? lockdep_init_map_type+0x5c/0x250 [ 528.551236][T14367] ? __init_waitqueue_head+0xca/0x150 [ 528.551261][T14367] netdev_register_kobject+0x1a9/0x3d0 [ 528.551282][T14367] register_netdevice+0x12e0/0x2210 [ 528.551302][T14367] ? idr_alloc+0xdd/0x130 [ 528.551317][T14367] ? __pfx_register_netdevice+0x10/0x10 [ 528.551333][T14367] ? net_generic+0xea/0x2a0 [ 528.551354][T14367] ppp_dev_configure+0x986/0xcb0 [ 528.551376][T14367] ppp_ioctl+0x985/0x2800 [ 528.551394][T14367] ? find_held_lock+0x2b/0x80 [ 528.551416][T14367] ? __pfx_ppp_ioctl+0x10/0x10 [ 528.551436][T14367] ? __fget_files+0x21f/0x3d0 [ 528.551459][T14367] ? __pfx_ppp_ioctl+0x10/0x10 [ 528.551477][T14367] __x64_sys_ioctl+0x18e/0x210 [ 528.551496][T14367] do_syscall_64+0x106/0xf80 [ 528.551512][T14367] ? clear_bhb_loop+0x40/0x90 [ 528.551539][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.551555][T14367] RIP: 0033:0x7f1d7c59bf79 [ 528.551569][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.551584][T14367] RSP: 002b:00007f1d7d470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.551599][T14367] RAX: ffffffffffffffda RBX: 00007f1d7c816090 RCX: 00007f1d7c59bf79 [ 528.551609][T14367] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 528.551618][T14367] RBP: 00007f1d7c6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 528.551627][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.551636][T14367] R13: 00007f1d7c816128 R14: 00007f1d7c816090 R15: 00007ffe18d92048 [ 528.551657][T14367] [ 529.076301][T14372] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 530.912003][T14363] kexec: Could not allocate control_code_buffer [ 531.232427][T14392] FAULT_INJECTION: forcing a failure. [ 531.232427][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.378820][T14392] CPU: 0 UID: 0 PID: 14392 Comm: syz.4.1626 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.378848][T14392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.378855][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.378865][T14392] Call Trace: [ 531.378870][T14392] [ 531.378876][T14392] dump_stack_lvl+0x100/0x190 [ 531.378902][T14392] should_fail_ex.cold+0x5/0xa [ 531.378920][T14392] _copy_from_iter+0x1f4/0x1690 [ 531.378937][T14392] ? rcu_is_watching+0x12/0xc0 [ 531.378959][T14392] ? trace_kmem_cache_alloc+0xf3/0x120 [ 531.378981][T14392] ? __kasan_slab_alloc+0x89/0x90 [ 531.379002][T14392] ? __pfx__copy_from_iter+0x10/0x10 [ 531.379016][T14392] ? __asan_memset+0x23/0x50 [ 531.379033][T14392] ? __build_skb_around+0x278/0x390 [ 531.379056][T14392] ? is_vmalloc_addr+0x86/0xa0 [ 531.379075][T14392] netlink_sendmsg+0x808/0xda0 [ 531.379096][T14392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.379115][T14392] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 531.379139][T14392] sock_write_iter+0x566/0x610 [ 531.379160][T14392] ? __pfx_sock_write_iter+0x10/0x10 [ 531.379185][T14392] ? bpf_lsm_file_permission+0x9/0x10 [ 531.379205][T14392] ? security_file_permission+0x76/0x210 [ 531.379221][T14392] ? rw_verify_area+0xce/0x6d0 [ 531.379240][T14392] vfs_write+0x6ac/0x1070 [ 531.379260][T14392] ? __pfx_sock_write_iter+0x10/0x10 [ 531.379280][T14392] ? __pfx_vfs_write+0x10/0x10 [ 531.379306][T14392] ? find_held_lock+0x2b/0x80 [ 531.379342][T14392] ksys_write+0x1f8/0x250 [ 531.379361][T14392] ? __pfx_ksys_write+0x10/0x10 [ 531.379387][T14392] do_syscall_64+0x106/0xf80 [ 531.379403][T14392] ? clear_bhb_loop+0x40/0x90 [ 531.379422][T14392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.379436][T14392] RIP: 0033:0x7f1abbf9bf79 [ 531.379451][T14392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.379466][T14392] RSP: 002b:00007f1abcdab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.379481][T14392] RAX: ffffffffffffffda RBX: 00007f1abc215fa0 RCX: 00007f1abbf9bf79 [ 531.379490][T14392] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 531.379499][T14392] RBP: 00007f1abc0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 531.379508][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.379516][T14392] R13: 00007f1abc216038 R14: 00007f1abc215fa0 R15: 00007fffec149148 [ 531.379536][T14392] [ 532.647965][T14417] FAULT_INJECTION: forcing a failure. [ 532.647965][T14417] name fail_futex, interval 1, probability 0, space 0, times 0 [ 532.695762][T14417] CPU: 0 UID: 0 PID: 14417 Comm: syz.4.1633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.695789][T14417] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.695795][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.695803][T14417] Call Trace: [ 532.695809][T14417] [ 532.695814][T14417] dump_stack_lvl+0x100/0x190 [ 532.695840][T14417] should_fail_ex.cold+0x5/0xa [ 532.695857][T14417] get_futex_key+0x1d2/0x1620 [ 532.695877][T14417] ? __pfx_get_futex_key+0x10/0x10 [ 532.695895][T14417] ? putname+0xb1/0x110 [ 532.695917][T14417] ? stack_trace_save+0x8e/0xc0 [ 532.695942][T14417] futex_wait_setup+0x81/0x500 [ 532.695967][T14417] __futex_wait+0x19f/0x300 [ 532.695988][T14417] ? __pfx___futex_wait+0x10/0x10 [ 532.696011][T14417] ? __pfx_futex_wake_mark+0x10/0x10 [ 532.696033][T14417] ? futex_hash+0x2c5/0x380 [ 532.696053][T14417] futex_wait+0xed/0x380 [ 532.696073][T14417] ? __pfx_futex_wait+0x10/0x10 [ 532.696097][T14417] ? putname+0xb1/0x110 [ 532.696117][T14417] ? kmem_cache_free+0x124/0x6a0 [ 532.696137][T14417] do_futex+0x1ef/0x350 [ 532.696154][T14417] ? __pfx_do_futex+0x10/0x10 [ 532.696172][T14417] ? __fget_files+0x21f/0x3d0 [ 532.696203][T14417] __x64_sys_futex+0x34f/0x4d0 [ 532.696222][T14417] ? __x64_sys_open+0xfe/0x1d0 [ 532.696238][T14417] ? __pfx___x64_sys_futex+0x10/0x10 [ 532.696263][T14417] do_syscall_64+0x106/0xf80 [ 532.696279][T14417] ? clear_bhb_loop+0x40/0x90 [ 532.696297][T14417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.696312][T14417] RIP: 0033:0x7f1abbf9bf79 [ 532.696326][T14417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.696341][T14417] RSP: 002b:00007f1abcdab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.696355][T14417] RAX: ffffffffffffffda RBX: 00007f1abc215fa8 RCX: 00007f1abbf9bf79 [ 532.696365][T14417] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1abc215fa8 [ 532.696374][T14417] RBP: 00007f1abc215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 532.696382][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.696391][T14417] R13: 00007f1abc216038 R14: 00007fffec149060 R15: 00007fffec149148 [ 532.696410][T14417] [ 535.539606][T14446] Invalid ELF header magic: != ELF [ 539.385816][T14476] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.107750][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 540.154790][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.162235][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.245047][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.298417][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.328030][T12527] rtc rtc0: __rtc_set_alarm: err=-22 [ 541.330583][T14509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.149313][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.173672][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.221959][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.278187][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.315732][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 543.517395][T14563] zswap: compressor not available [ 543.761683][T14574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'. [ 547.756505][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1675'. [ 547.786907][T14613] syz.2.1670 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 547.813459][T14639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.885655][T14639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.133570][T14613] CPU: 0 UID: 0 PID: 14613 Comm: syz.2.1670 Tainted: G U L syzkaller #0 PREEMPT(full) [ 548.133598][T14613] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 548.133603][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.133612][T14613] Call Trace: [ 548.133617][T14613] [ 548.133623][T14613] dump_stack_lvl+0x100/0x190 [ 548.133650][T14613] dump_header+0xfb/0x606 [ 548.133667][T14613] oom_kill_process.cold+0xd/0x330 [ 548.133685][T14613] out_of_memory+0x340/0x14f0 [ 548.133708][T14613] ? __pfx_out_of_memory+0x10/0x10 [ 548.133732][T14613] mem_cgroup_out_of_memory+0xc6/0x130 [ 548.133751][T14613] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 548.133767][T14613] ? find_held_lock+0x2b/0x80 [ 548.133793][T14613] ? do_raw_spin_unlock+0x145/0x1e0 [ 548.133814][T14613] ? _raw_spin_unlock+0x28/0x50 [ 548.133838][T14613] try_charge_memcg+0x652/0xc90 [ 548.133864][T14613] ? __pfx_try_charge_memcg+0x10/0x10 [ 548.133890][T14613] ? find_held_lock+0x2b/0x80 [ 548.133910][T14613] ? rcu_read_unlock+0x17/0x60 [ 548.133932][T14613] ? rcu_read_unlock+0x17/0x60 [ 548.133963][T14613] charge_memcg+0xa6/0x280 [ 548.133984][T14613] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 548.134002][T14613] __swap_cache_prepare_and_add+0x528/0x9e0 [ 548.134028][T14613] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 548.134045][T14613] ? __pfx_swap_entry_swapped+0x10/0x10 [ 548.134072][T14613] swap_cache_alloc_folio+0x1cb/0x300 [ 548.134090][T14613] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 548.134114][T14613] swap_cluster_readahead+0x53b/0x770 [ 548.134137][T14613] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 548.134168][T14613] ? get_vma_policy+0x23f/0x3b0 [ 548.134192][T14613] swapin_readahead+0x160/0x12c0 [ 548.134216][T14613] ? __pfx_swapin_readahead+0x10/0x10 [ 