last executing test programs: 1m45.742953662s ago: executing program 3 (id=1290): listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0xf4240, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, r1, 0x5, r1}, 0x92) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='4', 0x1) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) 1m45.139534985s ago: executing program 3 (id=1291): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002ca4706b67dbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004814) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x400300, 0x9}, 0x7}, 0x3, 0x0) 1m44.808227113s ago: executing program 3 (id=1292): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/vlan0/use_tempaddr\x00', 0x143402, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0xa0, 0x6, 0xf00, 0x15, 0x3, 0x0, 0x0}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) sendfile$auto(r2, r0, 0x0, 0x48) 1m44.325152964s ago: executing program 3 (id=1294): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x90203, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/nr_anon_partially_mapped\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/225, 0xe1) write$auto(r2, 0x0, 0x1eb0800) mmap$auto(0x0, 0x0, 0x400000dc, 0x937e, 0x2, 0x8000) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x8, 0xfffffffffffffff7, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto_MSG_INFO(0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mouse0\x00', 0x22002, 0x0) readv$auto(0x3, 0x0, 0x1) write$auto_mousedev_fops_mousedev(r4, &(0x7f00000000c0)="13", 0x1) 1m43.753119482s ago: executing program 3 (id=1298): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) read$auto(r0, 0x0, 0x1f40) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 1m39.308332057s ago: executing program 3 (id=1309): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000240)={{0xffffffff, 0xffffffffffffffff, 0xee00, 0x9, 0x7, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x3, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x1, 0x33}) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r2, 0xfffffe00, 0x41, &(0x7f0000000300)='\xa0@\x00', &(0x7f0000000340)=0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) 1m23.594147048s ago: executing program 32 (id=1309): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000240)={{0xffffffff, 0xffffffffffffffff, 0xee00, 0x9, 0x7, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x3, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x1, 0x33}) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r2, 0xfffffe00, 0x41, &(0x7f0000000300)='\xa0@\x00', &(0x7f0000000340)=0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) 1m3.236855625s ago: executing program 0 (id=1351): r0 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x80c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="08029200", @ANYRES16=r3, @ANYBLOB="251729bd7000fcdbc725010000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) r4 = pidfd_open$auto(0x1, 0x0) process_mrelease$auto(r4, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r3, @ANYBLOB="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"/918], 0x39c}, 0x1, 0x0, 0x0, 0xc804}, 0x80000) pwritev$auto(r0, &(0x7f0000000080)={0x0, 0x10001}, 0xd, 0x1000000000000002, 0x4f) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zram0\x00', 0x18f446, 0x0) pwritev2$auto(r6, &(0x7f00000003c0)={0x0, 0x200}, 0x8000000000000004, 0xffffffffffffffff, 0x4, 0x8) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001380)=""/134, 0x86) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r7, 0x65, 0x1, 0xffffffffffffffff, 0x0) 1m2.602755988s ago: executing program 0 (id=1354): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0xffffffffffffffff) migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0) socket(0x15, 0x5, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon16\x00', 0x48641, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x101400, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x66, 0xa7, 0x10000000000004, 0x6d40, 0x1, 0x6, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m1.426018162s ago: executing program 0 (id=1355): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x90203, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/nr_anon_partially_mapped\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/225, 0xe1) write$auto(r2, &(0x7f00000002c0)='/d-:\xe7J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xea>=\xe8hUs\xf3N\x10$#_\x01\xdc\x16<\xda>ui\x9eS;\n\xeaG@\xf9\\r\xbc\x06\xfa\x1b\x8d \x9ebd\x10\xea#\xcb(o\x9ei\x89\x84\xa7\x85\xad\xe1\xe0\xf19\xfa4\xb5\ad\x84\f\xc9\x12a3\xb9~\x87\x1c\xd1\xf4V\x06\xa7\x00\x01D\x1eo\xfd\x03\xbe\xd8\x05H|+wsSs\xf9\x11\xc9\x13x\xe0\x8e\x109J\xe7\x9f\x99\x82G(\xabH\xee\xaaPs_\xc3\x00'/157, 0x1eb0800) mmap$auto(0x0, 0x0, 0x400000dc, 0x937e, 0x2, 0x8000) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x8, 0xfffffffffffffff7, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto_MSG_INFO(0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mouse0\x00', 0x22002, 0x0) readv$auto(0x3, 0x0, 0x1) write$auto_mousedev_fops_mousedev(r4, 0x0, 0x0) 1m1.013524082s ago: executing program 0 (id=1357): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r4 = setfsuid$auto(0xee00) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) (async) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) (async) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8880) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x122, 0x400, 0x2}]}) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x122, 0x400, 0x2}]}) 59.711881733s ago: executing program 0 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x201, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0xe00}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xa}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) (fail_nth: 6) 59.593167972s ago: executing program 0 (id=1360): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0xa0000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0xc6, 0x0, 0x0, @binary}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x58}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000814) (async, rerun: 64) io_uring_setup$auto(0x1, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x3, 0x38) 46.794144937s ago: executing program 2 (id=1361): socket(0x22, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x51) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r0, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3b) io_cancel$auto(0x9, &(0x7f0000000280)={0x4, 0xe71e, 0x3, 0x8, 0x3, r1, 0x100000000, 0x4, 0x5, 0x0, 0x0, r1}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00`^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xb, 0xd, 0x8fd6, 0x40009488, 0x3, 0x7, 0x43, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r4, 0x80044dfe, &(0x7f0000000600)="a09e77a31cecfba3b7dd44dbc9863ee66d82cf36718b9507fc2e6b64438b05c165a018d7bb9bc9929bb7c04dfed478289b86cfd9b5ddebbaf6a78b961a5d5aa8b68156dee77da450c9b1d2b1c3473453d26e1ac10066a9535836bfd8f8f7d16f75228e8e5fafeb5a8a6980a3d8ee9b369052646d0750e8ca9bb645d55e0e742701394797f084d1bb873ed5c7eac151dcd070c48c41905505fc6b4716ac33898a8c0b0f7c47575f1976d13a63e46aed94da9033137e0edf70bfa81355d2") open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) 42.660399923s ago: executing program 33 (id=1360): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0xa0000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0xc6, 0x0, 0x0, @binary}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x58}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000814) (async, rerun: 64) io_uring_setup$auto(0x1, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x3, 0x38) 42.291569659s ago: executing program 2 (id=1364): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x90203, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/nr_anon_partially_mapped\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/225, 0xe1) write$auto(r2, &(0x7f00000002c0)='/d-:\xe7J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xea>=\xe8hUs\xf3N\x10$#_\x01\xdc\x16<\xda>ui\x9eS;\n\xeaG@\xf9\\r\xbc\x06\xfa\x1b\x8d \x9ebd\x10\xea#\xcb(o\x9ei\x89\x84\xa7\x85\xad\xe1\xe0\xf19\xfa4\xb5\ad\x84\f\xc9\x12a3\xb9~\x87\x1c\xd1\xf4V\x06\xa7\x00\x01D\x1eo\xfd\x03\xbe\xd8\x05H|+wsSs\xf9\x11\xc9\x13x\xe0\x8e\x109J\xe7\x9f\x99\x82G(\xabH\xee\xaaPs_\xc3\x00'/157, 0x1eb0800) mmap$auto(0x0, 0x0, 0x400000dc, 0x937e, 0x2, 0x8000) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x8, 0xfffffffffffffff7, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto_MSG_INFO(0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mouse0\x00', 0x22002, 0x0) readv$auto(0x3, 0x0, 0x1) write$auto_mousedev_fops_mousedev(r4, 0x0, 0x0) 41.928745365s ago: executing program 1 (id=1365): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) madvise$auto(0x0, 0x200007, 0x8) sendmsg$auto_NL80211_CMD_GET_MPP(r1, 0x0, 0x880) read$auto(r0, 0x0, 0x1f40) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 41.900579877s ago: executing program 4 (id=1322): prctl$auto_PR_SET_IO_FLUSHER(0x39, 0x5, 0x100000000, 0x8000, 0x2bf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x8, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x100, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f0000000080)=""/238, 0xffffffe9) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event1\x00', 0xa140, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)="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") socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/cpuid\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x29, 0x2, 0x0) setsockopt$auto(r3, 0x80000000, 0xac3, 0x0, 0x800008) select$auto(0x5, &(0x7f0000001180)={[0x3, 0xfffffffffffffffd, 0xd5, 0x8, 0x3, 0x101, 0x3, 0x400000001ffe000, 0xcad, 0x2, 0x400009, 0x10, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mknod$auto(&(0x7f0000001140)='X))\x00', 0x1, 0xeffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x83, 0x202000a, 0x3, 0xebf, 0xffffffffffffffff, 0x5) 40.751615595s ago: executing program 2 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x60}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x4004000) 40.525361769s ago: executing program 4 (id=1367): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0xf0) 40.258342881s ago: executing program 2 (id=1368): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) pwrite64$auto(0xc8, 0x0, 0x4e, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) 39.661817941s ago: executing program 2 (id=1369): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r0, 0x0, 0x400000, 0xc) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b3, r1) 39.538014657s ago: executing program 1 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r1, 0x929, 0x70bd28, 0x25dfdbff, {0x3, 0x0, 0x1500}, [@HSR_A_IFINDEX={0x8, 0x2, r2}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0x4054) 39.168523495s ago: executing program 1 (id=1371): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) pwrite64$auto(0xc8, 0x0, 0x4e, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x86, 0x0, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x8501, 0x0) 38.648476487s ago: executing program 1 (id=1372): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) ioctl$auto_BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)={@raw=0xfffffffffffffffb, "8dcfadcd9f4874317fb6a28199b29db89aa8142c84d185b37414a3073d3226c9419271285b86f66116ce2432388e63af7de0417edbb2f777e5d5d8c33b1177c3fda5f71c88128a12276697c5828dc966eb97caf6e8959466c1f7d03dac3ee2717a71c93a0a298c2e536c060ad6da6af4692f2ba6d0d5febe2c8e611b77695ee370405384e29278e78202af449df4031fd41be77632709bd37fdc90d3dde65229111268aa09a6b7b4193d5588c84ffabc598b79fa63d6f4414ee882ca544bc547a565c2e4b34a09245c138da9a8f7cf8c054c7e4d7fad690475ff0d206d1e3c00a82e962f0c0f0abd54853f5ffb5b23d6d304eccccd284ae1d0fbc63e080cef9ad8dd7e598258e81a187757604f5e90ba126a857f3c93f002248afccca39f6bce6ebe5829385c925308c0cc3370d8c51e49e69a1c9c6a985e41fa24a67cbe369eed855aec7abdb9c57da7a236400e949ec233fec001c302b8149993940dbf0ee10ba1380a6655dd70b8ad3e72ab59f6d88824b0a624f98f567b3077f924eef68dda2c620435a56fecacd555ab0d50b5279674a450d07b63cb1edd9babcd5397b7981b2ee5d2c8b69afd0a29fab344cf4a3b43a292fb795fa48f1b215018a70aed795d1872a26f5d5f8372bbb2b44a14cbd2ac5d3794d2eeb736da29dd955f77b7e8beb977e8c69d0d95a316306889c2d5a2815b47b51af70e5106957f1e76bde316b94f57be5e383c2902262f8204aff8f62e652e1eab7e7960bf3dcf403067061bcb085396f008c935ea50e8eeec5e21243ecd64b5d42b3fca623deaed3c3f1a8ff53a790f38c109110b873f06dfa217e301e6014ee402258209fd1d962757216e6f019e0976f4826fb71a2d46aa78a9891fcdbddcec0951855bb47ca4d223376bf94d0c2c1b5ba524a063b087879d736d1cab3eb72c1c54c2859990bc8514b2cd8e912c625a8d8b31b5a31d3897ba824f6211167b662f7891ce47d53996b54abb057dacbb88a8b2119625f82b829b741da404e947a12e89ede48d321c132e840b253040ca0dba70b9e51ec7d2997e4cd3d034ece7849a1dea2677f316bab3d3e80a2c64ee6dce114ba68e5ece1933166e90b3b32eb29f8724accd7a7b484c555eb813187927d0da8ced68e6c60fbd6c529a19870100f47ec8430bbd072aec074fba6eda74bf9180c509c239461013121f7bc207a2591a9204d74a8f4bf67a7af4615a685936ff1a9cd96a4d7c27e2698bf4ef3d32f978190d6b83bdcdb178e668e24905196e3f1212518e255569f16d1d0615ea76c5799ca04946df6ebe258bf9c70826fb70f19afb65bbda9e5123d6e6cc4e92f06513a224c549b0dd4778c523886d786c59d7e726d040f32e306e3d6e6baba2a64ade23e2898f4ae6220f76a180a9398eb78dda5f42909b83d13bc5f8af7601bc2dd8d84e5590ec1a6a50166701b506b49e1e982713212a38e605ee178a9d28de4d125e2c6df7a705d906ac74870256238b1223f9e05e82c58f131e01bcefa8eb67df06b5b6cbfe453dc7a62a0c11024e9e0d8a21df737347ca008f89aa0223f56ccee2865b88e0b003f429cc6fd38066db9543952a07cc94fbef70a859907814d8b05fdadaa8aa7ee32dfe359447852d3bc2ae035e5372aa2cd39c253647ffd944ae0a744f3b7c62948480625780252238ce8ba827894dbf10d5098cdfc9570afe9674a4f9825202f6739146e76a5809e4e882593ef2905a55f102e4f145496475aa5c43db4de4c65167da37bc78d7be01f003c4453917d184957d924cbe6066aa0b505ff9d34d209784085389dcd85c4ab80a8df173c984d4eca0797918316de316b0666fe85ac1ed30c0f3943758b087ff23f552662329a14e245179704af75115000787137a95f3141e4332fdb9b5a5d899ecd47e9d97c4899a765ff8f986e8bcf7b099d38a2efa9de89ab50ff090c37d1a8914b957fae41a63ba802302320662baef62a58214e0504d28bb72099fe5b33d4c43c06fba3c5080984f1b498522ba8bf10e1c5b9d973323579310bcbf6bc574133689818c75a7a4fc245f227e3ccad363f2b7d444398bca6ae648238e0a18324e0e47ff7ae460ff8536259d5181fef5eeddfcc042d33c59e42ef75fb8a487bdaed200a24eb7be85e04ca7ee9d379e904c0a25a8d6f7108e459b73bad1584507b51bd3719f446e6ad4a21ccc3e6fecddcfd7a25011fc991028e7f1848a44cb3d80a663178a2f2b9f2c9f37dda28eabe1ac859c4d453918f0a5fab3ff01852c74439823964bd0b80ccdba33b9e78e7e26ee7cc19808e8daf19b2c66ad98a480e40ad1c30b7133e9b57237ddee3ea222a98880bcbf3100918feabcd6478d45295c9a4ee46a1227fe520a18635e717eeb68f4184106ac81e27a8daa516ae893acdc6a658264259d26bdce5ab705288d4e4bcf9c173985819f7313d0a4c5fd14805ffd6abe4cd033a93324fb5f5dfb3e69f30cf7b9c5e2a8e29593cdbb52d8133001544250a6ec1570618f2c2dd1a467aefc0dea4e6236d23721dd6171c9276bc246b7d658e4b9ab009d6e0ef27eb867cce901376dd56712d6b5523ffa25b126f2461cc267fda602ff7e026e3156f935a10f18cd8b2969f20a625ca477f5df92926f27e69c6dd1dbb7ab3c645a19aa0cd58b6e16e6442ecfd80c96a9929004a0990c186146456df588536ab35dd391ae54e753f32c84f9a1f3dd4aaa8f8e763dc618fceea4e5617f25e2095b06cd99a34531e4aec9795e2645428407d219044917d73c72b5d9ca361c58da86a4d853a48a5d753ef0b05ec385c072dd4b48c9a6a8d76089f3111ea0e459f336d2d7cc60cf70c1a3edd32c2080d2ef9705ff42ae7cb636cd66740133297be5af174175939f2110709ded3e2038c8f4a0e8ec3c69dbc233966cdad7dd7733453c84f006f13e26386faa9c1e44756b84b6328188d19a1bf74837e8b9c7115ceb77dc4ba7af1ce0241882a9d0e25ce4adf9cde9fa81f24fe11870d9e02877ebaf0393142d7d23de7a4c8e7265e269fc46b01e2c71ef148ba6418785889c3aadaeb375d100f07d68e3bbb258420705b13a5c37e7175debd58db70bb6b42441207c8188321c211f739d983be91f7a6fcadcbc5a0753c51889c90744154a173313fdb8c1baa882700654fd0bbec1a427b78540333c7dd488952e394961e44878f8f750cc89ebec5031581c482512af2fcf15ca7d601df5bc6abea60dfffa2b728aeb53f5767d2e1770cf77d313f6e4aeb6253719ffd4226f098792d4c28a64dd0622aba5117a8bb4ab5e4bd0f15c77518a04ea02820587513c90f7bb7bcfc7779a66e3132ec0f2c4a712b10e1a909c5da52aa7cab55fd8b1702274bf6fbf4143eb10daca7251a97dff3a2f7aa6ac1849544c21cdba80f0c4dbb4d331471e657fd70a392ed7933ed815c31416ef985e528ceca9d826f7f237992a4bb8585a4185071f6cb2311cb96c04a318e074a9bf879dc4f47667c5af90465939060dc4d625ac2e37d605142951869fb04b72e42223c9bc8f48c55a418e89689b4378b349f8926ae214c5ebd2bbdc895abe4303d725c2a287de42c6b1044c1ffc02aaa53891382a1c9717036226a018871f6c26406ef792bd6df9c0950654e385519e49123d883cc90f6ca35f7fe44777433386102450e46ef46eb723621534525dee9140d045c1d6c1cee2d4f712df7dcbe89b509a67316be255dd3ca9fa747925104db917425441e83f48fef9c1e0bf61fd8ff80a388bf9c707dc2d6cb195a60a5284234c8f91d011d3acbf16fd4a5f6f4f8b94d0038e3dbbb7a82d5ad05dfafdd0b6aabb3d03c9f480d614d25bb2adf5893ab7253301ed55adb30f094e1c13f2c19d20aa36a15808a3e5e88d0b93e8ac6bef2ed26c5d4d6348f428b4f8c72736d40f1fd0d27c326048b6d8aa71441af38580b8fb33eea2ca2b22d7a848939411726845f8a2432bb9fb64e525a1e45be6212415036ef48523ebdc1becf0a75c9c698359536baf5378157b319b5b51ee43124271c9c2c970068d412cf4ad1e91d9277bfe081ca0b1f7df5b0854bb317c77709ec10fe50f3f36dec49e3eb5b9ed7dc6140edb85ba26e26084f4ad7872488c1bf4fb6f3d7a6e40bd61b8088054b582eb616cfe2ce4310a429291d8cafc669866c9d6ad50799352175afdfca6f505db3f17032e37e6a16b7ba96dd46d816c148d6c144fe5e5cd7e54588784f5cf721cb4cb7ea3360dcb60a757310e437e97ba9ed9e775f6586e128993a9c342dec52fcad16e06dda68b24f787cc3d770cde16ce3261abbc7b5559583bed72d5bcfd724ec606c01a9fa1d4e7e58fdb4b617409ba31efe2bc97ba927faaf42c7fdbea68aaf849c232a5cb8b38152da18ba1f3cf818ca72310fbf719d3570abb03f69566f65c3b0434a5dd35f15ffc087d08dcd4dcffa1c0aba37ff4bd905f5473b833271da82ff93a02a7563941eb3f573dd859a30682056d432720a3f58a4890fdc3e6d62d3183ac078adbe41ce19d50f898e808fb86bce39bd8a0c265f4a60c1d59552aa7991b6f263b6234ec5110db24c0ee7690b26a5fa3c9f748b8536749e6a77c61478456a426cd0dc753524965b5316fabacd5b62e2fd5d23cd4c3e2a4e989e93fc2257606c76942bf48aaa70ea24d15bb5ea272941a6142cd25e19d9b7209aecd79ed9faf8670d62f6c0e492582b287ad05ec39c208f54f87f6eeddf75f5335a6dbdc268414a05e776838ffbf67875658d8cbb61f7f09137f60c92569b3d7c7dea15c7a9f425c40cfac017c001eea1ae7af576ff3d7700957c807459c12194f3c21f74404d65d7a58a3b60039ce9e554b32ac9deec0259232552ddce7b3da42ddfc5aeeb4c1bb3d9bd591e59a7e41d62948f7f44c1c0d171c10118fbbe1d1bf640704a25d9492b7fbcabab0d78995c9f3ebb67f2aae5d1a26d32a07c9c9a18602856b37258585297b3c65cbda9273c2705cb6c2d112668a6f805bd39e1b371dd118ab029b60391764cdac8dde0a81f0b2157075f09919819cbc44519c147d8d2cbf8dd9593685ddec3afa4e1f0786971be1c8d3847d05c52fb7f10319979e66522ba822468d689da6b805315b8e1af20e8e50d27ef22729f2212b7bdd84975227c7dea95caaa4009a4c9e413247c9a6fa404d19f6f59cb57bbd1ed739fe9038e1ed6f720f95ab57eee6a353a6101bd4812c04b4dbbf69dc254ccf35dc2437484d95f4de43b94b5da760f6b97dda835ccf851f6aeaacda8f94a69095db2fe53732654d2c992951fe7718188f9797b6aebe06c8b045dc8850485b1f2d680ab0b27222e5f181d104975c11128245a223458d858ad97b4da6291f0585f6c99d7849f0a2e063ca5bed4aa7501daccb3603401957d58e9d7300fc7d5973b9ab3860ab974c31df9c2cfb4e6deecd20755c02f41ddf2aec7c222ece953fa24334c684e7dea0386cf9528acd18810157b84b064a1327e1d7511c60a471699ba91be47859b434055699e835e6729cc83a1e2b9a53b1c93973c3beed72257be939b33cf5971fe8e0fca066cccb2289074359eb853d3dce26327a04e4334edcc49ab2fa46c2af5d5289c87c1de1445d4c8e9c637a8f21194b135e4ccdcabe71865f6c55a262fd2cffbfad46edaa3b962290b3c64acce68ad440030932a9c67e5db5a1b1e6f2d0b64acc86a257e0f3fe5c58fc0660fbe41ec0d3b1a76437ec8aedfa3520e50141e7733f9a378a41feb1eb1f750a74a292e8962c7fd872095bb8e0d88d9df668471dfa33232f2bfcc7370a4a42"}) (async, rerun: 