last executing test programs: 2m27.349258188s ago: executing program 3 (id=1364): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m24.444541482s ago: executing program 3 (id=1371): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x41c822, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 2m22.233186676s ago: executing program 3 (id=1374): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, 0x0, 0x7) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4601, 0x0) 2m21.380715928s ago: executing program 3 (id=1379): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) semctl$auto_SEM_INFO(0x81, 0x9, 0x13, 0x9) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp2\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) socket(0xa, 0x1, 0x84) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m20.785889332s ago: executing program 3 (id=1382): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x8d) socketpair$auto(0x1e, 0x5, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40086200, 0x0) 2m19.076442929s ago: executing program 3 (id=1384): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r1, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x3, 0x3, 0x8) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) r2 = getpid() setsockopt$auto(0x3, 0x6a, 0x3, 0xffffffffffffffff, 0x4) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0xffffffffffffeffd) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x29a4, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) 2m3.950867184s ago: executing program 32 (id=1384): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r1, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x3, 0x3, 0x8) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) r2 = getpid() setsockopt$auto(0x3, 0x6a, 0x3, 0xffffffffffffffff, 0x4) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0xffffffffffffeffd) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x29a4, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) 1m54.254551568s ago: executing program 1 (id=1408): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xaece, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m40.568423927s ago: executing program 1 (id=1419): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x6) socket(0x29, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m40.561621437s ago: executing program 2 (id=1420): openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = open(0x0, 0xc2ec0, 0x1d4) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) read$auto(r0, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r3, 0x0, 0x40) 1m36.084078795s ago: executing program 1 (id=1413): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b74, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0xc048aec8, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) ioctl$auto(r0, 0x401870cb, r0) 1m31.306639667s ago: executing program 1 (id=1415): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 1m27.220184723s ago: executing program 2 (id=1421): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) socket(0x2, 0x80002, 0x73) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) 1m26.739384545s ago: executing program 2 (id=1422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyb3\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) 1m22.91921705s ago: executing program 2 (id=1423): ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)="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") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x88ec00, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xac2}, 0x6, 0xc, 0xfffffffffffffffd) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0x7}, 0xb, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) 1m22.679268623s ago: executing program 1 (id=1424): openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x20282, 0x0) socket(0x2, 0x6, 0x0) socket(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) recvmmsg$auto(r0, 0x0, 0x10a, 0x81, 0x0) 1m21.313003949s ago: executing program 2 (id=1427): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x7, 0x0) chmod$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0xfff, 0x5, 0x10, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x100000001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x1) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x200440c3) arch_prctl$auto(0x5001, 0x5) read$auto(r0, &(0x7f0000000040)='-\xfa$\x00', 0x7) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x0) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.142767301s ago: executing program 1 (id=1428): unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x4004000) mmap$auto(0x0, 0xb, 0xdf, 0x14, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0xa, 0xeb1, 0x401, 0x63900000000000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r0, &(0x7f0000000080)='\x00', 0x0, 0xfffffffe) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/17, 0x11) 1m19.206716743s ago: executing program 2 (id=1431): unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r1, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 1m5.326666951s ago: executing program 33 (id=1428): unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x4004000) mmap$auto(0x0, 0xb, 0xdf, 0x14, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0xa, 0xeb1, 0x401, 0x63900000000000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r0, &(0x7f0000000080)='\x00', 0x0, 0xfffffffe) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/17, 0x11) 1m3.923878636s ago: executing program 34 (id=1431): unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r1, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 25.437040473s ago: executing program 0 (id=1486): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x34a, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) eventfd$auto(0x1) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) 25.022870765s ago: executing program 4 (id=1487): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', 0x129102, 0x0) keyctl$auto(0x2, 0xfffffffd, 0x2, 0x0, 0xfffffffffffffbf9) mmap$auto(0x2, 0x4003, 0xdf, 0x16, 0x7, 0x27ffc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto(0x3, 0x0, 0xffd8) 25.00380615s ago: executing program 0 (id=1488): mmap$auto(0x0, 0x4, 0x3, 0x10000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) r1 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)="08c56f6cbecd9fed7b14b74038dd351a1b6de1e761dce77e3b04a7fdeb8da9ffdd25a72a1cc65a97ec6dda9f4d6844b50bf7ac49d1ab2199d5e6358dc2ae569bf8123f83917accb1") r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r2, &(0x7f0000000300)='/ ys -ernel/tracing/set_event_notrace_p}d\xde\xc7\xbd8\xbe\xd7\xdeN\x86\xcf\x1d\rD!U\xb4\xe4+\v\xc3\x06$\xe1\x0eA\xf3ua\x8fT\xd9J\xfd\x02\x00\x00\x00\x00\x00\x00\x00\xbf\x9f\xb0e\xfex,c-\xdf\a\x9e\x9bX\x13n\xdf\xc8\x94%\x7fp\xe0\xa0x\x1f\x17\xea\xc3\xbf\xb2(}\x7f\xd3\xf6\xc5\x9bj\xcf~\x7f)\xd2\x7f\tN\xa9m\xe8\xdc\xb1\xe3\xf3L\xad\xdd%(0c\x9d\x13\xc7\x0elZ\x87K\x14_\xbau\x88\x9f\xe2\x04\x16\xec\xfa\xad\xe0\x87G[N\xf1\xb5\xc0\xab\x00\x00\x00\x00\x00\x00\x00\x04+\xc1\xd3m\xb8\xe5\a\x92\xc2\xd4\xcc\x91\x90\x05$G\x9a\x9b\xe1I\xa9/(\xd3\xa1\\8\x1afmY\xd6m\x931\xe6\xbd\xfb\xd6\x91\xbb\xef\xa1\x03\xd8j\x06ngka\xd1\xf1\xfd\xaeX)w\x1e4\x91\xc9\xce4\x97\x00', 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x48, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x2000, 0x800007, 0x10000002}) 24.570260193s ago: executing program 0 (id=1489): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) read$auto_vga_arb_device_fops_vgaarb(r1, 0x0, 0x0) 24.002557176s ago: executing program 0 (id=1491): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) sendto$auto(r4, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r7}, 0x35) 23.924831996s ago: executing program 4 (id=1492): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) stat$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f00000000c0)={{0x3, 0x9}, {0x3, 0x5}}, &(0x7f0000000100)={{0x8, 0x5a66}, {0x8, 0xffffffffffff8000}}) 23.020344555s ago: executing program 0 (id=1493): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000001300)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$auto(r1, 0x0, 0x73) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 22.524866303s ago: executing program 4 (id=1495): ioperm$auto(0x7fffffffffffffff, 0x3, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r0, 0x4b67, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x5, 0x0, 0x81) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x200, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/ieee80211/phy2/addresses\x00', 0x8a340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) lstat$auto(0x0, 0x0) 21.916679808s ago: executing program 0 (id=1496): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)=0x2) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000001c0)="003eacc1bb056a902b27995f8940f4e66f895e8f360358ff7d7260e113d32515ff8f38ea3398f7eb2206f3321e4657519971754dedcb26b6cef4a3d12f9c567d25cd8c4d41b0b073895716ec6d946b2e20e033eda6bba47a9e3effb0cd94b372d68ca26bcd79f68156e0856f7e8c4f365cd4887cad7eeec1208ee8889bba298d65de0e18", 0x8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000680)="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", 0x658) ioctl$auto(r0, 0x400454ca, 0x38) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 20.910047971s ago: executing program 4 (id=1499): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x22240, 0x154) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x1, 0x38, 0x0, 0x0) 20.077424962s ago: executing program 5 (id=1500): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x2402, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, r0) 19.161185858s ago: executing program 5 (id=1501): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) setreuid$auto(0x15, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) r0 = socket(0x2, 0x5, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r1 = io_uring_setup$auto(0x6, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r1, 0x9, 0xe27, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x5, 0x0) r2 = socket(0x25, 0x1, 0x3) setsockopt$auto(r2, 0x116, 0x80, 0x0, 0x400) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x2, 0xb}, 0x40000fff}, 0x5, 0x7fffffff) 18.626229892s ago: executing program 4 (id=1502): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x23, 0x80805, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 18.536750225s ago: executing program 5 (id=1503): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fanotify_init$auto(0x6a1, 0x2000000000002) fanotify_mark$auto(r1, 0x9, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='./bus\x00') socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) socket(0xf, 0xa, 0x5) socket(0x21, 0x2, 0x2) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) 9.484310306s ago: executing program 6 (id=1505): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r0, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) 8.398914077s ago: executing program 4 (id=1506): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x68200, 0x0) read$auto(r0, 0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x8, 0x0, 0x1, 0x0, 0x1000002, 0x8}, 0x800}, 0x4000005, 0x8, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x6) mmap$auto(0x3, 0x400001, 0x0, 0x9b72, 0x2, 0x800000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) socket(0xa, 0x801, 0x84) set_mempolicy$auto(0x6, 0x0, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) getpid() openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x68200, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffe0, 0x8, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x10000, 0x10000000, 0x10007, 0x80, 0x2, 0x0, 0xa3, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x8100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x9, 0x9) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 7.008417008s ago: executing program 5 (id=1507): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000011) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x80004509, 0x10000000000402) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/sr0/state\x00', 0xeef0bd6e1671f842, 0x0) fsmount$auto(r1, 0x2, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, 0x38) 5.770075715s ago: executing program 35 (id=1496): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)=0x2) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000001c0)="003eacc1bb056a902b27995f8940f4e66f895e8f360358ff7d7260e113d32515ff8f38ea3398f7eb2206f3321e4657519971754dedcb26b6cef4a3d12f9c567d25cd8c4d41b0b073895716ec6d946b2e20e033eda6bba47a9e3effb0cd94b372d68ca26bcd79f68156e0856f7e8c4f365cd4887cad7eeec1208ee8889bba298d65de0e18", 0x8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000680)="9729facfa507ec17e671250eb63e3b4643a15185858e1926aa9714b851b846a2d1da2df5da43982b9c23e01b488f3d0386c1568864c51e67d549333f7ded20c817a63fa0b76c502e681f3f188908bb69fd2c6abc82dab8d5178580fe430e8d4dcf164474f52dbaad3cb0e4fab7251eb597f32712537ebd3600958999b1c9be17381a7fc6eeb7d5779292b8e45150cd8b018fab763375f09bd15d7bf98c412c69aca4d718757df266a686e4f8a8cf507f21f3e04c1148782a81d6359d68bc3150edc538a69a39e4c1c845830fbc403ffe8c0de34c1421714031b288b89b957b6de556d901223a12f387ad34342a1f95d7684987834076c5e0454adab11d515d8908c593dcb1e6e3417d7e3fb7ed3276507c475a60572ea0d7bb1bb5b2681eca89e2616a601d3b784a845c1fdb366625fd76e2c9262fe5043e0005dda4e22a9892c006b336567a2205b843a2ce65ff64536d1a3fc808308214db380bd615fd1da1e10a35bf410c1bcb7ee2dd94a512240a60b3da7cc5d35504c5bf8dcb2470818607e8bcee7c35c78635a6353227dd64d5fae70e4561c6cb165737b8975c5d59f31676b1bebf68f60faee32521e6ecd97b508619b35980744e60f0060171a260604207bb8c22509fdd296fe87f13cbc4f0d52e425b0e9bd9beac5d4bc50445d0ed450f328988e43a2c6fd1c9788209bd55b96b636c53a5552fcf15d9357a57b844781af7fb0c67e4074746bb95bf051899c18d38538d937c23d1c519e0da3e8f3947702ca81ac3b69767b53915e0683bf181ad3edf72be1689bd675659c7c8f1a9c9d5b61642d71d2387e25e358fa65250f60a6789c50275b4c93b50a86123e0fb7d67e9e4d0f44869860046c2155143618b0da8414d5a32c663939a2f4decb5f6e58da8b5bf5efef228a6dbd55a627307485d5f20b49b9c9cd069e5b22048a57c7c3987c6b2b1f53435974f41a018c7561f80333499783d0e952ee1682f733aa89195fb0fe1132eb0ff45ebbd279058f853691a0f0ae0869f72b3099949d2e3fc0b54f43112e3136b5164429d16d2d0d27df08565ff797f0b8aeacb56b9af726afa9084d8e9460cfbb6b30d8104cad7da3758670944859266de7de42452f156055efa33d28d7254446855d4d621193c1b462bbc41c98c03e749f06ed4ab5bd520475bae611984b29e37f29b81785c9f59f35059f78d08b8636e61937c86ec305a158ae71870a944f33308f23ddbd7735d43d7c8411301cc0384d5b53a813f683bb2afe0e0da26c3ad93adf6c6a4b722836fd19573e92bd8aeb4d79ac39dfff8064abd00f2f5340efb93c69bd6a055df72374bb2849b1296bb0290f634c5d06d406d653fbeb9a86154407440b543bcf073c3877b547e9b5b6c11c1e23718f4708c11102da8165fe00f589644d166bc45a7e63176ada8dde31a9955f7defa6ba209fc9efb6fc5e7482eaf44cdf6882eeeb00cb143932ac3f11444dd595e946debbdb57f24642a19e2f3e58959e362bcd5c6fcf8ef16e22b33a155426e663101a1b31ad91bf206822a78b5452503b972b91368f1dd69b18f8caac702076eb481b3112715d831a11774ea4c655f721000a929f753829f86f2e74edd75aceccc16b84ce9cc7c6b11bbcd6f7fe304ca0833b9bd5193171cd15bd3028d056c0c4f621e78dc3699861cb2018fc5f7afb8e724e1573bd9645243eb3e758559c9108b6a902f1b996e9380187a809fd2853e9e4bd0b40383b68220fcdbf10f8dce737ba6508ba21173304b63290421d01fe129409a4c626b72a1b05ebd512f0c32e0590000005a06791c2a24166be04b06ed132f02f24b9cb6c2c5e5697b6248bc0b041e5dd0183c257e3bbc58ec2425f1870e93b3d77add107d5d7e83fc02ef69e082d46fdf6045cad2682681d18265e35030abecc48372b0deb5bea50f445d846922a14fd3ac1f1183b148136a6a35c1932be0af0cd870dbf390ebf1d8ee7d8d4d4a44d9a4e4ec1b206ae70131356b8d220be5b98757e78ab1496f07b152232792fceeed3c19b78263a68a1fab8755b9f9559239e00f035a8753a49aaa7eac8574c830b2e4b59a0400ec4f4e80cae74ce56b80107ce3950523dc53c3f1f06e6c277b3d6e45dcc9708e41e0aa010f31c1392d8ebccf1401462636c752449b5803b2c9d5141f68c26e44241fccb1f1af2c839096c319ba9a626212cdb8664f1e02445278b4f5fc4280a3a1d62a8f5dae9de9c6066262247b867193e2b85c92803c4f2dad056d4d945fd8f8d45829e59d15263796c0df81069df72370e890", 