last executing test programs: 8.236330701s ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r1, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x9, 0x1e, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) r3 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) getdents$auto(0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffff81, 0x3, 0x8, "5dab41bc930ce4302fecfaed408ba460f9c99920cd2e831c03c8a46777fc382d486abeac1c28b8c9866a3d96c21db74d23d625a9cee20fbab331e3d7d8ef063497cf7e80bdb99952604ba9edb42092614136badff825e7d2713dfb180a3facacc86a8e6c739a2dd0886fa23dcc5ac838a80e5f7578fc9e5835663f1c79158dc254411ce281edde7764fa3734"}, 0xa) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES8=0x0, @ANYRESHEX=r3], 0x1ac}}, 0x800) io_uring_setup$auto(0x80002, &(0x7f0000000100)={0x8001, 0xfffffff9, 0x2, 0xfe2, 0x2, 0x5, r3, [0x6, 0x40000009, 0x2], {0x20008, 0x5, 0x3, 0x2, 0x1, 0xe256, 0x2, 0x81, 0xed20}, {0x2, 0x8, 0x0, 0x1, 0x9, 0x800, 0x9f32, 0x100e1a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) (async) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r1, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x9, 0x1e, 0x0, 0x0) (async) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(r2, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) (async) socket(0x10, 0x3, 0x6) (async) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) getdents$auto(0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffff81, 0x3, 0x8, "5dab41bc930ce4302fecfaed408ba460f9c99920cd2e831c03c8a46777fc382d486abeac1c28b8c9866a3d96c21db74d23d625a9cee20fbab331e3d7d8ef063497cf7e80bdb99952604ba9edb42092614136badff825e7d2713dfb180a3facacc86a8e6c739a2dd0886fa23dcc5ac838a80e5f7578fc9e5835663f1c79158dc254411ce281edde7764fa3734"}, 0xa) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES8=0x0, @ANYRESHEX=r3], 0x1ac}}, 0x800) (async) io_uring_setup$auto(0x80002, &(0x7f0000000100)={0x8001, 0xfffffff9, 0x2, 0xfe2, 0x2, 0x5, r3, [0x6, 0x40000009, 0x2], {0x20008, 0x5, 0x3, 0x2, 0x1, 0xe256, 0x2, 0x81, 0xed20}, {0x2, 0x8, 0x0, 0x1, 0x9, 0x800, 0x9f32, 0x100e1a}}) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 8.003999676s ago: executing program 1 (id=607): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) socket(0x2, 0x1, 0x106) (async, rerun: 64) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x800, 0x0) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000440)="0db1") (rerun: 32) ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) (async, rerun: 32) socket(0xa, 0x3, 0x3) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x6) (async) socket(0x21, 0x80003, 0x200) (async) socket(0x10, 0x2, 0x0) (async) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0xb) 6.013019417s ago: executing program 1 (id=619): pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000240)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0943b28e00e9c2f919d54fe990911e4c265c3d23eb66229", 0x83) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000380)={0x3ff, 0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x4f) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)=@link_update={r0, @new_prog_fd=r1, 0x7fffffff, @old_prog_fd=r2}, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)=ANY=[@ANYBLOB="af89fe62", @ANYRES16=r4, @ANYBLOB="5da929bd7000fcdbdf2502000000040002000800010005000000"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x400841, 0x0) prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x5, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc24, 0x0, 0x0, 0x6, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x100000000000]}, 0x1fc, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x9, 0x6, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x408003, 0x0) r7 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r7, &(0x7f0000000580)=""/4096, 0x1000) 5.120900712s ago: executing program 2 (id=623): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000500)=@sco={0x1f, @none}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000540)="f9d7351557144d1cdfd20c64a14fea03b8337c9e40ea2a854ba524e7642aba114b68b4a8ec0fa5a793db3179ad5fa794f8ddfe27a012cbf6f3878652bccd16e3a564cdc0f83b2570ca54d423036dbbebbdf8e00ef6c486cb743121ec5c90b0d375f67f57e299f3f040a7a8d618b8af613c82d9a473d9d042c3eae547c1cbe5942e717a48a59f46d71f9c763cd0f0708458e65cccfbf7c8ad22e916cf1e1441f0e558a173002898f35272c6c6cf3cc650b416bd2374daa690ee2ab30a200b880ecb4b1343498adce1f96a4b996fa02f8ec675a1af0e2395dcdb6577546a9af6b75ceae304f2edfd9100"/243, 0xf3) semctl$auto(0x0, 0xe3, 0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x3d, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB="01002dbf7000f9dbdf250100000006000200000000000500070080000000080009000600000008000a000800000014002000fe80000000000000000000000000003a"], 0x48}, 0x1, 0x0, 0x0, 0x4048080}, 0x400c004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="b4000000f50170cdd1b28cc7a261ce9128783361ede4650c5a9aa36b671c372015da1c7311b80db0c68bb26b4696a0854d94ede80e5d132215dbe3d590b9243dd09e1fb47772fbe9bf55add161cfd3741d4c10e44eb90200041892c547a9693f5d6c0fd4ef0a018ef74696299730daed0a4e9644c210dff2aacb28", @ANYRES16=r4, @ANYBLOB="000127bd7000fbdbdf252e00000098002d808800bc8004000a8004003f800c002400000000000100000004008700480bca85894721ccb20c32580b54a7f63ac2c3bf0fca07b7f1e8bb2d60376436eba28e6d028d7731d86fb3d5a6f9cbc7a8debdb338acbfb1da4a1215a35beda4f5ecff637e025722f1477992044c54baf7c9221f503cba6d4cb10f499d14868c2f7bd239c6b0b4a204009d8009008f007d302827000000000500190100000000"], 0xb4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) getsockname$auto(r5, &(0x7f0000000080)=@ax25={0x3, @default, 0x4}, &(0x7f0000000040)=0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r6, 0x7, 0x6}, 0x4, 0x100000) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r6) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="22b98019b3506ff901032ebd7000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0xc0184d08, r9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/binderfs/binder1\x00', 0x40, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r10, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010326bd7000fbdbdd2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) 4.947738433s ago: executing program 1 (id=625): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0x401, 0x5, 0x4, @inferred, @integer={0x4, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xb1V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x00\x00\x00\x00\x00\x00\x00\aD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfab\xdf>f\xb8&\x959\x01\x01\x00\x00w\xe2\x9cK\fE\'\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20000054) (async) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000140)=0x7fffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto(r4, 0x5, r3) (async) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="251729bd7000fcdbc725010000000c0006000400060000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00') sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="05000f00070000000500290000000000050024000a00000008000d00090000000600090002600200"], 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x8010) (async) r7 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r7, 0x5220, 0x0) (async) set_mempolicy$auto(0x7ffe, &(0x7f0000000280)=0x3, 0x4) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r8) (async) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r8, 0x0, 0x64810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) (async) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) (async) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) (async) r9 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f00000003c0), 0x604001, 0x0) preadv$auto(r9, &(0x7f0000000080)={0x0, 0x2}, 0x6, 0x4, 0x205) 4.853017203s ago: executing program 0 (id=626): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000010c0), 0xa0042, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/neigh/gre0/delay_first_probe_time\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x8, 0x7, 0x0, 0xa, 0x800002) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r3, 0x802064b8, r3) mmap$auto(0x0, 0x200006, 0x6, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) 4.546325892s ago: executing program 1 (id=627): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0xa, 0x0) mbind$auto(0x0, 0xa, 0x100000000, 0x0, 0x10, 0x1000000) (async) mbind$auto(0x0, 0xa, 0x100000000, 0x0, 0x10, 0x1000000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x20301, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000280)={0xb8e, 0x3, {0x5, 0xe3, 0x2, {0x5, 0x3}, {0x80, 0x6}, @ramp={0x9, 0xf18f, {0x9, 0x10, 0x1, 0xfffe}}}, {0xffff, 0x2, 0x5, {0xc8}, {0xfff, 0xb4b8}, @constant={0x0, {0x4, 0x400, 0x3, 0x9}}}}) (async) ioctl$auto_UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000280)={0xb8e, 0x3, {0x5, 0xe3, 0x2, {0x5, 0x3}, {0x80, 0x6}, @ramp={0x9, 0xf18f, {0x9, 0x10, 0x1, 0xfffe}}}, {0xffff, 0x2, 0x5, {0xc8}, {0xfff, 0xb4b8}, @constant={0x0, {0x4, 0x400, 0x3, 0x9}}}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef) mmap$auto(0x0, 0x2400c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) timer_create$auto(0x3, 0x0, 0x0) (async) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x1}, {0x0, 0x97}}, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) (async) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f3, 0x400, 0x9}]}) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r3, 0x405c5503, 0x81) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.03159133s ago: executing program 2 (id=629): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/seg6_require_hmac\x00', 0x44e42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = io_uring_setup$auto(0x85, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x3b72, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r4, 0x541a, 0x38) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd7000fbdbdf2507000005000000080000007900fe0204000600040006000400060006000100ffff00000400060004000600"], 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x4) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x10, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) 3.815985413s ago: executing program 0 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x2, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000003a40)=""/4096, 0x1000) r3 = getpgid(0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x384, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x35b, 0x7, 0x0, 0x1, [@generic="ea7972c6542addc25a0cba9710467f", @nested={0x347, 0x61, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @ipv4=@multicast2}, @generic="9f2ab4f468538de7338ae0d2bffe6f919f53a4b5473ba20c58bc2a5bec420a215d37a2799144ace5ed89206b4057dff05a0eff79474736bbb91f7a453baae08081c8a18a006f5923be0ad9803ff010c181d87b32b7a0c572281dcb047eebf01c574dbe995f1005605b8a24bdd950c702403c297dbfc3b1730a88888590dfeee4b5d64fa3af47ec6e7898d9b067fefc19e55e12e24846cc1a53fe579eec54c0e776ab59d1c51b61f439f748d6f351a4a0989878990220681b6583cab57437b930947197bc531224c2f2c89b1e16c7be6c8453dbac615aa76d9b4a075549fe6b2f96af0a4523d439c0486c066941f2bac6ccf9d46318139587da288e", @generic="3e80c36b8a663c4429a822459668aa1450a2fa052500637378402dae9297122e700bbf3a449381640f570a2ed9bb85c650b9901aaf8658f5e117f66792c0dca98458683772d4c9b1f3adc38309967aa81e151931396262255eeb1af38809a614c7128ad59091cd9537f7f8f75388c16969fab95305c3691e331056df6938d72206f0a4cc642aaf2b5b1da7d8c7a2ad1b340cdba89c548fb36e65e2d1b7b53b7b50a0e88a4df65d41b84f38709396a5c338ea11db", @typed={0xe, 0x78, 0x0, 0x0, @str='&+$\x12#-/\x7f,\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @pid}, @nested={0x173, 0x44, 0x0, 0x1, [@nested={0x20, 0xa5, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x80}, @typed={0xc, 0xd3, 0x0, 0x0, @u64=0xc}, @nested={0x4, 0x143}, @nested={0x4, 0x2c}]}, @generic="f1dbc46dee74a0478965a3bd3fcd26a1b6f00c9276fbc6480815a667662f8bd8cc70a18fb322533fcbcc8bc6315ccd96071504219a764ba990b71361fea346ab72e5e7143d211d034c8e9cb5d57c339dc3e8d72c70bc52f7a54b3dd17863bd059622b3e06d0474118296e08f37d075523a04c05a929120a5fd78ce72855d097201b7bd1caac1bcea8fdd5ff3187c622fe79fe97079e0559967fd28ec053da8ce4da8eedbbebb3870ef471084e27d8cd3ea1435aaac7aaf1faee2d50bfa77b16239d638194c93ac638c4f0c08dbf646a031ec4aeb655e", @nested={0x72, 0x12f, 0x0, 0x1, [@nested={0x4, 0x93}, @nested={0x4, 0x10f}, @nested={0x4, 0x149}, @generic="beac0b984ddc777ef7b817064011131a1b83e6b285dc4a5cda089dc365ce89152f303a400993d976782165a1aac30c3cdcc7acbd8dddd8061b851be0e1e2258be82c", @nested={0x4, 0x1e}, @nested={0x4, 0x7f}, @nested={0x4, 0x113}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x713}, @nested={0x4, 0x61}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r3}]}, @generic="cc42319591"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x384}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) shmctl$auto_SHM_INFO(0x200, 0xe, &(0x7f0000000240)={{0xff, 0x0, 0xee00, 0x9, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0x234e, 0xe96, @inferred=r3, @raw=0x5, 0x4, 0x0, &(0x7f00000000c0)="e62cc06a886ade48adf24a7999086a1ffd1d60d056ac511e5e8eba85a6ebdcc8136df876eb47a4f96ba019981d85fabf07987c0a2b8a28979383592ab71870d84a618809243a30037de7b69c55bdc2a6f34a05d9eb8639dcb59907ee01c5d3dcd3eb2e12aac04497777d4026d253de3ed5573ec0a6e86963f1ba60682e956e9861fa05d1a7a1c24d67478c8d7e95960f033a58eb7aa7d0978d190540daf6", &(0x7f0000000180)="07d529145e2be00049bf0e869f6ce685524384518c55b1c4c0f13ef5598b00b00b2e76a5dbadcaffd0d6426295457dc9a416f4c14fa77139bfe823fdee2e0aa9464aab3009341cce388e65d75afbfdd75617f52c9653a9b1a5206e98972286e2e54ba985f0fcc22d75d5a2f419a10598dea569ca40d8f43e5667d92e028a60942b1c87c96f16bcb0cf72b220158fce6a4a88b260a9fb332ccf4598a9c829cc9240da0dde2dacf838"}) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x9, 0x14, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0x9) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x908, r5, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_MLO_LINKS={0x8ec, 0x138, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @fd=r2}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_MLO_SUPPORT={0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xc4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x2}, @NL80211_ATTR_QOS_MAP={0xc9, 0xc7, "1678373984f58216b81f17daa0752eb3154488903467abb56d01ccdd083652b8ba7fe47abcccbd76dd810c01b83db19e285abb7fee5e2be646c3367cc33267febfbb25c78edc774f44d208f21262544f279bf7b55a1bd1456b4a1df2c98ab935d58dd12ff9098212c6894f16cf2827ff2e0b52dbb5ff8f427be837f445d414a8ccb5eefe08a3ba062e151d583c3b6718b2d4216a27b8c2117c75e6e1adc67fdefdb65c3baa9a677694dfb3254d239d23820152c2aaa0b4506b7c4bb2168643c7ed06941229"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf8}, @NL80211_ATTR_SAE_PASSWORD={0x2e, 0x115, "0f56b33fea70ebc770ca36de3f4a05d15b94d9fcf016786aa3090bcca15bb8bcab0eb5684d6c65e40b20"}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xde8}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x27}, @NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, "76f0cd9f023fc558824799636e77c37ad92bbd5950e346c1019465d2fcd8cd3fbf3c0ad54f8a600dbae7e388f1572a0c1e69689ebf105fb114"}, @NL80211_ATTR_PMKID={0x92, 0x55, "81744467330fec87d6d9f78f300c479781d3746223816d10cf8a7f653cc16fdd7c988077cbe658a223dda15310042cd7f48639ba8893a558e4f8d5bce3bf905b32ed9b30d5d144a1eb8ccaaa45bf77560121f495e2c27eda8d75c81a67358f5a5af307e2f4c715cf04c834529bed3039896304a58b1636ba0938a48929426b749932f79bf774d959bd247f90349e"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffff77f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x5}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x4}]}, {0x484, 0x0, 0x0, 0x1, [@NL80211_ATTR_MBSSID_ELEMS={0x1c2, 0x133, 0x0, 0x1, [@nested={0x18, 0x1f, 0x0, 0x1, [@typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@local}]}, @nested={0x24, 0x8c, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x32}]}, @generic="c4d1c0552e0fc0865fe87c04e6830348ea6b92cb343ff74bd4a2696743f166837acf6325c9f25501e7c56fb792512f7cdf286cc6cf98663ffe7790dd8ba1c5be8e691c627a423acdc40cd3053abe6e3f9fba3d8ded58969ebaa36903a437238bc13b94c3578c46261b38046d0581", @nested={0x111, 0x35, 0x0, 0x1, [@generic="21fa6d1a74c9e4dab89164853e80ade7fb911438d3b26131622790954ef23afd71f52f8fcf9f3de8bd5aeb3365c39de2543807173a4d4f6f927093607cd684bcafb69cad53796649a2bfe36373a53cbc0f170c1fc83b05bb0162446e6fa97e02ca9548d153ce794cb8e7943f100872b8bd1460cc46f565a7eb32176e7a154d6a6ab35341c571d423121879e7b8fb4adb6cb39c89207b3414afad89699c073671a68c7670879d9b65706651d2cdbc0176", @generic, @typed={0xe, 0xf1, 0x0, 0x0, @str='&+$\x12#-/\x7f,\x00'}, @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x39, 0x150, 0x0, 0x0, @binary="65704d7885506b7cb8ff9411f2987c6344965744a30cccf45f978bb956aa2c24529117cdbdfa52d54d0ec770b771263fe325c8cb58"}, @generic="bfd0be396c5a67950b"]}]}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_QOS_MAP={0xcb, 0xc7, "5323b9f0810d959773bd0bf761dc69788f1f38d7ee7cb0e4b4103937777097d46421ef5c9676765477ad6829ae1fd645f12be644ae2d1360b6ff3a9b8564d514557347edf1c167106f3eca798bba8e62b48042d5a2e9e97e49f0caf614e3e08d435ef1a9a89f9fd6ad72aca5033fc4b9f129636bfcd29b4aa47e18d4f14e68e06cdab946b61f46648e3cf992acda9b2e2356036619c90af8b31a8d90520c7b3331b5c9988e04117a2b8686ad339d5ea1a9b0432d41926c8580a96b08f5ecd035f48a37ee8000e9"}, @NL80211_ATTR_MLD_ADDR={0x5e, 0x13a, "8f6afaad0a50be5ae2125b1c7b731e7a5378dd3d748da405c9eef0dd7e40bea623233f5b367c33c0f30873db32387ba6272ca1df181750cc3780f33e2b360479778de63056c8f1130cced02b3715973d87f8a17dfd25ba11e09e"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x185, 0x7f, "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"}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_ATTR_MLD_ADDR={0xbe, 0x13a, "44d92f9f2ea93ad4963f4a717d6e376af3b8b1363644c04c9a4bdd0456780ccb517bb0b1ded280f5965f873c76138a2920c8141fe013e4cfbf28e93da9150cac509c48370cbd4cc711629e6bf7ba88f85833f50b3348f933061cdd5d8bbc29943c293915d03961ed305a76e90a05ca6a3b43bba50a9afae29fee76d6bba132922a2973d73db7ca2ed43de0d6c14e1bf0af27948d63e6a21555269aefb53be04734c4ba2f931c234e29f539a3e5e9b9b80c34b58891f2f4f254f8"}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffb}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x1}, @NL80211_ATTR_MLD_ADDR={0x74, 