64) r0 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x1, 0x329, 0x10011, 0x2, 0x8000) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video3\x00', 0x40080, 0x0) (rerun: 32) ioctl$auto(0x3, 0xc058565d, 0x38) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f00000000c0)="b01fa3ae117d1650ecb680e75cb96df89b47f0a3902d1622471ca399a1d92cb0860ee80493b10f3fbf7b61c040e54b6bf1910ff247322b6943fca3095b5587b0c529269145a7c677dfe0087561b99dce17b375d833c5c6ec2249bfb656d00f0c8b9ccead76597d1ebacc665570ab54dff39c5770b3") (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x201) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) (async, rerun: 32) mmap$auto(0x7, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8002) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) munmap$auto(0x40000000008000, 0x2) (async, rerun: 32) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 32) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) 38.544040154s ago: executing program 2 (id=1373): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x20006, 0x3, 0x12, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r1 = syz_clone(0x25342080, 0x0, 0xfffe, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) process_vm_readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000140)="66cdff317494273e38ed2170e952ade7e64a6bb613eac2574efd755d4d0274bf2af580028fc7cab24b122c680da4b2588fab69f6073355543e64468c1979f28c499463f44bcbd2bce3603cb638dfa975e477cba783bbb34caae40a1e267c3907820b28e607ebabe0b9dfb8b2ab490508341473cada6070d30b1023cfce69ff1f4fccf30eef5134", 0x6}, 0x5, &(0x7f00000002c0)={&(0x7f0000000200)="70c1fd089b73269276eed11f072c078f05cc99ad8f26fa5035badcb3bcde7bf19c18c5f4a4c3a4b769c11e9c718654056fdd363fc0e548c411eaf4b57c912c489234fc3cbbbc0cd40227ae11974e45e73c8d90eece8464fe367b8e69dfe975d9bd8ba0f673be2df016ee2d5e5173668d74d1bd9898f0b99a49ca9674f62d91ee24", 0x100000000}, 0x7, 0x9) 37.325670614s ago: executing program 4 (id=1374): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x90203, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/nr_anon_partially_mapped\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/225, 0xe1) write$auto(r2, &(0x7f00000002c0)='/d-:\xe7J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xea>=\xe8hUs\xf3N\x10$#_\x01\xdc\x16<\xda>ui\x9eS;\n\xeaG@\xf9\\r\xbc\x06\xfa\x1b\x8d \x9ebd\x10\xea#\xcb(o\x9ei\x89\x84\xa7\x85\xad\xe1\xe0\xf19\xfa4\xb5\ad\x84\f\xc9\x12a3\xb9~\x87\x1c\xd1\xf4V\x06\xa7\x00\x01D\x1eo\xfd\x03\xbe\xd8\x05H|+wsSs\xf9\x11\xc9\x13x\xe0\x8e\x109J\xe7\x9f\x99\x82G(\xabH\xee\xaaPs_\xc3\x00'/157, 0x1eb0800) mmap$auto(0x0, 0x0, 0x400000dc, 0x937e, 0x2, 0x8000) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x8, 0xfffffffffffffff7, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto_MSG_INFO(0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mouse0\x00', 0x22002, 0x0) readv$auto(0x3, 0x0, 0x1) write$auto_mousedev_fops_mousedev(r4, &(0x7f00000000c0), 0x0) 35.164145204s ago: executing program 4 (id=1375): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x1, 0x4) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe97f, 0x3, 0xeb1, r0, 0x8000) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vhci_hcd.7/usb23/bDeviceSubClass\x00', 0x1f5280, 0x0) mmap$auto(0x0, 0x400000000020009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x200, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0x1254, 0xd77, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9a89, 0x5, 0x80003, 0x4, 0x1fffffffffff, 0xb4, 0x4000000003, 0x2, 0x10007, 0x80, 0x0, 0x0, 0xa, 0x6, 0x10000200, 0x2, 0x84, 0x0, 0x4, 0x0, 0x3ff, 0x0, [0x0, 0x0, 0xea4, 0x4, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x5, 0x1000000000, 0x0, 0x0, 0x4, 0x8a, 0x2, 0x0, 0xcf, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000000, 0x0, 0x3]}, 0x20000001fd, 0xd) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) 34.972592504s ago: executing program 1 (id=1376): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x8) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) mmap$auto(0x0, 0x4020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0xc) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000140)={{0x85, 0xee00, 0xee01, 0x2, 0xfffffff7, 0x1, 0x2}, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x1, 0x0, 0x73000000000, 0x0, 0x6, 0x7, 0x9, 0x6, 0x4, @inferred=0xffffffffffffffff}) r3 = set_tid_address$auto(0x0) r4 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r4, 0x0, 0x6) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)={0x1974, 0x0, 0x6, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc7c}, @IPVS_CMD_ATTR_DEST={0x439, 0x2, 0x0, 0x1, [@nested={0x114, 0x148, 0x0, 0x1, [@nested={0x4, 0xbf}, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x8}, @generic="0d40a8818e759d16e14934c91496181db7e4724a80fd863524d3186cde970c9898b6aa07df5379b62d794ff428d46e8dd5b3e50f46c0e09eefc7fd3acb91bb70ca0dccaf5b12b0db219b87a3a02a3942953607d31b664d1857c2f4a9b8c11a0cc5a2861761a659ac34833d5694c5cad78bc5f0795c37c254aaadb48a6c07c6637a43b8a61e1b", @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@remote}, @generic="96779fa95045af647148b9d655e4bc4fef32f7f3130c971191ef38a53eb304b79ee9c2b8a1dd809a57d72c767a1d56a1a396d4953269bf18f5a0f90807d7646e91cd7456bc60829e52eccbd197c7", @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0x4, 0xf4}]}, @generic="8df72d7184490cf4709e522d4d958d9607a1c3adccb3394d918c95a02a96099ce87bfe0327e87eb7b6847ae2edd6c30aff8d61ccb9598848e5840b97c87f6bf6914c94fd7e42ed8dfc4b1e7e930f8de8caedf5aca4a9943763e9a1e39d318891fa34c1d0c185514b93cf3953737dbbc95ac48438b09cbb5b8d610dcfbf0a748fc86ac05a9c32ea3ae9ff46b36138bc9a39b49e78639a5057c9d9684ee97398aefb37a16d16868095a196425ec125ba4498ad0bbee2e61daaf9b615c37d5ff27a653863c3301f1890b5d7c8353f62fc79bcff7915b7e7a35a8afa4fa41180b8b719", @nested={0x1c, 0xca, 0x0, 0x1, [@nested={0x4, 0x6d}, @typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x3c}, @nested={0x4, 0x126}, @nested={0x4, 0xab}]}, @generic="d2c213a0a45bf37a662dced4", @typed={0x8, 0x122, 0x0, 0x0, @uid=r2}, @typed={0xca, 0xf7, 0x0, 0x0, @binary="53fa9516ce479aa26638c97622cb14f1cc30481576abe782847b053cda96b4cf0fe6184e9c26def32f1a80db5e7ea8edbf04be41a5c590d6844d31cd14cf4e2eb8d3b6d9f494d4f837eb8f7f8a81cfb96061b1f0bbfbdf65b061a2d132ebe66c95a616830fa296e48a3666c5af244359f5da500987f4ba5ac0b72516b2a045092e41eacd58c6f8c3d8a35adb75df8969769fa5aead3db5f5f56a10bdfba711788e6f4bb2b06cdb8227501283fbb27353241934d90078341b6637d95d8db88dccc25903ddaf06"}, @nested={0x142, 0xf3, 0x0, 0x1, [@generic="bb57d3e35e0e72ba1e5dd0c2e254f72db52156aef3f9de734afc5ca0c2b5b00082f5c0f1c9329f22f0a5155a6b07f4d0b03b28733b43ada1aa96d4198823bc1b681ada6adbbaac4731ec25d87505e0e5d0d2384990543a10b0695e1f8f6a834a38d70fdd3ae27cb998f9b75c8c37685892fd8f693fd237a465c2cb86cf26e93c5989356b3b96acb439cf1a7cc41f44970e66f5957a74de01c3ad511fd059d6369ca0576eadc076c8c228e043d20a9237ade17fb5a964c8a6ce69b96f6fc2851b300944", @generic="728cbbfc49f7075bc38ffc22b5705a139943057f7bffee34fd53f1bdcb9a6ed0a99423bed3b872c4e1109db93fe339a6850a11c97278fa2f2f2a838612a4fcfd5c9c052c347db794f533d9c7745f6dfe1b03e7c97ffef0df0c5130cbbb0d2ad94daf59a6f2045051a834c5ff09ca7d9032c1a8", @typed={0x8, 0x11a, 0x0, 0x0, @pid=r3}]}]}, @IPVS_CMD_ATTR_DAEMON={0x1391, 0x3, 0x0, 0x1, [@generic="11fcd224249ad53a7d5d25bd046dc8727d89836fe00253c5f24885bbd5af5a41959f8ffa458358113d24f709846a47dd9dc96fde22fcc536b2855e624ff0e291f4c5d3a64463cdcf259aba12e426e7ed9718e168b0647b7fc193acdb99d8488524b021230fd4035bd27494f373c43c4923aae333dfee1416532ce6803009295800c079f49547c3d4fa3ff97e17138f56b490fb917a15453dae1f00b99c7746acf1eefb2fff025757d95c71dae31c55", @generic="41bcb659dbb7d37e5f3ca854405bb7cc89b2a5a847c15364373013cd21714f5699d9552d6493f4a6dd1813f7fb88f69077a54f0ff62f64876e77e9e1546167ba9b3ae57452495f564a8ad968da716481b0d0b0f57e", @generic="d2", @nested={0x16a, 0x114, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xee, 0xc5, 0x0, 0x0, @binary="7a518e34f152e21c751d41e1157754a79c8a2e289cb59643211e97e8d02c8186de6a474e19826a2adbc43cae03010ecd6469b4161db1aa965f13c2f949195815241b71955a95b5b8468537c1e5e174b2b9de070cd551b239a588c6d59c9c8db603eaf627e47a84f50a5ab4b02d47cd8f2ef01f6eb99e70f3d5c9516e33fb2e81cda38cf33fc29245987269f2b3b38f649ec8410a95d1d30a4bd135279f1e6cbb0a416cf14dff7803decb71d5f5b75e772e70f96bbb57239db2874a3e950d59d61c3ce4af1730fa305eb19b29ca7fb81034ecaad1a7fd860aab67b1c6c9f7f62bc9edc8d868efb70a2b43"}, @nested={0x4, 0xb}, @nested={0x4, 0x26}, @generic="fa0e3681420fea383c8640aea25a357e46fed7c4e6b6e1166240d99e6cf24ed06d328480d0bc149498a2d8b835f06619723e1d3f655822626b086ed63fe2f23786feb4fd5c515c48b51fc8b256b9ba0090a0190dca83aa2eca6a"]}, @nested={0x106f, 0x50, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0xc, 0x91, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x7}, @generic="78ccaec173253d75c0e8209ffe1ba8d02796130a02e5e5e3463cd8d80b6b530ccaedcee300f5", @typed={0x7, 0x91, 0x0, 0x0, @str='[$\x00'}, @generic="0d04ae9c0e5d0042eb8e5e5761", @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @typed={0xd, 0x133, 0x0, 0x0, @str='/dev/kvm\x00'}]}, @generic="621813546e80a700b797cfccb8218f4c6b9376f3695765bfeda0f3da811b12d313c540462ad6a011739da0a3a54ca503a066dfec3ccf6b1eb76bb5647c4f41b9ab285269b075858487054b952c751f2badf07f02a47d2d1c30bb7ac11084b1c124249746325882713d9dc8c65a00dbd6736658967d317cef7fd6d693130186945d41e072c288e2c5649b04", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x9}, @generic="c5c953877f08b6c6e028efb307c6725350"]}, @IPVS_CMD_ATTR_DAEMON={0x185, 0x3, 0x0, 0x1, [@nested={0xd2, 0xa8, 0x0, 0x1, [@generic="8e372e3623a25124b7cb47b3fa78208aae3139a2080986189ab8318bd2bdc2b6786fc3c64e35f40064ff8d2c2a9adba063dfb42bfb131dfd10e83a519252f53a44bd0be0b5c6f10ab370b7b2aba244cbce593eecdfc9b029880f813df2f0e6b8c6944c5926bed18ca6ed70e66434fac985288c3000156f71cd7fba980ffe0b2fcc74231d218a6efd7f2a71ccadf0da2fd1654ec8f29c83612a92e976922b2436a88dffd8508f981c514d36a9b5f93da4bd02cfdc756998d5195dfe6e8d0d1de5cef8953b7f009db488dac25696c3"]}, @generic="7148c4c7ef972c80f78c263816c0e385448588259f56f4513e37ee0edfc2a6b9d384e4af9e682d5ac4975a7a40af0b29db4103b9721aef51b7075e24e3895769e83f59cb13c6c17dd01839f52fe9d964299bf8d5319cb0ffb7f246cb4d3e19ef84ee173f653034bd9a233e73d092b8b830872f7f1fbdea7c6d29cb27d8a46e2cac7fa6b4e43b71e8513eb610eb1b53d1206fac1ad4", @generic="054d008de1c969bb2d64e6ba593d1d381514d48b", @typed={0x4, 0x15}]}]}, 0x1974}, 0x1, 0x0, 0x0, 0x801}, 0x8010) fstat$auto(r0, &(0x7f0000000000)={0x5, 0x7ffffffd, 0x80000, 0xa74b, r4, 0x0, 0x0, 0x3, 0x4f1e, 0x3, 0xeb, 0x4, 0x80000000080, 0x20000000a, 0x2, 0xfffffffffffffff8}) prctl$auto(0x20, 0x5, 0x7fffffffefff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000844}, 0x40090) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 34.508177872s ago: executing program 1 (id=1377): close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x4, 0x3, 0x0, 0x4, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/id/extra\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/215, 0xd7) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x59, 0x0) 6.295386079s ago: executing program 34 (id=1373): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x20006, 0x3, 0x12, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r1 = syz_clone(0x25342080, 0x0, 0xfffe, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) process_vm_readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000140)="66cdff317494273e38ed2170e952ade7e64a6bb613eac2574efd755d4d0274bf2af580028fc7cab24b122c680da4b2588fab69f6073355543e64468c1979f28c499463f44bcbd2bce3603cb638dfa975e477cba783bbb34caae40a1e267c3907820b28e607ebabe0b9dfb8b2ab490508341473cada6070d30b1023cfce69ff1f4fccf30eef5134", 0x6}, 0x5, &(0x7f00000002c0)={&(0x7f0000000200)="70c1fd089b73269276eed11f072c078f05cc99ad8f26fa5035badcb3bcde7bf19c18c5f4a4c3a4b769c11e9c718654056fdd363fc0e548c411eaf4b57c912c489234fc3cbbbc0cd40227ae11974e45e73c8d90eece8464fe367b8e69dfe975d9bd8ba0f673be2df016ee2d5e5173668d74d1bd9898f0b99a49ca9674f62d91ee24", 0x100000000}, 0x7, 0x9) 2.549791008s ago: executing program 35 (id=1377): close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x4, 0x3, 0x0, 0x4, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/id/extra\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/215, 0xd7) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x59, 0x0) 0s ago: executing program 36 (id=1375): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x1, 0x4) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe97f, 0x3, 0xeb1, r0, 0x8000) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vhci_hcd.7/usb23/bDeviceSubClass\x00', 0x1f5280, 0x0) mmap$auto(0x0, 0x400000000020009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x200, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0x1254, 0xd77, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9a89, 0x5, 0x80003, 0x4, 0x1fffffffffff, 0xb4, 0x4000000003, 0x2, 0x10007, 0x80, 0x0, 0x0, 0xa, 0x6, 0x10000200, 0x2, 0x84, 0x0, 0x4, 0x0, 0x3ff, 0x0, [0x0, 0x0, 0xea4, 0x4, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x5, 0x1000000000, 0x0, 0x0, 0x4, 0x8a, 0x2, 0x0, 0xcf, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000000, 0x0, 0x3]}, 0x20000001fd, 0xd) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): ache_alloc_noprof+0x6d/0x3b0 [ 468.933835][T11887] ? getname_flags.part.0+0x4c/0x550 [ 468.933873][T11887] getname_flags.part.0+0x4c/0x550 [ 468.933909][T11887] getname_flags+0x93/0xf0 [ 468.933944][T11887] do_sys_openat2+0xb8/0x1d0 [ 468.933973][T11887] ? __pfx_do_sys_openat2+0x10/0x10 [ 468.934020][T11887] __x64_sys_openat+0x174/0x210 [ 468.934052][T11887] ? __pfx___x64_sys_openat+0x10/0x10 [ 468.934099][T11887] do_syscall_64+0xcd/0x490 [ 468.934130][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.934158][T11887] RIP: 0033:0x7f2c5c78e929 [ 468.934182][T11887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.934207][T11887] RSP: 002b:00007f2c5a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.934235][T11887] RAX: ffffffffffffffda RBX: 00007f2c5c9b5fa0 RCX: 00007f2c5c78e929 [ 468.934253][T11887] RDX: 0000000000004100 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 468.934271][T11887] RBP: 00007f2c5c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 468.934287][T11887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.934302][T11887] R13: 0000000000000000 R14: 00007f2c5c9b5fa0 R15: 00007ffc5fc63368 [ 468.934348][T11887] [ 472.183642][T11963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.191019][T11963] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 472.289902][T11963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.324923][T11963] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 472.375278][T11963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.391581][T11963] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 472.487230][T11963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.504011][T11963] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 473.874595][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 474.354735][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 474.444466][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 474.514660][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 474.707275][T12049] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 475.955542][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 476.434534][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 476.519189][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 476.595254][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 477.509019][T12151] FAULT_INJECTION: forcing a failure. [ 477.509019][T12151] name failslab, interval 1, probability 0, space 0, times 0 [ 477.543720][T12151] CPU: 0 UID: 0 PID: 12151 Comm: syz.2.1152 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 477.543774][T12151] Tainted: [U]=USER [ 477.543784][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.543802][T12151] Call Trace: [ 477.543812][T12151] [ 477.543824][T12151] dump_stack_lvl+0x16c/0x1f0 [ 477.543880][T12151] should_fail_ex+0x512/0x640 [ 477.543922][T12151] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 477.543972][T12151] should_failslab+0xc2/0x120 [ 477.544000][T12151] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 477.544042][T12151] ? __pfx___might_resched+0x10/0x10 [ 477.544080][T12151] ? __anon_vma_prepare+0xae/0x5e0 [ 477.544128][T12151] __anon_vma_prepare+0xae/0x5e0 [ 477.544166][T12151] ? __pfx___pte_alloc+0x10/0x10 [ 477.544200][T12151] __vmf_anon_prepare+0x11c/0x240 [ 477.544235][T12151] __handle_mm_fault+0x27f6/0x5490 [ 477.544287][T12151] ? __pfx___handle_mm_fault+0x10/0x10 [ 477.544378][T12151] handle_mm_fault+0x589/0xd10 [ 477.544425][T12151] __get_user_pages+0x589/0x3b80 [ 477.544472][T12151] ? __pfx_mt_find+0x10/0x10 [ 477.544502][T12151] ? __pfx___get_user_pages+0x10/0x10 [ 477.544551][T12151] populate_vma_page_range+0x278/0x3a0 [ 477.544588][T12151] ? __pfx_populate_vma_page_range+0x10/0x10 [ 477.544619][T12151] ? __pfx_find_vma_intersection+0x10/0x10 [ 477.544655][T12151] ? do_mmap+0x69c/0x1210 [ 477.544691][T12151] __mm_populate+0x1d8/0x380 [ 477.544729][T12151] ? __pfx___mm_populate+0x10/0x10 [ 477.544768][T12151] ? up_write+0x1b2/0x520 [ 477.544818][T12151] vm_mmap_pgoff+0x362/0x450 [ 477.544854][T12151] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 477.544897][T12151] ? __x64_sys_futex+0x1e0/0x4c0 [ 477.544931][T12151] ? __x64_sys_futex+0x1e9/0x4c0 [ 477.544974][T12151] ksys_mmap_pgoff+0x7d/0x5c0 [ 477.545002][T12151] ? xfd_validate_state+0x61/0x180 [ 477.545036][T12151] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 477.545085][T12151] __x64_sys_mmap+0x125/0x190 [ 477.545131][T12151] do_syscall_64+0xcd/0x490 [ 477.545162][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.545190][T12151] RIP: 0033:0x7ff63438e929 [ 477.545215][T12151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.545242][T12151] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 477.545269][T12151] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 477.545288][T12151] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 477.545304][T12151] RBP: 00007ff634410b39 R08: 0000000000000002 R09: 0000000000008000 [ 477.545322][T12151] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 477.545338][T12151] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 477.545394][T12151] [ 478.265319][ T30] audit: type=1800 audit(6045465813.346:4): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1155" name="lu_gp_id" dev="configfs" ino=22142 res=0 errno=0 [ 478.703644][T12177] FAULT_INJECTION: forcing a failure. [ 478.703644][T12177] name fail_futex, interval 1, probability 0, space 0, times 0 [ 478.763619][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.1157 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 478.763662][T12177] Tainted: [U]=USER [ 