0x658) ioctl$auto(r0, 0x400454ca, 0x38) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 4.861822501s ago: executing program 6 (id=1509): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) socket(0x24, 0xa, 0x0) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/gretap0/accept_ra_min_lft\x00', 0x1a3000, 0x0) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x48) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r1, 0x0, 0x100085) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)='/sys/devices/pnp0/00:01/options\x00', 0x7ff) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1f8, 0xb07e) 3.869719449s ago: executing program 5 (id=1510): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/snd/controlC1\x00', 0x101180, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108002, 0x0) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x189a01, 0x0) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x5411, 0x0) 3.842150195s ago: executing program 6 (id=1511): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) socket(0x2, 0x1, 0x106) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x1, 0x2, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.764584159s ago: executing program 5 (id=1512): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(r0, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) 1.334074818s ago: executing program 6 (id=1513): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x4) socket(0x10, 0x2, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x38100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, 0x0, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0) ioctl$auto(r2, 0xc0585611, r2) socket(0x2c, 0x3, 0x0) 1.045340127s ago: executing program 6 (id=1514): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x7, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x5) exit$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0xf, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyt0\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(0x3, 0x0, 0x80) 0s ago: executing program 6 (id=1515): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r0, 0x89a0, 0x8) write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x8182, 0x0) ioctl$auto(0xffffffffffffffff, 0x400c4d06, r2) kernel console output (not intermixed with test programs): [ 399.281926][T11035] ? alloc_fd+0x471/0x7d0 [ 399.281953][T11035] do_sys_openat2+0x11b/0x1d0 [ 399.281983][T11035] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.282023][T11035] __x64_sys_openat+0x174/0x210 [ 399.282053][T11035] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.282085][T11035] ? rcu_is_watching+0x12/0xc0 [ 399.282114][T11035] do_syscall_64+0xcd/0x230 [ 399.282147][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.282168][T11035] RIP: 0033:0x7fede8b8e969 [ 399.282185][T11035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.282206][T11035] RSP: 002b:00007fede9a10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.282226][T11035] RAX: ffffffffffffffda RBX: 00007fede8db6080 RCX: 00007fede8b8e969 [ 399.282240][T11035] RDX: 0000000000121800 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 399.282253][T11035] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 399.282266][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.282278][T11035] R13: 0000000000000000 R14: 00007fede8db6080 R15: 00007ffd9f283528 [ 399.282304][T11035] [ 400.400977][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 401.328279][T11063] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1294'. [ 401.860299][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 402.156265][T11077] FAULT_INJECTION: forcing a failure. [ 402.156265][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 402.258410][T11077] CPU: 0 UID: 0 PID: 11077 Comm: syz.3.1299 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 402.258452][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.258470][T11077] Call Trace: [ 402.258480][T11077] [ 402.258491][T11077] dump_stack_lvl+0x16c/0x1f0 [ 402.258540][T11077] should_fail_ex+0x512/0x640 [ 402.258575][T11077] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 402.258618][T11077] should_failslab+0xc2/0x120 [ 402.258659][T11077] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 402.258722][T11077] ? __kernfs_new_node+0xd2/0x8a0 [ 402.258758][T11077] __kernfs_new_node+0xd2/0x8a0 [ 402.258792][T11077] ? __pfx___kernfs_new_node+0x10/0x10 [ 402.258833][T11077] ? find_held_lock+0x2b/0x80 [ 402.258866][T11077] ? kernfs_root+0xee/0x2a0 [ 402.258905][T11077] kernfs_new_node+0x13c/0x1e0 [ 402.258947][T11077] __kernfs_create_file+0x53/0x350 [ 402.259013][T11077] sysfs_add_file_mode_ns+0x207/0x3c0 [ 402.259070][T11077] internal_create_group+0x578/0xf30 [ 402.259111][T11077] ? __pfx_internal_create_group+0x10/0x10 [ 402.259148][T11077] ? kernfs_create_link+0x1bd/0x240 [ 402.259194][T11077] internal_create_groups+0x9d/0x150 [ 402.259230][T11077] device_add+0xf30/0x1a70 [ 402.259267][T11077] ? __pfx_device_add+0x10/0x10 [ 402.259297][T11077] ? lockdep_init_map_type+0x5c/0x280 [ 402.259336][T11077] ? __init_waitqueue_head+0xca/0x150 [ 402.259372][T11077] netdev_register_kobject+0x182/0x3a0 [ 402.259421][T11077] register_netdevice+0x13dc/0x2270 [ 402.259474][T11077] ? __pfx_register_netdevice+0x10/0x10 [ 402.259526][T11077] register_netdev+0x34/0x50 [ 402.259567][T11077] sixpack_open+0x6e4/0xa40 [ 402.259627][T11077] ? __pfx_sixpack_open+0x10/0x10 [ 402.259668][T11077] ? tty_set_ldisc+0x2b8/0x780 [ 402.259711][T11077] ? down_write+0x14d/0x200 [ 402.259762][T11077] ? __pfx_sixpack_open+0x10/0x10 [ 402.259806][T11077] tty_ldisc_open+0x9c/0x120 [ 402.259851][T11077] tty_set_ldisc+0x32b/0x780 [ 402.259901][T11077] tty_ioctl+0xc42/0x1610 [ 402.259931][T11077] ? __pfx_tty_ioctl+0x10/0x10 [ 402.259973][T11077] ? do_raw_spin_unlock+0x172/0x230 [ 402.260008][T11077] ? hook_file_ioctl_common+0x145/0x410 [ 402.260054][T11077] ? xfd_validate_state+0x5d/0x180 [ 402.260091][T11077] ? __pfx_tty_ioctl+0x10/0x10 [ 402.260120][T11077] __x64_sys_ioctl+0x190/0x200 [ 402.260169][T11077] do_syscall_64+0xcd/0x230 [ 402.260217][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.260247][T11077] RIP: 0033:0x7f731d78e969 [ 402.260279][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.260309][T11077] RSP: 002b:00007f731e5ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.260337][T11077] RAX: ffffffffffffffda RBX: 00007f731d9b5fa0 RCX: 00007f731d78e969 [ 402.260357][T11077] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 402.260375][T11077] RBP: 00007f731d810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 402.260393][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.260410][T11077] R13: 0000000000000000 R14: 00007f731d9b5fa0 R15: 00007ffe783869c8 [ 402.260448][T11077] [ 403.969048][ T55] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 403.969092][ T55] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 403.984678][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 403.984736][ T55] Bluetooth: hci2: Malformed LE Event: 0x0d [ 404.025826][T11106] HfR: entered promiscuous mode [ 404.075667][T11111] openvswitch: HfR: Dropping previously announced user features [ 406.512030][T11143] FAULT_INJECTION: forcing a failure. [ 406.512030][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 406.527462][T11143] CPU: 1 UID: 0 PID: 11143 Comm: syz.0.1314 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 406.527508][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.527529][T11143] Call Trace: [ 406.527539][T11143] [ 406.527551][T11143] dump_stack_lvl+0x16c/0x1f0 [ 406.527605][T11143] should_fail_ex+0x512/0x640 [ 406.527642][T11143] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 406.527681][T11143] should_failslab+0xc2/0x120 [ 406.527725][T11143] __kmalloc_cache_noprof+0x6a/0x3e0 [ 406.527759][T11143] ? raw_ioctl_init+0x162/0x860 [ 406.527808][T11143] raw_ioctl_init+0x162/0x860 [ 406.527853][T11143] ? __pfx_raw_ioctl_init+0x10/0x10 [ 406.527905][T11143] ? tomoyo_path_number_perm+0x18d/0x580 [ 406.527995][T11143] raw_ioctl+0xa3c/0x2c30 [ 406.528042][T11143] ? __pfx_raw_ioctl+0x10/0x10 [ 406.528088][T11143] ? __pfx_raw_ioctl+0x10/0x10 [ 406.528131][T11143] __x64_sys_ioctl+0x190/0x200 [ 406.528177][T11143] do_syscall_64+0xcd/0x230 [ 406.528224][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.528254][T11143] RIP: 0033:0x7fede8b8e969 [ 406.528277][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.528307][T11143] RSP: 002b:00007fede9a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.528336][T11143] RAX: ffffffffffffffda RBX: 00007fede8db5fa0 RCX: 00007fede8b8e969 [ 406.528356][T11143] RDX: 0000200000000300 RSI: 0000000041015500 RDI: 0000000000000007 [ 406.528375][T11143] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 406.528393][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.528411][T11143] R13: 0000000000000000 R14: 00007fede8db5fa0 R15: 00007ffd9f283528 [ 406.528447][T11143] [ 406.752847][T11143] Process accounting paused [ 406.893302][T11148] FAULT_INJECTION: forcing a failure. [ 406.893302][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 406.935705][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.0.1317 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 406.935756][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.935777][T11148] Call Trace: [ 406.935787][T11148] [ 406.935798][T11148] dump_stack_lvl+0x16c/0x1f0 [ 406.935852][T11148] should_fail_ex+0x512/0x640 [ 406.935889][T11148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 406.935934][T11148] should_failslab+0xc2/0x120 [ 406.936005][T11148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 406.936046][T11148] ? acpi_ut_allocate_owner_id+0x2d6/0x3a0 [ 406.936090][T11148] ? acpi_ps_alloc_op+0xf1/0x310 [ 406.936130][T11148] acpi_ps_alloc_op+0xf1/0x310 [ 406.936166][T11148] acpi_ps_create_scope_op+0x1a/0x70 [ 406.936203][T11148] acpi_ps_execute_method+0x1b1/0xb30 [ 406.936241][T11148] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 406.936286][T11148] acpi_ns_evaluate+0x76c/0xca0 [ 406.936326][T11148] ? kasan_save_track+0x14/0x30 [ 406.936368][T11148] acpi_evaluate_object+0x1fa/0xa90 [ 406.936421][T11148] ? do_syscall_64+0xcd/0x230 [ 406.936487][T11148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.936524][T11148] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 406.936578][T11148] ? __mutex_trylock_common+0xe9/0x250 [ 406.936633][T11148] acpi_evaluate_integer+0xdd/0x200 [ 406.936691][T11148] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 406.936757][T11148] ? __pfx_status_show+0x10/0x10 [ 406.936786][T11148] status_show+0xa0/0x120 [ 406.936817][T11148] ? __pfx_status_show+0x10/0x10 [ 406.936859][T11148] dev_attr_show+0x53/0xe0 [ 406.936897][T11148] ? __pfx_dev_attr_show+0x10/0x10 [ 406.936929][T11148] sysfs_kf_seq_show+0x213/0x3e0 [ 406.936988][T11148] seq_read_iter+0x506/0x12c0 [ 406.937059][T11148] kernfs_fop_read_iter+0x40f/0x5a0 [ 406.937103][T11148] ? rw_verify_area+0xcf/0x680 [ 406.937159][T11148] vfs_read+0x8c8/0xc70 [ 406.937198][T11148] ? __pfx___mutex_lock+0x10/0x10 [ 406.937246][T11148] ? __pfx_vfs_read+0x10/0x10 [ 406.937310][T11148] ksys_read+0x12a/0x240 [ 406.937343][T11148] ? __pfx_ksys_read+0x10/0x10 [ 406.937375][T11148] ? rcu_is_watching+0x12/0xc0 [ 406.937422][T11148] do_syscall_64+0xcd/0x230 [ 406.937475][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.937506][T11148] RIP: 0033:0x7fede8b8e969 [ 406.937533][T11148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.937567][T11148] RSP: 002b:00007fede9a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.937600][T11148] RAX: ffffffffffffffda RBX: 00007fede8db5fa0 RCX: 00007fede8b8e969 [ 406.937634][T11148] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 406.937671][T11148] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 406.937689][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.937707][T11148] R13: 0000000000000000 R14: 00007fede8db5fa0 R15: 00007ffd9f283528 [ 406.937748][T11148] [ 407.913443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.925884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.938146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.950334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.962608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.974825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.987047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.999219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.011514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.023686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.917350][ C1] net_ratelimit: 33851 callbacks suppressed [ 412.917375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.935595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.947677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.959799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.971821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.983897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.995950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.008102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.020156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.032270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.922738][T11235] FAULT_INJECTION: forcing a failure. [ 415.922738][T11235] name failslab, interval 1, probability 0, space 0, times 0 [ 416.101744][T11235] CPU: 