548.134233][T14613] ? find_held_lock+0x2b/0x80 [ 548.134253][T14613] ? swap_table_get+0x103/0x2c0 [ 548.134269][T14613] ? swap_table_get+0x103/0x2c0 [ 548.134288][T14613] ? swap_table_get+0x10d/0x2c0 [ 548.134304][T14613] ? swap_cache_get_folio+0x1ae/0x600 [ 548.134322][T14613] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 548.134337][T14613] ? __pfx_get_swap_device+0x10/0x10 [ 548.134362][T14613] ? do_swap_page+0xb2e/0x68e0 [ 548.134377][T14613] do_swap_page+0xb2e/0x68e0 [ 548.134403][T14613] ? __pfx_do_swap_page+0x10/0x10 [ 548.134421][T14613] ? __lock_acquire+0x4a5/0x2630 [ 548.134439][T14613] ? rcu_is_watching+0x12/0xc0 [ 548.134460][T14613] ? __pte_offset_map+0x179/0x310 [ 548.134483][T14613] __handle_mm_fault+0x18c1/0x2b60 [ 548.134503][T14613] ? reacquire_held_locks+0xce/0x1e0 [ 548.134521][T14613] ? __pfx___handle_mm_fault+0x10/0x10 [ 548.134541][T14613] ? lock_vma_under_rcu+0x17c/0x590 [ 548.134569][T14613] handle_mm_fault+0x36d/0xa20 [ 548.134590][T14613] do_user_addr_fault+0x5a3/0x12f0 [ 548.134618][T14613] exc_page_fault+0x6f/0xd0 [ 548.134634][T14613] asm_exc_page_fault+0x26/0x30 [ 548.134649][T14613] RIP: 0033:0x7f46ace621d8 [ 548.134662][T14613] Code: 8d 15 ac 6a 25 00 48 8d 04 c0 48 c1 e0 04 48 83 7c 02 28 00 74 0f 48 8b 44 24 08 c7 80 90 00 00 00 16 00 00 00 48 8b 44 24 08 <80> 3d 06 35 ee 00 00 c6 80 e8 00 00 00 00 0f 85 24 02 00 00 48 8b [ 548.134676][T14613] RSP: 002b:00007f46ade6a050 EFLAGS: 00010246 [ 548.134689][T14613] RAX: 00007f46ad215fa0 RBX: 00007f46ad215fa0 RCX: 00007f46ad215fa0 [ 548.134698][T14613] RDX: 00007f46ad0b8c60 RSI: 0000000000000000 RDI: 0000000040000080 [ 548.134707][T14613] RBP: 00007f46ad0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 548.134716][T14613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.134724][T14613] R13: 00007f46ad216038 R14: 00007f46ad215fa0 R15: 00007ffc1ad729b8 [ 548.134744][T14613] [ 548.134750][T14613] memory: usage 3072kB, limit 3072kB, failcnt 161448 [ 550.452703][T14661] rtc_cmos 00:00: Alarms can be up to one day in the future [ 550.959321][ T29] audit: type=1326 audit(4294968591.344:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14682 comm="syz.0.1684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f171099bf79 code=0x0 [ 551.084020][T14687] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 551.084020][T14687] The task syz.0.1684 (14687) triggered the difference, watch for misbehavior. [ 551.148601][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 551.160410][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 551.190869][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 551.198321][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 551.220038][T14613] memory+swap: usage 47276kB, limit 9007199254740988kB, failcnt 0 [ 551.275754][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 551.297252][T14613] kmem: usage 2624kB, limit 9007199254740988kB, failcnt 0 [ 551.334788][ T29] audit: type=1804 audit(4294968591.723:23): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1686" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=43800 res=1 errno=0 [ 551.384558][T14613] Memory cgroup stats for /syz2: [ 551.384668][T14613] cache 229376 [ 551.482387][T14613] rss 4096 [ 551.511876][T14613] rss_huge 0 [ 551.584174][T14613] shmem 8192 [ 551.622515][T14613] mapped_file 0 [ 551.625997][T14613] dirty 0 [ 551.628912][T14613] writeback 0 [ 551.718169][T14613] workingset_refault_anon 20712 [ 551.764254][T14613] workingset_refault_file 40695 [ 551.769125][T14613] swap 45264896 [ 551.832730][T14613] swapcached 755228672 [ 551.876589][T14613] pgpgin 461701 [ 551.930446][T14613] pgpgout 477069 [ 551.934014][T14613] pgfault 398211 [ 551.937549][T14613] pgmajfault 6392 [ 552.100493][T14613] inactive_anon 8192 [ 552.120107][T14613] active_anon 229376 [ 552.186282][T14613] inactive_file 221184 [ 552.190369][T14613] active_file 0 [ 552.253531][T14613] unevictable 0 [ 552.257012][T14613] hierarchical_memory_limit 3145728 [ 552.361569][T14613] hierarchical_memsw_limit 9223372036854771712 [ 552.440652][T14613] total_cache 229376 [ 552.444564][T14613] total_rss 4096 [ 552.448090][T14613] total_rss_huge 0 [ 552.534379][T14613] total_shmem 8192 [ 552.582848][T14613] total_mapped_file 0 [ 552.594287][T14613] total_dirty 0 [ 552.630750][T14613] total_writeback 0 [ 552.683022][T14613] total_workingset_refault_anon 20712 [ 552.688419][T14613] total_workingset_refault_file 40695 [ 552.798585][T14613] total_swap 45264896 [ 552.805615][T14613] total_swapcached 755228672 [ 552.832211][T14613] total_pgpgin 461701 [ 552.847105][T11665] Process accounting resumed [ 552.883084][T14613] total_pgpgout 477069 [ 552.917989][T14613] total_pgfault 398211 [ 552.956533][T14613] total_pgmajfault 6392 [ 553.014277][T14613] total_inactive_anon 8192 [ 553.018718][T14613] total_active_anon 229376 [ 553.102531][T14613] total_inactive_file 221184 [ 553.107147][T14613] total_active_file 0 [ 553.191120][T14613] total_unevictable 0 [ 553.196896][T14781] FAULT_INJECTION: forcing a failure. [ 553.196896][T14781] name fail_futex, interval 1, probability 0, space 0, times 0 [ 553.254088][T14613] anon_cost 89 [ 553.257479][T14613] file_cost 21 [ 553.260827][T14613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1605,pid=14304,uid=0 [ 553.321093][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.1.1691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 553.321122][T14781] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 553.321128][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.321137][T14781] Call Trace: [ 553.321142][T14781] [ 553.321149][T14781] dump_stack_lvl+0x100/0x190 [ 553.321174][T14781] should_fail_ex.cold+0x5/0xa [ 553.321193][T14781] get_futex_key+0x1d2/0x1620 [ 553.321212][T14781] ? __pfx_get_futex_key+0x10/0x10 [ 553.321234][T14781] futex_wake+0xea/0x530 [ 553.321255][T14781] ? __pfx_futex_wake+0x10/0x10 [ 553.321273][T14781] ? kasan_quarantine_put+0x104/0x240 [ 553.321296][T14781] ? putname+0xb1/0x110 [ 553.321316][T14781] ? kmem_cache_free+0x124/0x6a0 [ 553.321336][T14781] do_futex+0x32b/0x350 [ 553.321353][T14781] ? __pfx_do_futex+0x10/0x10 [ 553.321371][T14781] ? __fget_files+0x21f/0x3d0 [ 553.321393][T14781] __x64_sys_futex+0x34f/0x4d0 [ 553.321411][T14781] ? __x64_sys_open+0xfe/0x1d0 [ 553.321427][T14781] ? __pfx___x64_sys_futex+0x10/0x10 [ 553.321450][T14781] do_syscall_64+0x106/0xf80 [ 553.321466][T14781] ? clear_bhb_loop+0x40/0x90 [ 553.321483][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.321498][T14781] RIP: 0033:0x7f1d7c59bf79 [ 553.321512][T14781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.321526][T14781] RSP: 002b:00007f1d7d4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 553.321541][T14781] RAX: ffffffffffffffda RBX: 00007f1d7c815fa8 RCX: 00007f1d7c59bf79 [ 553.321550][T14781] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d7c815fac [ 553.321566][T14781] RBP: 00007f1d7c815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 553.321576][T14781] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 553.321585][T14781] R13: 00007f1d7c816038 R14: 00007ffe18d91f60 R15: 00007ffe18d92048 [ 553.321605][T14781] [ 553.781339][T14613] Memory cgroup out of memory: Killed process 14304 (syz.2.1605) total-vm:135384kB, anon-rss:1232kB, file-rss:55892kB, shmem-rss:0kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 559.511127][T14823] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.147878][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.161490][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.232467][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.275702][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 560.309958][T12527] rtc rtc0: __rtc_set_alarm: err=-22 [ 561.355690][T14911] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 561.687523][T14865] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.138350][T14938] FAULT_INJECTION: forcing a failure. [ 562.138350][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 562.151453][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.197614][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.232668][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.2.1723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 562.232698][T14938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 562.232704][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.232713][T14938] Call Trace: [ 562.232719][T14938] [ 562.232725][T14938] dump_stack_lvl+0x100/0x190 [ 562.232751][T14938] should_fail_ex.cold+0x5/0xa [ 562.232769][T14938] should_failslab+0xc2/0x120 [ 562.232791][T14938] __kmalloc_cache_node_noprof+0x7d/0x770 [ 562.232821][T14938] ? __get_vm_area_node+0x101/0x330 [ 562.232848][T14938] __get_vm_area_node+0x101/0x330 [ 562.232873][T14938] __vmalloc_node_range_noprof+0x213/0x1530 [ 562.232890][T14938] ? kernel_clone+0xfc/0x9a0 [ 562.232907][T14938] ? local_lock_release+0x99/0x130 [ 562.232924][T14938] ? kernel_clone+0xfc/0x9a0 [ 562.232945][T14938] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.232962][T14938] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 562.232987][T14938] ? rcu_is_watching+0x12/0xc0 [ 562.233007][T14938] ? trace_kmem_cache_alloc+0xf3/0x120 [ 562.233030][T14938] ? kernel_clone+0xfc/0x9a0 [ 562.233044][T14938] __vmalloc_node_noprof+0xad/0xf0 [ 562.233059][T14938] ? kernel_clone+0xfc/0x9a0 [ 562.233077][T14938] copy_process+0x5ec/0x7a10 [ 562.233094][T14938] ? __pfx___futex_wait+0x10/0x10 [ 562.233120][T14938] ? __pfx_copy_process+0x10/0x10 [ 