478.763668][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.763678][T12177] Call Trace: [ 478.763685][T12177] [ 478.763692][T12177] dump_stack_lvl+0x16c/0x1f0 [ 478.763724][T12177] should_fail_ex+0x512/0x640 [ 478.763751][T12177] get_futex_key+0x1d0/0x1540 [ 478.763774][T12177] ? __pfx_get_futex_key+0x10/0x10 [ 478.763795][T12177] ? __pfx___schedule+0x10/0x10 [ 478.763822][T12177] futex_wait_setup+0x9d/0x550 [ 478.763853][T12177] __futex_wait+0x194/0x2f0 [ 478.763877][T12177] ? __pfx___futex_wait+0x10/0x10 [ 478.763904][T12177] ? __pfx_futex_wake_mark+0x10/0x10 [ 478.763940][T12177] futex_wait+0xe8/0x380 [ 478.763962][T12177] ? __pfx_futex_wait+0x10/0x10 [ 478.763995][T12177] ? kmem_cache_free+0x2d1/0x4d0 [ 478.764018][T12177] ? fd_install+0x225/0x750 [ 478.764038][T12177] ? putname+0x154/0x1a0 [ 478.764060][T12177] do_futex+0x229/0x350 [ 478.764080][T12177] ? __pfx_do_futex+0x10/0x10 [ 478.764107][T12177] __x64_sys_futex+0x1e0/0x4c0 [ 478.764129][T12177] ? __x64_sys_openat+0x174/0x210 [ 478.764148][T12177] ? __pfx___x64_sys_futex+0x10/0x10 [ 478.764168][T12177] ? xfd_validate_state+0x61/0x180 [ 478.764198][T12177] do_syscall_64+0xcd/0x490 [ 478.764215][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.764231][T12177] RIP: 0033:0x7ff63438e929 [ 478.764246][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.764262][T12177] RSP: 002b:00007ff6351750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 478.764279][T12177] RAX: ffffffffffffffda RBX: 00007ff6345b5fa8 RCX: 00007ff63438e929 [ 478.764290][T12177] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff6345b5fa8 [ 478.764300][T12177] RBP: 00007ff6345b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 478.764310][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6345b5fac [ 478.764320][T12177] R13: 0000000000000000 R14: 00007ffea466b6e0 R15: 00007ffea466b7c8 [ 478.764351][T12177] [ 481.425953][T12241] FAULT_INJECTION: forcing a failure. [ 481.425953][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 481.594535][T12241] CPU: 1 UID: 0 PID: 12241 Comm: syz.2.1165 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 481.594584][T12241] Tainted: [U]=USER [ 481.594593][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.594609][T12241] Call Trace: [ 481.594618][T12241] [ 481.594629][T12241] dump_stack_lvl+0x16c/0x1f0 [ 481.594677][T12241] should_fail_ex+0x512/0x640 [ 481.594718][T12241] ? __kvmalloc_node_noprof+0x124/0x620 [ 481.594762][T12241] should_failslab+0xc2/0x120 [ 481.594789][T12241] __kvmalloc_node_noprof+0x137/0x620 [ 481.594830][T12241] ? trace_kmalloc+0x2b/0xd0 [ 481.594857][T12241] ? __kvmalloc_node_noprof+0x298/0x620 [ 481.594894][T12241] ? io_alloc_cache_init+0x33/0x170 [ 481.594942][T12241] ? io_alloc_cache_init+0x33/0x170 [ 481.594982][T12241] io_alloc_cache_init+0x33/0x170 [ 481.595026][T12241] io_rsrc_cache_init+0x26/0x50 [ 481.595069][T12241] io_uring_setup+0x68b/0x2080 [ 481.595111][T12241] ? __pfx_io_uring_setup+0x10/0x10 [ 481.595146][T12241] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 481.595197][T12241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 481.595247][T12241] ? __fget_files+0x20e/0x3c0 [ 481.595297][T12241] ? ksys_write+0x1ac/0x250 [ 481.595337][T12241] ? __pfx_ksys_write+0x10/0x10 [ 481.595396][T12241] __x64_sys_io_uring_setup+0xc2/0x170 [ 481.595437][T12241] do_syscall_64+0xcd/0x490 [ 481.595467][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.595495][T12241] RIP: 0033:0x7ff63438e929 [ 481.595518][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.595544][T12241] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 481.595570][T12241] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 481.595587][T12241] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 481.595602][T12241] RBP: 00007ff635175090 R08: 0000000000000000 R09: 0000000000000000 [ 481.595617][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.595632][T12241] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 481.595664][T12241] [ 482.928834][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 484.751755][T12321] FAULT_INJECTION: forcing a failure. [ 484.751755][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 484.837136][T12321] CPU: 0 UID: 0 PID: 12321 Comm: syz.2.1178 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 484.837191][T12321] Tainted: [U]=USER [ 484.837201][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.837219][T12321] Call Trace: [ 484.837229][T12321] [ 484.837241][T12321] dump_stack_lvl+0x16c/0x1f0 [ 484.837293][T12321] should_fail_ex+0x512/0x640 [ 484.837352][T12321] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 484.837398][T12321] should_failslab+0xc2/0x120 [ 484.837427][T12321] __kmalloc_cache_noprof+0x6a/0x3e0 [ 484.837468][T12321] ? __pfx___might_resched+0x10/0x10 [ 484.837498][T12321] ? snd_card_file_add+0x52/0x330 [ 484.837530][T12321] ? rcu_is_watching+0x12/0xc0 [ 484.837558][T12321] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 484.837598][T12321] snd_card_file_add+0x52/0x330 [ 484.837627][T12321] ? snd_lookup_minor_data+0xc7/0x180 [ 484.837657][T12321] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 484.837696][T12321] snd_pcm_open+0xf1/0x730 [ 484.837740][T12321] ? __pfx_snd_pcm_open+0x10/0x10 [ 484.837797][T12321] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 484.837836][T12321] snd_pcm_playback_open+0x86/0xe0 [ 484.837876][T12321] snd_open+0x1fe/0x450 [ 484.837905][T12321] ? __pfx_snd_open+0x10/0x10 [ 484.837932][T12321] chrdev_open+0x231/0x6a0 [ 484.837973][T12321] ? __pfx_apparmor_file_open+0x10/0x10 [ 484.838008][T12321] ? __pfx_chrdev_open+0x10/0x10 [ 484.838056][T12321] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 484.838102][T12321] do_dentry_open+0x744/0x1c10 [ 484.838154][T12321] ? __pfx_chrdev_open+0x10/0x10 [ 484.838209][T12321] vfs_open+0x82/0x3f0 [ 484.838247][T12321] path_openat+0x1de4/0x2cb0 [ 484.838305][T12321] ? __pfx_path_openat+0x10/0x10 [ 484.838355][T12321] ? __lock_acquire+0xb8a/0x1c90 [ 484.838395][T12321] do_filp_open+0x20b/0x470 [ 484.838438][T12321] ? __pfx_do_filp_open+0x10/0x10 [ 484.838502][T12321] ? alloc_fd+0x471/0x7d0 [ 484.838549][T12321] do_sys_openat2+0x11b/0x1d0 [ 484.838579][T12321] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.838627][T12321] __x64_sys_openat+0x174/0x210 [ 484.838660][T12321] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.838707][T12321] do_syscall_64+0xcd/0x490 [ 484.838738][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.838766][T12321] RIP: 0033:0x7ff63438e929 [ 484.838790][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.838817][T12321] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.838845][T12321] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 484.838864][T12321] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 484.838883][T12321] RBP: 00007ff634410b39 R08: 0000000000000000 R09: 0000000000000000 [ 484.838900][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.838916][T12321] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 484.838952][T12321] [ 485.149107][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.045269][T12359] FAULT_INJECTION: forcing a failure. [ 486.045269][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.087604][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.3.1187 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 486.087651][T12359] Tainted: [U]=USER [ 486.087675][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.087690][T12359] Call Trace: [ 486.087700][T12359] [ 486.087710][T12359] dump_stack_lvl+0x16c/0x1f0 [ 486.087760][T12359] should_fail_ex+0x512/0x640 [ 486.087805][T12359] _copy_from_user+0x2e/0xd0 [ 486.087849][T12359] snd_seq_oss_write+0x397/0x7d0 [ 486.087891][T12359] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 486.087932][T12359] ? apparmor_file_permission+0x251/0x400 [ 486.087963][T12359] ? bpf_lsm_file_permission+0x9/0x10 [ 486.087995][T12359] ? __pfx_odev_write+0x10/0x10 [ 486.088020][T12359] odev_write+0x51/0xa0 [ 486.088047][T12359] vfs_write+0x29d/0x1150 [ 486.088093][T12359] ? __pfx_vfs_write+0x10/0x10 [ 486.088127][T12359] ? find_held_lock+0x2b/0x80 [ 486.088154][T12359] ? __fget_files+0x204/0x3c0 [ 486.088196][T12359] ? __fget_files+0x20e/0x3c0 [ 486.088242][T12359] ksys_write+0x12a/0x250 [ 486.088288][T12359] ? __pfx_ksys_write+0x10/0x10 [ 486.088339][T12359] do_syscall_64+0xcd/0x490 [ 486.088368][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.088392][T12359] RIP: 0033:0x7f2c5c78e929 [ 486.088415][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.088441][T12359] RSP: 002b:00007f2c5a5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.088468][T12359] RAX: ffffffffffffffda RBX: 00007f2c5c9b6160 RCX: 00007f2c5c78e929 [ 486.088485][T12359] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 000000000000000a [ 486.088501][T12359] RBP: 00007f2c5a5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 486.088517][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.088533][T12359] R13: 0000000000000000 R14: 00007f2c5c9b6160 R15: 00007ffc5fc63368 [ 486.088569][T12359] [ 486.298265][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.934641][T12390] netlink: zone id is out of range [ 486.984185][T12390] netlink: del zone limit has 4 unknown bytes [ 487.067259][T12387] netlink: set zone limit has 8 unknown bytes [ 487.085449][T12393] FAULT_INJECTION: forcing a failure. [ 487.085449][T12393] name fail_futex, interval 1, probability 0, space 0, times 0 [ 487.111930][T12393] CPU: 1 UID: 0 PID: 12393 Comm: syz.3.1193 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 487.111985][T12393] Tainted: [U]=USER [ 487.111995][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.112014][T12393] Call Trace: [ 487.112024][T12393] [ 487.112036][T12393] dump_stack_lvl+0x16c/0x1f0 [ 487.112089][T12393] should_fail_ex+0x512/0x640 [ 487.112139][T12393] get_futex_key+0x1d0/0x1540 [ 487.112179][T12393] ? __pfx_get_futex_key+0x10/0x10 [ 487.112229][T12393] futex_wake+0xea/0x530 [ 487.112276][T12393] ? __pfx_futex_wake+0x10/0x10 [ 487.112321][T12393] ? errseq_sample+0x53/0x70 [ 487.112367][T12393] ? file_init_path+0x4fe/0x760 [ 487.112404][T12393] do_futex+0x1e3/0x350 [ 487.112441][T12393] ? __pfx_do_futex+0x10/0x10 [ 487.112477][T12393] ? fd_install+0x225/0x750 [ 487.112524][T12393] __x64_sys_futex+0x1e0/0x4c0 [ 487.112574][T12393] ? __sys_socket+0xac/0x260 [ 487.112612][T12393] ? __pfx___x64_sys_futex+0x10/0x10 [ 487.112649][T12393] ? xfd_validate_state+0x61/0x180 [ 487.112686][T12393] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 487.112745][T12393] do_syscall_64+0xcd/0x490 [ 487.112775][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.112807][T12393] RIP: 0033:0x7f2c5c78e929 [ 487.112831][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.112860][T12393] RSP: 002b:00007f2c5a5f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.112890][T12393] RAX: ffffffffffffffda RBX: 00007f2c5c9b5fa8 RCX: 00007f2c5c78e929 [ 487.112910][T12393] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c5c9b5fac [ 487.112928][T12393] RBP: 00007f2c5c9b5fa0 R08: 00007f2c5c988000 R09: 0000000000000000 [ 487.112947][T12393] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f2c5c9b5fac [ 487.112965][T12393] R13: 0000000000000000 R14: 00007ffc5fc63280 R15: 00007ffc5fc63368 [ 487.113005][T12393] [ 488.188184][T12425] FAULT_INJECTION: forcing a failure. [ 488.188184][T12425] name failslab, interval 1, probability 0, space 0, times 0 [ 488.269934][T12425] CPU: 0 UID: 0 PID: 12425 Comm: syz.2.1199 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 488.269984][T12425] Tainted: [U]=USER [ 488.269994][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.270010][T12425] Call Trace: [ 488.270019][T12425] [ 488.270029][T12425] dump_stack_lvl+0x16c/0x1f0 [ 488.270081][T12425] should_fail_ex+0x512/0x640 [ 488.270122][T12425] ? __kmalloc_noprof+0xbf/0x510 [ 488.270164][T12425] ? constrain_params_by_rules+0x175/0xca0 [ 488.270198][T12425] should_failslab+0xc2/0x120 [ 488.270249][T12425] __kmalloc_noprof+0xd2/0x510 [ 488.270284][T12425] ? kasan_quarantine_put+0x10a/0x240 [ 488.270323][T12425] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.270374][T12425] constrain_params_by_rules+0x175/0xca0 [ 488.270404][T12425] ? constrain_params_by_rules+0xa09/0xca0 [ 488.270440][T12425] ? constrain_params_by_rules+0xa0e/0xca0 [ 488.270474][T12425] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 488.270522][T12425] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 488.270554][T12425] ? __lock_acquire+0xb8a/0x1c90 [ 488.270612][T12425] snd_pcm_hw_refine+0x7de/0xad0 [ 488.270652][T12425] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 488.270695][T12425] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 488.270750][T12425] snd_pcm_hw_param_first+0x334/0x6f0 [ 488.270794][T12425] snd_pcm_hw_params+0x5ad/0x1b40 [ 488.270893][T12425] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 488.270933][T12425] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 488.270976][T12425] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 488.271020][T12425] ? __asan_memset+0x23/0x50 [ 488.271063][T12425] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 488.271106][T12425] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 488.271170][T12425] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 488.271209][T12425] ? snd_pcm_oss_sync+0x30c/0x840 [ 488.271275][T12425] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 488.271315][T12425] snd_pcm_oss_sync+0x32e/0x840 [ 488.271356][T12425] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 488.271389][T12425] snd_pcm_oss_release+0x28b/0x310 [ 488.271427][T12425] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 488.271460][T12425] __fput+0x3ff/0xb70 [ 488.271500][T12425] task_work_run+0x14d/0x240 [ 488.271553][T12425] ? __pfx_task_work_run+0x10/0x10 [ 488.271596][T12425] ? __pfx___do_sys_close_range+0x10/0x10 [ 488.271651][T12425] exit_to_user_mode_loop+0xeb/0x110 [ 488.271699][T12425] do_syscall_64+0x3f6/0x490 [ 488.271731][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.271760][T12425] RIP: 0033:0x7ff63438e929 [ 488.271783][T12425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.271811][T12425] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 488.271840][T12425] RAX: 0000000000000000 RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 488.271858][T12425] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 488.271876][T12425] RBP: 00007ff634410b39 R08: 0000000000000000 R09: 0000000000000000 [ 488.271893][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.271910][T12425] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 488.271949][T12425] [ 492.507940][T12539] FAULT_INJECTION: forcing a failure. [ 492.507940][T12539] name failslab, interval 1, probability 0, space 0, times 0 [ 492.562045][T12539] CPU: 0 UID: 0 PID: 12539 Comm: syz.1.1216 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 492.562093][T12539] Tainted: [U]=USER [ 492.562103][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.562118][T12539] Call Trace: [ 492.562128][T12539] [ 492.562139][T12539] dump_stack_lvl+0x16c/0x1f0 [ 492.562186][T12539] should_fail_ex+0x512/0x640 [ 492.562221][T12539] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 492.562259][T12539] should_failslab+0xc2/0x120 [ 492.562284][T12539] __kmalloc_cache_noprof+0x6a/0x3e0 [ 492.562328][T12539] ? cuse_channel_open+0x1de/0x7f0 [ 492.562391][T12539] cuse_channel_open+0x1de/0x7f0 [ 492.562426][T12539] ? __pfx_cuse_channel_open+0x10/0x10 [ 492.562461][T12539] misc_open+0x35d/0x420 [ 492.562493][T12539] ? __pfx_misc_open+0x10/0x10 [ 492.562527][T12539] chrdev_open+0x231/0x6a0 [ 492.562579][T12539] ? __pfx_apparmor_file_open+0x10/0x10 [ 492.562618][T12539] ? __pfx_chrdev_open+0x10/0x10 [ 492.562668][T12539] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 492.562716][T12539] do_dentry_open+0x744/0x1c10 [ 492.562763][T12539] ? __pfx_chrdev_open+0x10/0x10 [ 492.562820][T12539] vfs_open+0x82/0x3f0 [ 492.562857][T12539] path_openat+0x1de4/0x2cb0 [ 492.562914][T12539] ? __pfx_path_openat+0x10/0x10 [ 492.562959][T12539] ? __lock_acquire+0xb8a/0x1c90 [ 492.563004][T12539] do_filp_open+0x20b/0x470 [ 492.563053][T12539] ? __pfx_do_filp_open+0x10/0x10 [ 492.563135][T12539] ? alloc_fd+0x471/0x7d0 [ 492.563189][T12539] do_sys_openat2+0x11b/0x1d0 [ 492.563222][T12539] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.563277][T12539] __x64_sys_openat+0x174/0x210 [ 492.563311][T12539] ? __pfx___x64_sys_openat+0x10/0x10 [ 492.563366][T12539] do_syscall_64+0xcd/0x490 [ 492.563398][T12539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.563428][T12539] RIP: 0033:0x7fd6b458e929 [ 492.563452][T12539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.563480][T12539] RSP: 002b:00007fd6b5450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.563509][T12539] RAX: ffffffffffffffda RBX: 00007fd6b47b6080 RCX: 00007fd6b458e929 [ 492.563528][T12539] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 492.563555][T12539] RBP: 00007fd6b4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 492.563573][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.563591][T12539] R13: 0000000000000000 R14: 00007fd6b47b6080 R15: 00007ffc1ad9af78 [ 492.563637][T12539] [ 493.028850][T12568] FAULT_INJECTION: forcing a failure. [ 493.028850][T12568] name failslab, interval 1, probability 0, space 0, times 0 [ 493.168145][T12568] CPU: 1 UID: 0 PID: 12568 Comm: syz.2.1215 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 493.168196][T12568] Tainted: [U]=USER [ 493.168205][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.168222][T12568] Call Trace: [ 493.168231][T12568] [ 493.168241][T12568] dump_stack_lvl+0x16c/0x1f0 [ 493.168295][T12568] should_fail_ex+0x512/0x640 [ 493.168333][T12568] ? fs_reclaim_acquire+0xae/0x150 [ 493.168366][T12568] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 493.168402][T12568] should_failslab+0xc2/0x120 [ 493.168429][T12568] __kmalloc_noprof+0xd2/0x510 [ 493.168476][T12568] tomoyo_realpath_from_path+0xc2/0x6e0 [ 493.168521][T12568] tomoyo_check_open_permission+0x2ab/0x3c0 [ 493.168556][T12568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 493.168627][T12568] ? do_raw_spin_lock+0x12c/0x2b0 [ 493.168675][T12568] tomoyo_file_open+0x6b/0x90 [ 493.168712][T12568] security_file_open+0x84/0x1e0 [ 493.168747][T12568] do_dentry_open+0x596/0x1c10 [ 493.168799][T12568] vfs_open+0x82/0x3f0 [ 493.168832][T12568] path_openat+0x1de4/0x2cb0 [ 493.168881][T12568] ? __pfx_path_openat+0x10/0x10 [ 493.168921][T12568] ? __lock_acquire+0xb8a/0x1c90 [ 493.168961][T12568] do_filp_open+0x20b/0x470 [ 493.169000][T12568] ? __pfx_do_filp_open+0x10/0x10 [ 493.169065][T12568] ? alloc_fd+0x471/0x7d0 [ 493.169114][T12568] do_sys_openat2+0x11b/0x1d0 [ 493.169143][T12568] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.169176][T12568] ? __fget_files+0x20e/0x3c0 [ 493.169221][T12568] __x64_sys_openat+0x174/0x210 [ 493.169266][T12568] ? __pfx___x64_sys_openat+0x10/0x10 [ 493.169296][T12568] ? ksys_write+0x1ac/0x250 [ 493.169351][T12568] do_syscall_64+0xcd/0x490 [ 493.169380][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.169409][T12568] RIP: 