0 UID: 0 PID: 11235 Comm: syz.2.1338 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 416.101822][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.101842][T11235] Call Trace: [ 416.101853][T11235] [ 416.101866][T11235] dump_stack_lvl+0x16c/0x1f0 [ 416.101921][T11235] should_fail_ex+0x512/0x640 [ 416.101959][T11235] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 416.101998][T11235] should_failslab+0xc2/0x120 [ 416.102042][T11235] __kmalloc_cache_noprof+0x6a/0x3e0 [ 416.102078][T11235] ? ima_add_digest_entry+0x52/0x540 [ 416.102131][T11235] ima_add_digest_entry+0x52/0x540 [ 416.102186][T11235] ima_add_template_entry+0x478/0x870 [ 416.102247][T11235] ? __pfx_ima_add_template_entry+0x10/0x10 [ 416.102300][T11235] ? ima_alloc_init_template+0x536/0x720 [ 416.102344][T11235] ima_add_violation+0x17f/0x3d0 [ 416.102383][T11235] ? __pfx_ima_add_violation+0x10/0x10 [ 416.102414][T11235] ? ima_d_path+0x12b/0x2a0 [ 416.102444][T11235] ? __pfx___might_resched+0x10/0x10 [ 416.102483][T11235] ? __pfx_ima_d_path+0x10/0x10 [ 416.102523][T11235] ? __pfx_down_write+0x10/0x10 [ 416.102584][T11235] process_measurement+0x1674/0x23e0 [ 416.102650][T11235] ? __pfx_process_measurement+0x10/0x10 [ 416.102701][T11235] ? __pfx___might_resched+0x10/0x10 [ 416.102741][T11235] ? rcu_is_watching+0x12/0xc0 [ 416.102787][T11235] ? find_held_lock+0x2b/0x80 [ 416.102823][T11235] ? trace_array_get+0x83/0xe0 [ 416.102908][T11235] ? tracing_open_generic+0x94/0xc0 [ 416.102950][T11235] ? subsystem_open+0x18f/0x3e0 [ 416.102993][T11235] ? inode_to_bdi+0x9e/0x160 [ 416.103046][T11235] ima_file_check+0xc5/0x110 [ 416.103097][T11235] ? __pfx_ima_file_check+0x10/0x10 [ 416.103158][T11235] security_file_post_open+0x8e/0x210 [ 416.103202][T11235] path_openat+0x147d/0x2d40 [ 416.103253][T11235] ? __pfx_path_openat+0x10/0x10 [ 416.103299][T11235] do_filp_open+0x20b/0x470 [ 416.103334][T11235] ? __pfx_do_filp_open+0x10/0x10 [ 416.103400][T11235] ? alloc_fd+0x471/0x7d0 [ 416.103443][T11235] do_sys_openat2+0x11b/0x1d0 [ 416.103491][T11235] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.103541][T11235] ? __pfx___might_resched+0x10/0x10 [ 416.103591][T11235] __x64_sys_openat+0x174/0x210 [ 416.103641][T11235] ? __pfx___x64_sys_openat+0x10/0x10 [ 416.103692][T11235] ? rcu_is_watching+0x12/0xc0 [ 416.103737][T11235] do_syscall_64+0xcd/0x230 [ 416.103797][T11235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.103842][T11235] RIP: 0033:0x7f521f98e969 [ 416.103866][T11235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.103897][T11235] RSP: 002b:00007f52207d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.103927][T11235] RAX: ffffffffffffffda RBX: 00007f521fbb6080 RCX: 00007f521f98e969 [ 416.103947][T11235] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 416.103967][T11235] RBP: 00007f521fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 416.103985][T11235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.104003][T11235] R13: 0000000000000000 R14: 00007f521fbb6080 R15: 00007ffd10679cf8 [ 416.104043][T11235] [ 416.747482][T11235] ima: OUT OF MEMORY ERROR creating queue entry [ 416.797418][ T30] audit: type=1804 audit(6040459050.796:7): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.1338" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 417.927223][ C1] net_ratelimit: 39380 callbacks suppressed [ 417.927248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.945280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.957352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.969444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.981462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.993529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.005541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.017643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.029666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.041750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.353727][ T30] audit: type=1804 audit(6040459050.796:8): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1338" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 422.937276][ C1] net_ratelimit: 42969 callbacks suppressed [ 422.937301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.955530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.967733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.979946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.992150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.004325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.016588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.028735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.040934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.053088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.179788][T11261] openvswitch: ovs_: Dropping previously announced user features [ 423.696855][T11262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.768180][T11262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.822998][T11262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.948185][T11262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.256001][T11270] FAULT_INJECTION: forcing a failure. [ 424.256001][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 424.343696][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.2.1349 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 424.343741][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 424.343760][T11270] Call Trace: [ 424.343770][T11270] [ 424.343781][T11270] dump_stack_lvl+0x16c/0x1f0 [ 424.343830][T11270] should_fail_ex+0x512/0x640 [ 424.343866][T11270] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 424.343902][T11270] should_failslab+0xc2/0x120 [ 424.343942][T11270] __kmalloc_cache_noprof+0x6a/0x3e0 [ 424.343975][T11270] ? alloc_fs_context+0x57/0x9c0 [ 424.344012][T11270] alloc_fs_context+0x57/0x9c0 [ 424.344052][T11270] mq_init_ns+0x172/0x620 [ 424.344090][T11270] copy_ipcs+0x383/0x610 [ 424.344126][T11270] ? copy_utsname+0xab/0x470 [ 424.344170][T11270] create_new_namespaces+0x20a/0xad0 [ 424.344207][T11270] ? security_capable+0x7e/0x260 [ 424.344242][T11270] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 424.344284][T11270] ksys_unshare+0x45b/0xa40 [ 424.344330][T11270] ? __pfx_ksys_unshare+0x10/0x10 [ 424.344372][T11270] ? xfd_validate_state+0x5d/0x180 [ 424.344406][T11270] ? rcu_is_watching+0x12/0xc0 [ 424.344446][T11270] __x64_sys_unshare+0x31/0x40 [ 424.344490][T11270] do_syscall_64+0xcd/0x230 [ 424.344537][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.344568][T11270] RIP: 0033:0x7f521f98e969 [ 424.344591][T11270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.344621][T11270] RSP: 002b:00007f52207f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 424.344649][T11270] RAX: ffffffffffffffda RBX: 00007f521fbb5fa0 RCX: 00007f521f98e969 [ 424.344670][T11270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 424.344688][T11270] RBP: 00007f521fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 424.344725][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.344748][T11270] R13: 0000000000000000 R14: 00007f521fbb5fa0 R15: 00007ffd10679cf8 [ 424.344789][T11270] [ 425.411287][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 425.817639][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 425.887661][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 425.967449][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 427.947238][ C1] net_ratelimit: 38019 callbacks suppressed [ 427.947257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.965287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.977349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.989429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.001437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.013495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.025521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.037602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.049659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.061755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.542380][ T0] sched: DL replenish lagged too much [ 432.957284][ C1] net_ratelimit: 44113 callbacks suppressed [ 432.957308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.975417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.987604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.999773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.011931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.023974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.036120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.048316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.060614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.072803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.716469][T11319] zswap: zpool not available [ 437.801622][T11138] Process accounting resumed [ 437.860532][T11314] random: crng reseeded on system resumption [ 437.967253][ C1] net_ratelimit: 38203 callbacks suppressed [ 437.967278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.985431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.997620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.009912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.022123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.034362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.046602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.058957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.071174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.083463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.889778][T11331] FAULT_INJECTION: forcing a failure. [ 438.889778][T11331] name failslab, interval 1, probability 0, space 0, times 0 [ 438.982061][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.0.1363 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 438.982106][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.982125][T11331] Call Trace: [ 438.982135][T11331] [ 438.982146][T11331] dump_stack_lvl+0x16c/0x1f0 [ 438.982196][T11331] should_fail_ex+0x512/0x640 [ 438.982233][T11331] ? __kmalloc_noprof+0xbf/0x510 [ 438.982273][T11331] ? tracing_open+0x2ba/0xf90 [ 438.982302][T11331] should_failslab+0xc2/0x120 [ 438.982343][T11331] __kmalloc_noprof+0xd2/0x510 [ 438.982389][T11331] tracing_open+0x2ba/0xf90 [ 438.982419][T11331] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 438.982475][T11331] do_dentry_open+0x741/0x1c10 [ 438.982510][T11331] ? __pfx_tracing_open+0x10/0x10 [ 438.982548][T11331] vfs_open+0x82/0x3f0 [ 438.982595][T11331] path_openat+0x1e5e/0x2d40 [ 438.982641][T11331] ? __pfx_path_openat+0x10/0x10 [ 438.982684][T11331] do_filp_open+0x20b/0x470 [ 438.982716][T11331] ? __pfx_do_filp_open+0x10/0x10 [ 438.982772][T11331] ? alloc_fd+0x471/0x7d0 [ 438.982810][T11331] do_sys_openat2+0x11b/0x1d0 [ 438.982854][T11331] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.982899][T11331] ? find_held_lock+0x2b/0x80 [ 438.982941][T11331] __x64_sys_openat+0x174/0x210 [ 438.982995][T11331] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.983042][T11331] ? rcu_is_watching+0x12/0xc0 [ 438.983090][T11331] do_syscall_64+0xcd/0x230 [ 438.983139][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.983171][T11331] RIP: 0033:0x7fede8b8e969 [ 438.983194][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.983224][T11331] RSP: 002b:00007fede9a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.983253][T11331] RAX: ffffffffffffffda RBX: 00007fede8db5fa0 RCX: 00007fede8b8e969 [ 438.983273][T11331] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 438.983292][T11331] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 438.983311][T11331] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 438.983329][T11331] R13: 0000000000000000 R14: 00007fede8db5fa0 R15: 00007ffd9f283528 [ 438.983368][T11331] [ 439.727810][T11324] bond0: option all_slaves_active: invalid value () [ 442.977327][ C1] net_ratelimit: 33842 callbacks suppressed [ 442.977345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.995475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.007522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.019613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.031670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.043778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.055809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.067904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.079940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.092051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.003324][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 444.038961][T11367] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1373'. [ 444.296518][T11371] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1374'. [ 444.422357][T11374] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1374'. [ 444.609484][T11377] syz.1.1377 uses obsolete (PF_INET,SOCK_PACKET) [ 445.172847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.187504][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.738220][T11396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.744408][T11396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.777680][T11396] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.788484][T11396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.987245][ C1] net_ratelimit: 36356 callbacks suppressed [ 447.987266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.005302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.017491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.029611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.041667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.053790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.065856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.078168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.090255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.102356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.227251][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 450.233345][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 450.239513][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 450.245572][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 452.997300][ C1] net_ratelimit: 43356 callbacks suppressed [ 452.997322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.015493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.027633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.039761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.051909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.064126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.076359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.088550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.100694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.112911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.007292][ C1] net_ratelimit: 46237 callbacks suppressed [ 458.007312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.025389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.037484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.049528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.061638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.073687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.085807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.097967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.110074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.122123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027243][ C1] net_ratelimit: 42205 callbacks suppressed [ 463.027269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.028103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.028284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.028426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.028628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.028773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.145586][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.162403][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.164202][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.168144][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.168944][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.319568][T11440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.374795][T11440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.428241][T11440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.504522][T11440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.577145][T11440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 465.717517][T11440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 465.763265][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.443998][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.975542][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.327489][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 467.333595][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 467.412258][T11435] chnl_net:caif_netlink_parms(): no params data found [ 467.487393][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 467.567839][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 467.701511][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.852101][T11464] warning: `syz.2.1401' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 468.037266][ C1] net_ratelimit: 31264 callbacks suppressed [ 468.037288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.044105][T11458] Process accounting paused [ 468.055538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.072274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.084489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.096684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.108917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.121216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.133418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.145628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.157856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.890083][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.919049][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.957545][T11435] bridge_slave_0: entered allmulticast mode [ 468.982799][T11435] bridge_slave_0: entered promiscuous mode [ 469.647634][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 469.951009][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.981051][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.019523][T11435] bridge_slave_1: entered allmulticast mode [ 470.077412][T11435] bridge_slave_1: entered promiscuous mode [ 471.017065][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.134435][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.423751][ T1105] vlan1: left allmulticast mode [ 471.445678][ T1105] veth0_vlan: left allmulticast mode [ 471.489110][ T1105] vlan1: left promiscuous mode [ 471.494436][ T1105] bridge0: port 4(vlan1) entered disabled state [ 471.601976][ T1105] team0: left allmulticast mode [ 471.629638][ T1105] team_slave_0: left allmulticast mode [ 471.635374][ T1105] team_slave_1: left allmulticast mode [ 471.700719][ T1105] team0: left promiscuous mode [ 471.705563][ T1105] team_slave_0: left promiscuous mode [ 471.727647][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 471.767621][ T1105] team_slave_1: left promiscuous mode [ 471.774335][ T1105] bridge0: port 3(team0) entered disabled state [ 471.914329][ T1105] bridge_slave_1: left allmulticast mode [ 471.970585][ T1105] bridge_slave_1: left promiscuous mode [ 471.976453][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.233672][ T1105] bridge_slave_0: left allmulticast mode [ 472.251553][ T1105] bridge_slave_0: left promiscuous mode [ 472.291541][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.047228][ C1] net_ratelimit: 30475 callbacks suppressed [ 473.047252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.065383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.077577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.089764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.101977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.114165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.126453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.138656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.150927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.163131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.807785][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 474.167414][T11508] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1410'. [ 474.270936][T11509] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1410'. [ 474.898668][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.950378][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.005539][ T1105] bond0 (unregistering): Released all slaves [ 475.270099][T11435] team0: Port device team_slave_0 added [ 475.310218][T11435] team0: Port device team_slave_1 added [ 475.581610][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.612300][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.707374][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.889182][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 475.974149][ T1105] ovs_: left promiscuous mode [ 476.225841][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.237745][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.263666][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.307755][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.385527][ T1105] HfR: left promiscuous mode [ 476.630270][T11435] hsr_slave_0: entered promiscuous mode [ 476.654970][T11435] hsr_slave_1: entered promiscuous mode [ 476.672164][T11435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.692484][T11435] Cannot create hsr debugfs directory [ 477.967549][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 478.057275][ C1] net_ratelimit: 31560 callbacks suppressed [ 478.057298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.075549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.087790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.100050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.112284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.124483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.136691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.148951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.161166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.173326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.632664][ T1105] hsr_slave_0: left promiscuous mode [ 478.651200][ T1105] hsr_slave_1: left promiscuous mode [ 478.663697][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.677470][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.724569][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.750838][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.847432][ T1105] veth1_macvtap: left promiscuous mode [ 478.853998][ T1105] veth0_macvtap: left promiscuous mode [ 478.873528][ T1105] veth1_vlan: left promiscuous mode [ 478.887830][ T1105] veth0_vlan: left promiscuous mode [ 480.671191][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 481.214883][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 482.191215][T11435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 482.230912][T11435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 482.280786][T11435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 482.325204][T11435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 482.626161][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.680187][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.748029][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.756196][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.845676][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.852903][ T4187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.067247][ C1] net_ratelimit: 34088 callbacks suppressed [ 483.067269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.085445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.097628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.109853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.122085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.134262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.146512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.158716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.171298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.183465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.764098][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.343499][T11435] veth0_vlan: entered promiscuous mode [ 484.362662][T11435] veth1_vlan: entered promiscuous mode [ 484.422111][T11435] veth0_macvtap: entered promiscuous mode [ 484.434603][T11435] veth1_macvtap: entered promiscuous mode [ 484.481706][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.494570][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.513270][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.533243][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.544208][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.566701][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.582328][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.605950][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.622965][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.641953][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.652729][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.666062][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.677018][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.693345][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.712275][T11435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.735133][T11435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.755141][T11435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.764984][T11435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.006256][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.067445][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.210772][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.232275][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.077308][ C1] net_ratelimit: 37347 callbacks suppressed [ 488.077332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.095428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.107511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.119650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.131700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.143796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.155987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.168136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.180148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.192228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.514481][T11579] FAULT_INJECTION: forcing a failure. [ 488.514481][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 488.663388][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.2.1420 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 488.663434][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.663456][T11579] Call Trace: [ 488.663465][T11579] [ 488.663478][T11579] dump_stack_lvl+0x16c/0x1f0 [ 488.663534][T11579] should_fail_ex+0x512/0x640 [ 488.663573][T11579] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 488.663612][T11579] should_failslab+0xc2/0x120 [ 488.663657][T11579] __kmalloc_cache_noprof+0x6a/0x3e0 [ 488.663691][T11579] ? create_filter_start.constprop.0+0xa5/0x300 [ 488.663735][T11579] create_filter_start.constprop.0+0xa5/0x300 [ 488.663779][T11579] apply_subsystem_event_filter+0x185/0x1450 [ 488.663826][T11579] ? __might_fault+0xe3/0x190 [ 488.663864][T11579] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 488.663915][T11579] ? _copy_from_user+0x59/0xd0 [ 488.663961][T11579] subsystem_filter_write+0x95/0x120 [ 488.664004][T11579] vfs_write+0x25c/0x1180 [ 488.664035][T11579] ? __pfx_subsystem_filter_write+0x10/0x10 [ 488.664080][T11579] ? __pfx___mutex_lock+0x10/0x10 [ 488.664128][T11579] ? __pfx_vfs_write+0x10/0x10 [ 488.664173][T11579] ? __fget_files+0x20e/0x3c0 [ 488.664217][T11579] ksys_write+0x12a/0x240 [ 488.664260][T11579] ? __pfx_ksys_write+0x10/0x10 [ 488.664291][T11579] ? rcu_is_watching+0x12/0xc0 [ 488.664335][T11579] do_syscall_64+0xcd/0x230 [ 488.664386][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.664423][T11579] RIP: 0033:0x7f521f98e969 [ 488.664449][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.664482][T11579] RSP: 002b:00007f52207d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.664512][T11579] RAX: ffffffffffffffda RBX: 00007f521fbb6080 RCX: 00007f521f98e969 [ 488.664534][T11579] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 488.664554][T11579] RBP: 00007f521fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 488.664574][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.664593][T11579] R13: 0000000000000000 R14: 00007f521fbb6080 R15: 00007ffd10679cf8 [ 488.664636][T11579] [ 489.590695][T11592] FAULT_INJECTION: forcing a failure. [ 489.590695][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 