562.233145][T14938] kernel_clone+0xfc/0x9a0 [ 562.233160][T14938] ? __pfx_futex_wait+0x10/0x10 [ 562.233181][T14938] ? __pfx_kernel_clone+0x10/0x10 [ 562.233207][T14938] __do_sys_clone+0xd9/0x120 [ 562.233223][T14938] ? __pfx___do_sys_clone+0x10/0x10 [ 562.233254][T14938] do_syscall_64+0x106/0xf80 [ 562.233269][T14938] ? clear_bhb_loop+0x40/0x90 [ 562.233287][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.233302][T14938] RIP: 0033:0x7f46acf9bf79 [ 562.233316][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.233331][T14938] RSP: 002b:00007f46ade69fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 562.233346][T14938] RAX: ffffffffffffffda RBX: 00007f46ad215fa0 RCX: 00007f46acf9bf79 [ 562.233355][T14938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.233364][T14938] RBP: 00007f46ad0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 562.233373][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.233381][T14938] R13: 00007f46ad216038 R14: 00007f46ad215fa0 R15: 00007ffc1ad729b8 [ 562.233401][T14938] [ 562.233536][T14938] syz.2.1723: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 562.499021][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.582133][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.632325][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 562.893947][T14905] rtc_cmos 00:00: Alarms can be up to one day in the future [ 562.958302][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.964703][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.148224][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 563.155913][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 563.173255][T14938] ,cpuset=/,mems_allowed=0-1 [ 563.215835][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.2.1723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.215863][T14938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.215868][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.215877][T14938] Call Trace: [ 563.215882][T14938] [ 563.215889][T14938] dump_stack_lvl+0x100/0x190 [ 563.215915][T14938] warn_alloc.cold+0x95/0x1c1 [ 563.215940][T14938] ? __pfx_warn_alloc+0x10/0x10 [ 563.215960][T14938] ? trace_kmalloc+0x101/0x130 [ 563.215983][T14938] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 563.216005][T14938] ? __kasan_kmalloc+0x8a/0xb0 [ 563.216026][T14938] ? __get_vm_area_node+0x208/0x330 [ 563.216052][T14938] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 563.216068][T14938] ? local_lock_release+0x99/0x130 [ 563.216086][T14938] ? kernel_clone+0xfc/0x9a0 [ 563.216107][T14938] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 563.216123][T14938] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 563.216149][T14938] ? rcu_is_watching+0x12/0xc0 [ 563.216169][T14938] ? trace_kmem_cache_alloc+0xf3/0x120 [ 563.216192][T14938] ? kernel_clone+0xfc/0x9a0 [ 563.216206][T14938] __vmalloc_node_noprof+0xad/0xf0 [ 563.216221][T14938] ? kernel_clone+0xfc/0x9a0 [ 563.216238][T14938] copy_process+0x5ec/0x7a10 [ 563.216255][T14938] ? __pfx___futex_wait+0x10/0x10 [ 563.216282][T14938] ? __pfx_copy_process+0x10/0x10 [ 563.216307][T14938] kernel_clone+0xfc/0x9a0 [ 563.216321][T14938] ? __pfx_futex_wait+0x10/0x10 [ 563.216342][T14938] ? __pfx_kernel_clone+0x10/0x10 [ 563.216368][T14938] __do_sys_clone+0xd9/0x120 [ 563.216384][T14938] ? __pfx___do_sys_clone+0x10/0x10 [ 563.216416][T14938] do_syscall_64+0x106/0xf80 [ 563.216432][T14938] ? clear_bhb_loop+0x40/0x90 [ 563.216450][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.216465][T14938] RIP: 0033:0x7f46acf9bf79 [ 563.216478][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.216493][T14938] RSP: 002b:00007f46ade69fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 563.216508][T14938] RAX: ffffffffffffffda RBX: 00007f46ad215fa0 RCX: 00007f46acf9bf79 [ 563.216518][T14938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.216526][T14938] RBP: 00007f46ad0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 563.216535][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.216543][T14938] R13: 00007f46ad216038 R14: 00007f46ad215fa0 R15: 00007ffc1ad729b8 [ 563.216562][T14938] [ 563.465208][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 563.473100][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 563.480406][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 563.596269][ C0] sd 0:0:1:0: [sda] tag#3516 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 563.606681][ C0] sd 0:0:1:0: [sda] tag#3516 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 563.891560][T14938] Mem-Info: [ 563.921869][T14938] active_anon:8614 inactive_anon:29697 isolated_anon:0 [ 563.921869][T14938] active_file:21416 inactive_file:39035 isolated_file:0 [ 563.921869][T14938] unevictable:768 dirty:794 writeback:0 [ 563.921869][T14938] slab_reclaimable:12199 slab_unreclaimable:93959 [ 563.921869][T14938] mapped:27837 shmem:24177 pagetables:2120 [ 563.921869][T14938] sec_pagetables:0 bounce:0 [ 563.921869][T14938] kernel_misc_reclaimable:0 [ 563.921869][T14938] free:1265099 free_pcp:22747 free_cma:0 [ 564.171659][T14938] Node 0 active_anon:34456kB inactive_anon:111196kB active_file:85160kB inactive_file:156012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111396kB dirty:3172kB writeback:0kB shmem:95172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:8360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 564.445187][T14938] Node 1 active_anon:0kB inactive_anon:0kB active_file:504kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 564.684312][T14938] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.899453][T14938] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 564.954594][T14938] Node 0 DMA32 free:1139084kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36936kB inactive_anon:114272kB active_file:85836kB inactive_file:155340kB unevictable:1536kB writepending:3176kB zspages:748kB present:3129332kB managed:2537656kB mlocked:0kB bounce:0kB free_pcp:56928kB local_pcp:56928kB free_cma:0kB [ 565.089675][T14996] random: crng reseeded on system resumption [ 565.162997][T14938] lowmem_reserve[]: 0 0 1 1 1 [ 565.205187][T14938] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1068kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 565.396967][T14938] lowmem_reserve[]: 0 0 0 0 0 [ 565.422897][T14938] Node 1 Normal free:3911720kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:504kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30332kB local_pcp:30332kB free_cma:0kB [ 565.621920][T14938] lowmem_reserve[]: 0 0 0 0 0 [ 565.649474][T14938] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.722517][T14938] Node 0 DMA32: 4069*4kB (UME) 4257*8kB (UME) 2839*16kB (UME) 913*32kB (UM) 769*64kB (UME) 477*128kB (UME) 170*256kB (UME) 139*512kB (UME) 66*1024kB (UME) 6*2048kB (UME) 172*4096kB (UM) = 1134316kB [ 565.842285][T14938] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 565.944321][T14938] Node 1 Normal: 7*4kB (UM) 9*8kB (U) 17*16kB (UME) 7*32kB (UME) 8*64kB (UE) 6*128kB (UE) 5*256kB (UME) 2*512kB (UE) 4*1024kB (U) 4*2048kB (UME) 951*4096kB (UM) = 3911764kB [ 566.062554][T14938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.137523][T14938] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.169126][T14938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.237579][T14938] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 566.297611][T14938] 90830 total pagecache pages [ 566.327891][T14938] 58 pages in swap cache [ 566.348071][T14938] Free swap = 120192kB [ 566.380744][T14938] Total swap = 124996kB [ 566.443257][T14938] 2097051 pages RAM [ 566.462627][T14938] 0 pages HighMem/MovableOnly [ 566.494248][T14938] 430755 pages reserved [ 566.527964][T14938] 0 pages cma reserved [ 566.814893][T15038] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 567.016618][T15037] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 569.916527][T15115] input: jJǸ-9%vJ86 as /devices/virtual/input/input24 [ 570.535458][T15108] rtc_cmos 00:00: Alarms can be up to one day in the future [ 571.146994][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 571.200282][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 571.272615][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 571.307078][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 571.340973][ T5914] rtc rtc0: __rtc_set_alarm: err=-22 [ 573.789012][T15206] kafs: addr_prefs: Invalid Command [ 573.891425][T15210] usb usb3: usbfs: interface 0 claimed by hub while 'syz.4.1769' sets config #0 [ 574.462825][T15195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 574.524323][T15222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1772'. [ 575.146688][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 575.172213][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 575.214546][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 575.261028][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 575.316026][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 575.742891][T15246] random: crng reseeded on system resumption [ 575.839151][T15249] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.028808][T15259] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.146502][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.203554][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.210998][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.312253][T12527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.375710][T12527] rtc rtc0: __rtc_set_alarm: err=-22 [ 577.876916][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 