0033:0x7ff63438e929 [ 493.169433][T12568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.169458][T12568] RSP: 002b:00007ff635133038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 493.169486][T12568] RAX: ffffffffffffffda RBX: 00007ff6345b6160 RCX: 00007ff63438e929 [ 493.169504][T12568] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 493.169520][T12568] RBP: 00007ff635133090 R08: 0000000000000000 R09: 0000000000000000 [ 493.169536][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.169553][T12568] R13: 0000000000000001 R14: 00007ff6345b6160 R15: 00007ffea466b7c8 [ 493.169591][T12568] [ 493.169603][T12568] ERROR: Out of memory at tomoyo_realpath_from_path. [ 495.633044][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 498.125935][T12675] mkiss: ax0: crc mode is auto. [ 498.482412][T12684] mkiss: ax0: crc mode is auto. [ 498.484536][T12717] bridge0: port 3(veth0_to_bridge) entered blocking state [ 498.515469][T12717] bridge0: port 3(veth0_to_bridge) entered disabled state [ 498.524861][T12717] veth0_to_bridge: entered allmulticast mode [ 498.533624][T12717] veth0_to_bridge: entered promiscuous mode [ 498.540133][T12717] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.556211][T12717] bridge0: port 3(veth0_to_bridge) entered blocking state [ 498.563733][T12717] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 498.766631][T12720] FAULT_INJECTION: forcing a failure. [ 498.766631][T12720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.795321][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.1.1237 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 498.795375][T12720] Tainted: [U]=USER [ 498.795386][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.795405][T12720] Call Trace: [ 498.795414][T12720] [ 498.795426][T12720] dump_stack_lvl+0x16c/0x1f0 [ 498.795481][T12720] should_fail_ex+0x512/0x640 [ 498.795533][T12720] should_fail_alloc_page+0xe7/0x130 [ 498.795565][T12720] prepare_alloc_pages+0x3c2/0x610 [ 498.795602][T12720] ? rcu_is_watching+0x12/0xc0 [ 498.795637][T12720] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 498.795691][T12720] ? css_rstat_updated+0x9d/0xd30 [ 498.795733][T12720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 498.795774][T12720] ? __lock_acquire+0x622/0x1c90 [ 498.795831][T12720] ? __lock_acquire+0x622/0x1c90 [ 498.795871][T12720] ? __lock_acquire+0x622/0x1c90 [ 498.795907][T12720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.795953][T12720] ? policy_nodemask+0xea/0x4e0 [ 498.796002][T12720] alloc_pages_mpol+0x1fb/0x550 [ 498.796028][T12720] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 498.796064][T12720] folio_alloc_mpol_noprof+0x36/0x2f0 [ 498.796098][T12720] vma_alloc_folio_noprof+0xed/0x1e0 [ 498.796125][T12720] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 498.796154][T12720] ? find_held_lock+0x2b/0x80 [ 498.796195][T12720] ? __handle_mm_fault+0x1092/0x5490 [ 498.796240][T12720] __handle_mm_fault+0x2f21/0x5490 [ 498.796295][T12720] ? __pfx___handle_mm_fault+0x10/0x10 [ 498.796335][T12720] ? __pte_offset_map_lock+0x174/0x310 [ 498.796366][T12720] ? find_held_lock+0x2b/0x80 [ 498.796392][T12720] ? find_held_lock+0x2b/0x80 [ 498.796433][T12720] ? follow_page_pte+0x3af/0x14c0 [ 498.796479][T12720] handle_mm_fault+0x589/0xd10 [ 498.796527][T12720] __get_user_pages+0x589/0x3b80 [ 498.796569][T12720] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.796620][T12720] ? __pfx___get_user_pages+0x10/0x10 [ 498.796674][T12720] populate_vma_page_range+0x278/0x3a0 [ 498.796714][T12720] ? __pfx_populate_vma_page_range+0x10/0x10 [ 498.796748][T12720] ? __pfx_find_vma_intersection+0x10/0x10 [ 498.796783][T12720] ? do_mmap+0x69c/0x1210 [ 498.796820][T12720] __mm_populate+0x1d8/0x380 [ 498.796859][T12720] ? __pfx___mm_populate+0x10/0x10 [ 498.796899][T12720] ? up_write+0x1b2/0x520 [ 498.796948][T12720] vm_mmap_pgoff+0x362/0x450 [ 498.796984][T12720] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 498.797027][T12720] ? __x64_sys_futex+0x1e0/0x4c0 [ 498.797059][T12720] ? __x64_sys_futex+0x1e9/0x4c0 [ 498.797102][T12720] ksys_mmap_pgoff+0x7d/0x5c0 [ 498.797133][T12720] ? xfd_validate_state+0x61/0x180 [ 498.797185][T12720] __x64_sys_mmap+0x125/0x190 [ 498.797233][T12720] do_syscall_64+0xcd/0x490 [ 498.797265][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.797294][T12720] RIP: 0033:0x7fd6b458e929 [ 498.797321][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.797347][T12720] RSP: 002b:00007fd6b5471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 498.797377][T12720] RAX: ffffffffffffffda RBX: 00007fd6b47b5fa0 RCX: 00007fd6b458e929 [ 498.797398][T12720] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 498.797415][T12720] RBP: 00007fd6b4610b39 R08: 0000000000000007 R09: 0000000000028000 [ 498.797433][T12720] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 498.797451][T12720] R13: 0000000000000000 R14: 00007fd6b47b5fa0 R15: 00007ffc1ad9af78 [ 498.797492][T12720] [ 499.663569][T12760] FAULT_INJECTION: forcing a failure. [ 499.663569][T12760] name failslab, interval 1, probability 0, space 0, times 0 [ 499.691231][T12760] CPU: 1 UID: 0 PID: 12760 Comm: syz.0.1239 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 499.691284][T12760] Tainted: [U]=USER [ 499.691294][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.691311][T12760] Call Trace: [ 499.691320][T12760] [ 499.691332][T12760] dump_stack_lvl+0x16c/0x1f0 [ 499.691383][T12760] should_fail_ex+0x512/0x640 [ 499.691423][T12760] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 499.691474][T12760] should_failslab+0xc2/0x120 [ 499.691504][T12760] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 499.691549][T12760] ? vma_merge_new_range+0x37f/0xa00 [ 499.691588][T12760] ? vm_area_alloc+0x1f/0x160 [ 499.691631][T12760] vm_area_alloc+0x1f/0x160 [ 499.691669][T12760] __mmap_region+0xf0a/0x25e0 [ 499.691718][T12760] ? __pfx___mmap_region+0x10/0x10 [ 499.691755][T12760] ? find_held_lock+0x2b/0x80 [ 499.691792][T12760] ? finish_task_switch.isra.0+0x221/0xc10 [ 499.691824][T12760] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.691867][T12760] ? finish_task_switch.isra.0+0x221/0xc10 [ 499.691899][T12760] ? rcu_is_watching+0x12/0xc0 [ 499.691928][T12760] ? trace_sched_exit_tp+0xde/0x130 [ 499.691962][T12760] ? __schedule+0x1181/0x5de0 [ 499.691999][T12760] ? kvm_sched_clock_read+0x11/0x20 [ 499.692109][T12760] ? trace_cap_capable+0x18d/0x200 [ 499.692165][T12760] mmap_region+0x1ab/0x3f0 [ 499.692210][T12760] ? __get_unmapped_area+0x267/0x440 [ 499.692250][T12760] do_mmap+0xa3e/0x1210 [ 499.692292][T12760] ? __pfx_do_mmap+0x10/0x10 [ 499.692327][T12760] ? __pfx_down_write_killable+0x10/0x10 [ 499.692370][T12760] vm_mmap_pgoff+0x281/0x450 [ 499.692408][T12760] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 499.692433][T12760] ? fput+0x70/0xf0 [ 499.692461][T12760] ? __sys_connect+0xe0/0x160 [ 499.692509][T12760] ? __x64_sys_futex+0x1e0/0x4c0 [ 499.692543][T12760] ? __x64_sys_futex+0x1e9/0x4c0 [ 499.692586][T12760] ksys_mmap_pgoff+0x7d/0x5c0 [ 499.692616][T12760] ? xfd_validate_state+0x61/0x180 [ 499.692653][T12760] ? __pfx_do_writev+0x10/0x10 [ 499.692695][T12760] __x64_sys_mmap+0x125/0x190 [ 499.692740][T12760] do_syscall_64+0xcd/0x490 [ 499.692771][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.692801][T12760] RIP: 0033:0x7f5c7c98e929 [ 499.692827][T12760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.692856][T12760] RSP: 002b:00007f5c7d7ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 499.692886][T12760] RAX: ffffffffffffffda RBX: 00007f5c7cbb5fa0 RCX: 00007f5c7c98e929 [ 499.692905][T12760] RDX: 000000007fffffff RSI: 0000000004020009 RDI: 0000000000000000 [ 499.692924][T12760] RBP: 00007f5c7ca10b39 R08: 0000000000000401 R09: 0000000000008000 [ 499.692942][T12760] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 499.692960][T12760] R13: 0000000000000000 R14: 00007f5c7cbb5fa0 R15: 00007fff19097388 [ 499.692998][T12760] [ 501.559633][T12801] vivid-007: ================= START STATUS ================= [ 501.569706][T12801] vivid-007: Generate PTS: true [ 501.584644][T12801] vivid-007: Generate SCR: true [ 501.589600][T12801] tpg source WxH: 320x240 (Y'CbCr) [ 501.596961][T12801] tpg field: 1 [ 501.600388][T12801] tpg crop: (0,0)/320x240 [ 501.605176][T12801] tpg compose: (0,0)/320x240 [ 501.609950][T12801] tpg colorspace: 8 [ 501.613804][T12801] tpg transfer function: 0/0 [ 501.688053][T12801] tpg Y'CbCr encoding: 0/0 [ 501.699737][T12801] tpg quantization: 0/0 [ 501.718029][T12801] tpg RGB range: 0/2 [ 501.792102][T12801] vivid-007: ================== END STATUS ================== [ 502.186801][T12802] can: request_module (can-proto-3) failed. [ 502.999971][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1255'. [ 503.011723][T12880] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1255'. [ 504.396157][T12939] FAULT_INJECTION: forcing a failure. [ 504.396157][T12939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.429797][T12939] CPU: 1 UID: 0 PID: 12939 Comm: syz.1.1262 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 504.429844][T12939] Tainted: [U]=USER [ 504.429853][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.429893][T12939] Call Trace: [ 504.429903][T12939] [ 504.429914][T12939] dump_stack_lvl+0x16c/0x1f0 [ 504.429961][T12939] should_fail_ex+0x512/0x640 [ 504.430004][T12939] _copy_from_user+0x2e/0xd0 [ 504.430072][T12939] do_sock_getsockopt+0x5f4/0x800 [ 504.430108][T12939] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 504.430135][T12939] ? __fget_files+0x204/0x3c0 [ 504.430194][T12939] __sys_getsockopt+0x123/0x1b0 [ 504.430244][T12939] __x64_sys_getsockopt+0xbd/0x160 [ 504.430289][T12939] ? do_syscall_64+0x91/0x490 [ 504.430395][T12939] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.430440][T12939] do_syscall_64+0xcd/0x490 [ 504.430470][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.430498][T12939] RIP: 0033:0x7fd6b458e929 [ 504.430521][T12939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.430547][T12939] RSP: 002b:00007fd6b5471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 504.430574][T12939] RAX: ffffffffffffffda RBX: 00007fd6b47b5fa0 RCX: 00007fd6b458e929 [ 504.430592][T12939] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000004 [ 504.430608][T12939] RBP: 00007fd6b5471090 R08: 0000000000000000 R09: 0000000000000000 [ 504.430624][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.430639][T12939] R13: 0000000000000000 R14: 00007fd6b47b5fa0 R15: 00007ffc1ad9af78 [ 504.430677][T12939] [ 505.298708][T12982] FAULT_INJECTION: forcing a failure. [ 505.298708][T12982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.312330][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.3.1270 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 505.312374][T12982] Tainted: [U]=USER [ 505.312382][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.312397][T12982] Call Trace: [ 505.312405][T12982] [ 505.312415][T12982] dump_stack_lvl+0x16c/0x1f0 [ 505.312462][T12982] should_fail_ex+0x512/0x640 [ 505.312507][T12982] _copy_from_user+0x2e/0xd0 [ 505.312551][T12982] do_sock_getsockopt+0x5f4/0x800 [ 505.312587][T12982] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 505.312615][T12982] ? __fget_files+0x204/0x3c0 [ 505.312674][T12982] __sys_getsockopt+0x123/0x1b0 [ 505.312724][T12982] __x64_sys_getsockopt+0xbd/0x160 [ 505.312763][T12982] ? do_syscall_64+0x91/0x490 [ 505.312789][T12982] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.312828][T12982] do_syscall_64+0xcd/0x490 [ 505.312858][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.312886][T12982] RIP: 0033:0x7f2c5c78e929 [ 505.312909][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.312936][T12982] RSP: 002b:00007f2c5a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 505.312963][T12982] RAX: ffffffffffffffda RBX: 00007f2c5c9b5fa0 RCX: 00007f2c5c78e929 [ 505.312981][T12982] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000004 [ 505.312998][T12982] RBP: 00007f2c5a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.313014][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.313030][T12982] R13: 0000000000000000 R14: 00007f2c5c9b5fa0 R15: 00007ffc5fc63368 [ 505.313066][T12982] [ 506.838190][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.875287][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.210126][T13064] zswap: compressor 000 not available [ 509.839630][T13122] FAULT_INJECTION: forcing a failure. [ 509.839630][T13122] name failslab, interval 1, probability 0, space 0, times 0 [ 509.854152][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.2.1286 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 509.854218][T13122] Tainted: [U]=USER [ 509.854227][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.854244][T13122] Call Trace: [ 509.854253][T13122] [ 509.854265][T13122] dump_stack_lvl+0x16c/0x1f0 [ 509.854323][T13122] should_fail_ex+0x512/0x640 [ 509.854360][T13122] ? __kmalloc_noprof+0xbf/0x510 [ 509.854403][T13122] ? __register_sysctl_table+0xea2/0x1900 [ 509.854447][T13122] should_failslab+0xc2/0x120 [ 509.854476][T13122] __kmalloc_noprof+0xd2/0x510 [ 509.854517][T13122] ? __register_sysctl_table+0xe8e/0x1900 [ 509.854574][T13122] __register_sysctl_table+0xea2/0x1900 [ 509.854631][T13122] ? __pfx___register_sysctl_table+0x10/0x10 [ 509.854676][T13122] ? is_module_address+0x69/0xf0 [ 509.854717][T13122] ? register_net_sysctl_sz+0x228/0x3e0 [ 509.854750][T13122] ? __asan_memcpy+0x3c/0x60 [ 509.854792][T13122] sysctl_core_net_init+0xe3/0x280 [ 509.854830][T13122] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 509.854868][T13122] ops_init+0x1df/0x5f0 [ 509.854902][T13122] setup_net+0x1ff/0x510 [ 509.854929][T13122] ? lockdep_init_map_type+0x5c/0x280 [ 509.854970][T13122] ? __pfx_setup_net+0x10/0x10 [ 509.855012][T13122] ? debug_mutex_init+0x37/0x70 [ 509.855046][T13122] copy_net_ns+0x2a6/0x5f0 [ 509.855083][T13122] create_new_namespaces+0x3ea/0xa90 [ 509.855125][T13122] copy_namespaces+0x468/0x560 [ 509.855160][T13122] copy_process+0x2822/0x76a0 [ 509.855194][T13122] ? preempt_schedule_thunk+0x16/0x30 [ 509.855248][T13122] ? __pfx_copy_process+0x10/0x10 [ 509.855281][T13122] ? plist_check_head+0xa3/0x150 [ 509.855328][T13122] ? futex_private_hash_put+0xc7/0x240 [ 509.855370][T13122] kernel_clone+0xfc/0x960 [ 509.855405][T13122] ? __pfx_futex_wake+0x10/0x10 [ 509.855446][T13122] ? __pfx_kernel_clone+0x10/0x10 [ 509.855507][T13122] __do_sys_clone+0xce/0x120 [ 509.855543][T13122] ? __pfx___do_sys_clone+0x10/0x10 [ 509.855599][T13122] ? __pfx_rcu_exp_handler+0x10/0x10 [ 509.855638][T13122] ? rcu_is_watching+0x12/0xc0 [ 509.855667][T13122] ? __pfx_rcu_exp_handler+0x10/0x10 [ 509.855718][T13122] do_syscall_64+0xcd/0x490 [ 509.855749][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.855779][T13122] RIP: 0033:0x7ff63438e929 [ 509.855804][T13122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.855834][T13122] RSP: 002b:00007ff635174fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 509.855864][T13122] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 509.855882][T13122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 509.855899][T13122] RBP: 00007ff634410b39 R08: 0000000000000000 R09: 0000000000000000 [ 509.855917][T13122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 509.855934][T13122] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 509.855974][T13122] [ 510.224737][T13122] sysctl could not get directory: /net/core -12 [ 510.384606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.397005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.409583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.422021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.434536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.446702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.458997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.471432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.483947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.496224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.292622][T13248] vhci_hcd: invalid port number 21 [ 512.310443][T13248] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 512.392356][T13248] perf: Dynamic interrupt throttling disabled, can hang your system! [ 512.511724][T13253] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1293'. [ 513.738919][T13277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.760285][T13277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.794763][T13277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.829568][T13277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.394413][ C1] net_ratelimit: 44493 callbacks suppressed [ 515.394442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.412978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.425197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.437733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.450258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.462828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.475393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.487699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.500005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.512971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.794896][T13284] Bluetooth: hci2: command 0x0406 tx timeout [ 515.801379][T13284] Bluetooth: hci0: command 0x0406 tx timeout [ 515.884751][T13337] Bluetooth: hci1: command 0x0406 tx timeout [ 515.891712][T13266] Bluetooth: hci3: command 0x0406 tx timeout [ 516.745131][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 517.531156][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 520.404421][ C1] net_ratelimit: 67196 callbacks suppressed [ 520.404441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.422838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.435041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.447298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.459212][ C1] sched: DL replenish lagged too much [ 520.464902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.477048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.489106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.501391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.513420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.525569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.414370][ C1] net_ratelimit: 86228 callbacks suppressed [ 525.414401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.432940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.445189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.457413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.469858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.482043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.494810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.507349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.520105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.532501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.317125][T13375] FAULT_INJECTION: forcing a failure. [ 529.317125][T13375] name