489.674821][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.0.1412 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 489.674869][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.674889][T11592] Call Trace: [ 489.674899][T11592] [ 489.674924][T11592] dump_stack_lvl+0x16c/0x1f0 [ 489.674990][T11592] should_fail_ex+0x512/0x640 [ 489.675029][T11592] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 489.675068][T11592] should_failslab+0xc2/0x120 [ 489.675112][T11592] __kmalloc_cache_noprof+0x6a/0x3e0 [ 489.675148][T11592] ? acct_on+0x57/0x870 [ 489.675195][T11592] acct_on+0x57/0x870 [ 489.675241][T11592] __x64_sys_acct+0xaf/0x230 [ 489.675283][T11592] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.675328][T11592] do_syscall_64+0xcd/0x230 [ 489.675399][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.675444][T11592] RIP: 0033:0x7fede8b8e969 [ 489.675470][T11592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.675503][T11592] RSP: 002b:00007fede9a10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 489.675535][T11592] RAX: ffffffffffffffda RBX: 00007fede8db6080 RCX: 00007fede8b8e969 [ 489.675557][T11592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 489.675578][T11592] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 489.675598][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.675618][T11592] R13: 0000000000000000 R14: 00007fede8db6080 R15: 00007ffd9f283528 [ 489.675661][T11592] [ 489.913334][T11589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 489.919691][T11589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 489.925826][T11589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 489.931993][T11589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 490.266969][T11600] sd 0:0:1:0: PR command failed: 1026 [ 490.301563][T11600] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 490.357382][T11600] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 492.152541][ T5853] Bluetooth: hci4: command 0x041b tx timeout [ 492.158792][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 492.165100][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 492.174286][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 493.087270][ C1] net_ratelimit: 38934 callbacks suppressed [ 493.087296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.105424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.117489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.129689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.141764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.153904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.165961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.178088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.190156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.202251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.097308][ C1] net_ratelimit: 45797 callbacks suppressed [ 498.097329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.115484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.127661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.139821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.152035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.164283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.176499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.188687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.200904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.213080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.908653][T11606] Process accounting resumed [ 498.969552][T11614] erspan0: entered allmulticast mode [ 503.107237][ C1] net_ratelimit: 39584 callbacks suppressed [ 503.107262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.125925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.138182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.150375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.162680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.176536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.188785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.200975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.213216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.225379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.429896][T11648] FAULT_INJECTION: forcing a failure. [ 504.429896][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 504.544117][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.4.1425 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 504.544167][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.544186][T11648] Call Trace: [ 504.544196][T11648] [ 504.544207][T11648] dump_stack_lvl+0x16c/0x1f0 [ 504.544259][T11648] should_fail_ex+0x512/0x640 [ 504.544295][T11648] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 504.544334][T11648] should_failslab+0xc2/0x120 [ 504.544376][T11648] __kmalloc_cache_noprof+0x6a/0x3e0 [ 504.544410][T11648] ? vhost_net_open+0xb4/0x8a0 [ 504.544457][T11648] ? kasan_save_track+0x14/0x30 [ 504.544497][T11648] vhost_net_open+0xb4/0x8a0 [ 504.544541][T11648] ? __pfx_vhost_net_open+0x10/0x10 [ 504.544588][T11648] misc_open+0x35a/0x420 [ 504.544630][T11648] ? __pfx_misc_open+0x10/0x10 [ 504.544673][T11648] chrdev_open+0x231/0x6a0 [ 504.544708][T11648] ? __pfx_apparmor_file_open+0x10/0x10 [ 504.544750][T11648] ? __pfx_chrdev_open+0x10/0x10 [ 504.544792][T11648] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 504.544853][T11648] do_dentry_open+0x741/0x1c10 [ 504.544886][T11648] ? __pfx_chrdev_open+0x10/0x10 [ 504.544931][T11648] vfs_open+0x82/0x3f0 [ 504.544980][T11648] path_openat+0x1e5e/0x2d40 [ 504.545028][T11648] ? __pfx_path_openat+0x10/0x10 [ 504.545072][T11648] do_filp_open+0x20b/0x470 [ 504.545114][T11648] ? __pfx_do_filp_open+0x10/0x10 [ 504.545181][T11648] ? alloc_fd+0x471/0x7d0 [ 504.545222][T11648] do_sys_openat2+0x11b/0x1d0 [ 504.545267][T11648] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.545315][T11648] ? do_fcntl+0x1eb/0x1590 [ 504.545366][T11648] __x64_sys_openat+0x174/0x210 [ 504.545413][T11648] ? __pfx___x64_sys_openat+0x10/0x10 [ 504.545463][T11648] ? rcu_is_watching+0x12/0xc0 [ 504.545508][T11648] do_syscall_64+0xcd/0x230 [ 504.545559][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.545592][T11648] RIP: 0033:0x7f409c98e969 [ 504.545617][T11648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.545650][T11648] RSP: 002b:00007f409d89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.545680][T11648] RAX: ffffffffffffffda RBX: 00007f409cbb5fa0 RCX: 00007f409c98e969 [ 504.545702][T11648] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 504.545723][T11648] RBP: 00007f409ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 504.545742][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.545761][T11648] R13: 0000000000000000 R14: 00007f409cbb5fa0 R15: 00007fff2ae37108 [ 504.545803][T11648] [ 505.501426][T11666] warn_alloc: 2 callbacks suppressed [ 505.501451][T11666] syz.2.1427: vmalloc error: size 20480, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 505.575382][T11665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.602040][T11665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.660852][T11665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.707461][T11665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.728461][T11666] CPU: 0 UID: 0 PID: 11666 Comm: syz.2.1427 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 505.728508][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.728528][T11666] Call Trace: [ 505.728538][T11666] [ 505.728551][T11666] dump_stack_lvl+0x16c/0x1f0 [ 505.728605][T11666] warn_alloc+0x248/0x3a0 [ 505.728647][T11666] ? __pfx_warn_alloc+0x10/0x10 [ 505.728690][T11666] ? alloc_pages_mpol+0x25a/0x550 [ 505.728736][T11666] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 505.728801][T11666] ? trace_kmalloc+0x2b/0xd0 [ 505.728869][T11666] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 505.728915][T11666] ? kernel_clone+0xfc/0x960 [ 505.728965][T11666] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.728995][T11666] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 505.729048][T11666] ? rcu_is_watching+0x12/0xc0 [ 505.729082][T11666] ? kernel_clone+0xfc/0x960 [ 505.729122][T11666] __vmalloc_node_noprof+0x74/0xa0 [ 505.729154][T11666] ? kernel_clone+0xfc/0x960 [ 505.729196][T11666] copy_process+0x2ead/0x91a0 [ 505.729252][T11666] ? preempt_schedule_thunk+0x16/0x30 [ 505.729294][T11666] ? __pfx_copy_process+0x10/0x10 [ 505.729338][T11666] ? try_to_wake_up+0xa2f/0x1680 [ 505.729372][T11666] ? __pfx_try_to_wake_up+0x10/0x10 [ 505.729404][T11666] ? plist_check_head+0xa3/0x150 [ 505.729437][T11666] ? find_held_lock+0x2b/0x80 [ 505.729473][T11666] ? wake_up_q+0xb0/0x160 [ 505.729522][T11666] ? do_raw_spin_unlock+0x172/0x230 [ 505.729556][T11666] kernel_clone+0xfc/0x960 [ 505.729601][T11666] ? __pfx_futex_wake+0x10/0x10 [ 505.729644][T11666] ? __pfx_kernel_clone+0x10/0x10 [ 505.729711][T11666] __do_sys_clone+0xce/0x120 [ 505.729772][T11666] ? __pfx___do_sys_clone+0x10/0x10 [ 505.729855][T11666] ? rcu_is_watching+0x12/0xc0 [ 505.729899][T11666] do_syscall_64+0xcd/0x230 [ 505.729951][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.729984][T11666] RIP: 0033:0x7f521f98e969 [ 505.730010][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.730041][T11666] RSP: 002b:00007f52207d2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 505.730071][T11666] RAX: ffffffffffffffda RBX: 00007f521fbb6080 RCX: 00007f521f98e969 [ 505.730094][T11666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000003000000 [ 505.730113][T11666] RBP: 00007f521fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 505.730133][T11666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.730153][T11666] R13: 0000000000000000 R14: 00007f521fbb6080 R15: 00007ffd10679cf8 [ 505.730194][T11666] [ 505.733672][T11666] Mem-Info: [ 506.153030][T11661] zswap: compressor not available [ 506.308108][T11666] active_anon:6502 inactive_anon:0 isolated_anon:0 [ 506.308108][T11666] active_file:19584 inactive_file:38947 isolated_file:0 [ 506.308108][T11666] unevictable:768 dirty:339 writeback:0 [ 506.308108][T11666] slab_reclaimable:9992 slab_unreclaimable:100396 [ 506.308108][T11666] mapped:26623 shmem:1429 pagetables:898 [ 506.308108][T11666] sec_pagetables:0 bounce:0 [ 506.308108][T11666] kernel_misc_reclaimable:0 [ 506.308108][T11666] free:1325002 free_pcp:332 free_cma:0 [ 506.364595][T11666] Node 0 active_anon:26008kB inactive_anon:0kB active_file:78336kB inactive_file:155712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106492kB dirty:1356kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10500kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.409726][T11666] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.465033][T11666] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.496505][T11666] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 506.503412][T11666] Node 0 DMA32 free:1375664kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:25964kB inactive_anon:0kB active_file:78336kB inactive_file:154144kB unevictable:1536kB writepending:1356kB present:3129332kB managed:2541748kB mlocked:0kB bounce:0kB free_pcp:1444kB local_pcp:1368kB free_cma:0kB [ 506.579408][T11666] lowmem_reserve[]: 0 0 1 1 1 [ 506.584246][T11666] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 506.618530][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.624874][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.641848][T11666] lowmem_reserve[]: 0 0 0 0 0 [ 506.646680][T11666] Node 1 Normal free:3909520kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.691805][T11666] lowmem_reserve[]: 0 0 0 0 0 [ 506.696824][T11666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.715543][T11666] Node 0 DMA32: 98*4kB (ME) 624*8kB (UME) 757*16kB (ME) 845*32kB (UME) 478*64kB (UME) 216*128kB (UME) 77*256kB (UM) 36*512kB (UME) 22*1024kB (UME) 4*2048kB (UM) 294*4096kB (M) = 1375864kB [ 506.739036][T11666] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 506.753490][T11666] Node 1 Normal: 222*4kB (U) 49*8kB (UME) 35*16kB (UME) 193*32kB (UME) 95*64kB (UME) 31*128kB (UME) 23*256kB (UME) 11*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3909520kB [ 506.776798][T11666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.786979][T11666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.807286][T11666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.822259][T11666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.832286][T11666] 59960 total pagecache pages [ 506.837102][T11666] 0 pages in swap cache [ 506.845201][T11666] Free swap = 124996kB [ 506.850295][T11666] Total swap = 124996kB [ 506.854488][T11666] 2097051 pages RAM [ 506.868916][T11666] 0 pages HighMem/MovableOnly [ 506.873724][T11666] 429572 pages reserved [ 506.880186][T11666] 0 pages cma reserved [ 507.647497][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 507.653701][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 507.728005][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 507.735799][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 508.117326][ C1] net_ratelimit: 31445 callbacks suppressed [ 508.117352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.135512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.147705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.159989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.172157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.184346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.196541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.208776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.220950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.233190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.156487][T11696] FAULT_INJECTION: forcing a failure. [ 509.156487][T11696] name failslab, interval 1, probability 0, space 0, times 0 [ 509.197334][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.0.1437 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 509.197384][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.197403][T11696] Call Trace: [ 509.197414][T11696] [ 509.197427][T11696] dump_stack_lvl+0x16c/0x1f0 [ 509.197478][T11696] should_fail_ex+0x512/0x640 [ 509.197515][T11696] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 509.197560][T11696] should_failslab+0xc2/0x120 [ 509.197603][T11696] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 509.197653][T11696] ? security_file_alloc+0x34/0x2b0 [ 509.197708][T11696] security_file_alloc+0x34/0x2b0 [ 509.197750][T11696] init_file+0x93/0x4c0 [ 509.197791][T11696] alloc_empty_file+0x73/0x1e0 [ 509.197834][T11696] path_openat+0xe0/0x2d40 [ 509.197863][T11696] ? __x64_sys_openat+0x174/0x210 [ 509.197906][T11696] ? do_syscall_64+0xcd/0x230 [ 509.197948][T11696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.197993][T11696] ? __pfx_path_openat+0x10/0x10 [ 509.198035][T11696] do_filp_open+0x20b/0x470 [ 509.198067][T11696] ? __pfx_do_filp_open+0x10/0x10 [ 509.198127][T11696] ? alloc_fd+0x471/0x7d0 [ 509.198165][T11696] do_sys_openat2+0x11b/0x1d0 [ 509.198208][T11696] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.198253][T11696] ? find_held_lock+0x2b/0x80 [ 509.198295][T11696] __x64_sys_openat+0x174/0x210 [ 509.198340][T11696] ? __pfx___x64_sys_openat+0x10/0x10 [ 509.198406][T11696] ? rcu_is_watching+0x12/0xc0 [ 509.198453][T11696] do_syscall_64+0xcd/0x230 [ 509.198504][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.198537][T11696] RIP: 0033:0x7fede8b8d2d0 [ 509.198563][T11696] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 509.198594][T11696] RSP: 002b:00007fede9a30f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 509.198625][T11696] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fede8b8d2d0 [ 509.198645][T11696] RDX: 0000000000000002 RSI: 00007fede9a30fa0 RDI: 00000000ffffff9c [ 509.198672][T11696] RBP: 00007fede9a30fa0 R08: 0000000000000000 R09: 0000000000000000 [ 509.198692][T11696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 509.198712][T11696] R13: 0000000000000000 R14: 00007fede8db5fa0 R15: 00007ffd9f283528 [ 509.198753][T11696] [ 513.127180][ C1] net_ratelimit: 30584 callbacks suppressed [ 513.127207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.145441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.157621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.169861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.182096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.194424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.206587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.218779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.230932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.234081][T11710] FAULT_INJECTION: forcing a failure. [ 513.234081][T11710] name failslab, interval 1, probability 0, space 0, times 0 [ 513.243115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.273477][T11710] CPU: 0 UID: 0 PID: 11710 Comm: syz.0.1442 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 513.273536][T11710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.273555][T11710] Call Trace: [ 513.273566][T11710] [ 513.273577][T11710] dump_stack_lvl+0x16c/0x1f0 [ 513.273629][T11710] should_fail_ex+0x512/0x640 [ 513.273668][T11710] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 513.273708][T11710] should_failslab+0xc2/0x120 [ 513.273752][T11710] __kmalloc_cache_noprof+0x6a/0x3e0 [ 513.273787][T11710] ? snd_seq_port_connect+0x61/0x550 [ 513.273841][T11710] snd_seq_port_connect+0x61/0x550 [ 513.273889][T11710] ? _raw_read_unlock+0x28/0x50 [ 513.273930][T11710] ? check_subscription_permission.isra.0+0xf5/0x240 [ 513.273987][T11710] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 513.274050][T11710] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 513.274123][T11710] ? preempt_schedule_thunk+0x16/0x30 [ 513.274163][T11710] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 513.274235][T11710] snd_seq_oss_midi_open+0x442/0x660 [ 513.274276][T11710] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 513.274334][T11710] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.274381][T11710] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 513.274431][T11710] snd_seq_oss_synth_setup_midi+0x131/0x580 [ 513.274491][T11710] snd_seq_oss_open+0x893/0xa20 [ 513.274548][T11710] odev_open+0x6f/0x90 [ 513.274589][T11710] ? __pfx_odev_open+0x10/0x10 [ 513.274633][T11710] soundcore_open+0x409/0x580 [ 513.274680][T11710] ? __pfx_soundcore_open+0x10/0x10 [ 513.274723][T11710] chrdev_open+0x231/0x6a0 [ 513.274758][T11710] ? __pfx_apparmor_file_open+0x10/0x10 [ 513.274799][T11710] ? __pfx_chrdev_open+0x10/0x10 [ 513.274838][T11710] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 513.274895][T11710] do_dentry_open+0x741/0x1c10 [ 513.274929][T11710] ? __pfx_chrdev_open+0x10/0x10 [ 513.274973][T11710] vfs_open+0x82/0x3f0 [ 513.275020][T11710] path_openat+0x1e5e/0x2d40 [ 513.275068][T11710] ? __pfx_path_openat+0x10/0x10 [ 513.275111][T11710] do_filp_open+0x20b/0x470 [ 513.275145][T11710] ? __pfx_do_filp_open+0x10/0x10 [ 513.275206][T11710] ? alloc_fd+0x471/0x7d0 [ 513.275264][T11710] do_sys_openat2+0x11b/0x1d0 [ 513.275319][T11710] ? __pfx_do_sys_openat2+0x10/0x10 [ 513.275369][T11710] ? __pfx___might_resched+0x10/0x10 [ 513.275451][T11710] __x64_sys_openat+0x174/0x210 [ 513.275502][T11710] ? __pfx___x64_sys_openat+0x10/0x10 [ 513.275566][T11710] ? rcu_is_watching+0x12/0xc0 [ 513.275615][T11710] do_syscall_64+0xcd/0x230 [ 513.275668][T11710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.275702][T11710] RIP: 0033:0x7fede8b8e969 [ 513.275728][T11710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.275761][T11710] RSP: 002b:00007fede9a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.275793][T11710] RAX: ffffffffffffffda RBX: 00007fede8db5fa0 RCX: 00007fede8b8e969 [ 513.275815][T11710] RDX: 0000000000000080 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 513.275837][T11710] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 513.275858][T11710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.275878][T11710] R13: 0000000000000000 R14: 00007fede8db5fa0 R15: 00007ffd9f283528 [ 513.275922][T11710] [ 518.137317][ C1] net_ratelimit: 24611 callbacks suppressed [ 518.137342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.155847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.168554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.181165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.193688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.206371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.218958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.231537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.244250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.256845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.317772][ T30] audit: type=1800 audit(6040459156.336:9): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1447" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 523.147299][ C1] net_ratelimit: 23344 callbacks suppressed [ 523.147324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.165551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.177761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.190079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.202272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.214460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.226693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.238882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.251068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.263229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.501659][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.527424][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.537695][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.546189][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.555198][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.149819][T11765] FAULT_INJECTION: forcing a failure. [ 524.149819][T11765] name fail_futex, interval 1, probability 0, space 0, times 0 [ 524.267678][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.4.1452 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 524.267722][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 524.267740][T11765] Call Trace: [ 524.267750][T11765] [ 524.267761][T11765] dump_stack_lvl+0x16c/0x1f0 [ 524.267811][T11765] should_fail_ex+0x512/0x640 [ 524.267853][T11765] get_futex_key+0x49e/0x1000 [ 524.267892][T11765] ? __pfx_get_futex_key+0x10/0x10 [ 524.267932][T11765] ? __pfx___fsnotify_parent+0x10/0x10 [ 524.267981][T11765] futex_wake+0xe7/0x4e0 [ 524.268032][T11765] ? bpf_lsm_file_permission+0x9/0x10 [ 524.268061][T11765] ? __pfx_futex_wake+0x10/0x10 [ 524.268104][T11765] ? vfs_write+0x81a/0x1180 [ 524.268131][T11765] ? vfs_write+0x316/0x1180 [ 524.268168][T11765] do_futex+0x1e3/0x350 [ 524.268201][T11765] ? __pfx_do_futex+0x10/0x10 [ 524.268245][T11765] __x64_sys_futex+0x1e0/0x4c0 [ 524.268282][T11765] ? fput+0x70/0xf0 [ 524.268324][T11765] ? __pfx___x64_sys_futex+0x10/0x10 [ 524.268357][T11765] ? ksys_write+0x1b9/0x240 [ 524.268387][T11765] ? __pfx_ksys_write+0x10/0x10 [ 524.268415][T11765] ? rcu_is_watching+0x12/0xc0 [ 524.268455][T11765] do_syscall_64+0xcd/0x230 [ 524.268499][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.268529][T11765] RIP: 0033:0x7f409c98e969 [ 524.268551][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.268579][T11765] RSP: 002b:00007f409d87c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.268606][T11765] RAX: ffffffffffffffda RBX: 00007f409cbb6088 RCX: 00007f409c98e969 [ 524.268625][T11765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f409cbb608c [ 524.268642][T11765] RBP: 00007f409cbb6080 R08: 00007f409d89e000 R09: 0000000000000000 [ 524.268660][T11765] R10: 000000000000001c R11: 0000000000000246 R12: 00007f409cbb608c [ 524.268682][T11765] R13: 0000000000000000 R14: 00007fff2ae37020 R15: 00007fff2ae37108 [ 524.268718][T11765] [ 524.810856][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.819643][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.828676][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.837635][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.845395][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.649046][ T5852] Bluetooth: hci3: command tx timeout [ 526.931616][ T5852] Bluetooth: hci1: command tx timeout [ 527.116175][ T4187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.561943][ T4187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.727406][ T5852] Bluetooth: hci3: command tx timeout [ 527.756186][T11759] chnl_net:caif_netlink_parms(): no params data found [ 528.055193][ T4187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.157304][ C1] net_ratelimit: 32036 callbacks suppressed [ 528.157336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.175438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.187686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.199855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.212084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.224206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.236419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.248570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.260752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.272996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.371509][T11769] chnl_net:caif_netlink_parms(): no params data found [ 528.552148][ T4187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.932059][T11821] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1454'. [ 529.007356][ T5852] Bluetooth: hci1: command tx timeout [ 529.136766][T11759] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.169517][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.206709][T11759] bridge_slave_0: entered allmulticast mode [ 529.242803][T11759] bridge_slave_0: entered promiscuous mode [ 529.312031][T11759] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.343695][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.384300][T11759] bridge_slave_1: entered allmulticast mode [ 529.438957][T11759] bridge_slave_1: entered promiscuous mode [ 529.670189][T11819] Process accounting paused [ 529.755041][T11759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.807691][ T5852] Bluetooth: hci3: command tx timeout [ 530.060173][T11759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.150323][T11844] program syz.0.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.187882][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.195082][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.208842][T11769] bridge_slave_0: entered allmulticast mode [ 530.230266][T11769] bridge_slave_0: entered promiscuous mode [ 530.333234][ T4187] team0: left allmulticast mode [ 530.342782][ T4187] team_slave_0: left allmulticast mode [ 530.362049][ T4187] team_slave_1: left allmulticast mode [ 530.373371][ T4187] team0: left promiscuous mode [ 530.394068][ T4187] team_slave_0: left promiscuous mode [ 530.403355][ T4187] team_slave_1: left promiscuous mode [ 530.419389][ T4187] bridge0: port 3(team0) entered disabled state [ 530.479099][ T4187] bridge_slave_1: left allmulticast mode [ 530.484806][ T4187] bridge_slave_1: left promiscuous mode [ 530.504002][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.533719][ T4187] bridge_slave_0: left allmulticast mode [ 530.539848][ T4187] bridge_slave_0: left promiscuous mode [ 530.545703][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.088660][ T5852] Bluetooth: hci1: command tx timeout [ 531.585098][ T4187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.623642][ T4187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.715953][ T4187] bond0 (unregistering): Released all slaves [ 531.771171][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.792246][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.828976][T11769] bridge_slave_1: entered allmulticast mode [ 531.856725][T11769] bridge_slave_1: entered promiscuous mode [ 531.888259][ T5852] Bluetooth: hci3: command tx timeout [ 531.915078][T11759] team0: Port device team_slave_0 added [ 532.193456][T11759] team0: Port device team_slave_1 added [ 532.371040][T11769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.422180][T11769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.549638][T11854] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 532.870391][T11759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.897567][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.987698][T11759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.167227][ C1] net_ratelimit: 33665 callbacks suppressed [ 533.167250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.167395][ T5852] Bluetooth: hci1: command tx timeout [ 533.173443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.202926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.215187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.227450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.239719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.251993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.264232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.276489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.288746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.504404][T11769] team0: Port device team_slave_0 added [ 533.544266][T11759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.573627][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.664946][T11759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.875969][T11769] team0: Port device team_slave_1 added [ 534.263325][T11769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.286676][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.323751][T11769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.538593][T11769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.545597][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.626456][T11769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.690411][T11759] hsr_slave_0: entered promiscuous mode [ 534.707923][T11759] hsr_slave_1: entered promiscuous mode [ 534.715519][T11759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.730216][T11759] Cannot create hsr debugfs directory [ 534.814988][ T4187] hsr_slave_0: left promiscuous mode [ 534.828490][ T4187] hsr_slave_1: left promiscuous mode [ 534.835159][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.847846][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.858526][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.866358][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.914753][ T4187] veth0_macvtap: left promiscuous mode [ 534.925636][ T4187] veth1_vlan: left promiscuous mode [ 534.937811][ T4187] veth0_vlan: left promiscuous mode [ 535.872914][ T4187] team0 (unregistering): Port device team_slave_1 removed [ 535.994230][ T4187] team0 (unregistering): Port device team_slave_0 removed [ 536.936702][T11769] hsr_slave_0: entered promiscuous mode [ 536.944086][T11769] hsr_slave_1: entered promiscuous mode [ 536.952083][T11769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.960548][T11769] Cannot create hsr debugfs directory [ 538.177204][ C1] net_ratelimit: 33608 callbacks suppressed [ 538.177244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.195377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.207570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.219740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.231892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.244114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.256311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.268517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.280648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.292850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.560213][T11759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 538.604428][T11759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.644639][T11759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 538.711260][T11759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.124921][T11769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.268224][T11769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.378444][T11769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.506360][T11769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 539.899903][T11759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.039198][T11759] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.093281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.100588][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.140886][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.148193][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.259089][T11911] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 540.680813][T11769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.846431][T11769] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.920961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.928203][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.979934][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.987229][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.954807][T11759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.580789][T11769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.187183][ C1] net_ratelimit: 29264 callbacks suppressed [ 543.187219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.205451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.217548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.229673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.241905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.254020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.266078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.278214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.290259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.302541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.803768][T11759] veth0_vlan: entered promiscuous mode [ 545.182134][T11759] veth1_vlan: entered promiscuous mode [ 545.286592][T11769] veth0_vlan: entered promiscuous mode [ 545.729490][T11769] veth1_vlan: entered promiscuous mode [ 545.927107][T11759] veth0_macvtap: entered promiscuous mode [ 546.066241][T11759] veth1_macvtap: entered promiscuous mode [ 546.263355][T11769] veth0_macvtap: entered promiscuous mode [ 546.284662][T11769] veth1_macvtap: entered promiscuous mode [ 546.310354][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.330247][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.358929][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.377451][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.389346][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.417231][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.473484][T11759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.522824][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.597769][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.637791][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.669344][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.725072][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.750146][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.891359][T11759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.734467][T11759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.780941][T11759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.834342][T11759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.866098][T11759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.056478][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.087637][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.121213][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.150458][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.182384][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.197224][ C1] net_ratelimit: 32525 callbacks suppressed [ 548.197246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.214361][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.215318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.230914][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.237409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.259577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.271797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.284082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.285395][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.296307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.296581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.315058][T11769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.318476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.349861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.528043][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.618455][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.697765][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.724630][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.854781][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.898582][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.925024][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.940217][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.974220][T11769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.104364][T11769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.127650][T11769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.144812][T11769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.165229][T11769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.207294][ C1] net_ratelimit: 41891 callbacks suppressed [ 553.207313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.225355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.237418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.249534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.261562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.273651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.285789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.297893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.309915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.321994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.936578][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.023501][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.525348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.573517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.217314][ C1] net_ratelimit: 43150 callbacks suppressed [ 558.217338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.235449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.247535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.259639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.271688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.283796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.296378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.308492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.320911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.333120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.428934][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.436816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.788109][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.795994][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.658497][T12054] WARNING! power/level is deprecated; use power/control instead [ 559.825074][T12056] Process accounting resumed [ 560.968163][T12080] [U]  [ 560.971133][T12080] [U] [ 560.973890][T12080] [U] [ 560.976637][T12080] [U] [ 560.981925][ T5852] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 560.981964][ T5852] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 560.999460][ T5852] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 560.999524][ T5852] Bluetooth: hci3: Malformed LE Event: 0x0d [ 561.077568][T12080] [U] [ 561.080429][T12080] [U] [ 561.083179][T12080] [U] [ 561.085925][T12080] [U] [ 561.160289][T12080] [U] [ 561.163185][T12080] [U] [ 561.165931][T12080] [U] [ 561.168673][T12080] [U] [ 561.286416][T12080] [U] [ 561.289205][T12080] [U] [ 561.291951][T12080] [U] [ 561.294790][T12080] [U] [ 561.369905][T12080] [U] [ 561.372726][T12080] [U] [ 561.375534][T12080] [U] [ 561.378275][T12080] [U] [ 561.427533][T12080] [U] [ 561.430397][T12080] [U] [ 561.433138][T12080] [U] [ 561.435884][T12080] [U] [ 561.486676][T12080] [U] [ 561.489457][T12080] [U] [ 561.492207][T12080] [U] [ 561.494965][T12080] [U] [ 561.543305][T12080] [U] [ 561.546150][T12080] [U] [ 561.548893][T12080] [U] [ 561.551645][T12080] [U] [ 561.600140][T12080] [U] [ 561.602934][T12080] [U] [ 561.605686][T12080] [U] [ 561.608437][T12080] [U] [ 561.640824][T12080] [U] [ 561.643612][T12080] [U] [ 561.646363][T12080] [U] [ 561.649107][T12080] [U] [ 561.690180][T12080] [U] [ 561.692954][T12080] [U] [ 561.695746][T12080] [U] [ 561.698492][T12080] [U] [ 561.757726][T12094] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 561.821094][T12082] [U] [ 562.456718][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 563.227265][ C1] net_ratelimit: 33003 callbacks suppressed [ 563.227290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.245473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.257648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.269808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.282013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.294168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.306374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.318575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.330789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.342961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.698497][T12127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 564.734779][T12127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 564.765414][T12127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.786677][T12127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 564.838170][T12127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 564.886831][T12127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.940946][T12127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 564.965428][T12127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 566.226049][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 566.768436][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 566.857258][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 566.927652][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.056074][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.062645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.237242][ C1] net_ratelimit: 32074 callbacks suppressed [ 568.237260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.255313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.267467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.279512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.291652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.303708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.315816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.327871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.339993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.352049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.927855][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 569.007453][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 571.311173][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 571.317387][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 573.247306][ C1] net_ratelimit: 45711 callbacks suppressed [ 