0x13a, "3906b831ea8c316f14334e9b8e2ca9d331cc77a1ac36af46d82f610e1d0472027cb78bc1ec97383c8d378c16729a511e52ae16ebcf656c6094b17a4108683ce45938c4e16c3587d35b74a7ab8380fd87c5e14ad1cc181269235b096ccdac4312709e52090f9a493090dd20fbf431472b"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x9f}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x9b, 0xba, "9e81db642c3c1924ed8ae932ebff37e7c5313693c7e3c0f5ee4410ce8f18415ac490273f953b8a8b0faf353b0542d2321fa9d942a61e0c973cbc0ff60cb979c86f01164252eabdc586e255edd292c9940a91dd8fb009b870d474a11aacb5575c3d2757166f49b05f37e5b0bae4eefc9c577fb7ee5cf22ce35a052651c69da55d7590572fb66785afb5a349639fc756c10b6917b5f01eb6"}]}]}]}, 0x908}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 3.378648793s ago: executing program 0 (id=632): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58190000", @ANYRES16=r1, @ANYBLOB="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"], 0x878}, 0x1, 0x0, 0x0, 0x4002095}, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) 3.283586539s ago: executing program 3 (id=633): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x2c}}, 0x400c000) (async) r1 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) mmap$auto(0xf, 0x8002000c, 0xdf, 0x20eb1, r1, 0xffffffffffffff80) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x2) inotify_add_watch$auto(r2, 0x0, 0x80000000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/serio/drivers/rainshadow-cec/bind_mode\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp6\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xd, 0x80000000000b) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) r5 = socket(0x1f, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/15/per_cpu_count\x00', 0x1f1481, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x1) 3.072994888s ago: executing program 3 (id=634): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x82, 0x0) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x40, 0x0, 0x110) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/dev_snmp6/veth0_vlan\x00', 0x14002, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) capset$auto(&(0x7f0000000180)={0xfffffff7, 0xffffffffffffffff}, &(0x7f00000001c0)={0xfffffffd, 0x9, 0xfffffff7}) mq_notify$auto(r0, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000140)="961a899e713c9ce4ed033712f5d8325f5c2593f5b74536cd4a615c930fab05498600101cccb3561f3b86cc729779e13d923dd4b2", @inferred=r1, 0xfe4, @_tid=r2}) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone3$auto(0x0, 0x52) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_PRIORITY(r3, 0x101, 0xc, 0x0, 0x4) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000030c0)=""/4087, 0x106a) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000080) r5 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r5, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) 2.946399153s ago: executing program 1 (id=635): writev$auto(0x3, 0x0, 0x8009) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x81, 0x3, 0x1, 0xf1, r0, 0x7ffe) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0) read$auto(r2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) mmap$auto(0x1000000000000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7600) mmap$auto(0x291873b4, 0x80000001, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) fstatfs$auto(r0, &(0x7f0000000200)={0x4, 0x0, 0x0, 0xff, 0x4, 0x400, 0x5, {[0xf, 0x3]}, 0x7ff, 0x0, 0x0, [0x9, 0x7083, 0xfffffffffffffff7, 0x7]}) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0xe2, 0x2) (async) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0419ee6f861c535520dce73fd17dbad804f95caea976545c54a30316befdf46c4ef01c07e0b7e8b6620b96579d69fff84f65f63ea", @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf2506000000620015006c9494dac43d643512a1ea35e34b6a161a7bb80865b419ec3b7615f329548b343d4cf1cf4851b45cefd3d5876a57b9400319a8000171a70964e13fd9c10196fba675ebc39e13b38f75bdedd1c360ad7c1450125887d0ff3f9766989a320c0000"], 0x78}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000000) (async) unshare$auto(0x40000080) (async) mmap$auto(0xf0, 0x3, 0x4000000000e1, 0x40eb1, 0xffffffffffffffff, 0x7) (async) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x40, 0x0, 0x110) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) read$auto(0x3, 0x0, 0xf34) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8008000) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bad_blocks\x00', 0x8000, 0x0) read$auto(r6, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0xffd8) 2.51038414s ago: executing program 2 (id=636): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0xc, 0xffffffff80000000, 0x7, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="13", @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x1ac}}, 0x4004) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/driver/usbserial\x00', 0x302, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10002) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x52980, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x4, 0x477) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250100000008000b00001e000108000100"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/arp_all_targets\x00', 0x140902, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x7fff) close_range$auto(0x2, 0x8, 0x0) 2.375195299s ago: executing program 0 (id=637): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = prctl$auto_PR_SET_MM_ENV_END(0x7, 0xb, 0x0, 0x6, 0x400) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r1, 0x8010661b, &(0x7f0000000000)="a848666314a976a7467d987f0bbaa77e") write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x8000000012, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 2.124591417s ago: executing program 2 (id=638): mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d55745eff6aa689e859dcaeff39bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54de46e25986315b30956face49e26e8dcbcc9e1363627a9f38a2ee8304307dab4013d77f4c337551e2a6ac230788513cdd15e734263e4973c75757d9809c510977adc3be6c5b110597b09c7dad1f54e4506744710b53221e4a7982ac4c59bfae6370258b5af7864a4ca680addd736e35da579cc0e975e6cdefa3d082c8b4b10b205", 0xd42) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x8, 0x5, 0x9, 0x40eb1, r0, 0x300000000000) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x80, 0x101, 0x5, 0x2}, {0x100, 0x20001, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) read$auto(r3, &(0x7f00000001c0)='?\x00', 0x8) mknod$auto(&(0x7f0000000000)='./file0\x00', 0x7f, 0x6) move_mount$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xffffffff, 0x48}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0, @raw=0x80000000}}) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1.428131346s ago: executing program 3 (id=639): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x9, 0x806121, 0x800000200a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x6) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.40262408s ago: executing program 0 (id=640): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) io_destroy$auto(0x4) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r5, 0x0, 0x1) 1.132433603s ago: executing program 0 (id=641): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0x4000000df, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x4, 0x9, 0x2000000000000dd, 0x9b72, r0, 0x7ffd) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_TIMESTAMPING_NEW(r1, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0x28) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x6) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose12/iflink\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/138, 0x8a) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0xc014) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 1.027808354s ago: executing program 2 (id=642): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x800001b, 0x0, 0x0, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[], 0xc0}}, 0x40480d0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x2c, 0x0, 0x56b) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315}, 0x1) getsockopt$auto_SO_NO_CHECK(r5, 0xfffffffb, 0xb, &(0x7f0000000480)='E\x00\x00\x00\x00\x04\x00\x00\x00\x12Z*\xfb\x182\t\xf24\xd84\xaa\xa5V\xfc0x0}) r4 = set_tid_address$auto(&(0x7f0000000140)=0x2) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f00000037c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003780)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4350000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="cf901c330818d3241d2b119adb124c7bd33dfbc1928079e6c1ee03f92b3af585a475c5ed280bcad127665c504bb3cdc76b2c741d887a8881e7bb8801c50301d5ca9ae28359a6d696a4dc001f809102016197804e1bc6811a35c2e9e221b9224bc224c1bb0e27c6375a88f2fd5a71967cf3cb3bc6af6742c1978df780822d6bedd2eef024eb7260488125e7881f2f408453f8d125c942f511eb5d0b8294269ba84a0731919bc73ebd45fe26ffbd46f532f16cfde6a70b3ea571b280bd669f3fbb0d2dbc2f29728c4b46f1fb49fca43c693cce8583076444383974be22f98ed7c31c590426f55fd5feecf293488591e2e200f05ddccca87789b3f45d078e84eee2ab938793942fc115709a5d6622573b864a551b96e2620551aec77af28308002600", @ANYRES32=r3, @ANYBLOB="000000603302800c0068007f00000000000000ed1218804e9f9ab7b6abde5cb69981a653b48cb9d9b6f3120800a800", @ANYRES32=r1, @ANYBLOB="4c3a14fd143c8a7bc6a0255a0a79b280d66a1ad7b2ef4b9ec28df7610452d55d8ca4a47a56d53157396b3d5019148debcb074743dd85cb978c2233aaab1cc03767004f93f7c5eb927fa8872e394241842f04d93c76daf28721aed35300919d5d0efc1c437b5cb2d57809abef8165b31ae2f5f7783f0efe39db88b616e2239e3cd460325431fb8e9a855a5cc7f0993f67e19dc6e11567a1e68cd99203d8942af3889383ce1c96552a415041a0fb6c79dfd6792736fd5760cdba3bcb5c7d4816448269762b6e524b0169b846698454b04c99066725e56db8598b06080b32d6f33dbc92cae6d62d30269cba164f01323804c6a4ddd1ce04006f800800e500", @ANYRES32=r4, @ANYBLOB="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"], 0x35d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) madvise$auto(0x3f00000000000000, 0xffffffffffff0001, 0x15) 301.856414ms ago: executing program 3 (id=645): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttys0/power/runtime_status\x00', 0x1a1442, 0x0) write$auto(r1, &(0x7f0000000000)='9\x00d11V\xbe\x91!\x9ab2\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) read$auto(r1, 0x0, 0x80000000) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0xff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(&(0x7f0000000100)={0x180000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0xfe1a, {r0}}, 0xffffffffffffffc6) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x402440, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = fanotify_init$auto(0x65, 0x2) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) set_tid_address$auto(0x0) 0s ago: executing program 2 (id=646): mknod$auto(&(0x7f0000000200)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20e9, 0x103) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7fffffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) kernel console output (not intermixed with test programs): type=1800 audit(1763741905.710:3): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="members" dev="configfs" ino=11565 res=0 errno=0 [ 121.671464][ T6581] FAULT_INJECTION: forcing a failure. [ 121.671464][ T6581] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.830529][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(full) [ 121.830551][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.830559][ T6581] Call Trace: [ 121.830565][ T6581] [ 121.830571][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 121.830594][ T6581] should_fail_ex+0x512/0x640 [ 121.830619][ T6581] get_futex_key+0x1d0/0x1560 [ 121.830641][ T6581] ? __pfx_get_futex_key+0x10/0x10 [ 121.830660][ T6581] ? __pick_eevdf+0x30a/0x670 [ 121.830681][ T6581] futex_wait_setup+0x9d/0x550 [ 121.830700][ T6581] __futex_wait+0x193/0x2f0 [ 121.830714][ T6581] ? __pfx___futex_wait+0x10/0x10 [ 121.830726][ T6581] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 121.830742][ T6581] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.830764][ T6581] ? __pfx_futex_wake_mark+0x10/0x10 [ 121.830788][ T6581] ? find_held_lock+0x2b/0x80 [ 121.830805][ T6581] ? futex_private_hash_put+0xd5/0x190 [ 121.830824][ T6581] futex_wait+0xe8/0x380 [ 121.830836][ T6581] ? __pfx_futex_wait+0x10/0x10 [ 121.830859][ T6581] do_futex+0x229/0x350 [ 121.830878][ T6581] ? __pfx_do_futex+0x10/0x10 [ 121.830901][ T6581] __x64_sys_futex+0x1e0/0x4c0 [ 121.830922][ T6581] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.830941][ T6581] ? xfd_validate_state+0x61/0x180 [ 121.830959][ T6581] ? __pfx_ksys_write+0x10/0x10 [ 121.830981][ T6581] do_syscall_64+0xcd/0xfa0 [ 121.830999][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.831013][ T6581] RIP: 0033:0x7fb84538f749 [ 121.831025][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.831038][ T6581] RSP: 002b:00007fb8461ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.831052][ T6581] RAX: ffffffffffffffda RBX: 00007fb8455e6188 RCX: 00007fb84538f749 [ 121.831061][ T6581] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8455e6188 [ 121.831069][ T6581] RBP: 00007fb8455e6180 R08: 0000000000000000 R09: 0000000000000000 [ 121.831077][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.831084][ T6581] R13: 00007fb8455e6218 R14: 00007ffc7c6612c0 R15: 00007ffc7c6613a8 [ 121.831103][ T6581] [ 123.405131][ T6617] syz.3.150 uses obsolete (PF_INET,SOCK_PACKET) [ 123.879771][ T6619] syz.0.151 (6619) used greatest stack depth: 19720 bytes left [ 124.024663][ T6614] hub 1-0:1.0: USB hub found [ 124.074322][ T6614] hub 1-0:1.0: 1 port detected [ 124.220346][ T6640] FAULT_INJECTION: forcing a failure. [ 124.220346][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 124.340161][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 124.340183][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.340192][ T6640] Call Trace: [ 124.340197][ T6640] [ 124.340202][ T6640] dump_stack_lvl+0x16c/0x1f0 [ 124.340225][ T6640] should_fail_ex+0x512/0x640 [ 124.340246][ T6640] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 124.340264][ T6640] should_failslab+0xc2/0x120 [ 124.340283][ T6640] kmem_cache_alloc_noprof+0x75/0x6e0 [ 124.340297][ T6640] ? __pmd_alloc+0xbf/0x8b0 [ 124.340320][ T6640] ? __pmd_alloc+0xbf/0x8b0 [ 124.340337][ T6640] __pmd_alloc+0xbf/0x8b0 [ 124.340357][ T6640] __handle_mm_fault+0xada/0x2aa0 [ 124.340381][ T6640] ? mt_find+0x3e2/0xa20 [ 124.340400][ T6640] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.340420][ T6640] ? __pfx_mt_find+0x10/0x10 [ 124.340449][ T6640] ? find_vma+0xbf/0x140 [ 124.340465][ T6640] ? __pfx_find_vma+0x10/0x10 [ 124.340483][ T6640] handle_mm_fault+0x589/0xd10 [ 124.340505][ T6640] ? __pkru_allows_pkey+0x21/0xb0 [ 124.340529][ T6640] do_user_addr_fault+0x7a6/0x1370 [ 124.340544][ T6640] ? rcu_is_watching+0x12/0xc0 [ 124.340562][ T6640] exc_page_fault+0x64/0xc0 [ 124.340579][ T6640] asm_exc_page_fault+0x26/0x30 [ 124.340594][ T6640] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 124.340616][ T6640] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 124.340629][ T6640] RSP: 0018:ffffc90003eafaa0 EFLAGS: 00050202 [ 124.340641][ T6640] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000004 [ 124.340649][ T6640] RDX: fffff520007d5f61 RSI: 0000000000000001 RDI: ffffc90003eafb08 [ 124.340658][ T6640] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520007d5f61 [ 124.340666][ T6640] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 124.340674][ T6640] R13: ffffc90003eafb08 R14: 1ffff920007d5f76 R15: 0000000000000001 [ 124.340693][ T6640] _copy_from_user+0x98/0xd0 [ 124.340716][ T6640] vt_do_kdsk_ioctl+0x92/0xa90 [ 124.340734][ T6640] ? aa_get_newest_label+0xd2/0x250 [ 124.340764][ T6640] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 124.340783][ T6640] ? bpf_lsm_capable+0x9/0x10 [ 124.340802][ T6640] ? security_capable+0x7e/0x260 [ 124.340824][ T6640] vt_ioctl+0xbb9/0x30a0 [ 124.340842][ T6640] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.340861][ T6640] ? __pfx_vt_ioctl+0x10/0x10 [ 124.340881][ T6640] ? tomoyo_path_number_perm+0x295/0x580 [ 124.340907][ T6640] ? tomoyo_path_number_perm+0x18d/0x580 [ 124.340931][ T6640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.340954][ T6640] ? find_held_lock+0x2b/0x80 [ 124.340970][ T6640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.340995][ T6640] ? tty_jobctrl_ioctl+0x152/0xe00 [ 124.341016][ T6640] ? __pfx_vt_ioctl+0x10/0x10 [ 124.341034][ T6640] tty_ioctl+0x661/0x1680 [ 124.341052][ T6640] ? __pfx_tty_ioctl+0x10/0x10 [ 124.341073][ T6640] ? find_held_lock+0x2b/0x80 [ 124.341086][ T6640] ? hook_file_ioctl_common+0x145/0x410 [ 124.341105][ T6640] ? __fget_files+0x20e/0x3c0 [ 124.341122][ T6640] ? __pfx_tty_ioctl+0x10/0x10 [ 124.341138][ T6640] __x64_sys_ioctl+0x18e/0x210 [ 124.341160][ T6640] do_syscall_64+0xcd/0xfa0 [ 124.341178][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.341192][ T6640] RIP: 0033:0x7f0c82f8f749 [ 124.341203][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.341215][ T6640] RSP: 002b:00007f0c83e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.341228][ T6640] RAX: ffffffffffffffda RBX: 00007f0c831e6090 RCX: 00007f0c82f8f749 [ 124.341236][ T6640] RDX: 0000000000000001 RSI: 0000000000004b46 RDI: 0000000000000003 [ 124.341244][ T6640] RBP: 00007f0c83e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.341252][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.341260][ T6640] R13: 00007f0c831e6128 R14: 00007f0c831e6090 R15: 00007fffa97b33b8 [ 124.341279][ T6640] [ 125.959014][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 126.453210][ T6672] team0: Port device team_slave_0 removed [ 127.971000][ T6719] netlink: 330 bytes leftover after parsing attributes in process `syz.2.172'. [ 128.061501][ T6719] –õ\­: renamed from lo (while UP) [ 128.452889][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 129.118098][ T6747] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 129.222219][ T6745] netlink: 330 bytes leftover after parsing attributes in process `syz.3.179'. [ 129.594263][ T6759] mmap: syz.1.181 (6759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.012098][ T6795] zswap: compressor not available [ 131.454044][ T6809] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 131.841638][ T6811] mkiss: ax0: crc mode is auto. [ 132.794756][ T6844] bridge0: port 3(gretap0) entered blocking state [ 132.836283][ T6844] bridge0: port 3(gretap0) entered disabled state [ 132.911397][ T6844] gretap0: entered allmulticast mode [ 133.008918][ T6844] gretap0: entered promiscuous mode [ 133.072049][ T6844] bridge0: port 3(gretap0) entered blocking state [ 133.078708][ T6844] bridge0: port 3(gretap0) entered forwarding state [ 133.155591][ T6854] 0x000200000001-0xa29656a63616329 : "" [ 133.239593][ T6854] mtd: partition "" is out of reach -- disabled [ 133.364957][ T30] audit: type=1800 audit(1763742944.678:4): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.206" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 133.432635][ T6857] FAULT_INJECTION: forcing a failure. [ 133.432635][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 133.533849][ T6854] ftl_cs: FTL header not found. [ 133.647548][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT(full) [ 133.647571][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.647580][ T6857] Call Trace: [ 133.647585][ T6857] [ 133.647592][ T6857] dump_stack_lvl+0x16c/0x1f0 [ 133.647614][ T6857] should_fail_ex+0x512/0x640 [ 133.647635][ T6857] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 133.647653][ T6857] should_failslab+0xc2/0x120 [ 133.647673][ T6857] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 133.647689][ T6857] ? __d_alloc+0x32/0xae0 [ 133.647708][ T6857] ? __d_alloc+0x32/0xae0 [ 133.647722][ T6857] __d_alloc+0x32/0xae0 [ 133.647740][ T6857] d_alloc_pseudo+0x1c/0xc0 [ 133.647759][ T6857] alloc_file_pseudo+0xcf/0x230 [ 133.647780][ T6857] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 133.647816][ T6857] ? alloc_fd+0x471/0x7d0 [ 133.647834][ T6857] sock_alloc_file+0x50/0x210 [ 133.647852][ T6857] __sys_socket+0x1c0/0x260 [ 133.647871][ T6857] ? __pfx___sys_socket+0x10/0x10 [ 133.647889][ T6857] ? xfd_validate_state+0x61/0x180 [ 133.647907][ T6857] ? __pfx_ksys_write+0x10/0x10 [ 133.647926][ T6857] __x64_sys_socket+0x72/0xb0 [ 133.647950][ T6857] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.647967][ T6857] do_syscall_64+0xcd/0xfa0 [ 133.647987][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.648002][ T6857] RIP: 0033:0x7fb84538f749 [ 133.648013][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.648027][ T6857] RSP: 002b:00007fb846210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 133.648047][ T6857] RAX: ffffffffffffffda RBX: 00007fb8455e6090 RCX: 00007fb84538f749 [ 133.648058][ T6857] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 133.648066][ T6857] RBP: 00007fb845413f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.648074][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.648083][ T6857] R13: 00007fb8455e6128 R14: 00007fb8455e6090 R15: 00007ffc7c6613a8 [ 133.648103][ T6857] [ 135.520609][ T6894] [U]  [ 136.722968][ T6946] Invalid ELF header magic: != ELF [ 136.741729][ T6945] Invalid ELF header magic: != ELF [ 137.317974][ T6965] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 137.363746][ T6964] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 137.430715][ T6965] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 138.085930][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.095745][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.706216][ T6999] netlink: 354 bytes leftover after parsing attributes in process `syz.1.232'. [ 140.703910][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 141.500153][ T7080] ima: policy update failed [ 141.517539][ T30] audit: type=1802 audit(1763742952.824:5): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.252" res=0 errno=0 [ 143.543546][ T7136] netlink: 326 bytes leftover after parsing attributes in process `syz.0.265'. [ 144.558865][ T7154] FAULT_INJECTION: forcing a failure. [ 144.558865][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 144.639730][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 144.639752][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.639761][ T7154] Call Trace: [ 144.639766][ T7154] [ 144.639772][ T7154] dump_stack_lvl+0x16c/0x1f0 [ 144.639795][ T7154] should_fail_ex+0x512/0x640 [ 144.639817][ T7154] ? __kmalloc_noprof+0xca/0x880 [ 144.639841][ T7154] should_failslab+0xc2/0x120 [ 144.639860][ T7154] __kmalloc_noprof+0xdd/0x880 [ 144.639882][ T7154] ? lsm_blob_alloc+0x68/0x90 [ 144.639902][ T7154] ? lsm_blob_alloc+0x68/0x90 [ 144.639918][ T7154] lsm_blob_alloc+0x68/0x90 [ 144.639935][ T7154] security_prepare_creds+0x30/0x270 [ 144.639953][ T7154] prepare_creds+0x56f/0x7d0 [ 144.639975][ T7154] __sys_setuid+0x9a/0x440 [ 144.639992][ T7154] do_syscall_64+0xcd/0xfa0 [ 144.640011][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.640026][ T7154] RIP: 0033:0x7f5daf98f749 [ 144.640038][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.640051][ T7154] RSP: 002b:00007f5db08d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 144.640071][ T7154] RAX: ffffffffffffffda RBX: 00007f5dafbe5fa0 RCX: 00007f5daf98f749 [ 144.640081][ T7154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 144.640089][ T7154] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.640098][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.640106][ T7154] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffe111e68e8 [ 144.640126][ T7154] [ 145.323067][ T7170] FAULT_INJECTION: forcing a failure. [ 145.323067][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 145.391333][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.1.274 Not tainted syzkaller #0 PREEMPT(full) [ 145.391355][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.391363][ T7170] Call Trace: [ 145.391368][ T7170] [ 145.391373][ T7170] dump_stack_lvl+0x16c/0x1f0 [ 145.391396][ T7170] should_fail_ex+0x512/0x640 [ 145.391417][ T7170] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 145.391435][ T7170] should_failslab+0xc2/0x120 [ 145.391455][ T7170] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 145.391470][ T7170] ? __d_alloc+0x32/0xae0 [ 145.391490][ T7170] ? __d_alloc+0x32/0xae0 [ 145.391504][ T7170] __d_alloc+0x32/0xae0 [ 145.391522][ T7170] d_alloc_pseudo+0x1c/0xc0 [ 145.391542][ T7170] alloc_file_pseudo+0xcf/0x230 [ 145.391563][ T7170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 145.391584][ T7170] ? alloc_fd+0x471/0x7d0 [ 145.391601][ T7170] sock_alloc_file+0x50/0x210 [ 145.391618][ T7170] __sys_socket+0x1c0/0x260 [ 145.391637][ T7170] ? __pfx___sys_socket+0x10/0x10 [ 145.391656][ T7170] ? xfd_validate_state+0x61/0x180 [ 145.391681][ T7170] __x64_sys_socket+0x72/0xb0 [ 145.391699][ T7170] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.391716][ T7170] do_syscall_64+0xcd/0xfa0 [ 145.391735][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.391749][ T7170] RIP: 0033:0x7f5daf98f749 [ 145.391761][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.391774][ T7170] RSP: 002b:00007f5db08d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 145.391787][ T7170] RAX: ffffffffffffffda RBX: 00007f5dafbe5fa0 RCX: 00007f5daf98f749 [ 145.391796][ T7170] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 145.391805][ T7170] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.391813][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.391821][ T7170] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffe111e68e8 [ 145.391840][ T7170] [ 145.917746][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 145.951138][ T7195] vlan1: entered promiscuous mode [ 146.038359][ T7195] vlan1: entered allmulticast mode [ 146.108994][ T7195] veth0_vlan: entered allmulticast mode [ 147.806500][ T7246] FAULT_INJECTION: forcing a failure. [ 147.806500][ T7246] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 147.881396][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 147.881419][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.881428][ T7246] Call Trace: [ 147.881435][ T7246] [ 147.881441][ T7246] dump_stack_lvl+0x16c/0x1f0 [ 147.881471][ T7246] should_fail_ex+0x512/0x640 [ 147.881497][ T7246] should_fail_alloc_page+0xe7/0x130 [ 147.881522][ T7246] prepare_alloc_pages+0x3c2/0x610 [ 147.881542][ T7246] ? rcu_is_watching+0x12/0xc0 [ 147.881560][ T7246] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 147.881575][ T7246] ? kasan_save_stack+0x33/0x60 [ 147.881590][ T7246] ? css_rstat_updated+0x1c2/0x510 [ 147.881607][ T7246] ? __pfx_css_rstat_updated+0x10/0x10 [ 147.881625][ T7246] ? __lock_acquire+0x622/0x1c90 [ 147.881646][ T7246] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.881669][ T7246] ? __lock_acquire+0x622/0x1c90 [ 147.881690][ T7246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.881714][ T7246] ? policy_nodemask+0xea/0x4e0 [ 147.881734][ T7246] alloc_pages_mpol+0x1fb/0x550 [ 147.881754][ T7246] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 147.881778][ T7246] folio_alloc_mpol_noprof+0x36/0x2f0 [ 147.881800][ T7246] vma_alloc_folio_noprof+0xed/0x1e0 [ 147.881821][ T7246] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 147.881848][ T7246] do_pte_missing+0x2202/0x3ba0 [ 147.881870][ T7246] ? find_held_lock+0x2b/0x80 [ 147.881889][ T7246] __handle_mm_fault+0x1556/0x2aa0 [ 147.881916][ T7246] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.881939][ T7246] ? __pte_offset_map_lock+0x174/0x310 [ 147.881962][ T7246] ? find_held_lock+0x2b/0x80 [ 147.881984][ T7246] ? follow_page_pte+0x5cf/0x1390 [ 147.882008][ T7246] handle_mm_fault+0x589/0xd10 [ 147.882034][ T7246] __get_user_pages+0x54e/0x3530 [ 147.882062][ T7246] ? __pfx___get_user_pages+0x10/0x10 [ 147.882088][ T7246] populate_vma_page_range+0x267/0x3f0 [ 147.882109][ T7246] ? __pfx_populate_vma_page_range+0x10/0x10 [ 147.882139][ T7246] ? __pfx_find_vma_intersection+0x10/0x10 [ 147.882159][ T7246] ? do_mmap+0x69c/0x1210 [ 147.882179][ T7246] __mm_populate+0x1d8/0x380 [ 147.882201][ T7246] ? __pfx___mm_populate+0x10/0x10 [ 147.882222][ T7246] ? up_write+0x1b2/0x520 [ 147.882246][ T7246] vm_mmap_pgoff+0x37f/0x470 [ 147.882266][ T7246] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 147.882282][ T7246] ? fput+0x9b/0xd0 [ 147.882304][ T7246] ? __x64_sys_futex+0x1e0/0x4c0 [ 147.882322][ T7246] ? __x64_sys_futex+0x1e9/0x4c0 [ 147.882343][ T7246] ksys_mmap_pgoff+0x7d/0x5c0 [ 147.882359][ T7246] ? xfd_validate_state+0x61/0x180 [ 147.882382][ T7246] __x64_sys_mmap+0x125/0x190 [ 147.882405][ T7246] do_syscall_64+0xcd/0xfa0 [ 147.882425][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.882440][ T7246] RIP: 0033:0x7fb84538f749 [ 147.882453][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.882466][ T7246] RSP: 002b:00007fb846210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 147.882481][ T7246] RAX: ffffffffffffffda RBX: 00007fb8455e6090 RCX: 00007fb84538f749 [ 147.882490][ T7246] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 147.882499][ T7246] RBP: 00007fb845413f91 R08: 0000000000000002 R09: 0000000000008000 [ 147.882507][ T7246] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 147.882515][ T7246] R13: 00007fb8455e6128 R14: 00007fb8455e6090 R15: 00007ffc7c6613a8 [ 147.882536][ T7246] [ 148.957579][ T7279] FAULT_INJECTION: forcing a failure. [ 148.957579][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 149.011906][ T7279] CPU: 1 UID: 0 PID: 7279 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(full) [ 149.011929][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.011938][ T7279] Call Trace: [ 149.011943][ T7279] [ 149.011949][ T7279] dump_stack_lvl+0x16c/0x1f0 [ 149.011973][ T7279] should_fail_ex+0x512/0x640 [ 149.011994][ T7279] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 149.012012][ T7279] should_failslab+0xc2/0x120 [ 149.012032][ T7279] kmem_cache_alloc_noprof+0x75/0x6e0 [ 149.012054][ T7279] ? alloc_empty_file+0x55/0x1e0 [ 149.012078][ T7279] ? alloc_empty_file+0x55/0x1e0 [ 149.012096][ T7279] alloc_empty_file+0x55/0x1e0 [ 149.012117][ T7279] path_openat+0xda/0x2cb0 [ 149.012140][ T7279] ? __pfx_path_openat+0x10/0x10 [ 149.012156][ T7279] ? __lock_acquire+0xb8a/0x1c90 [ 149.012177][ T7279] do_filp_open+0x20b/0x470 [ 149.012193][ T7279] ? __pfx_do_filp_open+0x10/0x10 [ 149.012222][ T7279] ? alloc_fd+0x471/0x7d0 [ 149.012241][ T7279] do_sys_openat2+0x11b/0x1d0 [ 149.012261][ T7279] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.012280][ T7279] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.012306][ T7279] __x64_sys_openat+0x174/0x210 [ 149.012326][ T7279] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.012354][ T7279] do_syscall_64+0xcd/0xfa0 [ 149.012373][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.012387][ T7279] RIP: 0033:0x7f5daf98df90 [ 149.012399][ T7279] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 149.012412][ T7279] RSP: 002b:00007f5db08d6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 149.012426][ T7279] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5daf98df90 [ 149.012435][ T7279] RDX: 0000000000000002 RSI: 00007f5db08d6fa0 RDI: 00000000ffffff9c [ 149.012444][ T7279] RBP: 00007f5db08d6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 149.012452][ T7279] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.012461][ T7279] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffe111e68e8 [ 149.012481][ T7279] [ 149.398903][ T30] audit: type=1804 audit(1763742960.540:6): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.298" name="/newroot/79/file0" dev="tmpfs" ino=430 res=1 errno=0 [ 150.222442][ T7302] KVM: debugfs: duplicate directory 7302-3 [ 151.027455][ T7319] FAULT_INJECTION: forcing a failure. [ 151.027455][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 151.075162][ T7306] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 151.106679][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 151.106702][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.106711][ T7319] Call Trace: [ 151.106716][ T7319] [ 151.106721][ T7319] dump_stack_lvl+0x16c/0x1f0 [ 151.106744][ T7319] should_fail_ex+0x512/0x640 [ 151.106776][ T7319] should_failslab+0xc2/0x120 [ 151.106795][ T7319] kmem_cache_alloc_node_noprof+0x78/0x770 [ 151.106811][ T7319] ? zswap_store+0x850/0x2830 [ 151.106828][ T7319] ? zswap_store+0x850/0x2830 [ 151.106840][ T7319] zswap_store+0x850/0x2830 [ 151.106861][ T7319] ? __pfx_zswap_store+0x10/0x10 [ 151.106874][ T7319] ? folio_free_swap+0x141/0x4b0 [ 151.106894][ T7319] ? do_raw_spin_unlock+0x172/0x230 [ 151.106907][ T7319] ? _raw_spin_unlock+0x28/0x50 [ 151.106922][ T7319] ? folio_free_swap+0x19d/0x4b0 [ 151.106939][ T7319] ? __pfx_try_to_unmap+0x10/0x10 [ 151.106955][ T7319] swap_writeout+0x3f4/0x1090 [ 151.106981][ T7319] shrink_folio_list+0x3e50/0x4800 [ 151.107010][ T7319] ? __pfx_shrink_folio_list+0x10/0x10 [ 151.107036][ T7319] ? __lock_acquire+0x622/0x1c90 [ 151.107057][ T7319] ? __lock_acquire+0x622/0x1c90 [ 151.107078][ T7319] ? __lock_acquire+0x622/0x1c90 [ 151.107112][ T7319] ? find_held_lock+0x2b/0x80 [ 151.107133][ T7319] reclaim_folio_list+0xda/0x5d0 [ 151.107153][ T7319] ? __pfx_css_rstat_updated+0x10/0x10 [ 151.107172][ T7319] ? __pfx_reclaim_folio_list+0x10/0x10 [ 151.107201][ T7319] ? lru_gen_update_size+0x543/0xe10 [ 151.107227][ T7319] ? lru_gen_del_folio+0x32b/0x540 [ 151.107249][ T7319] reclaim_pages+0x3ec/0x570 [ 151.107264][ T7319] ? __pfx_reclaim_pages+0x10/0x10 [ 151.107276][ T7319] ? find_held_lock+0x2b/0x80 [ 151.107290][ T7319] ? madvise_cold_or_pageout_pte_range+0x73e/0x20d0 [ 151.107314][ T7319] madvise_cold_or_pageout_pte_range+0x14e5/0x20d0 [ 151.107343][ T7319] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 151.107365][ T7319] ? __lock_acquire+0x622/0x1c90 [ 151.107385][ T7319] ? __pfx_stack_trace_save+0x10/0x10 [ 151.107401][ T7319] ? css_rstat_updated+0x1c2/0x510 [ 151.107418][ T7319] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 151.107439][ T7319] walk_pgd_range+0xc05/0x1f50 [ 151.107469][ T7319] ? __pfx_walk_pgd_range+0x10/0x10 [ 151.107490][ T7319] __walk_page_range+0x163/0x820 [ 151.107508][ T7319] ? __lock_acquire+0xb8a/0x1c90 [ 151.107531][ T7319] walk_page_range_vma+0x2c7/0xa20 [ 151.107549][ T7319] ? __pfx_walk_page_range_vma+0x10/0x10 [ 151.107565][ T7319] ? find_held_lock+0x2b/0x80 [ 151.107587][ T7319] madvise_pageout+0x257/0x540 [ 151.107606][ T7319] ? __pfx_madvise_pageout+0x10/0x10 [ 151.107635][ T7319] ? mtree_range_walk+0x718/0xc00 [ 151.107654][ T7319] madvise_vma_behavior+0xb14/0x2d50 [ 151.107682][ T7319] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 151.107704][ T7319] ? __pfx_mt_find+0x10/0x10 [ 151.107726][ T7319] ? find_vma_prev+0xd3/0x150 [ 151.107753][ T7319] ? find_vma+0xbf/0x140 [ 151.107768][ T7319] ? __pfx_find_vma+0x10/0x10 [ 151.107786][ T7319] ? __lock_acquire+0x622/0x1c90 [ 151.107806][ T7319] madvise_walk_vmas+0x31f/0x9c0 [ 151.107829][ T7319] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 151.107855][ T7319] madvise_do_behavior+0x1e2/0x530 [ 151.107877][ T7319] ? __pfx_madvise_do_behavior+0x10/0x10 [ 151.107898][ T7319] ? down_read+0x13d/0x480 [ 151.107926][ T7319] do_madvise+0x176/0x240 [ 151.107945][ T7319] ? __pfx_do_madvise+0x10/0x10 [ 151.107963][ T7319] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 151.107987][ T7319] ? __fget_files+0x20e/0x3c0 [ 151.108009][ T7319] ? __pfx_ksys_write+0x10/0x10 [ 151.108028][ T7319] __x64_sys_madvise+0xa9/0x110 [ 151.108048][ T7319] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.108065][ T7319] do_syscall_64+0xcd/0xfa0 [ 151.108083][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.108098][ T7319] RIP: 0033:0x7f8c2738f749 [ 151.108110][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.108123][ T7319] RSP: 002b:00007f8c28289038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 151.108136][ T7319] RAX: ffffffffffffffda RBX: 00007f8c275e5fa0 RCX: 00007f8c2738f749 [ 151.108145][ T7319] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 151.108154][ T7319] RBP: 00007f8c28289090 R08: 0000000000000000 R09: 0000000000000000 [ 151.108162][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.108169][ T7319] R13: 00007f8c275e6038 R14: 00007f8c275e5fa0 R15: 00007ffeb3117068 [ 151.108189][ T7319] [ 151.868417][ T7335] vivid-000: ================= START STATUS ================= [ 151.876346][ T7335] vivid-000: Generate PTS: true [ 151.881263][ T7335] vivid-000: Generate SCR: true [ 151.886247][ T7335] tpg source WxH: 320x240 (Y'CbCr) [ 151.891466][ T7335] tpg field: 1 [ 151.894969][ T7335] tpg crop: (0,0)/320x240 [ 151.899298][ T7335] tpg compose: (0,0)/320x240 [ 151.904029][ T7335] tpg colorspace: 8 [ 151.907834][ T7335] tpg transfer function: 0/0 [ 151.912424][ T7335] tpg Y'CbCr encoding: 0/0 [ 151.916890][ T7335] tpg quantization: 0/0 [ 151.921048][ T7335] tpg RGB range: 0/2 [ 151.925239][ T7335] vivid-000: ================== END STATUS ================== [ 152.956632][ T7361] FAULT_INJECTION: forcing a failure. [ 152.956632][ T7361] name failslab, interval 1, probability 0, space 0, times 0 [ 153.021046][ T7361] CPU: 1 UID: 0 PID: 7361 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(full) [ 153.021067][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.021076][ T7361] Call Trace: [ 153.021082][ T7361] [ 153.021088][ T7361] dump_stack_lvl+0x16c/0x1f0 [ 153.021110][ T7361] should_fail_ex+0x512/0x640 [ 153.021135][ T7361] should_failslab+0xc2/0x120 [ 153.021154][ T7361] kmem_cache_alloc_node_noprof+0x78/0x770 [ 153.021170][ T7361] ? zswap_store+0x850/0x2830 [ 153.021187][ T7361] ? zswap_store+0x850/0x2830 [ 153.021199][ T7361] zswap_store+0x850/0x2830 [ 153.021220][ T7361] ? __pfx_zswap_store+0x10/0x10 [ 153.021233][ T7361] ? folio_free_swap+0x141/0x4b0 [ 153.021252][ T7361] ? do_raw_spin_unlock+0x172/0x230 [ 153.021266][ T7361] ? _raw_spin_unlock+0x28/0x50 [ 153.021281][ T7361] ? folio_free_swap+0x19d/0x4b0 [ 153.021298][ T7361] ? __pfx_try_to_unmap+0x10/0x10 [ 153.021314][ T7361] swap_writeout+0x3f4/0x1090 [ 153.021340][ T7361] shrink_folio_list+0x3e50/0x4800 [ 153.021370][ T7361] ? __pfx_shrink_folio_list+0x10/0x10 [ 153.021396][ T7361] ? __lock_acquire+0x622/0x1c90 [ 153.021417][ T7361] ? __lock_acquire+0x622/0x1c90 [ 153.021438][ T7361] ? __lock_acquire+0x622/0x1c90 [ 153.021481][ T7361] ? find_held_lock+0x2b/0x80 [ 153.021502][ T7361] reclaim_folio_list+0xda/0x5d0 [ 153.021522][ T7361] ? __pfx_css_rstat_updated+0x10/0x10 [ 153.021541][ T7361] ? __pfx_reclaim_folio_list+0x10/0x10 [ 153.021571][ T7361] ? lru_gen_update_size+0x543/0xe10 [ 153.021597][ T7361] ? lru_gen_del_folio+0x32b/0x540 [ 153.021619][ T7361] reclaim_pages+0x3ec/0x570 [ 153.021634][ T7361] ? __pfx_reclaim_pages+0x10/0x10 [ 153.021646][ T7361] ? find_held_lock+0x2b/0x80 [ 153.021660][ T7361] ? madvise_cold_or_pageout_pte_range+0x73e/0x20d0 [ 153.021685][ T7361] madvise_cold_or_pageout_pte_range+0x14e5/0x20d0 [ 153.021714][ T7361] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 153.021735][ T7361] ? __lock_acquire+0x622/0x1c90 [ 153.021756][ T7361] ? __pfx_stack_trace_save+0x10/0x10 [ 153.021772][ T7361] ? css_rstat_updated+0x1c2/0x510 [ 153.021789][ T7361] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 153.021810][ T7361] walk_pgd_range+0xc05/0x1f50 [ 153.021840][ T7361] ? __pfx_walk_pgd_range+0x10/0x10 [ 153.021860][ T7361] __walk_page_range+0x163/0x820 [ 153.021879][ T7361] ? __lock_acquire+0xb8a/0x1c90 [ 153.021902][ T7361] walk_page_range_vma+0x2c7/0xa20 [ 153.021920][ T7361] ? __pfx_walk_page_range_vma+0x10/0x10 [ 153.021936][ T7361] ? find_held_lock+0x2b/0x80 [ 153.021958][ T7361] madvise_pageout+0x257/0x540 [ 153.021977][ T7361] ? __pfx_madvise_pageout+0x10/0x10 [ 153.022006][ T7361] ? mas_next_slot+0x12d3/0x1cb0 [ 153.022028][ T7361] madvise_vma_behavior+0xb14/0x2d50 [ 153.022052][ T7361] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 153.022074][ T7361] ? __pfx_mt_find+0x10/0x10 [ 153.022096][ T7361] ? find_vma_prev+0xd3/0x150 [ 153.022119][ T7361] ? find_vma+0xbf/0x140 [ 153.022135][ T7361] ? __pfx_find_vma+0x10/0x10 [ 153.022152][ T7361] ? __lock_acquire+0x622/0x1c90 [ 153.022172][ T7361] madvise_walk_vmas+0x31f/0x9c0 [ 153.022196][ T7361] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 153.022221][ T7361] madvise_do_behavior+0x1e2/0x530 [ 153.022243][ T7361] ? __pfx_madvise_do_behavior+0x10/0x10 [ 153.022265][ T7361] ? down_read+0x13d/0x480 [ 153.022294][ T7361] do_madvise+0x176/0x240 [ 153.022313][ T7361] ? __pfx_do_madvise+0x10/0x10 [ 153.022331][ T7361] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 153.022355][ T7361] ? __fget_files+0x20e/0x3c0 [ 153.022377][ T7361] ? __pfx_ksys_write+0x10/0x10 [ 153.022397][ T7361] __x64_sys_madvise+0xa9/0x110 [ 153.022416][ T7361] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.022433][ T7361] do_syscall_64+0xcd/0xfa0 [ 153.022451][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.022497][ T7361] RIP: 0033:0x7f8c2738f749 [ 153.022509][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.022521][ T7361] RSP: 002b:00007f8c28289038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 153.022535][ T7361] RAX: ffffffffffffffda RBX: 00007f8c275e5fa0 RCX: 00007f8c2738f749 [ 153.022544][ T7361] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 153.022552][ T7361] RBP: 00007f8c28289090 R08: 0000000000000000 R09: 0000000000000000 [ 153.022560][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.022568][ T7361] R13: 00007f8c275e6038 R14: 00007f8c275e5fa0 R15: 00007ffeb3117068 [ 153.022588][ T7361] [ 153.799805][ T7373] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 154.715654][ T7405] dyndbg: expected <4096 bytes into control [ 154.794872][ T7412] dyndbg: bad flag-op , at start of  [ 154.832040][ T7412] dyndbg: flags parse failed [ 155.401551][ T7429] netlink: 108 bytes leftover after parsing attributes in process `syz.0.334'. [ 155.437978][ T7429] openvswitch: netlink: Flow key attr not present in new flow. syzkaller syzkaller login: [ 156.102011][ T7451] netlink: 338 bytes leftover after parsing attributes in process `syz.3.338'. [ 156.155288][ T7451] ipvlan1: entered allmulticast mode [ 156.182557][ T7451] veth0_vlan: entered allmulticast mode [ 158.953830][ T7530] random: crng reseeded on system resumption [ 160.968152][ T7584] FAULT_INJECTION: forcing a failure. [ 160.968152][ T7584] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.038537][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 161.038560][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.038568][ T7584] Call Trace: [ 161.038574][ T7584] [ 161.038580][ T7584] dump_stack_lvl+0x16c/0x1f0 [ 161.038603][ T7584] should_fail_ex+0x512/0x640 [ 161.038628][ T7584] get_futex_key+0x293/0x1560 [ 161.038648][ T7584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.038671][ T7584] ? __pfx_get_futex_key+0x10/0x10 [ 161.038686][ T7584] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 161.038709][ T7584] ? ktime_add_safe+0x60/0x70 [ 161.038731][ T7584] futex_lock_pi+0x1cc/0x7c0 [ 161.038755][ T7584] ? __pfx_futex_lock_pi+0x10/0x10 [ 161.038774][ T7584] ? __futex_wait+0x24b/0x2f0 [ 161.038791][ T7584] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 161.038833][ T7584] ? __pfx_futex_wake_mark+0x10/0x10 [ 161.038858][ T7584] ? __might_fault+0xe3/0x190 [ 161.038873][ T7584] ? __might_fault+0xe3/0x190 [ 161.038886][ T7584] ? __might_fault+0x13b/0x190 [ 161.038906][ T7584] do_futex+0x11a/0x350 [ 161.038926][ T7584] ? __pfx_do_futex+0x10/0x10 [ 161.038949][ T7584] __x64_sys_futex+0x1e0/0x4c0 [ 161.038970][ T7584] ? __pfx___x64_sys_futex+0x10/0x10 [ 161.038989][ T7584] ? xfd_validate_state+0x61/0x180 [ 161.039008][ T7584] ? __pfx_ksys_write+0x10/0x10 [ 161.039029][ T7584] do_syscall_64+0xcd/0xfa0 [ 161.039047][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.039061][ T7584] RIP: 0033:0x7f8c2738f749 [ 161.039073][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.039085][ T7584] RSP: 002b:00007f8c28289038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.039099][ T7584] RAX: ffffffffffffffda RBX: 00007f8c275e5fa0 RCX: 00007f8c2738f749 [ 161.039108][ T7584] RDX: 0000000000000004 RSI: 000000000000000d RDI: 0000000000000000 [ 161.039116][ T7584] RBP: 00007f8c27413f91 R08: 0000000000000000 R09: 0000000000000008 [ 161.039124][ T7584] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.039132][ T7584] R13: 00007f8c275e6038 R14: 00007f8c275e5fa0 R15: 00007ffeb3117068 [ 161.039151][ T7584] [ 162.087073][ T7612] capability: warning: `syz.0.375' uses deprecated v2 capabilities in a way that may be insecure [ 162.391766][ T7606] FAULT_INJECTION: forcing a failure. [ 162.391766][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 162.456683][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 162.456706][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.456715][ T7606] Call Trace: [ 162.456721][ T7606] [ 162.456727][ T7606] dump_stack_lvl+0x16c/0x1f0 [ 162.456750][ T7606] should_fail_ex+0x512/0x640 [ 162.456772][ T7606] ? __kmalloc_cache_noprof+0x5f/0x780 [ 162.456789][ T7606] should_failslab+0xc2/0x120 [ 162.456808][ T7606] __kmalloc_cache_noprof+0x72/0x780 [ 162.456822][ T7606] ? percpu_ref_init+0xec/0x410 [ 162.456843][ T7606] ? percpu_ref_init+0xec/0x410 [ 162.456859][ T7606] ? __pfx_swap_users_ref_free+0x10/0x10 [ 162.456874][ T7606] percpu_ref_init+0xec/0x410 [ 162.456894][ T7606] __do_sys_swapon+0x165/0x3a90 [ 162.456910][ T7606] ? find_held_lock+0x2b/0x80 [ 162.456925][ T7606] ? handle_mm_fault+0x2ab/0xd10 [ 162.456947][ T7606] ? __x64_sys_futex+0x1e0/0x4c0 [ 162.456965][ T7606] ? __x64_sys_futex+0x1e9/0x4c0 [ 162.456983][ T7606] ? exc_page_fault+0x64/0xc0 [ 162.457002][ T7606] ? __pfx___do_sys_swapon+0x10/0x10 [ 162.457025][ T7606] do_syscall_64+0xcd/0xfa0 [ 162.457043][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.457058][ T7606] RIP: 0033:0x7f5daf98f749 [ 162.457070][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.457083][ T7606] RSP: 002b:00007f5db08b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 162.457096][ T7606] RAX: ffffffffffffffda RBX: 00007f5dafbe6090 RCX: 00007f5daf98f749 [ 162.457105][ T7606] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 162.457113][ T7606] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 162.457121][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.457128][ T7606] R13: 00007f5dafbe6128 R14: 00007f5dafbe6090 R15: 00007ffe111e68e8 [ 162.457147][ T7606] [ 163.985613][ T7659] nbd: couldn't find a device at index 35644 [ 164.351141][ T7666] random: crng reseeded on system resumption [ 164.369415][ T7664] block2mtd: Using custom MTD label '' for dev [ 164.530217][ T7664] block2mtd: error: cannot open device [ 164.561936][ T7677] Unable to find swap-space signature [ 165.028353][ T7686] ubi0: attaching mtd1 [ 165.074041][ T7686] ubi0: scanning is finished [ 165.087744][ T7688] FAULT_INJECTION: forcing a failure. [ 165.087744][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 165.120626][ T7686] ubi0: empty MTD device detected [ 165.147667][ T7686] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 165.156897][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 165.156917][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.156925][ T7688] Call Trace: [ 165.156930][ T7688] [ 165.156935][ T7688] dump_stack_lvl+0x16c/0x1f0 [ 165.156956][ T7688] should_fail_ex+0x512/0x640 [ 165.156978][ T7688] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 165.156996][ T7688] should_failslab+0xc2/0x120 [ 165.157015][ T7688] kmem_cache_alloc_node_noprof+0x78/0x770 [ 165.157030][ T7688] ? __alloc_skb+0x2b2/0x380 [ 165.157056][ T7688] ? __alloc_skb+0x2b2/0x380 [ 165.157075][ T7688] ? __pfx_netlink_insert+0x10/0x10 [ 165.157088][ T7688] __alloc_skb+0x2b2/0x380 [ 165.157110][ T7688] ? __pfx___alloc_skb+0x10/0x10 [ 165.157132][ T7688] ? netlink_autobind.isra.0+0x158/0x370 [ 165.157152][ T7688] netlink_alloc_large_skb+0x69/0x140 [ 165.157168][ T7688] netlink_sendmsg+0x698/0xdd0 [ 165.157187][ T7688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.157204][ T7688] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 165.157228][ T7688] ____sys_sendmsg+0xa98/0xc70 [ 165.157247][ T7688] ? copy_msghdr_from_user+0x10a/0x160 [ 165.157261][ T7688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.157288][ T7688] ___sys_sendmsg+0x134/0x1d0 [ 165.157303][ T7688] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.157315][ T7688] ? __lock_acquire+0x622/0x1c90 [ 165.157358][ T7688] __sys_sendmsg+0x16d/0x220 [ 165.157373][ T7688] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.157400][ T7688] do_syscall_64+0xcd/0xfa0 [ 165.157418][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.157438][ T7688] RIP: 0033:0x7fb84538f749 [ 165.157450][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.157463][ T7688] RSP: 002b:00007fb846231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.157477][ T7688] RAX: ffffffffffffffda RBX: 00007fb8455e5fa0 RCX: 00007fb84538f749 [ 165.157486][ T7688] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 165.157494][ T7688] RBP: 00007fb846231090 R08: 0000000000000000 R09: 0000000000000000 [ 165.157502][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.157510][ T7688] R13: 00007fb8455e6038 R14: 00007fb8455e5fa0 R15: 00007ffc7c6613a8 [ 165.157529][ T7688] [ 166.089748][ T7686] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 166.233197][ T7703] FAULT_INJECTION: forcing a failure. [ 166.233197][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 166.295374][ T7703] CPU: 1 UID: 0 PID: 7703 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 166.295397][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.295406][ T7703] Call Trace: [ 166.295411][ T7703] [ 166.295417][ T7703] dump_stack_lvl+0x16c/0x1f0 [ 166.295439][ T7703] should_fail_ex+0x512/0x640 [ 166.295460][ T7703] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 166.295480][ T7703] should_failslab+0xc2/0x120 [ 166.295499][ T7703] __kmalloc_node_noprof+0xe0/0x8a0 [ 166.295515][ T7703] ? alloc_slab_obj_exts+0x43/0xf0 [ 166.295539][ T7703] ? alloc_slab_obj_exts+0x43/0xf0 [ 166.295558][ T7703] alloc_slab_obj_exts+0x43/0xf0 [ 166.295579][ T7703] __memcg_slab_post_alloc_hook+0x251/0x940 [ 166.295602][ T7703] ? kasan_save_track+0x14/0x30 [ 166.295619][ T7703] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 166.295634][ T7703] ? __debug_object_init+0x2de/0x3d0 [ 166.295650][ T7703] ? bdev_alloc_inode+0x26/0x90 [ 166.295674][ T7703] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 166.295693][ T7703] ? bdev_alloc_inode+0x26/0x90 [ 166.295712][ T7703] bdev_alloc_inode+0x26/0x90 [ 166.295731][ T7703] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 166.295750][ T7703] alloc_inode+0x64/0x240 [ 166.295769][ T7703] new_inode+0x22/0x1c0 [ 166.295789][ T7703] bdev_alloc+0x2b/0x420 [ 166.295804][ T7703] __alloc_disk_node+0x116/0x640 [ 166.295825][ T7703] __blk_mq_alloc_disk+0x89/0x120 [ 166.295844][ T7703] loop_add+0x490/0xb70 [ 166.295860][ T7703] ? __pfx_loop_add+0x10/0x10 [ 166.295888][ T7703] ? find_held_lock+0x2b/0x80 [ 166.295906][ T7703] loop_control_ioctl+0x13e/0x630 [ 166.295922][ T7703] ? __pfx_loop_control_ioctl+0x10/0x10 [ 166.295940][ T7703] ? __pfx_loop_control_ioctl+0x10/0x10 [ 166.295957][ T7703] __x64_sys_ioctl+0x18e/0x210 [ 166.295979][ T7703] do_syscall_64+0xcd/0xfa0 [ 166.295997][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.296012][ T7703] RIP: 0033:0x7f8c2738f749 [ 166.296024][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.296036][ T7703] RSP: 002b:00007f8c28289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.296050][ T7703] RAX: ffffffffffffffda RBX: 00007f8c275e5fa0 RCX: 00007f8c2738f749 [ 166.296060][ T7703] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 166.296068][ T7703] RBP: 00007f8c27413f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.296077][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.296085][ T7703] R13: 00007f8c275e6038 R14: 00007f8c275e5fa0 R15: 00007ffeb3117068 [ 166.296105][ T7703] [ 166.682291][ T7708] Invalid ELF header magic: != ELF [ 168.112924][ T7739] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 168.617078][ T30] audit: type=1804 audit(1763742979.910:7): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.415" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1066 res=1 errno=0 [ 168.899796][ T7763] FAULT_INJECTION: forcing a failure. [ 168.899796][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 168.927003][ T7768] FAULT_INJECTION: forcing a failure. [ 168.927003][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 168.995077][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT(full) [ 168.995099][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.995107][ T7768] Call Trace: [ 168.995112][ T7768] [ 168.995118][ T7768] dump_stack_lvl+0x16c/0x1f0 [ 168.995139][ T7768] should_fail_ex+0x512/0x640 [ 168.995165][ T7768] should_failslab+0xc2/0x120 [ 168.995188][ T7768] kmem_cache_alloc_node_noprof+0x78/0x770 [ 168.995203][ T7768] ? zswap_store+0x850/0x2830 [ 168.995220][ T7768] ? zswap_store+0x850/0x2830 [ 168.995232][ T7768] zswap_store+0x850/0x2830 [ 168.995253][ T7768] ? __pfx_zswap_store+0x10/0x10 [ 168.995266][ T7768] ? folio_free_swap+0x141/0x4b0 [ 168.995285][ T7768] ? do_raw_spin_unlock+0x172/0x230 [ 168.995299][ T7768] ? _raw_spin_unlock+0x28/0x50 [ 168.995314][ T7768] ? folio_free_swap+0x19d/0x4b0 [ 168.995331][ T7768] ? __pfx_try_to_unmap+0x10/0x10 [ 168.995347][ T7768] swap_writeout+0x3f4/0x1090 [ 168.995373][ T7768] shrink_folio_list+0x3e50/0x4800 [ 168.995403][ T7768] ? __pfx_shrink_folio_list+0x10/0x10 [ 168.995429][ T7768] ? __lock_acquire+0x622/0x1c90 [ 168.995451][ T7768] ? __lock_acquire+0x622/0x1c90 [ 168.995471][ T7768] ? __lock_acquire+0x622/0x1c90 [ 168.995506][ T7768] ? find_held_lock+0x2b/0x80 [ 168.995526][ T7768] reclaim_folio_list+0xda/0x5d0 [ 168.995547][ T7768] ? __pfx_css_rstat_updated+0x10/0x10 [ 168.995565][ T7768] ? __pfx_reclaim_folio_list+0x10/0x10 [ 168.995594][ T7768] ? lru_gen_update_size+0x543/0xe10 [ 168.995620][ T7768] ? lru_gen_del_folio+0x32b/0x540 [ 168.995642][ T7768] reclaim_pages+0x3ec/0x570 [ 168.995657][ T7768] ? __pfx_reclaim_pages+0x10/0x10 [ 168.995668][ T7768] ? find_held_lock+0x2b/0x80 [ 168.995689][ T7768] ? madvise_cold_or_pageout_pte_range+0x73e/0x20d0 [ 168.995713][ T7768] madvise_cold_or_pageout_pte_range+0x14e5/0x20d0 [ 168.995743][ T7768] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 168.995765][ T7768] ? __lock_acquire+0x622/0x1c90 [ 168.995785][ T7768] ? __pfx_stack_trace_save+0x10/0x10 [ 168.995801][ T7768] ? css_rstat_updated+0x1c2/0x510 [ 168.995818][ T7768] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 168.995839][ T7768] walk_pgd_range+0xc05/0x1f50 [ 168.995869][ T7768] ? __pfx_walk_pgd_range+0x10/0x10 [ 168.995889][ T7768] __walk_page_range+0x163/0x820 [ 168.995908][ T7768] ? __lock_acquire+0xb8a/0x1c90 [ 168.995931][ T7768] walk_page_range_vma+0x2c7/0xa20 [ 168.995949][ T7768] ? __pfx_walk_page_range_vma+0x10/0x10 [ 168.995965][ T7768] ? find_held_lock+0x2b/0x80 [ 168.995987][ T7768] madvise_pageout+0x257/0x540 [ 168.996006][ T7768] ? __pfx_madvise_pageout+0x10/0x10 [ 168.996035][ T7768] ? mas_next_slot+0x12d3/0x1cb0 [ 168.996056][ T7768] madvise_vma_behavior+0xb14/0x2d50 [ 168.996085][ T7768] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 168.996107][ T7768] ? __pfx_mt_find+0x10/0x10 [ 168.996129][ T7768] ? find_vma_prev+0xd3/0x150 [ 168.996152][ T7768] ? find_vma+0xbf/0x140 [ 168.996168][ T7768] ? __pfx_find_vma+0x10/0x10 [ 168.996185][ T7768] ? __lock_acquire+0x622/0x1c90 [ 168.996205][ T7768] madvise_walk_vmas+0x31f/0x9c0 [ 168.996229][ T7768] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 168.996254][ T7768] madvise_do_behavior+0x1e2/0x530 [ 168.996276][ T7768] ? __pfx_madvise_do_behavior+0x10/0x10 [ 168.996297][ T7768] ? down_read+0x13d/0x480 [ 168.996327][ T7768] do_madvise+0x176/0x240 [ 168.996345][ T7768] ? __pfx_do_madvise+0x10/0x10 [ 168.996364][ T7768] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 168.996388][ T7768] ? __fget_files+0x20e/0x3c0 [ 168.996410][ T7768] ? __pfx_ksys_write+0x10/0x10 [ 168.996429][ T7768] __x64_sys_madvise+0xa9/0x110 [ 168.996448][ T7768] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.996465][ T7768] do_syscall_64+0xcd/0xfa0 [ 168.996484][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.996498][ T7768] RIP: 0033:0x7fb84538f749 [ 168.996510][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.996523][ T7768] RSP: 002b:00007fb846231038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 168.996537][ T7768] RAX: ffffffffffffffda RBX: 00007fb8455e5fa0 RCX: 00007fb84538f749 [ 168.996551][ T7768] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 168.996559][ T7768] RBP: 00007fb846231090 R08: 0000000000000000 R09: 0000000000000000 [ 168.996567][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.996575][ T7768] R13: 00007fb8455e6038 R14: 00007fb8455e5fa0 R15: 00007ffc7c6613a8 [ 168.996595][ T7768] [ 169.500469][ T7763] CPU: 1 UID: 0 PID: 7763 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) [ 169.500491][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.500500][ T7763] Call Trace: [ 169.500505][ T7763] [ 169.500510][ T7763] dump_stack_lvl+0x16c/0x1f0 [ 169.500532][ T7763] should_fail_ex+0x512/0x640 [ 169.500554][ T7763] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 169.500572][ T7763] should_failslab+0xc2/0x120 [ 169.500591][ T7763] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 169.500605][ T7763] ? __dquot_initialize+0x299/0xd50 [ 169.500623][ T7763] ? __d_alloc+0x32/0xae0 [ 169.500642][ T7763] ? __d_alloc+0x32/0xae0 [ 169.500656][ T7763] __d_alloc+0x32/0xae0 [ 169.500674][ T7763] d_alloc_pseudo+0x1c/0xc0 [ 169.500694][ T7763] alloc_file_pseudo+0xcf/0x230 [ 169.500716][ T7763] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.500741][ T7763] __shmem_file_setup+0x1a3/0x330 [ 169.500766][ T7763] shmem_zero_setup+0x93/0x1a0 [ 169.500782][ T7763] __mmap_region+0x2076/0x27a0 [ 169.500800][ T7763] ? __pfx___mmap_region+0x10/0x10 [ 169.500813][ T7763] ? finish_task_switch.isra.0+0x21c/0xc10 [ 169.500830][ T7763] ? rcu_is_watching+0x12/0xc0 [ 169.500844][ T7763] ? finish_task_switch.isra.0+0x221/0xc10 [ 169.500858][ T7763] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.500875][ T7763] ? finish_task_switch.isra.0+0x221/0xc10 [ 169.500907][ T7763] ? __pfx___schedule+0x10/0x10 [ 169.500946][ T7763] ? trace_cap_capable+0x18d/0x200 [ 169.500973][ T7763] mmap_region+0x1ab/0x3f0 [ 169.500987][ T7763] ? __get_unmapped_area+0x267/0x440 [ 169.501008][ T7763] do_mmap+0xa3e/0x1210 [ 169.501029][ T7763] ? __pfx_do_mmap+0x10/0x10 [ 169.501053][ T7763] ? __pfx_down_write_killable+0x10/0x10 [ 169.501076][ T7763] vm_mmap_pgoff+0x29e/0x470 [ 169.501098][ T7763] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 169.501121][ T7763] ? __x64_sys_futex+0x1e0/0x4c0 [ 169.501139][ T7763] ? __x64_sys_futex+0x1e9/0x4c0 [ 169.501161][ T7763] ksys_mmap_pgoff+0x7d/0x5c0 [ 169.501178][ T7763] ? syscall_user_dispatch+0x78/0x140 [ 169.501194][ T7763] __x64_sys_mmap+0x125/0x190 [ 169.501218][ T7763] do_syscall_64+0xcd/0xfa0 [ 169.501236][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.501251][ T7763] RIP: 0033:0x7f5daf98f749 [ 169.501263][ T7763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.501276][ T7763] RSP: 002b:00007f5db08b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.501289][ T7763] RAX: ffffffffffffffda RBX: 00007f5dafbe6090 RCX: 00007f5daf98f749 [ 169.501298][ T7763] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 169.501306][ T7763] RBP: 00007f5dafa13f91 R08: 0000000000000401 R09: 0000000000000000 [ 169.501315][ T7763] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 169.501322][ T7763] R13: 00007f5dafbe6128 R14: 00007f5dafbe6090 R15: 00007ffe111e68e8 [ 169.501342][ T7763] [ 170.493817][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 172.034109][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 172.229829][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.331546][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.198727][ T7880] FAULT_INJECTION: forcing a failure. [ 174.198727][ T7880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 174.249279][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.0.443 Not tainted syzkaller #0 PREEMPT(full) [ 174.249302][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.249311][ T7880] Call Trace: [ 174.249316][ T7880] [ 174.249322][ T7880] dump_stack_lvl+0x16c/0x1f0 [ 174.249345][ T7880] should_fail_ex+0x512/0x640 [ 174.249371][ T7880] get_futex_key+0x1d0/0x1560 [ 174.249392][ T7880] ? __pfx_get_futex_key+0x10/0x10 [ 174.249417][ T7880] futex_wait_setup+0x9d/0x550 [ 174.249435][ T7880] __futex_wait+0x193/0x2f0 [ 174.249448][ T7880] ? __pfx___futex_wait+0x10/0x10 [ 174.249464][ T7880] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.249489][ T7880] ? futex_hash+0x2c5/0x380 [ 174.249509][ T7880] ? futex_private_hash_put+0xd5/0x190 [ 174.249529][ T7880] futex_wait+0xe8/0x380 [ 174.249541][ T7880] ? __pfx_futex_wait+0x10/0x10 [ 174.249552][ T7880] ? shmctl_stat+0x4f6/0x720 [ 174.249573][ T7880] ? ksys_shmctl.constprop.0+0x1d4/0x380 [ 174.249592][ T7880] do_futex+0x229/0x350 [ 174.249610][ T7880] ? __pfx_do_futex+0x10/0x10 [ 174.249629][ T7880] ? rcu_is_watching+0x12/0xc0 [ 174.249647][ T7880] __x64_sys_futex+0x1e0/0x4c0 [ 174.249668][ T7880] ? __pfx___x64_sys_futex+0x10/0x10 [ 174.249694][ T7880] do_syscall_64+0xcd/0xfa0 [ 174.249713][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.249732][ T7880] RIP: 0033:0x7f0c82f8f749 [ 174.249745][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.249759][ T7880] RSP: 002b:00007f0c83e900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.249773][ T7880] RAX: ffffffffffffffda RBX: 00007f0c831e5fa8 RCX: 00007f0c82f8f749 [ 174.249782][ T7880] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c831e5fa8 [ 174.249791][ T7880] RBP: 00007f0c831e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 174.249799][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.249807][ T7880] R13: 00007f0c831e6038 R14: 00007fffa97b32d0 R15: 00007fffa97b33b8 [ 174.249827][ T7880] [ 175.490732][ T7895] FAULT_INJECTION: forcing a failure. [ 175.490732][ T7895] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.539970][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT(full) [ 175.539992][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.540000][ T7895] Call Trace: [ 175.540005][ T7895] [ 175.540011][ T7895] dump_stack_lvl+0x16c/0x1f0 [ 175.540033][ T7895] should_fail_ex+0x512/0x640 [ 175.540057][ T7895] get_futex_key+0x1d0/0x1560 [ 175.540079][ T7895] ? __pfx_get_futex_key+0x10/0x10 [ 175.540103][ T7895] futex_wake+0xea/0x530 [ 175.540126][ T7895] ? kfree+0x2b8/0x6d0 [ 175.540138][ T7895] ? __pfx_futex_wake+0x10/0x10 [ 175.540163][ T7895] ? load_msg+0x2f4/0x4a0 [ 175.540180][ T7895] ? load_msg+0x2fe/0x4a0 [ 175.540199][ T7895] do_futex+0x1e3/0x350 [ 175.540218][ T7895] ? __pfx_do_futex+0x10/0x10 [ 175.540242][ T7895] __x64_sys_futex+0x1e0/0x4c0 [ 175.540262][ T7895] ? fput+0x9b/0xd0 [ 175.540281][ T7895] ? __pfx___x64_sys_futex+0x10/0x10 [ 175.540302][ T7895] ? xfd_validate_state+0x61/0x180 [ 175.540322][ T7895] ? __pfx_ksys_write+0x10/0x10 [ 175.540343][ T7895] do_syscall_64+0xcd/0xfa0 [ 175.540361][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.540376][ T7895] RIP: 0033:0x7f5daf98f749 [ 175.540388][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.540401][ T7895] RSP: 002b:00007f5db08d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.540415][ T7895] RAX: ffffffffffffffda RBX: 00007f5dafbe5fa8 RCX: 00007f5daf98f749 [ 175.540424][ T7895] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5dafbe5fac [ 175.540432][ T7895] RBP: 00007f5dafbe5fa0 R08: 00007f5db08d8000 R09: 0000000000000000 [ 175.540441][ T7895] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 175.540449][ T7895] R13: 00007f5dafbe6038 R14: 00007ffe111e6800 R15: 00007ffe111e68e8 [ 175.540468][ T7895] [ 175.904471][ T7903] FAULT_INJECTION: forcing a failure. [ 175.904471][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.919528][ T7903] CPU: 1 UID: 0 PID: 7903 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(full) [ 175.919549][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.919565][ T7903] Call Trace: [ 175.919570][ T7903] [ 175.919576][ T7903] dump_stack_lvl+0x16c/0x1f0 [ 175.919599][ T7903] should_fail_ex+0x512/0x640 [ 175.919624][ T7903] core_sys_select+0x4c5/0xc20 [ 175.919644][ T7903] ? __pfx_core_sys_select+0x10/0x10 [ 175.919663][ T7903] ? futex_wait+0x120/0x380 [ 175.919690][ T7903] ? __pfx_do_futex+0x10/0x10 [ 175.919710][ T7903] ? __sys_connect+0xe0/0x160 [ 175.919732][ T7903] kern_select+0x15d/0x1e0 [ 175.919745][ T7903] ? __pfx_kern_select+0x10/0x10 [ 175.919761][ T7903] ? xfd_validate_state+0x61/0x180 [ 175.919780][ T7903] ? __pfx_ksys_write+0x10/0x10 [ 175.919799][ T7903] __x64_sys_select+0xbd/0x160 [ 175.919812][ T7903] ? do_syscall_64+0x91/0xfa0 [ 175.919828][ T7903] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.919845][ T7903] do_syscall_64+0xcd/0xfa0 [ 175.919862][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.919876][ T7903] RIP: 0033:0x7f5daf98f749 [ 175.919889][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.919902][ T7903] RSP: 002b:00007f5db08d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 175.919915][ T7903] RAX: ffffffffffffffda RBX: 00007f5dafbe5fa0 RCX: 00007f5daf98f749 [ 175.919924][ T7903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 175.919932][ T7903] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 175.919940][ T7903] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 175.919948][ T7903] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffe111e68e8 [ 175.919967][ T7903] [ 176.832928][ T7916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.870733][ T7916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.924725][ T7916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.950778][ T7916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.983442][ T7916] CPU0 is offline. [ 177.320290][ T7921] FAULT_INJECTION: forcing a failure. [ 177.320290][ T7921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.320366][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.1.452 Not tainted syzkaller #0 PREEMPT(full) [ 177.320385][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.320394][ T7921] Call Trace: [ 177.320399][ T7921] [ 177.320405][ T7921] dump_stack_lvl+0x16c/0x1f0 [ 177.320428][ T7921] should_fail_ex+0x512/0x640 [ 177.320453][ T7921] should_fail_alloc_page+0xe7/0x130 [ 177.320475][ T7921] prepare_alloc_pages+0x3c2/0x610 [ 177.320499][ T7921] ? rcu_is_watching+0x12/0xc0 [ 177.320517][ T7921] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 177.320531][ T7921] ? kasan_save_stack+0x33/0x60 [ 177.320546][ T7921] ? kasan_save_track+0x14/0x30 [ 177.320567][ T7921] ? __lock_acquire+0x622/0x1c90 [ 177.320589][ T7921] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.320612][ T7921] ? __lock_acquire+0x622/0x1c90 [ 177.320642][ T7921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.320668][ T7921] ? policy_nodemask+0xea/0x4e0 [ 177.320690][ T7921] alloc_pages_mpol+0x1fb/0x550 [ 177.320710][ T7921] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 177.320736][ T7921] folio_alloc_mpol_noprof+0x36/0x2f0 [ 177.320759][ T7921] vma_alloc_folio_noprof+0xed/0x1e0 [ 177.320780][ T7921] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 177.320807][ T7921] do_pte_missing+0x2202/0x3ba0 [ 177.320828][ T7921] ? find_held_lock+0x2b/0x80 [ 177.320848][ T7921] __handle_mm_fault+0x1556/0x2aa0 [ 177.320874][ T7921] ? __pfx___handle_mm_fault+0x10/0x10 [ 177.320897][ T7921] ? __pte_offset_map_lock+0x174/0x310 [ 177.320914][ T7921] ? find_held_lock+0x2b/0x80 [ 177.320934][ T7921] ? follow_page_pte+0x5cf/0x1390 [ 177.320956][ T7921] handle_mm_fault+0x589/0xd10 [ 177.320981][ T7921] __get_user_pages+0x54e/0x3530 [ 177.321008][ T7921] ? __pfx___get_user_pages+0x10/0x10 [ 177.321032][ T7921] populate_vma_page_range+0x267/0x3f0 [ 177.321052][ T7921] ? __pfx_populate_vma_page_range+0x10/0x10 [ 177.321071][ T7921] ? __pfx_find_vma_intersection+0x10/0x10 [ 177.321090][ T7921] ? do_mmap+0x69c/0x1210 [ 177.321109][ T7921] __mm_populate+0x1d8/0x380 [ 177.321129][ T7921] ? __pfx___mm_populate+0x10/0x10 [ 177.321150][ T7921] ? up_write+0x1b2/0x520 [ 177.321172][ T7921] vm_mmap_pgoff+0x37f/0x470 [ 177.321192][ T7921] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 177.321210][ T7921] ? __sys_connect+0xe0/0x160 [ 177.321233][ T7921] ? __x64_sys_futex+0x1e0/0x4c0 [ 177.321251][ T7921] ? __x64_sys_futex+0x1e9/0x4c0 [ 177.321271][ T7921] ksys_mmap_pgoff+0x7d/0x5c0 [ 177.321287][ T7921] ? xfd_validate_state+0x61/0x180 [ 177.321310][ T7921] __x64_sys_mmap+0x125/0x190 [ 177.321332][ T7921] do_syscall_64+0xcd/0xfa0 [ 177.321351][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.321365][ T7921] RIP: 0033:0x7f5daf98f749 [ 177.321378][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.321392][ T7921] RSP: 002b:00007f5db08b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 177.321406][ T7921] RAX: ffffffffffffffda RBX: 00007f5dafbe6090 RCX: 00007f5daf98f749 [ 177.321415][ T7921] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 177.321423][ T7921] RBP: 00007f5dafa13f91 R08: 0000000000000002 R09: 0000000000008000 [ 177.321431][ T7921] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 177.321440][ T7921] R13: 00007f5dafbe6128 R14: 00007f5dafbe6090 R15: 00007ffe111e68e8 [ 177.321460][ T7921] [ 177.419284][ T7929] Console: switching to colour frame buffer device 128x48 [ 177.843600][ T7950] sp0: Synchronizing with TNC [ 178.896914][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.896958][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.978349][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.978392][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.409949][ T7965] tty tty12: ldisc open failed (-12), clearing slot 11 [ 180.992886][ T8018] __vm_enough_memory: pid: 8018, comm: syz.2.472, bytes: 4398046511104 not enough memory for the allocation [ 181.237666][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 181.777724][ T8033] FAULT_INJECTION: forcing a failure. [ 181.777724][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 181.897852][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 181.897875][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.897886][ T8033] Call Trace: [ 181.897891][ T8033] [ 181.897897][ T8033] dump_stack_lvl+0x16c/0x1f0 [ 181.897920][ T8033] should_fail_ex+0x512/0x640 [ 181.897942][ T8033] ? fs_reclaim_acquire+0xae/0x150 [ 181.897963][ T8033] should_failslab+0xc2/0x120 [ 181.897982][ T8033] kmem_cache_alloc_noprof+0x75/0x6e0 [ 181.897996][ T8033] ? __pfx_map_id_range_down+0x10/0x10 [ 181.898011][ T8033] ? security_inode_alloc+0x3b/0x2b0 [ 181.898035][ T8033] ? security_inode_alloc+0x3b/0x2b0 [ 181.898061][ T8033] security_inode_alloc+0x3b/0x2b0 [ 181.898083][ T8033] inode_init_always_gfp+0xce4/0x1030 [ 181.898101][ T8033] alloc_inode+0x86/0x240 [ 181.898120][ T8033] path_from_stashed+0x25b/0x750 [ 181.898135][ T8033] ? do_raw_spin_unlock+0x172/0x230 [ 181.898152][ T8033] ns_get_path+0x60/0x80 [ 181.898167][ T8033] proc_ns_get_link+0x121/0x230 [ 181.898185][ T8033] ? __pfx_proc_ns_get_link+0x10/0x10 [ 181.898207][ T8033] ? atime_needs_update+0x8b/0x710 [ 181.898228][ T8033] ? __pfx_proc_ns_get_link+0x10/0x10 [ 181.898245][ T8033] step_into+0x196c/0x21a0 [ 181.898262][ T8033] ? __pfx_step_into+0x10/0x10 [ 181.898275][ T8033] ? find_held_lock+0x2b/0x80 [ 181.898295][ T8033] path_openat+0x6db/0x2cb0 [ 181.898317][ T8033] ? __pfx_path_openat+0x10/0x10 [ 181.898333][ T8033] ? __lock_acquire+0xb8a/0x1c90 [ 181.898353][ T8033] do_filp_open+0x20b/0x470 [ 181.898368][ T8033] ? __pfx_do_filp_open+0x10/0x10 [ 181.898397][ T8033] ? alloc_fd+0x471/0x7d0 [ 181.898416][ T8033] do_sys_openat2+0x11b/0x1d0 [ 181.898436][ T8033] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.898463][ T8033] __x64_sys_openat+0x174/0x210 [ 181.898483][ T8033] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.898511][ T8033] do_syscall_64+0xcd/0xfa0 [ 181.898530][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.898545][ T8033] RIP: 0033:0x7fb84538df90 [ 181.898562][ T8033] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 181.898575][ T8033] RSP: 002b:00007fb846230f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 181.898592][ T8033] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb84538df90 [ 181.898602][ T8033] RDX: 0000000000000002 RSI: 00007fb846230fa0 RDI: 00000000ffffff9c [ 181.898611][ T8033] RBP: 00007fb846230fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.898619][ T8033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.898627][ T8033] R13: 00007fb8455e6038 R14: 00007fb8455e5fa0 R15: 00007ffc7c6613a8 [ 181.898647][ T8033] [ 182.161922][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.353058][ T8049] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 183.393167][ T8049] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 183.440951][ T8049] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 183.480927][ T8049] page_type: f5(slab) [ 183.491068][ T8049] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 183.533590][ T8049] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 183.582396][ T8049] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 183.627122][ T8049] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 183.666813][ T8049] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 183.704178][ T8049] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 183.744512][ T8049] page dumped because: unmovable page [ 183.769054][ T8049] page_owner tracks the page as allocated [ 183.799558][ T8049] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5212, tgid 5212 (udevadm), ts 35103635925, free_ts 29295579190 [ 183.899484][ T8049] post_alloc_hook+0x1af/0x220 [ 183.919400][ T8049] get_page_from_freelist+0x10a3/0x3a30 [ 183.932110][ T8049] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 183.962761][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 183.973491][ T8049] alloc_pages_mpol+0x1fb/0x550 [ 183.990581][ T8049] new_slab+0x24a/0x360 [ 184.004612][ T8049] ___slab_alloc+0xd79/0x1a50 [ 184.021277][ T8049] __slab_alloc.constprop.0+0x63/0x110 [ 184.069462][ T8049] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 184.087777][ T8049] alloc_inode+0xc3/0x240 [ 184.102775][ T8049] iget_locked+0x2fa/0x860 [ 184.107222][ T8049] kernfs_get_inode+0x48/0x460 [ 184.173044][ T8049] kernfs_iop_lookup+0x1a7/0x2d0 [ 184.178016][ T8049] __lookup_slow+0x251/0x460 [ 184.207840][ T8049] walk_component+0x353/0x5b0 [ 184.229505][ T8049] link_path_walk+0x627/0xe20 [ 184.245745][ T8049] path_lookupat+0x15a/0x6d0 [ 184.269505][ T8049] page last free pid 1 tgid 1 stack trace: [ 184.297231][ T8049] __free_frozen_pages+0x7df/0x1160 [ 184.323952][ T8049] free_contig_range+0x183/0x4b0 [ 184.344385][ T8049] destroy_args+0xb69/0x12e0 [ 184.364171][ T8049] debug_vm_pgtable+0x1a32/0x3640 [ 184.369319][ T8049] do_one_initcall+0x123/0x6e0 [ 184.409609][ T8049] kernel_init_freeable+0x5c8/0x920 [ 184.427226][ T8049] kernel_init+0x1c/0x2b0 [ 184.439612][ T8049] ret_from_fork+0x675/0x7d0 [ 184.444232][ T8049] ret_from_fork_asm+0x1a/0x30 [ 185.212419][ T8071] zram: Removed device: zram0 [ 185.279044][ T5835] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 185.289877][ T8094] process 'syz.3.490' launched ':,' with NULL argv: empty string added [ 185.943657][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 186.265140][ T8115] qrtr: Invalid version 0 [ 186.269825][ T8114] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.837285][ T5835] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 187.837311][ T5835] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 187.853716][ T5835] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 187.853782][ T5835] Bluetooth: hci1: Malformed LE Event: 0x0d [ 188.580063][ T8164] FAULT_INJECTION: forcing a failure. [ 188.580063][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 188.641858][ T8164] CPU: 1 UID: 0 PID: 8164 Comm: syz.2.508 Not tainted syzkaller #0 PREEMPT(full) [ 188.641881][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.641889][ T8164] Call Trace: [ 188.641895][ T8164] [ 188.641900][ T8164] dump_stack_lvl+0x16c/0x1f0 [ 188.641924][ T8164] should_fail_ex+0x512/0x640 [ 188.641946][ T8164] ? __kmalloc_noprof+0xca/0x880 [ 188.641971][ T8164] should_failslab+0xc2/0x120 [ 188.641990][ T8164] __kmalloc_noprof+0xdd/0x880 [ 188.642012][ T8164] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 188.642033][ T8164] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 188.642048][ T8164] acpi_ns_get_normalized_pathname+0x95/0x250 [ 188.642067][ T8164] acpi_ds_call_control_method+0x5d4/0xab0 [ 188.642090][ T8164] acpi_ps_parse_aml+0xab3/0x1170 [ 188.642115][ T8164] acpi_ps_execute_method+0x5c4/0xe90 [ 188.642134][ T8164] acpi_ns_evaluate+0x98c/0x16d0 [ 188.642155][ T8164] acpi_evaluate_object+0x4ca/0xdf0 [ 188.642179][ T8164] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 188.642199][ T8164] ? __mutex_trylock_common+0xe9/0x250 [ 188.642222][ T8164] acpi_evaluate_integer+0xdd/0x200 [ 188.642239][ T8164] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 188.642265][ T8164] ? __pfx_status_show+0x10/0x10 [ 188.642283][ T8164] status_show+0xa0/0x120 [ 188.642302][ T8164] ? __pfx_status_show+0x10/0x10 [ 188.642326][ T8164] dev_attr_show+0x56/0xe0 [ 188.642348][ T8164] ? __pfx_dev_attr_show+0x10/0x10 [ 188.642367][ T8164] sysfs_kf_seq_show+0x216/0x3e0 [ 188.642388][ T8164] seq_read_iter+0x50e/0x12d0 [ 188.642419][ T8164] kernfs_fop_read_iter+0x46c/0x610 [ 188.642433][ T8164] ? rw_verify_area+0xcf/0x6c0 [ 188.642449][ T8164] vfs_read+0x8bf/0xcf0 [ 188.642467][ T8164] ? __pfx___mutex_lock+0x10/0x10 [ 188.642485][ T8164] ? __pfx_vfs_read+0x10/0x10 [ 188.642514][ T8164] ksys_read+0x12a/0x250 [ 188.642529][ T8164] ? __pfx_ksys_read+0x10/0x10 [ 188.642566][ T8164] do_syscall_64+0xcd/0xfa0 [ 188.642593][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.642608][ T8164] RIP: 0033:0x7fb84538f749 [ 188.642621][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.642635][ T8164] RSP: 002b:00007fb846231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.642713][ T8164] RAX: ffffffffffffffda RBX: 00007fb8455e5fa0 RCX: 00007fb84538f749 [ 188.642728][ T8164] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 188.642750][ T8164] RBP: 00007fb845413f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.642760][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.642769][ T8164] R13: 00007fb8455e6038 R14: 00007fb8455e5fa0 R15: 00007ffc7c6613a8 [ 188.642793][ T8164] [ 188.642813][ T8164] ACPI Error: [ 188.869571][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.583834][ T8164] Could not allocate 10 bytes (20250807/nsnames-308) [ 190.110198][ T8185] FAULT_INJECTION: forcing a failure. [ 190.110198][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 190.155604][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.1.514 Not tainted syzkaller #0 PREEMPT(full) [ 190.155626][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.155635][ T8185] Call Trace: [ 190.155640][ T8185] [ 190.155646][ T8185] dump_stack_lvl+0x16c/0x1f0 [ 190.155668][ T8185] should_fail_ex+0x512/0x640 [ 190.155689][ T8185] ? __kmalloc_noprof+0xca/0x880 [ 190.155717][ T8185] should_failslab+0xc2/0x120 [ 190.155736][ T8185] __kmalloc_noprof+0xdd/0x880 [ 190.155758][ T8185] ? lsm_blob_alloc+0x68/0x90 [ 190.155782][ T8185] ? lsm_blob_alloc+0x68/0x90 [ 190.155798][ T8185] lsm_blob_alloc+0x68/0x90 [ 190.155816][ T8185] security_sk_alloc+0x30/0x270 [ 190.155839][ T8185] sk_prot_alloc+0x1c7/0x2a0 [ 190.155858][ T8185] sk_alloc+0x36/0xc20 [ 190.155880][ T8185] __netlink_create+0x5e/0x2c0 [ 190.155905][ T8185] ? __wake_up+0x3f/0x60 [ 190.155923][ T8185] netlink_create+0x39e/0x620 [ 190.155935][ T8185] ? __pfx_genl_bind+0x10/0x10 [ 190.155950][ T8185] ? __pfx_genl_unbind+0x10/0x10 [ 190.155965][ T8185] ? __pfx_genl_release+0x10/0x10 [ 190.155983][ T8185] __sock_create+0x338/0x8d0 [ 190.156006][ T8185] __sys_socket+0x14d/0x260 [ 190.156023][ T8185] ? __x64_sys_openat+0x174/0x210 [ 190.156045][ T8185] ? __pfx___sys_socket+0x10/0x10 [ 190.156066][ T8185] ? xfd_validate_state+0x61/0x180 [ 190.156091][ T8185] __x64_sys_socket+0x72/0xb0 [ 190.156109][ T8185] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.156126][ T8185] do_syscall_64+0xcd/0xfa0 [ 190.156145][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.156160][ T8185] RIP: 0033:0x7f5daf98f749 [ 190.156172][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.156185][ T8185] RSP: 002b:00007f5db08b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 190.156198][ T8185] RAX: ffffffffffffffda RBX: 00007f5dafbe6090 RCX: 00007f5daf98f749 [ 190.156207][ T8185] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 190.156215][ T8185] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.156223][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.156231][ T8185] R13: 00007f5dafbe6128 R14: 00007f5dafbe6090 R15: 00007ffe111e68e8 [ 190.156250][ T8185] [ 190.389375][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.147091][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.962716][ T8199] FAULT_INJECTION: forcing a failure. [ 191.962716][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 191.993373][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) [ 191.993395][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.993404][ T8199] Call Trace: [ 191.993410][ T8199] [ 191.993416][ T8199] dump_stack_lvl+0x16c/0x1f0 [ 191.993439][ T8199] should_fail_ex+0x512/0x640 [ 191.993459][ T8199] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 191.993477][ T8199] should_failslab+0xc2/0x120 [ 191.993496][ T8199] kmem_cache_alloc_noprof+0x75/0x6e0 [ 191.993510][ T8199] ? __x64_sys_openat+0x174/0x210 [ 191.993531][ T8199] ? do_syscall_64+0xcd/0xfa0 [ 191.993547][ T8199] ? fuse_request_alloc+0x22/0x200 [ 191.993571][ T8199] ? fuse_request_alloc+0x22/0x200 [ 191.993590][ T8199] fuse_request_alloc+0x22/0x200 [ 191.993611][ T8199] fuse_get_req+0x748/0xfd0 [ 191.993628][ T8199] ? __pfx_fuse_get_req+0x10/0x10 [ 191.993651][ T8199] fuse_simple_background+0x464/0x5f0 [ 191.993663][ T8199] ? kasan_save_track+0x14/0x30 [ 191.993681][ T8199] cuse_channel_open+0x561/0x7f0 [ 191.993698][ T8199] ? __pfx_cuse_channel_open+0x10/0x10 [ 191.993716][ T8199] misc_open+0x26d/0x450 [ 191.993737][ T8199] ? __pfx_misc_open+0x10/0x10 [ 191.993756][ T8199] chrdev_open+0x234/0x6a0 [ 191.993773][ T8199] ? __pfx_apparmor_file_open+0x10/0x10 [ 191.993793][ T8199] ? __pfx_chrdev_open+0x10/0x10 [ 191.993810][ T8199] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 191.993830][ T8199] do_dentry_open+0x982/0x1530 [ 191.993847][ T8199] ? __pfx_chrdev_open+0x10/0x10 [ 191.993867][ T8199] vfs_open+0x82/0x3f0 [ 191.993889][ T8199] path_openat+0x1de4/0x2cb0 [ 191.993911][ T8199] ? __pfx_path_openat+0x10/0x10 [ 191.993928][ T8199] ? __lock_acquire+0xb8a/0x1c90 [ 191.993949][ T8199] do_filp_open+0x20b/0x470 [ 191.993965][ T8199] ? __pfx_do_filp_open+0x10/0x10 [ 191.993994][ T8199] ? alloc_fd+0x471/0x7d0 [ 191.994013][ T8199] do_sys_openat2+0x11b/0x1d0 [ 191.994033][ T8199] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.994060][ T8199] __x64_sys_openat+0x174/0x210 [ 191.994080][ T8199] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.994109][ T8199] do_syscall_64+0xcd/0xfa0 [ 191.994127][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.994142][ T8199] RIP: 0033:0x7f0c82f8f749 [ 191.994155][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.994169][ T8199] RSP: 002b:00007f0c83e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.994182][ T8199] RAX: ffffffffffffffda RBX: 00007f0c831e5fa0 RCX: 00007f0c82f8f749 [ 191.994191][ T8199] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 191.994200][ T8199] RBP: 00007f0c83013f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.994208][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.994216][ T8199] R13: 00007f0c831e6038 R14: 00007f0c831e5fa0 R15: 00007fffa97b33b8 [ 191.994236][ T8199] [ 194.063957][ T8235] netlink: 186 bytes leftover after parsing attributes in process `syz.2.526'. [ 194.176858][ T8233] FAULT_INJECTION: forcing a failure. [ 194.176858][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 194.235335][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.0.525 Not tainted syzkaller #0 PREEMPT(full) [ 194.235362][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.235371][ T8233] Call Trace: [ 194.235376][ T8233] [ 194.235383][ T8233] dump_stack_lvl+0x16c/0x1f0 [ 194.235406][ T8233] should_fail_ex+0x512/0x640 [ 194.235428][ T8233] ? __kmalloc_noprof+0xca/0x880 [ 194.235453][ T8233] should_failslab+0xc2/0x120 [ 194.235473][ T8233] __kmalloc_noprof+0xdd/0x880 [ 194.235495][ T8233] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 194.235516][ T8233] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 194.235531][ T8233] acpi_ns_get_normalized_pathname+0x95/0x250 [ 194.235550][ T8233] acpi_ds_call_control_method+0x5d4/0xab0 [ 194.235573][ T8233] acpi_ps_parse_aml+0xab3/0x1170 [ 194.235599][ T8233] acpi_ps_execute_method+0x5c4/0xe90 [ 194.235618][ T8233] acpi_ns_evaluate+0x98c/0x16d0 [ 194.235638][ T8233] acpi_evaluate_object+0x4ca/0xdf0 [ 194.235663][ T8233] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 194.235682][ T8233] ? __mutex_trylock_common+0xe9/0x250 [ 194.235706][ T8233] acpi_evaluate_integer+0xdd/0x200 [ 194.235723][ T8233] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 194.235749][ T8233] ? __pfx_status_show+0x10/0x10 [ 194.235767][ T8233] status_show+0xa0/0x120 [ 194.235786][ T8233] ? __pfx_status_show+0x10/0x10 [ 194.235818][ T8233] dev_attr_show+0x56/0xe0 [ 194.235840][ T8233] ? __pfx_dev_attr_show+0x10/0x10 [ 194.235860][ T8233] sysfs_kf_seq_show+0x216/0x3e0 [ 194.235881][ T8233] seq_read_iter+0x50e/0x12d0 [ 194.235911][ T8233] kernfs_fop_read_iter+0x46c/0x610 [ 194.235925][ T8233] ? rw_verify_area+0xcf/0x6c0 [ 194.235941][ T8233] vfs_read+0x8bf/0xcf0 [ 194.235958][ T8233] ? __pfx___mutex_lock+0x10/0x10 [ 194.235977][ T8233] ? __pfx_vfs_read+0x10/0x10 [ 194.236005][ T8233] ksys_read+0x12a/0x250 [ 194.236019][ T8233] ? __pfx_ksys_read+0x10/0x10 [ 194.236040][ T8233] do_syscall_64+0xcd/0xfa0 [ 194.236059][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.236073][ T8233] RIP: 0033:0x7f0c82f8f749 [ 194.236093][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.236107][ T8233] RSP: 002b:00007f0c83e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.236121][ T8233] RAX: ffffffffffffffda RBX: 00007f0c831e5fa0 RCX: 00007f0c82f8f749 [ 194.236131][ T8233] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 194.236140][ T8233] RBP: 00007f0c83013f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.236148][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.236156][ T8233] R13: 00007f0c831e6038 R14: 00007f0c831e5fa0 R15: 00007fffa97b33b8 [ 194.236177][ T8233] [ 194.236206][ T8233] ACPI Error: [ 194.625753][ T8230] loop6: detected capacity change from 0 to 524288000 [ 195.788691][ T8233] Could not allocate 10 bytes (20250807/nsnames-308) [ 196.461585][ T8284] vhci_hcd: not connected 4 [ 196.796411][ T8290] random: crng reseeded on system resumption [ 197.415832][ T5835] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 198.279978][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'. [ 198.360789][ T8300] syz.0.539: vmalloc error: size 544768, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.447236][ T8300] CPU: 1 UID: 0 PID: 8300 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT(full) [ 198.447259][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.447268][ T8300] Call Trace: [ 198.447273][ T8300] [ 198.447279][ T8300] dump_stack_lvl+0x16c/0x1f0 [ 198.447301][ T8300] warn_alloc+0x248/0x3a0 [ 198.447318][ T8300] ? __pfx_warn_alloc+0x10/0x10 [ 198.447334][ T8300] ? alloc_pages_mpol+0x25a/0x550 [ 198.447354][ T8300] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 198.447371][ T8300] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 198.447395][ T8300] ? __kmalloc_node_noprof+0x364/0x8a0 [ 198.447412][ T8300] ? __get_vm_area_node+0x208/0x330 [ 198.447436][ T8300] __vmalloc_node_range_noprof+0x119b/0x1480 [ 198.447463][ T8300] ? __snd_dma_alloc_pages+0x53/0x90 [ 198.447483][ T8300] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.447506][ T8300] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 198.447527][ T8300] ? __snd_dma_alloc_pages+0x53/0x90 [ 198.447541][ T8300] __vmalloc_node_noprof+0xad/0xf0 [ 198.447561][ T8300] ? __snd_dma_alloc_pages+0x53/0x90 [ 198.447574][ T8300] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 198.447590][ T8300] __snd_dma_alloc_pages+0x53/0x90 [ 198.447604][ T8300] snd_dma_alloc_dir_pages+0x151/0x240 [ 198.447620][ T8300] do_alloc_pages+0x136/0x2d0 [ 198.447644][ T8300] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 198.447661][ T8300] snd_pcm_hw_params+0x1656/0x1ba0 [ 198.447687][ T8300] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 198.447701][ T8300] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 198.447726][ T8300] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 198.447746][ T8300] ? __asan_memset+0x23/0x50 [ 198.447763][ T8300] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 198.447778][ T8300] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 198.447807][ T8300] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 198.447843][ T8300] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 198.447863][ T8300] snd_pcm_oss_read+0x39a/0x760 [ 198.447883][ T8300] ? security_file_permission+0x71/0x210 [ 198.447900][ T8300] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 198.447920][ T8300] vfs_read+0x1e4/0xcf0 [ 198.447940][ T8300] ? __pfx_vfs_read+0x10/0x10 [ 198.447953][ T8300] ? find_held_lock+0x2b/0x80 [ 198.447968][ T8300] ? __fget_files+0x204/0x3c0 [ 198.447985][ T8300] ? __fget_files+0x20e/0x3c0 [ 198.448004][ T8300] ksys_read+0x12a/0x250 [ 198.448019][ T8300] ? __pfx_ksys_read+0x10/0x10 [ 198.448039][ T8300] do_syscall_64+0xcd/0xfa0 [ 198.448061][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.448076][ T8300] RIP: 0033:0x7f0c82f8f749 [ 198.448089][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.448103][ T8300] RSP: 002b:00007f0c83e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.448116][ T8300] RAX: ffffffffffffffda RBX: 00007f0c831e5fa0 RCX: 00007f0c82f8f749 [ 198.448126][ T8300] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 198.448134][ T8300] RBP: 00007f0c83013f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.448142][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.448151][ T8300] R13: 00007f0c831e6038 R14: 00007f0c831e5fa0 R15: 00007fffa97b33b8 [ 198.448172][ T8300] [ 198.448202][ T8300] Mem-Info: [ 199.630382][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.636675][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.998868][ T8300] active_anon:36594 inactive_anon:9 isolated_anon:0 [ 199.998868][ T8300] active_file:7832 inactive_file:39067 isolated_file:0 [ 199.998868][ T8300] unevictable:19368 dirty:828 writeback:0 [ 199.998868][ T8300] slab_reclaimable:11151 slab_unreclaimable:91493 [ 199.998868][ T8300] mapped:36350 shmem:28088 pagetables:1338 [ 199.998868][ T8300] sec_pagetables:0 bounce:0 [ 199.998868][ T8300] kernel_misc_reclaimable:0 [ 199.998868][ T8300] free:1302872 free_pcp:2378 free_cma:0 [ 200.311946][ T8311] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 200.419750][ T30] audit: type=1800 audit(1763743011.704:8): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.548" name="dbroot" dev="configfs" ino=20062 res=0 errno=0 [ 200.475840][ T8300] Node 0 active_anon:144488kB inactive_anon:36kB