fail_futex, interval 1, probability 0, space 0, times 0 [ 529.357783][T13375] CPU: 1 UID: 0 PID: 13375 Comm: syz.2.1313 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 529.357834][T13375] Tainted: [U]=USER [ 529.357844][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.357860][T13375] Call Trace: [ 529.357918][T13375] [ 529.357929][T13375] dump_stack_lvl+0x16c/0x1f0 [ 529.357978][T13375] should_fail_ex+0x512/0x640 [ 529.358024][T13375] get_futex_key+0x1d0/0x1540 [ 529.358063][T13375] ? __pfx_get_futex_key+0x10/0x10 [ 529.358097][T13375] ? __mutex_trylock_common+0xe9/0x250 [ 529.358143][T13375] futex_wake+0xea/0x530 [ 529.358185][T13375] ? __pfx_futex_wake+0x10/0x10 [ 529.358220][T13375] ? __lock_acquire+0xb8a/0x1c90 [ 529.358274][T13375] do_futex+0x1e3/0x350 [ 529.358308][T13375] ? __pfx_do_futex+0x10/0x10 [ 529.358336][T13375] ? __might_fault+0xe3/0x190 [ 529.358385][T13375] mm_release+0x24e/0x300 [ 529.358415][T13375] do_exit+0x683/0x2bd0 [ 529.358460][T13375] ? __pfx_do_exit+0x10/0x10 [ 529.358496][T13375] ? do_raw_spin_lock+0x12c/0x2b0 [ 529.358535][T13375] ? find_held_lock+0x2b/0x80 [ 529.358569][T13375] do_group_exit+0xd3/0x2a0 [ 529.358609][T13375] get_signal+0x2673/0x26d0 [ 529.358655][T13375] ? __pfx_get_signal+0x10/0x10 [ 529.358698][T13375] arch_do_signal_or_restart+0x8f/0x790 [ 529.358728][T13375] ? __fget_files+0x20e/0x3c0 [ 529.358764][T13375] ? __fget_files+0x150/0x3c0 [ 529.358800][T13375] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 529.358845][T13375] ? __pfx_do_readv+0x10/0x10 [ 529.358901][T13375] exit_to_user_mode_loop+0x84/0x110 [ 529.358946][T13375] do_syscall_64+0x3f6/0x490 [ 529.358977][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.359005][T13375] RIP: 0033:0x7ff63438e929 [ 529.359028][T13375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.359054][T13375] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 529.359088][T13375] RAX: fffffffffffffe00 RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 529.359106][T13375] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000002 [ 529.359123][T13375] RBP: 00007ff635175090 R08: 0000000000000000 R09: 0000000000000000 [ 529.359139][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.359156][T13375] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 529.359198][T13375] [ 530.425640][ C1] net_ratelimit: 59626 callbacks suppressed [ 530.425666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.444472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.456937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.469121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.481750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.494695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.507210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.520853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.533167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.545571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.291425][T13410] FAULT_INJECTION: forcing a failure. [ 533.291425][T13410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.397239][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.1.1320 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 533.397288][T13410] Tainted: [U]=USER [ 533.397298][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.397315][T13410] Call Trace: [ 533.397324][T13410] [ 533.397337][T13410] dump_stack_lvl+0x16c/0x1f0 [ 533.397388][T13410] should_fail_ex+0x512/0x640 [ 533.397435][T13410] should_fail_alloc_page+0xe7/0x130 [ 533.397466][T13410] prepare_alloc_pages+0x3c2/0x610 [ 533.397508][T13410] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 533.397557][T13410] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.397591][T13410] ? is_bpf_text_address+0x94/0x1a0 [ 533.397630][T13410] ? kernel_text_address+0x8d/0x100 [ 533.397674][T13410] ? __kernel_text_address+0xd/0x40 [ 533.397716][T13410] ? unwind_get_return_address+0x59/0xa0 [ 533.397759][T13410] ? arch_stack_walk+0xa6/0x100 [ 533.397802][T13410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.397846][T13410] ? __lock_acquire+0x622/0x1c90 [ 533.397906][T13410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 533.397951][T13410] ? policy_nodemask+0xea/0x4e0 [ 533.398000][T13410] alloc_pages_mpol+0x1fb/0x550 [ 533.398031][T13410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 533.398080][T13410] alloc_pages_noprof+0x131/0x390 [ 533.398109][T13410] get_free_pages_noprof+0x10/0xb0 [ 533.398138][T13410] vcs_read+0xba/0xbe0 [ 533.398169][T13410] ? find_held_lock+0x2b/0x80 [ 533.398198][T13410] ? get_pid_task+0xfc/0x250 [ 533.398244][T13410] ? __pfx_vcs_read+0x10/0x10 [ 533.398279][T13410] ? bpf_lsm_file_permission+0x9/0x10 [ 533.398309][T13410] ? security_file_permission+0x71/0x210 [ 533.398346][T13410] ? rw_verify_area+0xcf/0x680 [ 533.398380][T13410] ? __pfx_vcs_read+0x10/0x10 [ 533.398416][T13410] vfs_read+0x1e4/0xc60 [ 533.398461][T13410] ? __pfx_vfs_read+0x10/0x10 [ 533.398496][T13410] ? find_held_lock+0x2b/0x80 [ 533.398523][T13410] ? __fget_files+0x204/0x3c0 [ 533.398567][T13410] ? __fget_files+0x20e/0x3c0 [ 533.398613][T13410] ksys_read+0x12a/0x250 [ 533.398651][T13410] ? __pfx_ksys_read+0x10/0x10 [ 533.398700][T13410] do_syscall_64+0xcd/0x490 [ 533.398730][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.398759][T13410] RIP: 0033:0x7fd6b458e929 [ 533.398783][T13410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.398810][T13410] RSP: 002b:00007fd6b5471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.398836][T13410] RAX: ffffffffffffffda RBX: 00007fd6b47b5fa0 RCX: 00007fd6b458e929 [ 533.398855][T13410] RDX: 00000000ffffffe9 RSI: 0000200000000080 RDI: 0000000000000004 [ 533.398872][T13410] RBP: 00007fd6b5471090 R08: 0000000000000000 R09: 0000000000000000 [ 533.398889][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.398905][T13410] R13: 0000000000000000 R14: 00007fd6b47b5fa0 R15: 00007ffc1ad9af78 [ 533.398944][T13410] [ 535.077875][T13424] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 535.256577][T13433] FAULT_INJECTION: forcing a failure. [ 535.256577][T13433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.375366][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.2.1325 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 535.375415][T13433] Tainted: [U]=USER [ 535.375425][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.375440][T13433] Call Trace: [ 535.375450][T13433] [ 535.375461][T13433] dump_stack_lvl+0x16c/0x1f0 [ 535.375510][T13433] should_fail_ex+0x512/0x640 [ 535.375558][T13433] _copy_to_user+0x32/0xd0 [ 535.375607][T13433] mousedev_read+0x3a9/0x7d0 [ 535.375651][T13433] ? __pfx_mousedev_read+0x10/0x10 [ 535.375688][T13433] ? __pfx_autoremove_wake_function+0x10/0x10 [ 535.375726][T13433] ? apparmor_file_permission+0x251/0x400 [ 535.375759][T13433] ? bpf_lsm_file_permission+0x9/0x10 [ 535.375790][T13433] ? security_file_permission+0x71/0x210 [ 535.375829][T13433] ? rw_verify_area+0xcf/0x680 [ 535.375868][T13433] ? __pfx_mousedev_read+0x10/0x10 [ 535.375901][T13433] vfs_readv+0x5c1/0x8b0 [ 535.375954][T13433] ? __pfx_vfs_readv+0x10/0x10 [ 535.376034][T13433] ? __fget_files+0x20e/0x3c0 [ 535.376070][T13433] ? __fget_files+0x150/0x3c0 [ 535.376119][T13433] ? do_readv+0x28c/0x340 [ 535.376152][T13433] do_readv+0x28c/0x340 [ 535.376189][T13433] ? __pfx_do_readv+0x10/0x10 [ 535.376239][T13433] do_syscall_64+0xcd/0x490 [ 535.376269][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.376299][T13433] RIP: 0033:0x7ff63438e929 [ 535.376323][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.376350][T13433] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 535.376378][T13433] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 535.376396][T13433] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.376412][T13433] RBP: 00007ff635175090 R08: 0000000000000000 R09: 0000000000000000 [ 535.376429][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.376445][T13433] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 535.376483][T13433] [ 535.434373][ C1] net_ratelimit: 44289 callbacks suppressed [ 535.434395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.613969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.626223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.638394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.650635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.662817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.675039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.687381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.699834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.712302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.504573][T13266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.522340][T13266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.534962][T13266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.544853][T13266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.552976][T13266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.598362][T13266] Bluetooth: hci0: command tx timeout [ 540.444392][ C1] net_ratelimit: 48202 callbacks suppressed [ 540.444420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.462590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.474773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.486989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.499192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.511356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.523536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.535713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.548050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.560230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.674710][T13266] Bluetooth: hci0: command tx timeout [ 540.739562][T13453] chnl_net:caif_netlink_parms(): no params data found [ 541.491322][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.532562][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.565508][T13453] bridge_slave_0: entered allmulticast mode [ 541.639743][T13453] bridge_slave_0: entered promiscuous mode [ 541.738978][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.774712][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.871239][T13453] bridge_slave_1: entered allmulticast mode [ 541.993455][T13453] bridge_slave_1: entered promiscuous mode [ 542.338180][T13453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.401426][T13453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.749852][T13453] team0: Port device team_slave_0 added [ 542.756229][T13266] Bluetooth: hci0: command tx timeout [ 542.795750][T13453] team0: Port device team_slave_1 added [ 543.213501][T13453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.233009][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.271436][T13453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.834918][T13266] Bluetooth: hci0: command tx timeout [ 545.454334][ C1] net_ratelimit: 66759 callbacks suppressed [ 545.454360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.473003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.485054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.497231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.509348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.521769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.533969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.546049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.558249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.570474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.888263][T13453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.898678][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.970120][T13453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.529845][T13453] hsr_slave_0: entered promiscuous mode [ 547.555787][T13453] hsr_slave_1: entered promiscuous mode [ 547.562952][T13453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.604137][T13453] Cannot create hsr debugfs directory [ 549.730468][T13453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.835918][T13453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.905207][T13453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 550.055703][T13453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 550.464424][ C1] net_ratelimit: 52298 callbacks suppressed [ 550.464449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.483155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.495588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.508175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.520421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.532674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.544880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.557391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.569767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.582120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.587498][T13453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.739305][T13453] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.806556][T13265] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.813977][T13265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.880603][T13265] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.888020][T13265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.875612][T14015] Invalid ELF header magic: != ELF [ 552.808347][T13453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.915574][T13266] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 553.541999][T14039] FAULT_INJECTION: forcing a failure. [ 553.541999][T14039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.616190][T14039] CPU: 1 UID: 0 PID: 14039 Comm: syz.2.1350 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 553.616239][T14039] Tainted: [U]=USER [ 553.616248][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.616263][T14039] Call Trace: [ 553.616272][T14039] [ 553.616283][T14039] dump_stack_lvl+0x16c/0x1f0 [ 553.616332][T14039] should_fail_ex+0x512/0x640 [ 553.616374][T14039] _copy_from_user+0x2e/0xd0 [ 553.616417][T14039] snd_seq_oss_write+0x397/0x7d0 [ 553.616458][T14039] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 553.616496][T14039] ? apparmor_file_permission+0x251/0x400 [ 553.616529][T14039] ? bpf_lsm_file_permission+0x9/0x10 [ 553.616573][T14039] ? __pfx_odev_write+0x10/0x10 [ 553.616599][T14039] odev_write+0x51/0xa0 [ 553.616629][T14039] vfs_write+0x29d/0x1150 [ 553.616678][T14039] ? __pfx_vfs_write+0x10/0x10 [ 553.616713][T14039] ? find_held_lock+0x2b/0x80 [ 553.616742][T14039] ? __fget_files+0x204/0x3c0 [ 553.616788][T14039] ? __fget_files+0x20e/0x3c0 [ 553.616838][T14039] ksys_write+0x12a/0x250 [ 553.616876][T14039] ? __pfx_ksys_write+0x10/0x10 [ 553.616929][T14039] do_syscall_64+0xcd/0x490 [ 553.616958][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.616986][T14039] RIP: 0033:0x7ff63438e929 [ 553.617009][T14039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.617035][T14039] RSP: 002b:00007ff635175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.617061][T14039] RAX: ffffffffffffffda RBX: 00007ff6345b5fa0 RCX: 00007ff63438e929 [ 553.617080][T14039] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 553.617097][T14039] RBP: 00007ff635175090 R08: 0000000000000000 R09: 0000000000000000 [ 553.617113][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.617130][T14039] R13: 0000000000000000 R14: 00007ff6345b5fa0 R15: 00007ffea466b7c8 [ 553.617168][T14039] [ 554.953344][T13453] veth0_vlan: entered promiscuous mode [ 555.043526][T13453] veth1_vlan: entered promiscuous mode [ 555.334159][T13453] veth0_macvtap: entered promiscuous mode [ 555.382076][T13453] veth1_macvtap: entered promiscuous mode [ 555.474434][ C1] net_ratelimit: 49392 callbacks suppressed [ 555.474462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.492668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.504800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.517572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.529855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.542070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.544033][T13453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.554336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.554455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.554616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.554722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.968422][T13453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.052230][T13453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.099054][T13453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.165100][T13453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.224501][T13453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.484386][ C1] net_ratelimit: 80398 callbacks suppressed [ 560.484411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.502944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.515218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.527844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.540019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.552160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.564404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.576626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.588908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.601147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.494392][ C1] net_ratelimit: 100046 callbacks suppressed [ 565.494420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.512866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.525363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.537557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.549836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.562075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.574709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.587923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.600000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.612134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.315221][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.321752][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.356277][T13279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.414355][T13279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.504363][ C1] net_ratelimit: 83966 callbacks suppressed [ 570.504397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.523028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.535296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.547505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.559531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.571705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.584246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.596515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.608549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.620781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.370187][T13271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.470936][T13271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.514366][ C1] net_ratelimit: 67522 callbacks suppressed [ 575.514392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.532842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.545020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.557659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.570115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.582383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.594951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.607291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.619589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.632457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.868200][T14129] syz.2.1368 (14129): /proc/14128/oom_adj is deprecated, please use /proc/14128/oom_score_adj instead. [ 577.185268][T13266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.194912][T13266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.203616][T13266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.218160][T13266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.230129][T13266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.731492][T13279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.867716][T14151] FAULT_INJECTION: forcing a failure. [ 577.867716][T14151] name fail_futex, interval 1, probability 0, space 0, times 0 [ 577.923150][T14151] CPU: 0 UID: 0 PID: 14151 Comm: syz.1.1371 Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 577.923203][T14151] Tainted: [U]=USER [ 577.923213][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.923232][T14151] Call Trace: [ 577.923241][T14151] [ 577.923253][T14151] dump_stack_lvl+0x16c/0x1f0 [ 577.923305][T14151] should_fail_ex+0x512/0x640 [ 577.923366][T14151] get_futex_key+0x1d0/0x1540 [ 577.923409][T14151] ? __pfx_get_futex_key+0x10/0x10 [ 577.923462][T14151] futex_wake+0xea/0x530 [ 577.923509][T14151] ? __pfx_futex_wake+0x10/0x10 [ 577.923559][T14151] ? errseq_sample+0x53/0x70 [ 577.923602][T14151] ? file_init_path+0x4fe/0x760 [ 577.923641][T14151] do_futex+0x1e3/0x350 [ 577.923679][T14151] ? __pfx_do_futex+0x10/0x10 [ 577.923714][T14151] ? fd_install+0x225/0x750 [ 577.923763][T14151] __x64_sys_futex+0x1e0/0x4c0 [ 577.923802][T14151] ? __sys_socket+0xac/0x260 [ 577.923840][T14151] ? __pfx___x64_sys_futex+0x10/0x10 [ 577.923876][T14151] ? xfd_validate_state+0x61/0x180 [ 577.923911][T14151] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 577.923971][T14151] do_syscall_64+0xcd/0x490 [ 577.924002][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.924032][T14151] RIP: 0033:0x7fd6b458e929 [ 577.924055][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.924084][T14151] RSP: 002b:00007fd6b54710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 577.924121][T14151] RAX: ffffffffffffffda RBX: 00007fd6b47b5fa8 RCX: 00007fd6b458e929 [ 577.924142][T14151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6b47b5fac [ 577.924160][T14151] RBP: 00007fd6b47b5fa0 R08: 00007fd6b5472000 R09: 0000000000000000 [ 577.924179][T14151] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fd6b47b5fac [ 577.924197][T14151] R13: 0000000000000000 R14: 00007ffc1ad9ae90 R15: 00007ffc1ad9af78 [ 577.924241][T14151] [ 578.826898][T13279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.091098][T13279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.324617][T13337] Bluetooth: hci1: command tx timeout [ 579.489696][T13279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.524393][ C1] net_ratelimit: 19206 callbacks suppressed [ 580.524422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.542654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.555207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.567768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.580106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.592884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.605411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.618039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.630559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.643145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.260645][T14132] chnl_net:caif_netlink_parms(): no params data found [ 581.331544][T13279] bridge_slave_1: left allmulticast mode [ 581.366091][T13279] bridge_slave_1: left promiscuous mode [ 581.373430][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.414535][T13337] Bluetooth: hci1: command tx timeout [ 581.535466][T13279] bridge_slave_0: left allmulticast mode [ 581.541286][T13279] bridge_slave_0: left promiscuous mode [ 581.647077][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.894531][ T30] audit: type=1800 audit(6045465916.996:5): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1373" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 583.474772][T13337] Bluetooth: hci1: command tx timeout [ 585.534338][ C0] net_ratelimit: 25713 callbacks suppressed [ 585.534365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.534422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.540818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.552617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.565295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.577641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.590081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.602280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.614341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.625778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.003670][T13337] Bluetooth: hci1: command tx timeout [ 590.544535][ C1] net_ratelimit: 27841 callbacks suppressed [ 590.544563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.544623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.550594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.563012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.574869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.587763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.599575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.611984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.623779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.636291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.554453][ C0] net_ratelimit: 27707 callbacks suppressed [ 595.554481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.554487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.554580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.560804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.572669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.585051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.597027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.609063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.620757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.633290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.564420][ C1] net_ratelimit: 28986 callbacks suppressed [ 600.564448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.564533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.570860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.583054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.594630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.607117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.619004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.632142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.643366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.655373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.574340][ C1] net_ratelimit: 30177 callbacks suppressed [ 605.574352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.574368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.574775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.581203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.592758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.605182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.616926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.630039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.641546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.653861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.584494][ C0] net_ratelimit: 30007 callbacks suppressed [ 610.584522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.585106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.590874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.602724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.615312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.627319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.639361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.651276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.663886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.675643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.594314][ C0] net_ratelimit: 26608 callbacks suppressed [ 615.594342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.594408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.600684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.613022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.625521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.636949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.649241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.661332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.673379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.684825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.604361][ C1] net_ratelimit: 26024 callbacks suppressed [ 620.604389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.604643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.610561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.623043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.634977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.647464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.659430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.671437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.683174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.696054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.614420][ C1] net_ratelimit: 25403 callbacks suppressed [ 625.614448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.614540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.620583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.632985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.644995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.657725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.669582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.681697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.693463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.706059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.893517][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.915028][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.624375][ C0] net_ratelimit: 28684 callbacks suppressed [ 630.624375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.624402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.630500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.643043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.654951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.667024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.679120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.691083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.702665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.714966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.634511][ C1] net_ratelimit: 30299 callbacks suppressed [ 635.634539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.634653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.640598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.653201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.665010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.677258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 635.689260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.701097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.712756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.725136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.644315][ C0] net_ratelimit: 29224 callbacks suppressed [ 640.644343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 640.644417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.650825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.662709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.675200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.686959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.699384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 640.711288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.723247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.744362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.654284][ C1] net_ratelimit: 28902 callbacks suppressed [ 645.654311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.655353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.660688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.672865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 645.684497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.696865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.708563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.721818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.734482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.745118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 650.664321][ C1] net_ratelimit: 27768 callbacks suppressed [ 650.664348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.664482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 650.670684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.682812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.694484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.708684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.719014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.731390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 650.743336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.755436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.974922][T13337] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 655.674422][ C1] net_ratelimit: 25424 callbacks suppressed [ 655.674449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.675127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.680497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.693216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 655.705168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.717353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.729406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.742754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.753466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.766086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 659.347484][T13266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.684315][ C1] net_ratelimit: 25594 callbacks suppressed [ 660.684343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.685489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.690719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.703031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 660.714588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.727552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.739259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.752515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.763529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.775635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 665.694329][ C1] net_ratelimit: 25866 callbacks suppressed [ 665.694358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.694672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.700449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.713121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 665.725096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.737597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.750435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.763470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.774351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.786999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 670.704435][ C1] net_ratelimit: 26246 callbacks suppressed [ 670.704465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.705885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.710528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.723522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 670.735643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.748114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.760762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.773518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.784660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.797220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 672.595791][T14323] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 675.714368][ C0] net_ratelimit: 21674 callbacks suppressed [ 675.714395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.714487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.720849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 675.732461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.744866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.756540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.769863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.780891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.793092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 675.805402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.724265][ C1] net_ratelimit: 26098 callbacks suppressed [ 680.724293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.725419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.731203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.744077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 680.755692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.768175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.779928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.793715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.805025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.817527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 684.860881][T13337] Bluetooth: hci0: command tx timeout [ 685.734660][ C0] net_ratelimit: 26588 callbacks suppressed [ 685.734689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.734986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.742070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.752910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.765722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 