577.948863][T15068] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 578.402384][T15267] Invalid ELF header magic: != ELF [ 580.750006][T15321] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 581.078390][T15315] binder: 15314:15315 ioctl c018620c 0 returned -1 [ 581.098752][T15327] vivid-007: ================= START STATUS ================= [ 581.133900][T15327] vivid-007: Generate PTS: true [ 581.163694][T15327] vivid-007: Generate SCR: true [ 581.194351][T15327] tpg source WxH: 320x240 (Y'CbCr) [ 581.222209][T15327] tpg field: 1 [ 581.227886][T15327] tpg crop: (0,0)/320x240 [ 581.232215][T15327] tpg compose: (0,0)/320x240 [ 581.275498][T15327] tpg colorspace: 8 [ 581.279323][T15327] tpg transfer function: 0/0 [ 581.283885][T15327] tpg Y'CbCr encoding: 0/0 [ 581.335101][T15327] tpg quantization: 0/0 [ 581.339273][T15327] tpg RGB range: 0/2 [ 581.385295][T15327] vivid-007: ================== END STATUS ================== [ 581.714223][T15348] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1798'. [ 582.158908][ T5829] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 582.221885][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.221911][ T5829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.221916][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.221925][ T5829] Call Trace: [ 582.221930][ T5829] [ 582.221936][ T5829] dump_stack_lvl+0x100/0x190 [ 582.221962][ T5829] dump_header+0xfb/0x606 [ 582.221978][ T5829] oom_kill_process.cold+0xd/0x330 [ 582.221998][ T5829] out_of_memory+0x340/0x14f0 [ 582.222021][ T5829] ? __pfx_out_of_memory+0x10/0x10 [ 582.222044][ T5829] mem_cgroup_out_of_memory+0xc6/0x130 [ 582.222061][ T5829] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 582.222077][ T5829] ? find_held_lock+0x2b/0x80 [ 582.222101][ T5829] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.222121][ T5829] ? _raw_spin_unlock+0x28/0x50 [ 582.222145][ T5829] try_charge_memcg+0x652/0xc90 [ 582.222170][ T5829] ? __pfx_try_charge_memcg+0x10/0x10 [ 582.222194][ T5829] ? find_held_lock+0x2b/0x80 [ 582.222214][ T5829] ? rcu_read_unlock+0x17/0x60 [ 582.222240][ T5829] ? rcu_read_unlock+0x17/0x60 [ 582.222263][ T5829] charge_memcg+0xa6/0x280 [ 582.222283][ T5829] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 582.222300][ T5829] __swap_cache_prepare_and_add+0x528/0x9e0 [ 582.222325][ T5829] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 582.222342][ T5829] ? __pfx_swap_entry_swapped+0x10/0x10 [ 582.222367][ T5829] swap_cache_alloc_folio+0x1cb/0x300 [ 582.222385][ T5829] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 582.222404][ T5829] ? rcu_is_watching+0x12/0xc0 [ 582.222427][ T5829] swap_cluster_readahead+0x411/0x770 [ 582.222448][ T5829] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 582.222469][ T5829] ? update_cfs_rq_load_avg+0x51/0x550 [ 582.222502][ T5829] ? get_vma_policy+0x23f/0x3b0 [ 582.222525][ T5829] swapin_readahead+0x160/0x12c0 [ 582.222549][ T5829] ? __pfx_swapin_readahead+0x10/0x10 [ 582.222564][ T5829] ? find_held_lock+0x2b/0x80 [ 582.222584][ T5829] ? swap_table_get+0x103/0x2c0 [ 582.222599][ T5829] ? swap_table_get+0x103/0x2c0 [ 582.222617][ T5829] ? swap_table_get+0x10d/0x2c0 [ 582.222633][ T5829] ? swap_cache_get_folio+0x1ae/0x600 [ 582.222650][ T5829] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 582.222665][ T5829] ? __pfx_get_swap_device+0x10/0x10 [ 582.222689][ T5829] ? do_swap_page+0xb2e/0x68e0 [ 582.222704][ T5829] do_swap_page+0xb2e/0x68e0 [ 582.222729][ T5829] ? __pfx_do_swap_page+0x10/0x10 [ 582.222746][ T5829] ? __free_object+0x2a8/0x400 [ 582.222765][ T5829] ? lockdep_hardirqs_on+0x78/0x100 [ 582.222781][ T5829] ? rcu_is_watching+0x12/0xc0 [ 582.222800][ T5829] ? __pte_offset_map+0x179/0x310 [ 582.222822][ T5829] __handle_mm_fault+0x18c1/0x2b60 [ 582.222842][ T5829] ? reacquire_held_locks+0xce/0x1e0 [ 582.222859][ T5829] ? __pfx___handle_mm_fault+0x10/0x10 [ 582.222878][ T5829] ? lock_vma_under_rcu+0x17c/0x590 [ 582.222906][ T5829] handle_mm_fault+0x36d/0xa20 [ 582.222926][ T5829] do_user_addr_fault+0x5a3/0x12f0 [ 582.222953][ T5829] exc_page_fault+0x6f/0xd0 [ 582.222968][ T5829] asm_exc_page_fault+0x26/0x30 [ 582.222983][ T5829] RIP: 0033:0x7f46acf5c84e [ 582.222996][ T5829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.223010][ T5829] RSP: 002b:00007ffc1ad72c98 EFLAGS: 00010246 [ 582.223022][ T5829] RAX: 0000000000000000 RBX: 000055556b9b7500 RCX: 00007f46acf5c84e [ 582.223031][ T5829] RDX: 00007ffc1ad72cf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.223040][ T5829] RBP: 00007ffc1ad72d5c R08: 0000000000000000 R09: 0000000000000000 [ 582.223048][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 582.223056][ T5829] R13: 00000000000927c0 R14: 000000000008dfbe R15: 00007ffc1ad72db0 [ 582.223075][ T5829] [ 582.993077][ T5829] memory: usage 3072kB, limit 3072kB, failcnt 176839 [ 583.009967][ T5829] memory+swap: usage 3540kB, limit 9007199254740988kB, failcnt 0 [ 583.034644][ T5829] kmem: usage 2912kB, limit 9007199254740988kB, failcnt 0 [ 583.056115][ T5829] Memory cgroup stats for /syz2: [ 583.056221][ T5829] cache 0 [ 583.084496][ T5829] rss 24576 [ 583.087654][ T5829] rss_huge 0 [ 583.091680][ T5829] shmem 0 [ 583.094602][ T5829] mapped_file 0 [ 583.118438][ T5829] dirty 0 [ 583.121386][ T5829] writeback 0 [ 583.124645][ T5829] workingset_refault_anon 22698 [ 583.149395][ T5829] workingset_refault_file 42373 [ 583.175985][ T5829] swap 483328 [ 583.179305][ T5829] swapcached 801218560 [ 583.183348][ T5829] pgpgin 480493 [ 583.205985][ T5829] pgpgout 495938 [ 583.209543][ T5829] pgfault 425279 [ 583.213061][ T5829] pgmajfault 7136 [ 583.242896][ T5829] inactive_anon 40960 [ 583.266462][ T5829] active_anon 0 [ 583.269934][ T5829] inactive_file 0 [ 583.273539][ T5829] active_file 0 [ 583.306047][ T5829] unevictable 0 [ 583.309524][ T5829] hierarchical_memory_limit 3145728 [ 583.314694][ T5829] hierarchical_memsw_limit 9223372036854771712 [ 583.349851][ T5829] total_cache 0 [ 583.353328][ T5829] total_rss 24576 [ 583.374747][ T5829] total_rss_huge 0 [ 583.406101][ T5829] total_shmem 0 [ 583.409574][ T5829] total_mapped_file 0 [ 583.413525][ T5829] total_dirty 0 [ 583.427565][ T5829] total_writeback 0 [ 583.436139][ T5829] total_workingset_refault_anon 22698 [ 583.459353][ T5829] total_workingset_refault_file 42373 [ 583.486908][ T5829] total_swap 483328 [ 583.490887][ T5829] total_swapcached 801218560 [ 583.495449][ T5829] total_pgpgin 480493 [ 583.526799][ T5829] total_pgpgout 495938 [ 583.530877][ T5829] total_pgfault 425279 [ 583.534918][ T5829] total_pgmajfault 7136 [ 583.557232][T15362] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1801'. [ 583.576197][ T5829] total_inactive_anon 40960 [ 583.586200][ T5829] total_active_anon 0 [ 583.590181][ T5829] total_inactive_file 0 [ 583.594307][ T5829] total_active_file 0 [ 583.627122][ T5829] total_unevictable 0 [ 583.636243][ T5829] anon_cost 98 [ 583.639621][ T5829] file_cost 0 [ 583.656546][ T5829] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1797,pid=15332,uid=0 [ 583.706722][ T5829] Memory cgroup out of memory: Killed process 15332 (syz.2.1797) total-vm:131940kB, anon-rss:1260kB, file-rss:21564kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 585.813624][T15374] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.145807][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.169564][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.223757][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.277765][T11665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.298708][T11665] rtc rtc0: __rtc_set_alarm: err=-22 [ 587.957674][T15418] __vm_enough_memory: pid: 15418, comm: syz.0.1811, bytes: 4398046511104 not enough memory for the allocation [ 589.546106][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 589.582853][T15445] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1817'. [ 592.069102][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 592.143867][T15493] veth1_vlan: entered allmulticast mode [ 592.683022][T15506] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 593.353895][T15483] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 593.472350][T15519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.782490][T15055] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 595.237388][T15531] rtc_cmos 00:00: Alarms can be up to one day in the future [ 595.842740][T15527] Bluetooth: hci1: command 0x0c1a tx timeout [ 595.925313][T15574] openvswitch: HfR: Dropping previously announced user features [ 596.145004][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 596.183839][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 596.236768][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 596.287486][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 596.325490][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 597.706130][T15611] FAULT_INJECTION: forcing a failure. [ 597.706130][T15611] name failslab, interval 1, probability 0, space 0, times 0 [ 597.777098][T15611] CPU: 0 UID: 0 PID: 15611 Comm: syz.0.1851 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.777125][T15611] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.777131][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.777139][T15611] Call Trace: [ 597.777145][T15611] [ 597.777150][T15611] dump_stack_lvl+0x100/0x190 [ 597.777176][T15611] should_fail_ex.cold+0x5/0xa [ 597.777193][T15611] should_failslab+0xc2/0x120 [ 597.777215][T15611] __kmalloc_cache_noprof+0x7a/0x6f0 [ 