active_file:31328kB inactive_file:160556kB unevictable:78696kB isolated(anon):0kB isolated(file):0kB mapped:148240kB dirty:3348kB writeback:0kB shmem:108348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11824kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.528770][ T8343] random: crng reseeded on system resumption [ 200.915401][ T8300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.025293][ T8353] Unable to find swap-space signature [ 201.048594][ T8300] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.200536][ T8300] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 201.225970][ T8300] Node 0 DMA32 free:1282516kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:139716kB inactive_anon:36kB active_file:31588kB inactive_file:199756kB unevictable:1584kB writepending:3532kB zspages:0kB present:3129332kB managed:2545068kB mlocked:48kB bounce:0kB free_pcp:50580kB local_pcp:50580kB free_cma:0kB [ 201.320116][ T5835] Bluetooth: hci2: SCO packet too small [ 201.418279][ T8300] lowmem_reserve[]: 0 0 1 1 1 [ 201.423044][ T8300] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.612151][ T8300] lowmem_reserve[]: 0 0 0 0 0 [ 201.659725][ T8300] Node 1 Normal free:3908280kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 201.809365][ T8300] lowmem_reserve[]: 0 0 0 0 0 [ 201.814098][ T8300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.891273][ T8300] Node 0 DMA32: 4008*4kB (UM) 1500*8kB (UME) 1242*16kB (UM) 844*32kB (UME) 256*64kB (UME) 100*128kB (UM) 78*256kB (UME) 30*512kB (UM) 12*1024kB (UME) 1*2048kB (E) 279*4096kB (UM) = 1296544kB [ 201.988442][ T8300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 202.024614][ T8300] Node 1 Normal: 224*4kB (UME) 41*8kB (UME) 33*16kB (UME) 241*32kB (UME) 111*64kB (UME) 36*128kB (UME) 16*256kB (UME) 6*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3908280kB [ 202.128676][ T8300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.174970][ T8300] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 202.228638][ T8300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.265084][ T8300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.303030][ T8300] 79817 total pagecache pages [ 202.330081][ T8300] 29 pages in swap cache [ 202.350783][ T8300] Free swap = 124868kB [ 202.361326][ T8300] Total swap = 124996kB [ 202.384561][ T8300] 2097051 pages RAM [ 202.403031][ T8300] 0 pages HighMem/MovableOnly [ 202.422888][ T8300] 428694 pages reserved [ 202.438337][ T8300] 0 pages cma reserved [ 203.105496][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.553'. [ 203.330119][ T8372] bond0: (slave bond_slave_1): Releasing backup interface [ 203.395113][ T8383] zswap: compressor 000 not available [ 204.023311][ T8407] can: request_module (can-proto-0) failed. [ 204.139302][ T8415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 205.140984][ T8415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.202405][ T8424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 205.849231][ T8431] zswap: compressor not available [ 206.052945][ T8441] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 206.592453][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 208.142413][ T8499] Console: switching to colour VGA+ 80x25 [ 208.640088][ T5835] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 208.936246][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'. [ 209.202310][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 209.246971][ T8531] netlink: 93 bytes leftover after parsing attributes in process `syz.0.586'. [ 211.147331][ T8570] FAULT_INJECTION: forcing a failure. [ 211.147331][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 211.231955][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.1.598 Not tainted syzkaller #0 PREEMPT(full) [ 211.231976][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.231984][ T8570] Call Trace: [ 211.231988][ T8570] [ 211.231994][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 211.232016][ T8570] should_fail_ex+0x512/0x640 [ 211.232037][ T8570] ? __kmalloc_noprof+0xca/0x880 [ 211.232062][ T8570] should_failslab+0xc2/0x120 [ 211.232082][ T8570] __kmalloc_noprof+0xdd/0x880 [ 211.232102][ T8570] ? __lock_acquire+0x622/0x1c90 [ 211.232121][ T8570] ? sk_prot_alloc+0x1a8/0x2a0 [ 211.232141][ T8570] ? sk_prot_alloc+0x1a8/0x2a0 [ 211.232157][ T8570] sk_prot_alloc+0x1a8/0x2a0 [ 211.232175][ T8570] sk_alloc+0x36/0xc20 [ 211.232197][ T8570] pptp_create+0x32/0x340 [ 211.232217][ T8570] pppox_create+0x15c/0x2c0 [ 211.232235][ T8570] __sock_create+0x338/0x8d0 [ 211.232257][ T8570] __sys_socket+0x14d/0x260 [ 211.232276][ T8570] ? __pfx___sys_socket+0x10/0x10 [ 211.232295][ T8570] ? xfd_validate_state+0x61/0x180 [ 211.232320][ T8570] __x64_sys_socket+0x72/0xb0 [ 211.232337][ T8570] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.232354][ T8570] do_syscall_64+0xcd/0xfa0 [ 211.232373][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.232387][ T8570] RIP: 0033:0x7f5daf98f749 [ 211.232399][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.232412][ T8570] RSP: 002b:00007f5db08d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 211.232425][ T8570] RAX: ffffffffffffffda RBX: 00007f5dafbe5fa0 RCX: 00007f5daf98f749 [ 211.232434][ T8570] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 211.232443][ T8570] RBP: 00007f5dafa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.232450][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.232458][ T8570] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffe111e68e8 [ 211.232477][ T8570] [ 212.629296][ T8620] mkiss: ax0: crc mode is auto. [ 214.211050][ T8661] Console: switching to colour frame buffer device 128x48 [ 215.243078][ T8698] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 216.197057][ T8716] binder: 8714:8716 ioctl c018620c 0 returned -22 [ 216.606827][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 217.231343][ T8716] team0 (unregistering): Port device team_slave_0 removed [ 217.264342][ T8716] team0 (unregistering): Port device team_slave_1 removed [ 217.688892][ T8752] bridge0: port 4(veth0_to_bridge) entered blocking state [ 217.722205][ T8752] bridge0: port 4(veth0_to_bridge) entered disabled state [ 217.754837][ T8752] veth0_to_bridge: entered allmulticast mode [ 217.803531][ T8752] veth0_to_bridge: entered promiscuous mode [ 217.829845][ T8752] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.897187][ T8752] bridge0: port 4(veth0_to_bridge) entered blocking state [ 217.904411][ T8752] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 220.045461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.058036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 220.070820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.083158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 220.095441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.107700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 220.120167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.132596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 220.144891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.157182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 225.050018][ C1] net_ratelimit: 16518 callbacks suppressed [ 225.050035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.068313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 225.081223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.093715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 225.106126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.118514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 225.130858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.143150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 225.155530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.168010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.062382][ C1] net_ratelimit: 7460 callbacks suppressed [ 230.062399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.080551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.093618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.106030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.119048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.131310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.144488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.156778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.169752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.182017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 230.728553][ C1] sched: DL replenish lagged too much [ 235.075145][ C1] net_ratelimit: 10058 callbacks suppressed [ 235.075162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.093417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.105714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.118115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 235.131124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.143404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.155812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.168196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 235.181601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.193905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.088035][ C1] net_ratelimit: 10602 callbacks suppressed [ 240.088053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.106205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.118619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.131002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 240.143958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.156267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.168637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.181053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 240.194126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.206646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.099850][ C1] net_ratelimit: 11163 callbacks suppressed [ 245.099868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.118058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.130344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 245.143376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.155890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.168353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.180731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 245.193678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.206127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.218647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.112854][ C1] net_ratelimit: 10841 callbacks suppressed [ 250.112870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.131034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.143295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.155750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 250.168713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.181009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.193343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.205810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 250.218843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.231868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.124963][ C1] net_ratelimit: 11014 callbacks suppressed [ 255.124981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.143188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.155463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.167794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 255.181052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.193325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.205802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.218838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 255.231981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.244263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.137515][ C1] net_ratelimit: 10144 callbacks suppressed [ 260.137533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.156129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 260.170077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.182868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.195328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.208286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 260.221922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.234208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.246529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.259141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 263.373322][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.756410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.150563][ C1] net_ratelimit: 9968 callbacks suppressed [ 265.150580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.168694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.180984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.193306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 265.206469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.218876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.231243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.243660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 265.256668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.268923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.162378][ C1] net_ratelimit: 10268 callbacks suppressed [ 270.162396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.180786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 270.193784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.206153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.218590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.231089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 270.244567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.256979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.269369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.281701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 275.175223][ C1] net_ratelimit: 10632 callbacks suppressed [ 275.175240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.193633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.206108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.218564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 275.231727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.244151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.256470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.268908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 275.282076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.294598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.187801][ C1] net_ratelimit: 10846 callbacks suppressed [ 280.187817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.206046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.218383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.230724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 280.243699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.256056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.268368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.280846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 280.294019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.306289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.200092][ C1] net_ratelimit: 11011 callbacks suppressed [ 285.200109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.218388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.230727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 285.243698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.255939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.268346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.280701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 285.293780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.306099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.318416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.212905][ C1] net_ratelimit: 10905 callbacks suppressed [ 290.212922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.231460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.243745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.256158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 290.269722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.281975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.294422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.306762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 290.319751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.331968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.224924][ C1] net_ratelimit: 10903 callbacks suppressed [ 295.224941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.243478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.255827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 295.268800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.281078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.293364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.305683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 295.318695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.330980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.343568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.237488][ C1] net_ratelimit: 10864 callbacks suppressed [ 300.237505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 300.256499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.268875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.281193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.293498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 300.306677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.319027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.331447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.343776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 300.357059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.249964][ C1] net_ratelimit: 10898 callbacks suppressed [ 305.249981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 305.269539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.281983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.294308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.306790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 