685.777351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.790276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.801565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.814474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.825183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.574417][T13266] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 690.744300][ C0] net_ratelimit: 26701 callbacks suppressed [ 690.744328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 690.744815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.750954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.762574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.775894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.786691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.799133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 690.811044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.822968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.834630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.714373][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.792765][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.754334][ C0] net_ratelimit: 26703 callbacks suppressed [ 695.754335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.754370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 695.760408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.772726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.784816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.797848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.808461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.821276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 695.833072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.845667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.764293][ C1] net_ratelimit: 23830 callbacks suppressed [ 700.764331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.764549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.770436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.782805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 700.794797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.806684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.818368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.831719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.842923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.855692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 705.774272][ C1] net_ratelimit: 24525 callbacks suppressed [ 705.774301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.774560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.780823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.793114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 705.804766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.817312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.829187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.842837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.853863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.866408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 708.243512][T14327] Bluetooth: hci3: Opcode 0x0c03 failed: -4 [ 710.784302][ C1] net_ratelimit: 24867 callbacks suppressed [ 710.784329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.785145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.790457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.802880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 710.814534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.826998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.839302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.852651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.863193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.875700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 715.794272][ C1] net_ratelimit: 26411 callbacks suppressed [ 715.794301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.794668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 715.800838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.812753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.824443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.837770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.848763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.861230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 715.873097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.885048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.804284][ C1] net_ratelimit: 25121 callbacks suppressed [ 720.804312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.804714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.810356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.822997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 720.834763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.847175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.859510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.872424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.883288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.895932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 723.054549][T13337] Bluetooth: hci1: command tx timeout [ 725.814352][ C1] net_ratelimit: 25707 callbacks suppressed [ 725.814378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.814908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.820649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.833273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 725.845508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.857217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.868900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.882407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.893543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.905779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 730.824523][ C1] net_ratelimit: 25582 callbacks suppressed [ 730.824551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.824847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.830599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.843336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 730.855070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.867555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.880132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.893160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.903895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.916472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 735.321595][ T31] INFO: task kworker/0:2:980 blocked for more than 147 seconds. [ 735.336814][ T31] Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 735.384589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.393341][ T31] task:kworker/0:2 state:D stack:25432 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 735.594107][ T31] Workqueue: events switchdev_deferred_process_work [ 735.662491][ T31] Call Trace: [ 735.712133][ T31] [ 735.729750][ T31] __schedule+0x116a/0x5de0 [ 735.834601][ C1] net_ratelimit: 26225 callbacks suppressed [ 735.834628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.835137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.840691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.853149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 735.864642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.876894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.889293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.902431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.913205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.925990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 735.952771][ T31] ? find_held_lock+0x2b/0x80 [ 735.983391][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 736.014590][ T31] ? __pfx___schedule+0x10/0x10 [ 736.019751][ T31] ? find_held_lock+0x2b/0x80 [ 736.089171][ T31] ? schedule+0x2d7/0x3a0 [ 736.102683][ T31] schedule+0xe7/0x3a0 [ 736.132464][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.145772][ T31] __mutex_lock+0x6c7/0xb90 [ 736.150348][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 736.183008][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 736.195903][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 736.201661][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 736.233954][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 736.252442][ T31] switchdev_deferred_process_work+0xe/0x20 [ 736.267859][ T31] process_one_work+0x9cc/0x1b70 [ 736.273041][ T31] ? __pfx_process_one_work+0x10/0x10 [ 736.310319][ T31] ? assign_work+0x1a0/0x250 [ 736.331536][ T31] worker_thread+0x6c8/0xf10 [ 736.345092][ T31] ? __kthread_parkme+0x19e/0x250 [ 736.350323][ T31] ? __pfx_worker_thread+0x10/0x10 [ 736.363792][ T31] kthread+0x3c5/0x780 [ 736.376077][ T31] ? __pfx_kthread+0x10/0x10 [ 736.380990][ T31] ? rcu_is_watching+0x12/0xc0 [ 736.416051][ T31] ? __pfx_kthread+0x10/0x10 [ 736.420855][ T31] ret_from_fork+0x5d7/0x6f0 [ 736.446712][ T31] ? __pfx_kthread+0x10/0x10 [ 736.451435][ T31] ret_from_fork_asm+0x1a/0x30 [ 736.481108][ T31] [ 736.499130][ T31] INFO: task kworker/u10:1:13267 blocked for more than 148 seconds. [ 736.530087][ T31] Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 736.569500][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.597782][ T31] task:kworker/u10:1 state:D stack:25656 pid:13267 tgid:13267 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 736.614211][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 736.614233][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14317/1:b..l [ 736.614755][ C1] rcu: (detected by 1, t=10502 jiffies, g=57581, q=770 ncpus=2) [ 736.614782][ C1] task:syz-executor state:R running task stack:25512 pid:14317 tgid:14317 ppid:5820 task_flags:0x400000 flags:0x00004002 [ 736.614879][ C1] Call Trace: [ 736.614890][ C1] [ 736.614909][ C1] __schedule+0x116a/0x5de0 [ 736.614961][ C1] ? __lock_acquire+0x570/0x1c90 [ 736.615018][ C1] ? __pfx___schedule+0x10/0x10 [ 736.615077][ C1] ? mark_held_locks+0x49/0x80 [ 736.615120][ C1] preempt_schedule_irq+0x51/0x90 [ 736.615161][ C1] irqentry_exit+0x36/0x90 [ 736.615202][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.615234][ C1] RIP: 0010:unwind_next_frame+0x576/0x20a0 [ 736.615277][ C1] Code: c1 ea 03 0f b6 14 02 0f b6 04 06 4c 89 c6 83 e6 07 40 38 f2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 b8 13 00 00 41 83 e7 07 <44> 38 f8 0f 9e c2 84 c0 0f 95 c0 84 c2 0f 85 a1 13 00 00 4c 89 f2 [ 736.615306][ C1] RSP: 0018:ffffc900051c7648 EFLAGS: 00000206 [ 736.615333][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff9141c296 [ 736.615353][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff90bca5e4 [ 736.615373][ C1] RBP: ffffc900051c7700 R08: ffffffff9141c29a R09: 0000000000000000 [ 736.615394][ C1] R10: 0000000000000000 R11: 000000000000a70c R12: ffffc900051c7708 [ 736.615414][ C1] R13: ffffc900051c76b8 R14: ffffc900051c76ed R15: 0000000000000003 [ 736.615457][ C1] ? unwind_next_frame+0x2ec/0x20a0 [ 736.615498][ C1] ? stack_trace_save+0x8e/0xc0 [ 736.615528][ C1] ? __unwind_start+0x45f/0x7f0 [ 736.615572][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 736.615607][ C1] arch_stack_walk+0x94/0x100 [ 736.615659][ C1] ? stack_trace_save+0x8e/0xc0 [ 736.615707][ C1] stack_trace_save+0x8e/0xc0 [ 736.615739][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 736.615776][ C1] ? __lock_acquire+0x622/0x1c90 [ 736.615819][ C1] save_stack+0x160/0x1f0 [ 736.615860][ C1] ? __pfx_save_stack+0x10/0x10 [ 736.615917][ C1] ? page_ext_put+0x3e/0xd0 [ 736.615968][ C1] __reset_page_owner+0x84/0x1a0 [ 736.616014][ C1] __free_frozen_pages+0x7fe/0x1180 [ 736.616066][ C1] __put_partials+0x16d/0x1c0 [ 736.616113][ C1] qlist_free_all+0x4d/0x120 [ 736.616156][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 736.616201][ C1] __kasan_kmalloc+0x8a/0xb0 [ 736.616244][ C1] __get_vm_area_node+0x101/0x330 [ 736.616287][ C1] __vmalloc_node_range_noprof+0x271/0x14b0 [ 736.616325][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616381][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616433][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 736.616489][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616526][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 736.616561][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616606][ C1] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 736.616658][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616717][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 736.616759][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 736.616796][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616835][ C1] vmalloc_user_noprof+0x9e/0xe0 [ 736.616870][ C1] ? kcov_ioctl+0x4c/0x730 [ 736.616911][ C1] kcov_ioctl+0x4c/0x730 [ 736.616949][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 736.616990][ C1] __x64_sys_ioctl+0x18b/0x210 [ 736.617028][ C1] do_syscall_64+0xcd/0x490 [ 736.617058][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.617088][ C1] RIP: 0033:0x7f8fcc78e52b [ 736.617112][ C1] RSP: 002b:00007ffde3b8c990 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.617142][ C1] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f8fcc78e52b [ 736.617164][ C1] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 736.617183][ C1] RBP: 00007f8fcc9b62d8 R08: 00000000000000da R09: 0000000000000000 [ 736.617203][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.617221][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 736.617261][ C1] [ 737.925188][ T31] Workqueue: events_unbound linkwatch_event [ 737.931570][ T31] Call Trace: [ 737.968261][ T31] [ 737.971918][ T31] __schedule+0x116a/0x5de0 [ 737.998157][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 738.002948][ T31] ? sk_skb_reason_drop+0x136/0x1a0 [ 738.028917][ T31] ? ieee80211_iface_work+0x434/0x1020 [ 738.049701][ T31] ? __pfx___mod_timer+0x10/0x10 [ 738.077568][ T31] ? __lock_acquire+0x622/0x1c90 [ 738.082666][ T31] ? __pfx___schedule+0x10/0x10 [ 738.096115][ T31] ? find_held_lock+0x2b/0x80 [ 738.100935][ T31] ? schedule+0x2d7/0x3a0 [ 738.127179][ T31] schedule+0xe7/0x3a0 [ 738.131374][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.167379][ T31] __mutex_lock+0x6c7/0xb90 [ 738.172101][ T31] ? linkwatch_event+0x51/0xc0 [ 738.198437][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.203556][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 738.230695][ T31] ? linkwatch_event+0x51/0xc0 [ 738.243060][ T31] linkwatch_event+0x51/0xc0 [ 738.257038][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 738.262442][ T31] ? rcu_is_watching+0x12/0xc0 [ 738.290509][ T31] process_one_work+0x9cc/0x1b70 [ 738.324687][ T31] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 738.330450][ T31] ? __pfx_process_one_work+0x10/0x10 [ 738.359384][ T31] ? assign_work+0x1a0/0x250 [ 738.364116][ T31] worker_thread+0x6c8/0xf10 [ 738.391832][ T31] ? __pfx_worker_thread+0x10/0x10 [ 738.413429][ T31] kthread+0x3c5/0x780 [ 738.426134][ T31] ? __pfx_kthread+0x10/0x10 [ 738.430859][ T31] ? rcu_is_watching+0x12/0xc0 [ 738.473614][ T31] ? __pfx_kthread+0x10/0x10 [ 738.492437][ T31] ret_from_fork+0x5d7/0x6f0 [ 738.519388][ T31] ? __pfx_kthread+0x10/0x10 [ 738.524110][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.562968][ T31] [ 738.589594][ T31] INFO: task syz-executor:14132 blocked for more than 150 seconds. [ 738.605839][ T31] Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 738.650353][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.675026][ T31] task:syz-executor state:D stack:23560 pid:14132 tgid:14132 ppid:1 task_flags:0x400140 flags:0x00004004 [ 738.708408][ T31] Call Trace: [ 738.711771][ T31] [ 738.756166][ T31] __schedule+0x116a/0x5de0 [ 738.760805][ T31] ? __lock_acquire+0x622/0x1c90 [ 738.778861][ T31] ? __pfx___schedule+0x10/0x10 [ 738.783824][ T31] ? find_held_lock+0x2b/0x80 [ 738.810365][ T31] ? schedule+0x2d7/0x3a0 [ 738.856497][ T31] schedule+0xe7/0x3a0 [ 738.860967][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.877040][ T31] __mutex_lock+0x6c7/0xb90 [ 738.881646][ T31] ? __pfx_aa_get_newest_label+0x10/0x10 [ 738.913871][ T31] ? rcu_is_watching+0x12/0xc0 [ 738.933819][ T31] ? rtnl_newlink+0x600/0x2000 [ 738.968355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.973651][ T31] ? ns_capable+0xd7/0x110 [ 738.986777][ T31] ? rtnl_newlink+0x600/0x2000 [ 738.991725][ T31] rtnl_newlink+0x600/0x2000 [ 739.021623][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 739.042662][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 739.069753][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.083410][ T31] ? __kernel_text_address+0xd/0x40 [ 739.096796][ T31] ? unwind_get_return_address+0x59/0xa0 [ 739.102690][ T31] ? arch_stack_walk+0xa6/0x100 [ 739.129970][ T31] ? rcu_is_watching+0x12/0xc0 [ 739.177789][ T31] ? trace_cap_capable+0x18d/0x200 [ 739.183047][ T31] ? find_held_lock+0x2b/0x80 [ 739.196332][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.201447][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.227970][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 739.233196][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.267556][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 739.272641][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.299630][ T31] ? __lock_acquire+0x622/0x1c90 [ 739.312749][ T31] netlink_rcv_skb+0x158/0x420 [ 739.339423][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.407507][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.412952][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 739.426165][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 739.431046][ T31] netlink_unicast+0x53a/0x7f0 [ 739.457168][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 739.462572][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 739.491168][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.505383][ T31] __sys_sendto+0x4a0/0x520 [ 739.510002][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 739.537210][ T31] ? __pfx_task_mm_cid_work+0x10/0x10 [ 739.542721][ T31] ? xfd_validate_state+0x61/0x180 [ 739.620076][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 739.639737][ T31] ? do_syscall_64+0x91/0x490 [ 739.659476][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.700442][ T31] do_syscall_64+0xcd/0x490 [ 739.712841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.727113][ T31] RIP: 0033:0x7f142a5907bc [ 739.731682][ T31] RSP: 002b:00007ffd63306e50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 739.768013][ T31] RAX: ffffffffffffffda RBX: 00007f142b2e4620 RCX: 00007f142a5907bc [ 739.795403][ T31] RDX: 000000000000003c RSI: 00007f142b2e4670 RDI: 0000000000000003 [ 739.803633][ T31] RBP: 0000000000000000 R08: 00007ffd63306ea4 R09: 000000000000000c [ 739.840122][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 739.859742][ T31] R13: 0000000000000000 R14: 00007f142b2e4670 R15: 0000000000000000 [ 739.890016][ T31] [ 739.893196][ T31] INFO: task syz.4.1375:14304 blocked for more than 152 seconds. [ 739.930104][ T31] Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 739.960230][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 