597.777230][T15611] ? vkms_plane_duplicate_state+0x87/0x130 [ 597.777257][T15611] vkms_plane_duplicate_state+0x87/0x130 [ 597.777278][T15611] drm_atomic_get_plane_state+0x279/0x760 [ 597.777305][T15611] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 597.777324][T15611] ? trace_contention_end+0x140/0x180 [ 597.777345][T15611] ? __mutex_lock+0x26a/0x1b90 [ 597.777361][T15611] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 597.777379][T15611] ? drm_master_internal_acquire+0x21/0x80 [ 597.777413][T15611] drm_client_modeset_commit_locked+0x14d/0x580 [ 597.777434][T15611] drm_client_modeset_commit+0x4f/0x80 [ 597.777451][T15611] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 597.777471][T15611] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 597.777490][T15611] drm_fbdev_client_restore+0x1b/0x30 [ 597.777512][T15611] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 597.777533][T15611] drm_client_dev_restore+0x205/0x2a0 [ 597.777553][T15611] drm_release+0x2c6/0x360 [ 597.777569][T15611] ? __pfx_drm_release+0x10/0x10 [ 597.777584][T15611] __fput+0x3ff/0xb40 [ 597.777602][T15611] task_work_run+0x150/0x240 [ 597.777622][T15611] ? __pfx_task_work_run+0x10/0x10 [ 597.777646][T15611] exit_to_user_mode_loop+0x100/0x4a0 [ 597.777665][T15611] do_syscall_64+0x668/0xf80 [ 597.777680][T15611] ? clear_bhb_loop+0x40/0x90 [ 597.777698][T15611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.777712][T15611] RIP: 0033:0x7f171099bf79 [ 597.777725][T15611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.777739][T15611] RSP: 002b:00007f17118c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 597.777753][T15611] RAX: 0000000000000000 RBX: 00007f1710c15fa0 RCX: 00007f171099bf79 [ 597.777762][T15611] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 597.777770][T15611] RBP: 00007f1710a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 597.777778][T15611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.777786][T15611] R13: 00007f1710c16038 R14: 00007f1710c15fa0 R15: 00007ffef6007558 [ 597.777805][T15611] [ 598.434593][T15626] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 598.494255][T15527] Bluetooth: hci1: command 0x0c1a tx timeout [ 598.848799][T15636] bond0: invalid ARP target specified [ 599.839930][T15628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 600.184008][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 600.235433][T15654] zswap: compressor not available [ 600.275821][T15659] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1861'. [ 603.396176][T15686] input: jJǸ-J86 as /devices/virtual/input/input30 [ 603.529311][T15690] binder: 15689:15690 ioctl c018620c 0 returned -1 [ 604.086715][T15055] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 604.757105][T15707] zswap: compressor not available [ 604.787190][T15700] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 605.025523][T15717] FAULT_INJECTION: forcing a failure. [ 605.025523][T15717] name fail_futex, interval 1, probability 0, space 0, times 0 [ 605.114418][T15717] CPU: 0 UID: 0 PID: 15717 Comm: syz.1.1870 Tainted: G U L syzkaller #0 PREEMPT(full) [ 605.114446][T15717] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 605.114451][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.114461][T15717] Call Trace: [ 605.114466][T15717] [ 605.114473][T15717] dump_stack_lvl+0x100/0x190 [ 605.114499][T15717] should_fail_ex.cold+0x5/0xa [ 605.114517][T15717] get_futex_key+0x1d2/0x1620 [ 605.114535][T15717] ? __pfx_get_futex_key+0x10/0x10 [ 605.114559][T15717] futex_wake+0xea/0x530 [ 605.114580][T15717] ? __pfx_futex_wake+0x10/0x10 [ 605.114603][T15717] ? putname+0xb1/0x110 [ 605.114623][T15717] ? kmem_cache_free+0x124/0x6a0 [ 605.114644][T15717] do_futex+0x32b/0x350 [ 605.114661][T15717] ? __pfx_do_futex+0x10/0x10 [ 605.114676][T15717] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.114694][T15717] ? __fget_files+0x21f/0x3d0 [ 605.114716][T15717] __x64_sys_futex+0x34f/0x4d0 [ 605.114733][T15717] ? __x64_sys_openat+0x12d/0x210 [ 605.114749][T15717] ? __pfx___x64_sys_futex+0x10/0x10 [ 605.114773][T15717] do_syscall_64+0x106/0xf80 [ 605.114789][T15717] ? clear_bhb_loop+0x40/0x90 [ 605.114807][T15717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.114822][T15717] RIP: 0033:0x7f1d7c59bf79 [ 605.114835][T15717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.114850][T15717] RSP: 002b:00007f1d7d4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 605.114865][T15717] RAX: ffffffffffffffda RBX: 00007f1d7c815fa8 RCX: 00007f1d7c59bf79 [ 605.114875][T15717] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d7c815fac [ 605.114884][T15717] RBP: 00007f1d7c815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 605.114893][T15717] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 605.114901][T15717] R13: 00007f1d7c816038 R14: 00007ffe18d91f60 R15: 00007ffe18d92048 [ 605.114920][T15717] [ 606.757559][T15055] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 606.924580][T15735] bridge0: port 4(veth0_to_bridge) entered blocking state [ 607.231802][T15735] bridge0: port 4(veth0_to_bridge) entered disabled state [ 607.354702][T15735] veth0_to_bridge: entered allmulticast mode [ 607.483369][T15735] veth0_to_bridge: entered promiscuous mode [ 607.604741][T15735] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.847514][T15735] bridge0: port 4(veth0_to_bridge) entered blocking state [ 607.854758][T15735] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 609.049737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.062097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.074382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.086613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.098843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.111191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.123540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.135781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.148037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.160271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.061567][ C0] net_ratelimit: 16205 callbacks suppressed [ 614.061584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.079769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.092115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.104334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.116557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.128758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.140979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.153203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.165411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.177600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.017702][ C0] sched: DL replenish lagged too much [ 619.074098][ C0] net_ratelimit: 16007 callbacks suppressed [ 619.074114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.092290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.104519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.116744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.128945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.141165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.153362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.165581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.177766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.189979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.086664][ C0] net_ratelimit: 16005 callbacks suppressed [ 624.086682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.104824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.117063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.129270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.141478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.153687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.166477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.178701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.190911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.203126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.682702][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.036236][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.099802][ C0] net_ratelimit: 9116 callbacks suppressed [ 629.099820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.117912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.130173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.143164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.155368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.167604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.180589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.192810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.205065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.218053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.111530][ C0] net_ratelimit: 9130 callbacks suppressed [ 634.111547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.130354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.142576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.154836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.167773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.180001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.192304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.205247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.217449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.229671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.123903][ C0] net_ratelimit: 9001 callbacks suppressed [ 639.123922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.142017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.154955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.167181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.179433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.192376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.204577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.216820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.229757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.241969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.136968][ C0] net_ratelimit: 8887 callbacks suppressed [ 644.136985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.155089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.167358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.180432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.192655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.204931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.217978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.230208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.242458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.255506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.149745][ C0] net_ratelimit: 8945 callbacks suppressed [ 649.149763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.167856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.180201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.193844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.206098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.218342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.231304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.243517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.255751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.268691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.161545][ C0] net_ratelimit: 9070 callbacks suppressed [ 654.161562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.180550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.192928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.205165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.218112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.230311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.242547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.255462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.267657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.279882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.174305][ C0] net_ratelimit: 9051 callbacks suppressed [ 659.174323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.192400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.204662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.217645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.229863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.242106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.255114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.267331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.279676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.292730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.187045][ C0] net_ratelimit: 9224 callbacks suppressed [ 664.187063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.205142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.217409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.230352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.242566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.254793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.267757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.280280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.292527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.305478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.198942][ C0] net_ratelimit: 9398 callbacks suppressed [ 669.198959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.217025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.229280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.242216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.254408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.266629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.279606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.291810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.304077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.317012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.212329][ C0] net_ratelimit: 9494 callbacks suppressed [ 674.212347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.230447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.242710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.256137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.268366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.280597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.293553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.305754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.317994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.330979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.224056][ C0] net_ratelimit: 9588 callbacks suppressed [ 679.224073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.242136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.255050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.267227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.279453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.292374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.304587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.316807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.329717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.341893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.236616][ C0] net_ratelimit: 9682 callbacks suppressed [ 684.236635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.254719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.267208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.280176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.292367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.304578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.317506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.329686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.341948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.354875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.248964][ C0] net_ratelimit: 9582 callbacks suppressed [ 689.248981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.267090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.280058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.292274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.304538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.318006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.330241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.342471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.355514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.367721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.262335][ C0] net_ratelimit: 9511 callbacks suppressed [ 694.262352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.280443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.292691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.305637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.317826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.330074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.343003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.355208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.367422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.380349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.274359][ C0] net_ratelimit: 9521 callbacks suppressed [ 699.274378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.292387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.304617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.317540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.329737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.341997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.354906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.367113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.379341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.392259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.286820][ C0] net_ratelimit: 9698 callbacks suppressed [ 704.286837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.304889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.317132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.330081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.342296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.354598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.367502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.379719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.391928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.404857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.299393][ C0] net_ratelimit: 9626 callbacks suppressed [ 