305.319971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.332239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.344634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.357197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 305.370296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.262680][ C1] net_ratelimit: 10818 callbacks suppressed [ 310.262698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 310.281587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.294032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.306372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.318807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 310.331830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.344169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.356460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.368907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 310.381970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.275405][ C1] net_ratelimit: 10946 callbacks suppressed [ 315.275422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 315.294722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.307056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.319975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.333144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 315.346243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.358568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.371010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.383338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 315.396348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.288157][ C1] net_ratelimit: 10795 callbacks suppressed [ 320.288175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.306434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.318724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.331038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 320.344621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.356888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.369138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.381485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 320.394427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.406661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.300028][ C1] net_ratelimit: 11021 callbacks suppressed [ 325.300045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 325.319565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.331829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.344346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.356764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 325.369815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.382175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.394473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.407097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 325.420073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.432140][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 325.432154][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8792/1:b..l [ 325.432598][ C1] rcu: (detected by 1, t=10502 jiffies, g=28137, q=1058 ncpus=1) [ 325.432612][ C1] task:syz.3.645 state:R running task stack:25544 pid:8792 tgid:8789 ppid:5830 task_flags:0x400940 flags:0x00080001 [ 325.432670][ C1] Call Trace: [ 325.432676][ C1] [ 325.432685][ C1] __schedule+0x1190/0x5de0 [ 325.432711][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 325.432735][ C1] ? __pfx___schedule+0x10/0x10 [ 325.432750][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.432765][ C1] ? __kernel_text_address+0xd/0x40 [ 325.432786][ C1] ? mark_held_locks+0x49/0x80 [ 325.432808][ C1] preempt_schedule_irq+0x51/0x90 [ 325.432826][ C1] irqentry_exit+0x36/0x90 [ 325.432843][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.432859][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 325.432880][ C1] Code: 0f c1 05 38 24 09 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d e2 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 325.432894][ C1] RSP: 0018:ffffc90003906c00 EFLAGS: 00000206 [ 325.432907][ C1] RAX: b746235f4fff0e00 RBX: ffffffff8e3c45e0 RCX: ffffc90003906c0c [ 325.432917][ C1] RDX: 0000000000000001 RSI: ffffffff8da03905 RDI: ffffffff8bf078c0 [ 325.432927][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 325.432936][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff822fc23c [ 325.432945][ C1] R13: 0000000000000206 R14: ffff88802761bc80 R15: 0000000000000002 [ 325.432956][ C1] ? __page_table_check_zero+0x33c/0x5d0 [ 325.432985][ C1] __page_table_check_zero+0x341/0x5d0 [ 325.433004][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 325.433024][ C1] ? __reset_page_owner+0x137/0x1a0 [ 325.433043][ C1] free_unref_folios+0xa4f/0x1610 [ 325.433066][ C1] shrink_folio_list+0x35c7/0x4800 [ 325.433095][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 325.433117][ C1] ? __lock_acquire+0x622/0x1c90 [ 325.433145][ C1] ? find_held_lock+0x2b/0x80 [ 325.433161][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 325.433182][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 325.433219][ C1] reclaim_folio_list+0xda/0x5d0 [ 325.433240][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 325.433259][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 325.433279][ C1] ? __pfx_reclaim_folio_list+0x10/0x10 [ 325.433309][ C1] ? lru_gen_update_size+0x543/0xe10 [ 325.433335][ C1] ? lru_gen_del_folio+0x32b/0x540 [ 325.433358][ C1] reclaim_pages+0x3ec/0x570 [ 325.433374][ C1] ? __pfx_reclaim_pages+0x10/0x10 [ 325.433388][ C1] ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0 [ 325.433414][ C1] madvise_cold_or_pageout_pte_range+0x14d1/0x20d0 [ 325.433439][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 325.433456][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.433475][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 325.433502][ C1] ? kernel_text_address+0x8d/0x100 [ 325.433516][ C1] ? __kernel_text_address+0xd/0x40 [ 325.433530][ C1] ? arch_stack_walk+0xa6/0x100 [ 325.433549][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 325.433572][ C1] walk_pgd_range+0xc05/0x1f50 [ 325.433592][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 325.433624][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 325.433638][ C1] ? __x64_sys_madvise+0xa9/0x110 [ 325.433658][ C1] ? do_syscall_64+0xcd/0xfa0 [ 325.433675][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.433695][ C1] __walk_page_range+0x163/0x820 [ 325.433714][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 325.433737][ C1] walk_page_range_vma+0x2c7/0xa20 [ 325.433757][ C1] ? __pfx_walk_page_range_vma+0x10/0x10 [ 325.433774][ C1] ? find_held_lock+0x2b/0x80 [ 325.433796][ C1] madvise_pageout+0x257/0x540 [ 325.433816][ C1] ? __pfx_madvise_pageout+0x10/0x10 [ 325.433835][ C1] ? finish_task_switch.isra.0+0x21c/0xc10 [ 325.433865][ C1] madvise_vma_behavior+0xb14/0x2d50 [ 325.433888][ C1] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 325.433907][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 325.433928][ C1] ? mas_prev+0x9b/0xf0 [ 325.433946][ C1] ? __pfx_mas_prev+0x10/0x10 [ 325.433969][ C1] ? find_vma_prev+0xd3/0x150 [ 325.433987][ C1] ? find_held_lock+0x2b/0x80 [ 325.434002][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 325.434027][ C1] ? __futex_wait+0x24b/0x2f0 [ 325.434043][ C1] madvise_walk_vmas+0x31f/0x9c0 [ 325.434067][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 325.434093][ C1] madvise_do_behavior+0x1e2/0x530 [ 325.434113][ C1] ? futex_private_hash_put+0xd5/0x190 [ 325.434133][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 325.434155][ C1] ? down_read+0x13d/0x480 [ 325.434183][ C1] do_madvise+0x176/0x240 [ 325.434204][ C1] ? __pfx_do_madvise+0x10/0x10 [ 325.434223][ C1] ? do_futex+0x122/0x350 [ 325.434255][ C1] ? syscall_user_dispatch+0x78/0x140 [ 325.434273][ C1] __x64_sys_madvise+0xa9/0x110 [ 325.434295][ C1] do_syscall_64+0xcd/0xfa0 [ 325.434313][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.434328][ C1] RIP: 0033:0x7f8c2738f749 [ 325.434340][ C1] RSP: 002b:00007f8c28268038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 325.434357][ C1] RAX: ffffffffffffffda RBX: 00007f8c275e6090 RCX: 00007f8c2738f749 [ 325.434368][ C1] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 325.434377][ C1] RBP: 00007f8c27413f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.434386][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.434395][ C1] R13: 00007f8c275e6128 R14: 00007f8c275e6090 R15: 00007ffeb3117068 [ 325.434415][ C1] [ 325.434421][ C1] rcu: rcu_preempt kthread starved for 292 jiffies! g28137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 325.434437][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 325.434444][ C1] rcu: RCU grace-period kthread stack dump: [ 325.434449][ C1] task:rcu_preempt state:R running task stack:28136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 325.434501][ C1] Call Trace: [ 325.434506][ C1] [ 325.434514][ C1] __schedule+0x1190/0x5de0 [ 325.434536][ C1] ? __lock_acquire+0x622/0x1c90 [ 325.434559][ C1] ? __pfx___schedule+0x10/0x10 [ 325.434579][ C1] ? find_held_lock+0x2b/0x80 [ 325.434594][ C1] ? schedule+0x2d7/0x3a0 [ 325.434612][ C1] schedule+0xe7/0x3a0 [ 325.434628][ C1] schedule_timeout+0x123/0x290 [ 325.434643][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 325.434658][ C1] ? __pfx_process_timeout+0x10/0x10 [ 325.434677][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 325.434695][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 325.434716][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 325.434739][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 325.434760][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.434778][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 325.434797][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 325.434820][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 325.434839][ C1] rcu_gp_kthread+0x26d/0x380 [ 325.434860][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 325.434879][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.434895][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.434914][ C1] ? __kthread_parkme+0x19e/0x250 [ 325.434933][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 325.434953][ C1] kthread+0x3c5/0x780 [ 325.434974][ C1] ? __pfx_kthread+0x10/0x10 [ 325.434996][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.435011][ C1] ? __pfx_kthread+0x10/0x10 [ 325.435033][ C1] ret_from_fork+0x675/0x7d0 [ 325.435054][ C1] ? __pfx_kthread+0x10/0x10 [ 325.435075][ C1] ret_from_fork_asm+0x1a/0x30 [ 325.435104][ C1] [ 325.435109][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 325.435120][ C1] CPU: 1 UID: 0 PID: 3409 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 325.435137][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.435147][ C1] Workqueue: bat_events batadv_tt_purge [ 325.435171][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 325.435186][ C1] Code: 00 e8 a2 2f 29 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 50 2a 21 00 48 85 db 0f 85 55 01 00 00 e8 d2 2e 21 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 e7 db 88 [ 325.435199][ C1] RSP: 0018:ffffc90000a08038 EFLAGS: 00000246 [ 325.435210][ C1] RAX: ffffffff8f060e38 RBX: 0000000000000000 RCX: ffffffff819b28a0 [ 325.435220][ C1] RDX: ffff888030b3bc80 RSI: ffffffff819b28ae RDI: 0000000000000007 [ 325.435230][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 325.435238][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f060e38 [ 325.435247][ C1] R13: ffffffff8f060de0 R14: ffffc90000a080c8 R15: dffffc0000000000 [ 325.435257][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 325.435272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.435281][ C1] CR2: 00007fb8461156c0 CR3: 00000000312a4000 CR4: 00000000003526f0 [ 325.435291][ C1] Call Trace: [ 325.435295][ C1] [ 325.435305][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 325.435326][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 325.435345][ C1] console_unlock+0xd8/0x210 [ 325.435359][ C1] ? __pfx_console_unlock+0x10/0x10 [ 325.435376][ C1] ? _printk+0xc7/0x100 [ 325.435395][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 325.435418][ C1] vprintk_emit+0x3d7/0x680 [ 325.435434][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 325.435449][ C1] ? find_held_lock+0x2b/0x80 [ 325.435468][ C1] _printk+0xc7/0x100 [ 325.435491][ C1] ? __pfx__printk+0x10/0x10 [ 325.435512][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 325.435531][ C1] ? __pfx____ratelimit+0x10/0x10 [ 325.435550][ C1] br_fdb_update+0x4ad/0x7c0 [ 325.435566][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 325.435578][ C1] ? br_allowed_ingress+0xdd/0x11b0 [ 325.435593][ C1] ? mark_held_locks+0x49/0x80 [ 325.435615][ C1] br_handle_frame_finish+0xdf1/0x1f00 [ 325.435636][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 325.435660][ C1] ? ip6t_do_table+0xc25/0x1c30 [ 325.435684][ C1] ? nf_hook_slow+0x132/0x200 [ 325.435700][ C1] br_nf_hook_thresh+0x307/0x410 [ 325.435718][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 325.435737][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 325.435754][ C1] ? ip6table_mangle_hook+0xcb/0x770 [ 325.435779][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 325.435795][ C1] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 325.435819][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.435841][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.435869][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 325.435888][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 325.435910][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 325.435929][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 325.435947][ C1] ? lock_acquire+0x179/0x350 [ 325.435968][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 325.435987][ C1] ? net_generic+0xea/0x2a0 [ 325.436006][ C1] br_nf_pre_routing+0x860/0x15b0 [ 325.436027][ C1] br_handle_frame+0xb28/0x14e0 [ 325.436047][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 325.436066][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 325.436088][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 325.436105][ C1] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 325.436133][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 325.436148][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 325.436170][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 325.436193][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 325.436210][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 325.436229][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 325.436245][ C1] ? ip6_mc_input+0x515/0xf60 [ 325.436261][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 325.436278][ C1] ? __lock_acquire+0x622/0x1c90 [ 325.436300][ C1] ? process_backlog+0x3e7/0x15e0 [ 325.436320][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 325.436343][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 325.436365][ C1] ? lock_acquire+0x179/0x350 [ 325.436388][ C1] ? process_backlog+0x3e7/0x15e0 [ 325.436409][ C1] __netif_receive_skb+0x1d/0x160 [ 325.436430][ C1] process_backlog+0x439/0x15e0 [ 325.436456][ C1] __napi_poll.constprop.0+0xba/0x550 [ 325.436481][ C1] ? skb_defer_free_flush+0x149/0x280 [ 325.436500][ C1] net_rx_action+0x97f/0xef0 [ 325.436526][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 325.436548][ C1] ? mark_held_locks+0x49/0x80 [ 325.436567][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.436585][ C1] ? tmigr_handle_remote+0x132/0x380 [ 325.436605][ C1] ? run_timer_base+0x121/0x190 [ 325.436625][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 325.436647][ C1] handle_softirqs+0x219/0x8e0 [ 325.436667][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 325.436685][ C1] ? batadv_tt_purge+0x25f/0xb80 [ 325.436707][ C1] do_softirq+0xb2/0xf0 [ 325.436722][ C1] [ 325.436727][ C1] [ 325.436732][ C1] __local_bh_enable_ip+0x100/0x120 [ 325.436749][ C1] batadv_tt_purge+0x25f/0xb80 [ 325.436775][ C1] ? __pfx_batadv_tt_purge+0x10/0x10 [ 325.436802][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.436820][ C1] process_one_work+0x9cf/0x1b70 [ 325.436849][ C1] ? __pfx_process_one_work+0x10/0x10 [ 325.436876][ C1] ? assign_work+0x1a0/0x250 [ 325.436898][ C1] rescuer_thread+0x620/0xea0 [ 325.436927][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.436942][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 325.436963][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.436981][ C1] ? __kthread_parkme+0x19e/0x250 [ 325.436999][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 325.437021][ C1] kthread+0x3c5/0x780 [ 325.437042][ C1] ? __pfx_kthread+0x10/0x10 [ 325.437063][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.437078][ C1] ? __pfx_kthread+0x10/0x10 [ 325.437100][ C1] ret_from_fork+0x675/0x7d0 [ 325.437119][ C1] ? __pfx_kthread+0x10/0x10 [ 325.437140][ C1] ret_from_fork_asm+0x1a/0x30 [ 325.437168][ C1] [ 326.901336][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.313152][ C1] net_ratelimit: 5331 callbacks suppressed [ 330.313170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.331472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.343843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.357632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 330.370659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.383075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.395483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.409274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 330.422367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.434768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.325212][ C1] net_ratelimit: 6331 callbacks suppressed [ 335.325232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.343533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.357232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0) [ 335.370319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.382578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.394846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.408549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:82:e4:66:85:c5, vlan:0)