739.976549][ T31] task:syz.4.1375 state:D stack:28888 pid:14304 tgid:14294 ppid:13453 task_flags:0x400040 flags:0x00004004 [ 740.018271][ T31] Call Trace: [ 740.021649][ T31] [ 740.032772][ T31] __schedule+0x116a/0x5de0 [ 740.058949][ T31] ? __pfx___schedule+0x10/0x10 [ 740.063923][ T31] ? find_held_lock+0x2b/0x80 [ 740.090014][ T31] ? schedule+0x2d7/0x3a0 [ 740.113378][ T31] schedule+0xe7/0x3a0 [ 740.125408][ T31] schedule_preempt_disabled+0x13/0x30 [ 740.130949][ T31] __mutex_lock+0x6c7/0xb90 [ 740.149598][ T31] ? tap_open+0x7e/0x1170 [ 740.154005][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 740.176249][ T31] ? __pfx_tap_open+0x10/0x10 [ 740.181048][ T31] ? tap_open+0x7e/0x1170 [ 740.208562][ T31] ? rtnl_lock+0x9/0x20 [ 740.213102][ T31] tap_open+0x7e/0x1170 [ 740.236455][ T31] ? __pfx_tap_open+0x10/0x10 [ 740.241249][ T31] chrdev_open+0x231/0x6a0 [ 740.267577][ T31] ? __pfx_apparmor_file_open+0x10/0x10 [ 740.273545][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 740.300490][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 740.316079][ T31] do_dentry_open+0x744/0x1c10 [ 740.320961][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 740.376954][ T31] vfs_open+0x82/0x3f0 [ 740.381153][ T31] path_openat+0x1de4/0x2cb0 [ 740.412692][ T31] ? __pfx_path_openat+0x10/0x10 [ 740.432434][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 740.468308][ T31] do_filp_open+0x20b/0x470 [ 740.472938][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 740.499572][ T31] ? alloc_fd+0x471/0x7d0 [ 740.504108][ T31] do_sys_openat2+0x11b/0x1d0 [ 740.524922][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.530230][ T31] __x64_sys_openat+0x174/0x210 [ 740.569894][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.596455][ T31] do_syscall_64+0xcd/0x490 [ 740.601161][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.714449][ T31] RIP: 0033:0x7f80e498e929 [ 740.718959][ T31] RSP: 002b:00007f80e581c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.752322][ T31] RAX: ffffffffffffffda RBX: 00007f80e4bb6080 RCX: 00007f80e498e929 [ 740.775218][ T31] RDX: 0000000000020400 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 740.783367][ T31] RBP: 00007f80e4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 740.827937][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.844286][ C1] net_ratelimit: 19799 callbacks suppressed [ 740.844309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.844368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 740.850750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.862760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.874585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.887977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.898629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.910999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:22:c0:df:1c:35, vlan:0) [ 740.923316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.935191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.979923][ T31] R13: 0000000000000000 R14: 00007f80e4bb6080 R15: 00007ffd73388ea8 [ 741.017449][ T31] [ 741.021109][ T31] [ 741.021109][ T31] Showing all locks held in the system: [ 741.045932][ T31] 1 lock held by pool_workqueue_/3: [ 741.051223][ T31] #0: ffffffff8e5cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 741.129145][ T31] 2 locks held by kworker/0:0/9: [ 741.134186][ T31] 1 lock held by khungtaskd/31: [ 741.169349][ T31] #0: ffffffff8e5c4700 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 741.233442][ T31] 3 locks held by kworker/0:2/980: [ 741.266987][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.285837][ T31] #1: ffffc90003b67d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.339309][ T31] #2: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 741.361834][ T31] 3 locks held by kworker/R-ipv6_/3173: [ 741.388541][ T31] #0: ffff88814c672148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.414331][ T31] #1: ffffc9000beefca8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.450391][ T31] #2: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 741.488911][ T31] 3 locks held by kworker/R-bat_e/3403: [ 741.502050][ T31] 4 locks held by udevd/5203: [ 741.515252][ T31] 2 locks held by getty/5592: [ 741.550357][ T31] #0: ffff8880358da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 741.574863][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 741.602901][ T31] 1 lock held by syz-executor/5833: [ 741.626645][ T31] #0: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 741.680683][ T31] 2 locks held by kworker/0:5/5927: [ 741.707145][ T31] 1 lock held by syz.1.1138/12067: [ 741.712341][ T31] #0: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 741.744257][ T31] 2 locks held by kworker/0:1/12945: [ 741.749624][ T31] 3 locks held by kworker/u10:0/13265: [ 741.796341][ T31] 3 locks held by kworker/u10:1/13267: [ 741.801907][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.860318][ T31] #1: ffffc90004007d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.897796][ T31] #2: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 741.915254][ T31] 3 locks held by kworker/u10:2/13270: [ 741.920811][ T31] 3 locks held by kworker/u10:3/13271: [ 741.955573][ T31] 4 locks held by kworker/u10:4/13279: [ 741.961161][ T31] 3 locks held by kworker/u10:5/13280: [ 741.988152][ T31] 7 locks held by kworker/u11:1/13284: [ 741.993855][ T31] #0: ffff888033eb8148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.025775][ T31] #1: ffffc9000b3b7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.067861][ T31] #2: ffff888078d10d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 742.092218][ T31] #3: ffff888078d10078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 742.136275][ T31] #4: ffffffff905bff48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 742.161045][ T31] #5: ffff88805bdc9b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 742.200964][ T31] #6: ffffffff8e5cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 742.247954][ T31] 3 locks held by kworker/u10:6/13361: [ 742.253608][ T31] 3 locks held by kworker/u10:7/13365: [ 742.267936][ T31] 3 locks held by kworker/u10:8/14079: [ 742.273454][ T31] 2 locks held by syz-executor/14132: [ 742.307811][ T31] #0: ffffffff90aa4c80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 742.339411][ T31] #1: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 742.364893][ T31] 1 lock held by syz.4.1375/14304: [ 742.370076][ T31] #0: ffffffff9034e868 (rtnl_mutex){+.+.}-{4:4}, at: tap_open+0x7e/0x1170 [ 742.400338][ T31] 3 locks held by kworker/u10:9/14309: [ 742.459117][ T31] 2 locks held by syz-executor/14317: [ 742.472614][ T31] 1 lock held by kworker/u10:10/14319: [ 742.493046][ T31] 2 locks held by cmp/14321: [ 742.526284][ T31] 5 locks held by kworker/u11:3/14325: [ 742.532056][ T31] #0: ffff88805be03148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.573973][ T31] #1: ffffc90003a47d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.627788][ T31] #2: ffff888058da0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 742.661271][ T31] #3: ffff888058da0078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 742.679363][ T31] #4: ffffffff905bff48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 742.739513][ T31] [ 742.742016][ T31] ============================================= [ 742.742016][ T31] [ 742.766608][ T31] NMI backtrace for cpu 1 [ 742.766634][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 742.766680][ T31] Tainted: [U]=USER [ 742.766689][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 742.766704][ T31] Call Trace: [ 742.766713][ T31] [ 742.766724][ T31] dump_stack_lvl+0x116/0x1f0 [ 742.766773][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 742.766809][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.766847][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 742.766894][ T31] watchdog+0xf70/0x12c0 [ 742.766944][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.766981][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.767026][ T31] ? __kthread_parkme+0x19e/0x250 [ 742.767060][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.767100][ T31] kthread+0x3c5/0x780 [ 742.767138][ T31] ? __pfx_kthread+0x10/0x10 [ 742.767180][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.767208][ T31] ? __pfx_kthread+0x10/0x10 [ 742.767248][ T31] ret_from_fork+0x5d7/0x6f0 [ 742.767284][ T31] ? __pfx_kthread+0x10/0x10 [ 742.767321][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.767369][ T31] [ 742.767379][ T31] Sending NMI from CPU 1 to CPUs 0: [ 743.003051][ C0] NMI backtrace for cpu 0 [ 743.003078][ C0] CPU: 0 UID: 0 PID: 3403 Comm: kworker/R-bat_e Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 743.003116][ C0] Tainted: [U]=USER [ 743.003124][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.003139][ C0] Workqueue: bat_events batadv_tt_purge [ 743.003173][ C0] RIP: 0010:lock_acquire+0x2c8/0x350 [ 743.003205][ C0] Code: 8b 05 9c 5c 10 0f 85 c0 0f 85 b6 fd ff ff b9 0a 00 00 00 ba 08 00 00 00 48 8d 74 24 08 48 89 df e8 fd cb ff ff e9 9a fd ff ff d3 dc 08 00 84 c0 0f 85 7f fd ff ff 80 3d b9 7f f8 0e 00 0f 85 [ 743.003227][ C0] RSP: 0018:ffffc90000006bf0 EFLAGS: 00000297 [ 743.003244][ C0] RAX: 0000000000000000 RBX: ffffffff8e5c4700 RCX: 0000000000000002 [ 743.003260][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c4700 [ 743.003275][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 743.003289][ C0] R10: 0000000000000000 R11: 0000000000008316 R12: 0000000000000000 [ 743.003303][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.003317][ C0] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 743.003341][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.003357][ C0] CR2: 00007ffc1ad9af00 CR3: 000000000e382000 CR4: 00000000003526f0 [ 743.003373][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 743.003386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 743.003401][ C0] Call Trace: [ 743.003408][ C0] [ 743.003418][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 743.003465][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.003491][ C0] unwind_next_frame+0xd1/0x20a0 [ 743.003520][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 743.003549][ C0] ? rescuer_thread+0x620/0xea0 [ 743.003583][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.003617][ C0] arch_stack_walk+0x94/0x100 [ 743.003651][ C0] ? rescuer_thread+0x620/0xea0 [ 743.003683][ C0] stack_trace_save+0x8e/0xc0 [ 743.003707][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 743.003732][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 743.003761][ C0] kasan_save_stack+0x33/0x60 [ 743.003790][ C0] ? kasan_save_stack+0x33/0x60 [ 743.003820][ C0] ? kasan_save_track+0x14/0x30 [ 743.003849][ C0] ? kasan_save_free_info+0x3b/0x60 [ 743.003874][ C0] ? __kasan_slab_free+0x51/0x70 [ 743.003902][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 743.003930][ C0] ? skb_free_head+0x1b7/0x210 [ 743.003958][ C0] ? skb_release_data+0x776/0x9c0 [ 743.003989][ C0] ? consume_skb+0xbf/0x100 [ 743.004009][ C0] ? netlink_broadcast_filtered+0x3d5/0xf10 [ 743.004031][ C0] ? nlmsg_notify+0x9e/0x220 [ 743.004053][ C0] ? fdb_notify+0xfd/0x1a0 [ 743.004079][ C0] ? br_fdb_update+0x323/0x7c0 [ 743.004106][ C0] ? br_handle_frame_finish+0xdc0/0x1ca0 [ 743.004127][ C0] ? br_nf_hook_thresh+0x304/0x410 [ 743.004148][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 743.004172][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 743.004199][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 743.004221][ C0] ? br_handle_frame+0xad8/0x14b0 [ 743.004241][ C0] ? __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 743.004275][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 743.004310][ C0] ? __netif_receive_skb+0x1d/0x160 [ 743.004345][ C0] ? process_backlog+0x442/0x15e0 [ 743.004379][ C0] ? __napi_poll.constprop.0+0xb7/0x550 [ 743.004415][ C0] ? net_rx_action+0xa9f/0xfe0 [ 743.004450][ C0] ? handle_softirqs+0x216/0x8e0 [ 743.004476][ C0] ? do_softirq+0xb2/0xf0 [ 743.004502][ C0] ? __local_bh_enable_ip+0x100/0x120 [ 743.004530][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 743.004562][ C0] ? batadv_tt_purge+0x8b/0xb80 [ 743.004639][ C0] ? process_one_work+0x9cc/0x1b70 [ 743.004676][ C0] ? rescuer_thread+0x620/0xea0 [ 743.004729][ C0] kasan_save_track+0x14/0x30 [ 743.004765][ C0] kasan_save_free_info+0x3b/0x60 [ 743.004795][ C0] __kasan_slab_free+0x51/0x70 [ 743.004833][ C0] kmem_cache_free+0x2d1/0x4d0 [ 743.004866][ C0] ? skb_free_head+0x1b7/0x210 [ 743.004904][ C0] skb_free_head+0x1b7/0x210 [ 743.004937][ C0] ? lock_acquire+0x179/0x350 [ 743.004970][ C0] skb_release_data+0x776/0x9c0 [ 743.005014][ C0] consume_skb+0xbf/0x100 [ 743.005040][ C0] netlink_broadcast_filtered+0x3d5/0xf10 [ 743.005074][ C0] ? nla_put+0x101/0x140 [ 743.005100][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 743.005135][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 743.005174][ C0] nlmsg_notify+0x9e/0x220 [ 743.005206][ C0] fdb_notify+0xfd/0x1a0 [ 743.005239][ C0] br_fdb_update+0x323/0x7c0 [ 743.005275][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 743.005309][ C0] ? br_allowed_ingress+0xdd/0x11b0 [ 743.005345][ C0] ? mark_held_locks+0x49/0x80 [ 743.005382][ C0] br_handle_frame_finish+0xdc0/0x1ca0 [ 743.005411][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 743.005446][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 743.005484][ C0] ? nf_hook_slow+0x132/0x200 [ 743.005524][ C0] br_nf_hook_thresh+0x304/0x410 [ 743.005552][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 743.005583][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 743.005619][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 743.005657][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 743.005683][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 743.005718][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.005756][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.005795][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 743.005825][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 743.005855][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 743.005885][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 743.005913][ C0] ? lock_acquire+0x179/0x350 [ 743.005948][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 743.005978][ C0] ? net_generic+0xea/0x2a0 [ 743.006006][ C0] br_nf_pre_routing+0x860/0x15b0 [ 743.006037][ C0] br_handle_frame+0xad8/0x14b0 [ 743.006066][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 743.006095][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 743.006126][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 743.006152][ C0] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 743.006196][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 743.006232][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 743.006266][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 743.006307][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 743.006338][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 743.006366][ C0] ? ip6_mc_input+0x46c/0xfd0 [ 743.006403][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 743.006439][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 743.006476][ C0] ? __lock_acquire+0x622/0x1c90 [ 743.006512][ C0] ? process_backlog+0x3f0/0x15e0 [ 743.006547][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 743.006584][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 743.006631][ C0] ? lock_acquire+0x179/0x350 [ 743.006668][ C0] ? process_backlog+0x3f0/0x15e0 [ 743.006703][ C0] __netif_receive_skb+0x1d/0x160 [ 743.006739][ C0] process_backlog+0x442/0x15e0 [ 743.006781][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 743.006821][ C0] net_rx_action+0xa9f/0xfe0 [ 743.006863][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 743.006900][ C0] ? mark_held_locks+0x49/0x80 [ 743.006933][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.006972][ C0] ? tmigr_handle_remote+0x132/0x380 [ 743.007018][ C0] ? run_timer_base+0x121/0x190 [ 743.007050][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 743.007084][ C0] handle_softirqs+0x216/0x8e0 [ 743.007117][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 743.007147][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 743.007181][ C0] do_softirq+0xb2/0xf0 [ 743.007207][ C0] [ 743.007216][ C0] [ 743.007225][ C0] __local_bh_enable_ip+0x100/0x120 [ 743.007254][ C0] batadv_tt_local_purge+0x21c/0x3c0 [ 743.007291][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 743.007329][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 743.007367][ C0] batadv_tt_purge+0x8b/0xb80 [ 743.007400][ C0] ? dquot_transfer+0x699/0x6a0 [ 743.007440][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 743.007479][ C0] ? rcu_is_watching+0x12/0xc0 [ 743.007509][ C0] process_one_work+0x9cc/0x1b70 [ 743.007554][ C0] ? __pfx_process_one_work+0x10/0x10 [ 743.007619][ C0] ? assign_work+0x1a0/0x250 [ 743.007656][ C0] rescuer_thread+0x620/0xea0 [ 743.007701][ C0] ? rcu_is_watching+0x12/0xc0 [ 743.007727][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 743.007764][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.007802][ C0] ? __kthread_parkme+0x19e/0x250 [ 743.007833][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 743.007869][ C0] kthread+0x3c5/0x780 [ 743.007904][ C0] ? __pfx_kthread+0x10/0x10 [ 743.007940][ C0] ? rcu_is_watching+0x12/0xc0 [ 743.007966][ C0] ? __pfx_kthread+0x10/0x10 [ 743.008001][ C0] ret_from_fork+0x5d7/0x6f0 [ 743.008036][ C0] ? __pfx_kthread+0x10/0x10 [ 743.008071][ C0] ret_from_fork_asm+0x1a/0x30 [ 743.008107][ C0] [ 743.269839][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 743.269867][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 743.269904][ T31] Tainted: [U]=USER [ 743.269913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.269929][ T31] Call Trace: [ 743.269938][ T31] [ 743.269950][ T31] dump_stack_lvl+0x3d/0x1f0 [ 743.269993][ T31] panic+0x71c/0x800 [ 743.270025][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 743.270065][ T31] ? __pfx_panic+0x10/0x10 [ 743.270096][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 743.270132][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 743.270163][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 743.270194][ T31] ? watchdog+0xdda/0x12c0 [ 743.270228][ T31] ? watchdog+0xdcd/0x12c0 [ 743.270267][ T31] watchdog+0xdeb/0x12c0 [ 743.270307][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.270340][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.270379][ T31] ? __kthread_parkme+0x19e/0x250 [ 743.270410][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.270445][ T31] kthread+0x3c5/0x780 [ 743.270479][ T31] ? __pfx_kthread+0x10/0x10 [ 743.270514][ T31] ? rcu_is_watching+0x12/0xc0 [ 743.270540][ T31] ? __pfx_kthread+0x10/0x10 [ 743.270574][ T31] ret_from_fork+0x5d7/0x6f0 [ 743.270613][ T31] ? __pfx_kthread+0x10/0x10 [ 743.270647][ T31] ret_from_fork_asm+0x1a/0x30 [ 743.270692][ T31] [ 744.038817][ T31] Kernel Offset: disabled [ 744.043160][ T31] Rebooting in 86400 seconds..