709.299410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.317491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.329720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.342711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.354938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.367192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.380144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.392356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.404574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.417540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.311726][ C0] net_ratelimit: 9521 callbacks suppressed [ 714.311742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.329775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.342029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.354955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.367155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.379391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.392542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.404751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.416964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.429885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.324796][ C0] net_ratelimit: 9533 callbacks suppressed [ 719.324814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.342842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.355051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.367954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.380123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.392356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.405280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.417607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.429833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.442791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.943428][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.959047][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.337289][ C0] net_ratelimit: 9410 callbacks suppressed [ 724.337305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.355392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.367719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.380742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.392989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.405219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.418176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.430370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.442646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.455638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.349196][ C0] net_ratelimit: 9575 callbacks suppressed [ 729.349212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.367249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.379464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.392404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.404631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.417135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.430043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.442320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.454634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.467798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.362157][ C0] net_ratelimit: 9494 callbacks suppressed [ 734.362176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.380230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.392478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.405438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.417660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.429904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.442842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.455058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.467313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.480393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 739.374335][ C0] net_ratelimit: 9494 callbacks suppressed [ 739.374352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 739.392391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.404619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.417561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 739.429746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.441977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.454913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 739.467092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.479304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.492237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.414483][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 740.421445][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15143/1:b..l [ 740.429823][ C0] rcu: (detected by 0, t=10502 jiffies, g=100121, q=2524 ncpus=1) [ 740.437700][ C0] task:kworker/u11:10 state:R running task stack:25128 pid:15143 tgid:15143 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 740.452147][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 740.458132][ C0] Call Trace: [ 740.461392][ C0] [ 740.464305][ C0] __schedule+0xfee/0x60e0 [ 740.468707][ C0] ? sbitmap_queue_get_shallow+0x223/0x340 [ 740.474504][ C0] ? __pfx___schedule+0x10/0x10 [ 740.479332][ C0] ? mark_held_locks+0x40/0x70 [ 740.484078][ C0] preempt_schedule_irq+0x50/0x90 [ 740.489081][ C0] irqentry_exit+0x17b/0x670 [ 740.493651][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.499620][ C0] RIP: 0010:lock_release+0x19e/0x320 [ 740.504892][ C0] Code: ff 65 0f c1 05 cb 29 28 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d e2 27 12 0f 85 63 01 00 00 48 83 c4 [ 740.524478][ C0] RSP: 0018:ffffc90004666d00 EFLAGS: 00000206 [ 740.530523][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e92e0 RCX: ffffc90004666d0c [ 740.538477][ C0] RDX: 0000000000000005 RSI: ffffffff8de4db86 RDI: ffffffff8c1ace20 [ 740.546427][ C0] RBP: ffffffff81b79dde R08: 0000000000000001 R09: 0000000000000007 [ 740.554377][ C0] R10: 0000000000000200 R11: 0000000000017e3e R12: ffff8880353fbc80 [ 740.562337][ C0] R13: ffffc90004666db8 R14: 0000000000000202 R15: 0000000000000006 [ 740.570290][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 740.575481][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 740.580487][ C0] ? save_stack+0x162/0x1e0 [ 740.584976][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 740.591115][ C0] arch_stack_walk+0x94/0xf0 [ 740.595692][ C0] ? __reset_page_owner+0x84/0x190 [ 740.600790][ C0] stack_trace_save+0x8e/0xc0 [ 740.605452][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 740.610814][ C0] ? __lock_acquire+0x4a5/0x2630 [ 740.615733][ C0] ? __lock_acquire+0x4a5/0x2630 [ 740.620651][ C0] save_stack+0x162/0x1e0 [ 740.624967][ C0] ? __pfx_save_stack+0x10/0x10 [ 740.629806][ C0] ? page_ext_put+0x3e/0xd0 [ 740.634295][ C0] __reset_page_owner+0x84/0x190 [ 740.639217][ C0] __free_frozen_pages+0x7ca/0x10a0 [ 740.644399][ C0] qlist_free_all+0x47/0xe0 [ 740.648888][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 740.654332][ C0] __kasan_slab_alloc+0x69/0x90 [ 740.659168][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 740.664610][ C0] ? ext4_init_io_end+0x24/0x170 [ 740.669533][ C0] ext4_init_io_end+0x24/0x170 [ 740.674279][ C0] ext4_do_writepages+0x9cf/0x3f50 [ 740.679377][ C0] ? enqueue_to_backlog+0x5f3/0xfa0 [ 740.684555][ C0] ? __lock_acquire+0x4a5/0x2630 [ 740.689482][ C0] ? __lock_acquire+0x4a5/0x2630 [ 740.694406][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 740.699947][ C0] ? ext4_writepages+0x347/0x790 [ 740.704864][ C0] ext4_writepages+0x347/0x790 [ 740.709608][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 740.714887][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 740.720157][ C0] do_writepages+0x278/0x600 [ 740.724729][ C0] ? __pfx_do_writepages+0x10/0x10 [ 740.729820][ C0] __writeback_single_inode+0x164/0x13c0 [ 740.735435][ C0] ? find_held_lock+0x2b/0x80 [ 740.740100][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 740.746145][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 740.751328][ C0] writeback_sb_inodes+0x72e/0x1bf0 [ 740.756519][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 740.762154][ C0] ? __pfx___up_read+0x10/0x10 [ 740.766899][ C0] ? __writeback_inodes_wb+0x104/0x2d0 [ 740.772340][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 740.777522][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 740.783314][ C0] wb_writeback+0x755/0xbe0 [ 740.787804][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 740.792810][ C0] ? get_nr_inodes+0x100/0x150 [ 740.797560][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.802771][ C0] wb_workfn+0x8c6/0xc00 [ 740.807013][ C0] ? try_to_wake_up+0x160/0x1a80 [ 740.811943][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 740.816706][ C0] ? rcu_is_watching+0x12/0xc0 [ 740.821463][ C0] process_one_work+0x9d7/0x1920 [ 740.826396][ C0] ? __pfx_process_one_work+0x10/0x10 [ 740.831769][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 740.836533][ C0] worker_thread+0x5da/0xe40 [ 740.841121][ C0] ? kthread+0x13a/0x450 [ 740.845354][ C0] ? __pfx_worker_thread+0x10/0x10 [ 740.850453][ C0] kthread+0x370/0x450 [ 740.854508][ C0] ? __pfx_kthread+0x10/0x10 [ 740.859087][ C0] ret_from_fork+0x754/0xd80 [ 740.863666][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 740.868767][ C0] ? __switch_to+0x7b4/0x1120 [ 740.873425][ C0] ? __pfx_kthread+0x10/0x10 [ 740.878000][ C0] ret_from_fork_asm+0x1a/0x30 [ 740.882754][ C0] [ 740.885764][ C0] rcu: rcu_preempt kthread starved for 216 jiffies! g100121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 740.896847][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 