573.247324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.265438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.277579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.289669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.301717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.313897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.325917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.338032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.350077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.362172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.257176][ C1] net_ratelimit: 46163 callbacks suppressed [ 578.257207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.275379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.287561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.299755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.311973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.324155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.336392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.348552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.360777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.373077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.362547][ T5852] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 580.362591][ T5852] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 580.383211][ T5852] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 580.383283][ T5852] Bluetooth: hci4: Malformed LE Event: 0x0d [ 581.609531][T12205] FAULT_INJECTION: forcing a failure. [ 581.609531][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 581.697730][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.6.1509 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 581.697773][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.697790][T12205] Call Trace: [ 581.697800][T12205] [ 581.697810][T12205] dump_stack_lvl+0x16c/0x1f0 [ 581.697856][T12205] should_fail_ex+0x512/0x640 [ 581.697889][T12205] ? fs_reclaim_acquire+0xae/0x150 [ 581.697959][T12205] should_failslab+0xc2/0x120 [ 581.698001][T12205] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 581.698039][T12205] ? security_inode_alloc+0x3b/0x2b0 [ 581.698080][T12205] security_inode_alloc+0x3b/0x2b0 [ 581.698116][T12205] inode_init_always_gfp+0xce4/0x1030 [ 581.698158][T12205] alloc_inode+0x86/0x240 [ 581.698198][T12205] new_inode+0x22/0x1c0 [ 581.698242][T12205] proc_sys_make_inode+0x47/0x5c0 [ 581.698280][T12205] proc_sys_lookup+0x282/0x410 [ 581.698315][T12205] ? __pfx_proc_sys_lookup+0x10/0x10 [ 581.698354][T12205] ? lockdep_init_map_type+0x5c/0x280 [ 581.698399][T12205] ? lockdep_init_map_type+0x5c/0x280 [ 581.698451][T12205] __lookup_slow+0x24e/0x460 [ 581.698495][T12205] ? __pfx___lookup_slow+0x10/0x10 [ 581.698563][T12205] ? lookup_fast+0x156/0x610 [ 581.698608][T12205] ? _raw_spin_unlock+0x28/0x50 [ 581.698651][T12205] walk_component+0x353/0x5b0 [ 581.698702][T12205] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 581.698768][T12205] path_openat+0x227/0x2d40 [ 581.698797][T12205] ? __x64_sys_openat+0x174/0x210 [ 581.698856][T12205] ? __pfx_path_openat+0x10/0x10 [ 581.698900][T12205] do_filp_open+0x20b/0x470 [ 581.698933][T12205] ? __pfx_do_filp_open+0x10/0x10 [ 581.698994][T12205] ? alloc_fd+0x471/0x7d0 [ 581.699033][T12205] do_sys_openat2+0x11b/0x1d0 [ 581.699077][T12205] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.699118][T12205] ? __sock_release+0x20b/0x270 [ 581.699182][T12205] __x64_sys_openat+0x174/0x210 [ 581.699228][T12205] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.699273][T12205] ? rcu_is_watching+0x12/0xc0 [ 581.699317][T12205] do_syscall_64+0xcd/0x230 [ 581.699364][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.699395][T12205] RIP: 0033:0x7f411cf8e969 [ 581.699419][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.699448][T12205] RSP: 002b:00007f411de28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.699476][T12205] RAX: ffffffffffffffda RBX: 00007f411d1b5fa0 RCX: 00007f411cf8e969 [ 581.699497][T12205] RDX: 00000000001a3000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 581.699516][T12205] RBP: 00007f411d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 581.699534][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.699552][T12205] R13: 0000000000000000 R14: 00007f411d1b5fa0 R15: 00007ffe4a1b3208 [ 581.699591][T12205] [ 582.342527][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.353277][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.363633][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.384238][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.400831][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.267208][ C1] net_ratelimit: 33922 callbacks suppressed [ 583.267229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.285415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.297707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.309885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.322153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.334343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.346574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.358720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.370941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.383100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.893076][T12208] chnl_net:caif_netlink_parms(): no params data found [ 584.447589][ T5853] Bluetooth: hci2: command tx timeout [ 585.315911][T12245] serio: Serial port pty64 [ 586.527724][ T5853] Bluetooth: hci2: command tx timeout [ 586.968331][T12137] ------------[ cut here ]------------ [ 586.973899][T12137] ODEBUG: free active (active state 0) object: ffff88807a221248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 587.048702][T12137] WARNING: CPU: 0 PID: 12137 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 587.058420][T12137] Modules linked in: [ 587.062353][T12137] CPU: 0 UID: 0 PID: 12137 Comm: syz.0.1496 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 587.074684][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.084882][T12137] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 587.091325][T12137] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 60 f4 8b 4c 89 e6 48 c7 c7 e0 54 f4 8b e8 3f b0 a8 fc 90 <0f> 0b 90 90 58 83 05 f6 ba b4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 587.112579][T12137] RSP: 0018:ffffc90003e27768 EFLAGS: 00010286 [ 587.118725][T12137] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 587.126733][T12137] RDX: ffff888020fd8000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 587.134966][T12137] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 587.143986][T12137] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf45b80 [ 587.152632][T12137] R13: ffffffff8b8fc540 R14: ffffffff8a7710b0 R15: ffffc90003e27868 [ 587.160683][T12137] FS: 0000000000000000(0000) GS:ffff8881249bf000(0000) knlGS:0000000000000000 [ 587.170300][T12137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.176944][T12137] CR2: 00005555666cf5c8 CR3: 000000004e3ec000 CR4: 00000000003526f0 [ 587.185014][T12137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 587.193369][T12137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 587.201669][T12137] Call Trace: [ 587.204979][T12137] [ 587.208027][T12137] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 587.213551][T12137] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 587.219491][T12137] debug_check_no_obj_freed+0x4b7/0x600 [ 587.225110][T12137] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 587.231297][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.236117][T12137] ? kmem_cache_free+0x2d4/0x4d0 [ 587.241165][T12137] kfree+0x291/0x4d0 [ 587.246066][T12137] ? hci_release_dev+0x4d8/0x600 [ 587.253530][T12137] hci_release_dev+0x4d8/0x600 [ 587.258548][T12137] ? __pfx_hci_release_dev+0x10/0x10 [ 587.263881][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.268751][T12137] ? kfree+0x252/0x4d0 [ 587.272869][T12137] bt_host_release+0x6a/0xb0 [ 587.277583][T12137] ? __pfx_bt_host_release+0x10/0x10 [ 587.282923][T12137] device_release+0xa1/0x240 [ 587.287623][T12137] kobject_put+0x1e4/0x5a0 [ 587.292193][T12137] ? __pfx_vhci_release+0x10/0x10 [ 587.297599][T12137] put_device+0x1f/0x30 [ 587.301811][T12137] vhci_release+0x81/0xf0 [ 587.306183][T12137] __fput+0x3ff/0xb70 [ 587.310503][T12137] task_work_run+0x14d/0x240 [ 587.315140][T12137] ? __pfx_task_work_run+0x10/0x10 [ 587.320404][T12137] do_exit+0xafb/0x2c30 [ 587.324618][T12137] ? __pfx___might_resched+0x10/0x10 [ 587.330023][T12137] ? __pfx_do_exit+0x10/0x10 [ 587.334678][T12137] ? do_raw_spin_lock+0x12c/0x2b0 [ 587.339780][T12137] ? find_held_lock+0x2b/0x80 [ 587.344510][T12137] do_group_exit+0xd3/0x2a0 [ 587.350045][T12137] get_signal+0x2673/0x26d0 [ 587.354606][T12137] ? __mmput+0x36c/0x410 [ 587.359525][T12137] ? mmput+0x62/0x70 [ 587.363472][T12137] ? __pfx_get_signal+0x10/0x10 [ 587.368432][T12137] ? __pfx_do_futex+0x10/0x10 [ 587.373158][T12137] arch_do_signal_or_restart+0x8f/0x7a0 [ 587.378838][T12137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 587.385066][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.389956][T12137] syscall_exit_to_user_mode+0x150/0x2a0 [ 587.395661][T12137] do_syscall_64+0xda/0x230 [ 587.400596][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.406547][T12137] RIP: 0033:0x7fede8b8e969 [ 587.411699][T12137] Code: Unable to access opcode bytes at 0x7fede8b8e93f. [ 587.418821][T12137] RSP: 002b:00007fede99ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 587.427430][T12137] RAX: fffffffffffffff2 RBX: 00007fede8db6160 RCX: 00007fede8b8e969 [ 587.435447][T12137] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 587.443486][T12137] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 8000400000000000 [ 587.452440][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.461172][T12137] R13: 0000000000000000 R14: 00007fede8db6160 R15: 00007ffd9f283528 [ 587.469262][T12137] [ 587.472316][T12137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 587.479623][T12137] CPU: 0 UID: 0 PID: 12137 Comm: syz.0.1496 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 587.491934][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.502023][T12137] Call Trace: [ 587.505333][T12137] [ 587.508295][T12137] dump_stack_lvl+0x3d/0x1f0 [ 587.512950][T12137] panic+0x71c/0x800 [ 587.516910][T12137] ? __pfx_panic+0x10/0x10 [ 587.521385][T12137] ? show_trace_log_lvl+0x29b/0x3e0 [ 587.526655][T12137] ? check_panic_on_warn+0x1f/0xb0 [ 587.531831][T12137] ? debug_print_object+0x1a2/0x2b0 [ 587.537083][T12137] check_panic_on_warn+0xab/0xb0 [ 587.542079][T12137] __warn+0xf6/0x3c0 [ 587.546018][T12137] ? debug_print_object+0x1a2/0x2b0 [ 587.551276][T12137] report_bug+0x3c3/0x580 [ 587.555662][T12137] ? debug_print_object+0x1a2/0x2b0 [ 587.560913][T12137] handle_bug+0x184/0x210 [ 587.565281][T12137] exc_invalid_op+0x17/0x50 [ 587.569826][T12137] asm_exc_invalid_op+0x1a/0x20 [ 587.574716][T12137] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 587.580577][T12137] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 60 f4 8b 4c 89 e6 48 c7 c7 e0 54 f4 8b e8 3f b0 a8 fc 90 <0f> 0b 90 90 58 83 05 f6 ba b4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 587.600245][T12137] RSP: 0018:ffffc90003e27768 EFLAGS: 00010286 [ 587.606377][T12137] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 587.614382][T12137] RDX: ffff888020fd8000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 587.622393][T12137] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 587.630391][T12137] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf45b80 [ 587.638388][T12137] R13: ffffffff8b8fc540 R14: ffffffff8a7710b0 R15: ffffc90003e27868 [ 587.646396][T12137] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 587.651921][T12137] ? __warn_printk+0x198/0x350 [ 587.656733][T12137] ? __warn_printk+0x1a5/0x350 [ 587.661570][T12137] ? debug_print_object+0x1a1/0x2b0 [ 587.666832][T12137] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 587.672352][T12137] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 587.678212][T12137] debug_check_no_obj_freed+0x4b7/0x600 [ 587.683826][T12137] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 587.689944][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.694749][T12137] ? kmem_cache_free+0x2d4/0x4d0 [ 587.699755][T12137] kfree+0x291/0x4d0 [ 587.703682][T12137] ? hci_release_dev+0x4d8/0x600 [ 587.708664][T12137] hci_release_dev+0x4d8/0x600 [ 587.713464][T12137] ? __pfx_hci_release_dev+0x10/0x10 [ 587.718785][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.723618][T12137] ? kfree+0x252/0x4d0 [ 587.727729][T12137] bt_host_release+0x6a/0xb0 [ 587.732365][T12137] ? __pfx_bt_host_release+0x10/0x10 [ 587.737691][T12137] device_release+0xa1/0x240 [ 587.742324][T12137] kobject_put+0x1e4/0x5a0 [ 587.746797][T12137] ? __pfx_vhci_release+0x10/0x10 [ 587.751859][T12137] put_device+0x1f/0x30 [ 587.756072][T12137] vhci_release+0x81/0xf0 [ 587.760461][T12137] __fput+0x3ff/0xb70 [ 587.764501][T12137] task_work_run+0x14d/0x240 [ 587.769136][T12137] ? __pfx_task_work_run+0x10/0x10 [ 587.774294][T12137] do_exit+0xafb/0x2c30 [ 587.778501][T12137] ? __pfx___might_resched+0x10/0x10 [ 587.783831][T12137] ? __pfx_do_exit+0x10/0x10 [ 587.788505][T12137] ? do_raw_spin_lock+0x12c/0x2b0 [ 587.793564][T12137] ? find_held_lock+0x2b/0x80 [ 587.798291][T12137] do_group_exit+0xd3/0x2a0 [ 587.802852][T12137] get_signal+0x2673/0x26d0 [ 587.807408][T12137] ? __mmput+0x36c/0x410 [ 587.811711][T12137] ? mmput+0x62/0x70 [ 587.815647][T12137] ? __pfx_get_signal+0x10/0x10 [ 587.820555][T12137] ? __pfx_do_futex+0x10/0x10 [ 587.825289][T12137] arch_do_signal_or_restart+0x8f/0x7a0 [ 587.830891][T12137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 587.837116][T12137] ? rcu_is_watching+0x12/0xc0 [ 587.841929][T12137] syscall_exit_to_user_mode+0x150/0x2a0 [ 587.847629][T12137] do_syscall_64+0xda/0x230 [ 587.852192][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.858129][T12137] RIP: 0033:0x7fede8b8e969 [ 587.862578][T12137] Code: Unable to access opcode bytes at 0x7fede8b8e93f. [ 587.869631][T12137] RSP: 002b:00007fede99ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 587.878087][T12137] RAX: fffffffffffffff2 RBX: 00007fede8db6160 RCX: 00007fede8b8e969 [ 587.886096][T12137] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 587.894103][T12137] RBP: 00007fede8c10ab1 R08: 0000000000000000 R09: 8000400000000000 [ 587.902115][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.910111][T12137] R13: 0000000000000000 R14: 00007fede8db6160 R15: 00007ffd9f283528 [ 587.918124][T12137] [ 587.921492][T12137] Kernel Offset: disabled [ 587.925849][T12137] Rebooting in 86400 seconds..