740.906795][ C0] rcu: RCU grace-period kthread stack dump: [ 740.912660][ C0] task:rcu_preempt state:R running task stack:28264 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 740.926125][ C0] Call Trace: [ 740.929384][ C0] [ 740.932297][ C0] __schedule+0xfee/0x60e0 [ 740.936694][ C0] ? __lock_acquire+0x4a5/0x2630 [ 740.941620][ C0] ? __pfx___schedule+0x10/0x10 [ 740.946448][ C0] ? find_held_lock+0x2b/0x80 [ 740.951112][ C0] ? schedule+0x2bf/0x390 [ 740.955424][ C0] schedule+0xdd/0x390 [ 740.959471][ C0] schedule_timeout+0x127/0x280 [ 740.964304][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 740.969661][ C0] ? __pfx_process_timeout+0x10/0x10 [ 740.974932][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 740.980723][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 740.986164][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 740.990907][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 740.996173][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 741.001093][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 741.006269][ C0] ? rcu_is_watching+0x12/0xc0 [ 741.011017][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 741.016810][ C0] rcu_gp_kthread+0x179/0x230 [ 741.021465][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 741.026644][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 741.032436][ C0] ? __kthread_parkme+0x18c/0x230 [ 741.037441][ C0] ? kthread+0x13a/0x450 [ 741.041666][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 741.046841][ C0] kthread+0x370/0x450 [ 741.050895][ C0] ? __pfx_kthread+0x10/0x10 [ 741.055468][ C0] ret_from_fork+0x754/0xd80 [ 741.060042][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 741.065136][ C0] ? __switch_to+0x7b4/0x1120 [ 741.069792][ C0] ? __pfx_kthread+0x10/0x10 [ 741.074366][ C0] ret_from_fork_asm+0x1a/0x30 [ 741.079117][ C0] [ 741.082113][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 741.088417][ C0] CPU: 0 UID: 0 PID: 3407 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 741.099699][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 741.104865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.114897][ C0] Workqueue: bat_events batadv_dat_purge [ 741.120516][ C0] RIP: 0010:kasan_quarantine_put+0x95/0x240 [ 741.126397][ C0] Code: 00 00 00 00 00 48 03 5a 10 48 89 5a 10 48 81 fb 00 00 10 00 0f 87 8d 00 00 00 4d 85 e4 75 75 9c 58 f6 c4 02 0f 85 72 01 00 00 <5b> b8 01 00 00 00 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 9c 58 f6 c4 [ 741.145983][ C0] RSP: 0018:ffffc90000007110 EFLAGS: 00000246 [ 741.152028][ C0] RAX: 0000000000000002 RBX: 00000000000ff980 RCX: 0000000000000004 [ 741.159976][ C0] RDX: 0000000000000000 RSI: ffffffff8de73b43 RDI: ffffffff8c1ace20 [ 741.167922][ C0] RBP: ffff88801eae38c0 R08: 0000000000000001 R09: 0000000000000000 [ 741.175871][ C0] R10: 0000000000000001 R11: 00000000000075db R12: 0000000000000200 [ 741.183816][ C0] R13: ffff8881543cc000 R14: ffffffff8953861a R15: 0000000000000000 [ 741.191765][ C0] FS: 0000000000000000(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 741.200671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.207231][ C0] CR2: 00007fff5aa1bf52 CR3: 0000000032a40000 CR4: 00000000003526f0 [ 741.215181][ C0] Call Trace: [ 741.218440][ C0] [ 741.221262][ C0] ? kfree_skbmem+0x19a/0x210 [ 741.225920][ C0] kmem_cache_free+0x124/0x6a0 [ 741.230750][ C0] ? skb_release_data+0x7a0/0x9d0 [ 741.235754][ C0] kfree_skbmem+0x19a/0x210 [ 741.240240][ C0] consume_skb+0xd1/0x110 [ 741.244551][ C0] netlink_broadcast_filtered+0x3cc/0xf50 [ 741.250254][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 741.256474][ C0] ? __pfx_fdb_fill_info+0x10/0x10 [ 741.261564][ C0] ? __alloc_skb+0x4e9/0x710 [ 741.266129][ C0] ? __alloc_skb+0x5b7/0x710 [ 741.270697][ C0] nlmsg_notify+0xb1/0x290 [ 741.275096][ C0] fdb_notify+0xfb/0x190 [ 741.279319][ C0] br_fdb_update+0x324/0x720 [ 741.283892][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 741.288990][ C0] br_handle_frame_finish+0xc75/0x1f00 [ 741.294430][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 741.300305][ C0] ? __lock_acquire+0x4a5/0x2630 [ 741.305223][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 741.310315][ C0] ? nf_hook_slow+0x167/0x220 [ 741.314971][ C0] br_nf_hook_thresh+0x30d/0x420 [ 741.319889][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 741.325762][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 741.331200][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 741.337072][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 741.342946][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 741.348823][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 741.354780][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 741.360656][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 741.366009][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 741.371878][ C0] ? lock_acquire+0x1cf/0x380 [ 741.376539][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 741.383016][ C0] ? net_generic+0xea/0x2a0 [ 741.387500][ C0] br_nf_pre_routing+0x93b/0x1510 [ 741.392511][ C0] br_handle_frame+0xcdd/0x1520 [ 741.397346][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 741.402612][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 741.408486][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 741.413748][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 741.420411][ C0] ? mark_held_locks+0x40/0x70 [ 741.425157][ C0] ? kmem_cache_free+0x124/0x6a0 [ 741.430074][ C0] ? skb_release_data+0x7a0/0x9d0 [ 741.435077][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 741.442171][ C0] ? kfree_skbmem+0x19f/0x210 [ 741.446827][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 741.452002][ C0] ? ip6_mc_input+0x51a/0xf50 [ 741.456662][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 741.461675][ C0] ? __lock_acquire+0x4a5/0x2630 [ 741.466593][ C0] ? process_backlog+0x32a/0x1580 [ 741.471599][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 741.477389][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 741.483786][ C0] ? lock_acquire+0x1cf/0x380 [ 741.488442][ C0] ? process_backlog+0x32a/0x1580 [ 741.493448][ C0] ? process_backlog+0x32a/0x1580 [ 741.498455][ C0] __netif_receive_skb+0x1f/0x120 [ 741.503463][ C0] process_backlog+0x37a/0x1580 [ 741.508301][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 741.513659][ C0] net_rx_action+0xa40/0xf20 [ 741.518238][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 741.523333][ C0] ? find_held_lock+0x2b/0x80 [ 741.527994][ C0] ? try_to_wake_up+0x154/0x1a80 [ 741.532913][ C0] ? try_to_wake_up+0x154/0x1a80 [ 741.537832][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 741.543007][ C0] ? sched_clock+0x38/0x60 [ 741.547402][ C0] ? sched_clock_cpu+0x6c/0x570 [ 741.552242][ C0] ? mark_held_locks+0x40/0x70 [ 741.556996][ C0] handle_softirqs+0x1eb/0x9e0 [ 741.561740][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 741.567003][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 741.572791][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 741.578405][ C0] do_softirq+0xac/0xe0 [ 741.582538][ C0] [ 741.585445][ C0] [ 741.588355][ C0] __local_bh_enable_ip+0xf8/0x120 [ 741.593444][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 741.599062][ C0] batadv_dat_purge+0x4b/0xa0 [ 741.603719][ C0] process_one_work+0x9d7/0x1920 [ 741.608649][ C0] ? __pfx_process_one_work+0x10/0x10 [ 741.614008][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 741.619363][ C0] rescuer_thread+0x902/0x1490 [ 741.624113][ C0] ? rescuer_thread+0x23d/0x1490 [ 741.629035][ C0] ? rescuer_thread+0x118/0x1490 [ 741.633952][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 741.639133][ C0] ? __kthread_parkme+0x18c/0x230 [ 741.644136][ C0] ? kthread+0x13a/0x450 [ 741.648360][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 741.653537][ C0] kthread+0x370/0x450 [ 741.657586][ C0] ? __pfx_kthread+0x10/0x10 [ 741.662155][ C0] ret_from_fork+0x754/0xd80 [ 741.666731][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 741.671828][ C0] ? __switch_to+0x7b4/0x1120 [ 741.676483][ C0] ? __pfx_kthread+0x10/0x10 [ 741.681055][ C0] ret_from_fork_asm+0x1a/0x30 [ 741.685804][ C0] [ 744.386680][ C0] net_ratelimit: 6756 callbacks suppressed [ 744.386697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.404805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.417840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.430068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.442373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.455367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.467574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.479844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.492817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.505030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.399536][ C0] net_ratelimit: 8821 callbacks suppressed [ 749.399554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.417604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.429859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.442879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.455096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.467373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.480384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.492621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.504855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.517812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)